| n + nused0 + 1 < # zbrar, n + 1 < # zbrar, ∀ n, zbrar. n + nused0 < # zbrar → payload(copy(zbrar, n, zbrar, n + 1, nused0), n + 1, nused0) = payload(zbrar, n, nused0) ⊦ (zbrar[2 * n - n].entry? ⊃ payload(copy(zbrar, n, zbrar, n + 1, nused0 + 1), 2 + n, nused0)[zbrar[2 * n - n].key, zbrar[2 * n - n].adr] ;payload(copy(zbrar, n, zbrar, n + 1, nused0 + 1), 2 + n, nused0) ) = payload(zbrar, n, nused0 + 1) |
2 * n = n0 + n, n + 1 < # zbrar, n + nused0 + 1 < # zbrar, n ≤ 2 * n, ∀ n, zbrar. n + nused0 < # zbrar → payload(copy(zbrar, n, zbrar, n + 1, nused0), n + 1, nused0) = payload(zbrar, n, nused0) ⊦ (zbrar[n0].entry? ⊃ payload(copy(zbrar, n, zbrar, n + 1, nused0 + 1), 2 + n, nused0)[zbrar[n0].key, zbrar[n0].adr] ;payload(copy(zbrar, n, zbrar, n + 1, nused0 + 1), 2 + n, nused0) ) = payload(zbrar, n, nused0 + 1)
Used simplifier rules: ⊦ m ≤ n ↔ ¬ n < m; (ss)% ⊦ ¬ 2 * n < n; (s)%mult-a: ⊦ m0 * m * n = (m0 * m) * n; from specification nat-mult%mult-c: ⊦ m * n = n * m; from specification nat-mult%n ≤ m ⊦ n0 = m - n ↔ m = n0 + n; (elim) Used terms: 2 * n, n, n0