| bytes2int(bytes1) * 256 + band(b2i(by), 255) ≠ ~256, # bytes1 + 1 = # int2bytes(bytes2int(bytes1) * 256 + band(b2i(by), 255)), bytes2int(bytes1) * 256 + band(b2i(by), 255) ≤ ~256, bytes2int(bytes1) * 256 + band(b2i(by), 255) < 0, ∀ bytes0. # bytes0 < #(bytes1 + by ') → true → # bytes0 = # int2bytes(bytes2int(bytes0)) → bytes0 = int2bytes(bytes2int(bytes0)) ⊦ bytes1 + by ' = int2bytes(bytes2int(bytes1) * 256 + band(b2i(by), 255)), bytes1 = [] |
# bytes1 + 1 = # int2bytes(bytes2int(bytes1) * 256 + band(b2i(by), 255)), bytes2int(bytes1) * 256 + band(b2i(by), 255) < 0, bytes2int(bytes1) * 256 + band(b2i(by), 255) < ~256, ∀ bytes0. # bytes0 < #(bytes1 + by ') → true → # bytes0 = # int2bytes(bytes2int(bytes0)) → bytes0 = int2bytes(bytes2int(bytes0)) ⊦ bytes1 + by ' = int2bytes(bytes2int(bytes1) * 256 + band(b2i(by), 255)), bytes1 = [], bytes2int(bytes1) * 256 + band(b2i(by), 255) = ~256
Used simplifier rules: ⊦ band(i, j) = band(j, i);% ⊦ i + j = j + i;% ⊦ i + j + i0 = (i + j) + i0;% ⊦ i * j = j * i;% ⊦ i ≠ j → (i ≤ j ↔ i < j);