| b2i(by0) = i + 1, i * 256 + band(b2i(by), 255) < 0, ~129 < i * 256 + band(b2i(by), 255), ~1 ≤ i, 255 * i + band(b2i(by), 255) ≤ 0, ∀ bytes0. # bytes0 < #((by0 + []) + by ') → true → # bytes0 = # int2bytes(bytes2int(bytes0)) → bytes0 = int2bytes(bytes2int(bytes0)) ⊦ ¬ 256 ≤ abs(band(b2i(by), 255)), by = i2b(0), by0 = i2b(0) |
b2i(by0) = i + 1, 255 * i + band(b2i(by), 255) ≤ 0, ~1 ≤ i, ~129 < i * 256 + band(b2i(by), 255), i * 256 + band(b2i(by), 255) < 0, 256 ≤ abs(band(b2i(by), 255)), ∀ bytes0. # bytes0 < #((by0 + []) + by ') → true → # bytes0 = # int2bytes(bytes2int(bytes0)) → bytes0 = int2bytes(bytes2int(bytes0)) ⊦ by0 = i2b(0), by = i2b(0), b2i(by) = 0
Used simplifier rules: ⊦ band(i, j) = band(j, i);% ⊦ band(i, band(i0, j)) = band(band(i, i0), j);%0 ≤ i, i < 128 ⊦ band(b2i(by), 255) = (* i) ↔ b2i(by) = i;% ⊦ 0 < abs(i) ↔ i ≠ 0;% ⊦ 0 ≤ abs(i);% ⊦ i ≤ j ∧ 0 < i → 0 < j; (forward)% ⊦ i ≤ j ∧ 0 ≤ i → 0 ≤ j; (forward)% ⊦ i + j = j + i;% ⊦ i * j = j * i;