a=a@apV0aTrueAa>=V0c0E
a>=axc0
a=a@apaxaTrue
arayaTuple2apax
aaccearV2V3qa=a@a@V1V2V3aTrueFay
postcondition
aaccearV3V4qa=a@a@V2V3V4aTrueFV1IarV1aTuple2apaxF
aaccearV6V7qa=a@a@V5V6V7aTrueFaTuple2apax
aaccearV3V4qa=a@a@V2V3V4aTrueFaTuple2apV1Ia=a@apV1aTrueAa>=V1c0F
a>=anc0
a=a@apa+axanaTrue
a>anc0
a<a-anc1anAa<=c0an
variant decrease
a=a@apa+a+axc1a-anc1aTrueAa>=a-anc1c0Aa>=a+axc1c0
precondition
aaccearV6V7qa=a@a@V5V6V7aTrueFaTuple2apa+axc1ONa>anc0
aaccearV9V10qa=a@a@V8V9V10aTrueFaTuple2apax
a=a@apanaTrue
aaccearV2V3qa=a@a@V1V2V3aTrueFaTuple2apV0Ia=a@apV0aTrueAa>=V0c0F
aaccearV7V8qa=a@a@V6V7V8aTrueFaTuple2apV4Ia=a@apa+V4V5aTrueAa>=V5c0Aa>=V4c0F
a>=an1c0
a>=axan1
Na=a@apan1aTrue
araTuple2apa+an1c1aTuple2apan1
aaccearV10V11qa=a@a@V9V10V11aTrueFaTuple2apan1
aaccearV8V9qa=a@a@V7V8V9aTrueFaTuple2apV5Ia=a@apa+V5V6aTrueAa>=V6c0Aa>=V5c0F
a=a@apV10aTrueAa>=V10anE
Na=a@apanaTrue
aaccearV12V13qa=a@a@V11V12V13aTrueFaTuple2apanAaraTuple2apa+anc1aTuple2apan
a=a@apV11aTrueAa>=V11a+anc1EAa>=a+anc1c0
ia=a@aparesultaTrueAa>=aresultc0a=aresultana=a@apanaTrue
a=a@aparesultaTrueAa>=aresultc0
a=a@apV10aTrueAa>=V10c0EAa>=c0c0
a>=aresultc0
a=a@aparesultaTrue
a=a@V0V1aTrueAa>=V1c0Ia=a@V0V1aTrueAa>=V1c0FAa=a@V0V2aTrueAa>=V2c0EAa>=c0c0Aa=a@V0V5aTrueAa>=V5c0Iia=a@V0V5aTrueAa>=V5c0a=V5V3a=V4aTrueFAa=a@V0V7aTrueAa>=V7V6EAa>=V6c0AaaccearV9V10qa=a@a@V8V9V10aTrueFaTuple2V0V3AaraTuple2V0V6aTuple2V0V3La+V3c1INa=V4aTrueLa@V0V3Ia=a@V0V11aTrueAa>=V11V3EAa>=V3c0FIaaccearV15V16qa=a@a@V14V15V16aTrueFaTuple2V0V12Ia=a@V0a+V12V13aTrueAa>=V13c0Aa>=V12c0FAaaccearV20V21qa=a@a@V19V20V21aTrueFaTuple2V0V17IaaccearV23V24qa=a@a@V22V23V24aTrueFaTuple2V0a+V17c1ONa>V18c0Aa=a@V0a+V26V25aTrueAa>=V25c0Aa>=V26c0Aa<V25V18Aa<=c0V18La+V17c1La-V18c1Ia>V18c0Ia=a@V0a+V17V18aTrueAa>=V18c0Aa>=V17c0FIaaccearV29V30qa=a@a@V28V29V30aTrueFaTuple2V0V27Ia=a@V0V27aTrueAa>=V27c0FAaaccearV33V34qa=a@a@V32V33V34aTrueFaTuple2V0V31IaaccearV37V38qa=a@a@V36V37V38aTrueFV35IarV35aTuple2V0V31FAaaccearV43V44qa=a@a@V42V43V44aTrueFV41IarV41aTuple2V0V31LaTuple2V39V40FIa=a@V0V31aTrueAa>=V31c0FIa=a@V0V45aTrueAa>=V45c0EF
VC for witness

7660c6aa8b150a16934b2a6db3a0cce2 37H36
0c04bb4273202f9c60fa270344fda559 5H4H3H2H1H0
b16610a0692f765485f883c19b8a355a 5H7H6H2H1H0
6d62e41ace87753ee78cc5e0e1cc85fb 13H12H11H10H9H1H8H0
ea8390dbf700ff7b53871a7744334cdb 15H14H11H10H9H1H8H0
a2739a527912eac93bac13ae23b75276 5H17H16H10H9H1H8H0
0cb79177f5b6b2b78f0fe48071745deb 13H29H28H27H9H26H8H0
00293968fa323e50281257e6ccc331b9 13H24H23H2H22H21H20H19H18H9
45d3f47eb62848acb82c0799ca92710c 13H25H23H2H22H21H20H19H18H9
6508bb7b6777a442e5935cfda35114f0 13H25H23H2H22H21H20H19H18H9
4b42bc6050fa1e7afa84ebf32bc5122b 15H30H28H27H9H26H8H0
9f8fe2cb03ae926ea2f19e2c939a3543 5H32H31H27H9H26H8H0
b0b4117057adc909e041536af711fc09 15H33H26H8H0
83c8e9812bef73fb358585406e333ba8 5H32H35H34H26H8H0
