| b2i(by0) = i + 1, i * 256 + band(b2i(by), 255) < 0, ~129 < i * 256 + band(b2i(by), 255), ~1 ≤ i, 255 * i + band(b2i(by), 255) ≤ 0, ∀ bytes0. # bytes0 < #((by0 + []) + by ') → true → # bytes0 = # int2bytes(bytes2int(bytes0)) → bytes0 = int2bytes(bytes2int(bytes0)) ⊦ by = i2b(0), by0 = i2b(0), ¬ i ≤ 0 ∧ ¬ 256 ≤ abs(band(b2i(by), 255)) |
b2i(by0) = i + 1, i * 256 + band(b2i(by), 255) < 0, ~129 < i * 256 + band(b2i(by), 255), ~1 ≤ i, 255 * i + band(b2i(by), 255) ≤ 0, ∀ bytes0. # bytes0 < #((by0 + []) + by ') → true → # bytes0 = # int2bytes(bytes2int(bytes0)) → bytes0 = int2bytes(bytes2int(bytes0)) ⊦ ¬ i ≤ 0, by = i2b(0), by0 = i2b(0)
b2i(by0) = i + 1, i * 256 + band(b2i(by), 255) < 0, ~129 < i * 256 + band(b2i(by), 255), ~1 ≤ i, 255 * i + band(b2i(by), 255) ≤ 0, ∀ bytes0. # bytes0 < #((by0 + []) + by ') → true → # bytes0 = # int2bytes(bytes2int(bytes0)) → bytes0 = int2bytes(bytes2int(bytes0)) ⊦ ¬ 256 ≤ abs(band(b2i(by), 255)), by = i2b(0), by0 = i2b(0)