| bytes = bytes1 + by ', # bytes = # int2bytes(bytes2int(bytes1) * 256 + band(b2i(by), 255)), bytes2int(bytes1) * 256 + band(b2i(by), 255) ≤ 255, ∀ bytes0. # bytes0 < # bytes → true → # bytes0 = # int2bytes(bytes2int(bytes0)) → bytes0 = int2bytes(bytes2int(bytes0)) ⊦ bytes = int2bytes(bytes2int(bytes1) * 256 + band(b2i(by), 255)), # bytes = 1, bytes = [] |
# bytes1 + 1 = # int2bytes(bytes2int(bytes1) * 256 + band(b2i(by), 255)), bytes2int(bytes1) * 256 + band(b2i(by), 255) ≤ 255, ∀ bytes0. # bytes0 < #(bytes1 + by ') → true → # bytes0 = # int2bytes(bytes2int(bytes0)) → bytes0 = int2bytes(bytes2int(bytes0)) ⊦ bytes1 + by ' = int2bytes(bytes2int(bytes1) * 256 + band(b2i(by), 255)), bytes1 = []
Used simplifier rules: ⊦ bytes + by ' ≠ [];% ⊦ m + n = n + m;% ⊦ (m + n0) + n1 = m + n0 + n1;% ⊦ # bytes = 0 ↔ bytes = [];% ⊦ m + n = 1 ↔ m = 0 ∧ n = 1 ∨ n = 0 ∧ m = 1;% ⊦ (bytes + bytes0) + bytes1 = bytes + bytes0 + bytes1;% ⊦ # by ' = 0 +1;% ⊦ #(bytes + bytes0) = # bytes + # bytes0;