a=acardinalV1V0Aa<V2V0Aa<=c0V2qamemV2V1FIia=V1aadda-V0c1V4Aa=acardinalV4V3Aa<V5V3Aa<=c0V5qamemV5V4FELa-V0c1a=V1aemptya=V0c0FAa<=c0V6Aa<V6V0Aa<=c0V0La-V0c1INa=V0c0Ia<=c0V0F
VC for below
a=acardinalaemptyc0Ia<=c0a+V3c1La-V0c1Ia<a@V2V4V1Aa<=c0a@V2V4Ia<V4V0Aa<=c0V4FAa<V1V0Aa<=c0V1F
loop invariant init
a=V4a@V2V5Aa<V5c0Aa<=c0V5EqamemV4aemptyFIa=acardinalaemptyc0Ia<=c0a+V3c1La-V0c1Ia<a@V2V6V1Aa<=c0a@V2V6Ia<V6V0Aa<=c0V6FAa<V1V0Aa<=c0V1F
a=a@V2V6a@V2V7Aa<V7V0Aa<V6V7Aa<=c0V6EIamema@V2V5V4Ia=V8a@V2V9Aa<V9V5Aa<=c0V9EqamemV8V4FAa=acardinalV4V5Aa<=V5V3Aa<=c0V5FFIa<=c0a+V3c1La-V0c1Ia<a@V2V10V1Aa<=c0a@V2V10Ia<V10V0Aa<=c0V10FAa<V1V0Aa<=c0V1F
postcondition
a=acardinalV6a+V5c1Ia=V6aadda@V2V5V4FINamema@V2V5V4Ia=V7a@V2V8Aa<V8V5Aa<=c0V8EqamemV7V4FAa=acardinalV4V5Aa<=V5V3Aa<=c0V5FFIa<=c0a+V3c1La-V0c1Ia<a@V2V9V1Aa<=c0a@V2V9Ia<V9V0Aa<=c0V9FAa<V1V0Aa<=c0V1F
loop invariant preservation
a=V7a@V2V8Aa<V8a+V5c1Aa<=c0V8EqamemV7V6FIa=acardinalV6a+V5c1Ia=V6aadda@V2V5V4FINamema@V2V5V4Ia=V9a@V2V10Aa<V10V5Aa<=c0V10EqamemV9V4FAa=acardinalV4V5Aa<=V5V3Aa<=c0V5FFIa<=c0a+V3c1La-V0c1Ia<a@V2V11V1Aa<=c0a@V2V11Ia<V11V0Aa<=c0V11FAa<V1V0Aa<=c0V1F
a<=c0V1Ia=V5a@V2V6Aa<V6a+V3c1Aa<=c0V6EqamemV5V4FAa=acardinalV4a+V3c1FIa<=c0a+V3c1La-V0c1Ia<a@V2V7V1Aa<=c0a@V2V7Ia<V7V0Aa<=c0V7FAa<V1V0Aa<=c0V1F
precondition
asubsetV4V5Ia=acardinalV5V1Aa<V6V1Aa<=c0V6qamemV6V5FFIa=V7a@V2V8Aa<V8a+V3c1Aa<=c0V8EqamemV7V4FAa=acardinalV4a+V3c1FIa<=c0a+V3c1La-V0c1Ia<a@V2V9V1Aa<=c0a@V2V9Ia<V9V0Aa<=c0V9FAa<V1V0Aa<=c0V1F
assertion
fIasubsetV4V5Ia=acardinalV5V1Aa<V6V1Aa<=c0V6qamemV6V5FFIa=V7a@V2V8Aa<V8a+V3c1Aa<=c0V8EqamemV7V4FAa=acardinalV4a+V3c1FIa<=c0a+V3c1La-V0c1Ia<a@V2V9V1Aa<=c0a@V2V9Ia<V9V0Aa<=c0V9FAa<V1V0Aa<=c0V1F
unreachable point
fAasubsetaemptyV4Ia=acardinalV4V1Aa<V5V1Aa<=c0V5qamemV5V4FFAa<=c0V1Ia>c0a+V3c1La-V0c1Ia<a@V2V6V1Aa<=c0a@V2V6Ia<V6V0Aa<=c0V6FAa<V1V0Aa<=c0V1F
out of loop bounds
fAasubsetaemptyV4Ia=acardinalV4V1Aa<V5V1Aa<=c0V5qamemV5V4FFAa<=c0V1Ia>c0a+V3c1AfAasubsetV6V7Ia=acardinalV7V1Aa<V8V1Aa<=c0V8qamemV8V7FFAa<=c0V1Ia=V9a@V2V10Aa<V10a+V3c1Aa<=c0V10EqamemV9V6FAa=acardinalV6a+V3c1Aia=V13a@V2V14Aa<V14a+V11c1Aa<=c0V14EqamemV13V12FAa=acardinalV12a+V11c1Ia=V12aadda@V2V11V6Fa=a@V2V15a@V2V16Aa<V16V0Aa<V15V16Aa<=c0V15Eamema@V2V11V6Ia=V17a@V2V18Aa<V18V11Aa<=c0V18EqamemV17V6FAa=acardinalV6V11Aa<=V11V3Aa<=c0V11FFAa=V19a@V2V20Aa<V20c0Aa<=c0V20EqamemV19aemptyFAa=acardinalaemptyc0Ia<=c0a+V3c1La-V0c1Ia<a@V2V21V1Aa<=c0a@V2V21Ia<V21V0Aa<=c0V21FAa<V1V0Aa<=c0V1F
VC for pigeonhole

db1c9565eac7ffd4f6ec3f8e54223e1b 1H0
163f416d400b2b2ea78e9d75e36e3934 19H18
08df01aa36fe93541cb5d8fd2397f307 3H2
4bc6381206fba24da618e1a8e2cd4005 3H4
591ef659dd72fc82a6071730bb4e5842 6H5
a19fb1d4bd8b91978c5a67dc19aa5b87 8H7
4788303152769e4bef9e6e0a056167e7 8H9
bb7207f452367c6345bd5ba527c39e92 11H10
7733ee91806bffcd2f6c9150442c52b0 13H12
317a1bc604ba91bb5378f5cd2ff9ebb9 15H14
b99ea9bb8273d0b91b1ebfa807e3d1a6 17H16
