Used simplifier rules: int2bits-len-eq-01: ⊦ 2 ^ n→i(# int2bits(~ j)) + j ≠ 0;% ⊦ i + j = j + i;% ⊦ i + j + i0 = (i + j) + i0;% ⊦ i < j → (¬ ¬ j ≤ i ↔ false);