Partial correctness proof for mult
Finish correctness proof for mult