| band(255, b2i((by ' + bytes).last)) + 256 * bytes2int(i2b(~1) ' + (by ' + bytes).butlast) + 2 ^ ((n→i(# bytes) + 1) * 8) < 0, 0 ≤ b2i(by), ∀ by, bytes0. # bytes0 < # bytes → 2 ^ ((n→i(# bytes0) + 1) * 8) + bytes2int(i2b(~1) ' + by ' + bytes0) < 0 ∧ 0 ≤ b2i(by) → false ⊦ |
band(255, b2i((by ' + bytes).last)) + 256 * bytes2int(i2b(~1) ' + (by ' + bytes).butlast) + 2 ^ ((n→i(# bytes) + 1) * 8) < 0, 0 ≤ b2i(by), ∀ by, bytes0. # bytes0 < # bytes → 2 ^ ((n→i(# bytes0) + 1) * 8) + bytes2int(i2b(~1) ' + by ' + bytes0) < 0 ∧ 0 ≤ b2i(by) → false ⊦ bytes = []
Used simplifier rules: bytes2int-one: ⊦ bytes2int(by ') = b2i(by);% ⊦ # [] = 0;% ⊦ bytes + [] = bytes;% ⊦ (bytes + bytes0) + bytes1 = bytes + bytes0 + bytes1;% ⊦ by '.butlast = [];%~128 ≤ i, i ≤ 127 ⊦ b2i(i2b((* i))) = i;% ⊦ by '.last = by;% ⊦ 0 ≤ i → band(i, 255) = i % 256;% ⊦ b2i(by) % 256 = b2i(by);% ⊦ band(i, band(i0, j)) = band(band(i, i0), j);% ⊦ band(i, j) = band(j, i);% ⊦ i + 0 = i;% ⊦ i + j + i0 = (i + j) + i0;% ⊦ i + j = j + i;% ⊦ i ≤ j → (¬ ¬ j < i ↔ false); Used formulas: bytes = []