| i0 = i2 * j + j1 ∧ 0 ≤ j1 ∧ j1 < j, j1 = 0, 0 ≤ j0, j0 < j, 0 ≤ i0, 0 ≤ i1, 0 < j ⊦ ((i1 * j + j0) + i0) / j = i1 + i2 |
0 ≤ i1, 0 < j, 0 ≤ j0, j0 < j, 0 ≤ i2 ⊦ (j * (i2 + i1) + j0) / j = i1 + i2
Used simplifier rules: zero-ge: ⊦ 0 < i → (0 ≤ i * j ↔ 0 ≤ j); from specification int-mult%commutativity: ⊦ i * j = j * i; from specification int-mult%associativity: ⊦ i * j * j0 = (i * j) * j0; from specification int-mult%add-c: ⊦ i + j = j + i; from specification int-basic2%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2%add-zero: ⊦ i + 0 = i; from specification int-basic2%dist-rmerge: ⊦ i * j + i * j0 = i * (j + j0); from specification int-mult