| i = i1 + 256, 0 < i, i ≤ 255, 127 < i, 0 ≤ b2i(i2b(i1)), ∀ bytes, by, i0. i→n(i0) < i→n(i) → int2bytes(i0) = i2b(0) ' + by ' + bytes ∧ 0 ≤ b2i(by) ∧ i2b(0) ∈ int2bytes(i0) → false ⊦ |
i1 < 0, 0 ≤ b2i(i2b(i1)), ~129 < i1, ∀ bytes, by, i0. i→n(i0) < i→n(i1 + 256) → int2bytes(i0) = i2b(0) ' + by ' + bytes ∧ 0 ≤ b2i(by) ∧ i2b(0) ∈ int2bytes(i0) → false ⊦
Used simplifier rules: ⊦ i < 0 ∧ 0 ≤ j → i < j;% ⊦ i ≤ j ∧ 0 ≤ i → 0 ≤ j; (forward)% ⊦ j < i ∧ i ≤ 0 → j < 0; (forward)% ⊦ i < j ∧ j ≤ j0 → i < j0; (forward)%i0 ≠ 0, i0 < i ⊦ (* i) < j → (* i0) < j;% ⊦ i ≤ ~1 ↔ i < 0;% ⊦ i + (* j) ≤ (* j0) ↔ i ≤ j0 - j;% ⊦ i + j = j + i;% ⊦ i + j + i0 = (i + j) + i0;% ⊦ (* j) < i0 + (* j0) ↔ j - j0 < i0;