Some new wrong bytecode generations

All based on the same pattern, seems the same root cause.

Testcase1. If you replace a- b by a+b, then the generation is OK.

Run the testcase by replacing XXX by:
1) a-b
2) ~a
3) a * b
4) a / b
5) a % b
6) a >> b
7) a << b
8) a & b
9) a ^ b
10) a | b
11)
function(obj) {
    with (obj) {
        __p += ((__t = ( XXX )) == null ? '' : __t);
       }
}