| i2b(0) ' + by ' + bytes ≠ [], int2bytes(i1 / 256) = (i2b(0) ' + by ' + bytes).butlast ∧ int2bytes((i1 + 255) % 256).last = (i2b(0) ' + by ' + bytes).last, 0 ≤ b2i(by), i1 < ~383, i1 < 0, ∀ bytes, by, i0. i→n(i0) < i→n(i1 + 255) → int2bytes(i0) = i2b(0) ' + by ' + bytes ∧ 0 ≤ b2i(by) ∧ i2b(0) ∈ int2bytes(i0) → false ⊦ ¬ i2b(0) ∈ int2bytes(i1 / 256) ∧ i2b(0) ≠ int2bytes((i1 + 255) % 256).last, int2bytes((i1 + 255) % 256).last ≠ i2b(0) ∧ int2bytes((i1 + 255) % 256).last ≠ by ∧ ¬ int2bytes((i1 + 255) % 256).last ∈ bytes |
int2bytes(i1 / 256) = i2b(0) ' + (by ' + bytes).butlast, int2bytes((i1 + 255) % 256).last = (by ' + bytes).last, 0 ≤ b2i(by), i1 < ~383, i1 < 0, i2b(0) ∈ int2bytes(i1 / 256), ∀ bytes, by, i0. i→n(i0) < i→n(i1 + 255) → int2bytes(i0) = i2b(0) ' + by ' + bytes ∧ 0 ≤ b2i(by) ∧ i2b(0) ∈ int2bytes(i0) → false ⊦ (by ' + bytes).last ≠ i2b(0) ∧ (by ' + bytes).last ≠ by ∧ ¬ (by ' + bytes).last ∈ bytes
Used simplifier rules: ⊦ by ' + bytes = bytes0 → by ∈ bytes0; (forward)% ⊦ by ' + bytes ≠ [];% ⊦ (by ' + by0 ' + bytes).last = (by0 ' + bytes).last;% ⊦ (bytes + bytes0) + bytes1 = bytes + bytes0 + bytes1;% ⊦ (bytes + by ' + bytes0).butlast = bytes + (by ' + bytes0).butlast;