| bytes = bytes1 + by0 ', 0 ≤ 2 ^ (8 * n→i(# bytes)) + band(255, b2i(by0)) + 256 * bytes2int(by ' + bytes1), b2i(by) < 0, ∀ by, bytes0. # bytes0 < # bytes → 0 ≤ bytes2int(by ' + bytes0) + 2 ^ (8 * n→i(# bytes0)) ∧ b2i(by) < 0 → b2i(by) = ~1 ⊦ bytes = [], b2i(by) = ~1 |
0 ≤ 256 * bytes2int(by ' + bytes1) + band(255, b2i(by0)) + 2 ^ (8 * (n→i(# bytes1) + 1)), b2i(by) < 0, ∀ by, bytes0. # bytes0 < #(bytes1 + by0 ') → 0 ≤ bytes2int(by ' + bytes0) + 2 ^ (8 * n→i(# bytes0)) ∧ b2i(by) < 0 → b2i(by) = ~1 ⊦ b2i(by) = ~1
Used simplifier rules: ⊦ i < 0 ∧ 0 ≤ j → i < j;% ⊦ i < j ∧ j ≤ j0 → i < j0; (forward)% ⊦ i ≤ j ∧ 0 ≤ i → 0 ≤ j; (forward)% ⊦ m + n = n + m;% ⊦ (m + n0) + n1 = m + n0 + n1;% ⊦ n→i(m + n) = n→i(m) + n→i(n);% ⊦ # by ' = 0 +1;% ⊦ #(bytes + bytes0) = # bytes + # bytes0;% ⊦ (bytes + bytes0) + bytes1 = bytes + bytes0 + bytes1;% ⊦ bytes + by ' ≠ [];