| (bytes2int(bytes1) * 256) % 256 = 0 ∧ bytes2int(bytes1) * 256 + band(b2i(by), 255) < 0 ∧ band(b2i(by), 255) % 256 ≠ 0 ∧ bytes2int(bytes1) * 256 < 0 ∧ 0 ≤ band(b2i(by), 255) ∧ 0 < 256, # bytes1 = # int2bytes((bytes2int(bytes1) * 256) / 256 + band(b2i(by), 255) / 256 + 1), (bytes2int(bytes1) * 256 + band(b2i(by), 255)) % 256 = 0, bytes2int(bytes1) * 256 + band(b2i(by), 255) < ~256, bytes2int(bytes1) * 256 + band(b2i(by), 255) < 0, bytes2int(bytes1) < 0, ∀ bytes0. # bytes0 < #(bytes1 + by ') → true → # bytes0 = # int2bytes(bytes2int(bytes0)) → bytes0 = int2bytes(bytes2int(bytes0)) ⊦ bytes2int(bytes1) * 256 + band(b2i(by), 255) = ~256, bytes1 = [], bytes1 + by ' = int2bytes((bytes2int(bytes1) * 256) / 256 + band(b2i(by), 255) / 256 + 1) + i2b(0) ', band(b2i(by), 255) % 256 = 0 |
# bytes1 = # int2bytes(1 + band(b2i(by), 255) / 256 + bytes2int(bytes1)), (bytes2int(bytes1) * 256 + band(b2i(by), 255)) % 256 = 0, 0 ≤ band(b2i(by), 255), bytes2int(bytes1) < 0, bytes2int(bytes1) * 256 + band(b2i(by), 255) < 0, bytes2int(bytes1) * 256 + band(b2i(by), 255) < ~256, ∀ bytes0. # bytes0 < #(bytes1 + by ') → true → # bytes0 = # int2bytes(bytes2int(bytes0)) → bytes0 = int2bytes(bytes2int(bytes0)) ⊦ bytes1 + by ' = int2bytes(1 + band(b2i(by), 255) / 256 + bytes2int(bytes1)) + i2b(0) ', bytes1 = [], bytes2int(bytes1) * 256 + band(b2i(by), 255) = ~256, band(b2i(by), 255) % 256 = 0
Used simplifier rules: ⊦ i + j < j ↔ i < 0;% ⊦ i ≤ j ∧ 0 ≤ i → 0 ≤ j; (forward)% ⊦ i < j ∧ j ≤ j0 → i < j0; (forward)% ⊦ i < 0 ∧ 0 ≤ j → i < j;% ⊦ 0 < i → (i * j < 0 ↔ j < 0);% ⊦ i + j = j + i;% ⊦ i + j + i0 = (i + j) + i0;%j ≠ 0 ⊦ (i * j) / j = i;% ⊦ i * j = j * i;% ⊦ i * j * j0 = (i * j) * j0;%i0 % j = 0, j ≠ 0 ⊦ (i * (* i0)) % (* j) = 0;% ⊦ band(i, j) = band(j, i);