| ¬(# by ' < 2 ∧ bytes2int(by ') < 0), fillsgn(2, by ') = by ', 1 ≤ # fillsgn(1, by ') ⊦ fillsgn(1, by ') = [] |
fillsgn(2, by ') = by ', 1 ≤ # fillsgn(1, by '), 0 ≤ b2i(by) ⊦ fillsgn(1, by ') = []
Used simplifier rules: bytes2int-one: ⊦ bytes2int(by ') = b2i(by);% ⊦ i ≤ j ∧ 0 ≤ i → 0 ≤ j; (forward)% ⊦ ¬ i < j ↔ j ≤ i;% ⊦ # by ' = 0 +1;