| bytes2int(bytes1) * 256 + band(b2i(by), 255) = ~256, # bytes1 + 1 = #(i2b(~1) ' + i2b(0)), bytes2int(bytes1) * 256 + band(b2i(by), 255) ≤ ~256, bytes2int(bytes1) * 256 + band(b2i(by), 255) < 0, ∀ bytes0. # bytes0 < #(bytes1 + by ') → true → # bytes0 = # int2bytes(bytes2int(bytes0)) → bytes0 = int2bytes(bytes2int(bytes0)) ⊦ bytes1 + by ' = i2b(~1) ' + i2b(0), bytes1 = [] |
1 = # bytes1, bytes2int(bytes1) * 256 + band(b2i(by), 255) = ~256, ∀ bytes0. # bytes0 < #(bytes1 + by ') → true → # bytes0 = # int2bytes(bytes2int(bytes0)) → bytes0 = int2bytes(bytes2int(bytes0)) ⊦ bytes1 + by ' = i2b(~1) ' + i2b(0) ', bytes1 = []
Used simplifier rules: ⊦ j < i ∧ i ≤ 0 → j < 0; (forward)% ⊦ i + j = j + i;% ⊦ band(i, j) = band(j, i);% ⊦ i * j = j * i;% ⊦ m + n = n + m;% ⊦ (m + n0) + n1 = m + n0 + n1;%n0 < n ⊦ (* n) = m0 + (* n0) ↔ n - n0 = m0;% ⊦ (bytes + bytes0) + bytes1 = bytes + bytes0 + bytes1;% ⊦ # by ' = 0 +1;% ⊦ #(bytes + bytes0) = # bytes + # bytes0;% ⊦ bytes + by = bytes + by ';