| i1 = i * 256 + j ∧ j ≤ 0 ∧ abs(j) < 256 ∧ i ≤ 0 ∧ 0 < 256, int2bytes(i) = i2b(0) ' + by ' + bytes0, i2b(0) ∈ int2bytes(i), i1 < 0, i1 < ~383, 0 ≤ b2i(by), i < 256 + i1, ∀ bytes, by, i0. i→n(i0) < i→n(i1 + 255) → int2bytes(i0) = i2b(0) ' + by ' + bytes ∧ 0 ≤ b2i(by) ∧ i2b(0) ∈ int2bytes(i0) → false ⊦ |
int2bytes(i) = i2b(0) ' + by ' + bytes0, i2b(0) ∈ int2bytes(i), i * 256 + j < 0, i ≤ 0, j ≤ 0, i < 256 * (i + 1) + j, 0 ≤ b2i(by), i * 256 + j < ~383, abs(j) < 256, ∀ bytes, by, i0. i→n(i0) < i→n((i * 256 + j) + 255) → int2bytes(i0) = i2b(0) ' + by ' + bytes ∧ 0 ≤ b2i(by) ∧ i2b(0) ∈ int2bytes(i0) → false ⊦
Used simplifier rules: ⊦ i ≤ 0 ∧ 0 ≤ j → i ≤ j;% ⊦ i < 0 ∧ 0 ≤ j → i < j;% ⊦ j ≤ i ∧ i ≤ 0 → j ≤ 0; (forward)% ⊦ j ≤ j0 ∧ j0 ≤ j1 → j ≤ j1; (forward)% ⊦ i < j ∧ j ≤ j0 → i < j0; (forward)% ⊦ i < (* j) ∧ j < 0 → i < 0; (forward)% ⊦ (bytes + bytes0) + bytes1 = bytes + bytes0 + bytes1;% ⊦ by ' + bytes = bytes0 → by ∈ bytes0; (forward)% ⊦ i * j = j * i;% ⊦ i * j * j0 = (i * j) * j0;% ⊦ i * j + i = i * (j + 1);% ⊦ i + j = j + i;% ⊦ i + j + i0 = (i + j) + i0;