Used simplifier rules: in-diff: ⊦ adr ∈ st \ ns ↔ adr ∈ st ∧ ¬ adr.lnum ∈ ns;% ⊦ @(m, m0, m1).lnum = m; (s)