| j + 1 ≤ n→i(# int2bytes(i)) ∧ 0 ≤ j + 1, 0 ≤ j, j < n→i(# int2bytes(i)), # int2bytes(i) ≤ i→n(n→i(# int2bytes(i))) - i→n(j + 1) ⊦ int2bytes(i)[i→n(j)] = i2b(i >> 8 * (n→i(# int2bytes(i)) - j + 1)) |
0 ≤ j, j < n→i(# int2bytes(i)), # int2bytes(i) ≤ # int2bytes(i) - i→n(j) + 1 ⊦ int2bytes(i)[i→n(j)] = i2b(i >> 8 * (n→i(# int2bytes(i)) - j + 1))
Used simplifier rules: ⊦ 0 ≤ i → i→n(i + 1) = i→n(i) + 1;% ⊦ i→n(n→i(n)) = n;%i0 ≠ 0, i0 ≤ i ⊦ (* i) ≤ j → (* i0) ≤ j;% ⊦ (* j) ≤ i0 + (* j0) ↔ j - j0 ≤ i0;% ⊦ i + j = j + i;% ⊦ i + j + i0 = (i + j) + i0;% ⊦ i + 1 ≤ j ↔ i < j;