| i = i1 + 255, int2bytes(i1 / 256) + int2bytes(i % 256).last ' = i2b(0) ' + bytes, i < ~128, i < 0, ∀ bytes, i0. i→n(i0) < i→n(i) → int2bytes(i0) = i2b(0) ' + bytes ∧ i0 < 0 ∧ i2b(0) ∈ int2bytes(i0) → false ⊦ int2bytes(i % 256).last ≠ i2b(0) ∧ ¬ int2bytes(i % 256).last ∈ bytes, ¬ i2b(0) ∈ int2bytes(i1 / 256) ∧ i2b(0) ≠ int2bytes(i % 256).last |
int2bytes(i1 / 256) + int2bytes((i1 + 255) % 256).last ' = i2b(0) ' + bytes, i1 < 0, i1 < ~383, ∀ bytes, i0. i→n(i0) < i→n(i1 + 255) → int2bytes(i0) = i2b(0) ' + bytes ∧ i0 < 0 ∧ i2b(0) ∈ int2bytes(i0) → false ⊦ int2bytes((i1 + 255) % 256).last ≠ i2b(0) ∧ ¬ int2bytes((i1 + 255) % 256).last ∈ bytes, ¬ i2b(0) ∈ int2bytes(i1 / 256) ∧ i2b(0) ≠ int2bytes((i1 + 255) % 256).last
Used simplifier rules: ⊦ by ∈ by0 ' ↔ by = by0;% ⊦ by ∈ bytes + bytes0 ↔ ¬ ¬(by ∈ bytes ∨ by ∈ bytes0);% ⊦ i < (* j) ∧ j < 0 → i < 0; (forward)% ⊦ by ' + bytes = bytes0 → by ∈ bytes0; (forward)% ⊦ (bytes + bytes0) + bytes1 = bytes + bytes0 + bytes1;% ⊦ bytes + by ' = bytes0 → by ∈ bytes0; (forward)%j0 ≠ 0, j < j0 ⊦ i < (* j) → i < (* j0);% ⊦ i + j = j + i;% ⊦ i + j + i0 = (i + j) + i0;% ⊦ i + (* j) < (* j0) ↔ i < j0 - j;