| j * (i1 + i0) + j1 = i2 * j + j0, abs(j0) < j, 1 < j, i2 * j + j0 < 0, i0 < 0, j1 < j, 0 < j1, 0 < j, j0 < j1, j0 < j, j0 ≤ 0, 0 ≤ i1 * j + j1 ⊦ j1 = j0 + j, j1 = 0, (i1 + i0) * j + (j1 - j0) = i2 * j + 0 ∧ 0 ≤ j1 - j0 ∧ j1 - j0 < j ∧ 0 ≤ 0 |
j * (i1 + i0) + j1 = i2 * j + j0, abs(j0) < j, 1 < j, i2 * j + j0 < 0, i0 < 0, j1 < j, 0 < j1, 0 < j, j0 < j1, j0 < j, j0 + j < j1, j0 ≤ 0, 0 ≤ i1 * j + j1, j0 ≤ j1 ⊦ j1 = j0 + j, j1 = 0
Used simplifier rules: ⊦ i ≠ j → (i ≤ j ↔ i < j); (s)% ⊦ i < j ↔ ¬ j ≤ i; (ss)% ⊦ i < j → ¬ j < i; (s)% ⊦ i ≤ j ↔ ¬ j < i; (ss)%commutativity: ⊦ i * j = j * i; from specification int-mult% ⊦ i - j < i0 ↔ i < j + i0; (s)% ⊦ i ≤ j - i0 ↔ i + i0 ≤ j; (s)% ⊦ i - j = i0 ↔ i = i0 + j; (s)% ⊦ i + 0 = i; (s)%add-c: ⊦ i + j = j + i; from specification int-basic2%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2% ⊦ i + (j - i0) = i + j - i0; (s)