Found a few examples where Z3 comes up short, moved a pointer offset function into ATS.