./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product29_true-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 0cd3be1d Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product29_true-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 90a1fcd73eb3b3596ff52c3c2b22ae153310fe60 ............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-0cd3be1 [2018-11-28 11:02:17,215 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-28 11:02:17,216 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-28 11:02:17,222 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-28 11:02:17,223 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-28 11:02:17,223 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-28 11:02:17,224 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-28 11:02:17,225 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-28 11:02:17,226 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-28 11:02:17,227 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-28 11:02:17,228 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-28 11:02:17,228 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-28 11:02:17,228 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-28 11:02:17,229 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-28 11:02:17,230 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-28 11:02:17,230 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-28 11:02:17,230 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-28 11:02:17,232 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-28 11:02:17,233 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-28 11:02:17,234 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-28 11:02:17,235 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-28 11:02:17,235 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-28 11:02:17,237 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-28 11:02:17,237 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-28 11:02:17,237 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-28 11:02:17,238 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-28 11:02:17,238 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-28 11:02:17,239 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-28 11:02:17,239 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-28 11:02:17,240 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-28 11:02:17,240 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-28 11:02:17,241 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-28 11:02:17,241 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-28 11:02:17,241 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-28 11:02:17,242 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-28 11:02:17,242 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-28 11:02:17,242 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-11-28 11:02:17,250 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-28 11:02:17,250 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-28 11:02:17,251 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-28 11:02:17,251 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-28 11:02:17,251 INFO L133 SettingsManager]: * Use SBE=true [2018-11-28 11:02:17,251 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-11-28 11:02:17,252 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-11-28 11:02:17,252 INFO L133 SettingsManager]: * Use old map elimination=false [2018-11-28 11:02:17,252 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-11-28 11:02:17,252 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-11-28 11:02:17,252 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-11-28 11:02:17,252 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-28 11:02:17,253 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-28 11:02:17,253 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-11-28 11:02:17,253 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-28 11:02:17,253 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-28 11:02:17,253 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-28 11:02:17,253 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-11-28 11:02:17,253 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-11-28 11:02:17,253 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-11-28 11:02:17,254 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-28 11:02:17,254 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-28 11:02:17,254 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-11-28 11:02:17,254 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-28 11:02:17,254 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-11-28 11:02:17,254 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-28 11:02:17,254 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-28 11:02:17,254 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-11-28 11:02:17,255 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-28 11:02:17,255 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-28 11:02:17,255 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-11-28 11:02:17,255 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-11-28 11:02:17,255 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 90a1fcd73eb3b3596ff52c3c2b22ae153310fe60 [2018-11-28 11:02:17,273 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-28 11:02:17,282 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-28 11:02:17,285 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-28 11:02:17,286 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-28 11:02:17,287 INFO L276 PluginConnector]: CDTParser initialized [2018-11-28 11:02:17,287 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec3_product29_true-unreach-call_true-termination.cil.c [2018-11-28 11:02:17,332 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/data/ea45ddfcf/cf084b60d1da45ee9ea13bcaebe55862/FLAG9faa64b37 [2018-11-28 11:02:17,802 INFO L307 CDTParser]: Found 1 translation units. [2018-11-28 11:02:17,802 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/sv-benchmarks/c/product-lines/elevator_spec3_product29_true-unreach-call_true-termination.cil.c [2018-11-28 11:02:17,814 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/data/ea45ddfcf/cf084b60d1da45ee9ea13bcaebe55862/FLAG9faa64b37 [2018-11-28 11:02:18,305 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/data/ea45ddfcf/cf084b60d1da45ee9ea13bcaebe55862 [2018-11-28 11:02:18,307 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-28 11:02:18,308 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-28 11:02:18,309 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-28 11:02:18,309 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-28 11:02:18,312 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-28 11:02:18,313 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 11:02:18" (1/1) ... [2018-11-28 11:02:18,315 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7611bdbf and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:02:18, skipping insertion in model container [2018-11-28 11:02:18,315 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 11:02:18" (1/1) ... [2018-11-28 11:02:18,321 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-28 11:02:18,367 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-28 11:02:18,743 INFO L203 PostProcessor]: Analyzing one entry point: main [2018-11-28 11:02:18,755 INFO L191 MainTranslator]: Completed pre-run [2018-11-28 11:02:18,840 INFO L203 PostProcessor]: Analyzing one entry point: main [2018-11-28 11:02:18,883 INFO L195 MainTranslator]: Completed translation [2018-11-28 11:02:18,883 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:02:18 WrapperNode [2018-11-28 11:02:18,883 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-28 11:02:18,884 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-28 11:02:18,884 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-28 11:02:18,884 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-28 11:02:18,892 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:02:18" (1/1) ... [2018-11-28 11:02:18,913 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:02:18" (1/1) ... [2018-11-28 11:02:19,154 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-28 11:02:19,154 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-28 11:02:19,154 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-28 11:02:19,154 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-28 11:02:19,162 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:02:18" (1/1) ... [2018-11-28 11:02:19,162 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:02:18" (1/1) ... [2018-11-28 11:02:19,198 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:02:18" (1/1) ... [2018-11-28 11:02:19,198 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:02:18" (1/1) ... [2018-11-28 11:02:19,288 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:02:18" (1/1) ... [2018-11-28 11:02:19,375 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:02:18" (1/1) ... [2018-11-28 11:02:19,407 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:02:18" (1/1) ... [2018-11-28 11:02:19,465 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-28 11:02:19,466 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-28 11:02:19,466 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-28 11:02:19,466 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-28 11:02:19,466 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:02:18" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:02:19,517 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-28 11:02:19,517 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-28 11:02:19,518 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-28 11:02:19,518 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-28 11:02:27,168 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-28 11:02:27,168 INFO L280 CfgBuilder]: Removed 2017 assue(true) statements. [2018-11-28 11:02:27,169 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 11:02:27 BoogieIcfgContainer [2018-11-28 11:02:27,169 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-28 11:02:27,169 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-11-28 11:02:27,169 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-11-28 11:02:27,172 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-11-28 11:02:27,172 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-28 11:02:27,172 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 28.11 11:02:18" (1/3) ... [2018-11-28 11:02:27,173 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@3f78c1dd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 28.11 11:02:27, skipping insertion in model container [2018-11-28 11:02:27,174 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-28 11:02:27,174 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:02:18" (2/3) ... [2018-11-28 11:02:27,174 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@3f78c1dd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 28.11 11:02:27, skipping insertion in model container [2018-11-28 11:02:27,174 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-28 11:02:27,174 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 11:02:27" (3/3) ... [2018-11-28 11:02:27,175 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product29_true-unreach-call_true-termination.cil.c [2018-11-28 11:02:27,214 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-28 11:02:27,214 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-11-28 11:02:27,214 INFO L375 BuchiCegarLoop]: Hoare is false [2018-11-28 11:02:27,215 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-11-28 11:02:27,215 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-28 11:02:27,215 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-28 11:02:27,215 INFO L379 BuchiCegarLoop]: Difference is false [2018-11-28 11:02:27,215 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-28 11:02:27,215 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-11-28 11:02:27,318 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8968 states. [2018-11-28 11:02:27,443 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1811 [2018-11-28 11:02:27,444 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:02:27,444 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:02:27,463 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:02:27,463 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:02:27,463 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-11-28 11:02:27,463 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8968 states. [2018-11-28 11:02:27,553 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1811 [2018-11-28 11:02:27,553 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:02:27,553 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:02:27,559 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:02:27,559 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:02:27,567 INFO L794 eck$LassoCheckResult]: Stem: 2535#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string19.base, #t~string19.offset := #Ultimate.alloc(30);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(9);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(21);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(30);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(9);call #t~string24.base, #t~string24.offset := #Ultimate.alloc(21);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(30);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(9);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(25);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(30);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(9);call #t~string33.base, #t~string33.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(10);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1); 8373#L-1true havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 7644#L732true havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 7986#L740true main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 2405#L1874true assume 0 != main_~tmp~15; 3186#L1851true ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2855#L121true havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 7698#L1256true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 1179#L1281true bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1367#L399true assume 0 == initPersonOnFloor_~floor; 1194#L400true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4382#L507-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 8670#L191true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 7650#L203-2true havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7633#L2140true __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 843#L2192true __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 7248#L1376true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 6785#L1377true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1381#L2157true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 342#L2178true __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 6656#L1381true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 1090#L1482true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 8360#L2821true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7632#L2140-1true stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1484#L2157-10true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 311#L2178-10true stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 8740#L2832true timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 4628#L2969true assume !(0 != timeShift_~tmp___9~3); 440#L3060true assume !(1 == ~doorState~0); 442#L3060-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 550#L2724true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 3651#L2745true stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2023#L2697true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1895#L2344-2true assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1365#L2513-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 7677#L2666-2true stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1091#L2715true timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1076#L3068true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2905#L2759true assume !(1 == ~currentHeading~0); 2681#L2769true assume !(0 == ~currentFloorID~0); 2683#L2769-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5869#L2775-5true havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 3772#L1507true assume !(-1 == ~expectedDirection~0); 2574#L1519true assume !(1 == ~expectedDirection~0); 2381#L1520true havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7634#L2140-2true __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 829#L2192-3true __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 7252#L1376-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 6788#L1377-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1490#L2157-12true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 312#L2178-12true __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 6631#L1381-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 1078#L1482-1true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 8355#L2821-1true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7623#L2140-3true stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1463#L2157-22true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 274#L2178-22true stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 8739#L2832-1true timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 4634#L2969-1true assume !(0 != timeShift_~tmp___9~3); 449#L3060-3true assume !(1 == ~doorState~0); 451#L3060-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 554#L2724-2true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 3653#L2745-2true stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2025#L2697-2true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1885#L2344-8true assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1343#L2513-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 7665#L2666-8true stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1085#L2715-2true timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1075#L3068-1true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2894#L2759-3true assume !(1 == ~currentHeading~0); 2658#L2769-9true assume !(0 == ~currentFloorID~0); 2659#L2769-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5860#L2775-11true havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 3776#L1507-1true assume !(-1 == ~expectedDirection~0); 2554#L1519-1true assume !(1 == ~expectedDirection~0); 2382#L1520-1true havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7626#L2140-4true __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 835#L2192-6true __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 7215#L1376-2true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 6792#L1377-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1471#L2157-24true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 277#L2178-24true __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 6637#L1381-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 1081#L1482-2true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 8354#L2821-2true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7625#L2140-5true stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1434#L2157-34true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 248#L2178-34true stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 8736#L2832-2true timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 4631#L2969-2true assume !(0 != timeShift_~tmp___9~3); 424#L3060-6true assume 1 == ~doorState~0;~doorState~0 := 0; 434#L3060-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 568#L2724-4true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 3662#L2745-4true stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2036#L2697-4true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 2067#L2344-14true assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1330#L2513-14true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 7738#L2666-14true stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1086#L2715-4true timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1077#L3068-2true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2897#L2759-6true assume !(1 == ~currentHeading~0); 2653#L2769-18true assume !(0 == ~currentFloorID~0); 6305#L2769-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5846#L2775-17true havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 3778#L1507-2true assume !(-1 == ~expectedDirection~0); 2556#L1519-2true assume !(1 == ~expectedDirection~0); 2354#L1520-2true havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 7700#L1256-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 1183#L1281-1true bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1355#L399-1true assume 0 == initPersonOnFloor_~floor; 1175#L400-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4366#L507-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 8669#L191-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 7647#L203-5true havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7627#L2140-6true __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 814#L2192-9true __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 7218#L1376-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 6755#L1377-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1414#L2157-36true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 439#L2178-36true __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 6642#L1381-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 1083#L1482-3true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 8356#L2821-3true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7629#L2140-7true stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1409#L2157-46true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 409#L2178-46true stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 8737#L2832-3true timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 4636#L2969-3true assume !(0 != timeShift_~tmp___9~3); 432#L3060-9true assume !(1 == ~doorState~0); 410#L3060-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 776#L2724-6true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 3635#L2745-6true stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2005#L2697-6true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 2024#L2344-20true assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1215#L2513-20true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 7730#L2666-20true stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1089#L2715-6true timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1073#L3068-3true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2881#L2759-9true assume !(1 == ~currentHeading~0); 6299#L2769-27true assume !(0 == ~currentFloorID~0); 6287#L2769-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5838#L2775-23true havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 3783#L1507-3true assume !(-1 == ~expectedDirection~0); 2560#L1519-3true assume !(1 == ~expectedDirection~0); 2355#L1520-3true cleanup_~i~2 := 0; 3798#L1683-2true [2018-11-28 11:02:27,571 INFO L796 eck$LassoCheckResult]: Loop: 3798#L1683-2true assume !false; 3909#L1684true cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 3744#L1687true assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 8047#L1967true cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 2597#L1691true assume 1 != cleanup_~tmp___0~4; 2598#L1691-1true havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 5569#L128-244true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 5229#L155-244true anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 5978#L2248true assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 7829#L2312true isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 7969#L2325true cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 3016#L1703true assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7620#L2140-8true __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 802#L2192-12true __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 7226#L1376-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 6759#L1377-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1319#L2157-48true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 412#L2178-48true __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 6619#L1381-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 1084#L1482-4true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 8358#L2821-4true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7619#L2140-9true stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1292#L2157-58true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 386#L2178-58true stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 8738#L2832-4true timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 4641#L2969-4true assume !(0 != timeShift_~tmp___9~3); 414#L3060-12true assume !(1 == ~doorState~0); 415#L3060-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 784#L2724-8true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 3644#L2745-8true stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2015#L2697-8true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 2006#L2344-26true assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1201#L2513-26true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 7722#L2666-26true stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1079#L2715-8true timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1074#L3068-4true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2886#L2759-12true assume !(1 == ~currentHeading~0); 6274#L2769-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6276#L2769-38true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5825#L2775-29true havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 3786#L1507-4true assume !(-1 == ~expectedDirection~0); 2562#L1519-4true assume !(1 == ~expectedDirection~0); 2361#L1520-4true cleanup_~i~2 := 1 + cleanup_~i~2; 3798#L1683-2true [2018-11-28 11:02:27,589 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:02:27,589 INFO L82 PathProgramCache]: Analyzing trace with hash -507615414, now seen corresponding path program 1 times [2018-11-28 11:02:27,591 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:02:27,592 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:02:27,634 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:27,635 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:02:27,635 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:27,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:02:27,942 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:02:27,945 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:02:27,945 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:02:27,949 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:02:27,950 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:02:27,951 INFO L82 PathProgramCache]: Analyzing trace with hash -277546529, now seen corresponding path program 1 times [2018-11-28 11:02:27,951 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:02:27,951 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:02:27,952 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:27,952 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:02:27,952 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:27,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:02:28,075 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:02:28,076 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:02:28,076 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-28 11:02:28,077 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:02:28,087 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-28 11:02:28,087 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-28 11:02:28,089 INFO L87 Difference]: Start difference. First operand 8968 states. Second operand 7 states. [2018-11-28 11:02:33,602 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:02:33,602 INFO L93 Difference]: Finished difference Result 28508 states and 53449 transitions. [2018-11-28 11:02:33,603 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-11-28 11:02:33,604 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28508 states and 53449 transitions. [2018-11-28 11:02:33,714 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6420 [2018-11-28 11:02:33,814 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28508 states to 28404 states and 53328 transitions. [2018-11-28 11:02:33,815 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28404 [2018-11-28 11:02:33,835 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28404 [2018-11-28 11:02:33,836 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28404 states and 53328 transitions. [2018-11-28 11:02:33,868 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:02:33,868 INFO L705 BuchiCegarLoop]: Abstraction has 28404 states and 53328 transitions. [2018-11-28 11:02:33,901 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28404 states and 53328 transitions. [2018-11-28 11:02:34,107 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28404 to 14216. [2018-11-28 11:02:34,108 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 14216 states. [2018-11-28 11:02:34,128 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14216 states to 14216 states and 26714 transitions. [2018-11-28 11:02:34,129 INFO L728 BuchiCegarLoop]: Abstraction has 14216 states and 26714 transitions. [2018-11-28 11:02:34,129 INFO L608 BuchiCegarLoop]: Abstraction has 14216 states and 26714 transitions. [2018-11-28 11:02:34,129 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-11-28 11:02:34,129 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14216 states and 26714 transitions. [2018-11-28 11:02:34,166 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3147 [2018-11-28 11:02:34,166 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:02:34,166 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:02:34,170 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:02:34,170 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:02:34,171 INFO L794 eck$LassoCheckResult]: Stem: 41040#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string19.base, #t~string19.offset := #Ultimate.alloc(30);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(9);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(21);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(30);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(9);call #t~string24.base, #t~string24.offset := #Ultimate.alloc(21);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(30);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(9);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(25);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(30);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(9);call #t~string33.base, #t~string33.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(10);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1); 41041#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 46127#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 46128#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 40856#L1874 assume 0 != main_~tmp~15; 40857#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 41512#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 41513#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 39425#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 39426#L399 assume 0 == initPersonOnFloor_~floor; 39462#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 38475#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 43030#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 46137#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 46108#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 38994#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 38995#L1376 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 45673#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 39810#L2157 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 38218#L2178 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 38219#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 37726#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 39300#L2821 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 45280#L128 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 42960#L155 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 42961#L2792 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 43117#L2804 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 38144#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 43405#L2969 assume !(0 != timeShift_~tmp___9~3); 38370#L3060 assume !(1 == ~doorState~0); 38371#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 38373#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 38494#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 40470#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 40359#L2344-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 40360#L702-2 stopRequestedInDirection__wrappee__empty_#t~ret79 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~21 := stopRequestedInDirection__wrappee__empty_#t~ret79;havoc stopRequestedInDirection__wrappee__empty_#t~ret79; 40302#L2348-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~21;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 37843#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 39301#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 39279#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 39281#L2759 assume !(1 == ~currentHeading~0); 41244#L2769 assume !(0 == ~currentFloorID~0); 41245#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 41203#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 42363#L1507 assume !(-1 == ~expectedDirection~0); 41075#L1519 assume !(1 == ~expectedDirection~0); 40696#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 40820#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 38975#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 38976#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 45982#L1438-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 46354#L1448-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 39547#L1459-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 39549#L1470-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 37734#L1481-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 37736#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 39285#L2821-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 46092#L2140-3 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 46093#L2157-22 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 39458#L2178-22 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 50603#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 50601#L2969-1 assume !(0 != timeShift_~tmp___9~3); 50600#L3060-3 assume !(1 == ~doorState~0); 50599#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 50598#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 50593#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 50591#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 50592#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 50542#L2513-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 50540#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 50538#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 50537#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 41550#L2759-3 assume !(1 == ~currentHeading~0); 41551#L2769-9 assume !(0 == ~currentFloorID~0); 41205#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 41181#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 42365#L1507-1 assume !(-1 == ~expectedDirection~0); 41056#L1519-1 assume !(1 == ~expectedDirection~0); 40697#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 49662#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 49661#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 49660#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 46433#L1438-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 46356#L1448-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 39552#L1459-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 39553#L1470-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 37737#L1481-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 37739#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 39289#L2821-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 46096#L2140-5 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 46097#L2157-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 37999#L2178-34 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 38000#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 43409#L2969-2 assume !(0 != timeShift_~tmp___9~3); 43410#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 50288#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 38539#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 38540#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 40485#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 40486#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 40522#L2513-14 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 40045#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 46208#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 39282#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 39284#L2759-6 assume !(1 == ~currentHeading~0); 41555#L2769-18 assume !(0 == ~currentFloorID~0); 41197#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 44997#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 42366#L1507-2 assume !(-1 == ~expectedDirection~0); 41058#L1519-2 assume !(1 == ~expectedDirection~0); 40698#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 40785#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 39436#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 39437#L399-1 assume 0 == initPersonOnFloor_~floor; 39415#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 38462#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 43007#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 46133#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 46098#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 38955#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 38956#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 45951#L1438-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 46357#L1448-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 39561#L1459-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 39563#L1470-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 37743#L1481-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 37745#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 39291#L2821-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 46101#L2140-7 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 46102#L2157-46 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 38322#L2178-46 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 38323#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 43416#L2969-3 assume !(0 != timeShift_~tmp___9~3); 43417#L3060-9 assume !(1 == ~doorState~0); 50007#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 50004#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 50001#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 49999#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 50000#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 49928#L2513-20 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 49909#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 49907#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 49906#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 41531#L2759-9 assume !(1 == ~currentHeading~0); 41532#L2769-27 assume !(0 == ~currentFloorID~0); 41499#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 44991#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 42368#L1507-3 assume !(-1 == ~expectedDirection~0); 41062#L1519-3 assume !(1 == ~expectedDirection~0); 40686#L1520-3 cleanup_~i~2 := 0; 40786#L1683-2 [2018-11-28 11:02:34,176 INFO L796 eck$LassoCheckResult]: Loop: 40786#L1683-2 assume !false; 42376#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 42338#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 42339#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 41112#L1691 assume 1 != cleanup_~tmp___0~4; 41113#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 41114#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 43296#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 44306#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 42691#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 46286#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 41662#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 41663#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 38940#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 38941#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 45957#L1438-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 46349#L1448-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 39566#L1459-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 39567#L1470-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 37746#L1481-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 37748#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 39292#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 46086#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 46087#L2157-58 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 39639#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 48758#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 48734#L2969-4 assume !(0 != timeShift_~tmp___9~3); 38331#L3060-12 assume !(1 == ~doorState~0); 38332#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 38333#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 38920#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 40462#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 40449#L2344-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 40450#L2513-26 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 40024#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 39286#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 39287#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 49704#L2759-12 assume !(1 == ~currentHeading~0); 49703#L2769-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 41375#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 44981#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 42370#L1507-4 assume !(-1 == ~expectedDirection~0); 41064#L1519-4 assume !(1 == ~expectedDirection~0); 40691#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 40786#L1683-2 [2018-11-28 11:02:34,181 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:02:34,181 INFO L82 PathProgramCache]: Analyzing trace with hash -1610536740, now seen corresponding path program 1 times [2018-11-28 11:02:34,182 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:02:34,182 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:02:34,182 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:34,183 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:02:34,183 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:34,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:02:34,278 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:02:34,279 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:02:34,279 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:02:34,279 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:02:34,279 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:02:34,280 INFO L82 PathProgramCache]: Analyzing trace with hash -1255217722, now seen corresponding path program 1 times [2018-11-28 11:02:34,280 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:02:34,280 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:02:34,281 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:34,281 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:02:34,281 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:34,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:02:34,322 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:02:34,322 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:02:34,322 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 11:02:34,322 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:02:34,323 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 11:02:34,323 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 11:02:34,323 INFO L87 Difference]: Start difference. First operand 14216 states and 26714 transitions. cyclomatic complexity: 12499 Second operand 5 states. [2018-11-28 11:02:35,336 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:02:35,336 INFO L93 Difference]: Finished difference Result 22611 states and 42314 transitions. [2018-11-28 11:02:35,336 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-28 11:02:35,337 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 22611 states and 42314 transitions. [2018-11-28 11:02:35,396 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5333 [2018-11-28 11:02:35,463 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 22611 states to 22611 states and 42314 transitions. [2018-11-28 11:02:35,463 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 22611 [2018-11-28 11:02:35,477 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 22611 [2018-11-28 11:02:35,477 INFO L73 IsDeterministic]: Start isDeterministic. Operand 22611 states and 42314 transitions. [2018-11-28 11:02:35,497 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:02:35,498 INFO L705 BuchiCegarLoop]: Abstraction has 22611 states and 42314 transitions. [2018-11-28 11:02:35,517 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22611 states and 42314 transitions. [2018-11-28 11:02:35,698 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22611 to 14261. [2018-11-28 11:02:35,698 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 14261 states. [2018-11-28 11:02:35,720 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14261 states to 14261 states and 26759 transitions. [2018-11-28 11:02:35,720 INFO L728 BuchiCegarLoop]: Abstraction has 14261 states and 26759 transitions. [2018-11-28 11:02:35,721 INFO L608 BuchiCegarLoop]: Abstraction has 14261 states and 26759 transitions. [2018-11-28 11:02:35,721 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-11-28 11:02:35,721 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14261 states and 26759 transitions. [2018-11-28 11:02:35,759 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3157 [2018-11-28 11:02:35,759 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:02:35,759 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:02:35,764 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:02:35,764 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:02:35,764 INFO L794 eck$LassoCheckResult]: Stem: 77835#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string19.base, #t~string19.offset := #Ultimate.alloc(30);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(9);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(21);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(30);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(9);call #t~string24.base, #t~string24.offset := #Ultimate.alloc(21);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(30);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(9);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(25);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(30);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(9);call #t~string33.base, #t~string33.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(10);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1); 77836#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 82884#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 82885#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 77650#L1874 assume 0 != main_~tmp~15; 77651#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 78301#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 78302#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 76246#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 76247#L399 assume 0 == initPersonOnFloor_~floor; 76280#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 75310#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 79807#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 82894#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 82865#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 75828#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 75829#L1376 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 82431#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 76616#L2157 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 75060#L2178 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 75061#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 74571#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 76129#L2821 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 82040#L128 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 79737#L155 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 79738#L2792 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 79891#L2804 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 74987#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 80179#L2969 assume !(0 != timeShift_~tmp___9~3); 75205#L3060 assume !(1 == ~doorState~0); 75206#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 75208#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 75329#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 77262#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 77150#L2344-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 76594#L2513-2 assume !(0 == ~currentFloorID~0); 76595#L2519-2 assume !(~currentFloorID~0 > 0); 74706#L2534-2 assume ~currentFloorID~0 > 0; 74525#L2536-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 74526#L2537-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 74688#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 82922#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 83697#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 78352#L2759 assume !(1 == ~currentHeading~0); 78039#L2769 assume !(0 == ~currentFloorID~0); 78040#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 77998#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 79152#L1507 assume !(-1 == ~expectedDirection~0); 77870#L1519 assume !(1 == ~expectedDirection~0); 77488#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 84430#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 84429#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 84427#L1376-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 84425#L1377-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 76705#L2157-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 74988#L2178-12 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 74989#L1381-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 74581#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 76116#L2821-1 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 81981#L128-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 79818#L155-61 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 79819#L2792-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 79853#L2804-1 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 74905#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 80188#L2969-1 assume !(0 != timeShift_~tmp___9~3); 75218#L3060-3 assume !(1 == ~doorState~0); 75219#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 75222#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 75339#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 77265#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 77134#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 76557#L2513-8 assume !(0 == ~currentFloorID~0); 76558#L2519-8 assume !(~currentFloorID~0 > 0); 74814#L2534-8 assume ~currentFloorID~0 > 0; 74507#L2536-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 74508#L2537-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 74675#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 85509#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 85506#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 78337#L2759-3 assume !(1 == ~currentHeading~0); 77999#L2769-9 assume !(0 == ~currentFloorID~0); 78000#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 77976#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 79154#L1507-1 assume !(-1 == ~expectedDirection~0); 77852#L1519-1 assume !(1 == ~expectedDirection~0); 77489#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 77615#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 75818#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 75819#L1376-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 82438#L1377-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 76691#L2157-24 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 74908#L2178-24 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 74909#L1381-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 75150#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 84593#L2821-2 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 84594#L128-122 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 84592#L155-122 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 84582#L2792-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 84581#L2804-2 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 84579#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 84578#L2969-2 assume !(0 != timeShift_~tmp___9~3); 84575#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 84574#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 84571#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 84562#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 77279#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 77280#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 76528#L2513-14 assume !(0 == ~currentFloorID~0); 76529#L2519-14 assume !(~currentFloorID~0 > 0); 74811#L2534-14 assume ~currentFloorID~0 > 0; 74477#L2536-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 74479#L2537-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 74556#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 85510#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 85507#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 78340#L2759-6 assume !(1 == ~currentHeading~0); 77993#L2769-18 assume !(0 == ~currentFloorID~0); 77994#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 82058#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 87759#L1507-2 assume !(-1 == ~expectedDirection~0); 87756#L1519-2 assume !(1 == ~expectedDirection~0); 87754#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 87753#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 87747#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 87746#L399-1 assume 0 == initPersonOnFloor_~floor; 87737#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 87714#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 87711#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 87708#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 87707#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 87706#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 86015#L1376-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 86010#L1377-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 76647#L2157-36 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 75203#L2178-36 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 75204#L1381-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 74590#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 76120#L2821-3 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 81915#L128-183 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 80263#L155-183 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 80300#L2792-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 79869#L2804-3 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 75158#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 80193#L2969-3 assume !(0 != timeShift_~tmp___9~3); 75194#L3060-9 assume !(1 == ~doorState~0); 75159#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 75160#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 75739#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 77238#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 77239#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 76326#L2513-20 assume !(0 == ~currentFloorID~0); 76327#L2519-20 assume !(~currentFloorID~0 > 0); 74805#L2534-20 assume ~currentFloorID~0 > 0; 74393#L2536-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 74395#L2537-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 74538#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 85505#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 85503#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 78318#L2759-9 assume !(1 == ~currentHeading~0); 78319#L2769-27 assume !(0 == ~currentFloorID~0); 78290#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 81756#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 79156#L1507-3 assume !(-1 == ~expectedDirection~0); 77858#L1519-3 assume !(1 == ~expectedDirection~0); 77478#L1520-3 cleanup_~i~2 := 0; 77578#L1683-2 [2018-11-28 11:02:35,776 INFO L796 eck$LassoCheckResult]: Loop: 77578#L1683-2 assume !false; 79164#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 79128#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 79129#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 77907#L1691 assume 1 != cleanup_~tmp___0~4; 77908#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 77909#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 80073#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 81074#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 79474#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 83060#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 83147#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 85975#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 85974#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 85952#L1376-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 85953#L1377-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 76518#L2157-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 75163#L2178-48 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 75164#L1381-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 74593#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 76121#L2821-4 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 81280#L128-249 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 80101#L155-249 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 80267#L2792-4 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 79865#L2804-4 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 75127#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 80200#L2969-4 assume !(0 != timeShift_~tmp___9~3); 75166#L3060-12 assume !(1 == ~doorState~0); 75167#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 75168#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 75751#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 77252#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 77236#L2344-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 76293#L2513-26 assume !(0 == ~currentFloorID~0); 76294#L2519-26 assume !(~currentFloorID~0 > 0); 74801#L2534-26 assume ~currentFloorID~0 > 0; 74357#L2536-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 74359#L2537-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 74517#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 85502#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 85501#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 78324#L2759-12 assume !(1 == ~currentHeading~0); 78325#L2769-36 assume !(0 == ~currentFloorID~0); 78172#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 81745#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 79158#L1507-4 assume !(-1 == ~expectedDirection~0); 77859#L1519-4 assume !(1 == ~expectedDirection~0); 77483#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 77578#L1683-2 [2018-11-28 11:02:35,781 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:02:35,781 INFO L82 PathProgramCache]: Analyzing trace with hash 831856157, now seen corresponding path program 1 times [2018-11-28 11:02:35,781 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:02:35,781 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:02:35,782 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:35,782 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:02:35,782 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:35,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:02:35,861 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:02:35,861 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:02:35,861 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:02:35,863 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:02:35,863 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:02:35,863 INFO L82 PathProgramCache]: Analyzing trace with hash 568087929, now seen corresponding path program 1 times [2018-11-28 11:02:35,863 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:02:35,864 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:02:35,864 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:35,864 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:02:35,864 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:35,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:02:35,911 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:02:35,911 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:02:35,911 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 11:02:35,911 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:02:35,912 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-28 11:02:35,912 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-28 11:02:35,912 INFO L87 Difference]: Start difference. First operand 14261 states and 26759 transitions. cyclomatic complexity: 12499 Second operand 6 states. [2018-11-28 11:02:41,442 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:02:41,442 INFO L93 Difference]: Finished difference Result 25848 states and 48113 transitions. [2018-11-28 11:02:41,451 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-28 11:02:41,451 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 25848 states and 48113 transitions. [2018-11-28 11:02:41,515 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5751 [2018-11-28 11:02:41,568 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 25848 states to 25848 states and 48113 transitions. [2018-11-28 11:02:41,568 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 25848 [2018-11-28 11:02:41,585 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 25848 [2018-11-28 11:02:41,586 INFO L73 IsDeterministic]: Start isDeterministic. Operand 25848 states and 48113 transitions. [2018-11-28 11:02:41,600 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:02:41,600 INFO L705 BuchiCegarLoop]: Abstraction has 25848 states and 48113 transitions. [2018-11-28 11:02:41,619 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25848 states and 48113 transitions. [2018-11-28 11:02:41,745 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25848 to 14261. [2018-11-28 11:02:41,746 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 14261 states. [2018-11-28 11:02:41,763 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14261 states to 14261 states and 26410 transitions. [2018-11-28 11:02:41,763 INFO L728 BuchiCegarLoop]: Abstraction has 14261 states and 26410 transitions. [2018-11-28 11:02:41,764 INFO L608 BuchiCegarLoop]: Abstraction has 14261 states and 26410 transitions. [2018-11-28 11:02:41,764 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-11-28 11:02:41,764 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14261 states and 26410 transitions. [2018-11-28 11:02:41,794 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3157 [2018-11-28 11:02:41,794 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:02:41,794 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:02:41,798 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:02:41,799 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:02:41,799 INFO L794 eck$LassoCheckResult]: Stem: 117977#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string19.base, #t~string19.offset := #Ultimate.alloc(30);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(9);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(21);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(30);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(9);call #t~string24.base, #t~string24.offset := #Ultimate.alloc(21);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(30);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(9);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(25);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(30);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(9);call #t~string33.base, #t~string33.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(10);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1); 117978#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 123274#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 123275#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 117806#L1874 assume 0 != main_~tmp~15; 117807#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 118450#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 118451#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 116393#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 116394#L399 assume 0 == initPersonOnFloor_~floor; 116427#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 115457#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 119977#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 123284#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 123255#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 115975#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 115976#L1376 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 122785#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 116763#L2157 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 115199#L2178 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 115200#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 114709#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 116276#L2821 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 123254#L2140-1 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 116847#L2157-10 assume !(0 == buttonForFloorIsPressed_~floorID); 116469#L2161-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 115124#L2178-10 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 115125#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 120368#L2969 assume !(0 != timeShift_~tmp___9~3); 115352#L3060 assume !(1 == ~doorState~0); 115353#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 115355#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 115476#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 117412#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 117301#L2344-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 116741#L2513-2 assume !(0 == ~currentFloorID~0); 116742#L2519-2 assume !(~currentFloorID~0 > 0); 114844#L2534-2 assume ~currentFloorID~0 > 0; 114660#L2536-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 114661#L2537-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 114826#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 124094#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 124093#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 118506#L2759 assume !(1 == ~currentHeading~0); 118181#L2769 assume !(0 == ~currentFloorID~0); 118182#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 118140#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 119300#L1507 assume !(-1 == ~expectedDirection~0); 118012#L1519 assume !(1 == ~expectedDirection~0); 117641#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 117771#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 115956#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 115957#L1376-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 122788#L1377-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 116852#L2157-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 115126#L2178-12 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 115127#L1381-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 115288#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 124651#L2821-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 124652#L2140-3 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 124666#L2157-22 assume !(0 == buttonForFloorIsPressed_~floorID); 124659#L2161-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 124637#L2178-22 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 124630#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 124627#L2969-1 assume !(0 != timeShift_~tmp___9~3); 124628#L3060-3 assume !(1 == ~doorState~0); 128291#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 128290#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 128146#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 128144#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 128145#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 116704#L2513-8 assume !(0 == ~currentFloorID~0); 116705#L2519-8 assume !(~currentFloorID~0 > 0); 114952#L2534-8 assume ~currentFloorID~0 > 0; 114645#L2536-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 114646#L2537-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 114813#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 128042#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 128039#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 118487#L2759-3 assume !(1 == ~currentHeading~0); 118141#L2769-9 assume !(0 == ~currentFloorID~0); 118142#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 118118#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 119302#L1507-1 assume !(-1 == ~expectedDirection~0); 117994#L1519-1 assume !(1 == ~expectedDirection~0); 117642#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 117772#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 115965#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 115966#L1376-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 122792#L1377-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 116838#L2157-24 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 115046#L2178-24 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 115047#L1381-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 115296#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 124095#L2821-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 124096#L2140-5 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 127160#L2157-34 assume !(0 == buttonForFloorIsPressed_~floorID); 127159#L2161-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 127142#L2178-34 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 127141#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 127134#L2969-2 assume !(0 != timeShift_~tmp___9~3); 115328#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 115329#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 128587#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 128583#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 117427#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 117429#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 116675#L2513-14 assume !(0 == ~currentFloorID~0); 116676#L2519-14 assume !(~currentFloorID~0 > 0); 114949#L2534-14 assume ~currentFloorID~0 > 0; 114615#L2536-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 114617#L2537-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 114694#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 128555#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 128718#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 128719#L2759-6 assume !(1 == ~currentHeading~0); 118133#L2769-18 assume !(0 == ~currentFloorID~0); 118134#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 122029#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 119303#L1507-2 assume !(-1 == ~expectedDirection~0); 117996#L1519-2 assume !(1 == ~expectedDirection~0); 117643#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 117737#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 116403#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 116404#L399-1 assume 0 == initPersonOnFloor_~floor; 116385#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 115444#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 119954#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 123280#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 123246#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 115936#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 115937#L1376-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 122755#L1377-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 116793#L2157-36 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 115350#L2178-36 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 115351#L1381-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 115265#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 126656#L2821-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 126657#L2140-7 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 127031#L2157-46 assume !(0 == buttonForFloorIsPressed_~floorID); 127030#L2161-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 126643#L2178-46 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 126641#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 126634#L2969-3 assume !(0 != timeShift_~tmp___9~3); 126635#L3060-9 assume !(1 == ~doorState~0); 127899#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 127896#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 127893#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 127892#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 117413#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 116473#L2513-20 assume !(0 == ~currentFloorID~0); 116474#L2519-20 assume !(~currentFloorID~0 > 0); 114943#L2534-20 assume ~currentFloorID~0 > 0; 114531#L2536-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 114533#L2537-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 114676#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 127904#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 127900#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 127901#L2759-9 assume !(1 == ~currentHeading~0); 122404#L2769-27 assume !(0 == ~currentFloorID~0); 118436#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 122023#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 119305#L1507-3 assume !(-1 == ~expectedDirection~0); 118000#L1519-3 assume !(1 == ~expectedDirection~0); 117631#L1520-3 cleanup_~i~2 := 0; 117738#L1683-2 [2018-11-28 11:02:41,805 INFO L796 eck$LassoCheckResult]: Loop: 117738#L1683-2 assume !false; 119313#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 119276#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 119277#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 118049#L1691 assume 1 != cleanup_~tmp___0~4; 118050#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 118051#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 120261#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 121266#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 119641#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 123431#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 118602#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 118603#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 115921#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 115922#L1376-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 122759#L1377-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 116665#L2157-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 115309#L2178-48 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 115310#L1381-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 115275#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 124972#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 123237#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 116639#L2157-58 assume !(0 == buttonForFloorIsPressed_~floorID); 116598#L2161-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 115268#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 115269#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 120388#L2969-4 assume !(0 != timeShift_~tmp___9~3); 115312#L3060-12 assume !(1 == ~doorState~0); 115313#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 115314#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 115901#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 117404#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 117391#L2344-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 116442#L2513-26 assume !(0 == ~currentFloorID~0); 116443#L2519-26 assume !(~currentFloorID~0 > 0); 114939#L2534-26 assume ~currentFloorID~0 > 0; 114498#L2536-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 114500#L2537-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 114658#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 128552#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 128551#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 118474#L2759-12 assume !(1 == ~currentHeading~0); 118475#L2769-36 assume !(0 == ~currentFloorID~0); 118317#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 122010#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 119307#L1507-4 assume !(-1 == ~expectedDirection~0); 118002#L1519-4 assume !(1 == ~expectedDirection~0); 117636#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 117738#L1683-2 [2018-11-28 11:02:41,815 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:02:41,815 INFO L82 PathProgramCache]: Analyzing trace with hash -825460873, now seen corresponding path program 1 times [2018-11-28 11:02:41,815 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:02:41,815 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:02:41,816 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:41,816 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:02:41,816 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:41,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:02:41,900 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:02:41,901 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:02:41,901 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:02:41,901 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:02:41,901 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:02:41,901 INFO L82 PathProgramCache]: Analyzing trace with hash 706051900, now seen corresponding path program 1 times [2018-11-28 11:02:41,901 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:02:41,902 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:02:41,902 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:41,902 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:02:41,902 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:41,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:02:41,941 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:02:41,941 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:02:41,941 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-28 11:02:41,941 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:02:41,942 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-28 11:02:41,942 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-28 11:02:41,942 INFO L87 Difference]: Start difference. First operand 14261 states and 26410 transitions. cyclomatic complexity: 12150 Second operand 7 states. [2018-11-28 11:02:46,488 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:02:46,489 INFO L93 Difference]: Finished difference Result 39330 states and 72808 transitions. [2018-11-28 11:02:46,489 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-11-28 11:02:46,489 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39330 states and 72808 transitions. [2018-11-28 11:02:46,589 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9204 [2018-11-28 11:02:46,666 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39330 states to 39330 states and 72808 transitions. [2018-11-28 11:02:46,667 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 39330 [2018-11-28 11:02:46,692 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 39330 [2018-11-28 11:02:46,692 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39330 states and 72808 transitions. [2018-11-28 11:02:46,715 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:02:46,716 INFO L705 BuchiCegarLoop]: Abstraction has 39330 states and 72808 transitions. [2018-11-28 11:02:46,743 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39330 states and 72808 transitions. [2018-11-28 11:02:46,919 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39330 to 18209. [2018-11-28 11:02:46,919 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 18209 states. [2018-11-28 11:02:46,939 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18209 states to 18209 states and 33706 transitions. [2018-11-28 11:02:46,939 INFO L728 BuchiCegarLoop]: Abstraction has 18209 states and 33706 transitions. [2018-11-28 11:02:46,940 INFO L608 BuchiCegarLoop]: Abstraction has 18209 states and 33706 transitions. [2018-11-28 11:02:46,940 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-11-28 11:02:46,940 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18209 states and 33706 transitions. [2018-11-28 11:02:46,976 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4196 [2018-11-28 11:02:46,976 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:02:46,976 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:02:46,979 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:02:46,980 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:02:46,980 INFO L794 eck$LassoCheckResult]: Stem: 171617#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string19.base, #t~string19.offset := #Ultimate.alloc(30);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(9);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(21);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(30);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(9);call #t~string24.base, #t~string24.offset := #Ultimate.alloc(21);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(30);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(9);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(25);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(30);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(9);call #t~string33.base, #t~string33.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(10);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1); 171618#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 176549#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 176550#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 171438#L1874 assume 0 != main_~tmp~15; 171439#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 172073#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 172074#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 169997#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 169998#L399 assume 0 == initPersonOnFloor_~floor; 170031#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 169070#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 173565#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 176560#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 176530#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 169588#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 169589#L1376 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 176107#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 170373#L2157 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 168818#L2178 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 168819#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 168333#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 169878#L2821 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 175726#L128 assume !(0 == isFloorCalling_~floorID); 175695#L132 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 173495#L155 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 173496#L2792 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 173651#L2804 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 168747#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 173927#L2969 assume !(0 != timeShift_~tmp___9~3); 168966#L3060 assume !(1 == ~doorState~0); 168967#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 168969#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 169091#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 171040#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 170930#L2344-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 170351#L2513-2 assume !(0 == ~currentFloorID~0); 170352#L2519-2 assume !(~currentFloorID~0 > 0); 168468#L2534-2 assume ~currentFloorID~0 > 0; 168287#L2536-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 168288#L2537-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 168453#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 177319#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 177318#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 172125#L2759 assume !(1 == ~currentHeading~0); 171823#L2769 assume !(0 == ~currentFloorID~0); 171824#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 171782#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 177404#L1507 assume !(-1 == ~expectedDirection~0); 177401#L1519 assume !(1 == ~expectedDirection~0); 177399#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 177398#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 177397#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 177395#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 177387#L1438-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 170469#L2157-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 170470#L2178-17 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 176837#L1442-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 168343#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 169866#L2821-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 177101#L2140-3 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 170456#L2157-22 assume !(0 == buttonForFloorIsPressed_~floorID); 170457#L2161-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 168663#L2178-22 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 168664#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 173935#L2969-1 assume !(0 != timeShift_~tmp___9~3); 168978#L3060-3 assume !(1 == ~doorState~0); 168979#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 168982#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 169099#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 171041#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 170914#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 170314#L2513-8 assume !(0 == ~currentFloorID~0); 170315#L2519-8 assume !(~currentFloorID~0 > 0); 168576#L2534-8 assume ~currentFloorID~0 > 0; 168269#L2536-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 168270#L2537-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 168437#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 185783#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 185782#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 172109#L2759-3 assume !(1 == ~currentHeading~0); 171783#L2769-9 assume !(0 == ~currentFloorID~0); 171784#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 171760#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 172913#L1507-1 assume !(-1 == ~expectedDirection~0); 171636#L1519-1 assume !(1 == ~expectedDirection~0); 171279#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 181686#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 181684#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 181682#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 176849#L1438-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 176850#L2157-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 168635#L2178-29 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 168636#L1442-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 180623#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 180621#L2821-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 180622#L2140-5 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 181211#L2157-34 assume !(0 == buttonForFloorIsPressed_~floorID); 181210#L2161-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 180610#L2178-34 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 180604#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 180602#L2969-2 assume !(0 != timeShift_~tmp___9~3); 168942#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 168943#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 168957#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 169134#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 171053#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 171054#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 170283#L2513-14 assume !(0 == ~currentFloorID~0); 170284#L2519-14 assume !(~currentFloorID~0 > 0); 168573#L2534-14 assume ~currentFloorID~0 > 0; 168236#L2536-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 168238#L2537-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 168318#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 186323#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 186322#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 186321#L2759-6 assume !(1 == ~currentHeading~0); 171775#L2769-18 assume !(0 == ~currentFloorID~0); 171776#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 175447#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 172914#L1507-2 assume !(-1 == ~expectedDirection~0); 171638#L1519-2 assume !(1 == ~expectedDirection~0); 171280#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 171367#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 170005#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 170006#L399-1 assume 0 == initPersonOnFloor_~floor; 169987#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 169057#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 173542#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 176559#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 183044#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 183043#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 182119#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 179681#L1438-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 170391#L2157-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 170393#L2178-41 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 176830#L1442-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 176831#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 177102#L2821-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 177103#L2140-7 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 170401#L2157-46 assume !(0 == buttonForFloorIsPressed_~floorID); 170402#L2161-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 168917#L2178-46 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 168918#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 173937#L2969-3 assume !(0 != timeShift_~tmp___9~3); 168954#L3060-9 assume !(1 == ~doorState~0); 168919#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 168920#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 169499#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 171017#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 171018#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 170073#L2513-20 assume !(0 == ~currentFloorID~0); 170074#L2519-20 assume !(~currentFloorID~0 > 0); 168567#L2534-20 assume ~currentFloorID~0 > 0; 168155#L2536-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 168157#L2537-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 168300#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 186320#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 186319#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 172090#L2759-9 assume !(1 == ~currentHeading~0); 172091#L2769-27 assume !(0 == ~currentFloorID~0); 172065#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 175441#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 172916#L1507-3 assume !(-1 == ~expectedDirection~0); 171642#L1519-3 assume !(1 == ~expectedDirection~0); 171268#L1520-3 cleanup_~i~2 := 0; 171368#L1683-2 [2018-11-28 11:02:46,993 INFO L796 eck$LassoCheckResult]: Loop: 171368#L1683-2 assume !false; 172924#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 172886#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 172887#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 171691#L1691 assume 1 != cleanup_~tmp___0~4; 171692#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 171693#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 173820#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 174784#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 173232#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 176702#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 176783#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 177851#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 177848#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 177844#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 177845#L1438-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 176854#L2157-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 168902#L2178-53 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 168903#L1442-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 177786#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 177784#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 177785#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 170241#L2157-58 assume !(0 == buttonForFloorIsPressed_~floorID); 170242#L2161-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 168886#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 168887#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 173944#L2969-4 assume !(0 != timeShift_~tmp___9~3); 168926#L3060-12 assume !(1 == ~doorState~0); 168927#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 168928#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 169514#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 171031#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 171019#L2344-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 170044#L2513-26 assume !(0 == ~currentFloorID~0); 170045#L2519-26 assume !(~currentFloorID~0 > 0); 168563#L2534-26 assume ~currentFloorID~0 > 0; 168122#L2536-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 168124#L2537-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 168279#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 186256#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 186255#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 172096#L2759-12 assume !(1 == ~currentHeading~0); 172097#L2769-36 assume !(0 == ~currentFloorID~0); 171956#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 175432#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 172918#L1507-4 assume !(-1 == ~expectedDirection~0); 171644#L1519-4 assume !(1 == ~expectedDirection~0); 171273#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 171368#L1683-2 [2018-11-28 11:02:47,005 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:02:47,005 INFO L82 PathProgramCache]: Analyzing trace with hash -1673733467, now seen corresponding path program 1 times [2018-11-28 11:02:47,005 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:02:47,005 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:02:47,006 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:47,006 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:02:47,006 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:47,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:02:47,115 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:02:47,115 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:02:47,115 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:02:47,117 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:02:47,117 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:02:47,117 INFO L82 PathProgramCache]: Analyzing trace with hash 1940810199, now seen corresponding path program 1 times [2018-11-28 11:02:47,118 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:02:47,118 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:02:47,118 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:47,118 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:02:47,118 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:47,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:02:47,170 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:02:47,171 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:02:47,171 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 11:02:47,171 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:02:47,171 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 11:02:47,171 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 11:02:47,171 INFO L87 Difference]: Start difference. First operand 18209 states and 33706 transitions. cyclomatic complexity: 15498 Second operand 5 states. [2018-11-28 11:02:49,025 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:02:49,025 INFO L93 Difference]: Finished difference Result 23510 states and 43288 transitions. [2018-11-28 11:02:49,025 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-28 11:02:49,025 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 23510 states and 43288 transitions. [2018-11-28 11:02:49,084 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5604 [2018-11-28 11:02:49,127 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 23510 states to 23510 states and 43288 transitions. [2018-11-28 11:02:49,127 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 23510 [2018-11-28 11:02:49,144 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 23510 [2018-11-28 11:02:49,144 INFO L73 IsDeterministic]: Start isDeterministic. Operand 23510 states and 43288 transitions. [2018-11-28 11:02:49,161 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:02:49,161 INFO L705 BuchiCegarLoop]: Abstraction has 23510 states and 43288 transitions. [2018-11-28 11:02:49,180 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23510 states and 43288 transitions. [2018-11-28 11:02:49,327 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23510 to 23362. [2018-11-28 11:02:49,327 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 23362 states. [2018-11-28 11:02:49,351 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23362 states to 23362 states and 43052 transitions. [2018-11-28 11:02:49,351 INFO L728 BuchiCegarLoop]: Abstraction has 23362 states and 43052 transitions. [2018-11-28 11:02:49,351 INFO L608 BuchiCegarLoop]: Abstraction has 23362 states and 43052 transitions. [2018-11-28 11:02:49,351 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-11-28 11:02:49,352 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 23362 states and 43052 transitions. [2018-11-28 11:02:49,396 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5541 [2018-11-28 11:02:49,396 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:02:49,396 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:02:49,400 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:02:49,400 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:02:49,400 INFO L794 eck$LassoCheckResult]: Stem: 213433#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string19.base, #t~string19.offset := #Ultimate.alloc(30);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(9);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(21);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(30);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(9);call #t~string24.base, #t~string24.offset := #Ultimate.alloc(21);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(30);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(9);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(25);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(30);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(9);call #t~string33.base, #t~string33.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(10);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1); 213434#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 218542#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 218543#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 213229#L1874 assume 0 != main_~tmp~15; 213230#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 213921#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 213922#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 211788#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 211789#L399 assume 0 == initPersonOnFloor_~floor; 211822#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 210825#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 215468#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 218552#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 218523#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 211343#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 211344#L1376 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 218399#L1438 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 212257#L2157-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 210526#L2178-5 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 210527#L1442 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 210070#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 211671#L2821 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 217679#L128 assume !(0 == isFloorCalling_~floorID); 217639#L132 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 215392#L155 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 215393#L2792 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 215551#L2804 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 210484#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 215830#L2969 assume !(0 != timeShift_~tmp___9~3); 210717#L3060 assume !(1 == ~doorState~0); 210718#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 210721#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 210847#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 212828#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 212709#L2344-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 212134#L2513-2 assume !(0 == ~currentFloorID~0); 212135#L2519-2 assume ~currentFloorID~0 > 0; 212730#L2520-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 212731#L128-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 215333#L155-26 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 212655#L2524-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 210203#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 219566#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 219441#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 213974#L2759 assume !(1 == ~currentHeading~0); 213651#L2769 assume !(0 == ~currentFloorID~0); 213652#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 213608#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 219564#L1507 assume !(-1 == ~expectedDirection~0); 219561#L1519 assume !(1 == ~expectedDirection~0); 219449#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 219448#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 219447#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 219445#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 219446#L1438-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 223279#L1448-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 223268#L1459-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 223257#L1470-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 223251#L1481-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 215269#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 223239#L2821-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 223240#L2140-3 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 225812#L2157-22 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 225808#L2178-22 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 219336#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 215839#L2969-1 assume !(0 != timeShift_~tmp___9~3); 210734#L3060-3 assume !(1 == ~doorState~0); 210735#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 210738#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 210855#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 212831#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 212692#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 212693#L2513-8 assume !(0 == ~currentFloorID~0); 219806#L2519-8 assume !(~currentFloorID~0 > 0); 219804#L2534-8 assume ~currentFloorID~0 > 0; 210006#L2536-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 210007#L2537-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 210190#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 223192#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 223191#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 213958#L2759-3 assume !(1 == ~currentHeading~0); 213610#L2769-9 assume !(0 == ~currentFloorID~0); 213611#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 213586#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 222916#L1507-1 assume !(-1 == ~expectedDirection~0); 222908#L1519-1 assume !(1 == ~expectedDirection~0); 222907#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 222902#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 222903#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 221478#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 221480#L1438-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 220779#L1448-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 220712#L1459-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 220705#L1470-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 220703#L1481-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 220695#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 220693#L2821-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 220694#L2140-5 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 220680#L2157-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 220672#L2178-34 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 220671#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 220669#L2969-2 assume !(0 != timeShift_~tmp___9~3); 220667#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 220665#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 210891#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 210892#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 212848#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 212850#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 219798#L2513-14 assume !(0 == ~currentFloorID~0); 219796#L2519-14 assume !(~currentFloorID~0 > 0); 219794#L2534-14 assume ~currentFloorID~0 > 0; 209976#L2536-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 209978#L2537-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 210169#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 219776#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 219777#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 213962#L2759-6 assume !(1 == ~currentHeading~0); 213603#L2769-18 assume !(0 == ~currentFloorID~0); 213604#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 217709#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 220000#L1507-2 assume !(-1 == ~expectedDirection~0); 219997#L1519-2 assume !(1 == ~expectedDirection~0); 219995#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 219994#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 219988#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 219987#L399-1 assume 0 == initPersonOnFloor_~floor; 219977#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 219921#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 219916#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 219902#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 219890#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 219885#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 219878#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 219874#L1438-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 219862#L1448-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 219857#L1459-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 219846#L1470-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 219839#L1481-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 219833#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 219832#L2821-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 218517#L2140-7 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 212180#L2157-46 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 210661#L2178-46 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 210662#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 215841#L2969-3 assume !(0 != timeShift_~tmp___9~3); 210702#L3060-9 assume !(1 == ~doorState~0); 210703#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 211247#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 211248#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 212799#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 212800#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 225052#L2513-20 assume !(0 == ~currentFloorID~0); 221378#L2519-20 assume !(~currentFloorID~0 > 0); 219780#L2534-20 assume ~currentFloorID~0 > 0; 209892#L2536-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 209894#L2537-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 210151#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 223196#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 223197#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 224908#L2759-9 assume !(1 == ~currentHeading~0); 217710#L2769-27 assume !(0 == ~currentFloorID~0); 213910#L2769-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 217690#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 225954#L1507-3 assume !(-1 == ~expectedDirection~0); 225945#L1519-3 assume !(1 == ~expectedDirection~0); 225946#L1520-3 cleanup_~i~2 := 0; 227378#L1683-2 [2018-11-28 11:02:49,405 INFO L796 eck$LassoCheckResult]: Loop: 227378#L1683-2 assume !false; 227377#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 227376#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 227375#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 227374#L1691 assume 1 != cleanup_~tmp___0~4; 227373#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 227370#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 227367#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 225915#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 225901#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 218823#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 214074#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 214075#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 211289#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 211290#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 218375#L1438-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 212045#L2157-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 210644#L2178-53 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 210645#L1442-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 210092#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 211665#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 225793#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 223209#L2157-58 assume !(0 == buttonForFloorIsPressed_~floorID); 223208#L2161-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 210623#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 210624#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 219495#L2969-4 assume !(0 != timeShift_~tmp___9~3); 219494#L3060-12 assume !(1 == ~doorState~0); 219493#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 219490#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 219487#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 219485#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 219486#L2344-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 211835#L2513-26 assume !(0 == ~currentFloorID~0); 211836#L2519-26 assume ~currentFloorID~0 > 0; 212738#L2520-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 212824#L128-275 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 215590#L155-275 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 212374#L2524-26 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 210133#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 219585#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 219586#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 223310#L2759-12 assume !(1 == ~currentHeading~0); 217694#L2769-36 assume !(0 == ~currentFloorID~0); 213786#L2769-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 225959#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 227383#L1507-4 assume !(-1 == ~expectedDirection~0); 227381#L1519-4 assume !(1 == ~expectedDirection~0); 227379#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 227378#L1683-2 [2018-11-28 11:02:49,417 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:02:49,417 INFO L82 PathProgramCache]: Analyzing trace with hash -45837669, now seen corresponding path program 1 times [2018-11-28 11:02:49,417 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:02:49,418 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:02:49,418 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:49,418 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:02:49,418 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:49,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:02:49,478 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:02:49,478 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:02:49,479 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:02:49,479 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:02:49,479 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:02:49,479 INFO L82 PathProgramCache]: Analyzing trace with hash -1899121803, now seen corresponding path program 1 times [2018-11-28 11:02:49,479 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:02:49,479 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:02:49,480 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:49,480 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:02:49,480 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:49,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:02:49,527 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:02:49,527 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:02:49,527 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 11:02:49,527 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:02:49,527 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 11:02:49,527 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 11:02:49,528 INFO L87 Difference]: Start difference. First operand 23362 states and 43052 transitions. cyclomatic complexity: 19691 Second operand 5 states. [2018-11-28 11:02:50,142 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:02:50,143 INFO L93 Difference]: Finished difference Result 40284 states and 74179 transitions. [2018-11-28 11:02:50,144 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-28 11:02:50,144 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 40284 states and 74179 transitions. [2018-11-28 11:02:50,243 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11201 [2018-11-28 11:02:50,317 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 40284 states to 40284 states and 74179 transitions. [2018-11-28 11:02:50,318 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40284 [2018-11-28 11:02:50,339 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40284 [2018-11-28 11:02:50,339 INFO L73 IsDeterministic]: Start isDeterministic. Operand 40284 states and 74179 transitions. [2018-11-28 11:02:50,359 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:02:50,359 INFO L705 BuchiCegarLoop]: Abstraction has 40284 states and 74179 transitions. [2018-11-28 11:02:50,381 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40284 states and 74179 transitions. [2018-11-28 11:02:50,626 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40284 to 39489. [2018-11-28 11:02:50,626 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 39489 states. [2018-11-28 11:02:50,668 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39489 states to 39489 states and 72868 transitions. [2018-11-28 11:02:50,668 INFO L728 BuchiCegarLoop]: Abstraction has 39489 states and 72868 transitions. [2018-11-28 11:02:50,668 INFO L608 BuchiCegarLoop]: Abstraction has 39489 states and 72868 transitions. [2018-11-28 11:02:50,668 INFO L442 BuchiCegarLoop]: ======== Iteration 7============ [2018-11-28 11:02:50,668 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39489 states and 72868 transitions. [2018-11-28 11:02:50,745 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 10854 [2018-11-28 11:02:50,745 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:02:50,745 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:02:50,749 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:02:50,749 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:02:50,749 INFO L794 eck$LassoCheckResult]: Stem: 277166#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string19.base, #t~string19.offset := #Ultimate.alloc(30);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(9);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(21);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(30);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(9);call #t~string24.base, #t~string24.offset := #Ultimate.alloc(21);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(30);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(9);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(25);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(30);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(9);call #t~string33.base, #t~string33.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(10);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1); 277167#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 282631#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 282632#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 276949#L1874 assume 0 != main_~tmp~15; 276950#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 277655#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 277656#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 275519#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 275520#L399 assume 0 == initPersonOnFloor_~floor; 275553#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 274527#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 279260#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 282643#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 282611#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 275063#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 275064#L1376 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 282455#L1438 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 275986#L2157-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 274214#L2178-5 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 274215#L1442 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 273735#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 275400#L2821 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 281674#L128 assume !(0 == isFloorCalling_~floorID); 281626#L132 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 279183#L155 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 279184#L2792 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 279355#L2804 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 274178#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 279634#L2969 assume !(0 != timeShift_~tmp___9~3); 274415#L3060 assume !(1 == ~doorState~0); 274416#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 274419#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 274546#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 276553#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 276439#L2344-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 275859#L2513-2 assume !(0 == ~currentFloorID~0); 275860#L2519-2 assume ~currentFloorID~0 > 0; 276459#L2520-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 276460#L128-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 279120#L155-26 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 276386#L2524-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 273892#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 275401#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 275402#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 277703#L2759 assume !(1 == ~currentHeading~0); 277378#L2769 assume !(0 == ~currentFloorID~0); 277379#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 277335#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 278494#L1507 assume !(-1 == ~expectedDirection~0); 277204#L1519 assume !(1 == ~expectedDirection~0); 276798#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 276913#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 282612#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 282459#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 282460#L1438-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 282888#L1448-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 282889#L1459-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 284987#L1470-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 273743#L1481-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 273745#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 275386#L2821-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 282597#L2140-3 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 275955#L2157-22 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 274093#L2178-22 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 274094#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 279646#L2969-1 assume !(0 != timeShift_~tmp___9~3); 274434#L3060-3 assume !(1 == ~doorState~0); 274435#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 274438#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 274556#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 276557#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 276423#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 275827#L2513-8 assume !(0 == ~currentFloorID~0); 275829#L2519-8 assume !(~currentFloorID~0 > 0); 284347#L2534-8 assume ~currentFloorID~0 > 0; 273671#L2536-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 273672#L2537-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 273879#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 284941#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 284942#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 277689#L2759-3 assume !(1 == ~currentHeading~0); 277336#L2769-9 assume !(0 == ~currentFloorID~0); 277337#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 277313#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 278496#L1507-1 assume !(-1 == ~expectedDirection~0); 277184#L1519-1 assume !(1 == ~expectedDirection~0); 276799#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 276914#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 282601#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 282422#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 282423#L1438-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 282891#L1448-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 282892#L1459-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 296029#L1470-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 273746#L1481-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 273748#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 275389#L2821-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 282600#L2140-5 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 275930#L2157-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 274047#L2178-34 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 274048#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 279639#L2969-2 assume !(0 != timeShift_~tmp___9~3); 279641#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 297683#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 297681#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 297677#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 297675#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 297676#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 297701#L2513-14 assume !(0 == ~currentFloorID~0); 297700#L2519-14 assume !(~currentFloorID~0 > 0); 297698#L2534-14 assume ~currentFloorID~0 > 0; 273641#L2536-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 273643#L2537-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 297420#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 297417#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 297414#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 277690#L2759-6 assume !(1 == ~currentHeading~0); 277330#L2769-18 assume !(0 == ~currentFloorID~0); 277331#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 281693#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 313006#L1507-2 assume !(-1 == ~expectedDirection~0); 313003#L1519-2 assume !(1 == ~expectedDirection~0); 313001#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 313000#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 312994#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 312993#L399-1 assume 0 == initPersonOnFloor_~floor; 312983#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 312958#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 312757#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 282637#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 282638#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 295812#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 294712#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 294327#L1438-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 294326#L1448-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 294325#L1459-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 294324#L1470-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 294323#L1481-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 294322#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 294320#L2821-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 294321#L2140-7 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 294304#L2157-46 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 294300#L2178-46 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 294293#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 294291#L2969-3 assume !(0 != timeShift_~tmp___9~3); 274398#L3060-9 assume !(1 == ~doorState~0); 274399#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 297969#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 297966#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 297965#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 276554#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 276555#L2513-20 assume !(0 == ~currentFloorID~0); 275598#L2519-20 assume !(~currentFloorID~0 > 0); 300132#L2534-20 assume ~currentFloorID~0 > 0; 273557#L2536-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 273559#L2537-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 289160#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 300625#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 300522#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 277672#L2759-9 assume !(1 == ~currentHeading~0); 277673#L2769-27 assume !(0 == ~currentFloorID~0); 277643#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 281683#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 297019#L1507-3 assume !(-1 == ~expectedDirection~0); 297015#L1519-3 assume !(1 == ~expectedDirection~0); 297006#L1520-3 cleanup_~i~2 := 0; 297005#L1683-2 [2018-11-28 11:02:50,753 INFO L796 eck$LassoCheckResult]: Loop: 297005#L1683-2 assume !false; 297004#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 297003#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 296998#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 296996#L1691 assume 1 != cleanup_~tmp___0~4; 296995#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 296992#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 296989#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 296966#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 296952#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 296947#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 295809#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 292789#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 292787#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 292785#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 285883#L1438-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 292784#L1448-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 292783#L1459-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 292782#L1470-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 292781#L1481-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 292780#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 292778#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 292779#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 293860#L2157-58 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 293843#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 293841#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 293838#L2969-4 assume !(0 != timeShift_~tmp___9~3); 293839#L3060-12 assume !(1 == ~doorState~0); 299285#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 299282#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 299275#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 299272#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 299273#L2344-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 299198#L2513-26 assume !(0 == ~currentFloorID~0); 285888#L2519-26 assume !(~currentFloorID~0 > 0); 285887#L2534-26 assume ~currentFloorID~0 > 0; 273521#L2536-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 273523#L2537-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 285177#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 285164#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 285165#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 277677#L2759-12 assume !(1 == ~currentHeading~0); 277678#L2769-36 assume !(0 == ~currentFloorID~0); 277520#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 281676#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 297012#L1507-4 assume !(-1 == ~expectedDirection~0); 297010#L1519-4 assume !(1 == ~expectedDirection~0); 297007#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 297005#L1683-2 [2018-11-28 11:02:50,760 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:02:50,761 INFO L82 PathProgramCache]: Analyzing trace with hash -43990627, now seen corresponding path program 1 times [2018-11-28 11:02:50,761 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:02:50,762 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:02:50,763 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:50,763 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:02:50,763 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:50,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:02:50,868 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:02:50,868 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:02:50,868 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:02:50,868 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:02:50,869 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:02:50,869 INFO L82 PathProgramCache]: Analyzing trace with hash 1725357741, now seen corresponding path program 1 times [2018-11-28 11:02:50,869 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:02:50,869 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:02:50,869 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:50,870 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:02:50,870 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:50,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:02:50,904 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:02:50,904 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:02:50,904 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 11:02:50,904 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:02:50,905 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 11:02:50,905 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 11:02:50,905 INFO L87 Difference]: Start difference. First operand 39489 states and 72868 transitions. cyclomatic complexity: 33380 Second operand 5 states. [2018-11-28 11:02:54,549 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:02:54,549 INFO L93 Difference]: Finished difference Result 108846 states and 199834 transitions. [2018-11-28 11:02:54,549 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-28 11:02:54,550 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 108846 states and 199834 transitions. [2018-11-28 11:02:54,848 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 35695 [2018-11-28 11:02:55,075 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 108846 states to 108514 states and 199470 transitions. [2018-11-28 11:02:55,075 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 108514 [2018-11-28 11:02:55,136 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 108514 [2018-11-28 11:02:55,137 INFO L73 IsDeterministic]: Start isDeterministic. Operand 108514 states and 199470 transitions. [2018-11-28 11:02:55,186 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:02:55,186 INFO L705 BuchiCegarLoop]: Abstraction has 108514 states and 199470 transitions. [2018-11-28 11:02:55,239 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108514 states and 199470 transitions. [2018-11-28 11:02:55,691 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108514 to 57238. [2018-11-28 11:02:55,691 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 57238 states. [2018-11-28 11:02:55,755 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57238 states to 57238 states and 105060 transitions. [2018-11-28 11:02:55,755 INFO L728 BuchiCegarLoop]: Abstraction has 57238 states and 105060 transitions. [2018-11-28 11:02:55,755 INFO L608 BuchiCegarLoop]: Abstraction has 57238 states and 105060 transitions. [2018-11-28 11:02:55,756 INFO L442 BuchiCegarLoop]: ======== Iteration 8============ [2018-11-28 11:02:55,756 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 57238 states and 105060 transitions. [2018-11-28 11:02:55,867 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 18085 [2018-11-28 11:02:55,868 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:02:55,868 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:02:55,873 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:02:55,873 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:02:55,873 INFO L794 eck$LassoCheckResult]: Stem: 425532#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string19.base, #t~string19.offset := #Ultimate.alloc(30);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(9);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(21);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(30);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(9);call #t~string24.base, #t~string24.offset := #Ultimate.alloc(21);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(30);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(9);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(25);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(30);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(9);call #t~string33.base, #t~string33.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(10);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1); 425533#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 430830#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 430831#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 425348#L1874 assume 0 != main_~tmp~15; 425349#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 426017#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 426018#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 423847#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 423848#L399 assume 0 == initPersonOnFloor_~floor; 423881#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 422872#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 427606#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 430841#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 430811#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 423394#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 423395#L1376 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 430669#L1438 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 424328#L2157-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 422565#L2178-5 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 422566#L1442 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 422089#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 423726#L2821 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 429923#L128 assume !(0 == isFloorCalling_~floorID); 429877#L132 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 427530#L155 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 427531#L2792 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 427703#L2804 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 422528#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 427976#L2969 assume !(0 != timeShift_~tmp___9~3); 422762#L3060 assume !(1 == ~doorState~0); 422763#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 422766#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 422892#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 424933#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 424814#L2344-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 424196#L2513-2 assume !(0 == ~currentFloorID~0); 424197#L2519-2 assume ~currentFloorID~0 > 0; 424834#L2520-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 424835#L128-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 427466#L155-26 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 424759#L2524-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 422244#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 433416#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 433415#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 426064#L2759 assume !(1 == ~currentHeading~0); 425741#L2769 assume !(0 == ~currentFloorID~0); 425742#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 425700#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 434080#L1507 assume !(-1 == ~expectedDirection~0); 434077#L1519 assume !(1 == ~expectedDirection~0); 434075#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 434074#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 434073#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 434072#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 434071#L1438-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 424312#L2157-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 424313#L2178-17 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 431157#L1442-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 422099#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 435282#L2821-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 435283#L2140-3 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 424297#L2157-22 assume !(0 == buttonForFloorIsPressed_~floorID); 424298#L2161-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 422444#L2178-22 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 422445#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 427985#L2969-1 assume !(0 != timeShift_~tmp___9~3); 422779#L3060-3 assume !(1 == ~doorState~0); 422780#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 422783#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 422903#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 424935#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 424936#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 424165#L2513-8 assume !(0 == ~currentFloorID~0); 424166#L2519-8 assume ~currentFloorID~0 > 0; 424824#L2520-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 424825#L128-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 427205#L155-87 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 424732#L2524-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 422229#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 434672#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 434668#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 426050#L2759-3 assume !(1 == ~currentHeading~0); 425701#L2769-9 assume !(0 == ~currentFloorID~0); 425702#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 425678#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 437600#L1507-1 assume !(-1 == ~expectedDirection~0); 437597#L1519-1 assume !(1 == ~expectedDirection~0); 437595#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 437594#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 437593#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 437592#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 431750#L1438-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 431171#L2157-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 437586#L2178-29 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 437583#L1442-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 437582#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 437580#L2821-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 437579#L2140-5 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 437578#L2157-34 assume !(0 == buttonForFloorIsPressed_~floorID); 437576#L2161-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 437570#L2178-34 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 437569#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 437309#L2969-2 assume !(0 != timeShift_~tmp___9~3); 437308#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 437307#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 437305#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 437301#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 437299#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 437300#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 424138#L2513-14 assume !(0 == ~currentFloorID~0); 424139#L2519-14 assume ~currentFloorID~0 > 0; 424871#L2520-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 435743#L128-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 435735#L155-148 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 424708#L2524-14 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 422202#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 435509#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 435510#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 435503#L2759-6 assume !(1 == ~currentHeading~0); 425693#L2769-18 assume !(0 == ~currentFloorID~0); 425694#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 429946#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 452939#L1507-2 assume !(-1 == ~expectedDirection~0); 452935#L1519-2 assume !(1 == ~expectedDirection~0); 452930#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 452924#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 452918#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 452917#L399-1 assume 0 == initPersonOnFloor_~floor; 452905#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 452865#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 452830#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 452807#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 452775#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 452773#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 452753#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 452248#L1438-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 431172#L2157-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 452724#L2178-41 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 452707#L1442-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 452704#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 452701#L2821-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 452702#L2140-7 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 452678#L2157-46 assume !(0 == buttonForFloorIsPressed_~floorID); 452533#L2161-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 452530#L2178-46 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 470573#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 470571#L2969-3 assume !(0 != timeShift_~tmp___9~3); 452522#L3060-9 assume !(1 == ~doorState~0); 452521#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 452515#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 452511#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 452508#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 452506#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 452505#L2513-20 assume !(0 == ~currentFloorID~0); 452072#L2519-20 assume ~currentFloorID~0 > 0; 452071#L2520-20 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 424461#L2534-20 assume ~currentFloorID~0 > 0; 421911#L2536-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 421913#L2537-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 422184#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 423724#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 423725#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 452011#L2759-9 assume !(1 == ~currentHeading~0); 429948#L2769-27 assume !(0 == ~currentFloorID~0); 426001#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 429932#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 469561#L1507-3 assume !(-1 == ~expectedDirection~0); 469548#L1519-3 assume !(1 == ~expectedDirection~0); 469544#L1520-3 cleanup_~i~2 := 0; 469542#L1683-2 [2018-11-28 11:02:55,879 INFO L796 eck$LassoCheckResult]: Loop: 469542#L1683-2 assume !false; 469540#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 469538#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 469536#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 469534#L1691 assume 1 != cleanup_~tmp___0~4; 469533#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 469521#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 469488#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 469465#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 469450#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 469448#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 469446#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 469444#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 469442#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 469438#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 469437#L1438-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 462880#L1448-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 462878#L1459-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 462877#L1470-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 462872#L1481-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 462871#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 462816#L2821-4 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 461706#L128-249 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 461682#L155-249 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 461676#L2792-4 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 461675#L2804-4 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 462807#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 462805#L2969-4 assume !(0 != timeShift_~tmp___9~3); 462804#L3060-12 assume !(1 == ~doorState~0); 462803#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 462800#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 462797#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 462795#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 462796#L2344-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 465059#L2513-26 assume !(0 == ~currentFloorID~0); 461624#L2519-26 assume !(~currentFloorID~0 > 0); 461561#L2534-26 assume ~currentFloorID~0 > 0; 421878#L2536-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 421880#L2537-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 422156#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 467430#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 467429#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 451870#L2759-12 assume !(1 == ~currentHeading~0); 429934#L2769-36 assume !(0 == ~currentFloorID~0); 425878#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 429927#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 469563#L1507-4 assume !(-1 == ~expectedDirection~0); 469552#L1519-4 assume !(1 == ~expectedDirection~0); 469545#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 469542#L1683-2 [2018-11-28 11:02:55,889 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:02:55,889 INFO L82 PathProgramCache]: Analyzing trace with hash 1588965124, now seen corresponding path program 1 times [2018-11-28 11:02:55,889 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:02:55,889 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:02:55,890 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:55,890 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:02:55,890 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:55,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:02:55,946 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:02:55,946 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:02:55,946 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:02:55,947 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:02:55,947 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:02:55,947 INFO L82 PathProgramCache]: Analyzing trace with hash -1798520334, now seen corresponding path program 1 times [2018-11-28 11:02:55,947 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:02:55,947 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:02:55,948 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:55,948 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:02:55,948 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:02:55,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:02:56,044 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:02:56,046 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:02:56,046 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2018-11-28 11:02:56,046 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:02:56,046 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2018-11-28 11:02:56,046 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2018-11-28 11:02:56,047 INFO L87 Difference]: Start difference. First operand 57238 states and 105060 transitions. cyclomatic complexity: 47823 Second operand 10 states. [2018-11-28 11:03:17,188 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:03:17,188 INFO L93 Difference]: Finished difference Result 224763 states and 411902 transitions. [2018-11-28 11:03:17,189 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 46 states. [2018-11-28 11:03:17,189 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 224763 states and 411902 transitions. [2018-11-28 11:03:17,790 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 71038 [2018-11-28 11:03:18,262 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 224763 states to 224763 states and 411902 transitions. [2018-11-28 11:03:18,262 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 224763 [2018-11-28 11:03:18,374 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 224763 [2018-11-28 11:03:18,374 INFO L73 IsDeterministic]: Start isDeterministic. Operand 224763 states and 411902 transitions. [2018-11-28 11:03:18,467 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:03:18,468 INFO L705 BuchiCegarLoop]: Abstraction has 224763 states and 411902 transitions. [2018-11-28 11:03:18,564 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 224763 states and 411902 transitions. [2018-11-28 11:03:19,271 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 224763 to 56031. [2018-11-28 11:03:19,271 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 56031 states. [2018-11-28 11:03:19,347 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56031 states to 56031 states and 102216 transitions. [2018-11-28 11:03:19,348 INFO L728 BuchiCegarLoop]: Abstraction has 56031 states and 102216 transitions. [2018-11-28 11:03:19,348 INFO L608 BuchiCegarLoop]: Abstraction has 56031 states and 102216 transitions. [2018-11-28 11:03:19,348 INFO L442 BuchiCegarLoop]: ======== Iteration 9============ [2018-11-28 11:03:19,348 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 56031 states and 102216 transitions. [2018-11-28 11:03:19,487 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 17309 [2018-11-28 11:03:19,488 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:03:19,488 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:03:19,494 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:03:19,494 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:03:19,495 INFO L794 eck$LassoCheckResult]: Stem: 707489#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string19.base, #t~string19.offset := #Ultimate.alloc(30);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(9);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(21);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(30);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(9);call #t~string24.base, #t~string24.offset := #Ultimate.alloc(21);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(30);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(9);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(25);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(30);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(9);call #t~string33.base, #t~string33.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(10);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1); 707490#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 712845#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 712846#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 707303#L1874 assume 0 != main_~tmp~15; 707304#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 707970#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 707971#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 705920#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 705921#L399 assume 0 == initPersonOnFloor_~floor; 705952#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 704965#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 709486#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 712855#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 712826#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 705477#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 705478#L1376 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 712626#L1438 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 706377#L2157-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 704654#L2178-5 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 704655#L1442 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 704201#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 705800#L2821 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 712825#L2140-1 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 706368#L2157-10 assume !(0 == buttonForFloorIsPressed_~floorID); 705992#L2161-10 assume !(1 == buttonForFloorIsPressed_~floorID); 705993#L2165-10 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 704616#L2178-10 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 704617#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 713654#L2969 assume !(0 != timeShift_~tmp___9~3); 704855#L3060 assume !(1 == ~doorState~0); 704856#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 704861#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 704986#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 706921#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 706814#L2344-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 706256#L2513-2 assume !(0 == ~currentFloorID~0); 706257#L2519-2 assume ~currentFloorID~0 > 0; 706835#L2520-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 706836#L128-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 709361#L155-26 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 706761#L2524-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 704339#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 713687#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 713649#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 708016#L2759 assume !(1 == ~currentHeading~0); 707697#L2769 assume !(0 == ~currentFloorID~0); 707698#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 707652#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 713767#L1507 assume !(-1 == ~expectedDirection~0); 713764#L1519 assume !(1 == ~expectedDirection~0); 713762#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 713761#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 713760#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 713759#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 713757#L1438-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 713758#L2157-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 714749#L2178-17 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 714745#L1442-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 714746#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 714725#L2821-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 714727#L2140-3 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 726241#L2157-22 assume !(0 == buttonForFloorIsPressed_~floorID); 726238#L2161-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 726239#L2178-22 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 742510#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 716431#L2969-1 assume !(0 != timeShift_~tmp___9~3); 704874#L3060-3 assume !(1 == ~doorState~0); 704875#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 704878#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 704994#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 706923#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 706798#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 706225#L2513-8 assume !(0 == ~currentFloorID~0); 706226#L2519-8 assume ~currentFloorID~0 > 0; 706824#L2520-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 706825#L128-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 709106#L155-87 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 706737#L2524-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 704323#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 726102#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 726101#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 708004#L2759-3 assume !(1 == ~currentHeading~0); 707653#L2769-9 assume !(0 == ~currentFloorID~0); 707654#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 707630#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 722367#L1507-1 assume !(-1 == ~expectedDirection~0); 722364#L1519-1 assume !(1 == ~expectedDirection~0); 722362#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 722361#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 722360#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 722359#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 713689#L1438-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 713139#L2157-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 741892#L2178-29 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 741888#L1442-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 741777#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 741771#L2821-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 741772#L2140-5 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 741776#L2157-34 assume !(0 == buttonForFloorIsPressed_~floorID); 741764#L2161-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 741759#L2178-34 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 741757#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 741758#L2969-2 assume !(0 != timeShift_~tmp___9~3); 704820#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 704821#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 759785#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 759781#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 759779#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 759778#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 706198#L2513-14 assume !(0 == ~currentFloorID~0); 706199#L2519-14 assume ~currentFloorID~0 > 0; 706793#L2520-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 706794#L128-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 709157#L155-148 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 709158#L2524-14 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 708045#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 705795#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 705796#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 708005#L2759-6 assume !(1 == ~currentHeading~0); 707643#L2769-18 assume !(0 == ~currentFloorID~0); 707644#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 711856#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 739291#L1507-2 assume !(-1 == ~expectedDirection~0); 739288#L1519-2 assume !(1 == ~expectedDirection~0); 739286#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 739285#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 739279#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 739278#L399-1 assume 0 == initPersonOnFloor_~floor; 739268#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 739243#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 739240#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 739237#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 739236#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 739235#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 739176#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 739175#L1438-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 739173#L2157-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 739162#L2178-41 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 739155#L1442-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 726179#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 726167#L2821-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 712820#L2140-7 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 706301#L2157-46 assume !(0 == buttonForFloorIsPressed_~floorID); 705810#L2161-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 704789#L2178-46 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 704790#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 749722#L2969-3 assume !(0 != timeShift_~tmp___9~3); 704837#L3060-9 assume !(1 == ~doorState~0); 704791#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 704792#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 705378#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 706895#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 706896#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 705994#L2513-20 assume !(0 == ~currentFloorID~0); 705995#L2519-20 assume ~currentFloorID~0 > 0; 706852#L2520-20 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 704450#L2534-20 assume ~currentFloorID~0 > 0; 704023#L2536-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 704025#L2537-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 704284#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 760012#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 760011#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 707988#L2759-9 assume !(1 == ~currentHeading~0); 707989#L2769-27 assume !(0 == ~currentFloorID~0); 707959#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 711847#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 744293#L1507-3 assume !(-1 == ~expectedDirection~0); 744286#L1519-3 assume !(1 == ~expectedDirection~0); 744284#L1520-3 cleanup_~i~2 := 0; 744283#L1683-2 [2018-11-28 11:03:19,500 INFO L796 eck$LassoCheckResult]: Loop: 744283#L1683-2 assume !false; 744282#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 744281#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 744280#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 744275#L1691 assume 1 != cleanup_~tmp___0~4; 744273#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 744267#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 744255#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 744251#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 744237#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 744236#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 744234#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 744232#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 744230#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 744226#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 744136#L1438-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 744192#L2157-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 706519#L2178-53 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 750527#L1442-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 744200#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 750397#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 750398#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 706160#L2157-58 assume !(0 == buttonForFloorIsPressed_~floorID); 706161#L2161-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 750385#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 750386#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 752933#L2969-4 assume !(0 != timeShift_~tmp___9~3); 704800#L3060-12 assume !(1 == ~doorState~0); 704801#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 704802#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 705397#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 706911#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 706897#L2344-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 705963#L2513-26 assume !(0 == ~currentFloorID~0); 705964#L2519-26 assume ~currentFloorID~0 > 0; 706843#L2520-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 706919#L128-275 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 709615#L155-275 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 706485#L2524-26 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 704266#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 759763#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 759761#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 707993#L2759-12 assume !(1 == ~currentHeading~0); 707994#L2769-36 assume !(0 == ~currentFloorID~0); 707839#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 711843#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 744295#L1507-4 assume !(-1 == ~expectedDirection~0); 744290#L1519-4 assume !(1 == ~expectedDirection~0); 744285#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 744283#L1683-2 [2018-11-28 11:03:19,509 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:03:19,509 INFO L82 PathProgramCache]: Analyzing trace with hash 1133178493, now seen corresponding path program 1 times [2018-11-28 11:03:19,510 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:03:19,510 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:03:19,510 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:19,511 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:03:19,511 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:19,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:03:19,586 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:03:19,588 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:03:19,588 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:03:19,589 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:03:19,589 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:03:19,589 INFO L82 PathProgramCache]: Analyzing trace with hash -1897274761, now seen corresponding path program 1 times [2018-11-28 11:03:19,589 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:03:19,589 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:03:19,590 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:19,590 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:03:19,590 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:19,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:03:19,623 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:03:19,623 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:03:19,623 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 11:03:19,623 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:03:19,623 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-28 11:03:19,623 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-28 11:03:19,624 INFO L87 Difference]: Start difference. First operand 56031 states and 102216 transitions. cyclomatic complexity: 46190 Second operand 3 states. [2018-11-28 11:03:20,035 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:03:20,035 INFO L93 Difference]: Finished difference Result 71441 states and 130270 transitions. [2018-11-28 11:03:20,038 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-28 11:03:20,038 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 71441 states and 130270 transitions. [2018-11-28 11:03:20,439 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 21434 [2018-11-28 11:03:20,552 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 71441 states to 71441 states and 130270 transitions. [2018-11-28 11:03:20,552 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 71441 [2018-11-28 11:03:20,584 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 71441 [2018-11-28 11:03:20,584 INFO L73 IsDeterministic]: Start isDeterministic. Operand 71441 states and 130270 transitions. [2018-11-28 11:03:20,613 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:03:20,613 INFO L705 BuchiCegarLoop]: Abstraction has 71441 states and 130270 transitions. [2018-11-28 11:03:20,641 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71441 states and 130270 transitions. [2018-11-28 11:03:21,007 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71441 to 70015. [2018-11-28 11:03:21,008 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 70015 states. [2018-11-28 11:03:21,083 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70015 states to 70015 states and 127860 transitions. [2018-11-28 11:03:21,083 INFO L728 BuchiCegarLoop]: Abstraction has 70015 states and 127860 transitions. [2018-11-28 11:03:21,083 INFO L608 BuchiCegarLoop]: Abstraction has 70015 states and 127860 transitions. [2018-11-28 11:03:21,083 INFO L442 BuchiCegarLoop]: ======== Iteration 10============ [2018-11-28 11:03:21,083 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 70015 states and 127860 transitions. [2018-11-28 11:03:21,216 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 20634 [2018-11-28 11:03:21,216 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:03:21,216 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:03:21,221 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:03:21,221 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:03:21,221 INFO L794 eck$LassoCheckResult]: Stem: 835109#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string19.base, #t~string19.offset := #Ultimate.alloc(30);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(9);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(21);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(30);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(9);call #t~string24.base, #t~string24.offset := #Ultimate.alloc(21);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(30);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(9);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(25);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(30);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(9);call #t~string33.base, #t~string33.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(10);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1); 835110#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 840581#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 840582#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 834915#L1874 assume 0 != main_~tmp~15; 834916#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 835594#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 835595#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 833438#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 833439#L399 assume 0 == initPersonOnFloor_~floor; 833472#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 832466#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 837214#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 840592#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 840562#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 832988#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 832989#L1376 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 840393#L1438 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 833903#L2157-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 832158#L2178-5 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 832159#L1442 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 832266#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 833319#L2821 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 840561#L2140-1 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 833891#L2157-10 assume !(0 == buttonForFloorIsPressed_~floorID); 833512#L2161-10 assume !(1 == buttonForFloorIsPressed_~floorID); 833513#L2165-10 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 832120#L2178-10 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 832121#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 844827#L2969 assume !(0 != timeShift_~tmp___9~3); 832356#L3060 assume !(1 == ~doorState~0); 832357#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 832360#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 845165#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 845163#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 845164#L2344-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 845251#L2513-2 assume !(0 == ~currentFloorID~0); 845250#L2519-2 assume ~currentFloorID~0 > 0; 845249#L2520-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 845247#L128-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 845240#L155-26 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 845105#L2524-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 840773#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 844332#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 844328#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 835646#L2759 assume !(1 == ~currentHeading~0); 835647#L2769 assume !(0 == ~currentFloorID~0); 835321#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 835274#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 845344#L1507 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 845343#L2192-1 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 845341#L1511 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 845338#L1519 assume !(1 == ~expectedDirection~0); 842299#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 842297#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 842294#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 842291#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 842290#L1438-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 842289#L1448-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 842288#L1459-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 842283#L1470-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 842281#L1481-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 842279#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 842275#L2821-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 842273#L2140-3 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 842268#L2157-22 assume !(0 == buttonForFloorIsPressed_~floorID); 842266#L2161-22 assume !(1 == buttonForFloorIsPressed_~floorID); 842263#L2165-22 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 842259#L2178-22 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 842258#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 842256#L2969-1 assume !(0 != timeShift_~tmp___9~3); 842255#L3060-3 assume !(1 == ~doorState~0); 842254#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 842253#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 842248#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 842247#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 842243#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 842244#L2513-8 assume !(0 == ~currentFloorID~0); 843250#L2519-8 assume !(~currentFloorID~0 > 0); 843249#L2534-8 assume ~currentFloorID~0 > 0; 831617#L2536-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 831618#L2537-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 845762#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 845760#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 844326#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 844327#L2759-3 assume !(1 == ~currentHeading~0); 835275#L2769-9 assume !(0 == ~currentFloorID~0); 835276#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 835252#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 848684#L1507-1 assume !(-1 == ~expectedDirection~0); 848676#L1519-1 assume !(1 == ~expectedDirection~0); 848646#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 848645#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 848644#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 848643#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 842221#L1438-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 848639#L1448-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 848635#L1459-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 848625#L1470-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 848621#L1481-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 848614#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 848615#L2821-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 848610#L2140-5 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 848608#L2157-34 assume !(0 == buttonForFloorIsPressed_~floorID); 848606#L2161-34 assume !(1 == buttonForFloorIsPressed_~floorID); 848603#L2165-34 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 848600#L2178-34 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 848599#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 848597#L2969-2 assume !(0 != timeShift_~tmp___9~3); 848598#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 862779#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 862776#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 862772#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 862770#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 862768#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 862766#L2513-14 assume !(0 == ~currentFloorID~0); 862762#L2519-14 assume !(~currentFloorID~0 > 0); 862546#L2534-14 assume ~currentFloorID~0 > 0; 862545#L2536-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 862441#L2537-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 862440#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 862433#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 862434#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 835634#L2759-6 assume !(1 == ~currentHeading~0); 835635#L2769-18 assume !(0 == ~currentFloorID~0); 835584#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 860390#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 869522#L1507-2 assume !(-1 == ~expectedDirection~0); 869523#L1519-2 assume !(1 == ~expectedDirection~0); 865464#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 865957#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 865951#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 865950#L399-1 assume 0 == initPersonOnFloor_~floor; 865941#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 855220#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 855221#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 855181#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 855182#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 855166#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 855167#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 845771#L1438-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 855162#L1448-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 855159#L1459-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 855156#L1470-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 855153#L1481-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 855093#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 855094#L2821-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 855063#L2140-7 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 855061#L2157-46 assume !(0 == buttonForFloorIsPressed_~floorID); 855057#L2161-46 assume !(1 == buttonForFloorIsPressed_~floorID); 854189#L2165-46 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 854182#L2178-46 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 854145#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 854142#L2969-3 assume !(0 != timeShift_~tmp___9~3); 854140#L3060-9 assume !(1 == ~doorState~0); 854137#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 854133#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 854128#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 854126#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 854124#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 854125#L2513-20 assume !(0 == ~currentFloorID~0); 855186#L2519-20 assume !(~currentFloorID~0 > 0); 855183#L2534-20 assume ~currentFloorID~0 > 0; 855185#L2536-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 885939#L2537-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 885803#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 885801#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 885797#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 885798#L2759-9 assume !(1 == ~currentHeading~0); 883804#L2769-27 assume !(0 == ~currentFloorID~0); 835578#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 880352#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 886133#L1507-3 assume !(-1 == ~expectedDirection~0); 886132#L1519-3 assume !(1 == ~expectedDirection~0); 881413#L1520-3 cleanup_~i~2 := 0; 881411#L1683-2 [2018-11-28 11:03:21,227 INFO L796 eck$LassoCheckResult]: Loop: 881411#L1683-2 assume !false; 881409#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 881407#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 881405#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 881404#L1691 assume 1 != cleanup_~tmp___0~4; 881403#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 881400#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 881397#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 881391#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 881376#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 881361#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 881359#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 881357#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 881355#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 881353#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 845773#L1438-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 872198#L1448-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 872182#L1459-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 872174#L1470-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 872170#L1481-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 872166#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 872167#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 872186#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 877591#L2157-58 assume !(0 == buttonForFloorIsPressed_~floorID); 877590#L2161-58 assume !(1 == buttonForFloorIsPressed_~floorID); 877587#L2165-58 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 877573#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 871537#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 865863#L2969-4 assume !(0 != timeShift_~tmp___9~3); 865859#L3060-12 assume !(1 == ~doorState~0); 865857#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 865789#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 865785#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 865783#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 865784#L2344-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 895774#L2513-26 assume !(0 == ~currentFloorID~0); 892914#L2519-26 assume !(~currentFloorID~0 > 0); 889487#L2534-26 assume ~currentFloorID~0 > 0; 831467#L2536-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 831469#L2537-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 831744#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 890719#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 890720#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 835618#L2759-12 assume !(1 == ~currentHeading~0); 835619#L2769-36 assume !(0 == ~currentFloorID~0); 835453#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 839587#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 881419#L1507-4 assume !(-1 == ~expectedDirection~0); 881420#L1519-4 assume !(1 == ~expectedDirection~0); 881414#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 881411#L1683-2 [2018-11-28 11:03:21,234 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:03:21,234 INFO L82 PathProgramCache]: Analyzing trace with hash 1304447908, now seen corresponding path program 1 times [2018-11-28 11:03:21,236 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:03:21,236 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:03:21,236 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:21,237 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:03:21,237 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:21,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:03:21,321 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:03:21,321 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:03:21,321 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:03:21,321 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:03:21,321 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:03:21,322 INFO L82 PathProgramCache]: Analyzing trace with hash -1045823310, now seen corresponding path program 1 times [2018-11-28 11:03:21,322 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:03:21,322 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:03:21,322 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:21,322 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:03:21,323 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:21,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:03:21,397 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:03:21,397 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:03:21,397 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-28 11:03:21,398 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:03:21,398 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-28 11:03:21,398 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2018-11-28 11:03:21,398 INFO L87 Difference]: Start difference. First operand 70015 states and 127860 transitions. cyclomatic complexity: 57850 Second operand 8 states. [2018-11-28 11:03:26,108 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:03:26,108 INFO L93 Difference]: Finished difference Result 161851 states and 295572 transitions. [2018-11-28 11:03:26,108 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2018-11-28 11:03:26,108 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 161851 states and 295572 transitions. [2018-11-28 11:03:26,544 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 48303 [2018-11-28 11:03:26,899 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 161851 states to 161851 states and 295572 transitions. [2018-11-28 11:03:26,900 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 161851 [2018-11-28 11:03:27,002 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 161851 [2018-11-28 11:03:27,002 INFO L73 IsDeterministic]: Start isDeterministic. Operand 161851 states and 295572 transitions. [2018-11-28 11:03:27,078 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:03:27,078 INFO L705 BuchiCegarLoop]: Abstraction has 161851 states and 295572 transitions. [2018-11-28 11:03:27,163 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 161851 states and 295572 transitions. [2018-11-28 11:03:31,126 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 161851 to 83964. [2018-11-28 11:03:31,126 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 83964 states. [2018-11-28 11:03:31,220 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83964 states to 83964 states and 153757 transitions. [2018-11-28 11:03:31,220 INFO L728 BuchiCegarLoop]: Abstraction has 83964 states and 153757 transitions. [2018-11-28 11:03:31,220 INFO L608 BuchiCegarLoop]: Abstraction has 83964 states and 153757 transitions. [2018-11-28 11:03:31,220 INFO L442 BuchiCegarLoop]: ======== Iteration 11============ [2018-11-28 11:03:31,220 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 83964 states and 153757 transitions. [2018-11-28 11:03:31,378 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 24451 [2018-11-28 11:03:31,378 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:03:31,378 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:03:31,384 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:03:31,384 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:03:31,385 INFO L794 eck$LassoCheckResult]: Stem: 1067085#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string19.base, #t~string19.offset := #Ultimate.alloc(30);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(9);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(21);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(30);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(9);call #t~string24.base, #t~string24.offset := #Ultimate.alloc(21);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(30);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(9);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(25);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(30);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(9);call #t~string33.base, #t~string33.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(10);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1); 1067086#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 1072488#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 1072489#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 1066893#L1874 assume 0 != main_~tmp~15; 1066894#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1067570#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 1067571#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 1065348#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1065349#L399 assume 0 == initPersonOnFloor_~floor; 1065382#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1064371#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1069143#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1072500#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1072469#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1064889#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1064890#L1376 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1072276#L1438 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1065860#L2157-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1064058#L2178-5 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1064059#L1442 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1064167#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1065226#L2821 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1072468#L2140-1 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1065851#L2157-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1065423#L2161-10 assume !(1 == buttonForFloorIsPressed_~floorID); 1065424#L2165-10 assume !(2 == buttonForFloorIsPressed_~floorID); 1066407#L2169-10 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1064020#L2178-10 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1064021#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1076035#L2969 assume !(0 != timeShift_~tmp___9~3); 1064261#L3060 assume !(1 == ~doorState~0); 1064262#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1064265#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1064390#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1066440#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1066322#L2344-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1065709#L2513-2 assume !(0 == ~currentFloorID~0); 1065710#L2519-2 assume ~currentFloorID~0 > 0; 1066342#L2520-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1066343#L128-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1069005#L155-26 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1066271#L2524-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1063734#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1072531#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1076003#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1067617#L2759 assume !(1 == ~currentHeading~0); 1067293#L2769 assume !(0 == ~currentFloorID~0); 1067294#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1067252#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1073907#L1507 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1073906#L2192-1 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 1073904#L1511 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 1073894#L1519 assume !(1 == ~expectedDirection~0); 1073892#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1073891#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1073890#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1073889#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1073888#L1438-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1065846#L2157-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1065847#L2178-17 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1072823#L1442-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1072824#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1121138#L2821-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1121139#L2140-3 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1121146#L2157-22 assume !(0 == buttonForFloorIsPressed_~floorID); 1121144#L2161-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1063936#L2178-22 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1063937#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1121071#L2969-1 assume !(0 != timeShift_~tmp___9~3); 1064278#L3060-3 assume !(1 == ~doorState~0); 1064279#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1064282#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1064400#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1066442#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1066305#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1065677#L2513-8 assume !(0 == ~currentFloorID~0); 1065678#L2519-8 assume ~currentFloorID~0 > 0; 1066332#L2520-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1066333#L128-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1068744#L155-87 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1066244#L2524-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1063719#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1122965#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1122964#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1067604#L2759-3 assume !(1 == ~currentHeading~0); 1067253#L2769-9 assume !(0 == ~currentFloorID~0); 1067254#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1067230#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1100671#L1507-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1100662#L2192-4 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 1100069#L1511-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 1081969#L1519-1 assume !(1 == ~expectedDirection~0); 1079884#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1079883#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1079882#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1079881#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1073416#L1438-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1125035#L2157-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1125027#L2178-29 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1125024#L1442-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1065214#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1065215#L2821-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1072457#L2140-5 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1065787#L2157-34 assume !(0 == buttonForFloorIsPressed_~floorID); 1065788#L2161-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1128575#L2178-34 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1138646#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1138639#L2969-2 assume !(0 != timeShift_~tmp___9~3); 1064229#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1064230#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1064435#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1064436#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1066456#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1066457#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1065650#L2513-14 assume !(0 == ~currentFloorID~0); 1065651#L2519-14 assume ~currentFloorID~0 > 0; 1066374#L2520-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1146126#L128-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1068798#L155-148 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1068799#L2524-14 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1146095#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1146092#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1146091#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1146090#L2759-6 assume !(1 == ~currentHeading~0); 1146089#L2769-18 assume !(0 == ~currentFloorID~0); 1128611#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1071172#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1071173#L1507-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1124427#L2192-7 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 1128576#L1511-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 1124265#L1519-2 assume !(1 == ~expectedDirection~0); 1124262#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 1124256#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 1124250#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1124246#L399-1 assume 0 == initPersonOnFloor_~floor; 1124218#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1124173#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1124158#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1124156#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1100057#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1100058#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1093282#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1093283#L1438-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1076951#L2157-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1064235#L2178-41 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1064236#L1442-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1128644#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1128640#L2821-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1128641#L2140-7 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1139396#L2157-46 assume !(0 == buttonForFloorIsPressed_~floorID); 1139395#L2161-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1139390#L2178-46 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1139387#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1139386#L2969-3 assume !(0 != timeShift_~tmp___9~3); 1135764#L3060-9 assume !(1 == ~doorState~0); 1064200#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1064201#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1068302#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1068303#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1147153#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1147313#L2513-20 assume !(0 == ~currentFloorID~0); 1066360#L2519-20 assume ~currentFloorID~0 > 0; 1066361#L2520-20 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 1147285#L2534-20 assume ~currentFloorID~0 > 0; 1063407#L2536-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 1063409#L2537-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1147250#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1146299#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1146298#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1146297#L2759-9 assume !(1 == ~currentHeading~0); 1146296#L2769-27 assume !(0 == ~currentFloorID~0); 1071509#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1071492#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1139689#L1507-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1128769#L2192-10 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 1133146#L1511-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 1128763#L1519-3 assume !(1 == ~expectedDirection~0); 1128759#L1520-3 cleanup_~i~2 := 0; 1128758#L1683-2 [2018-11-28 11:03:31,394 INFO L796 eck$LassoCheckResult]: Loop: 1128758#L1683-2 assume !false; 1128757#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1068394#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1068395#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 1124266#L1691 assume 1 != cleanup_~tmp___0~4; 1124263#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1124259#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1124226#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 1124193#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1124172#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1124161#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 1124162#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1128713#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1098954#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1098955#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1088416#L1438-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1088410#L1448-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1088408#L1459-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1088393#L1470-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1088391#L1481-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1088389#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1088386#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1088384#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1088382#L2157-58 assume !(0 == buttonForFloorIsPressed_~floorID); 1088380#L2161-58 assume !(1 == buttonForFloorIsPressed_~floorID); 1088379#L2165-58 assume !(2 == buttonForFloorIsPressed_~floorID); 1088373#L2169-58 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1088356#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1088354#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1088351#L2969-4 assume !(0 != timeShift_~tmp___9~3); 1088348#L3060-12 assume !(1 == ~doorState~0); 1088345#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1088329#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1088326#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1088324#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1088320#L2344-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1088321#L2513-26 assume !(0 == ~currentFloorID~0); 1093221#L2519-26 assume !(~currentFloorID~0 > 0); 1093220#L2534-26 assume ~currentFloorID~0 > 0; 1063374#L2536-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 1063376#L2537-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1139747#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1139737#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1139735#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1139733#L2759-12 assume !(1 == ~currentHeading~0); 1087071#L2769-36 assume !(0 == ~currentFloorID~0); 1067434#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1087053#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1128771#L1507-4 assume !(-1 == ~expectedDirection~0); 1128770#L1519-4 assume !(1 == ~expectedDirection~0); 1128760#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 1128758#L1683-2 [2018-11-28 11:03:31,404 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:03:31,404 INFO L82 PathProgramCache]: Analyzing trace with hash -366081738, now seen corresponding path program 1 times [2018-11-28 11:03:31,404 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:03:31,404 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:03:31,405 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:31,405 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:03:31,405 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:31,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:03:31,467 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:03:31,470 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:03:31,470 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:03:31,470 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:03:31,470 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:03:31,470 INFO L82 PathProgramCache]: Analyzing trace with hash -965079974, now seen corresponding path program 1 times [2018-11-28 11:03:31,471 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:03:31,471 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:03:31,471 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:31,471 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:03:31,471 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:31,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:03:31,514 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:03:31,514 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:03:31,514 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-28 11:03:31,514 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:03:31,515 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-28 11:03:31,515 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2018-11-28 11:03:31,515 INFO L87 Difference]: Start difference. First operand 83964 states and 153757 transitions. cyclomatic complexity: 69798 Second operand 8 states. [2018-11-28 11:03:36,367 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:03:36,367 INFO L93 Difference]: Finished difference Result 182878 states and 334715 transitions. [2018-11-28 11:03:36,368 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2018-11-28 11:03:36,368 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 182878 states and 334715 transitions. [2018-11-28 11:03:36,864 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 53919 [2018-11-28 11:03:37,253 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 182878 states to 182878 states and 334715 transitions. [2018-11-28 11:03:37,254 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 182878 [2018-11-28 11:03:37,368 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 182878 [2018-11-28 11:03:37,368 INFO L73 IsDeterministic]: Start isDeterministic. Operand 182878 states and 334715 transitions. [2018-11-28 11:03:37,454 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:03:37,454 INFO L705 BuchiCegarLoop]: Abstraction has 182878 states and 334715 transitions. [2018-11-28 11:03:37,549 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182878 states and 334715 transitions. [2018-11-28 11:03:38,783 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182878 to 97787. [2018-11-28 11:03:38,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 97787 states. [2018-11-28 11:03:38,887 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97787 states to 97787 states and 179373 transitions. [2018-11-28 11:03:38,887 INFO L728 BuchiCegarLoop]: Abstraction has 97787 states and 179373 transitions. [2018-11-28 11:03:38,887 INFO L608 BuchiCegarLoop]: Abstraction has 97787 states and 179373 transitions. [2018-11-28 11:03:38,887 INFO L442 BuchiCegarLoop]: ======== Iteration 12============ [2018-11-28 11:03:38,887 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 97787 states and 179373 transitions. [2018-11-28 11:03:39,068 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 28213 [2018-11-28 11:03:39,068 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:03:39,068 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:03:39,075 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:03:39,075 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:03:39,075 INFO L794 eck$LassoCheckResult]: Stem: 1333921#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string19.base, #t~string19.offset := #Ultimate.alloc(30);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(9);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(21);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(30);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(9);call #t~string24.base, #t~string24.offset := #Ultimate.alloc(21);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(30);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(9);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(25);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(30);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(9);call #t~string33.base, #t~string33.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(10);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1); 1333922#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 1339188#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 1339189#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 1333729#L1874 assume 0 != main_~tmp~15; 1333730#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1334393#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 1334394#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 1332212#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1332213#L399 assume 0 == initPersonOnFloor_~floor; 1332246#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1331231#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1335944#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1339200#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1339169#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1331756#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1331757#L1376 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1339018#L1438 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1332707#L2157-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1330922#L2178-5 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1330923#L1442 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1331030#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1340912#L2821 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1340379#L2140-1 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1340377#L2157-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1340375#L2161-10 assume !(1 == buttonForFloorIsPressed_~floorID); 1340373#L2165-10 assume !(2 == buttonForFloorIsPressed_~floorID); 1340371#L2169-10 assume !(3 == buttonForFloorIsPressed_~floorID); 1340369#L2173-10 assume !(4 == buttonForFloorIsPressed_~floorID);buttonForFloorIsPressed_~retValue_acc~16 := 0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1340365#L2178-10 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1340364#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1340362#L2969 assume !(0 != timeShift_~tmp___9~3); 1340361#L3060 assume !(1 == ~doorState~0); 1340354#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1331251#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1331252#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1333296#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1333178#L2344-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1332561#L2513-2 assume !(0 == ~currentFloorID~0); 1332562#L2519-2 assume ~currentFloorID~0 > 0; 1333198#L2520-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1333199#L128-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1335816#L155-26 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1333126#L2524-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1330604#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1340931#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1340932#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1334439#L2759 assume !(1 == ~currentHeading~0); 1334129#L2769 assume !(0 == ~currentFloorID~0); 1334130#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1334088#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1340305#L1507 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1340264#L2192-1 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 1340261#L1511 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 1340259#L1519 assume !(1 == ~expectedDirection~0); 1340257#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1340256#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1340255#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1340254#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1340253#L1438-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1332690#L2157-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1332691#L2178-17 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1339509#L1442-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1339510#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1417134#L2821-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1417133#L2140-3 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1417132#L2157-22 assume !(0 == buttonForFloorIsPressed_~floorID); 1417130#L2161-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1417125#L2178-22 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1417123#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1417124#L2969-1 assume !(0 != timeShift_~tmp___9~3); 1423235#L3060-3 assume !(1 == ~doorState~0); 1423234#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1331261#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1331263#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1333298#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1333299#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1423195#L2513-8 assume !(0 == ~currentFloorID~0); 1423193#L2519-8 assume ~currentFloorID~0 > 0; 1423190#L2520-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1423191#L128-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1423203#L155-87 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1423181#L2524-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1423172#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1423167#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1423165#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1334427#L2759-3 assume !(1 == ~currentHeading~0); 1334089#L2769-9 assume !(0 == ~currentFloorID~0); 1334090#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1334066#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1386607#L1507-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1345916#L2192-4 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 1386602#L1511-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 1345900#L1519-1 assume !(1 == ~expectedDirection~0); 1343827#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1343826#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1343825#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1343824#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1340084#L1438-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1400919#L2157-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1400915#L2178-29 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1400912#L1442-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1400913#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1423421#L2821-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1339157#L2140-5 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1339158#L2157-34 assume !(0 == buttonForFloorIsPressed_~floorID); 1422760#L2161-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1422754#L2178-34 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1422753#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1422752#L2969-2 assume !(0 != timeShift_~tmp___9~3); 1397047#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1422751#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1422748#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1422744#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1422742#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1422740#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1422739#L2513-14 assume !(0 == ~currentFloorID~0); 1422738#L2519-14 assume ~currentFloorID~0 > 0; 1422736#L2520-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1422737#L128-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1422804#L155-148 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1422702#L2524-14 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1422683#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1422680#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1422679#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1422678#L2759-6 assume !(1 == ~currentHeading~0); 1422677#L2769-18 assume !(0 == ~currentFloorID~0); 1338289#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1338285#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1417249#L1507-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1417225#L2192-7 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 1417243#L1511-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 1417213#L1519-2 assume !(1 == ~expectedDirection~0); 1417211#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 1417210#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 1417200#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1417198#L399-1 assume 0 == initPersonOnFloor_~floor; 1417183#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1417094#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1386719#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1386717#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1398034#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1398033#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1398032#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1367907#L1438-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1396176#L2157-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1396172#L2178-41 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1396168#L1442-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1396169#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1408165#L2821-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1408164#L2140-7 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1408163#L2157-46 assume !(0 == buttonForFloorIsPressed_~floorID); 1408162#L2161-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1408158#L2178-46 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1408151#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1408149#L2969-3 assume !(0 != timeShift_~tmp___9~3); 1392431#L3060-9 assume !(1 == ~doorState~0); 1422359#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1422355#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1422352#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1422350#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1422349#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1422348#L2513-20 assume !(0 == ~currentFloorID~0); 1422347#L2519-20 assume ~currentFloorID~0 > 0; 1422346#L2520-20 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 1330718#L2534-20 assume ~currentFloorID~0 > 0; 1330287#L2536-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 1330289#L2537-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1330550#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1332087#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1332088#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1334411#L2759-9 assume !(1 == ~currentHeading~0); 1334412#L2769-27 assume !(0 == ~currentFloorID~0); 1338282#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1338272#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1417251#L1507-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1367318#L2192-10 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 1417245#L1511-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 1367312#L1519-3 assume !(1 == ~expectedDirection~0); 1367308#L1520-3 cleanup_~i~2 := 0; 1367307#L1683-2 [2018-11-28 11:03:39,084 INFO L796 eck$LassoCheckResult]: Loop: 1367307#L1683-2 assume !false; 1367305#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1367304#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1367300#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 1367298#L1691 assume 1 != cleanup_~tmp___0~4; 1367297#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1367294#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1367291#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 1367289#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1367275#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1367270#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 1367271#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1366554#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1366555#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1366550#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1366551#L1438-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1388849#L2157-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1388847#L2178-53 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1388844#L1442-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1388845#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1408918#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1408919#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1408924#L2157-58 assume !(0 == buttonForFloorIsPressed_~floorID); 1408923#L2161-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1408895#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1408893#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1408891#L2969-4 assume !(0 != timeShift_~tmp___9~3); 1331070#L3060-12 assume !(1 == ~doorState~0); 1331071#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1331072#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1331679#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1333285#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1333270#L2344-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1333271#L2513-26 assume !(0 == ~currentFloorID~0); 1388588#L2519-26 assume ~currentFloorID~0 > 0; 1388586#L2520-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1388574#L128-275 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1388565#L155-275 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1332815#L2524-26 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1330528#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1422614#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1422589#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1334416#L2759-12 assume !(1 == ~currentHeading~0); 1334417#L2769-36 assume !(0 == ~currentFloorID~0); 1338275#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1338265#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1417250#L1507-4 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1367321#L2192-13 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 1417246#L1511-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 1367311#L1519-4 assume !(1 == ~expectedDirection~0); 1367309#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 1367307#L1683-2 [2018-11-28 11:03:39,092 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:03:39,092 INFO L82 PathProgramCache]: Analyzing trace with hash 1870136300, now seen corresponding path program 1 times [2018-11-28 11:03:39,092 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:03:39,092 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:03:39,093 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:39,093 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:03:39,093 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:39,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:03:39,144 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:03:39,145 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:03:39,145 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:03:39,145 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:03:39,145 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:03:39,145 INFO L82 PathProgramCache]: Analyzing trace with hash 2068570898, now seen corresponding path program 1 times [2018-11-28 11:03:39,145 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:03:39,145 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:03:39,146 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:39,146 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:03:39,146 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:39,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:03:39,237 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:03:39,237 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:03:39,237 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 11:03:39,237 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:03:39,237 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-28 11:03:39,237 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2018-11-28 11:03:39,237 INFO L87 Difference]: Start difference. First operand 97787 states and 179373 transitions. cyclomatic complexity: 81591 Second operand 6 states. [2018-11-28 11:03:42,173 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:03:42,173 INFO L93 Difference]: Finished difference Result 418180 states and 777300 transitions. [2018-11-28 11:03:42,173 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-28 11:03:42,174 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 418180 states and 777300 transitions. [2018-11-28 11:03:43,485 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 122060 [2018-11-28 11:03:44,489 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 418180 states to 418180 states and 777300 transitions. [2018-11-28 11:03:44,490 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 418180 [2018-11-28 11:03:50,152 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 418180 [2018-11-28 11:03:50,152 INFO L73 IsDeterministic]: Start isDeterministic. Operand 418180 states and 777300 transitions. [2018-11-28 11:03:50,243 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:03:50,243 INFO L705 BuchiCegarLoop]: Abstraction has 418180 states and 777300 transitions. [2018-11-28 11:03:50,395 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 418180 states and 777300 transitions. [2018-11-28 11:03:51,705 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 418180 to 137912. [2018-11-28 11:03:51,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 137912 states. [2018-11-28 11:03:51,865 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 137912 states to 137912 states and 251256 transitions. [2018-11-28 11:03:51,865 INFO L728 BuchiCegarLoop]: Abstraction has 137912 states and 251256 transitions. [2018-11-28 11:03:51,866 INFO L608 BuchiCegarLoop]: Abstraction has 137912 states and 251256 transitions. [2018-11-28 11:03:51,866 INFO L442 BuchiCegarLoop]: ======== Iteration 13============ [2018-11-28 11:03:51,866 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 137912 states and 251256 transitions. [2018-11-28 11:03:52,137 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 39206 [2018-11-28 11:03:52,138 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:03:52,138 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:03:52,144 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:03:52,145 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:03:52,145 INFO L794 eck$LassoCheckResult]: Stem: 1849967#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string19.base, #t~string19.offset := #Ultimate.alloc(30);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(9);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(21);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(30);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(9);call #t~string24.base, #t~string24.offset := #Ultimate.alloc(21);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(30);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(9);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(25);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(30);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(9);call #t~string33.base, #t~string33.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(10);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1); 1849968#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 1855805#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 1855806#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 1849767#L1874 assume 0 != main_~tmp~15; 1849768#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1850463#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 1850464#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 1848274#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1848275#L399 assume 0 == initPersonOnFloor_~floor; 1848308#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1847277#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1852180#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1855815#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1855784#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1847823#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1847824#L1376 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1855592#L1438 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1848741#L2157-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1846958#L2178-5 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1846959#L1442 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1847066#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1857912#L2821 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1855782#L2140-1 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1855783#L2157-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1848349#L2161-10 assume !(1 == buttonForFloorIsPressed_~floorID); 1848350#L2165-10 assume !(2 == buttonForFloorIsPressed_~floorID); 1849309#L2169-10 assume !(3 == buttonForFloorIsPressed_~floorID); 1849310#L2173-10 assume !(4 == buttonForFloorIsPressed_~floorID);buttonForFloorIsPressed_~retValue_acc~16 := 0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1846920#L2178-10 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1846921#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1858932#L2969 assume !(0 != timeShift_~tmp___9~3); 1847162#L3060 assume !(1 == ~doorState~0); 1847163#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1847167#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1847296#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1849343#L2697 assume 0 != stopRequestedInDirection_~overload~0; 1849344#L2698 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1857715#L2344 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1857714#L2513 assume !(0 == ~currentFloorID~0); 1857713#L2519 assume ~currentFloorID~0 > 0; 1857711#L2520 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1857712#L128-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1857740#L155-6 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1857598#L2524 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1857179#L2666 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1857045#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1857039#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1857034#L2759 assume !(1 == ~currentHeading~0); 1857028#L2769 assume !(0 == ~currentFloorID~0); 1857023#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1857019#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1857015#L1507 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1857013#L2192-1 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 1857011#L1511 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 1857007#L1519 assume !(1 == ~expectedDirection~0); 1857005#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1857004#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1857003#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1857002#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1857000#L1438-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1857001#L2157-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1867661#L2178-17 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1867635#L1442-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1867636#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1867689#L2821-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1867690#L2140-3 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1868478#L2157-22 assume !(0 == buttonForFloorIsPressed_~floorID); 1868476#L2161-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1867543#L2178-22 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1867539#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1862953#L2969-1 assume !(0 != timeShift_~tmp___9~3); 1859934#L3060-3 assume !(1 == ~doorState~0); 1859933#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1847305#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1847307#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1849348#L2697-2 assume 0 != stopRequestedInDirection_~overload~0; 1849349#L2698-2 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1861846#L2344-6 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1862817#L2513-6 assume !(0 == ~currentFloorID~0); 1861904#L2519-6 assume ~currentFloorID~0 > 0; 1849215#L2520-6 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1849216#L128-67 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1852213#L155-67 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1852214#L2524-6 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1862608#L2666-6 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1862605#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1862603#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1862600#L2759-3 assume !(1 == ~currentHeading~0); 1862598#L2769-9 assume !(0 == ~currentFloorID~0); 1862595#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1862593#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1862592#L1507-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1862589#L2192-4 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 1862590#L1511-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 1862579#L1519-1 assume !(1 == ~expectedDirection~0); 1862578#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1862397#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1862398#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1862159#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1859844#L1438-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1922267#L2157-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1922227#L2178-29 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1922192#L1442-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1922193#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1940356#L2821-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1934760#L2140-5 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1940355#L2157-34 assume !(0 == buttonForFloorIsPressed_~floorID); 1940354#L2161-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1940349#L2178-34 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1940347#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1940348#L2969-2 assume !(0 != timeShift_~tmp___9~3); 1847127#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1847128#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1847149#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1847343#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1849364#L2697-4 assume 0 != stopRequestedInDirection_~overload~0; 1849098#L2698-4 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1849099#L2344-12 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1848596#L2513-12 assume !(0 == ~currentFloorID~0); 1848597#L2519-12 assume ~currentFloorID~0 > 0; 1849193#L2520-12 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1849194#L128-128 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1854627#L155-128 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1874545#L2524-12 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1874533#L2666-12 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1874531#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1874532#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1913305#L2759-6 assume !(1 == ~currentHeading~0); 1850131#L2769-18 assume !(0 == ~currentFloorID~0); 1850132#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1854729#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1913885#L1507-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1913886#L2192-7 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 1958769#L1511-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 1958767#L1519-2 assume !(1 == ~expectedDirection~0); 1958763#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 1958762#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 1958756#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1958755#L399-1 assume 0 == initPersonOnFloor_~floor; 1958745#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1958720#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1958717#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1958713#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1958711#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1958707#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1958702#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1910203#L1438-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1910204#L2157-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1848913#L2178-41 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1963997#L1442-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1963998#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1964071#L2821-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1964039#L2140-7 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1964035#L2157-46 assume !(0 == buttonForFloorIsPressed_~floorID); 1964033#L2161-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1964023#L2178-46 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1964022#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1915038#L2969-3 assume !(0 != timeShift_~tmp___9~3); 1915037#L3060-9 assume !(1 == ~doorState~0); 1914508#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1914501#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1914498#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1914497#L2697-6 assume 0 != stopRequestedInDirection_~overload~0; 1914495#L2698-6 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1914493#L2344-18 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1914492#L2513-18 assume !(0 == ~currentFloorID~0); 1914491#L2519-18 assume ~currentFloorID~0 > 0; 1914489#L2520-18 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1914490#L128-189 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1914560#L155-189 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1849123#L2524-18 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1846540#L2666-18 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1914354#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1914352#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1914351#L2759-9 assume !(1 == ~currentHeading~0); 1854730#L2769-27 assume !(0 == ~currentFloorID~0); 1854724#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1854713#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1915267#L1507-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1914278#L2192-10 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 1915260#L1511-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 1914270#L1519-3 assume !(1 == ~expectedDirection~0); 1914265#L1520-3 cleanup_~i~2 := 0; 1914263#L1683-2 [2018-11-28 11:03:52,156 INFO L796 eck$LassoCheckResult]: Loop: 1914263#L1683-2 assume !false; 1914262#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1914258#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1914256#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 1914255#L1691 assume 1 != cleanup_~tmp___0~4; 1914254#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1914247#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1914243#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 1914242#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1914228#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1914221#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 1914219#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1914218#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1914217#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1914215#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1914216#L1438-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1945078#L2157-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1953553#L2178-53 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1953551#L1442-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1953552#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1955964#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1952392#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1955955#L2157-58 assume !(0 == buttonForFloorIsPressed_~floorID); 1955952#L2161-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1955947#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1955946#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1955944#L2969-4 assume !(0 != timeShift_~tmp___9~3); 1910621#L3060-12 assume !(1 == ~doorState~0); 1905157#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1904942#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1904029#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1904019#L2697-8 assume 0 != stopRequestedInDirection_~overload~0; 1904017#L2698-8 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1904018#L2344-24 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1904655#L2513-24 assume !(0 == ~currentFloorID~0); 1904654#L2519-24 assume ~currentFloorID~0 > 0; 1904649#L2520-24 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1904650#L128-255 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1904688#L155-255 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1904571#L2524-24 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1903973#L2666-24 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1903971#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1903972#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1903167#L2759-12 assume !(1 == ~currentHeading~0); 1903168#L2769-36 assume !(0 == ~currentFloorID~0); 1854716#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1854707#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1945365#L1507-4 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1914275#L2192-13 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 1945360#L1511-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 1914268#L1519-4 assume !(1 == ~expectedDirection~0); 1914266#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 1914263#L1683-2 [2018-11-28 11:03:52,165 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:03:52,165 INFO L82 PathProgramCache]: Analyzing trace with hash 102123588, now seen corresponding path program 1 times [2018-11-28 11:03:52,166 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:03:52,166 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:03:52,166 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:52,166 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:03:52,166 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:52,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:03:52,221 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:03:52,221 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:03:52,221 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:03:52,221 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:03:52,221 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:03:52,222 INFO L82 PathProgramCache]: Analyzing trace with hash -1898208802, now seen corresponding path program 1 times [2018-11-28 11:03:52,222 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:03:52,222 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:03:52,222 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:52,222 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:03:52,222 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:52,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:03:52,245 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:03:52,245 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:03:52,245 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 11:03:52,245 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:03:52,246 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-28 11:03:52,246 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-28 11:03:52,246 INFO L87 Difference]: Start difference. First operand 137912 states and 251256 transitions. cyclomatic complexity: 113349 Second operand 3 states. [2018-11-28 11:03:53,413 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:03:53,413 INFO L93 Difference]: Finished difference Result 245757 states and 450627 transitions. [2018-11-28 11:03:53,414 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-28 11:03:53,414 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 245757 states and 450627 transitions. [2018-11-28 11:03:54,523 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 71590 [2018-11-28 11:03:54,988 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 245757 states to 245757 states and 450627 transitions. [2018-11-28 11:03:54,988 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 245757 [2018-11-28 11:03:55,103 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 245757 [2018-11-28 11:03:55,103 INFO L73 IsDeterministic]: Start isDeterministic. Operand 245757 states and 450627 transitions. [2018-11-28 11:03:55,194 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:03:55,194 INFO L705 BuchiCegarLoop]: Abstraction has 245757 states and 450627 transitions. [2018-11-28 11:03:55,291 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 245757 states and 450627 transitions. [2018-11-28 11:03:56,305 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 245757 to 136974. [2018-11-28 11:03:56,305 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 136974 states. [2018-11-28 11:03:56,469 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 136974 states to 136974 states and 249436 transitions. [2018-11-28 11:03:56,469 INFO L728 BuchiCegarLoop]: Abstraction has 136974 states and 249436 transitions. [2018-11-28 11:03:56,469 INFO L608 BuchiCegarLoop]: Abstraction has 136974 states and 249436 transitions. [2018-11-28 11:03:56,469 INFO L442 BuchiCegarLoop]: ======== Iteration 14============ [2018-11-28 11:03:56,469 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 136974 states and 249436 transitions. [2018-11-28 11:03:56,736 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 38982 [2018-11-28 11:03:56,736 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:03:56,736 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:03:56,741 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:03:56,741 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:03:56,742 INFO L794 eck$LassoCheckResult]: Stem: 2233566#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string19.base, #t~string19.offset := #Ultimate.alloc(30);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(9);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(21);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(30);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(9);call #t~string24.base, #t~string24.offset := #Ultimate.alloc(21);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(30);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(9);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(25);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(30);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(9);call #t~string33.base, #t~string33.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(10);call #t~string135.base, #t~string135.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1); 2233567#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 2238683#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 2238684#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 2233378#L1874 assume 0 != main_~tmp~15; 2233379#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2234047#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 2234048#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 2231925#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2231926#L399 assume 0 == initPersonOnFloor_~floor; 2231959#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2230921#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2235659#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2238694#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2238663#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2231469#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 2231470#L1376 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2238485#L1438 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2232388#L2157-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2230602#L2178-5 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 2230603#L1442 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 2230711#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 2231806#L2821 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2238662#L2140-1 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2232376#L2157-10 assume !(0 == buttonForFloorIsPressed_~floorID); 2231999#L2161-10 assume !(1 == buttonForFloorIsPressed_~floorID); 2232000#L2165-10 assume !(2 == buttonForFloorIsPressed_~floorID); 2232945#L2169-10 assume !(3 == buttonForFloorIsPressed_~floorID); 2232456#L2173-10 assume !(4 == buttonForFloorIsPressed_~floorID);buttonForFloorIsPressed_~retValue_acc~16 := 0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2230564#L2178-10 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2230565#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 2239886#L2969 assume !(0 != timeShift_~tmp___9~3); 2230807#L3060 assume !(1 == ~doorState~0); 2230808#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 2230812#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 2230942#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2232983#L2697 assume 0 != stopRequestedInDirection_~overload~0; 2232940#L2698 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 2232850#L2344 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 2232851#L2513 assume !(0 == ~currentFloorID~0); 2233066#L2519 assume ~currentFloorID~0 > 0; 2233067#L2520 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 2230314#L2534 assume ~currentFloorID~0 > 0; 2230083#L2536 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 2230085#L2537 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 2230275#L2666 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2242593#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 2242594#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2234096#L2759 assume !(1 == ~currentHeading~0); 2233778#L2769 assume !(0 == ~currentFloorID~0); 2233779#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2233734#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 2241551#L1507 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2241549#L2192-1 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 2241547#L1511 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 2241542#L1519 assume !(1 == ~expectedDirection~0); 2241540#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2241539#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2241538#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 2241537#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2241535#L1438-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2241536#L2157-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2290510#L2178-17 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 2290508#L1442-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 2290509#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 2352293#L2821-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2249297#L2140-3 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2352300#L2157-22 assume !(0 == buttonForFloorIsPressed_~floorID); 2352298#L2161-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2352295#L2178-22 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2352294#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 2352268#L2969-1 assume !(0 != timeShift_~tmp___9~3); 2282474#L3060-3 assume !(1 == ~doorState~0); 2282473#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 2282275#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 2234812#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2234813#L2697-2 assume 0 != stopRequestedInDirection_~overload~0; 2282182#L2698-2 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 2232812#L2344-6 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 2232255#L2513-6 assume !(0 == ~currentFloorID~0); 2232256#L2519-6 assume ~currentFloorID~0 > 0; 2232848#L2520-6 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 2232849#L2534-6 assume ~currentFloorID~0 > 0; 2230053#L2536-6 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 2230054#L2537-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 2230250#L2666-6 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2251309#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 2251310#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2282165#L2759-3 assume !(1 == ~currentHeading~0); 2282550#L2769-9 assume !(0 == ~currentFloorID~0); 2233737#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2233714#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 2289959#L1507-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2281620#L2192-4 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 2289956#L1511-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 2289957#L1519-1 assume !(1 == ~expectedDirection~0); 2309621#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2309619#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2309617#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 2309613#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2243336#L1438-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2309597#L2157-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2309596#L2178-29 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 2309594#L1442-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 2309590#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 2309587#L2821-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2309588#L2140-5 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2309643#L2157-34 assume !(0 == buttonForFloorIsPressed_~floorID); 2309641#L2161-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2309559#L2178-34 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2309557#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 2309554#L2969-2 assume !(0 != timeShift_~tmp___9~3); 2309551#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 2309550#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 2309548#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 2309217#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2309216#L2697-4 assume 0 != stopRequestedInDirection_~overload~0; 2309213#L2698-4 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 2309210#L2344-12 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 2309208#L2513-12 assume !(0 == ~currentFloorID~0); 2309206#L2519-12 assume ~currentFloorID~0 > 0; 2309204#L2520-12 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 2309195#L2534-12 assume ~currentFloorID~0 > 0; 2309187#L2536-12 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 2309178#L2537-12 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 2309163#L2666-12 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2309162#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 2309161#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2309160#L2759-6 assume !(1 == ~currentHeading~0); 2309159#L2769-18 assume !(0 == ~currentFloorID~0); 2237813#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2237804#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 2308165#L1507-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2307436#L2192-7 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 2308107#L1511-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 2306017#L1519-2 assume !(1 == ~expectedDirection~0); 2304647#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 2304629#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 2294450#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2294449#L399-1 assume 0 == initPersonOnFloor_~floor; 2294438#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2294413#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2294410#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2294407#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2294406#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2294405#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 2294399#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2290024#L1438-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2294391#L2157-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2294389#L2178-41 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 2294387#L1442-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 2294386#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 2294384#L2821-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2294385#L2140-7 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2294559#L2157-46 assume !(0 == buttonForFloorIsPressed_~floorID); 2294558#L2161-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2294554#L2178-46 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2294553#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 2294359#L2969-3 assume !(0 != timeShift_~tmp___9~3); 2288234#L3060-9 assume !(1 == ~doorState~0); 2288233#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 2288230#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 2288227#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2288226#L2697-6 assume 0 != stopRequestedInDirection_~overload~0; 2288223#L2698-6 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 2288220#L2344-18 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 2288218#L2513-18 assume !(0 == ~currentFloorID~0); 2288216#L2519-18 assume ~currentFloorID~0 > 0; 2288212#L2520-18 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 2288203#L2534-18 assume ~currentFloorID~0 > 0; 2288195#L2536-18 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 2288184#L2537-18 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 2288174#L2666-18 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2288171#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 2288167#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2288163#L2759-9 assume !(1 == ~currentHeading~0); 2288009#L2769-27 assume !(0 == ~currentFloorID~0); 2237794#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2237780#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 2288770#L1507-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2287221#L2192-10 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 2287291#L1511-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 2287194#L1519-3 assume !(1 == ~expectedDirection~0); 2287195#L1520-3 cleanup_~i~2 := 0; 2291682#L1683-2 [2018-11-28 11:03:56,749 INFO L796 eck$LassoCheckResult]: Loop: 2291682#L1683-2 assume !false; 2291681#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2291680#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2291679#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 2291678#L1691 assume 1 != cleanup_~tmp___0~4; 2291677#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2291674#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2291671#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 2291670#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 2291663#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2291662#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 2280275#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2280276#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2280265#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 2280266#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2291592#L1438-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2291561#L2157-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2291559#L2178-53 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 2291556#L1442-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 2291557#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 2321215#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2321199#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2321197#L2157-58 assume !(0 == buttonForFloorIsPressed_~floorID); 2321193#L2161-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2320883#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2320884#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 2357542#L2969-4 assume !(0 != timeShift_~tmp___9~3); 2230752#L3060-12 assume !(1 == ~doorState~0); 2230753#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 2230754#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 2231389#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2232968#L2697-8 assume 0 != stopRequestedInDirection_~overload~0; 2232707#L2698-8 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 2232708#L2344-24 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 2231968#L2513-24 assume !(0 == ~currentFloorID~0); 2231969#L2519-24 assume ~currentFloorID~0 > 0; 2232903#L2520-24 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 2289071#L2534-24 assume ~currentFloorID~0 > 0; 2289064#L2536-24 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 2289054#L2537-24 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 2289042#L2666-24 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2289040#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 2289036#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2289034#L2759-12 assume !(1 == ~currentHeading~0); 2289032#L2769-36 assume !(0 == ~currentFloorID~0); 2289029#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2289028#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 2289026#L1507-4 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2289027#L2192-13 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 2291686#L1511-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 2291685#L1519-4 assume !(1 == ~expectedDirection~0); 2291683#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 2291682#L1683-2 [2018-11-28 11:03:56,758 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:03:56,759 INFO L82 PathProgramCache]: Analyzing trace with hash 609389598, now seen corresponding path program 1 times [2018-11-28 11:03:56,759 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:03:56,759 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:03:56,759 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:56,759 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:03:56,759 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:56,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:03:56,802 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:03:56,802 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:03:56,802 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:03:56,802 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:03:56,802 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:03:56,802 INFO L82 PathProgramCache]: Analyzing trace with hash -2030143775, now seen corresponding path program 1 times [2018-11-28 11:03:56,802 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:03:56,803 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:03:56,803 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:56,803 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:03:56,803 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:03:56,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-28 11:03:56,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-28 11:03:57,596 WARN L180 SmtUtils]: Spent 734.00 ms on a formula simplification. DAG size of input: 232 DAG size of output: 200 [2018-11-28 11:03:59,228 WARN L180 SmtUtils]: Spent 1.58 s on a formula simplification. DAG size of input: 220 DAG size of output: 177 [2018-11-28 11:03:59,236 INFO L216 LassoAnalysis]: Preferences: [2018-11-28 11:03:59,237 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-28 11:03:59,237 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-28 11:03:59,237 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-28 11:03:59,237 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-11-28 11:03:59,237 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:03:59,237 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-28 11:03:59,237 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-28 11:03:59,237 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product29_true-unreach-call_true-termination.cil.c_Iteration14_Loop [2018-11-28 11:03:59,238 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-28 11:03:59,238 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-28 11:03:59,282 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,293 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,296 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,297 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,298 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,299 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,308 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,313 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,320 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,324 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,326 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,328 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,333 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,341 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,342 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,356 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,361 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,366 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,367 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,369 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,375 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,379 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,383 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,388 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,394 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,395 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,400 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,401 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,402 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,403 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,407 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,420 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,422 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,423 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,424 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,425 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,427 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,435 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,437 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,438 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,448 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,449 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,462 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,465 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,469 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,471 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,472 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,475 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,481 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,484 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,488 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,490 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,491 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,492 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,494 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,495 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,517 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,521 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,526 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,537 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,541 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,545 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,548 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,553 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,570 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,575 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,579 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,584 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,586 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,588 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,589 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,596 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,608 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,612 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,615 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,617 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,618 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,620 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,621 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,693 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,696 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,703 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,704 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,708 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,709 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,710 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,711 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,713 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,716 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,723 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,724 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,725 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,726 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,727 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,728 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,728 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,731 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,732 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,734 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,738 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,739 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,745 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,746 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,751 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,752 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,753 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,754 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,755 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,779 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:03:59,788 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:00,071 WARN L138 XnfTransformerHelper]: expecting exponential blowup for input size 6 [2018-11-28 11:04:00,324 WARN L180 SmtUtils]: Spent 142.00 ms on a formula simplification. DAG size of input: 50 DAG size of output: 48 [2018-11-28 11:04:00,454 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-28 11:04:00,454 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:00,462 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:00,462 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:00,468 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:04:00,468 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~respectFloorCalls=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~respectFloorCalls=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:00,485 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:00,485 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:00,488 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:04:00,488 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:00,509 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:00,509 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:00,512 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:04:00,512 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___6~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___6~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:00,529 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:00,529 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:00,532 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:04:00,532 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:00,564 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:00,564 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:00,569 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:04:00,569 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret52=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret52=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:00,606 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:00,606 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:00,612 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:04:00,613 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~tmp~23=0} Honda state: {ULTIMATE.start_continueInDirection_~tmp~23=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:00,642 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:00,642 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:00,645 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:04:00,645 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret91=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret91=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:00,671 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:00,671 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:00,673 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:04:00,673 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~doorState~0=4} Honda state: {~doorState~0=4} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:00,695 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:00,696 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:00,700 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:04:00,701 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___0~7=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___0~7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:00,721 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:00,721 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:00,723 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:04:00,723 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___9~1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___9~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:00,741 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:00,741 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:00,745 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:04:00,745 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___1~5=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___1~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:00,765 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:00,765 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:00,767 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:04:00,767 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret114=0} Honda state: {ULTIMATE.start_timeShift_#t~ret114=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:00,783 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:00,783 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:00,786 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:04:00,786 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret79=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret79=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:00,802 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:00,802 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:00,804 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:04:00,804 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret47=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret47=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:00,820 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:00,820 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:00,822 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:04:00,822 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret63=0} Honda state: {ULTIMATE.start_cleanup_#t~ret63=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:00,841 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:00,842 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:00,845 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:04:00,845 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~expectedDirection~0=-1} Honda state: {~expectedDirection~0=-1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:00,865 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:00,865 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:00,867 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:04:00,867 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:01,065 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:01,065 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:01,067 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:04:01,067 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret85=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret85=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:01,084 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:01,084 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:01,088 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:04:01,089 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___2~3=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___2~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:01,105 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:01,105 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:01,111 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:04:01,111 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_buttonForFloorIsPressed_#res=0, ~floorButtons_1~0=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~9=0, ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~16=0} Honda state: {ULTIMATE.start_buttonForFloorIsPressed_#res=0, ~floorButtons_1~0=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~9=0, ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~16=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:01,145 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:01,145 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:01,148 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:04:01,149 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___2~5=0} Honda state: {ULTIMATE.start_timeShift_~tmp___2~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:01,173 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:01,173 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:01,179 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:04:01,179 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret90=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret90=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:01,207 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:04:01,207 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_6ac8daa9-f286-470c-bcc1-815524d85586/bin-2019/uautomizer/z3 Starting monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:01,224 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-11-28 11:04:01,224 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:04:01,682 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-11-28 11:04:01,683 INFO L216 LassoAnalysis]: Preferences: [2018-11-28 11:04:01,683 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-28 11:04:01,683 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-28 11:04:01,683 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-28 11:04:01,683 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-11-28 11:04:01,683 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:04:01,684 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-28 11:04:01,684 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-28 11:04:01,684 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product29_true-unreach-call_true-termination.cil.c_Iteration14_Loop [2018-11-28 11:04:01,684 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-28 11:04:01,684 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-28 11:04:01,693 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,709 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,716 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,720 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,721 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,722 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,723 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,724 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,725 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,726 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,727 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,728 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,729 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,730 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,731 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,733 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,734 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,735 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,741 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,749 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,754 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,756 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,757 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,806 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,811 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,816 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,820 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,823 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,828 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,832 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,836 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,840 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,842 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,847 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,848 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,852 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,854 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,855 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,856 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,857 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,858 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,858 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,864 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,865 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,881 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,885 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,886 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,888 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,888 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,889 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,890 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,906 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,908 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,909 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,910 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,923 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,924 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,925 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:01,926 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,003 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,004 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,009 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,010 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,017 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,020 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,024 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,029 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,030 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,031 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,032 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,033 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,035 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,036 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,037 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,038 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,039 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,040 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,041 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,044 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,045 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,046 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,047 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,072 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,074 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,078 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,079 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,080 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,081 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,083 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,086 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,087 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,088 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,096 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,097 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,098 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,099 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,100 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,101 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,102 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,107 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,108 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,109 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,113 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,114 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,115 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,116 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,117 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,118 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,119 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,120 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:04:02,431 WARN L138 XnfTransformerHelper]: expecting exponential blowup for input size 6 [2018-11-28 11:04:02,733 WARN L180 SmtUtils]: Spent 139.00 ms on a formula simplification. DAG size of input: 49 DAG size of output: 47 [2018-11-28 11:04:02,798 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-28 11:04:02,802 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-11-28 11:04:02,803 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,805 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,805 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,805 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,805 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:04:02,805 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,807 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:04:02,807 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,809 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:04:02,809 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,810 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,810 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,810 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,810 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:04:02,810 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,810 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:04:02,810 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,811 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:04:02,811 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,811 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,811 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,811 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,811 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:04:02,811 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,812 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:04:02,812 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,812 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:04:02,812 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,813 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,813 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,813 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,813 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:04:02,813 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,813 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:04:02,813 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,814 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:04:02,814 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,814 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,814 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,815 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,815 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:04:02,815 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,815 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:04:02,815 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,816 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:04:02,816 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,816 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,817 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,817 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,817 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:04:02,817 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,817 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:04:02,817 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,818 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:04:02,818 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,818 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,818 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,819 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,819 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:04:02,819 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,819 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:04:02,819 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,820 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:04:02,820 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,820 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,821 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,821 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,821 INFO L206 nArgumentSynthesizer]: 2 loop disjuncts [2018-11-28 11:04:02,821 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,821 INFO L402 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2018-11-28 11:04:02,822 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,822 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:04:02,822 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,823 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,823 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,823 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,823 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:04:02,823 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,824 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:04:02,824 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,824 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:04:02,824 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,825 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,825 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,825 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,825 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:04:02,825 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,826 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:04:02,826 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,826 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:04:02,827 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,827 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,827 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,827 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,827 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:04:02,827 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,828 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:04:02,828 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,828 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:04:02,829 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,829 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,829 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,829 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,829 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:04:02,829 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,830 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:04:02,830 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,830 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:04:02,831 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,831 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,831 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,831 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,831 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:04:02,832 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,832 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:04:02,832 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,833 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:04:02,833 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,833 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,833 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,833 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,833 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:04:02,834 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,834 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:04:02,834 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,834 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:04:02,835 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,835 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,835 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,835 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,835 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:04:02,835 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,836 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:04:02,836 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,836 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:04:02,837 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,837 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,837 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,837 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,837 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:04:02,837 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,838 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:04:02,838 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,838 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:04:02,839 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,839 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,839 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,839 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,839 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:04:02,839 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,840 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:04:02,840 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,840 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:04:02,840 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,841 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,841 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,841 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,841 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:04:02,841 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,842 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:04:02,842 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,842 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:04:02,842 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,843 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,843 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,843 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,843 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:04:02,843 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,843 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:04:02,843 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,844 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:04:02,844 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,845 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,845 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,845 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,845 INFO L206 nArgumentSynthesizer]: 2 loop disjuncts [2018-11-28 11:04:02,845 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,846 INFO L402 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2018-11-28 11:04:02,847 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,849 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:04:02,849 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,850 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,850 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,850 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,850 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:04:02,850 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,851 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:04:02,851 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,851 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:04:02,852 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,852 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,852 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,852 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,852 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:04:02,852 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,853 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:04:02,853 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,853 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:04:02,854 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:04:02,854 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:04:02,854 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:04:02,854 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:04:02,854 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:04:02,855 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:04:02,855 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:04:02,855 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:04:02,857 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-11-28 11:04:02,859 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2018-11-28 11:04:02,860 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-11-28 11:04:02,861 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-11-28 11:04:02,862 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-11-28 11:04:02,862 INFO L518 LassoAnalysis]: Proved termination. [2018-11-28 11:04:02,862 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~2) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~2 Supporting invariants [] [2018-11-28 11:04:02,863 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-11-28 11:04:02,974 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:04:03,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:04:03,169 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-28 11:04:03,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:04:03,231 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-28 11:04:03,491 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:04:03,495 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2018-11-28 11:04:03,496 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 136974 states and 249436 transitions. cyclomatic complexity: 112467 Second operand 5 states. [2018-11-28 11:04:04,738 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 136974 states and 249436 transitions. cyclomatic complexity: 112467. Second operand 5 states. Result 175955 states and 320126 transitions. Complement of second has 8 states. [2018-11-28 11:04:04,739 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2018-11-28 11:04:04,739 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-28 11:04:04,752 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 14716 transitions. [2018-11-28 11:04:04,754 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 14716 transitions. Stem has 184 letters. Loop has 52 letters. [2018-11-28 11:04:04,756 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-28 11:04:04,756 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 14716 transitions. Stem has 236 letters. Loop has 52 letters. [2018-11-28 11:04:04,757 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-28 11:04:04,757 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 14716 transitions. Stem has 184 letters. Loop has 104 letters. [2018-11-28 11:04:04,758 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-28 11:04:04,759 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 175955 states and 320126 transitions. [2018-11-28 11:04:05,255 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-28 11:04:05,255 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 175955 states to 0 states and 0 transitions. [2018-11-28 11:04:05,255 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-28 11:04:05,255 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-28 11:04:05,255 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-28 11:04:05,255 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:04:05,255 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-28 11:04:05,255 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-28 11:04:05,255 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-28 11:04:05,255 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-28 11:04:05,255 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 4 states. [2018-11-28 11:04:05,256 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:04:05,256 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2018-11-28 11:04:05,256 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-11-28 11:04:05,256 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2018-11-28 11:04:05,256 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-28 11:04:05,256 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2018-11-28 11:04:05,256 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-28 11:04:05,256 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-28 11:04:05,256 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-28 11:04:05,256 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:04:05,256 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-28 11:04:05,256 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-28 11:04:05,256 INFO L608 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-28 11:04:05,256 INFO L442 BuchiCegarLoop]: ======== Iteration 15============ [2018-11-28 11:04:05,256 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2018-11-28 11:04:05,256 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-28 11:04:05,256 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2018-11-28 11:04:05,260 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 28.11 11:04:05 BoogieIcfgContainer [2018-11-28 11:04:05,261 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2018-11-28 11:04:05,261 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-28 11:04:05,261 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-28 11:04:05,261 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-28 11:04:05,261 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 11:02:27" (3/4) ... [2018-11-28 11:04:05,264 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-28 11:04:05,264 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-28 11:04:05,265 INFO L168 Benchmark]: Toolchain (without parser) took 106957.19 ms. Allocated memory was 1.0 GB in the beginning and 5.4 GB in the end (delta: 4.4 GB). Free memory was 950.6 MB in the beginning and 2.0 GB in the end (delta: -999.5 MB). Peak memory consumption was 3.4 GB. Max. memory is 11.5 GB. [2018-11-28 11:04:05,265 INFO L168 Benchmark]: CDTParser took 0.16 ms. Allocated memory is still 1.0 GB. Free memory is still 979.6 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-28 11:04:05,265 INFO L168 Benchmark]: CACSL2BoogieTranslator took 574.73 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 115.9 MB). Free memory was 950.6 MB in the beginning and 1.1 GB in the end (delta: -126.5 MB). Peak memory consumption was 39.6 MB. Max. memory is 11.5 GB. [2018-11-28 11:04:05,266 INFO L168 Benchmark]: Boogie Procedure Inliner took 270.06 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 984.7 MB in the end (delta: 92.4 MB). Peak memory consumption was 92.4 MB. Max. memory is 11.5 GB. [2018-11-28 11:04:05,266 INFO L168 Benchmark]: Boogie Preprocessor took 311.13 ms. Allocated memory is still 1.1 GB. Free memory was 984.7 MB in the beginning and 902.5 MB in the end (delta: 82.3 MB). Peak memory consumption was 82.3 MB. Max. memory is 11.5 GB. [2018-11-28 11:04:05,267 INFO L168 Benchmark]: RCFGBuilder took 7703.32 ms. Allocated memory was 1.1 GB in the beginning and 1.7 GB in the end (delta: 566.2 MB). Free memory was 902.5 MB in the beginning and 851.4 MB in the end (delta: 51.0 MB). Peak memory consumption was 617.2 MB. Max. memory is 11.5 GB. [2018-11-28 11:04:05,267 INFO L168 Benchmark]: BuchiAutomizer took 98091.45 ms. Allocated memory was 1.7 GB in the beginning and 5.4 GB in the end (delta: 3.7 GB). Free memory was 851.4 MB in the beginning and 2.0 GB in the end (delta: -1.1 GB). Peak memory consumption was 2.6 GB. Max. memory is 11.5 GB. [2018-11-28 11:04:05,267 INFO L168 Benchmark]: Witness Printer took 3.23 ms. Allocated memory is still 5.4 GB. Free memory is still 2.0 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-28 11:04:05,269 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16 ms. Allocated memory is still 1.0 GB. Free memory is still 979.6 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 574.73 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 115.9 MB). Free memory was 950.6 MB in the beginning and 1.1 GB in the end (delta: -126.5 MB). Peak memory consumption was 39.6 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 270.06 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 984.7 MB in the end (delta: 92.4 MB). Peak memory consumption was 92.4 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 311.13 ms. Allocated memory is still 1.1 GB. Free memory was 984.7 MB in the beginning and 902.5 MB in the end (delta: 82.3 MB). Peak memory consumption was 82.3 MB. Max. memory is 11.5 GB. * RCFGBuilder took 7703.32 ms. Allocated memory was 1.1 GB in the beginning and 1.7 GB in the end (delta: 566.2 MB). Free memory was 902.5 MB in the beginning and 851.4 MB in the end (delta: 51.0 MB). Peak memory consumption was 617.2 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 98091.45 ms. Allocated memory was 1.7 GB in the beginning and 5.4 GB in the end (delta: 3.7 GB). Free memory was 851.4 MB in the beginning and 2.0 GB in the end (delta: -1.1 GB). Peak memory consumption was 2.6 GB. Max. memory is 11.5 GB. * Witness Printer took 3.23 ms. Allocated memory is still 5.4 GB. Free memory is still 2.0 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 15 terminating modules (14 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 14 modules have a trivial ranking function, the largest among these consists of 10 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 98.0s and 15 iterations. TraceHistogramMax:1. Analysis of lassos took 8.4s. Construction of modules took 39.2s. Büchi inclusion checks took 20.5s. Highest rank in rank-based complementation 3. Minimization of det autom 15. Minimization of nondet autom 0. Automata minimization 11.7s AutomataMinimizationTime, 13 MinimizatonAttempts, 829652 StatesRemovedByMinimization, 13 NontrivialMinimizations. Non-live state removal took 9.0s Buchi closure took 6.3s. Biggest automaton had 137912 states and ocurred in iteration 12. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 311091 SDtfs, 1228406 SDslu, 559569 SDs, 0 SdLazy, 106150 SolverSat, 12549 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 39.2s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI13 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital741 mio100 ax100 hnf100 lsp20 ukn58 mio100 lsp100 div208 bol100 ite100 ukn100 eq138 hnf64 smp94 dnf249 smp57 tf100 neg99 sie104 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 2ms VariablesStem: 0 VariablesLoop: 1 DisjunctsStem: 1 DisjunctsLoop: 2 SupportingInvariants: 0 MotzkinApplications: 4 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 22 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 0.8s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...