Proving memset over range of values