| 0 ≤ 8 ∧ 0 ≤ 8 * (1 + n→i(# bytes1)), 0 ≤ b2i(by), band(255, b2i(by0)) + 256 * bytes2int(i2b(~1) ' + by ' + bytes1) + 2 ^ 8 * 2 ^ (8 * (1 + n→i(# bytes1))) < 0, 0 ≤ 2 ^ ((n→i(# bytes1) + 1) * 8) + bytes2int(i2b(~1) ' + by ' + bytes1), 255 * bytes2int(i2b(~1) ' + by ' + bytes1) + band(255, b2i(by0)) + 2 ^ 8 * 2 ^ (8 * (1 + n→i(# bytes1))) < 2 ^ ((n→i(# bytes1) + 1) * 8), ∀ by, bytes0. # bytes0 < #(bytes1 + by0 ') → 2 ^ ((n→i(# bytes0) + 1) * 8) + bytes2int(i2b(~1) ' + by ' + bytes0) < 0 ∧ 0 ≤ b2i(by) → false ⊦ |
256 * (bytes2int(i2b(~1) ' + by ' + bytes1) + 2 ^ (8 * (1 + n→i(# bytes1)))) + band(255, b2i(by0)) < 0, 2 ^ (8 * (1 + n→i(# bytes1))) * 256 + band(255, b2i(by0)) + 255 * bytes2int(i2b(~1) ' + by ' + bytes1) < 2 ^ ((n→i(# bytes1) + 1) * 8), 0 ≤ 2 ^ ((n→i(# bytes1) + 1) * 8) + bytes2int(i2b(~1) ' + by ' + bytes1), 0 ≤ b2i(by), ∀ by, bytes0. # bytes0 < #(bytes1 + by0 ') → 2 ^ ((n→i(# bytes0) + 1) * 8) + bytes2int(i2b(~1) ' + by ' + bytes0) < 0 ∧ 0 ≤ b2i(by) → false ⊦
Used simplifier rules: ⊦ i < 0 ∧ 0 ≤ j → i < j;% ⊦ j < i ∧ i ≤ 0 → j < 0; (forward)% ⊦ i < j ∧ j ≤ j0 → i < j0; (forward)% ⊦ i * j + i * j0 = i * (j + j0);% ⊦ i * j = j * i;% ⊦ i * j * j0 = (i * j) * j0;% ⊦ i + j = j + i;% ⊦ i + j + i0 = (i + j) + i0;%i < 0 ⊦ (* i) ≤ n→i(n);% ⊦ (* j) ≤ i0 + (* j0) ↔ j - j0 ≤ i0;% ⊦ 0 < i → (0 ≤ i * j ↔ 0 ≤ j);