pub open spec fn wrapping_sub(x: u32, y: u32) -> u32
{ if x - y < 0 { (x - y + 0x1_0000_0000) as u32 } else { (x - y) as u32 } }