./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec3_product29.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version c7c6ca5d Calling Ultimate with: /root/.sdkman/candidates/java/11.0.12-open/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec3_product29.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0d12edbd4df2f08d75221f3c96b68e50e6394815b34a699d313e71ea24bf9c38 --- Real Ultimate output --- This is Ultimate 0.2.5-?-c7c6ca5-m [2024-11-09 15:56:56,855 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-09 15:56:56,927 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2024-11-09 15:56:56,933 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-09 15:56:56,934 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-09 15:56:56,964 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-09 15:56:56,966 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-09 15:56:56,967 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-09 15:56:56,968 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-09 15:56:56,969 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-09 15:56:56,970 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-09 15:56:56,971 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-09 15:56:56,971 INFO L153 SettingsManager]: * Use SBE=true [2024-11-09 15:56:56,972 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2024-11-09 15:56:56,972 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2024-11-09 15:56:56,972 INFO L153 SettingsManager]: * Use old map elimination=false [2024-11-09 15:56:56,972 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2024-11-09 15:56:56,973 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2024-11-09 15:56:56,973 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2024-11-09 15:56:56,977 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-09 15:56:56,977 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2024-11-09 15:56:56,978 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-09 15:56:56,978 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-09 15:56:56,978 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-09 15:56:56,978 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-09 15:56:56,979 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2024-11-09 15:56:56,979 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2024-11-09 15:56:56,979 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2024-11-09 15:56:56,980 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-09 15:56:56,980 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2024-11-09 15:56:56,980 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-09 15:56:56,980 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-09 15:56:56,981 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2024-11-09 15:56:56,981 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-09 15:56:56,982 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-09 15:56:56,982 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-09 15:56:56,983 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-09 15:56:56,983 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-09 15:56:56,983 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2024-11-09 15:56:56,984 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0d12edbd4df2f08d75221f3c96b68e50e6394815b34a699d313e71ea24bf9c38 [2024-11-09 15:56:57,287 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-09 15:56:57,307 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-09 15:56:57,312 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-09 15:56:57,313 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-09 15:56:57,315 INFO L274 PluginConnector]: CDTParser initialized [2024-11-09 15:56:57,316 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec3_product29.cil.c [2024-11-09 15:56:58,765 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-09 15:56:59,114 INFO L384 CDTParser]: Found 1 translation units. [2024-11-09 15:56:59,115 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec3_product29.cil.c [2024-11-09 15:56:59,139 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/cd3845b7b/769104e92ba04e82b941d48e97952587/FLAG28a3b73eb [2024-11-09 15:56:59,155 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/cd3845b7b/769104e92ba04e82b941d48e97952587 [2024-11-09 15:56:59,157 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-09 15:56:59,159 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-09 15:56:59,160 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-09 15:56:59,160 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-09 15:56:59,165 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-09 15:56:59,165 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.11 03:56:59" (1/1) ... [2024-11-09 15:56:59,166 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@fc7db8e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:56:59, skipping insertion in model container [2024-11-09 15:56:59,166 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.11 03:56:59" (1/1) ... [2024-11-09 15:56:59,236 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-09 15:56:59,857 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-09 15:56:59,873 INFO L200 MainTranslator]: Completed pre-run [2024-11-09 15:56:59,883 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [48] [2024-11-09 15:56:59,885 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [716] [2024-11-09 15:56:59,885 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [754] [2024-11-09 15:56:59,886 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [1120] [2024-11-09 15:56:59,886 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [1220] [2024-11-09 15:56:59,886 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [1340] [2024-11-09 15:56:59,887 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [1358] [2024-11-09 15:56:59,887 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [1548] [2024-11-09 15:56:59,887 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1897] [2024-11-09 15:56:59,887 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [1906] [2024-11-09 15:56:59,990 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-09 15:57:00,023 INFO L204 MainTranslator]: Completed translation [2024-11-09 15:57:00,024 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:57:00 WrapperNode [2024-11-09 15:57:00,025 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-09 15:57:00,026 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-09 15:57:00,026 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-09 15:57:00,026 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-09 15:57:00,031 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:57:00" (1/1) ... [2024-11-09 15:57:00,069 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:57:00" (1/1) ... [2024-11-09 15:57:00,528 INFO L138 Inliner]: procedures = 91, calls = 348, calls flagged for inlining = 201, calls inlined = 1018, statements flattened = 34383 [2024-11-09 15:57:00,529 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-09 15:57:00,530 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-09 15:57:00,530 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-09 15:57:00,530 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-09 15:57:00,542 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:57:00" (1/1) ... [2024-11-09 15:57:00,542 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:57:00" (1/1) ... [2024-11-09 15:57:00,704 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:57:00" (1/1) ... [2024-11-09 15:57:00,847 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2024-11-09 15:57:00,847 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:57:00" (1/1) ... [2024-11-09 15:57:00,848 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:57:00" (1/1) ... [2024-11-09 15:57:01,059 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:57:00" (1/1) ... [2024-11-09 15:57:01,223 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:57:00" (1/1) ... [2024-11-09 15:57:01,270 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:57:00" (1/1) ... [2024-11-09 15:57:01,323 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:57:00" (1/1) ... [2024-11-09 15:57:01,503 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-09 15:57:01,504 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-09 15:57:01,504 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-09 15:57:01,505 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-09 15:57:01,505 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:57:00" (1/1) ... [2024-11-09 15:57:01,512 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:57:01,531 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:57:01,550 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:57:01,554 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2024-11-09 15:57:01,600 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-09 15:57:01,600 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-09 15:57:01,600 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-11-09 15:57:01,600 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-11-09 15:57:01,600 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-11-09 15:57:01,601 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-11-09 15:57:01,601 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-11-09 15:57:01,601 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2024-11-09 15:57:01,601 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2024-11-09 15:57:01,601 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2024-11-09 15:57:01,601 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2024-11-09 15:57:01,601 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2024-11-09 15:57:01,602 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2024-11-09 15:57:01,602 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2024-11-09 15:57:01,602 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2024-11-09 15:57:01,602 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2024-11-09 15:57:01,602 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2024-11-09 15:57:01,602 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2024-11-09 15:57:01,602 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2024-11-09 15:57:01,602 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2024-11-09 15:57:01,602 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2024-11-09 15:57:01,602 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-09 15:57:01,603 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-09 15:57:01,823 INFO L238 CfgBuilder]: Building ICFG [2024-11-09 15:57:01,825 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-09 15:57:15,184 INFO L? ?]: Removed 15160 outVars from TransFormulas that were not future-live. [2024-11-09 15:57:15,185 INFO L287 CfgBuilder]: Performing block encoding [2024-11-09 15:57:15,315 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-09 15:57:15,315 INFO L316 CfgBuilder]: Removed 1 assume(true) statements. [2024-11-09 15:57:15,315 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.11 03:57:15 BoogieIcfgContainer [2024-11-09 15:57:15,316 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-09 15:57:15,317 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2024-11-09 15:57:15,317 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2024-11-09 15:57:15,320 INFO L274 PluginConnector]: BuchiAutomizer initialized [2024-11-09 15:57:15,321 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-09 15:57:15,322 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 09.11 03:56:59" (1/3) ... [2024-11-09 15:57:15,323 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@fb74780 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 09.11 03:57:15, skipping insertion in model container [2024-11-09 15:57:15,323 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-09 15:57:15,323 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:57:00" (2/3) ... [2024-11-09 15:57:15,324 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@fb74780 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 09.11 03:57:15, skipping insertion in model container [2024-11-09 15:57:15,325 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-09 15:57:15,325 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.11 03:57:15" (3/3) ... [2024-11-09 15:57:15,326 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product29.cil.c [2024-11-09 15:57:15,495 INFO L300 stractBuchiCegarLoop]: Interprodecural is true [2024-11-09 15:57:15,495 INFO L301 stractBuchiCegarLoop]: Hoare is None [2024-11-09 15:57:15,495 INFO L302 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2024-11-09 15:57:15,495 INFO L303 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2024-11-09 15:57:15,496 INFO L304 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2024-11-09 15:57:15,496 INFO L305 stractBuchiCegarLoop]: Difference is false [2024-11-09 15:57:15,496 INFO L306 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2024-11-09 15:57:15,496 INFO L310 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2024-11-09 15:57:15,532 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 9118 states, 9117 states have (on average 1.8750685532521663) internal successors, (17095), 9117 states have internal predecessors, (17095), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:57:15,726 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1839 [2024-11-09 15:57:15,727 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:57:15,727 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:57:15,757 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:57:15,757 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:57:15,758 INFO L332 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2024-11-09 15:57:15,782 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 9118 states, 9117 states have (on average 1.8750685532521663) internal successors, (17095), 9117 states have internal predecessors, (17095), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:57:15,893 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1839 [2024-11-09 15:57:15,894 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:57:15,895 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:57:15,903 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:57:15,905 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:57:15,919 INFO L745 eck$LassoCheckResult]: Stem: 4699#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 4433#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret61#1, main_~retValue_acc~12#1, main_~tmp~15#1;havoc main_~retValue_acc~12#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true; 7677#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 7367#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~4#1;havoc valid_product_~retValue_acc~4#1;valid_product_~retValue_acc~4#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~4#1; 621#valid_product_returnLabel#1true main_#t~ret61#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~4#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret61#1;havoc main_#t~ret61#1; 1996#L1884true assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true; 1464#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 25#initFloors_returnLabel#1true assume { :end_inline_initFloors } true; 830#initTopDown_returnLabel#1true assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~9#1; 5699#L1266true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~9#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~9#1; 2416#getOrigin_returnLabel#1true bobCall_#t~ret49#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret49#1;havoc bobCall_#t~ret49#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 8931#L409true assume 0 == initPersonOnFloor_~floor#1; 7762#L410true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 952#L517-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2443#L201true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 7542#L213-2true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 904#initPersonOnFloor_returnLabel#1true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 2690#bobCall_returnLabel#1true havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 3294#getCurrentFloorID_returnLabel#1true __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 6925#getCurrentHeading_returnLabel#1true __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 4842#L1386true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 2192#L1448true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 6308#L2167-5true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 292#buttonForFloorIsPressed_returnLabel#6true __utac_acc__Specification3_spec__1_#t~ret41#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret41#1;havoc __utac_acc__Specification3_spec__1_#t~ret41#1; 4838#L1452true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 5533#L1492true havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 7782#L2831true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 3581#getCurrentFloorID_returnLabel#2true stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 4426#L2167-10true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 7545#buttonForFloorIsPressed_returnLabel#11true stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 226#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 518#L2979true assume !(0 != timeShift_~tmp___9~3#1); 1787#L3070true assume !(1 == ~doorState~0); 5711#L3070-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 8314#L2734true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 5251#isAnyLiftButtonPressed_returnLabel#1true stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 3902#L2707true assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 5942#L2354-2true assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 8765#L2523-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 2900#stopRequestedInDirection__wrappee__empty_returnLabel#3true stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1568#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 129#L3078true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 6287#L2769true assume !(1 == ~currentHeading~0); 3679#L2779true assume !(0 == ~currentFloorID~0); 5629#L2779-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 8438#L2785-1true havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 6842#L3087-2true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 2942#L1517true assume !(-1 == ~expectedDirection~0); 7462#$Ultimate##3715true assume !(1 == ~expectedDirection~0); 7206#L1530true havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 8690#timeShift_returnLabel#1true havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 4273#getCurrentFloorID_returnLabel#3true __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 8426#getCurrentHeading_returnLabel#4true __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 1900#L1386-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 7850#L1387-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 3834#L2167-12true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 8754#buttonForFloorIsPressed_returnLabel#13true __utac_acc__Specification3_spec__1_#t~ret36#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret36#1;havoc __utac_acc__Specification3_spec__1_#t~ret36#1; 3656#L1391-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 7137#L1492-1true havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 8030#L2831-1true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 8905#getCurrentFloorID_returnLabel#4true stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 4746#L2167-22true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1850#buttonForFloorIsPressed_returnLabel#23true stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1927#stopRequestedAtCurrentFloor_returnLabel#2true timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 8813#L2979-2true assume !(0 != timeShift_~tmp___9~3#1); 1585#L3070-3true assume 1 == ~doorState~0;~doorState~0 := 0; 3054#L3070-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 4998#L2734-2true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 5545#isAnyLiftButtonPressed_returnLabel#3true stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 8225#L2707-2true assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 2295#L2354-8true assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 6465#L2523-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 1330#stopRequestedInDirection__wrappee__empty_returnLabel#9true stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1059#stopRequestedInDirection_returnLabel#3true timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 262#L3078-2true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 7034#L2769-3true assume !(1 == ~currentHeading~0); 8506#L2779-9true assume !(0 == ~currentFloorID~0); 8731#L2779-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6950#L2785-7true havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 865#L3087-5true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 8199#L1517-1true assume !(-1 == ~expectedDirection~0); 8801#$Ultimate##7300true assume !(1 == ~expectedDirection~0); 3422#L1530-1true havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1881#timeShift_returnLabel#2true havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 5549#getCurrentFloorID_returnLabel#5true __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 2026#getCurrentHeading_returnLabel#7true __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 6279#L1386-2true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 26#L1387-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 6199#L2167-24true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 5186#buttonForFloorIsPressed_returnLabel#25true __utac_acc__Specification3_spec__1_#t~ret36#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret36#1;havoc __utac_acc__Specification3_spec__1_#t~ret36#1; 2901#L1391-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 1530#L1492-2true havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 366#L2831-2true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 5521#getCurrentFloorID_returnLabel#6true stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 8878#L2167-34true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 8759#buttonForFloorIsPressed_returnLabel#35true stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 582#stopRequestedAtCurrentFloor_returnLabel#3true timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 3573#L2979-4true assume !(0 != timeShift_~tmp___9~3#1); 7091#L3070-6true assume !(1 == ~doorState~0); 5322#L3070-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 3993#L2734-4true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 6988#isAnyLiftButtonPressed_returnLabel#5true stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 4659#L2707-4true assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 2980#L2354-14true assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 2259#L2523-14true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 2075#stopRequestedInDirection__wrappee__empty_returnLabel#15true stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6442#stopRequestedInDirection_returnLabel#5true timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 3086#L3078-4true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 2172#L2769-6true assume !(1 == ~currentHeading~0); 434#L2779-18true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4314#L2779-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2799#L2785-13true havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 3486#L3087-8true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 4629#L1517-2true assume !(-1 == ~expectedDirection~0); 5224#$Ultimate##10885true assume !(1 == ~expectedDirection~0); 3663#L1530-2true havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 4810#timeShift_returnLabel#3true havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 4601#threeTS_returnLabel#1true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~9#1; 6564#L1266-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~9#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~9#1; 359#getOrigin_returnLabel#2true bobCall_#t~ret49#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret49#1;havoc bobCall_#t~ret49#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5411#L409-1true assume 0 == initPersonOnFloor_~floor#1; 5964#L410-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 3409#L517-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 8024#L201-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 6175#L213-5true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 3228#initPersonOnFloor_returnLabel#2true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1167#bobCall_returnLabel#2true havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret55#1, cleanup_#t~ret56#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 5668#getCurrentFloorID_returnLabel#7true __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 2623#getCurrentHeading_returnLabel#10true __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 7988#L1386-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 4963#L1387-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 3331#L2167-36true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 8413#buttonForFloorIsPressed_returnLabel#37true __utac_acc__Specification3_spec__1_#t~ret36#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret36#1;havoc __utac_acc__Specification3_spec__1_#t~ret36#1; 7739#L1391-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 1991#L1492-3true havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 212#L2831-3true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 7568#getCurrentFloorID_returnLabel#8true stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 3716#L2167-46true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 2428#buttonForFloorIsPressed_returnLabel#47true stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 3433#stopRequestedAtCurrentFloor_returnLabel#4true timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 1187#L2979-6true assume !(0 != timeShift_~tmp___9~3#1); 2344#L3070-9true assume !(1 == ~doorState~0); 6296#L3070-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 7830#L2734-6true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 1381#isAnyLiftButtonPressed_returnLabel#7true stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 2574#L2707-6true assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 4308#L2354-20true assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 5457#L2523-20true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 4252#stopRequestedInDirection__wrappee__empty_returnLabel#21true stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6332#stopRequestedInDirection_returnLabel#7true timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 3915#L3078-6true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 8694#L2769-9true assume !(1 == ~currentHeading~0); 443#L2779-27true assume !(0 == ~currentFloorID~0); 4010#L2779-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6437#L2785-19true havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 6885#L3087-11true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 399#L1517-3true assume !(-1 == ~expectedDirection~0); 6912#$Ultimate##14602true assume !(1 == ~expectedDirection~0); 6303#L1530-3true havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 8638#timeShift_returnLabel#4true havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1742#L1693-2true [2024-11-09 15:57:15,925 INFO L747 eck$LassoCheckResult]: Loop: 1742#L1693-2true assume !false; 3682#L1694true cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 7831#L1697true assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 7668#isBlocked_returnLabel#1true cleanup_#t~ret55#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1; 7221#L1701true assume 1 != cleanup_~tmp___0~4#1; 9054#L1701-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret70#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~20#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~20#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_#t~ret67#1, anyStopRequested_#t~ret68#1, anyStopRequested_#t~ret69#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~19#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~19#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 6802#L138-244true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 8921#isFloorCalling_returnLabel#245true anyStopRequested_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret65#1;havoc anyStopRequested_#t~ret65#1; 975#L2258true assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 4674#anyStopRequested_returnLabel#1true isIdle_#t~ret70#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_#t~ret67#1, anyStopRequested_#t~ret68#1, anyStopRequested_#t~ret69#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~19#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~20#1 := isIdle_#t~ret70#1;havoc isIdle_#t~ret70#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~20#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1012#isIdle_returnLabel#1true cleanup_#t~ret56#1 := isIdle_#res#1;havoc isIdle_#t~ret70#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~20#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret56#1;havoc cleanup_#t~ret56#1; 5408#L1713true assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 5732#getCurrentFloorID_returnLabel#9true __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 5479#getCurrentHeading_returnLabel#13true __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 5130#L1386-4true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 3059#L1448-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 3698#L2167-53true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 4353#buttonForFloorIsPressed_returnLabel#54true __utac_acc__Specification3_spec__1_#t~ret41#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret41#1;havoc __utac_acc__Specification3_spec__1_#t~ret41#1; 4529#L1452-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 3030#L1492-4true havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 5618#L2831-4true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 8989#getCurrentFloorID_returnLabel#10true stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 955#L2167-58true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1937#buttonForFloorIsPressed_returnLabel#59true stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1065#stopRequestedAtCurrentFloor_returnLabel#5true timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 5682#L2979-8true assume !(0 != timeShift_~tmp___9~3#1); 629#L3070-12true assume 1 == ~doorState~0;~doorState~0 := 0; 5037#L3070-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 7922#L2734-8true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 958#isAnyLiftButtonPressed_returnLabel#9true stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 5656#L2707-8true assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 320#L2354-26true assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 5380#L2523-26true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 8046#stopRequestedInDirection__wrappee__empty_returnLabel#27true stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 3964#stopRequestedInDirection_returnLabel#9true timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 1566#L3078-8true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 3360#L2769-12true assume !(1 == ~currentHeading~0); 994#L2779-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1986#L2779-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 8744#L2785-25true havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 6127#L3087-14true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 8493#L1517-4true assume !(-1 == ~expectedDirection~0); 2856#$Ultimate##18270true assume !(1 == ~expectedDirection~0); 5798#L1530-4true havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 7333#timeShift_returnLabel#5true havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1742#L1693-2true [2024-11-09 15:57:15,935 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:57:15,936 INFO L85 PathProgramCache]: Analyzing trace with hash -899047071, now seen corresponding path program 1 times [2024-11-09 15:57:15,948 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:57:15,948 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1688619160] [2024-11-09 15:57:15,948 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:57:15,949 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:57:16,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:57:16,784 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:57:16,786 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:57:16,786 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1688619160] [2024-11-09 15:57:16,787 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1688619160] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:57:16,787 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:57:16,788 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-09 15:57:16,789 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [754380681] [2024-11-09 15:57:16,791 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:57:16,797 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:57:16,799 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:57:16,799 INFO L85 PathProgramCache]: Analyzing trace with hash 891964786, now seen corresponding path program 1 times [2024-11-09 15:57:16,799 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:57:16,800 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [832509245] [2024-11-09 15:57:16,800 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:57:16,800 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:57:16,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:57:17,159 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:57:17,159 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:57:17,160 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [832509245] [2024-11-09 15:57:17,160 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [832509245] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:57:17,161 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:57:17,161 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:57:17,161 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [841338600] [2024-11-09 15:57:17,162 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:57:17,163 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:57:17,164 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:57:17,217 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-09 15:57:17,218 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-09 15:57:17,243 INFO L87 Difference]: Start difference. First operand has 9118 states, 9117 states have (on average 1.8750685532521663) internal successors, (17095), 9117 states have internal predecessors, (17095), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 7 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:57:24,117 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:57:24,117 INFO L93 Difference]: Finished difference Result 14510 states and 27037 transitions. [2024-11-09 15:57:24,119 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14510 states and 27037 transitions. [2024-11-09 15:57:24,269 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3203 [2024-11-09 15:57:24,459 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14510 states to 14476 states and 26998 transitions. [2024-11-09 15:57:24,460 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14476 [2024-11-09 15:57:24,488 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14476 [2024-11-09 15:57:24,489 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14476 states and 26998 transitions. [2024-11-09 15:57:24,533 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:57:24,533 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14476 states and 26998 transitions. [2024-11-09 15:57:24,581 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14476 states and 26998 transitions. [2024-11-09 15:57:24,926 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14476 to 14431. [2024-11-09 15:57:24,966 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14431 states, 14431 states have (on average 1.8660522486314184) internal successors, (26929), 14430 states have internal predecessors, (26929), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:57:25,008 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14431 states to 14431 states and 26929 transitions. [2024-11-09 15:57:25,009 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14431 states and 26929 transitions. [2024-11-09 15:57:25,011 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-11-09 15:57:25,017 INFO L425 stractBuchiCegarLoop]: Abstraction has 14431 states and 26929 transitions. [2024-11-09 15:57:25,017 INFO L332 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2024-11-09 15:57:25,017 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14431 states and 26929 transitions. [2024-11-09 15:57:25,102 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3192 [2024-11-09 15:57:25,102 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:57:25,103 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:57:25,113 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:57:25,113 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:57:25,115 INFO L745 eck$LassoCheckResult]: Stem: 30969#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 30716#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret61#1, main_~retValue_acc~12#1, main_~tmp~15#1;havoc main_~retValue_acc~12#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true; 30717#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 32659#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~4#1;havoc valid_product_~retValue_acc~4#1;valid_product_~retValue_acc~4#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~4#1; 25160#valid_product_returnLabel#1 main_#t~ret61#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~4#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret61#1;havoc main_#t~ret61#1; 25161#L1884 assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true; 26828#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 23720#initFloors_returnLabel#1 assume { :end_inline_initFloors } true; 23721#initTopDown_returnLabel#1 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~9#1; 25608#L1266 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~9#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~9#1; 28378#getOrigin_returnLabel#1 bobCall_#t~ret49#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret49#1;havoc bobCall_#t~ret49#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 28379#L409 assume 0 == initPersonOnFloor_~floor#1; 32780#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 23952#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 25858#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 25706#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 25758#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 25759#bobCall_returnLabel#1 havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 28750#getCurrentFloorID_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 29516#getCurrentHeading_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 31101#L1386 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 28016#L1448 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 28017#L2167-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 24406#buttonForFloorIsPressed_returnLabel#6 __utac_acc__Specification3_spec__1_#t~ret41#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret41#1;havoc __utac_acc__Specification3_spec__1_#t~ret41#1; 24407#L1452 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 23830#L1492 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 31624#L2831 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 32517#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 26358#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1; 28372#L2802 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 24495#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret91#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret91#1;havoc stopRequestedAtCurrentFloor_#t~ret91#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 24246#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 24247#L2979 assume !(0 != timeShift_~tmp___9~3#1); 24944#L3070 assume !(1 == ~doorState~0); 27358#L3070-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 31736#L2734 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 30626#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 30194#L2707 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 30195#L2354-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 31895#isTopFloor_returnLabel#3 stopRequestedInDirection__wrappee__empty_#t~ret71#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~21#1 := stopRequestedInDirection__wrappee__empty_#t~ret71#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1; 32033#L2358-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~21#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 24204#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 24818#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 24002#L3078 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 24004#L2769 assume !(1 == ~currentHeading~0); 29952#L2779 assume !(0 == ~currentFloorID~0); 29953#L2779-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 31687#L2785-1 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 26191#L3087-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 33088#L1517 assume !(-1 == ~expectedDirection~0); 33085#$Ultimate##3715 assume !(1 == ~expectedDirection~0); 33083#L1530 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 33082#timeShift_returnLabel#1 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 33081#getCurrentFloorID_returnLabel#3 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 33080#getCurrentHeading_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 33079#L1386-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 33077#L1448-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 33075#$Ultimate##3820 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 31518#$Ultimate##3836 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 31519#$Ultimate##3852 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 25432#$Ultimate##3868 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 25434#L1492-1 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 32555#L2831-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 32857#getCurrentFloorID_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 31013#L2167-22 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 27411#buttonForFloorIsPressed_returnLabel#23 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 26495#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 27595#L2979-2 assume !(0 != timeShift_~tmp___9~3#1); 27019#L3070-3 assume 1 == ~doorState~0;~doorState~0 := 0; 27020#L3070-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 29229#L2734-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 29034#isAnyLiftButtonPressed_returnLabel#3 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 31634#L2707-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 32913#L2354-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 33090#L2523-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 25039#stopRequestedInDirection__wrappee__empty_returnLabel#9 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 26085#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 24333#L3078-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 24335#L2769-3 assume !(1 == ~currentHeading~0); 34405#L2779-9 assume !(0 == ~currentFloorID~0); 31663#L2779-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 32476#L2785-7 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 25683#L3087-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 25684#L1517-1 assume !(-1 == ~expectedDirection~0); 35322#$Ultimate##7300 assume !(1 == ~expectedDirection~0); 35320#L1530-1 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 35319#timeShift_returnLabel#2 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 35318#getCurrentFloorID_returnLabel#5 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 35317#getCurrentHeading_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 35315#L1386-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 35316#L1448-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 38052#$Ultimate##7405 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 38051#$Ultimate##7421 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 35081#$Ultimate##7437 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 27829#$Ultimate##7453 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 27831#L1492-2 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 34053#L2831-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 34038#getCurrentFloorID_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 34031#L2167-34 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 34023#buttonForFloorIsPressed_returnLabel#35 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 34016#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 34013#L2979-4 assume !(0 != timeShift_~tmp___9~3#1); 34014#L3070-6 assume !(1 == ~doorState~0); 31467#L3070-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 30276#L2734-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 25621#isAnyLiftButtonPressed_returnLabel#5 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 30932#L2707-4 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 30934#L2354-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 34473#L2523-14 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 34424#stopRequestedInDirection__wrappee__empty_returnLabel#15 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 34422#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 34420#L3078-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 34421#L2769-6 assume !(1 == ~currentHeading~0); 38082#L2779-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 24749#L2779-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 28891#L2785-13 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 28892#L3087-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 33565#L1517-2 assume !(-1 == ~expectedDirection~0); 33561#$Ultimate##10885 assume !(1 == ~expectedDirection~0); 33560#L1530-2 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 33559#timeShift_returnLabel#3 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 33558#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~9#1; 33557#L1266-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~9#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~9#1; 33551#getOrigin_returnLabel#2 bobCall_#t~ret49#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret49#1;havoc bobCall_#t~ret49#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 33550#L409-1 assume 0 == initPersonOnFloor_~floor#1; 33522#L410-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 33515#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 33512#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 33509#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 33508#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 33507#bobCall_returnLabel#2 havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret55#1, cleanup_#t~ret56#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 33506#getCurrentFloorID_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 33505#getCurrentHeading_returnLabel#10 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 33503#L1386-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 33504#L1448-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 33502#$Ultimate##11122 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 33491#$Ultimate##11138 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 33477#$Ultimate##11154 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 33471#$Ultimate##11170 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 33465#L1492-3 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 33464#L2831-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 33455#getCurrentFloorID_returnLabel#8 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 33451#L2167-46 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 33444#buttonForFloorIsPressed_returnLabel#47 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 33443#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 33442#L2979-6 assume !(0 != timeShift_~tmp___9~3#1); 33441#L3070-9 assume !(1 == ~doorState~0); 33439#L3070-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 33428#L2734-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 33423#isAnyLiftButtonPressed_returnLabel#7 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 33230#L2707-6 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 33223#L2354-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 33218#L2523-20 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 33200#stopRequestedInDirection__wrappee__empty_returnLabel#21 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 33197#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 33193#L3078-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 33194#L2769-9 assume !(1 == ~currentHeading~0); 38083#L2779-27 assume !(0 == ~currentFloorID~0); 24772#L2779-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 30296#L2785-19 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 26221#L3087-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 24670#L1517-3 assume !(-1 == ~expectedDirection~0); 24672#$Ultimate##14602 assume !(1 == ~expectedDirection~0); 32119#L1530-3 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 32120#timeShift_returnLabel#4 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 27286#L1693-2 [2024-11-09 15:57:25,116 INFO L747 eck$LassoCheckResult]: Loop: 27286#L1693-2 assume !false; 27287#L1694 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 29954#L1697 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 32749#isBlocked_returnLabel#1 cleanup_#t~ret55#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1; 32585#L1701 assume 1 != cleanup_~tmp___0~4#1; 32586#L1701-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret70#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~20#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~20#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_#t~ret67#1, anyStopRequested_#t~ret68#1, anyStopRequested_#t~ret69#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~19#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~19#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 32406#L138-244 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 27029#isFloorCalling_returnLabel#245 anyStopRequested_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret65#1;havoc anyStopRequested_#t~ret65#1; 32999#L2258 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 35334#anyStopRequested_returnLabel#1 isIdle_#t~ret70#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_#t~ret67#1, anyStopRequested_#t~ret68#1, anyStopRequested_#t~ret69#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~19#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~20#1 := isIdle_#t~ret70#1;havoc isIdle_#t~ret70#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~20#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 35333#isIdle_returnLabel#1 cleanup_#t~ret56#1 := isIdle_#res#1;havoc isIdle_#t~ret70#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~20#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret56#1;havoc cleanup_#t~ret56#1; 35332#L1713 assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 35331#getCurrentFloorID_returnLabel#9 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 35330#getCurrentHeading_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 35328#L1386-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 35327#L1448-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 34677#$Ultimate##14790 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 34676#$Ultimate##14806 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 31944#$Ultimate##14822 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 31343#$Ultimate##14838 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 29196#L1492-4 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 29197#L2831-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 31683#getCurrentFloorID_returnLabel#10 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 33006#L2167-58 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 34648#buttonForFloorIsPressed_returnLabel#59 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 35013#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 35011#L2979-8 assume !(0 != timeShift_~tmp___9~3#1); 35010#L3070-12 assume 1 == ~doorState~0;~doorState~0 := 0; 35009#L3070-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 35007#L2734-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 35002#isAnyLiftButtonPressed_returnLabel#9 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 34999#L2707-8 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 34996#L2354-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 34976#L2523-26 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 34962#stopRequestedInDirection__wrappee__empty_returnLabel#27 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 30251#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 30252#L3078-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 29587#L2769-12 assume !(1 == ~currentHeading~0); 29588#L2779-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 25953#L2779-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 27681#L2785-25 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 29452#L3087-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 32013#L1517-4 assume !(-1 == ~expectedDirection~0); 28968#$Ultimate##18270 assume !(1 == ~expectedDirection~0); 28969#L1530-4 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 31792#timeShift_returnLabel#5 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 27286#L1693-2 [2024-11-09 15:57:25,117 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:57:25,117 INFO L85 PathProgramCache]: Analyzing trace with hash -993481136, now seen corresponding path program 1 times [2024-11-09 15:57:25,118 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:57:25,118 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [217634735] [2024-11-09 15:57:25,118 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:57:25,118 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:57:25,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:57:25,422 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:57:25,423 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:57:25,423 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [217634735] [2024-11-09 15:57:25,423 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [217634735] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:57:25,423 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:57:25,424 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-09 15:57:25,424 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2125399297] [2024-11-09 15:57:25,424 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:57:25,425 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:57:25,426 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:57:25,427 INFO L85 PathProgramCache]: Analyzing trace with hash -1548842443, now seen corresponding path program 1 times [2024-11-09 15:57:25,428 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:57:25,428 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [255695232] [2024-11-09 15:57:25,428 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:57:25,428 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:57:25,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:57:25,521 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:57:25,521 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:57:25,521 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [255695232] [2024-11-09 15:57:25,521 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [255695232] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:57:25,522 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:57:25,522 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-09 15:57:25,522 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [520189175] [2024-11-09 15:57:25,522 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:57:25,522 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:57:25,522 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:57:25,523 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-09 15:57:25,523 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-09 15:57:25,523 INFO L87 Difference]: Start difference. First operand 14431 states and 26929 transitions. cyclomatic complexity: 12499 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:57:26,738 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:57:26,738 INFO L93 Difference]: Finished difference Result 14512 states and 27010 transitions. [2024-11-09 15:57:26,739 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14512 states and 27010 transitions. [2024-11-09 15:57:26,838 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3210 [2024-11-09 15:57:26,912 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14512 states to 14512 states and 27010 transitions. [2024-11-09 15:57:26,912 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14512 [2024-11-09 15:57:26,929 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14512 [2024-11-09 15:57:26,930 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14512 states and 27010 transitions. [2024-11-09 15:57:26,954 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:57:26,955 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14512 states and 27010 transitions. [2024-11-09 15:57:26,977 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14512 states and 27010 transitions. [2024-11-09 15:57:27,365 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14512 to 14476. [2024-11-09 15:57:27,389 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14476 states, 14476 states have (on average 1.863360044211108) internal successors, (26974), 14475 states have internal predecessors, (26974), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:57:27,422 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14476 states to 14476 states and 26974 transitions. [2024-11-09 15:57:27,422 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14476 states and 26974 transitions. [2024-11-09 15:57:27,423 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-09 15:57:27,423 INFO L425 stractBuchiCegarLoop]: Abstraction has 14476 states and 26974 transitions. [2024-11-09 15:57:27,423 INFO L332 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2024-11-09 15:57:27,423 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14476 states and 26974 transitions. [2024-11-09 15:57:27,503 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3202 [2024-11-09 15:57:27,504 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:57:27,504 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:57:27,510 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:57:27,510 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:57:27,512 INFO L745 eck$LassoCheckResult]: Stem: 59902#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 59647#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret61#1, main_~retValue_acc~12#1, main_~tmp~15#1;havoc main_~retValue_acc~12#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true; 59648#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 61555#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~4#1;havoc valid_product_~retValue_acc~4#1;valid_product_~retValue_acc~4#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~4#1; 54116#valid_product_returnLabel#1 main_#t~ret61#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~4#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret61#1;havoc main_#t~ret61#1; 54117#L1884 assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true; 55780#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 52673#initFloors_returnLabel#1 assume { :end_inline_initFloors } true; 52674#initTopDown_returnLabel#1 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~9#1; 54562#L1266 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~9#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~9#1; 57332#getOrigin_returnLabel#1 bobCall_#t~ret49#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret49#1;havoc bobCall_#t~ret49#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 57333#L409 assume 0 == initPersonOnFloor_~floor#1; 61669#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 52904#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 54812#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 54661#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 54712#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 54713#bobCall_returnLabel#1 havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 57695#getCurrentFloorID_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 58459#getCurrentHeading_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 60031#L1386 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 56967#L1448 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 56968#L2167-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 53361#buttonForFloorIsPressed_returnLabel#6 __utac_acc__Specification3_spec__1_#t~ret41#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret41#1;havoc __utac_acc__Specification3_spec__1_#t~ret41#1; 53362#L1452 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 52783#L1492 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 60541#L2831 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 61411#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 55311#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1; 57325#L2802 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 53450#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret91#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret91#1;havoc stopRequestedAtCurrentFloor_#t~ret91#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 53201#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 53202#L2979 assume !(0 != timeShift_~tmp___9~3#1); 53899#L3070 assume !(1 == ~doorState~0); 56308#L3070-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 60653#L2734 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 59555#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 59134#L2707 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 59135#L2354-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 60798#L2523-2 assume !(0 == ~currentFloorID~0); 57275#L2529-2 assume !(~currentFloorID~0 > 0); 56533#$Ultimate##2877 assume ~currentFloorID~0 > 0; 57782#L2546-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 57783#L2547-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 53159#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 62403#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 62402#L3078 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 61009#L2769 assume !(1 == ~currentHeading~0); 58893#L2779 assume !(0 == ~currentFloorID~0); 58894#L2779-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 60603#L2785-1 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 55144#L3087-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 62256#L1517 assume !(-1 == ~expectedDirection~0); 62253#$Ultimate##3715 assume !(1 == ~expectedDirection~0); 62251#L1530 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 62249#timeShift_returnLabel#1 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 62247#getCurrentFloorID_returnLabel#3 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 62245#getCurrentHeading_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 62243#L1386-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 62242#L1387-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 59062#L2167-12 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 55081#buttonForFloorIsPressed_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret36#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret36#1;havoc __utac_acc__Specification3_spec__1_#t~ret36#1; 58870#L1391-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 54388#L1492-1 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 61449#L2831-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 61736#getCurrentFloorID_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 59944#L2167-22 assume !(0 == buttonForFloorIsPressed_~floorID#1); 59945#L2171-22 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 56361#buttonForFloorIsPressed_returnLabel#23 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 55448#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 56542#L2979-2 assume !(0 != timeShift_~tmp___9~3#1); 55970#L3070-3 assume 1 == ~doorState~0;~doorState~0 := 0; 55971#L3070-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 58173#L2734-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 57979#isAnyLiftButtonPressed_returnLabel#3 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 60552#L2707-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 61786#L2354-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 61110#L2523-8 assume !(0 == ~currentFloorID~0); 60911#L2529-8 assume !(~currentFloorID~0 > 0); 57655#$Ultimate##6462 assume ~currentFloorID~0 > 0; 53551#L2546-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 53553#L2547-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 52947#stopRequestedInDirection__wrappee__empty_returnLabel#9 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 62408#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 62398#L3078-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 61408#L2769-3 assume !(1 == ~currentHeading~0); 61409#L2779-9 assume !(0 == ~currentFloorID~0); 60578#L2779-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 61369#L2785-7 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 60453#L3087-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 62374#L1517-1 assume !(-1 == ~expectedDirection~0); 62372#$Ultimate##7300 assume !(1 == ~expectedDirection~0); 62371#L1530-1 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 62370#timeShift_returnLabel#2 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 62369#getCurrentFloorID_returnLabel#5 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 62366#getCurrentHeading_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 62365#L1386-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 52675#L1387-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 52676#L2167-24 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 54421#buttonForFloorIsPressed_returnLabel#25 __utac_acc__Specification3_spec__1_#t~ret36#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret36#1;havoc __utac_acc__Specification3_spec__1_#t~ret36#1; 57971#L1391-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 55609#L1492-2 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 53541#L2831-2 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 53542#L138-122 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 55439#isFloorCalling_returnLabel#123 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1; 59884#L2802-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 58357#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#3 stopRequestedAtCurrentFloor_#t~ret91#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret91#1;havoc stopRequestedAtCurrentFloor_#t~ret91#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 54035#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 54036#L2979-4 assume !(0 != timeShift_~tmp___9~3#1); 58779#L3070-6 assume !(1 == ~doorState~0); 60386#L3070-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 59212#L2734-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 54575#isAnyLiftButtonPressed_returnLabel#5 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 59864#L2707-4 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 58073#L2354-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 57078#L2523-14 assume !(0 == ~currentFloorID~0); 57079#L2529-14 assume !(~currentFloorID~0 > 0); 52910#$Ultimate##10047 assume ~currentFloorID~0 > 0; 56558#L2546-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 53758#L2547-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 52909#stopRequestedInDirection__wrappee__empty_returnLabel#15 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 62291#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 62284#L3078-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 56940#L2769-6 assume !(1 == ~currentHeading~0); 53702#L2779-18 assume !(0 == ~currentFloorID~0); 53703#L2779-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 57834#L2785-13 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 57835#L3087-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 58666#L1517-2 assume !(-1 == ~expectedDirection~0); 59838#$Ultimate##10885 assume !(1 == ~expectedDirection~0); 58875#L1530-2 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 58876#timeShift_returnLabel#3 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 59811#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~9#1; 59812#L1266-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~9#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~9#1; 53524#getOrigin_returnLabel#2 bobCall_#t~ret49#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret49#1;havoc bobCall_#t~ret49#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 53525#L409-1 assume 0 == initPersonOnFloor_~floor#1; 60452#L410-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 53231#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 58582#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 59073#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 58375#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 55234#bobCall_returnLabel#2 havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret55#1, cleanup_#t~ret56#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 55235#getCurrentFloorID_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 57614#getCurrentHeading_returnLabel#10 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 57615#L1386-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 60115#L1387-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 58503#L2167-36 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 55157#buttonForFloorIsPressed_returnLabel#37 __utac_acc__Specification3_spec__1_#t~ret36#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret36#1;havoc __utac_acc__Specification3_spec__1_#t~ret36#1; 61658#L1391-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 57268#L1492-3 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 64252#L2831-3 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 64249#L138-183 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 64245#isFloorCalling_returnLabel#184 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1; 64242#L2802-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 64235#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret91#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret91#1;havoc stopRequestedAtCurrentFloor_#t~ret91#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 64234#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 64233#L2979-6 assume !(0 != timeShift_~tmp___9~3#1); 64232#L3070-9 assume !(1 == ~doorState~0); 64231#L3070-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 64228#L2734-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 64223#isAnyLiftButtonPressed_returnLabel#7 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 64221#L2707-6 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 64220#L2354-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 60484#L2523-20 assume !(0 == ~currentFloorID~0); 60485#L2529-20 assume !(~currentFloorID~0 > 0); 57900#$Ultimate##13764 assume ~currentFloorID~0 > 0; 57443#L2546-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 57445#L2547-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 53419#stopRequestedInDirection__wrappee__empty_returnLabel#21 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 64181#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 64182#L3078-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 61847#L2769-9 assume !(1 == ~currentHeading~0); 53725#L2779-27 assume !(0 == ~currentFloorID~0); 53726#L2779-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 59232#L2785-19 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 55174#L3087-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 62675#L1517-3 assume !(-1 == ~expectedDirection~0); 62669#$Ultimate##14602 assume !(1 == ~expectedDirection~0); 62664#L1530-3 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 62661#timeShift_returnLabel#4 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 62660#L1693-2 [2024-11-09 15:57:27,514 INFO L747 eck$LassoCheckResult]: Loop: 62660#L1693-2 assume !false; 62659#L1694 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 62658#L1697 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 62653#isBlocked_returnLabel#1 cleanup_#t~ret55#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1; 62651#L1701 assume 1 != cleanup_~tmp___0~4#1; 62650#L1701-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret70#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~20#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~20#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_#t~ret67#1, anyStopRequested_#t~ret68#1, anyStopRequested_#t~ret69#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~19#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~19#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 62641#L138-244 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 62639#isFloorCalling_returnLabel#245 anyStopRequested_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret65#1;havoc anyStopRequested_#t~ret65#1; 62635#L2258 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 62623#anyStopRequested_returnLabel#1 isIdle_#t~ret70#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_#t~ret67#1, anyStopRequested_#t~ret68#1, anyStopRequested_#t~ret69#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~19#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~20#1 := isIdle_#t~ret70#1;havoc isIdle_#t~ret70#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~20#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 62618#isIdle_returnLabel#1 cleanup_#t~ret56#1 := isIdle_#res#1;havoc isIdle_#t~ret70#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~20#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret56#1;havoc cleanup_#t~ret56#1; 62616#L1713 assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 62615#getCurrentFloorID_returnLabel#9 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 62614#getCurrentHeading_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 62613#L1386-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 62611#L1448-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 62609#$Ultimate##14790 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 62607#$Ultimate##14806 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 62606#$Ultimate##14822 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 62598#$Ultimate##14838 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 62592#L1492-4 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 62590#L2831-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 62591#getCurrentFloorID_returnLabel#10 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 62583#L2167-58 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 62549#buttonForFloorIsPressed_returnLabel#59 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 62548#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 62545#L2979-8 assume !(0 != timeShift_~tmp___9~3#1); 62544#L3070-12 assume 1 == ~doorState~0;~doorState~0 := 0; 62538#L3070-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 62531#L2734-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 62527#isAnyLiftButtonPressed_returnLabel#9 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 62524#L2707-8 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 62525#L2354-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 62870#L2523-26 assume !(0 == ~currentFloorID~0); 59949#L2529-26 assume !(~currentFloorID~0 > 0); 53930#$Ultimate##17432 assume ~currentFloorID~0 > 0; 53932#L2546-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 60050#L2547-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 53212#stopRequestedInDirection__wrappee__empty_returnLabel#27 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 66222#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 66221#L3078-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 58532#L2769-12 assume !(1 == ~currentHeading~0); 54907#L2779-36 assume !(0 == ~currentFloorID~0); 54908#L2779-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 56628#L2785-25 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 58395#L3087-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 62672#L1517-4 assume !(-1 == ~expectedDirection~0); 62666#$Ultimate##18270 assume !(1 == ~expectedDirection~0); 62663#L1530-4 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 62662#timeShift_returnLabel#5 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 62660#L1693-2 [2024-11-09 15:57:27,516 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:57:27,517 INFO L85 PathProgramCache]: Analyzing trace with hash 311242078, now seen corresponding path program 1 times [2024-11-09 15:57:27,517 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:57:27,517 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [408417215] [2024-11-09 15:57:27,517 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:57:27,517 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:57:27,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:57:27,743 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:57:27,744 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:57:27,744 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [408417215] [2024-11-09 15:57:27,745 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [408417215] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:57:27,745 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:57:27,745 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-09 15:57:27,745 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2097278637] [2024-11-09 15:57:27,746 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:57:27,746 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:57:27,747 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:57:27,747 INFO L85 PathProgramCache]: Analyzing trace with hash 673084188, now seen corresponding path program 1 times [2024-11-09 15:57:27,747 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:57:27,748 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2140556433] [2024-11-09 15:57:27,748 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:57:27,748 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:57:27,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:57:27,825 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:57:27,826 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:57:27,826 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2140556433] [2024-11-09 15:57:27,826 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2140556433] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:57:27,826 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:57:27,826 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-09 15:57:27,828 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [488838433] [2024-11-09 15:57:27,828 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:57:27,828 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:57:27,828 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:57:27,829 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-09 15:57:27,829 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-09 15:57:27,830 INFO L87 Difference]: Start difference. First operand 14476 states and 26974 transitions. cyclomatic complexity: 12499 Second operand has 5 states, 5 states have (on average 10.0) internal successors, (50), 5 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:57:31,556 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:57:31,557 INFO L93 Difference]: Finished difference Result 23898 states and 43977 transitions. [2024-11-09 15:57:31,557 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 23898 states and 43977 transitions. [2024-11-09 15:57:31,658 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5942 [2024-11-09 15:57:31,751 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 23898 states to 23862 states and 43941 transitions. [2024-11-09 15:57:31,751 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 23862 [2024-11-09 15:57:31,774 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 23862 [2024-11-09 15:57:31,774 INFO L73 IsDeterministic]: Start isDeterministic. Operand 23862 states and 43941 transitions. [2024-11-09 15:57:31,800 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:57:31,801 INFO L218 hiAutomatonCegarLoop]: Abstraction has 23862 states and 43941 transitions. [2024-11-09 15:57:31,833 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23862 states and 43941 transitions. [2024-11-09 15:57:32,117 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23862 to 23826. [2024-11-09 15:57:32,155 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23826 states, 23826 states have (on average 1.8417275245530094) internal successors, (43881), 23825 states have internal predecessors, (43881), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:57:32,203 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23826 states to 23826 states and 43881 transitions. [2024-11-09 15:57:32,204 INFO L240 hiAutomatonCegarLoop]: Abstraction has 23826 states and 43881 transitions. [2024-11-09 15:57:32,204 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-09 15:57:32,205 INFO L425 stractBuchiCegarLoop]: Abstraction has 23826 states and 43881 transitions. [2024-11-09 15:57:32,205 INFO L332 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2024-11-09 15:57:32,206 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 23826 states and 43881 transitions. [2024-11-09 15:57:32,412 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5933 [2024-11-09 15:57:32,413 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:57:32,413 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:57:32,422 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:57:32,426 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:57:32,427 INFO L745 eck$LassoCheckResult]: Stem: 98334#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 98070#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret61#1, main_~retValue_acc~12#1, main_~tmp~15#1;havoc main_~retValue_acc~12#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true; 98071#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 100114#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~4#1;havoc valid_product_~retValue_acc~4#1;valid_product_~retValue_acc~4#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~4#1; 92501#valid_product_returnLabel#1 main_#t~ret61#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~4#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret61#1;havoc main_#t~ret61#1; 92502#L1884 assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true; 94165#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 91061#initFloors_returnLabel#1 assume { :end_inline_initFloors } true; 91062#initTopDown_returnLabel#1 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~9#1; 92946#L1266 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~9#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~9#1; 95718#getOrigin_returnLabel#1 bobCall_#t~ret49#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret49#1;havoc bobCall_#t~ret49#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 95719#L409 assume 0 == initPersonOnFloor_~floor#1; 100244#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 91290#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 93198#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 93045#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 93097#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 93098#bobCall_returnLabel#1 havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 96089#getCurrentFloorID_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 96868#getCurrentHeading_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 98472#L1386 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 95355#L1448 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 95356#L2167-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 91747#buttonForFloorIsPressed_returnLabel#6 __utac_acc__Specification3_spec__1_#t~ret41#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret41#1;havoc __utac_acc__Specification3_spec__1_#t~ret41#1; 91748#L1452 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 91171#L1492 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 99014#L2831 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 99958#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 93698#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1; 95712#L2802 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 91837#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret91#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret91#1;havoc stopRequestedAtCurrentFloor_#t~ret91#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 91587#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 91588#L2979 assume !(0 != timeShift_~tmp___9~3#1); 92283#L3070 assume !(1 == ~doorState~0); 94700#L3070-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 99132#L2734 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 97974#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 97545#L2707 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 97546#L2354-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 99295#L2523-2 assume !(0 == ~currentFloorID~0); 95662#L2529-2 assume !(~currentFloorID~0 > 0); 94922#$Ultimate##2877 assume ~currentFloorID~0 > 0; 96180#L2546-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 96181#L2547-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 91546#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 101515#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 101514#L3078 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 99522#L2769 assume !(1 == ~currentHeading~0); 97305#L2779 assume !(0 == ~currentFloorID~0); 97306#L2779-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 99079#L2785-1 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 93530#L3087-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 101261#L1517 assume !(-1 == ~expectedDirection~0); 101258#$Ultimate##3715 assume !(1 == ~expectedDirection~0); 101255#L1530 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 101253#timeShift_returnLabel#1 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 101251#getCurrentFloorID_returnLabel#3 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 101250#getCurrentHeading_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 101248#L1386-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 101247#L1387-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 97473#L2167-12 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 93467#buttonForFloorIsPressed_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret36#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret36#1;havoc __utac_acc__Specification3_spec__1_#t~ret36#1; 97283#L1391-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 92774#L1492-1 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 99999#L2831-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 100331#getCurrentFloorID_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 98380#L2167-22 assume !(0 == buttonForFloorIsPressed_~floorID#1); 98381#L2171-22 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 94753#buttonForFloorIsPressed_returnLabel#23 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 93835#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 94931#L2979-2 assume !(0 != timeShift_~tmp___9~3#1); 94361#L3070-3 assume 1 == ~doorState~0;~doorState~0 := 0; 94362#L3070-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 96577#L2734-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 96375#isAnyLiftButtonPressed_returnLabel#3 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 99023#L2707-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 95526#L2354-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 95527#L2523-8 assume !(0 == ~currentFloorID~0); 99421#L2529-8 assume !(~currentFloorID~0 > 0); 96047#$Ultimate##6462 assume ~currentFloorID~0 > 0; 91937#L2546-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 91939#L2547-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 91334#stopRequestedInDirection__wrappee__empty_returnLabel#9 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 112993#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 112992#L3078-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 99954#L2769-3 assume !(1 == ~currentHeading~0); 99955#L2779-9 assume !(0 == ~currentFloorID~0); 99056#L2779-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 99913#L2785-7 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 98921#L3087-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 106371#L1517-1 assume !(-1 == ~expectedDirection~0); 106368#$Ultimate##7300 assume !(1 == ~expectedDirection~0); 106366#L1530-1 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 106365#timeShift_returnLabel#2 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 106364#getCurrentFloorID_returnLabel#5 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 106363#getCurrentHeading_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 106361#L1386-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 106362#L1387-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 91064#L2167-24 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 92807#buttonForFloorIsPressed_returnLabel#25 __utac_acc__Specification3_spec__1_#t~ret36#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret36#1;havoc __utac_acc__Specification3_spec__1_#t~ret36#1; 96368#L1391-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 93991#L1492-2 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 91927#L2831-2 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 91928#L138-122 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 101538#isFloorCalling_returnLabel#123 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1; 101537#L2802-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 96763#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#3 stopRequestedAtCurrentFloor_#t~ret91#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret91#1;havoc stopRequestedAtCurrentFloor_#t~ret91#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 92419#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 92420#L2979-4 assume !(0 != timeShift_~tmp___9~3#1); 97193#L3070-6 assume !(1 == ~doorState~0); 113207#L3070-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 107616#L2734-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 107612#isAnyLiftButtonPressed_returnLabel#5 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 107610#L2707-4 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 107608#L2354-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 101529#L2523-14 assume !(0 == ~currentFloorID~0); 99590#L2529-14 assume !(~currentFloorID~0 > 0); 91296#$Ultimate##10047 assume ~currentFloorID~0 > 0; 94948#L2546-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 92142#L2547-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 91295#stopRequestedInDirection__wrappee__empty_returnLabel#15 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 107495#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 107494#L3078-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 107493#L2769-6 assume !(1 == ~currentHeading~0); 104966#L2779-18 assume !(0 == ~currentFloorID~0); 92087#L2779-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 96231#L2785-13 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 96232#L3087-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 105553#L1517-2 assume !(-1 == ~expectedDirection~0); 105549#$Ultimate##10885 assume !(1 == ~expectedDirection~0); 105548#L1530-2 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 105547#timeShift_returnLabel#3 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 105546#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~9#1; 105545#L1266-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~9#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~9#1; 105539#getOrigin_returnLabel#2 bobCall_#t~ret49#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret49#1;havoc bobCall_#t~ret49#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 105538#L409-1 assume 0 == initPersonOnFloor_~floor#1; 105364#L410-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 105357#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 105354#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 105347#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 105345#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 105344#bobCall_returnLabel#2 havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret55#1, cleanup_#t~ret56#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 105343#getCurrentFloorID_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 105342#getCurrentHeading_returnLabel#10 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 105340#L1386-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 105341#L1387-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 101569#L2167-36 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 93543#buttonForFloorIsPressed_returnLabel#37 __utac_acc__Specification3_spec__1_#t~ret36#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret36#1;havoc __utac_acc__Specification3_spec__1_#t~ret36#1; 105450#L1391-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 105446#L1492-3 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 105445#L2831-3 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 105438#L138-183 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 105434#isFloorCalling_returnLabel#184 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1; 105431#L2802-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 99082#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret91#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret91#1;havoc stopRequestedAtCurrentFloor_#t~ret91#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 95739#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 105258#L2979-6 assume !(0 != timeShift_~tmp___9~3#1); 105257#L3070-9 assume !(1 == ~doorState~0); 105256#L3070-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 105254#L2734-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 105040#isAnyLiftButtonPressed_returnLabel#7 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 105037#L2707-6 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 105035#L2354-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 101511#L2523-20 assume !(0 == ~currentFloorID~0); 99427#L2529-20 assume !(~currentFloorID~0 > 0); 96298#$Ultimate##13764 assume ~currentFloorID~0 > 0; 95830#L2546-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 95832#L2547-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 91807#stopRequestedInDirection__wrappee__empty_returnLabel#21 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 113221#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 113219#L3078-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 113220#L2769-9 assume !(1 == ~currentHeading~0); 92109#L2779-27 assume !(0 == ~currentFloorID~0); 92110#L2779-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 97647#L2785-19 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 93560#L3087-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 92010#L1517-3 assume !(-1 == ~expectedDirection~0); 92012#$Ultimate##14602 assume !(1 == ~expectedDirection~0); 99530#L1530-3 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 99531#timeShift_returnLabel#4 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 94629#L1693-2 [2024-11-09 15:57:32,428 INFO L747 eck$LassoCheckResult]: Loop: 94629#L1693-2 assume !false; 94630#L1694 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 97308#L1697 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 100213#isBlocked_returnLabel#1 cleanup_#t~ret55#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1; 100032#L1701 assume 1 != cleanup_~tmp___0~4#1; 100033#L1701-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret70#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~20#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~20#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_#t~ret67#1, anyStopRequested_#t~ret68#1, anyStopRequested_#t~ret69#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~19#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~19#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 99835#L138-244 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 94371#isFloorCalling_returnLabel#245 anyStopRequested_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret65#1;havoc anyStopRequested_#t~ret65#1; 93249#L2258 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 91971#anyStopRequested_returnLabel#1 isIdle_#t~ret70#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_#t~ret67#1, anyStopRequested_#t~ret68#1, anyStopRequested_#t~ret69#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~19#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~20#1 := isIdle_#t~ret70#1;havoc isIdle_#t~ret70#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~20#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 93331#isIdle_returnLabel#1 cleanup_#t~ret56#1 := isIdle_#res#1;havoc isIdle_#t~ret70#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~20#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret56#1;havoc cleanup_#t~ret56#1; 93332#L1713 assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 98917#getCurrentFloorID_returnLabel#9 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 99144#getCurrentHeading_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 111156#L1386-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 101562#L1387-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 101530#L2167-48 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 91729#buttonForFloorIsPressed_returnLabel#49 __utac_acc__Specification3_spec__1_#t~ret36#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret36#1;havoc __utac_acc__Specification3_spec__1_#t~ret36#1; 101783#L1391-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 101772#L1492-4 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 108051#L2831-4 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 108048#L138-249 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 108043#isFloorCalling_returnLabel#250 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1; 108031#L2802-4 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 108030#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret91#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret91#1;havoc stopRequestedAtCurrentFloor_#t~ret91#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 108028#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 108027#L2979-8 assume !(0 != timeShift_~tmp___9~3#1); 108026#L3070-12 assume 1 == ~doorState~0;~doorState~0 := 0; 108025#L3070-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 108020#L2734-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 108015#isAnyLiftButtonPressed_returnLabel#9 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 101640#L2707-8 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 101637#L2354-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 100548#L2523-26 assume !(0 == ~currentFloorID~0); 98385#L2529-26 assume !(~currentFloorID~0 > 0); 92314#$Ultimate##17432 assume ~currentFloorID~0 > 0; 92316#L2546-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 98495#L2547-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 91598#stopRequestedInDirection__wrappee__empty_returnLabel#27 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 114268#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 114266#L3078-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 114267#L2769-12 assume !(1 == ~currentHeading~0); 93293#L2779-36 assume !(0 == ~currentFloorID~0); 93294#L2779-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 95016#L2785-25 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 96802#L3087-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 99417#L1517-4 assume !(-1 == ~expectedDirection~0); 96309#$Ultimate##18270 assume !(1 == ~expectedDirection~0); 96310#L1530-4 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 99192#timeShift_returnLabel#5 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 94629#L1693-2 [2024-11-09 15:57:32,429 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:57:32,429 INFO L85 PathProgramCache]: Analyzing trace with hash 311242078, now seen corresponding path program 2 times [2024-11-09 15:57:32,429 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:57:32,431 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1915710488] [2024-11-09 15:57:32,431 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:57:32,431 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:57:32,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:57:32,647 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:57:32,647 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:57:32,648 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1915710488] [2024-11-09 15:57:32,649 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1915710488] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:57:32,649 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:57:32,649 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-09 15:57:32,649 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [798397117] [2024-11-09 15:57:32,649 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:57:32,650 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:57:32,650 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:57:32,651 INFO L85 PathProgramCache]: Analyzing trace with hash 933324520, now seen corresponding path program 1 times [2024-11-09 15:57:32,651 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:57:32,651 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [604608337] [2024-11-09 15:57:32,651 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:57:32,653 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:57:32,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:57:32,740 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:57:32,740 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:57:32,741 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [604608337] [2024-11-09 15:57:32,741 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [604608337] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:57:32,741 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:57:32,744 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-09 15:57:32,745 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1859979833] [2024-11-09 15:57:32,745 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:57:32,745 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:57:32,745 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:57:32,746 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-09 15:57:32,746 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-09 15:57:32,746 INFO L87 Difference]: Start difference. First operand 23826 states and 43881 transitions. cyclomatic complexity: 20056 Second operand has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 6 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:57:42,101 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:57:42,102 INFO L93 Difference]: Finished difference Result 23877 states and 43428 transitions. [2024-11-09 15:57:42,102 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 23877 states and 43428 transitions. [2024-11-09 15:57:42,329 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5946 [2024-11-09 15:57:42,411 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 23877 states to 23877 states and 43428 transitions. [2024-11-09 15:57:42,411 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 23877 [2024-11-09 15:57:42,435 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 23877 [2024-11-09 15:57:42,435 INFO L73 IsDeterministic]: Start isDeterministic. Operand 23877 states and 43428 transitions. [2024-11-09 15:57:42,460 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:57:42,460 INFO L218 hiAutomatonCegarLoop]: Abstraction has 23877 states and 43428 transitions. [2024-11-09 15:57:42,488 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23877 states and 43428 transitions. [2024-11-09 15:57:42,730 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23877 to 23826. [2024-11-09 15:57:42,765 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23826 states, 23826 states have (on average 1.8195668597330648) internal successors, (43353), 23825 states have internal predecessors, (43353), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:57:42,815 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23826 states to 23826 states and 43353 transitions. [2024-11-09 15:57:42,815 INFO L240 hiAutomatonCegarLoop]: Abstraction has 23826 states and 43353 transitions. [2024-11-09 15:57:42,816 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-11-09 15:57:42,817 INFO L425 stractBuchiCegarLoop]: Abstraction has 23826 states and 43353 transitions. [2024-11-09 15:57:42,817 INFO L332 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2024-11-09 15:57:42,817 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 23826 states and 43353 transitions. [2024-11-09 15:57:42,894 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5933 [2024-11-09 15:57:42,895 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:57:42,895 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:57:42,901 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:57:42,902 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:57:42,902 INFO L745 eck$LassoCheckResult]: Stem: 146046#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 145786#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret61#1, main_~retValue_acc~12#1, main_~tmp~15#1;havoc main_~retValue_acc~12#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true; 145787#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 147809#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~4#1;havoc valid_product_~retValue_acc~4#1;valid_product_~retValue_acc~4#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~4#1; 140206#valid_product_returnLabel#1 main_#t~ret61#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~4#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret61#1;havoc main_#t~ret61#1; 140207#L1884 assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true; 141866#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 138781#initFloors_returnLabel#1 assume { :end_inline_initFloors } true; 138782#initTopDown_returnLabel#1 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~9#1; 140652#L1266 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~9#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~9#1; 143423#getOrigin_returnLabel#1 bobCall_#t~ret49#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret49#1;havoc bobCall_#t~ret49#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 143424#L409 assume 0 == initPersonOnFloor_~floor#1; 147931#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 139008#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 140896#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 140748#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 140799#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 140800#bobCall_returnLabel#1 havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 143798#getCurrentFloorID_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 144571#getCurrentHeading_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 146180#L1386 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 143057#L1448 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 143058#L2167-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 139457#buttonForFloorIsPressed_returnLabel#6 __utac_acc__Specification3_spec__1_#t~ret41#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret41#1;havoc __utac_acc__Specification3_spec__1_#t~ret41#1; 139458#L1452 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 138890#L1492 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 146714#L2831 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 144901#getCurrentFloorID_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 144902#L2167-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 141249#L2171-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 140258#buttonForFloorIsPressed_returnLabel#11 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 139299#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 139300#L2979 assume !(0 != timeShift_~tmp___9~3#1); 139989#L3070 assume !(1 == ~doorState~0); 142402#L3070-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 146834#L2734 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 145690#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 145250#L2707 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 145251#L2354-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 146993#L2523-2 assume !(0 == ~currentFloorID~0); 143369#L2529-2 assume !(~currentFloorID~0 > 0); 142624#$Ultimate##2877 assume ~currentFloorID~0 > 0; 143882#L2546-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 143883#L2547-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 139260#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 148302#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 148301#L3078 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 147225#L2769 assume !(1 == ~currentHeading~0); 145008#L2779 assume !(0 == ~currentFloorID~0); 145009#L2779-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 146777#L2785-1 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 141227#L3087-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 152609#L1517 assume !(-1 == ~expectedDirection~0); 152606#$Ultimate##3715 assume !(1 == ~expectedDirection~0); 152604#L1530 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 152603#timeShift_returnLabel#1 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 152602#getCurrentFloorID_returnLabel#3 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 152601#getCurrentHeading_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 152599#L1386-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 152600#L1387-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 145179#L2167-12 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 141163#buttonForFloorIsPressed_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret36#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret36#1;havoc __utac_acc__Specification3_spec__1_#t~ret36#1; 144984#L1391-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 140480#L1492-1 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 147694#L2831-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 148015#getCurrentFloorID_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 146090#L2167-22 assume !(0 == buttonForFloorIsPressed_~floorID#1); 146091#L2171-22 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 142455#buttonForFloorIsPressed_returnLabel#23 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 153595#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 153589#L2979-2 assume !(0 != timeShift_~tmp___9~3#1); 142060#L3070-3 assume 1 == ~doorState~0;~doorState~0 := 0; 142061#L3070-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 144282#L2734-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 144082#isAnyLiftButtonPressed_returnLabel#3 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 146725#L2707-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 143227#L2354-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 143228#L2523-8 assume !(0 == ~currentFloorID~0); 147117#L2529-8 assume !(~currentFloorID~0 > 0); 143754#$Ultimate##6462 assume ~currentFloorID~0 > 0; 139648#L2546-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 139650#L2547-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 139051#stopRequestedInDirection__wrappee__empty_returnLabel#9 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 161390#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 155269#L3078-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 147651#L2769-3 assume !(1 == ~currentHeading~0); 147652#L2779-9 assume !(0 == ~currentFloorID~0); 146754#L2779-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 147610#L2785-7 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 146621#L3087-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 152563#L1517-1 assume !(-1 == ~expectedDirection~0); 152560#$Ultimate##7300 assume !(1 == ~expectedDirection~0); 152557#L1530-1 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 152555#timeShift_returnLabel#2 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 152554#getCurrentFloorID_returnLabel#5 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 152553#getCurrentHeading_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 152551#L1386-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 152550#L1387-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 138786#L2167-24 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 140516#buttonForFloorIsPressed_returnLabel#25 __utac_acc__Specification3_spec__1_#t~ret36#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret36#1;havoc __utac_acc__Specification3_spec__1_#t~ret36#1; 144073#L1391-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 141694#L1492-2 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 148334#L2831-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 146705#getCurrentFloorID_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 146706#L2167-34 assume !(0 == buttonForFloorIsPressed_~floorID#1); 147015#L2171-34 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 142213#buttonForFloorIsPressed_returnLabel#35 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 148167#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 151562#L2979-4 assume !(0 != timeShift_~tmp___9~3#1); 151561#L3070-6 assume !(1 == ~doorState~0); 151560#L3070-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 151557#L2734-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 151552#isAnyLiftButtonPressed_returnLabel#5 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 151545#L2707-4 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 151546#L2354-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 148305#L2523-14 assume !(0 == ~currentFloorID~0); 147295#L2529-14 assume !(~currentFloorID~0 > 0); 139014#$Ultimate##10047 assume ~currentFloorID~0 > 0; 142650#L2546-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 139849#L2547-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 139013#stopRequestedInDirection__wrappee__empty_returnLabel#15 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 151270#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 151266#L3078-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 151264#L2769-6 assume !(1 == ~currentHeading~0); 151192#L2779-18 assume !(0 == ~currentFloorID~0); 139794#L2779-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 143936#L2785-13 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 143937#L3087-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 149952#L1517-2 assume !(-1 == ~expectedDirection~0); 149948#$Ultimate##10885 assume !(1 == ~expectedDirection~0); 149947#L1530-2 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 149946#timeShift_returnLabel#3 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 149945#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~9#1; 149944#L1266-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~9#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~9#1; 149938#getOrigin_returnLabel#2 bobCall_#t~ret49#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret49#1;havoc bobCall_#t~ret49#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 149937#L409-1 assume 0 == initPersonOnFloor_~floor#1; 149902#L410-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 149894#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 149714#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 149567#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 149566#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 149565#bobCall_returnLabel#2 havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret55#1, cleanup_#t~ret56#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 149564#getCurrentFloorID_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 149562#getCurrentHeading_returnLabel#10 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 149559#L1386-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 149558#L1387-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 148379#L2167-36 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 141240#buttonForFloorIsPressed_returnLabel#37 __utac_acc__Specification3_spec__1_#t~ret36#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret36#1;havoc __utac_acc__Specification3_spec__1_#t~ret36#1; 151812#L1391-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 149563#L1492-3 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 151792#L2831-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 147872#getCurrentFloorID_returnLabel#8 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 145051#L2167-46 assume !(0 == buttonForFloorIsPressed_~floorID#1); 145052#L2171-46 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 151699#buttonForFloorIsPressed_returnLabel#47 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 151697#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 151695#L2979-6 assume !(0 != timeShift_~tmp___9~3#1); 151694#L3070-9 assume !(1 == ~doorState~0); 151693#L3070-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 151691#L2734-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 151687#isAnyLiftButtonPressed_returnLabel#7 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 151685#L2707-6 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 151684#L2354-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 148284#L2523-20 assume !(0 == ~currentFloorID~0); 147122#L2529-20 assume !(~currentFloorID~0 > 0); 144002#$Ultimate##13764 assume ~currentFloorID~0 > 0; 143536#L2546-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 143538#L2547-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 139517#stopRequestedInDirection__wrappee__empty_returnLabel#21 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 151596#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 151597#L3078-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 162520#L2769-9 assume !(1 == ~currentHeading~0); 139816#L2779-27 assume !(0 == ~currentFloorID~0); 139817#L2779-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 145352#L2785-19 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 141257#L3087-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 155811#L1517-3 assume !(-1 == ~expectedDirection~0); 155808#$Ultimate##14602 assume !(1 == ~expectedDirection~0); 155803#L1530-3 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 155797#timeShift_returnLabel#4 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 155796#L1693-2 [2024-11-09 15:57:42,903 INFO L747 eck$LassoCheckResult]: Loop: 155796#L1693-2 assume !false; 155795#L1694 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 155794#L1697 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 155793#isBlocked_returnLabel#1 cleanup_#t~ret55#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1; 155792#L1701 assume 1 != cleanup_~tmp___0~4#1; 155788#L1701-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret70#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~20#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~20#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_#t~ret67#1, anyStopRequested_#t~ret68#1, anyStopRequested_#t~ret69#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~19#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~19#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 155770#L138-244 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 155766#isFloorCalling_returnLabel#245 anyStopRequested_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret65#1;havoc anyStopRequested_#t~ret65#1; 155668#L2258 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 155656#anyStopRequested_returnLabel#1 isIdle_#t~ret70#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_#t~ret67#1, anyStopRequested_#t~ret68#1, anyStopRequested_#t~ret69#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~19#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~20#1 := isIdle_#t~ret70#1;havoc isIdle_#t~ret70#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~20#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 155655#isIdle_returnLabel#1 cleanup_#t~ret56#1 := isIdle_#res#1;havoc isIdle_#t~ret70#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~20#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret56#1;havoc cleanup_#t~ret56#1; 155654#L1713 assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 155649#getCurrentFloorID_returnLabel#9 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 155647#getCurrentHeading_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 154307#L1386-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 148232#L1448-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 148231#L2167-53 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 140432#buttonForFloorIsPressed_returnLabel#54 __utac_acc__Specification3_spec__1_#t~ret41#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret41#1;havoc __utac_acc__Specification3_spec__1_#t~ret41#1; 153777#L1452-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 153761#L1492-4 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 153759#L2831-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 153760#getCurrentFloorID_returnLabel#10 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 140902#L2167-58 assume !(0 == buttonForFloorIsPressed_~floorID#1); 140903#L2171-58 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 154564#buttonForFloorIsPressed_returnLabel#59 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 154563#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 154562#L2979-8 assume !(0 != timeShift_~tmp___9~3#1); 154561#L3070-12 assume 1 == ~doorState~0;~doorState~0 := 0; 154560#L3070-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 154555#L2734-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 154551#isAnyLiftButtonPressed_returnLabel#9 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 154545#L2707-8 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 154544#L2354-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 148223#L2523-26 assume !(0 == ~currentFloorID~0); 146095#L2529-26 assume !(~currentFloorID~0 > 0); 140017#$Ultimate##17432 assume ~currentFloorID~0 > 0; 140019#L2546-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 146202#L2547-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 139305#stopRequestedInDirection__wrappee__empty_returnLabel#27 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 162537#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 162536#L3078-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 162535#L2769-12 assume !(1 == ~currentHeading~0); 140991#L2779-36 assume !(0 == ~currentFloorID~0); 140992#L2779-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 142719#L2785-25 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 144507#L3087-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 155805#L1517-4 assume !(-1 == ~expectedDirection~0); 155801#$Ultimate##18270 assume !(1 == ~expectedDirection~0); 155799#L1530-4 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 155798#timeShift_returnLabel#5 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 155796#L1693-2 [2024-11-09 15:57:42,904 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:57:42,904 INFO L85 PathProgramCache]: Analyzing trace with hash 1033573351, now seen corresponding path program 1 times [2024-11-09 15:57:42,905 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:57:42,905 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [499233001] [2024-11-09 15:57:42,905 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:57:42,905 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:57:42,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:57:43,106 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:57:43,106 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:57:43,106 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [499233001] [2024-11-09 15:57:43,107 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [499233001] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:57:43,107 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:57:43,107 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-09 15:57:43,107 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [979441082] [2024-11-09 15:57:43,107 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:57:43,107 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:57:43,108 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:57:43,108 INFO L85 PathProgramCache]: Analyzing trace with hash 1564466118, now seen corresponding path program 1 times [2024-11-09 15:57:43,108 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:57:43,108 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [548021794] [2024-11-09 15:57:43,108 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:57:43,108 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:57:43,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:57:43,150 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:57:43,150 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:57:43,150 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [548021794] [2024-11-09 15:57:43,151 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [548021794] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:57:43,151 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:57:43,151 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:57:43,151 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [246465005] [2024-11-09 15:57:43,151 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:57:43,152 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:57:43,152 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:57:43,152 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-09 15:57:43,152 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-09 15:57:43,152 INFO L87 Difference]: Start difference. First operand 23826 states and 43353 transitions. cyclomatic complexity: 19528 Second operand has 3 states, 3 states have (on average 16.666666666666668) internal successors, (50), 3 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:57:45,650 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:57:45,651 INFO L93 Difference]: Finished difference Result 41293 states and 74659 transitions. [2024-11-09 15:57:45,651 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41293 states and 74659 transitions. [2024-11-09 15:57:45,982 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 10580 [2024-11-09 15:57:46,106 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41293 states to 41293 states and 74659 transitions. [2024-11-09 15:57:46,106 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 41293 [2024-11-09 15:57:46,144 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 41293 [2024-11-09 15:57:46,145 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41293 states and 74659 transitions. [2024-11-09 15:57:46,181 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:57:46,182 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41293 states and 74659 transitions. [2024-11-09 15:57:46,218 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41293 states and 74659 transitions. [2024-11-09 15:57:46,762 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41293 to 41135. [2024-11-09 15:57:46,816 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41135 states, 41135 states have (on average 1.8111340707426766) internal successors, (74501), 41134 states have internal predecessors, (74501), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:57:47,199 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41135 states to 41135 states and 74501 transitions. [2024-11-09 15:57:47,203 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41135 states and 74501 transitions. [2024-11-09 15:57:47,208 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-09 15:57:47,209 INFO L425 stractBuchiCegarLoop]: Abstraction has 41135 states and 74501 transitions. [2024-11-09 15:57:47,209 INFO L332 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2024-11-09 15:57:47,209 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41135 states and 74501 transitions. [2024-11-09 15:57:47,369 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 10536 [2024-11-09 15:57:47,370 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:57:47,370 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:57:47,378 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:57:47,379 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:57:47,380 INFO L745 eck$LassoCheckResult]: Stem: 211307#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 211037#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret61#1, main_~retValue_acc~12#1, main_~tmp~15#1;havoc main_~retValue_acc~12#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true; 211038#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 213203#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~4#1;havoc valid_product_~retValue_acc~4#1;valid_product_~retValue_acc~4#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~4#1; 205318#valid_product_returnLabel#1 main_#t~ret61#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~4#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret61#1;havoc main_#t~ret61#1; 205319#L1884 assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true; 207007#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 203908#initFloors_returnLabel#1 assume { :end_inline_initFloors } true; 203909#initTopDown_returnLabel#1 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~9#1; 205763#L1266 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~9#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~9#1; 208587#getOrigin_returnLabel#1 bobCall_#t~ret49#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret49#1;havoc bobCall_#t~ret49#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 208588#L409 assume 0 == initPersonOnFloor_~floor#1; 213347#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 204134#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 206012#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 205859#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 205912#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 205913#bobCall_returnLabel#1 havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 208968#getCurrentFloorID_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 209761#getCurrentHeading_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 211444#L1386 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 208210#L1448 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 208211#L2167-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 204577#buttonForFloorIsPressed_returnLabel#6 __utac_acc__Specification3_spec__1_#t~ret41#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret41#1;havoc __utac_acc__Specification3_spec__1_#t~ret41#1; 204578#L1452 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 204016#L1492 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 212027#L2831 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 210095#getCurrentFloorID_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 210096#L2167-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 206373#L2171-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 205371#buttonForFloorIsPressed_returnLabel#11 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 204418#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 204419#L2979 assume !(0 != timeShift_~tmp___9~3#1); 205104#L3070 assume !(1 == ~doorState~0); 207550#L3070-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 212157#L2734 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 210931#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 210471#L2707 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 210472#L2354-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 212324#L2523-2 assume !(0 == ~currentFloorID~0); 208528#L2529-2 assume ~currentFloorID~0 > 0; 208530#L2530-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 210774#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 204732#isFloorCalling_returnLabel#27 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 207774#L2534-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 204936#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 216359#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 216358#L3078 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 216357#L2769 assume !(1 == ~currentHeading~0); 216354#L2779 assume !(0 == ~currentFloorID~0); 216353#L2779-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 212098#L2785-1 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 216352#L3087-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 216350#L1517 assume !(-1 == ~expectedDirection~0); 216343#$Ultimate##3715 assume !(1 == ~expectedDirection~0); 216340#L1530 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 216339#timeShift_returnLabel#1 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 216338#getCurrentFloorID_returnLabel#3 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 216336#getCurrentHeading_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 216332#L1386-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 216333#L1387-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 216337#L2167-12 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 216573#buttonForFloorIsPressed_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret36#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret36#1;havoc __utac_acc__Specification3_spec__1_#t~ret36#1; 216502#L1391-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 216448#L1492-1 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 216499#L2831-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 216500#getCurrentFloorID_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 216583#L2167-22 assume !(0 == buttonForFloorIsPressed_~floorID#1); 216483#L2171-22 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 216480#buttonForFloorIsPressed_returnLabel#23 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 216477#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 216474#L2979-2 assume !(0 != timeShift_~tmp___9~3#1); 216471#L3070-3 assume 1 == ~doorState~0;~doorState~0 := 0; 216470#L3070-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 216466#L2734-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 216461#isAnyLiftButtonPressed_returnLabel#3 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 216458#L2707-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 216455#L2354-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 214270#L2523-8 assume !(0 == ~currentFloorID~0); 213787#L2529-8 assume ~currentFloorID~0 > 0; 213251#L2530-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 208047#L138-87 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 206989#isFloorCalling_returnLabel#88 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 212930#L2534-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 204177#stopRequestedInDirection__wrappee__empty_returnLabel#9 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 206241#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 206242#L3078-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 213027#L2769-3 assume !(1 == ~currentHeading~0); 213028#L2779-9 assume !(0 == ~currentFloorID~0); 212073#L2779-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 212980#L2785-7 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 205836#L3087-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 205837#L1517-1 assume !(-1 == ~expectedDirection~0); 213629#$Ultimate##7300 assume !(1 == ~expectedDirection~0); 209907#L1530-1 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 207709#timeShift_returnLabel#2 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 207710#getCurrentFloorID_returnLabel#5 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 207942#getCurrentHeading_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 207943#L1386-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 220226#L1387-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 221558#L2167-24 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 205625#buttonForFloorIsPressed_returnLabel#25 __utac_acc__Specification3_spec__1_#t~ret36#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret36#1;havoc __utac_acc__Specification3_spec__1_#t~ret36#1; 219700#L1391-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 219686#L1492-2 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 219684#L2831-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 219685#getCurrentFloorID_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 231930#L2167-34 assume !(0 == buttonForFloorIsPressed_~floorID#1); 219710#L2171-34 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 219660#buttonForFloorIsPressed_returnLabel#35 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 219659#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 219657#L2979-4 assume !(0 != timeShift_~tmp___9~3#1); 216196#L3070-6 assume !(1 == ~doorState~0); 216195#L3070-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 215310#L2734-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 215306#isAnyLiftButtonPressed_returnLabel#5 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 215303#L2707-4 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 213812#L2354-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 213732#L2523-14 assume !(0 == ~currentFloorID~0); 213690#L2529-14 assume ~currentFloorID~0 > 0; 210739#L2530-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 210740#L138-148 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 204793#isFloorCalling_returnLabel#149 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 204138#L2534-14 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 204139#stopRequestedInDirection__wrappee__empty_returnLabel#15 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 215284#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 215279#L3078-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 215152#L2769-6 assume !(1 == ~currentHeading~0); 215133#L2779-18 assume !(0 == ~currentFloorID~0); 210897#L2779-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 210898#L2785-13 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 215121#L3087-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 215119#L1517-2 assume !(-1 == ~expectedDirection~0); 215115#$Ultimate##10885 assume !(1 == ~expectedDirection~0); 215114#L1530-2 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 215113#timeShift_returnLabel#3 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 215112#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~9#1; 215111#L1266-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~9#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~9#1; 215105#getOrigin_returnLabel#2 bobCall_#t~ret49#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret49#1;havoc bobCall_#t~ret49#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 215104#L409-1 assume 0 == initPersonOnFloor_~floor#1; 215076#L410-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 215069#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 215066#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 215063#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 215062#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 215061#bobCall_returnLabel#2 havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret55#1, cleanup_#t~ret56#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 215060#getCurrentFloorID_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 215059#getCurrentHeading_returnLabel#10 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 215056#L1386-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 215057#L1387-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 215058#L2167-36 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 226992#buttonForFloorIsPressed_returnLabel#37 __utac_acc__Specification3_spec__1_#t~ret36#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret36#1;havoc __utac_acc__Specification3_spec__1_#t~ret36#1; 226889#L1391-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 215048#L1492-3 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 226885#L2831-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 213276#getCurrentFloorID_returnLabel#8 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 213277#L2167-46 assume !(0 == buttonForFloorIsPressed_~floorID#1); 208532#L2171-46 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 207720#buttonForFloorIsPressed_returnLabel#47 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 226594#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 226590#L2979-6 assume !(0 != timeShift_~tmp___9~3#1); 226577#L3070-9 assume !(1 == ~doorState~0); 226566#L3070-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 219563#L2734-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 219555#isAnyLiftButtonPressed_returnLabel#7 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 219552#L2707-6 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 219553#L2354-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 213793#L2523-20 assume !(0 == ~currentFloorID~0); 213751#L2529-20 assume ~currentFloorID~0 > 0; 209178#L2530-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 209179#L138-209 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 207485#isFloorCalling_returnLabel#210 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 211747#L2534-20 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 204635#stopRequestedInDirection__wrappee__empty_returnLabel#21 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 244825#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 244824#L3078-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 213613#L2769-9 assume !(1 == ~currentHeading~0); 204931#L2779-27 assume !(0 == ~currentFloorID~0); 204932#L2779-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 210581#L2785-19 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 206381#L3087-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 223137#L1517-3 assume !(-1 == ~expectedDirection~0); 223134#$Ultimate##14602 assume !(1 == ~expectedDirection~0); 223129#L1530-3 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 223123#timeShift_returnLabel#4 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 223122#L1693-2 [2024-11-09 15:57:47,381 INFO L747 eck$LassoCheckResult]: Loop: 223122#L1693-2 assume !false; 223121#L1694 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 223116#L1697 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 223114#isBlocked_returnLabel#1 cleanup_#t~ret55#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1; 223113#L1701 assume 1 != cleanup_~tmp___0~4#1; 223112#L1701-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret70#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~20#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~20#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_#t~ret67#1, anyStopRequested_#t~ret68#1, anyStopRequested_#t~ret69#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~19#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~19#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 223107#L138-244 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 223106#isFloorCalling_returnLabel#245 anyStopRequested_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret65#1;havoc anyStopRequested_#t~ret65#1; 223098#L2258 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 223082#anyStopRequested_returnLabel#1 isIdle_#t~ret70#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_#t~ret67#1, anyStopRequested_#t~ret68#1, anyStopRequested_#t~ret69#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~19#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~20#1 := isIdle_#t~ret70#1;havoc isIdle_#t~ret70#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~20#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 223080#isIdle_returnLabel#1 cleanup_#t~ret56#1 := isIdle_#res#1;havoc isIdle_#t~ret70#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~20#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret56#1;havoc cleanup_#t~ret56#1; 223079#L1713 assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 223078#getCurrentFloorID_returnLabel#9 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 223076#getCurrentHeading_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 223073#L1386-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 223071#L1387-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 206970#L2167-48 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 204559#buttonForFloorIsPressed_returnLabel#49 __utac_acc__Specification3_spec__1_#t~ret36#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret36#1;havoc __utac_acc__Specification3_spec__1_#t~ret36#1; 209821#L1391-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 207656#L1492-4 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 209429#L2831-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 226490#getCurrentFloorID_returnLabel#10 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 226489#L2167-58 assume !(0 == buttonForFloorIsPressed_~floorID#1); 205677#L2171-58 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 205642#buttonForFloorIsPressed_returnLabel#59 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 207795#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 242611#L2979-8 assume !(0 != timeShift_~tmp___9~3#1); 238078#L3070-12 assume 1 == ~doorState~0;~doorState~0 := 0; 211605#L3070-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 211606#L2734-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 205680#isAnyLiftButtonPressed_returnLabel#9 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 206026#L2707-8 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 232389#L2354-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 213807#L2523-26 assume !(0 == ~currentFloorID~0); 213737#L2529-26 assume ~currentFloorID~0 > 0; 211399#L2530-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 211400#L138-275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 213136#isFloorCalling_returnLabel#276 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 207537#L2534-26 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 204428#stopRequestedInDirection__wrappee__empty_returnLabel#27 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 242489#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 242488#L3078-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 209835#L2769-12 assume !(1 == ~currentHeading~0); 206108#L2779-36 assume !(0 == ~currentFloorID~0); 206109#L2779-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 207873#L2785-25 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 209694#L3087-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 223131#L1517-4 assume !(-1 == ~expectedDirection~0); 223127#$Ultimate##18270 assume !(1 == ~expectedDirection~0); 223125#L1530-4 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 223124#timeShift_returnLabel#5 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 223122#L1693-2 [2024-11-09 15:57:47,382 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:57:47,383 INFO L85 PathProgramCache]: Analyzing trace with hash 142618919, now seen corresponding path program 1 times [2024-11-09 15:57:47,383 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:57:47,383 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [925133859] [2024-11-09 15:57:47,383 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:57:47,384 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:57:47,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:57:47,756 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:57:47,757 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:57:47,757 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [925133859] [2024-11-09 15:57:47,758 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [925133859] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:57:47,758 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:57:47,758 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-09 15:57:47,758 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [491916907] [2024-11-09 15:57:47,758 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:57:47,759 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:57:47,759 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:57:47,759 INFO L85 PathProgramCache]: Analyzing trace with hash 1872510072, now seen corresponding path program 1 times [2024-11-09 15:57:47,759 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:57:47,759 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [278853107] [2024-11-09 15:57:47,759 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:57:47,760 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:57:47,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:57:47,882 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:57:47,883 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:57:47,883 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [278853107] [2024-11-09 15:57:47,883 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [278853107] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:57:47,883 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:57:47,883 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:57:47,883 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2116100614] [2024-11-09 15:57:47,883 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:57:47,884 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:57:47,884 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:57:47,884 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-09 15:57:47,884 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-09 15:57:47,884 INFO L87 Difference]: Start difference. First operand 41135 states and 74501 transitions. cyclomatic complexity: 33367 Second operand has 7 states, 7 states have (on average 7.285714285714286) internal successors, (51), 7 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:57:53,676 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:57:53,677 INFO L93 Difference]: Finished difference Result 51352 states and 92988 transitions. [2024-11-09 15:57:53,677 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 51352 states and 92988 transitions. [2024-11-09 15:57:53,974 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13194 [2024-11-09 15:57:54,123 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 51352 states to 51352 states and 92988 transitions. [2024-11-09 15:57:54,123 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 51352 [2024-11-09 15:57:54,160 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 51352 [2024-11-09 15:57:54,161 INFO L73 IsDeterministic]: Start isDeterministic. Operand 51352 states and 92988 transitions. [2024-11-09 15:57:54,217 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:57:54,217 INFO L218 hiAutomatonCegarLoop]: Abstraction has 51352 states and 92988 transitions. [2024-11-09 15:57:54,254 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51352 states and 92988 transitions. [2024-11-09 15:57:54,862 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51352 to 49211. [2024-11-09 15:57:54,922 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 49211 states, 49211 states have (on average 1.813070248521672) internal successors, (89223), 49210 states have internal predecessors, (89223), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:57:55,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49211 states to 49211 states and 89223 transitions. [2024-11-09 15:57:55,308 INFO L240 hiAutomatonCegarLoop]: Abstraction has 49211 states and 89223 transitions. [2024-11-09 15:57:55,309 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-11-09 15:57:55,310 INFO L425 stractBuchiCegarLoop]: Abstraction has 49211 states and 89223 transitions. [2024-11-09 15:57:55,314 INFO L332 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2024-11-09 15:57:55,314 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 49211 states and 89223 transitions. [2024-11-09 15:57:55,529 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12658 [2024-11-09 15:57:55,529 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:57:55,529 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:57:55,538 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:57:55,538 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:57:55,539 INFO L745 eck$LassoCheckResult]: Stem: 303858#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 303574#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret61#1, main_~retValue_acc~12#1, main_~tmp~15#1;havoc main_~retValue_acc~12#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true; 303575#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 305800#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~4#1;havoc valid_product_~retValue_acc~4#1;valid_product_~retValue_acc~4#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~4#1; 297837#valid_product_returnLabel#1 main_#t~ret61#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~4#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret61#1;havoc main_#t~ret61#1; 297838#L1884 assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true; 299505#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 296417#initFloors_returnLabel#1 assume { :end_inline_initFloors } true; 296418#initTopDown_returnLabel#1 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~9#1; 298280#L1266 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~9#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~9#1; 301100#getOrigin_returnLabel#1 bobCall_#t~ret49#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret49#1;havoc bobCall_#t~ret49#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 301101#L409 assume 0 == initPersonOnFloor_~floor#1; 305944#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 296643#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 298529#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 298376#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 298430#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 298431#bobCall_returnLabel#1 havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 301480#getCurrentFloorID_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 302284#getCurrentHeading_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 304001#L1386 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 300724#L1448 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 300725#L2167-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 297088#buttonForFloorIsPressed_returnLabel#6 __utac_acc__Specification3_spec__1_#t~ret41#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret41#1;havoc __utac_acc__Specification3_spec__1_#t~ret41#1; 297089#L1452 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 296526#L1492 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 304594#L2831 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 305616#L138 assume !(0 == isFloorCalling_~floorID#1); 299029#L142 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 299030#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1; 301093#L2802 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 297178#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret91#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret91#1;havoc stopRequestedAtCurrentFloor_#t~ret91#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 296930#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 296931#L2979 assume !(0 != timeShift_~tmp___9~3#1); 297621#L3070 assume !(1 == ~doorState~0); 300051#L3070-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 304727#L2734 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 303470#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 303006#L2707 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 303007#L2354-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 304894#L2523-2 assume !(0 == ~currentFloorID~0); 301047#L2529-2 assume ~currentFloorID~0 > 0; 301049#L2530-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 303311#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 297245#isFloorCalling_returnLabel#27 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 300279#L2534-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 297451#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 306366#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 306367#L3078 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 305146#L2769 assume !(1 == ~currentHeading~0); 305147#L2779 assume !(0 == ~currentFloorID~0); 304666#L2779-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 304667#L2785-1 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 307455#L3087-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 307453#L1517 assume !(-1 == ~expectedDirection~0); 307450#$Ultimate##3715 assume !(1 == ~expectedDirection~0); 307448#L1530 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 307447#timeShift_returnLabel#1 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 307446#getCurrentFloorID_returnLabel#3 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 307445#getCurrentHeading_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 307443#L1386-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 307436#L1448-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 307437#L2167-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 307531#buttonForFloorIsPressed_returnLabel#18 __utac_acc__Specification3_spec__1_#t~ret41#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret41#1;havoc __utac_acc__Specification3_spec__1_#t~ret41#1; 307524#L1452-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 307511#L1492-1 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 307509#L2831-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 307508#getCurrentFloorID_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 307507#L2167-22 assume !(0 == buttonForFloorIsPressed_~floorID#1); 307505#L2171-22 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 307498#buttonForFloorIsPressed_returnLabel#23 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 307496#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 307494#L2979-2 assume !(0 != timeShift_~tmp___9~3#1); 307493#L3070-3 assume 1 == ~doorState~0;~doorState~0 := 0; 307492#L3070-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 307489#L2734-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 307486#isAnyLiftButtonPressed_returnLabel#3 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 307485#L2707-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 300898#L2354-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 300899#L2523-8 assume !(0 == ~currentFloorID~0); 306393#L2529-8 assume ~currentFloorID~0 > 0; 305847#L2530-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 300556#L138-87 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 299488#isFloorCalling_returnLabel#88 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 305521#L2534-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 296687#stopRequestedInDirection__wrappee__empty_returnLabel#9 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 338001#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 338000#L3078-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 305613#L2769-3 assume !(1 == ~currentHeading~0); 305614#L2779-9 assume !(0 == ~currentFloorID~0); 304642#L2779-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 305569#L2785-7 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 304493#L3087-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 309873#L1517-1 assume !(-1 == ~expectedDirection~0); 309863#$Ultimate##7300 assume !(1 == ~expectedDirection~0); 309860#L1530-1 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 309853#timeShift_returnLabel#2 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 309178#getCurrentFloorID_returnLabel#5 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 309177#getCurrentHeading_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 309176#L1386-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 308876#L1448-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 308866#L2167-29 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 308854#buttonForFloorIsPressed_returnLabel#30 __utac_acc__Specification3_spec__1_#t~ret41#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret41#1;havoc __utac_acc__Specification3_spec__1_#t~ret41#1; 308846#L1452-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 308830#L1492-2 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 308828#L2831-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 308827#getCurrentFloorID_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 308826#L2167-34 assume !(0 == buttonForFloorIsPressed_~floorID#1); 308825#L2171-34 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 308822#buttonForFloorIsPressed_returnLabel#35 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 308811#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 308812#L2979-4 assume !(0 != timeShift_~tmp___9~3#1); 308800#L3070-6 assume !(1 == ~doorState~0); 307812#L3070-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 307807#L2734-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 307798#isAnyLiftButtonPressed_returnLabel#5 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 307793#L2707-4 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 307790#L2354-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 306395#L2523-14 assume !(0 == ~currentFloorID~0); 306394#L2529-14 assume ~currentFloorID~0 > 0; 303275#L2530-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 303276#L138-148 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 297305#isFloorCalling_returnLabel#149 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 296647#L2534-14 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 296648#stopRequestedInDirection__wrappee__empty_returnLabel#15 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 307660#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 307661#L3078-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 307002#L2769-6 assume !(1 == ~currentHeading~0); 306701#L2779-18 assume !(0 == ~currentFloorID~0); 299315#L2779-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 301624#L2785-13 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 301625#L3087-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 332784#L1517-2 assume !(-1 == ~expectedDirection~0); 332780#$Ultimate##10885 assume !(1 == ~expectedDirection~0); 332779#L1530-2 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 332778#timeShift_returnLabel#3 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 330067#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~9#1; 330068#L1266-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~9#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~9#1; 332495#getOrigin_returnLabel#2 bobCall_#t~ret49#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret49#1;havoc bobCall_#t~ret49#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 332494#L409-1 assume 0 == initPersonOnFloor_~floor#1; 332466#L410-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 332459#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 330007#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 330004#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 330002#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 330003#bobCall_returnLabel#2 havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret55#1, cleanup_#t~ret56#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 332438#getCurrentFloorID_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 332436#getCurrentHeading_returnLabel#10 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 332433#L1386-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 332432#L1448-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 313303#L2167-41 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 330044#buttonForFloorIsPressed_returnLabel#42 __utac_acc__Specification3_spec__1_#t~ret41#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret41#1;havoc __utac_acc__Specification3_spec__1_#t~ret41#1; 329834#L1452-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 329364#L1492-3 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 329362#L2831-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 329363#getCurrentFloorID_returnLabel#8 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 334215#L2167-46 assume !(0 == buttonForFloorIsPressed_~floorID#1); 322538#L2171-46 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 322539#buttonForFloorIsPressed_returnLabel#47 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 329195#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 329188#L2979-6 assume !(0 != timeShift_~tmp___9~3#1); 322043#L3070-9 assume !(1 == ~doorState~0); 322041#L3070-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 322017#L2734-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 322013#isAnyLiftButtonPressed_returnLabel#7 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 322005#L2707-6 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 319148#L2354-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 306434#L2523-20 assume !(0 == ~currentFloorID~0); 306431#L2529-20 assume ~currentFloorID~0 > 0; 301693#L2530-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 301694#L138-209 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 299981#isFloorCalling_returnLabel#210 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 304307#L2534-20 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 297147#stopRequestedInDirection__wrappee__empty_returnLabel#21 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 319188#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 319184#L3078-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 319185#L2769-9 assume !(1 == ~currentHeading~0); 330956#L2779-27 assume !(0 == ~currentFloorID~0); 330954#L2779-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 303110#L2785-19 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 330943#L3087-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 330940#L1517-3 assume !(-1 == ~expectedDirection~0); 330934#$Ultimate##14602 assume !(1 == ~expectedDirection~0); 330929#L1530-3 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 330926#timeShift_returnLabel#4 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 330925#L1693-2 [2024-11-09 15:57:55,541 INFO L747 eck$LassoCheckResult]: Loop: 330925#L1693-2 assume !false; 330924#L1694 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 330923#L1697 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 330922#isBlocked_returnLabel#1 cleanup_#t~ret55#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1; 330917#L1701 assume 1 != cleanup_~tmp___0~4#1; 330915#L1701-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret70#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~20#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~20#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_#t~ret67#1, anyStopRequested_#t~ret68#1, anyStopRequested_#t~ret69#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~19#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~19#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 329987#L138-244 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 329985#isFloorCalling_returnLabel#245 anyStopRequested_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret65#1;havoc anyStopRequested_#t~ret65#1; 329964#L2258 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 325980#anyStopRequested_returnLabel#1 isIdle_#t~ret70#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_#t~ret67#1, anyStopRequested_#t~ret68#1, anyStopRequested_#t~ret69#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~19#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~20#1 := isIdle_#t~ret70#1;havoc isIdle_#t~ret70#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~20#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 325979#isIdle_returnLabel#1 cleanup_#t~ret56#1 := isIdle_#res#1;havoc isIdle_#t~ret70#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~20#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret56#1;havoc cleanup_#t~ret56#1; 325977#L1713 assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 325976#getCurrentFloorID_returnLabel#9 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 325975#getCurrentHeading_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 325974#L1386-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 320148#L1448-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 302763#L2167-53 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 298058#buttonForFloorIsPressed_returnLabel#54 __utac_acc__Specification3_spec__1_#t~ret41#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret41#1;havoc __utac_acc__Specification3_spec__1_#t~ret41#1; 303488#L1452-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 301944#L1492-4 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 301945#L2831-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 325945#getCurrentFloorID_returnLabel#10 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 319649#L2167-58 assume !(0 == buttonForFloorIsPressed_~floorID#1); 319648#L2171-58 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 319594#buttonForFloorIsPressed_returnLabel#59 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 319593#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 319590#L2979-8 assume !(0 != timeShift_~tmp___9~3#1); 319592#L3070-12 assume 1 == ~doorState~0;~doorState~0 := 0; 329886#L3070-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 329884#L2734-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 329880#isAnyLiftButtonPressed_returnLabel#9 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 329879#L2707-8 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 319141#L2354-26 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 303976#isTopFloor_returnLabel#39 stopRequestedInDirection__wrappee__empty_#t~ret71#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~21#1 := stopRequestedInDirection__wrappee__empty_#t~ret71#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1; 303977#L2358-26 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~21#1); 304799#L2364-26 assume !(~currentFloorID~0 < 0); 345560#$Ultimate##17320 assume ~currentFloorID~0 < 0; 304389#L2381-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 299162#L2382-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 299163#stopRequestedInDirection__wrappee__empty_returnLabel#27 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 331062#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 330971#L3078-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 330973#L2769-12 assume !(1 == ~currentHeading~0); 298622#L2779-36 assume !(0 == ~currentFloorID~0); 298623#L2779-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 300378#L2785-25 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 330942#L3087-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 330937#L1517-4 assume !(-1 == ~expectedDirection~0); 330931#$Ultimate##18270 assume !(1 == ~expectedDirection~0); 330928#L1530-4 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 330927#timeShift_returnLabel#5 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 330925#L1693-2 [2024-11-09 15:57:55,542 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:57:55,542 INFO L85 PathProgramCache]: Analyzing trace with hash 1779540331, now seen corresponding path program 1 times [2024-11-09 15:57:55,543 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:57:55,543 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2085476010] [2024-11-09 15:57:55,543 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:57:55,543 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:57:55,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:57:55,777 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:57:55,777 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:57:55,777 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2085476010] [2024-11-09 15:57:55,777 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2085476010] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:57:55,777 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:57:55,778 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-09 15:57:55,778 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [477739335] [2024-11-09 15:57:55,778 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:57:55,778 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:57:55,779 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:57:55,779 INFO L85 PathProgramCache]: Analyzing trace with hash -1227098159, now seen corresponding path program 1 times [2024-11-09 15:57:55,779 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:57:55,779 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [618826622] [2024-11-09 15:57:55,779 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:57:55,780 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:57:55,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:57:55,915 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:57:55,916 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:57:55,916 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [618826622] [2024-11-09 15:57:55,916 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [618826622] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:57:55,916 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:57:55,917 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:57:55,917 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1097788285] [2024-11-09 15:57:55,917 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:57:55,917 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:57:55,917 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:57:55,918 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-09 15:57:55,918 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-09 15:57:55,918 INFO L87 Difference]: Start difference. First operand 49211 states and 89223 transitions. cyclomatic complexity: 40013 Second operand has 7 states, 7 states have (on average 7.285714285714286) internal successors, (51), 7 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:57:57,243 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:57:57,244 INFO L93 Difference]: Finished difference Result 70141 states and 127478 transitions. [2024-11-09 15:57:57,244 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 70141 states and 127478 transitions. [2024-11-09 15:57:57,594 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 18308 [2024-11-09 15:57:57,747 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 70141 states to 70063 states and 127364 transitions. [2024-11-09 15:57:57,747 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 70063 [2024-11-09 15:57:57,799 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 70063 [2024-11-09 15:57:57,799 INFO L73 IsDeterministic]: Start isDeterministic. Operand 70063 states and 127364 transitions. [2024-11-09 15:57:57,834 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:57:57,835 INFO L218 hiAutomatonCegarLoop]: Abstraction has 70063 states and 127364 transitions. [2024-11-09 15:57:57,893 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70063 states and 127364 transitions. [2024-11-09 15:57:58,748 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70063 to 63385. [2024-11-09 15:57:58,813 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63385 states, 63385 states have (on average 1.8141200599510925) internal successors, (114988), 63384 states have internal predecessors, (114988), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:57:59,188 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63385 states to 63385 states and 114988 transitions. [2024-11-09 15:57:59,189 INFO L240 hiAutomatonCegarLoop]: Abstraction has 63385 states and 114988 transitions. [2024-11-09 15:57:59,189 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-11-09 15:57:59,190 INFO L425 stractBuchiCegarLoop]: Abstraction has 63385 states and 114988 transitions. [2024-11-09 15:57:59,190 INFO L332 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2024-11-09 15:57:59,190 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 63385 states and 114988 transitions. [2024-11-09 15:57:59,333 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 16352 [2024-11-09 15:57:59,333 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:57:59,333 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:57:59,339 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:57:59,339 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:57:59,339 INFO L745 eck$LassoCheckResult]: Stem: 423193#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 422908#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret61#1, main_~retValue_acc~12#1, main_~tmp~15#1;havoc main_~retValue_acc~12#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true; 422909#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 425286#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~4#1;havoc valid_product_~retValue_acc~4#1;valid_product_~retValue_acc~4#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~4#1; 417179#valid_product_returnLabel#1 main_#t~ret61#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~4#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret61#1;havoc main_#t~ret61#1; 417180#L1884 assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true; 418814#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 415785#initFloors_returnLabel#1 assume { :end_inline_initFloors } true; 415786#initTopDown_returnLabel#1 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~9#1; 417596#L1266 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~9#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~9#1; 420399#getOrigin_returnLabel#1 bobCall_#t~ret49#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret49#1;havoc bobCall_#t~ret49#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 420400#L409 assume 0 == initPersonOnFloor_~floor#1; 425454#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 416009#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 417839#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 417687#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 417743#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 417744#bobCall_returnLabel#1 havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 420777#getCurrentFloorID_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 421594#getCurrentHeading_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 423337#L1386 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 420016#L1448 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 420017#L2167-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 416446#buttonForFloorIsPressed_returnLabel#6 __utac_acc__Specification3_spec__1_#t~ret41#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret41#1;havoc __utac_acc__Specification3_spec__1_#t~ret41#1; 416447#L1452 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 415892#L1492 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 423962#L2831 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 425086#L138 assume !(0 == isFloorCalling_~floorID#1); 418332#L142 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 418333#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1; 420393#L2802 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 416534#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret91#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret91#1;havoc stopRequestedAtCurrentFloor_#t~ret91#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 416288#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 416289#L2979 assume !(0 != timeShift_~tmp___9~3#1); 416970#L3070 assume !(1 == ~doorState~0); 419349#L3070-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 424109#L2734 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 422806#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 422318#L2707 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 422319#L2354-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 424298#L2523-2 assume !(0 == ~currentFloorID~0); 420344#L2529-2 assume ~currentFloorID~0 > 0; 420346#L2530-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 422641#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 416601#isFloorCalling_returnLabel#27 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 419579#L2534-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 416800#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 426098#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 425997#L3078 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 424569#L2769 assume !(1 == ~currentHeading~0); 422056#L2779 assume !(0 == ~currentFloorID~0); 422057#L2779-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 424039#L2785-1 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 418168#L3087-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 440200#L1517 assume !(-1 == ~expectedDirection~0); 440197#$Ultimate##3715 assume !(1 == ~expectedDirection~0); 440195#L1530 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 440194#timeShift_returnLabel#1 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 440193#getCurrentFloorID_returnLabel#3 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 440192#getCurrentHeading_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 440191#L1386-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 426013#L1448-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 440190#L2167-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 443078#buttonForFloorIsPressed_returnLabel#18 __utac_acc__Specification3_spec__1_#t~ret41#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret41#1;havoc __utac_acc__Specification3_spec__1_#t~ret41#1; 443075#L1452-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 443074#L1492-1 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 443072#L2831-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 443071#getCurrentFloorID_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 443070#L2167-22 assume !(0 == buttonForFloorIsPressed_~floorID#1); 443068#L2171-22 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 443065#buttonForFloorIsPressed_returnLabel#23 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 443063#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 430885#L2979-2 assume !(0 != timeShift_~tmp___9~3#1); 430884#L3070-3 assume 1 == ~doorState~0;~doorState~0 := 0; 430883#L3070-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 430880#L2734-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 430875#isAnyLiftButtonPressed_returnLabel#3 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 430873#L2707-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 430643#L2354-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 430582#L2523-8 assume !(0 == ~currentFloorID~0); 430581#L2529-8 assume ~currentFloorID~0 > 0; 430580#L2530-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 419855#L138-87 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 418799#isFloorCalling_returnLabel#88 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 430513#L2534-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 430502#stopRequestedInDirection__wrappee__empty_returnLabel#9 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 430499#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 430497#L3078-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 425083#L2769-3 assume !(1 == ~currentHeading~0); 425084#L2779-9 assume !(0 == ~currentFloorID~0); 425830#L2779-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 425831#L2785-7 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 444829#L3087-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 465356#L1517-1 assume !(-1 == ~expectedDirection~0); 465353#$Ultimate##7300 assume !(1 == ~expectedDirection~0); 465351#L1530-1 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 465350#timeShift_returnLabel#2 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 465349#getCurrentFloorID_returnLabel#5 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 444261#getCurrentHeading_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 444256#L1386-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 434776#L1448-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 423543#L2167-29 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 425007#buttonForFloorIsPressed_returnLabel#30 __utac_acc__Specification3_spec__1_#t~ret41#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret41#1;havoc __utac_acc__Specification3_spec__1_#t~ret41#1; 461509#L1452-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 461488#L1492-2 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 461485#L2831-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 461486#getCurrentFloorID_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 465362#L2167-34 assume !(0 == buttonForFloorIsPressed_~floorID#1); 465361#L2171-34 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 465321#buttonForFloorIsPressed_returnLabel#35 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 465314#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 465312#L2979-4 assume !(0 != timeShift_~tmp___9~3#1); 430865#L3070-6 assume !(1 == ~doorState~0); 444079#L3070-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 444076#L2734-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 444072#isAnyLiftButtonPressed_returnLabel#5 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 444070#L2707-4 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 444071#L2354-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 430856#L2523-14 assume !(0 == ~currentFloorID~0); 430857#L2529-14 assume ~currentFloorID~0 > 0; 422598#L2530-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 422599#L138-148 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 419169#isFloorCalling_returnLabel#149 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 419170#L2534-14 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 430675#stopRequestedInDirection__wrappee__empty_returnLabel#15 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 430672#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 430670#L3078-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 419991#L2769-6 assume !(1 == ~currentHeading~0); 416773#L2779-18 assume !(0 == ~currentFloorID~0); 416774#L2779-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 422769#L2785-13 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 447370#L3087-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 464667#L1517-2 assume !(-1 == ~expectedDirection~0); 464663#$Ultimate##10885 assume !(1 == ~expectedDirection~0); 464662#L1530-2 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 464661#timeShift_returnLabel#3 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 464660#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~9#1; 464659#L1266-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~9#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~9#1; 464653#getOrigin_returnLabel#2 bobCall_#t~ret49#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret49#1;havoc bobCall_#t~ret49#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 464652#L409-1 assume 0 == initPersonOnFloor_~floor#1; 464624#L410-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 464617#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 464614#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 464606#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 464604#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 464602#bobCall_returnLabel#2 havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret55#1, cleanup_#t~ret56#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 464600#getCurrentFloorID_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 464598#getCurrentHeading_returnLabel#10 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 464596#L1386-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 432967#L1448-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 463636#L2167-41 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 463634#buttonForFloorIsPressed_returnLabel#42 __utac_acc__Specification3_spec__1_#t~ret41#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret41#1;havoc __utac_acc__Specification3_spec__1_#t~ret41#1; 463624#L1452-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 463623#L1492-3 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 463621#L2831-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 463622#getCurrentFloorID_returnLabel#8 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 469945#L2167-46 assume !(0 == buttonForFloorIsPressed_~floorID#1); 463433#L2171-46 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 463434#buttonForFloorIsPressed_returnLabel#47 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 473239#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 473238#L2979-6 assume !(0 != timeShift_~tmp___9~3#1); 461154#L3070-9 assume !(1 == ~doorState~0); 461153#L3070-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 460432#L2734-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 418665#isAnyLiftButtonPressed_returnLabel#7 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 418666#L2707-6 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 420625#L2354-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 422763#L2523-20 assume !(0 == ~currentFloorID~0); 426254#L2529-20 assume ~currentFloorID~0 > 0; 421001#L2530-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 421002#L138-209 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 419283#isFloorCalling_returnLabel#210 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 423654#L2534-20 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 416504#stopRequestedInDirection__wrappee__empty_returnLabel#21 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 417646#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 451391#L3078-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 425821#L2769-9 assume !(1 == ~currentHeading~0); 416795#L2779-27 assume !(0 == ~currentFloorID~0); 416796#L2779-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 422432#L2785-19 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 418197#L3087-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 463567#L1517-3 assume !(-1 == ~expectedDirection~0); 463563#$Ultimate##14602 assume !(1 == ~expectedDirection~0); 463561#L1530-3 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 463541#timeShift_returnLabel#4 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 463542#L1693-2 [2024-11-09 15:57:59,341 INFO L747 eck$LassoCheckResult]: Loop: 463542#L1693-2 assume !false; 463536#L1694 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 463537#L1697 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 463516#isBlocked_returnLabel#1 cleanup_#t~ret55#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1; 463517#L1701 assume 1 != cleanup_~tmp___0~4#1; 463512#L1701-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret70#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~20#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~20#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_#t~ret67#1, anyStopRequested_#t~ret68#1, anyStopRequested_#t~ret69#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~19#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~19#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 463513#L138-244 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 463502#isFloorCalling_returnLabel#245 anyStopRequested_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret65#1;havoc anyStopRequested_#t~ret65#1; 463503#L2258 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 470019#anyStopRequested_returnLabel#1 isIdle_#t~ret70#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_#t~ret67#1, anyStopRequested_#t~ret68#1, anyStopRequested_#t~ret69#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~19#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~20#1 := isIdle_#t~ret70#1;havoc isIdle_#t~ret70#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~20#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 470018#isIdle_returnLabel#1 cleanup_#t~ret56#1 := isIdle_#res#1;havoc isIdle_#t~ret70#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~20#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret56#1;havoc cleanup_#t~ret56#1; 470017#L1713 assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 470016#getCurrentFloorID_returnLabel#9 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 470015#getCurrentHeading_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 470014#L1386-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 430343#L1448-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 470013#L2167-53 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 470010#buttonForFloorIsPressed_returnLabel#54 __utac_acc__Specification3_spec__1_#t~ret41#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret41#1;havoc __utac_acc__Specification3_spec__1_#t~ret41#1; 470005#L1452-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 470004#L1492-4 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 470003#L2831-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 470002#getCurrentFloorID_returnLabel#10 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 470001#L2167-58 assume !(0 == buttonForFloorIsPressed_~floorID#1); 463476#L2171-58 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 463465#buttonForFloorIsPressed_returnLabel#59 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 463462#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 442372#L2979-8 assume !(0 != timeShift_~tmp___9~3#1); 442371#L3070-12 assume 1 == ~doorState~0;~doorState~0 := 0; 442369#L3070-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 442370#L2734-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 454201#isAnyLiftButtonPressed_returnLabel#9 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 454199#L2707-8 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 454200#L2354-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 440690#L2523-26 assume !(0 == ~currentFloorID~0); 440689#L2529-26 assume ~currentFloorID~0 > 0; 440688#L2530-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 425257#L138-275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 425212#isFloorCalling_returnLabel#276 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 419336#L2534-26 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 416294#stopRequestedInDirection__wrappee__empty_returnLabel#27 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 468494#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 468493#L3078-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 421671#L2769-12 assume !(1 == ~currentHeading~0); 417932#L2779-36 assume !(0 == ~currentFloorID~0); 417933#L2779-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 419685#L2785-25 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 421525#L3087-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 463556#L1517-4 assume !(-1 == ~expectedDirection~0); 463550#$Ultimate##18270 assume !(1 == ~expectedDirection~0); 463548#L1530-4 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 463543#timeShift_returnLabel#5 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 463542#L1693-2 [2024-11-09 15:57:59,341 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:57:59,342 INFO L85 PathProgramCache]: Analyzing trace with hash -1164041747, now seen corresponding path program 1 times [2024-11-09 15:57:59,342 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:57:59,342 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1627977405] [2024-11-09 15:57:59,342 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:57:59,342 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:57:59,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:57:59,497 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:57:59,497 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:57:59,499 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1627977405] [2024-11-09 15:57:59,499 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1627977405] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:57:59,499 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:57:59,499 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-09 15:57:59,500 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1178469066] [2024-11-09 15:57:59,500 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:57:59,500 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:57:59,501 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:57:59,502 INFO L85 PathProgramCache]: Analyzing trace with hash 1937112703, now seen corresponding path program 1 times [2024-11-09 15:57:59,502 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:57:59,502 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [137656914] [2024-11-09 15:57:59,502 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:57:59,502 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:57:59,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:57:59,542 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:57:59,542 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:57:59,542 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [137656914] [2024-11-09 15:57:59,542 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [137656914] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:57:59,542 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:57:59,542 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:57:59,542 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1910184644] [2024-11-09 15:57:59,543 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:57:59,543 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:57:59,543 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:57:59,543 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-09 15:57:59,543 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-09 15:57:59,543 INFO L87 Difference]: Start difference. First operand 63385 states and 114988 transitions. cyclomatic complexity: 51605 Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:58:00,252 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:58:00,253 INFO L93 Difference]: Finished difference Result 87428 states and 158801 transitions. [2024-11-09 15:58:00,253 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 87428 states and 158801 transitions. [2024-11-09 15:58:00,826 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 22528 [2024-11-09 15:58:01,057 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 87428 states to 87428 states and 158801 transitions. [2024-11-09 15:58:01,057 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 87428 [2024-11-09 15:58:01,128 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 87428 [2024-11-09 15:58:01,128 INFO L73 IsDeterministic]: Start isDeterministic. Operand 87428 states and 158801 transitions. [2024-11-09 15:58:01,179 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:58:01,179 INFO L218 hiAutomatonCegarLoop]: Abstraction has 87428 states and 158801 transitions. [2024-11-09 15:58:01,259 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87428 states and 158801 transitions. [2024-11-09 15:58:02,221 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87428 to 85680. [2024-11-09 15:58:02,298 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85680 states, 85680 states have (on average 1.8186391223155929) internal successors, (155821), 85679 states have internal predecessors, (155821), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:58:02,475 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85680 states to 85680 states and 155821 transitions. [2024-11-09 15:58:02,475 INFO L240 hiAutomatonCegarLoop]: Abstraction has 85680 states and 155821 transitions. [2024-11-09 15:58:02,476 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-09 15:58:02,476 INFO L425 stractBuchiCegarLoop]: Abstraction has 85680 states and 155821 transitions. [2024-11-09 15:58:02,476 INFO L332 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2024-11-09 15:58:02,477 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 85680 states and 155821 transitions. [2024-11-09 15:58:03,149 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 21712 [2024-11-09 15:58:03,149 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:58:03,149 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:58:03,163 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:58:03,164 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:58:03,164 INFO L745 eck$LassoCheckResult]: Stem: 574006#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 573718#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret61#1, main_~retValue_acc~12#1, main_~tmp~15#1;havoc main_~retValue_acc~12#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true; 573719#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 576040#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~4#1;havoc valid_product_~retValue_acc~4#1;valid_product_~retValue_acc~4#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~4#1; 568004#valid_product_returnLabel#1 main_#t~ret61#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~4#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret61#1;havoc main_#t~ret61#1; 568005#L1884 assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true; 569630#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 566606#initFloors_returnLabel#1 assume { :end_inline_initFloors } true; 566607#initTopDown_returnLabel#1 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~9#1; 568422#L1266 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~9#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~9#1; 571205#getOrigin_returnLabel#1 bobCall_#t~ret49#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret49#1;havoc bobCall_#t~ret49#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 571206#L409 assume 0 == initPersonOnFloor_~floor#1; 576217#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 566832#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 568662#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 568513#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 568566#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 568567#bobCall_returnLabel#1 havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 571596#getCurrentFloorID_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 572407#getCurrentHeading_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 574145#L1386 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 570829#L1448 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 570831#$Ultimate##235 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 575765#$Ultimate##251 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 573298#$Ultimate##267 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 567256#$Ultimate##283 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 566715#L1492 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 574759#L2831 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 576222#L138 assume !(0 == isFloorCalling_~floorID#1); 577266#L142 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 577263#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1; 577259#L2802 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 577255#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret91#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret91#1;havoc stopRequestedAtCurrentFloor_#t~ret91#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 577253#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 577252#L2979 assume !(0 != timeShift_~tmp___9~3#1); 577251#L3070 assume !(1 == ~doorState~0); 577250#L3070-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 577245#L2734 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 577244#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 577243#L2707 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 575087#L2354-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 575088#L2523-2 assume !(0 == ~currentFloorID~0); 577275#L2529-2 assume ~currentFloorID~0 > 0; 577276#L2530-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 577279#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 577280#isFloorCalling_returnLabel#27 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 577277#L2534-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 567625#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 577565#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 577566#L3078 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 575336#L2769 assume !(1 == ~currentHeading~0); 575337#L2779 assume !(0 == ~currentFloorID~0); 574839#L2779-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 574840#L2785-1 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 589781#L3087-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 604447#L1517 assume !(-1 == ~expectedDirection~0); 604445#$Ultimate##3715 assume !(1 == ~expectedDirection~0); 604442#L1530 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 604441#timeShift_returnLabel#1 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 604440#getCurrentFloorID_returnLabel#3 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 604439#getCurrentHeading_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 604438#L1386-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 576729#L1448-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 604437#$Ultimate##3820 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 606031#$Ultimate##3836 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 606027#$Ultimate##3852 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 606024#$Ultimate##3868 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 606020#L1492-1 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 606017#L2831-1 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 606019#L138-61 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 606078#isFloorCalling_returnLabel#62 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1; 611111#L2802-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 611103#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret91#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret91#1;havoc stopRequestedAtCurrentFloor_#t~ret91#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 611102#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 611100#L2979-2 assume !(0 != timeShift_~tmp___9~3#1); 611099#L3070-3 assume 1 == ~doorState~0;~doorState~0 := 0; 611098#L3070-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 611095#L2734-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 611092#isAnyLiftButtonPressed_returnLabel#3 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 611090#L2707-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 611089#L2354-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 611082#L2523-8 assume !(0 == ~currentFloorID~0); 605987#L2529-8 assume ~currentFloorID~0 > 0; 605985#L2530-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 605986#L138-87 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 606099#isFloorCalling_returnLabel#88 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 605946#L2534-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 605914#stopRequestedInDirection__wrappee__empty_returnLabel#9 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 605910#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 605907#L3078-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 605909#L2769-3 assume !(1 == ~currentHeading~0); 608499#L2779-9 assume !(0 == ~currentFloorID~0); 608495#L2779-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 603823#L2785-7 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 603820#L3087-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 603816#L1517-1 assume !(-1 == ~expectedDirection~0); 603818#$Ultimate##7300 assume !(1 == ~expectedDirection~0); 603811#L1530-1 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 603810#timeShift_returnLabel#2 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 603809#getCurrentFloorID_returnLabel#5 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 603808#getCurrentHeading_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 602623#L1386-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 602618#L1448-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 601627#$Ultimate##7405 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 601621#$Ultimate##7421 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 601618#$Ultimate##7437 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 601616#$Ultimate##7453 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 601615#L1492-2 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 601612#L2831-2 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 601613#L138-122 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 601620#isFloorCalling_returnLabel#123 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1; 601597#L2802-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 601596#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#3 stopRequestedAtCurrentFloor_#t~ret91#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret91#1;havoc stopRequestedAtCurrentFloor_#t~ret91#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 601588#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 601585#L2979-4 assume !(0 != timeShift_~tmp___9~3#1); 601586#L3070-6 assume !(1 == ~doorState~0); 626099#L3070-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 626074#L2734-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 626068#isAnyLiftButtonPressed_returnLabel#5 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 626064#L2707-4 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 626062#L2354-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 626059#L2523-14 assume !(0 == ~currentFloorID~0); 613384#L2529-14 assume ~currentFloorID~0 > 0; 573408#L2530-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 573409#L138-148 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 567484#isFloorCalling_returnLabel#149 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 569983#L2534-14 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 581034#stopRequestedInDirection__wrappee__empty_returnLabel#15 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 580989#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 580990#L3078-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 570798#L2769-6 assume !(1 == ~currentHeading~0); 570799#L2779-18 assume !(0 == ~currentFloorID~0); 600478#L2779-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 600474#L2785-13 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 600471#L3087-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 600469#L1517-2 assume !(-1 == ~expectedDirection~0); 600467#$Ultimate##10885 assume !(1 == ~expectedDirection~0); 600444#L1530-2 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 600434#timeShift_returnLabel#3 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 600430#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~9#1; 600428#L1266-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~9#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~9#1; 600422#getOrigin_returnLabel#2 bobCall_#t~ret49#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret49#1;havoc bobCall_#t~ret49#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 600421#L409-1 assume 0 == initPersonOnFloor_~floor#1; 600393#L410-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 600386#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 600383#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 600354#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 600349#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 596411#bobCall_returnLabel#2 havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret55#1, cleanup_#t~ret56#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 596410#getCurrentFloorID_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 596409#getCurrentHeading_returnLabel#10 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 596377#L1386-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 582797#L1448-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 596038#$Ultimate##11122 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 596971#$Ultimate##11138 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 596969#$Ultimate##11154 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 596967#$Ultimate##11170 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 596966#L1492-3 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 596964#L2831-3 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 596956#L138-183 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 596952#isFloorCalling_returnLabel#184 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1; 596950#L2802-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 596944#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret91#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret91#1;havoc stopRequestedAtCurrentFloor_#t~ret91#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 596938#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 596935#L2979-6 assume !(0 != timeShift_~tmp___9~3#1); 596936#L3070-9 assume !(1 == ~doorState~0); 616866#L3070-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 616864#L2734-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 616860#isAnyLiftButtonPressed_returnLabel#7 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 616858#L2707-6 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 616859#L2354-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 616673#L2523-20 assume !(0 == ~currentFloorID~0); 592414#L2529-20 assume ~currentFloorID~0 > 0; 592411#L2530-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 592399#L138-209 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 574457#isFloorCalling_returnLabel#210 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 574458#L2534-20 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 567332#stopRequestedInDirection__wrappee__empty_returnLabel#21 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 610548#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 586756#L3078-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 586758#L2769-9 assume !(1 == ~currentHeading~0); 591543#L2779-27 assume !(0 == ~currentFloorID~0); 591533#L2779-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 591529#L2785-19 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 591526#L3087-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 591522#L1517-3 assume !(-1 == ~expectedDirection~0); 591521#$Ultimate##14602 assume !(1 == ~expectedDirection~0); 591002#L1530-3 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 590999#timeShift_returnLabel#4 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 590998#L1693-2 [2024-11-09 15:58:03,170 INFO L747 eck$LassoCheckResult]: Loop: 590998#L1693-2 assume !false; 590997#L1694 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 590996#L1697 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 590995#isBlocked_returnLabel#1 cleanup_#t~ret55#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1; 590994#L1701 assume 1 != cleanup_~tmp___0~4#1; 590989#L1701-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret70#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~20#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~20#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_#t~ret67#1, anyStopRequested_#t~ret68#1, anyStopRequested_#t~ret69#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~19#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~19#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 590984#L138-244 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 590973#isFloorCalling_returnLabel#245 anyStopRequested_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret65#1;havoc anyStopRequested_#t~ret65#1; 590922#L2258 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 590895#anyStopRequested_returnLabel#1 isIdle_#t~ret70#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_#t~ret67#1, anyStopRequested_#t~ret68#1, anyStopRequested_#t~ret69#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~19#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~20#1 := isIdle_#t~ret70#1;havoc isIdle_#t~ret70#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~20#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 590892#isIdle_returnLabel#1 cleanup_#t~ret56#1 := isIdle_#res#1;havoc isIdle_#t~ret70#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~20#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret56#1;havoc cleanup_#t~ret56#1; 590879#L1713 assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 589694#getCurrentFloorID_returnLabel#9 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 589695#getCurrentHeading_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 589673#L1386-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 576957#L1448-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 589723#$Ultimate##14790 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 571289#$Ultimate##14806 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 571291#$Ultimate##14822 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 590877#$Ultimate##14838 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 590862#L1492-4 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 590863#L2831-4 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 590871#L138-249 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 590872#isFloorCalling_returnLabel#250 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1; 594730#L2802-4 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 594729#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret91#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret88#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret91#1;havoc stopRequestedAtCurrentFloor_#t~ret91#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 594722#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 594720#L2979-8 assume !(0 != timeShift_~tmp___9~3#1); 590685#L3070-12 assume 1 == ~doorState~0;~doorState~0 := 0; 590683#L3070-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 590684#L2734-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 613637#isAnyLiftButtonPressed_returnLabel#9 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 613634#L2707-8 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 613632#L2354-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 613629#L2523-26 assume !(0 == ~currentFloorID~0); 586778#L2529-26 assume ~currentFloorID~0 > 0; 574094#L2530-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 574095#L138-275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 575963#isFloorCalling_returnLabel#276 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 570151#L2534-26 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 567118#stopRequestedInDirection__wrappee__empty_returnLabel#27 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 591052#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 591050#L3078-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 591047#L2769-12 assume !(1 == ~currentHeading~0); 580759#L2779-36 assume !(0 == ~currentFloorID~0); 575790#L2779-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 591013#L2785-25 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 591010#L3087-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 591008#L1517-4 assume !(-1 == ~expectedDirection~0); 591006#$Ultimate##18270 assume !(1 == ~expectedDirection~0); 591001#L1530-4 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 591000#timeShift_returnLabel#5 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 590998#L1693-2 [2024-11-09 15:58:03,171 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:58:03,171 INFO L85 PathProgramCache]: Analyzing trace with hash -1521401994, now seen corresponding path program 1 times [2024-11-09 15:58:03,171 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:58:03,171 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [507623282] [2024-11-09 15:58:03,171 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:58:03,171 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:58:03,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:58:03,356 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:58:03,357 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:58:03,357 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [507623282] [2024-11-09 15:58:03,357 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [507623282] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:58:03,357 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:58:03,357 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-09 15:58:03,357 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2080855573] [2024-11-09 15:58:03,358 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:58:03,358 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:58:03,359 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:58:03,359 INFO L85 PathProgramCache]: Analyzing trace with hash 1008304549, now seen corresponding path program 1 times [2024-11-09 15:58:03,359 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:58:03,359 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1802913328] [2024-11-09 15:58:03,359 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:58:03,359 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:58:03,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:58:03,445 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:58:03,445 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:58:03,445 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1802913328] [2024-11-09 15:58:03,445 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1802913328] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:58:03,445 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:58:03,445 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:58:03,445 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [13488783] [2024-11-09 15:58:03,445 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:58:03,446 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:58:03,446 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:58:03,446 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-09 15:58:03,446 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-09 15:58:03,446 INFO L87 Difference]: Start difference. First operand 85680 states and 155821 transitions. cyclomatic complexity: 70143 Second operand has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 7 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:58:04,232 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:58:04,232 INFO L93 Difference]: Finished difference Result 84693 states and 154141 transitions. [2024-11-09 15:58:04,232 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 84693 states and 154141 transitions. [2024-11-09 15:58:04,493 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 21366 [2024-11-09 15:58:04,697 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 84693 states to 84693 states and 154141 transitions. [2024-11-09 15:58:04,697 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 84693 [2024-11-09 15:58:05,085 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 84693 [2024-11-09 15:58:05,085 INFO L73 IsDeterministic]: Start isDeterministic. Operand 84693 states and 154141 transitions. [2024-11-09 15:58:05,127 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:58:05,127 INFO L218 hiAutomatonCegarLoop]: Abstraction has 84693 states and 154141 transitions. [2024-11-09 15:58:05,174 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84693 states and 154141 transitions. [2024-11-09 15:58:06,059 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84693 to 84693. [2024-11-09 15:58:06,136 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84693 states, 84693 states have (on average 1.8199969300886731) internal successors, (154141), 84692 states have internal predecessors, (154141), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:58:06,328 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84693 states to 84693 states and 154141 transitions. [2024-11-09 15:58:06,328 INFO L240 hiAutomatonCegarLoop]: Abstraction has 84693 states and 154141 transitions. [2024-11-09 15:58:06,329 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-09 15:58:06,329 INFO L425 stractBuchiCegarLoop]: Abstraction has 84693 states and 154141 transitions. [2024-11-09 15:58:06,329 INFO L332 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2024-11-09 15:58:06,329 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 84693 states and 154141 transitions. [2024-11-09 15:58:06,617 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 21366 [2024-11-09 15:58:06,617 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:58:06,617 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:58:06,622 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:58:06,622 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:58:06,623 INFO L745 eck$LassoCheckResult]: Stem: 744391#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 744103#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret61#1, main_~retValue_acc~12#1, main_~tmp~15#1;havoc main_~retValue_acc~12#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true; 744104#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 746493#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~4#1;havoc valid_product_~retValue_acc~4#1;valid_product_~retValue_acc~4#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~4#1; 738390#valid_product_returnLabel#1 main_#t~ret61#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~4#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret61#1;havoc main_#t~ret61#1; 738391#L1884 assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true; 740010#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 736991#initFloors_returnLabel#1 assume { :end_inline_initFloors } true; 736992#initTopDown_returnLabel#1 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~9#1; 738806#L1266 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~9#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~9#1; 741598#getOrigin_returnLabel#1 bobCall_#t~ret49#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret49#1;havoc bobCall_#t~ret49#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 741599#L409 assume 0 == initPersonOnFloor_~floor#1; 746663#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 737218#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 739046#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 738896#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 738949#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 738950#bobCall_returnLabel#1 havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 741979#getCurrentFloorID_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 742793#getCurrentHeading_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 744542#L1386 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 741213#L1448 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 741215#$Ultimate##235 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 746218#$Ultimate##251 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 743697#$Ultimate##267 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 737638#$Ultimate##283 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 737100#L1492 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 745158#L2831 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 743143#getCurrentFloorID_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 743144#L2167-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 747868#L2171-10 assume !(1 == buttonForFloorIsPressed_~floorID#1); 747855#L2175-10 assume 2 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_2~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 747850#buttonForFloorIsPressed_returnLabel#11 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 747844#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 747840#L2979 assume !(0 != timeShift_~tmp___9~3#1); 747839#L3070 assume !(1 == ~doorState~0); 747838#L3070-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 747796#L2734 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 747763#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 747724#L2707 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 747723#L2354-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 747722#L2523-2 assume !(0 == ~currentFloorID~0); 747721#L2529-2 assume ~currentFloorID~0 > 0; 747719#L2530-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 747720#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 748104#isFloorCalling_returnLabel#27 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 747699#L2534-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 747689#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 748289#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 748285#L3078 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 745761#L2769 assume !(1 == ~currentHeading~0); 745762#L2779 assume !(0 == ~currentFloorID~0); 745240#L2779-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 745241#L2785-1 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 753296#L3087-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 759902#L1517 assume !(-1 == ~expectedDirection~0); 759899#$Ultimate##3715 assume !(1 == ~expectedDirection~0); 759896#L1530 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 759895#timeShift_returnLabel#1 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 759894#getCurrentFloorID_returnLabel#3 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 759893#getCurrentHeading_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 759892#L1386-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 747175#L1448-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 759890#L2167-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 759886#buttonForFloorIsPressed_returnLabel#18 __utac_acc__Specification3_spec__1_#t~ret41#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret41#1;havoc __utac_acc__Specification3_spec__1_#t~ret41#1; 759884#L1452-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 759883#L1492-1 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 759881#L2831-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 759880#getCurrentFloorID_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 759879#L2167-22 assume !(0 == buttonForFloorIsPressed_~floorID#1); 759877#L2171-22 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 759872#buttonForFloorIsPressed_returnLabel#23 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 759870#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 755426#L2979-2 assume !(0 != timeShift_~tmp___9~3#1); 755421#L3070-3 assume 1 == ~doorState~0;~doorState~0 := 0; 755418#L3070-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 755314#L2734-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 755311#isAnyLiftButtonPressed_returnLabel#3 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 755309#L2707-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 755310#L2354-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 755377#L2523-8 assume !(0 == ~currentFloorID~0); 755375#L2529-8 assume ~currentFloorID~0 > 0; 755373#L2530-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 755374#L138-87 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 755397#isFloorCalling_returnLabel#88 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 752938#L2534-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 752939#stopRequestedInDirection__wrappee__empty_returnLabel#9 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 752932#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 752933#L3078-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 746283#L2769-3 assume !(1 == ~currentHeading~0); 746284#L2779-9 assume !(0 == ~currentFloorID~0); 762070#L2779-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 746231#L2785-7 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 745052#L3087-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 746865#L1517-1 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 746866#getCurrentHeading_returnLabel#5 __utac_acc__Specification3_spec__2_#t~ret46#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~3#1 := __utac_acc__Specification3_spec__2_#t~ret46#1;havoc __utac_acc__Specification3_spec__2_#t~ret46#1; 747042#L1521-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3#1); 747043#$Ultimate##7300 assume !(1 == ~expectedDirection~0); 745867#L1530-1 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 780138#timeShift_returnLabel#2 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 780137#getCurrentFloorID_returnLabel#5 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 740936#getCurrentHeading_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 740937#L1386-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 762605#L1448-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 762578#L2167-29 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 762575#buttonForFloorIsPressed_returnLabel#30 __utac_acc__Specification3_spec__1_#t~ret41#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret41#1;havoc __utac_acc__Specification3_spec__1_#t~ret41#1; 762573#L1452-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 762568#L1492-2 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 762565#L2831-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 762562#getCurrentFloorID_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 762560#L2167-34 assume !(0 == buttonForFloorIsPressed_~floorID#1); 761898#L2171-34 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 761900#buttonForFloorIsPressed_returnLabel#35 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 791518#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 791490#L2979-4 assume !(0 != timeShift_~tmp___9~3#1); 761594#L3070-6 assume !(1 == ~doorState~0); 761593#L3070-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 761591#L2734-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 761584#isAnyLiftButtonPressed_returnLabel#5 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 761461#L2707-4 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 761462#L2354-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 761486#L2523-14 assume !(0 == ~currentFloorID~0); 761484#L2529-14 assume ~currentFloorID~0 > 0; 761483#L2530-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 746801#L138-148 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 737865#isFloorCalling_returnLabel#149 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 761429#L2534-14 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 761101#stopRequestedInDirection__wrappee__empty_returnLabel#15 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 760983#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 760984#L3078-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 741182#L2769-6 assume !(1 == ~currentHeading~0); 737981#L2779-18 assume !(0 == ~currentFloorID~0); 737982#L2779-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 742127#L2785-13 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 742128#L3087-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 782708#L1517-2 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 782709#getCurrentHeading_returnLabel#8 __utac_acc__Specification3_spec__2_#t~ret46#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~3#1 := __utac_acc__Specification3_spec__2_#t~ret46#1;havoc __utac_acc__Specification3_spec__2_#t~ret46#1; 791109#L1521-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3#1); 791104#$Ultimate##10885 assume !(1 == ~expectedDirection~0); 791103#L1530-2 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 791102#timeShift_returnLabel#3 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 791101#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~9#1; 791100#L1266-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~9#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~9#1; 791094#getOrigin_returnLabel#2 bobCall_#t~ret49#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~9#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret49#1;havoc bobCall_#t~ret49#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 791092#L409-1 assume 0 == initPersonOnFloor_~floor#1; 782357#L410-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 782350#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 782347#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 782344#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 782343#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 782342#bobCall_returnLabel#2 havoc bobCall_#t~ret49#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret55#1, cleanup_#t~ret56#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 782341#getCurrentFloorID_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 782340#getCurrentHeading_returnLabel#10 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 782339#L1386-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 748574#L1448-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 782337#$Ultimate##11122 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 782336#$Ultimate##11138 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 782334#$Ultimate##11154 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 782329#$Ultimate##11170 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 782327#L1492-3 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 782324#L2831-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 782321#getCurrentFloorID_returnLabel#8 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 782318#L2167-46 assume !(0 == buttonForFloorIsPressed_~floorID#1); 782314#L2171-46 assume !(1 == buttonForFloorIsPressed_~floorID#1); 782310#L2175-46 assume 2 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_2~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 782307#buttonForFloorIsPressed_returnLabel#47 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 782305#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 782303#L2979-6 assume !(0 != timeShift_~tmp___9~3#1); 782302#L3070-9 assume !(1 == ~doorState~0); 782301#L3070-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 746698#L2734-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 738905#isAnyLiftButtonPressed_returnLabel#7 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 779917#L2707-6 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 779918#L2354-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 779949#L2523-20 assume !(0 == ~currentFloorID~0); 781718#L2529-20 assume ~currentFloorID~0 > 0; 784194#L2530-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 784195#L138-209 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 781744#isFloorCalling_returnLabel#210 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 781745#L2534-20 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 784162#stopRequestedInDirection__wrappee__empty_returnLabel#21 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 784161#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 784129#L3078-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 747023#L2769-9 assume !(1 == ~currentHeading~0); 738003#L2779-27 assume !(0 == ~currentFloorID~0); 738004#L2779-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 743637#L2785-19 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 787352#L3087-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 787348#L1517-3 assume !(-1 == ~expectedDirection~0); 787346#$Ultimate##14602 assume !(1 == ~expectedDirection~0); 787339#L1530-3 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 787336#timeShift_returnLabel#4 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 787335#L1693-2 [2024-11-09 15:58:06,625 INFO L747 eck$LassoCheckResult]: Loop: 787335#L1693-2 assume !false; 787334#L1694 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 787333#L1697 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 787328#isBlocked_returnLabel#1 cleanup_#t~ret55#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1; 787326#L1701 assume 1 != cleanup_~tmp___0~4#1; 787325#L1701-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret70#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~20#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~20#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_#t~ret67#1, anyStopRequested_#t~ret68#1, anyStopRequested_#t~ret69#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~19#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~19#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 787316#L138-244 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 787314#isFloorCalling_returnLabel#245 anyStopRequested_#t~ret65#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret65#1;havoc anyStopRequested_#t~ret65#1; 787301#L2258 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 787275#anyStopRequested_returnLabel#1 isIdle_#t~ret70#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_#t~ret67#1, anyStopRequested_#t~ret68#1, anyStopRequested_#t~ret69#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~19#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~20#1 := isIdle_#t~ret70#1;havoc isIdle_#t~ret70#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~20#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 787273#isIdle_returnLabel#1 cleanup_#t~ret56#1 := isIdle_#res#1;havoc isIdle_#t~ret70#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~20#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret56#1;havoc cleanup_#t~ret56#1; 787271#L1713 assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~27#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 787269#getCurrentFloorID_returnLabel#9 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 787267#getCurrentHeading_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret35#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 787265#L1386-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 771258#L1448-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 787260#L2167-53 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 787256#buttonForFloorIsPressed_returnLabel#54 __utac_acc__Specification3_spec__1_#t~ret41#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret41#1;havoc __utac_acc__Specification3_spec__1_#t~ret41#1; 787254#L1452-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 787255#L1492-4 havoc __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_#t~ret45#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~25#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 801820#L2831-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 747114#getCurrentFloorID_returnLabel#10 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~25#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 747115#L2167-58 assume !(0 == buttonForFloorIsPressed_~floorID#1); 815069#L2171-58 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 787193#buttonForFloorIsPressed_returnLabel#59 stopRequestedAtCurrentFloor_#t~ret90#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret90#1;havoc stopRequestedAtCurrentFloor_#t~ret90#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 787190#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~25#1, stopRequestedAtCurrentFloor_~tmp___0~9#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 787191#L2979-8 assume !(0 != timeShift_~tmp___9~3#1); 785361#L3070-12 assume 1 == ~doorState~0;~doorState~0 := 0; 785360#L3070-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 785354#L2734-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 785349#isAnyLiftButtonPressed_returnLabel#9 stopRequestedInDirection_#t~ret82#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret82#1;havoc stopRequestedInDirection_#t~ret82#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~22#1; 785347#L2707-8 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1#1; 785346#L2354-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 785345#L2523-26 assume !(0 == ~currentFloorID~0); 785344#L2529-26 assume ~currentFloorID~0 > 0; 785342#L2530-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 785343#L138-275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 785350#isFloorCalling_returnLabel#276 stopRequestedInDirection__wrappee__empty_#t~ret77#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret77#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret77#1; 785341#L2534-26 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 785310#stopRequestedInDirection__wrappee__empty_returnLabel#27 stopRequestedInDirection_#t~ret85#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_#t~ret75#1, stopRequestedInDirection__wrappee__empty_#t~ret76#1, stopRequestedInDirection__wrappee__empty_#t~ret77#1, stopRequestedInDirection__wrappee__empty_#t~ret78#1, stopRequestedInDirection__wrappee__empty_#t~ret79#1, stopRequestedInDirection__wrappee__empty_#t~ret80#1, stopRequestedInDirection__wrappee__empty_#t~ret81#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~21#1, stopRequestedInDirection__wrappee__empty_~tmp___0~7#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~1#1, stopRequestedInDirection__wrappee__empty_~tmp___6~1#1, stopRequestedInDirection__wrappee__empty_~tmp___7~1#1, stopRequestedInDirection__wrappee__empty_~tmp___8~1#1, stopRequestedInDirection__wrappee__empty_~tmp___9~1#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret85#1;havoc stopRequestedInDirection_#t~ret85#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 785510#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret82#1, stopRequestedInDirection_#t~ret83#1, stopRequestedInDirection_#t~ret84#1, stopRequestedInDirection_#t~ret85#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret111#1;havoc timeShift_#t~ret111#1; 785303#L3078-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 742876#L2769-12 assume !(1 == ~currentHeading~0); 739138#L2779-36 assume !(0 == ~currentFloorID~0); 739139#L2779-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 740875#L2785-25 havoc continueInDirection_#t~ret86#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 787601#L3087-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 787599#L1517-4 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 787351#getCurrentHeading_returnLabel#14 __utac_acc__Specification3_spec__2_#t~ret46#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~3#1 := __utac_acc__Specification3_spec__2_#t~ret46#1;havoc __utac_acc__Specification3_spec__2_#t~ret46#1; 787596#L1521-8 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3#1); 787341#$Ultimate##18270 assume !(1 == ~expectedDirection~0); 787338#L1530-4 havoc __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_#t~ret47#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 787337#timeShift_returnLabel#5 havoc timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_#t~ret112#1, timeShift_#t~ret113#1, timeShift_#t~ret114#1, timeShift_~tmp~27#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 787335#L1693-2 [2024-11-09 15:58:06,626 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:58:06,626 INFO L85 PathProgramCache]: Analyzing trace with hash 1316610894, now seen corresponding path program 1 times [2024-11-09 15:58:06,626 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:58:06,626 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1890348606] [2024-11-09 15:58:06,627 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:58:06,627 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:58:06,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:58:06,838 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:58:06,839 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:58:06,839 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1890348606] [2024-11-09 15:58:06,839 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1890348606] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:58:06,839 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:58:06,840 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-09 15:58:06,840 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [945002933] [2024-11-09 15:58:06,840 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:58:06,841 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:58:06,841 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:58:06,841 INFO L85 PathProgramCache]: Analyzing trace with hash 1355606404, now seen corresponding path program 1 times [2024-11-09 15:58:06,841 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:58:06,842 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1703387019] [2024-11-09 15:58:06,842 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:58:06,842 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:58:06,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:58:07,121 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:58:07,122 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:58:07,122 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1703387019] [2024-11-09 15:58:07,122 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1703387019] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:58:07,122 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:58:07,122 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-09 15:58:07,122 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1116144092] [2024-11-09 15:58:07,123 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:58:07,123 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:58:07,123 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:58:07,124 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-09 15:58:07,124 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-09 15:58:07,124 INFO L87 Difference]: Start difference. First operand 84693 states and 154141 transitions. cyclomatic complexity: 69451 Second operand has 5 states, 5 states have (on average 10.6) internal successors, (53), 5 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)