| i1 + 255 < 0, int2bytes(i1 / 256) = i2b(0) ' + by ' + bytes0, (0 - i1 + 255) + i1 / 256 ≤ 0, i2b(0) ∈ int2bytes(i1 / 256), i1 < 0, i1 < ~383, 0 ≤ b2i(by), ∀ bytes, by, i0. i→n(i0) < i→n(i1 + 255) → int2bytes(i0) = i2b(0) ' + by ' + bytes ∧ 0 ≤ b2i(by) ∧ i2b(0) ∈ int2bytes(i0) → false ⊦ |
int2bytes(i1 / 256) = i2b(0) ' + by ' + bytes0, i2b(0) ∈ int2bytes(i1 / 256), i1 < 0, i1 < ~383, 0 ≤ b2i(by), i1 / 256 ≤ 255 + i1, ∀ bytes, by, i0. i→n(i0) < i→n(i1 + 255) → int2bytes(i0) = i2b(0) ' + by ' + bytes ∧ 0 ≤ b2i(by) ∧ i2b(0) ∈ int2bytes(i0) → false ⊦
Used simplifier rules: j0 ≠ 0, j < j0 ⊦ i < (* j) → i < (* j0);% ⊦ i - j ≤ i0 ↔ i ≤ j + i0;% ⊦ i + ~ j = i - j;% ⊦ 0 - i = ~ i;% ⊦ i + j = j + i;% ⊦ i + j + i0 = (i + j) + i0;% ⊦ i + (* j) < (* j0) ↔ i < j0 - j;