| s2i(sho) < 0 ⊦ (2 ^ 16 + s2i(sho)) + us2i(sho0) < 2 ^ 16 → us2i(i2s(s2i(sho) + s2i(sho0))) = (2 ^ 16 + s2i(sho)) + us2i(sho0) |
s2i(sho) < 0, us2i(sho0) + s2i(sho) < 0 ⊦ us2i(i2s(s2i(sho) + s2i(sho0))) = us2i(sho0) + s2i(sho) + 65536
Used simplifier rules: ⊦ j < i ∧ i ≤ 0 → j < 0; (forward)% ⊦ i + j = j + i;% ⊦ i + j + i0 = (i + j) + i0;% ⊦ i + (* j) < (* j0) ↔ i < j0 - j;