| ¬(~256 < bytes2int(bytes1) * 256 + band(b2i(by), 255) ∧ bytes2int(bytes1) * 256 + band(b2i(by), 255) < ~128), # bytes1 + 1 = # int2bytes(bytes2int(bytes1) * 256 + band(b2i(by), 255)), bytes2int(bytes1) * 256 + band(b2i(by), 255) < 0, bytes2int(bytes1) * 256 + band(b2i(by), 255) < ~128, ∀ bytes0. # bytes0 < #(bytes1 + by ') → true → # bytes0 = # int2bytes(bytes2int(bytes0)) → bytes0 = int2bytes(bytes2int(bytes0)) ⊦ bytes1 = [], bytes1 + by ' = int2bytes(bytes2int(bytes1) * 256 + band(b2i(by), 255)) |
# bytes1 + 1 = # int2bytes(bytes2int(bytes1) * 256 + band(b2i(by), 255)), bytes2int(bytes1) * 256 + band(b2i(by), 255) ≤ ~256, bytes2int(bytes1) * 256 + band(b2i(by), 255) < 0, ∀ bytes0. # bytes0 < #(bytes1 + by ') → true → # bytes0 = # int2bytes(bytes2int(bytes0)) → bytes0 = int2bytes(bytes2int(bytes0)) ⊦ bytes1 + by ' = int2bytes(bytes2int(bytes1) * 256 + band(b2i(by), 255)), bytes1 = []
Used simplifier rules: ⊦ i < 0 ∧ 0 ≤ j → i ≤ j;% ⊦ j ≤ i ∧ i ≤ 0 → j ≤ 0; (forward)%j0 ≠ 0, j < j0 ⊦ i ≤ (* j) → i < (* j0);%j0 ≠ 0, j ≤ j0 ⊦ i < (* j) → i < (* j0);% ⊦ ¬ i < j ↔ j ≤ i;% ⊦ band(i, j) = band(j, i);% ⊦ i * j = j * i;% ⊦ i + j = j + i;% ⊦ i + j + i0 = (i + j) + i0;