| i = i1 + 256, i2b(i1) = i2b(0), 0 < i, i ≤ 255, 0 ≤ i, 127 < i, ∀ bytes, i0. i→n(i0) < i→n(i) → int2bytes(i0) = i2b(0) ' + i2b(0) ' + bytes ∧ 0 ≤ i0 → false ⊦ |
i2b(i1) = i2b(0), ~256 ≤ i1, ~129 < i1, i1 < 0, ∀ bytes, i0. i→n(i0) < i→n(i1 + 256) → int2bytes(i0) = i2b(0) ' + i2b(0) ' + bytes ∧ 0 ≤ i0 → false ⊦
Used simplifier rules: ⊦ j < i ∧ i ≤ 0 → j < 0; (forward)%i0 ≠ 0, i0 < i ⊦ (* i) < j → (* i0) < j;% ⊦ (* j) ≤ i0 + (* j0) ↔ j - j0 ≤ i0;% ⊦ i ≤ ~1 ↔ i < 0;% ⊦ i + (* j) ≤ (* j0) ↔ i ≤ j0 - j;% ⊦ i + j = j + i;% ⊦ i + j + i0 = (i + j) + i0;% ⊦ (* j) < i0 + (* j0) ↔ j - j0 < i0;