| (i1 * j) % j = 0, j0 < j, 0 < j, 0 ≤ i1, 0 ≤ j0, 0 ≤ i0, 0 ≤ i1 * j, 0 ≤ j0 + i0, (j0 + i0 % j) / j = 1 ∨ (j0 + i0 % j) / j = 0 ⊦ (i1 + i0 / j) + (j0 + i0 % j) / j = (i1 * j) / j + (j0 + i0) / j |
j0 < j, 0 < j, 0 ≤ i1, 0 ≤ j0, 0 ≤ i0, 0 ≤ j0 + i0, (j0 + i0 % j) / j = 1 ∨ (j0 + i0 % j) / j = 0 ⊦ i0 / j + (j0 + i0 % j) / j = (j0 + i0) / j
Used simplifier rules: mod-mult-04: j ≠ 0 ⊦ (i * j) % j = 0;%div-mult-03: j ≠ 0 ⊦ (i * j) / j = i;%forward-le-01: ⊦ i ≤ j ∧ 0 ≤ i → 0 ≤ j; (forward) from specification int-abs% ⊦ i ≤ 0 ∧ 0 ≤ j → i ≤ j; (s)% ⊦ 0 < i → (0 ≤ i * j ↔ 0 ≤ j); (s)%add-c: ⊦ i + j = j + i; from specification int-basic2%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2% ⊦ i + j = i + i0 ↔ j = i0; (s)%commutativity: ⊦ i * j = j * i; from specification int-mult%associativity: ⊦ i * j * j0 = (i * j) * j0; from specification int-mult% ⊦ i * 0 = 0; (s)