| s2i(sho) = i * 256 + j - 65536, s2i(sho) + 65536 = i * 256 + j, 0 ≤ i, 0 ≤ j, ~65536 ≤ s2i(sho), s2i(sho) < 0, j < 256 ⊦ (s2i(sho) + 1) % 256 + 255 = j |
(i * 256 + j - 65536) + 65536 = i * 256 + j, 0 ≤ i, 0 ≤ j, ~65536 ≤ i * 256 + j - 65536, i * 256 + j - 65536 < 0, j < 256 ⊦ ((i * 256 + j - 65536) + 1) % 256 + 255 = j