| analyzeMemWorker(Expression, State, int) |   | 56% | | 53% | 12 | 26 | 22 | 53 | 0 | 1 |
| analyzeFuncCall(FunctionCallExpression, State, int) | | 0% | | 0% | 6 | 6 | 14 | 14 | 1 | 1 |
| analyzeType(CIVLType, State, int, Set) | | 67% | | 53% | 5 | 9 | 6 | 23 | 0 | 1 |
| analyzeFuncGuard(FunctionGuardExpression, State, int) | | 0% | | 0% | 2 | 2 | 4 | 4 | 1 | 1 |
| analyzeAbstractFuncCall(AbstractFunctionCallExpression, State, int) | | 0% | | 0% | 2 | 2 | 4 | 4 | 1 | 1 |
| analyzeExtQuantifier(ExtendedQuantifiedExpression, State, int) | | 0% | | n/a | 1 | 1 | 4 | 4 | 1 | 1 |
| analyzeArrayLambda(ArrayLambdaExpression, State, int) | | 0% | | n/a | 1 | 1 | 4 | 4 | 1 | 1 |
| analyzeAsAddressof(State, int, LHSExpression) | | 77% | | 71% | 2 | 6 | 4 | 18 | 0 | 1 |
| analyzeSizeofType(SizeofTypeExpression, State, int) | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| analyzeDyTypeOf(DynamicTypeOfExpression, State, int) | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| analyze(Expression, State, int) | | 42% | | n/a | 0 | 1 | 2 | 3 | 0 | 1 |
| analyzeDot(DotExpression, State, int) | | 86% | | 50% | 2 | 3 | 1 | 8 | 0 | 1 |
| analyzeSizeof(SizeofExpression, State, int) | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| analyzeScopeof(ScopeofExpression, State, int) | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| analyzeLambda(LambdaExpression, State, int) | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| analyzeDeref(DereferenceExpression, State, int) | | 94% | | 50% | 1 | 2 | 1 | 7 | 0 | 1 |
| analyzeSubscript(SubscriptExpression, State, int) | | 100% | | 50% | 1 | 2 | 0 | 7 | 0 | 1 |
| analyzeCond(ConditionalExpression, State, int) | | 100% | | 100% | 0 | 3 | 0 | 8 | 0 | 1 |
| analyzeVariable(VariableExpression, State, int) | | 100% | | 50% | 1 | 2 | 0 | 6 | 0 | 1 |
| analyzeRange(RegularRangeExpression, State, int) | | 100% | | 50% | 1 | 2 | 0 | 5 | 0 | 1 |
| analyzeCompoundLiteral(CompoundLiteralExpression, State, int) | | 100% | | 75% | 1 | 3 | 0 | 5 | 0 | 1 |
| analyzeRecDomLit(RecDomainLiteralExpression, State, int) | | 100% | | 100% | 0 | 2 | 0 | 5 | 0 | 1 |
| ReadSetAnalyzer(Evaluator) | | 100% | | n/a | 0 | 1 | 0 | 6 | 0 | 1 |
| analyzeCast(CastExpression, State, int) | | 100% | | n/a | 0 | 1 | 0 | 4 | 0 | 1 |
| analyzeBinary(BinaryExpression, State, int) | | 100% | | n/a | 0 | 1 | 0 | 3 | 0 | 1 |
| isPointsToConstantScope(SymbolicExpression) | | 100% | | n/a | 0 | 1 | 0 | 2 | 0 | 1 |
| analyzeInitVal(InitialValueExpression, State, int) | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| analyzeAddressOf(AddressOfExpression, State, int) | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| analyzeUnaryExpression(UnaryExpression, State, int) | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |