val va_ens_Fadd_stdcall
      (va_b0: va_code)
      (va_s0: va_state)
      (win: bool)
      (dst_b inA_b inB_b: buffer64)
      (va_sM: va_state)
      (va_fM: va_fuel)
    : prop
let va_ens_Fadd_stdcall (va_b0:va_code) (va_s0:va_state) (win:bool) (dst_b:buffer64)
  (inA_b:buffer64) (inB_b:buffer64) (va_sM:va_state) (va_fM:va_fuel) : prop =
  (va_req_Fadd_stdcall va_b0 va_s0 win dst_b inA_b inB_b /\ va_ensure_total va_b0 va_s0 va_sM va_fM
    /\ va_get_ok va_sM /\ (let (dst_in:(va_int_range 0 18446744073709551615)) = (if win then
    va_get_reg64 rRcx va_s0 else va_get_reg64 rRdi va_s0) in let (inA_in:(va_int_range 0
    18446744073709551615)) = (if win then va_get_reg64 rRdx va_s0 else va_get_reg64 rRsi va_s0) in
    let (inB_in:(va_int_range 0 18446744073709551615)) = (if win then va_get_reg64 rR8 va_s0 else
    va_get_reg64 rRdx va_s0) in let a0 = Vale.X64.Decls.buffer64_read inA_b 0 (va_get_mem va_s0) in
    let a1 = Vale.X64.Decls.buffer64_read inA_b 1 (va_get_mem va_s0) in let a2 =
    Vale.X64.Decls.buffer64_read inA_b 2 (va_get_mem va_s0) in let a3 =
    Vale.X64.Decls.buffer64_read inA_b 3 (va_get_mem va_s0) in let b0 =
    Vale.X64.Decls.buffer64_read inB_b 0 (va_get_mem va_s0) in let b1 =
    Vale.X64.Decls.buffer64_read inB_b 1 (va_get_mem va_s0) in let b2 =
    Vale.X64.Decls.buffer64_read inB_b 2 (va_get_mem va_s0) in let b3 =
    Vale.X64.Decls.buffer64_read inB_b 3 (va_get_mem va_s0) in let d0 =
    Vale.X64.Decls.buffer64_read dst_b 0 (va_get_mem va_sM) in let d1 =
    Vale.X64.Decls.buffer64_read dst_b 1 (va_get_mem va_sM) in let d2 =
    Vale.X64.Decls.buffer64_read dst_b 2 (va_get_mem va_sM) in let d3 =
    Vale.X64.Decls.buffer64_read dst_b 3 (va_get_mem va_sM) in let a =
    Vale.Curve25519.Fast_defs.pow2_four a0 a1 a2 a3 in let b = Vale.Curve25519.Fast_defs.pow2_four
    b0 b1 b2 b3 in let d = Vale.Curve25519.Fast_defs.pow2_four d0 d1 d2 d3 in d `op_Modulus` prime
    == (a + b) `op_Modulus` prime /\ Vale.X64.Decls.modifies_buffer dst_b (va_get_mem va_s0)
    (va_get_mem va_sM) /\ (win ==> va_get_reg64 rRbx va_sM == va_get_reg64 rRbx va_s0) /\ (win ==>
    va_get_reg64 rRbp va_sM == va_get_reg64 rRbp va_s0) /\ (win ==> va_get_reg64 rRdi va_sM ==
    va_get_reg64 rRdi va_s0) /\ (win ==> va_get_reg64 rRsi va_sM == va_get_reg64 rRsi va_s0) /\
    (win ==> va_get_reg64 rRsp va_sM == va_get_reg64 rRsp va_s0) /\ (win ==> va_get_reg64 rR13
    va_sM == va_get_reg64 rR13 va_s0) /\ (win ==> va_get_reg64 rR14 va_sM == va_get_reg64 rR14
    va_s0) /\ (win ==> va_get_reg64 rR15 va_sM == va_get_reg64 rR15 va_s0) /\ (~win ==>
    va_get_reg64 rRbx va_sM == va_get_reg64 rRbx va_s0) /\ (~win ==> va_get_reg64 rRbp va_sM ==
    va_get_reg64 rRbp va_s0) /\ (~win ==> va_get_reg64 rR13 va_sM == va_get_reg64 rR13 va_s0) /\
    (~win ==> va_get_reg64 rR14 va_sM == va_get_reg64 rR14 va_s0) /\ (~win ==> va_get_reg64 rR15
    va_sM == va_get_reg64 rR15 va_s0) /\ va_get_reg64 rRsp va_sM == va_get_reg64 rRsp va_s0) /\
    va_state_eq va_sM (va_update_stackTaint va_sM (va_update_stack va_sM (va_update_mem_layout
    va_sM (va_update_mem_heaplet 0 va_sM (va_update_flags va_sM (va_update_reg64 rR15 va_sM
    (va_update_reg64 rR14 va_sM (va_update_reg64 rR13 va_sM (va_update_reg64 rR11 va_sM
    (va_update_reg64 rR10 va_sM (va_update_reg64 rR9 va_sM (va_update_reg64 rR8 va_sM
    (va_update_reg64 rRsp va_sM (va_update_reg64 rRbp va_sM (va_update_reg64 rRdi va_sM
    (va_update_reg64 rRsi va_sM (va_update_reg64 rRdx va_sM (va_update_reg64 rRcx va_sM
    (va_update_reg64 rRbx va_sM (va_update_reg64 rRax va_sM (va_update_ok va_sM (va_update_mem
    va_sM va_s0)))))))))))))))))))))))
val va_ens_Fadd_stdcall
      (va_b0: va_code)
      (va_s0: va_state)
      (win: bool)
      (dst_b inA_b inB_b: buffer64)
      (va_sM: va_state)
      (va_fM: va_fuel)
    : prop
let va_ens_Fadd_stdcall
      (va_b0: va_code)
      (va_s0: va_state)
      (win: bool)
      (dst_b inA_b inB_b: buffer64)
      (va_sM: va_state)
      (va_fM: va_fuel)
    : prop =
(va_req_Fadd_stdcall va_b0 va_s0 win dst_b inA_b inB_b /\ va_ensure_total va_b0 va_s0 va_sM va_fM /\
  va_get_ok va_sM /\
  (let dst_in:(va_int_range 0 18446744073709551615) =
      (if win then va_get_reg64 rRcx va_s0 else va_get_reg64 rRdi va_s0)
    in
    let inA_in:(va_int_range 0 18446744073709551615) =
      (if win then va_get_reg64 rRdx va_s0 else va_get_reg64 rRsi va_s0)
    in
    let inB_in:(va_int_range 0 18446744073709551615) =
      (if win then va_get_reg64 rR8 va_s0 else va_get_reg64 rRdx va_s0)
    in
    let a0 = Vale.X64.Decls.buffer64_read inA_b 0 (va_get_mem va_s0) in
    let a1 = Vale.X64.Decls.buffer64_read inA_b 1 (va_get_mem va_s0) in
    let a2 = Vale.X64.Decls.buffer64_read inA_b 2 (va_get_mem va_s0) in
    let a3 = Vale.X64.Decls.buffer64_read inA_b 3 (va_get_mem va_s0) in
    let b0 = Vale.X64.Decls.buffer64_read inB_b 0 (va_get_mem va_s0) in
    let b1 = Vale.X64.Decls.buffer64_read inB_b 1 (va_get_mem va_s0) in
    let b2 = Vale.X64.Decls.buffer64_read inB_b 2 (va_get_mem va_s0) in
    let b3 = Vale.X64.Decls.buffer64_read inB_b 3 (va_get_mem va_s0) in
    let d0 = Vale.X64.Decls.buffer64_read dst_b 0 (va_get_mem va_sM) in
    let d1 = Vale.X64.Decls.buffer64_read dst_b 1 (va_get_mem va_sM) in
    let d2 = Vale.X64.Decls.buffer64_read dst_b 2 (va_get_mem va_sM) in
    let d3 = Vale.X64.Decls.buffer64_read dst_b 3 (va_get_mem va_sM) in
    let a = Vale.Curve25519.Fast_defs.pow2_four a0 a1 a2 a3 in
    let b = Vale.Curve25519.Fast_defs.pow2_four b0 b1 b2 b3 in
    let d = Vale.Curve25519.Fast_defs.pow2_four d0 d1 d2 d3 in
    d `op_Modulus` prime == (a + b) `op_Modulus` prime /\
    Vale.X64.Decls.modifies_buffer dst_b (va_get_mem va_s0) (va_get_mem va_sM) /\
    (win ==> va_get_reg64 rRbx va_sM == va_get_reg64 rRbx va_s0) /\
    (win ==> va_get_reg64 rRbp va_sM == va_get_reg64 rRbp va_s0) /\
    (win ==> va_get_reg64 rRdi va_sM == va_get_reg64 rRdi va_s0) /\
    (win ==> va_get_reg64 rRsi va_sM == va_get_reg64 rRsi va_s0) /\
    (win ==> va_get_reg64 rRsp va_sM == va_get_reg64 rRsp va_s0) /\
    (win ==> va_get_reg64 rR13 va_sM == va_get_reg64 rR13 va_s0) /\
    (win ==> va_get_reg64 rR14 va_sM == va_get_reg64 rR14 va_s0) /\
    (win ==> va_get_reg64 rR15 va_sM == va_get_reg64 rR15 va_s0) /\
    (~win ==> va_get_reg64 rRbx va_sM == va_get_reg64 rRbx va_s0) /\
    (~win ==> va_get_reg64 rRbp va_sM == va_get_reg64 rRbp va_s0) /\
    (~win ==> va_get_reg64 rR13 va_sM == va_get_reg64 rR13 va_s0) /\
    (~win ==> va_get_reg64 rR14 va_sM == va_get_reg64 rR14 va_s0) /\
    (~win ==> va_get_reg64 rR15 va_sM == va_get_reg64 rR15 va_s0) /\
    va_get_reg64 rRsp va_sM == va_get_reg64 rRsp va_s0) /\
  va_state_eq va_sM
    (va_update_stackTaint va_sM
        (va_update_stack va_sM
            (va_update_mem_layout va_sM
                (va_update_mem_heaplet 0
                    va_sM
                    (va_update_flags va_sM
                        (va_update_reg64 rR15
                            va_sM
                            (va_update_reg64 rR14
                                va_sM
                                (va_update_reg64 rR13
                                    va_sM
                                    (va_update_reg64 rR11
                                        va_sM
                                        (va_update_reg64 rR10
                                            va_sM
                                            (va_update_reg64 rR9
                                                va_sM
                                                (va_update_reg64 rR8
                                                    va_sM
                                                    (va_update_reg64 rRsp
                                                        va_sM
                                                        (va_update_reg64 rRbp
                                                            va_sM
                                                            (va_update_reg64 rRdi
                                                                va_sM
                                                                (va_update_reg64 rRsi
                                                                    va_sM
                                                                    (va_update_reg64 rRdx
                                                                        va_sM
                                                                        (va_update_reg64 rRcx
                                                                            va_sM
                                                                            (va_update_reg64 rRbx
                                                                                va_sM
                                                                                (va_update_reg64 rRax
                                                                                    va_sM
                                                                                    (va_update_ok va_sM
                                                                                        (va_update_mem
                                                                                            va_sM
                                                                                            va_s0)))
                                                                            ))))))))))))))))))))
Vale.Curve25519.X64.FastHybrid.fsti.checked
Vale.X64.State.fsti.checked Vale.X64.Stack_i.fsti.checked Vale.X64.QuickCodes.fsti.checked Vale.X64.QuickCode.fst.checked Vale.X64.Memory.fsti.checked Vale.X64.Machine_s.fst.checked Vale.X64.InsStack.fsti.checked Vale.X64.InsMem.fsti.checked Vale.X64.InsBasic.fsti.checked Vale.X64.Flags.fsti.checked Vale.X64.Decls.fsti.checked Vale.X64.CPU_Features_s.fst.checked Vale.Def.Types_s.fst.checked Vale.Curve25519.Fast_defs.fst.checked Vale.Arch.Types.fsti.checked Vale.Arch.HeapImpl.fsti.checked prims.fst.checked FStar.Pervasives.Native.fst.checked FStar.Pervasives.fsti.checked
Vale.Curve25519.X64.FastHybrid.fsti
Vale.X64.Decls.va_code Vale.X64.Decls.va_state Prims.bool Vale.X64.Memory.buffer64 Vale.X64.Decls.va_fuel Prims.l_and Vale.Curve25519.X64.FastHybrid.va_req_Fadd_stdcall Vale.X64.Decls.va_ensure_total Prims.b2t Vale.X64.Decls.va_get_ok Prims.eq2 Prims.int Prims.op_Modulus Vale.Curve25519.Fast_defs.prime Prims.op_Addition Vale.X64.Decls.modifies_buffer Vale.X64.Decls.va_get_mem Prims.l_imp Vale.Def.Types_s.nat64 Vale.X64.Decls.va_get_reg64 Vale.X64.Machine_s.rRbx Vale.X64.Machine_s.rRbp Vale.X64.Machine_s.rRdi Vale.X64.Machine_s.rRsi Vale.X64.Machine_s.rRsp Vale.X64.Machine_s.rR13 Vale.X64.Machine_s.rR14 Vale.X64.Machine_s.rR15 Prims.l_not Prims.nat Vale.Curve25519.Fast_defs.pow2_four Vale.Def.Words_s.nat64 Vale.X64.Decls.buffer64_read Vale.X64.Decls.va_int_range Vale.X64.Machine_s.rR8 Vale.X64.Machine_s.rRdx Vale.X64.Machine_s.rRcx Vale.X64.Decls.va_state_eq Vale.X64.Decls.va_update_stackTaint Vale.X64.Decls.va_update_stack Vale.X64.Decls.va_update_mem_layout Vale.X64.Decls.va_update_mem_heaplet Vale.X64.Decls.va_update_flags Vale.X64.Decls.va_update_reg64 Vale.X64.Machine_s.rR11 Vale.X64.Machine_s.rR10 Vale.X64.Machine_s.rR9 Vale.X64.Machine_s.rRax Vale.X64.Decls.va_update_ok Vale.X64.Decls.va_update_mem Prims.prop
module Vale.Curve25519.X64.FastHybrid
open Vale.Def.Types_s
open Vale.Arch.Types
open Vale.Arch.HeapImpl
open Vale.X64.Machine_s
open Vale.X64.Memory
open Vale.X64.Stack_i
open Vale.X64.State
open Vale.X64.Decls
open Vale.X64.InsBasic
open Vale.X64.InsMem
open Vale.X64.InsStack
open Vale.X64.QuickCode
open Vale.X64.QuickCodes
open Vale.Curve25519.Fast_defs
open Vale.X64.CPU_Features_s
//-- Carry_wide

val va_code_Carry_wide : offset:nat -> Tot va_code

val va_codegen_success_Carry_wide : offset:nat -> Tot va_pbool

val va_lemma_Carry_wide : va_b0:va_code -> va_s0:va_state -> offset:nat -> dst_b:buffer64 ->
  inA_b:buffer64
  -> Ghost (va_state & va_fuel)
  (requires (va_require_total va_b0 (va_code_Carry_wide offset) va_s0 /\ va_get_ok va_s0 /\ (let
    (a0:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (0 + offset `op_Multiply` 2)
    (va_get_mem_heaplet 0 va_s0) in let (a1:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read
    inA_b (1 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_s0) in let
    (a2:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (2 + offset `op_Multiply` 2)
    (va_get_mem_heaplet 0 va_s0) in let (a3:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read
    inA_b (3 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_s0) in let
    (a4:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (4 + offset `op_Multiply` 2)
    (va_get_mem_heaplet 0 va_s0) in let (a5:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read
    inA_b (5 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_s0) in let
    (a6:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (6 + offset `op_Multiply` 2)
    (va_get_mem_heaplet 0 va_s0) in let (a7:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read
    inA_b (7 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_s0) in let (a:Prims.nat) =
    Vale.Curve25519.Fast_defs.pow2_eight a0 a1 a2 a3 a4 a5 a6 a7 in adx_enabled /\ bmi2_enabled /\
    (offset == 0 \/ offset == 4) /\ (Vale.X64.Decls.buffers_disjoint dst_b inA_b \/ inA_b == dst_b)
    /\ Vale.X64.Decls.validDstAddrs64 (va_get_mem_heaplet 0 va_s0) (va_get_reg64 rRdi va_s0) dst_b
    (4 + offset) (va_get_mem_layout va_s0) Secret /\ Vale.X64.Decls.validSrcAddrs64
    (va_get_mem_heaplet 0 va_s0) (va_get_reg64 rRsi va_s0) inA_b (8 + offset `op_Multiply` 2)
    (va_get_mem_layout va_s0) Secret)))
  (ensures (fun (va_sM, va_fM) -> va_ensure_total va_b0 va_s0 va_sM va_fM /\ va_get_ok va_sM /\
    (let (a0:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (0 + offset `op_Multiply`
    2) (va_get_mem_heaplet 0 va_s0) in let (a1:Vale.Def.Types_s.nat64) =
    Vale.X64.Decls.buffer64_read inA_b (1 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_s0) in
    let (a2:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (2 + offset `op_Multiply`
    2) (va_get_mem_heaplet 0 va_s0) in let (a3:Vale.Def.Types_s.nat64) =
    Vale.X64.Decls.buffer64_read inA_b (3 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_s0) in
    let (a4:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (4 + offset `op_Multiply`
    2) (va_get_mem_heaplet 0 va_s0) in let (a5:Vale.Def.Types_s.nat64) =
    Vale.X64.Decls.buffer64_read inA_b (5 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_s0) in
    let (a6:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (6 + offset `op_Multiply`
    2) (va_get_mem_heaplet 0 va_s0) in let (a7:Vale.Def.Types_s.nat64) =
    Vale.X64.Decls.buffer64_read inA_b (7 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_s0) in
    let (a:Prims.nat) = Vale.Curve25519.Fast_defs.pow2_eight a0 a1 a2 a3 a4 a5 a6 a7 in let d0 =
    Vale.X64.Decls.buffer64_read dst_b (0 + offset) (va_get_mem_heaplet 0 va_sM) in let d1 =
    Vale.X64.Decls.buffer64_read dst_b (1 + offset) (va_get_mem_heaplet 0 va_sM) in let d2 =
    Vale.X64.Decls.buffer64_read dst_b (2 + offset) (va_get_mem_heaplet 0 va_sM) in let d3 =
    Vale.X64.Decls.buffer64_read dst_b (3 + offset) (va_get_mem_heaplet 0 va_sM) in let d =
    Vale.Curve25519.Fast_defs.pow2_four d0 d1 d2 d3 in d `op_Modulus` prime == a `op_Modulus` prime
    /\ Vale.X64.Decls.validSrcAddrs64 (va_get_mem_heaplet 0 va_sM) (va_get_reg64 rRdi va_sM) dst_b
    (4 + offset) (va_get_mem_layout va_sM) Secret /\ Vale.X64.Decls.modifies_buffer_specific dst_b
    (va_get_mem_heaplet 0 va_s0) (va_get_mem_heaplet 0 va_sM) (0 + offset) (4 + offset - 1)) /\
    va_state_eq va_sM (va_update_flags va_sM (va_update_mem_heaplet 0 va_sM (va_update_reg64 rR13
    va_sM (va_update_reg64 rRbx va_sM (va_update_reg64 rR11 va_sM (va_update_reg64 rR10 va_sM
    (va_update_reg64 rR9 va_sM (va_update_reg64 rR8 va_sM (va_update_reg64 rRdx va_sM
    (va_update_reg64 rRcx va_sM (va_update_reg64 rRax va_sM (va_update_ok va_sM (va_update_mem
    va_sM va_s0)))))))))))))))
[@ va_qattr]
let va_wp_Carry_wide (offset:nat) (dst_b:buffer64) (inA_b:buffer64) (va_s0:va_state)
  (va_k:(va_state -> unit -> Type0)) : Type0 =
  (va_get_ok va_s0 /\ (let (a0:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (0 +
    offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_s0) in let (a1:Vale.Def.Types_s.nat64) =
    Vale.X64.Decls.buffer64_read inA_b (1 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_s0) in
    let (a2:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (2 + offset `op_Multiply`
    2) (va_get_mem_heaplet 0 va_s0) in let (a3:Vale.Def.Types_s.nat64) =
    Vale.X64.Decls.buffer64_read inA_b (3 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_s0) in
    let (a4:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (4 + offset `op_Multiply`
    2) (va_get_mem_heaplet 0 va_s0) in let (a5:Vale.Def.Types_s.nat64) =
    Vale.X64.Decls.buffer64_read inA_b (5 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_s0) in
    let (a6:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (6 + offset `op_Multiply`
    2) (va_get_mem_heaplet 0 va_s0) in let (a7:Vale.Def.Types_s.nat64) =
    Vale.X64.Decls.buffer64_read inA_b (7 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_s0) in
    let (a:Prims.nat) = Vale.Curve25519.Fast_defs.pow2_eight a0 a1 a2 a3 a4 a5 a6 a7 in adx_enabled
    /\ bmi2_enabled /\ (offset == 0 \/ offset == 4) /\ (Vale.X64.Decls.buffers_disjoint dst_b inA_b
    \/ inA_b == dst_b) /\ Vale.X64.Decls.validDstAddrs64 (va_get_mem_heaplet 0 va_s0) (va_get_reg64
    rRdi va_s0) dst_b (4 + offset) (va_get_mem_layout va_s0) Secret /\
    Vale.X64.Decls.validSrcAddrs64 (va_get_mem_heaplet 0 va_s0) (va_get_reg64 rRsi va_s0) inA_b (8
    + offset `op_Multiply` 2) (va_get_mem_layout va_s0) Secret) /\ (forall (va_x_mem:vale_heap)
    (va_x_rax:nat64) (va_x_rcx:nat64) (va_x_rdx:nat64) (va_x_r8:nat64) (va_x_r9:nat64)
    (va_x_r10:nat64) (va_x_r11:nat64) (va_x_rbx:nat64) (va_x_r13:nat64) (va_x_heap0:vale_heap)
    (va_x_efl:Vale.X64.Flags.t) . let va_sM = va_upd_flags va_x_efl (va_upd_mem_heaplet 0
    va_x_heap0 (va_upd_reg64 rR13 va_x_r13 (va_upd_reg64 rRbx va_x_rbx (va_upd_reg64 rR11 va_x_r11
    (va_upd_reg64 rR10 va_x_r10 (va_upd_reg64 rR9 va_x_r9 (va_upd_reg64 rR8 va_x_r8 (va_upd_reg64
    rRdx va_x_rdx (va_upd_reg64 rRcx va_x_rcx (va_upd_reg64 rRax va_x_rax (va_upd_mem va_x_mem
    va_s0))))))))))) in va_get_ok va_sM /\ (let (a0:Vale.Def.Types_s.nat64) =
    Vale.X64.Decls.buffer64_read inA_b (0 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_s0) in
    let (a1:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (1 + offset `op_Multiply`
    2) (va_get_mem_heaplet 0 va_s0) in let (a2:Vale.Def.Types_s.nat64) =
    Vale.X64.Decls.buffer64_read inA_b (2 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_s0) in
    let (a3:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (3 + offset `op_Multiply`
    2) (va_get_mem_heaplet 0 va_s0) in let (a4:Vale.Def.Types_s.nat64) =
    Vale.X64.Decls.buffer64_read inA_b (4 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_s0) in
    let (a5:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (5 + offset `op_Multiply`
    2) (va_get_mem_heaplet 0 va_s0) in let (a6:Vale.Def.Types_s.nat64) =
    Vale.X64.Decls.buffer64_read inA_b (6 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_s0) in
    let (a7:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (7 + offset `op_Multiply`
    2) (va_get_mem_heaplet 0 va_s0) in let (a:Prims.nat) = Vale.Curve25519.Fast_defs.pow2_eight a0
    a1 a2 a3 a4 a5 a6 a7 in let d0 = Vale.X64.Decls.buffer64_read dst_b (0 + offset)
    (va_get_mem_heaplet 0 va_sM) in let d1 = Vale.X64.Decls.buffer64_read dst_b (1 + offset)
    (va_get_mem_heaplet 0 va_sM) in let d2 = Vale.X64.Decls.buffer64_read dst_b (2 + offset)
    (va_get_mem_heaplet 0 va_sM) in let d3 = Vale.X64.Decls.buffer64_read dst_b (3 + offset)
    (va_get_mem_heaplet 0 va_sM) in let d = Vale.Curve25519.Fast_defs.pow2_four d0 d1 d2 d3 in d
    `op_Modulus` prime == a `op_Modulus` prime /\ Vale.X64.Decls.validSrcAddrs64
    (va_get_mem_heaplet 0 va_sM) (va_get_reg64 rRdi va_sM) dst_b (4 + offset) (va_get_mem_layout
    va_sM) Secret /\ Vale.X64.Decls.modifies_buffer_specific dst_b (va_get_mem_heaplet 0 va_s0)
    (va_get_mem_heaplet 0 va_sM) (0 + offset) (4 + offset - 1)) ==> va_k va_sM (())))

val va_wpProof_Carry_wide : offset:nat -> dst_b:buffer64 -> inA_b:buffer64 -> va_s0:va_state ->
  va_k:(va_state -> unit -> Type0)
  -> Ghost (va_state & va_fuel & unit)
  (requires (va_t_require va_s0 /\ va_wp_Carry_wide offset dst_b inA_b va_s0 va_k))
  (ensures (fun (va_sM, va_f0, va_g) -> va_t_ensure (va_code_Carry_wide offset) ([va_Mod_flags;
    va_Mod_mem_heaplet 0; va_Mod_reg64 rR13; va_Mod_reg64 rRbx; va_Mod_reg64 rR11; va_Mod_reg64
    rR10; va_Mod_reg64 rR9; va_Mod_reg64 rR8; va_Mod_reg64 rRdx; va_Mod_reg64 rRcx; va_Mod_reg64
    rRax; va_Mod_mem]) va_s0 va_k ((va_sM, va_f0, va_g))))
[@ "opaque_to_smt" va_qattr]
let va_quick_Carry_wide (offset:nat) (dst_b:buffer64) (inA_b:buffer64) : (va_quickCode unit
  (va_code_Carry_wide offset)) =
  (va_QProc (va_code_Carry_wide offset) ([va_Mod_flags; va_Mod_mem_heaplet 0; va_Mod_reg64 rR13;
    va_Mod_reg64 rRbx; va_Mod_reg64 rR11; va_Mod_reg64 rR10; va_Mod_reg64 rR9; va_Mod_reg64 rR8;
    va_Mod_reg64 rRdx; va_Mod_reg64 rRcx; va_Mod_reg64 rRax; va_Mod_mem]) (va_wp_Carry_wide offset
    dst_b inA_b) (va_wpProof_Carry_wide offset dst_b inA_b))
//--
//-- Fadd

val va_code_Fadd : va_dummy:unit -> Tot va_code

val va_codegen_success_Fadd : va_dummy:unit -> Tot va_pbool
let va_req_Fadd (va_b0:va_code) (va_s0:va_state) (dst_b:buffer64) (inA_b:buffer64) (inB_b:buffer64)
  : prop =
  (va_require_total va_b0 (va_code_Fadd ()) va_s0 /\ va_get_ok va_s0 /\ (let
    (a0:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 0 (va_get_mem va_s0) in let
    (a1:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 1 (va_get_mem va_s0) in let
    (a2:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 2 (va_get_mem va_s0) in let
    (a3:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 3 (va_get_mem va_s0) in let
    (b0:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 0 (va_get_mem va_s0) in let
    (b1:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 1 (va_get_mem va_s0) in let
    (b2:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 2 (va_get_mem va_s0) in let
    (b3:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 3 (va_get_mem va_s0) in let
    (a:Prims.nat) = Vale.Curve25519.Fast_defs.pow2_four a0 a1 a2 a3 in let (b:Prims.nat) =
    Vale.Curve25519.Fast_defs.pow2_four b0 b1 b2 b3 in adx_enabled /\ bmi2_enabled /\
    Vale.X64.Memory.is_initial_heap (va_get_mem_layout va_s0) (va_get_mem va_s0) /\
    (Vale.X64.Decls.buffers_disjoint dst_b inA_b \/ dst_b == inA_b) /\
    (Vale.X64.Decls.buffers_disjoint dst_b inB_b \/ dst_b == inB_b) /\
    Vale.X64.Decls.validDstAddrs64 (va_get_mem va_s0) (va_get_reg64 rRdi va_s0) dst_b 4
    (va_get_mem_layout va_s0) Secret /\ Vale.X64.Decls.validSrcAddrs64 (va_get_mem va_s0)
    (va_get_reg64 rRsi va_s0) inA_b 4 (va_get_mem_layout va_s0) Secret /\
    Vale.X64.Decls.validSrcAddrs64 (va_get_mem va_s0) (va_get_reg64 rRdx va_s0) inB_b 4
    (va_get_mem_layout va_s0) Secret))
let va_ens_Fadd (va_b0:va_code) (va_s0:va_state) (dst_b:buffer64) (inA_b:buffer64) (inB_b:buffer64)
  (va_sM:va_state) (va_fM:va_fuel) : prop =
  (va_req_Fadd va_b0 va_s0 dst_b inA_b inB_b /\ va_ensure_total va_b0 va_s0 va_sM va_fM /\
    va_get_ok va_sM /\ (let (a0:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 0
    (va_get_mem va_s0) in let (a1:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 1
    (va_get_mem va_s0) in let (a2:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 2
    (va_get_mem va_s0) in let (a3:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 3
    (va_get_mem va_s0) in let (b0:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 0
    (va_get_mem va_s0) in let (b1:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 1
    (va_get_mem va_s0) in let (b2:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 2
    (va_get_mem va_s0) in let (b3:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 3
    (va_get_mem va_s0) in let (a:Prims.nat) = Vale.Curve25519.Fast_defs.pow2_four a0 a1 a2 a3 in
    let (b:Prims.nat) = Vale.Curve25519.Fast_defs.pow2_four b0 b1 b2 b3 in let d0 =
    Vale.X64.Decls.buffer64_read dst_b 0 (va_get_mem va_sM) in let d1 =
    Vale.X64.Decls.buffer64_read dst_b 1 (va_get_mem va_sM) in let d2 =
    Vale.X64.Decls.buffer64_read dst_b 2 (va_get_mem va_sM) in let d3 =
    Vale.X64.Decls.buffer64_read dst_b 3 (va_get_mem va_sM) in let d =
    Vale.Curve25519.Fast_defs.pow2_four d0 d1 d2 d3 in d `op_Modulus` prime == (a + b) `op_Modulus`
    prime /\ Vale.X64.Decls.modifies_buffer dst_b (va_get_mem va_s0) (va_get_mem va_sM)) /\
    va_state_eq va_sM (va_update_flags va_sM (va_update_mem_layout va_sM (va_update_mem_heaplet 0
    va_sM (va_update_reg64 rR11 va_sM (va_update_reg64 rR10 va_sM (va_update_reg64 rR9 va_sM
    (va_update_reg64 rR8 va_sM (va_update_reg64 rRdx va_sM (va_update_reg64 rRcx va_sM
    (va_update_reg64 rRax va_sM (va_update_ok va_sM (va_update_mem va_sM va_s0)))))))))))))

val va_lemma_Fadd : va_b0:va_code -> va_s0:va_state -> dst_b:buffer64 -> inA_b:buffer64 ->
  inB_b:buffer64
  -> Ghost (va_state & va_fuel)
  (requires (va_require_total va_b0 (va_code_Fadd ()) va_s0 /\ va_get_ok va_s0 /\ (let
    (a0:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 0 (va_get_mem va_s0) in let
    (a1:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 1 (va_get_mem va_s0) in let
    (a2:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 2 (va_get_mem va_s0) in let
    (a3:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 3 (va_get_mem va_s0) in let
    (b0:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 0 (va_get_mem va_s0) in let
    (b1:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 1 (va_get_mem va_s0) in let
    (b2:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 2 (va_get_mem va_s0) in let
    (b3:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 3 (va_get_mem va_s0) in let
    (a:Prims.nat) = Vale.Curve25519.Fast_defs.pow2_four a0 a1 a2 a3 in let (b:Prims.nat) =
    Vale.Curve25519.Fast_defs.pow2_four b0 b1 b2 b3 in adx_enabled /\ bmi2_enabled /\
    Vale.X64.Memory.is_initial_heap (va_get_mem_layout va_s0) (va_get_mem va_s0) /\
    (Vale.X64.Decls.buffers_disjoint dst_b inA_b \/ dst_b == inA_b) /\
    (Vale.X64.Decls.buffers_disjoint dst_b inB_b \/ dst_b == inB_b) /\
    Vale.X64.Decls.validDstAddrs64 (va_get_mem va_s0) (va_get_reg64 rRdi va_s0) dst_b 4
    (va_get_mem_layout va_s0) Secret /\ Vale.X64.Decls.validSrcAddrs64 (va_get_mem va_s0)
    (va_get_reg64 rRsi va_s0) inA_b 4 (va_get_mem_layout va_s0) Secret /\
    Vale.X64.Decls.validSrcAddrs64 (va_get_mem va_s0) (va_get_reg64 rRdx va_s0) inB_b 4
    (va_get_mem_layout va_s0) Secret)))
  (ensures (fun (va_sM, va_fM) -> va_ensure_total va_b0 va_s0 va_sM va_fM /\ va_get_ok va_sM /\
    (let (a0:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 0 (va_get_mem va_s0) in
    let (a1:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 1 (va_get_mem va_s0) in
    let (a2:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 2 (va_get_mem va_s0) in
    let (a3:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 3 (va_get_mem va_s0) in
    let (b0:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 0 (va_get_mem va_s0) in
    let (b1:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 1 (va_get_mem va_s0) in
    let (b2:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 2 (va_get_mem va_s0) in
    let (b3:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 3 (va_get_mem va_s0) in
    let (a:Prims.nat) = Vale.Curve25519.Fast_defs.pow2_four a0 a1 a2 a3 in let (b:Prims.nat) =
    Vale.Curve25519.Fast_defs.pow2_four b0 b1 b2 b3 in let d0 = Vale.X64.Decls.buffer64_read dst_b
    0 (va_get_mem va_sM) in let d1 = Vale.X64.Decls.buffer64_read dst_b 1 (va_get_mem va_sM) in let
    d2 = Vale.X64.Decls.buffer64_read dst_b 2 (va_get_mem va_sM) in let d3 =
    Vale.X64.Decls.buffer64_read dst_b 3 (va_get_mem va_sM) in let d =
    Vale.Curve25519.Fast_defs.pow2_four d0 d1 d2 d3 in d `op_Modulus` prime == (a + b) `op_Modulus`
    prime /\ Vale.X64.Decls.modifies_buffer dst_b (va_get_mem va_s0) (va_get_mem va_sM)) /\
    va_state_eq va_sM (va_update_flags va_sM (va_update_mem_layout va_sM (va_update_mem_heaplet 0
    va_sM (va_update_reg64 rR11 va_sM (va_update_reg64 rR10 va_sM (va_update_reg64 rR9 va_sM
    (va_update_reg64 rR8 va_sM (va_update_reg64 rRdx va_sM (va_update_reg64 rRcx va_sM
    (va_update_reg64 rRax va_sM (va_update_ok va_sM (va_update_mem va_sM va_s0))))))))))))))
[@ va_qattr]
let va_wp_Fadd (dst_b:buffer64) (inA_b:buffer64) (inB_b:buffer64) (va_s0:va_state) (va_k:(va_state
  -> unit -> Type0)) : Type0 =
  (va_get_ok va_s0 /\ (let (a0:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 0
    (va_get_mem va_s0) in let (a1:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 1
    (va_get_mem va_s0) in let (a2:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 2
    (va_get_mem va_s0) in let (a3:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 3
    (va_get_mem va_s0) in let (b0:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 0
    (va_get_mem va_s0) in let (b1:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 1
    (va_get_mem va_s0) in let (b2:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 2
    (va_get_mem va_s0) in let (b3:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 3
    (va_get_mem va_s0) in let (a:Prims.nat) = Vale.Curve25519.Fast_defs.pow2_four a0 a1 a2 a3 in
    let (b:Prims.nat) = Vale.Curve25519.Fast_defs.pow2_four b0 b1 b2 b3 in adx_enabled /\
    bmi2_enabled /\ Vale.X64.Memory.is_initial_heap (va_get_mem_layout va_s0) (va_get_mem va_s0) /\
    (Vale.X64.Decls.buffers_disjoint dst_b inA_b \/ dst_b == inA_b) /\
    (Vale.X64.Decls.buffers_disjoint dst_b inB_b \/ dst_b == inB_b) /\
    Vale.X64.Decls.validDstAddrs64 (va_get_mem va_s0) (va_get_reg64 rRdi va_s0) dst_b 4
    (va_get_mem_layout va_s0) Secret /\ Vale.X64.Decls.validSrcAddrs64 (va_get_mem va_s0)
    (va_get_reg64 rRsi va_s0) inA_b 4 (va_get_mem_layout va_s0) Secret /\
    Vale.X64.Decls.validSrcAddrs64 (va_get_mem va_s0) (va_get_reg64 rRdx va_s0) inB_b 4
    (va_get_mem_layout va_s0) Secret) /\ (forall (va_x_mem:vale_heap) (va_x_rax:nat64)
    (va_x_rcx:nat64) (va_x_rdx:nat64) (va_x_r8:nat64) (va_x_r9:nat64) (va_x_r10:nat64)
    (va_x_r11:nat64) (va_x_heap0:vale_heap) (va_x_memLayout:vale_heap_layout)
    (va_x_efl:Vale.X64.Flags.t) . let va_sM = va_upd_flags va_x_efl (va_upd_mem_layout
    va_x_memLayout (va_upd_mem_heaplet 0 va_x_heap0 (va_upd_reg64 rR11 va_x_r11 (va_upd_reg64 rR10
    va_x_r10 (va_upd_reg64 rR9 va_x_r9 (va_upd_reg64 rR8 va_x_r8 (va_upd_reg64 rRdx va_x_rdx
    (va_upd_reg64 rRcx va_x_rcx (va_upd_reg64 rRax va_x_rax (va_upd_mem va_x_mem va_s0)))))))))) in
    va_get_ok va_sM /\ (let (a0:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 0
    (va_get_mem va_s0) in let (a1:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 1
    (va_get_mem va_s0) in let (a2:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 2
    (va_get_mem va_s0) in let (a3:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b 3
    (va_get_mem va_s0) in let (b0:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 0
    (va_get_mem va_s0) in let (b1:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 1
    (va_get_mem va_s0) in let (b2:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 2
    (va_get_mem va_s0) in let (b3:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b 3
    (va_get_mem va_s0) in let (a:Prims.nat) = Vale.Curve25519.Fast_defs.pow2_four a0 a1 a2 a3 in
    let (b:Prims.nat) = Vale.Curve25519.Fast_defs.pow2_four b0 b1 b2 b3 in let d0 =
    Vale.X64.Decls.buffer64_read dst_b 0 (va_get_mem va_sM) in let d1 =
    Vale.X64.Decls.buffer64_read dst_b 1 (va_get_mem va_sM) in let d2 =
    Vale.X64.Decls.buffer64_read dst_b 2 (va_get_mem va_sM) in let d3 =
    Vale.X64.Decls.buffer64_read dst_b 3 (va_get_mem va_sM) in let d =
    Vale.Curve25519.Fast_defs.pow2_four d0 d1 d2 d3 in d `op_Modulus` prime == (a + b) `op_Modulus`
    prime /\ Vale.X64.Decls.modifies_buffer dst_b (va_get_mem va_s0) (va_get_mem va_sM)) ==> va_k
    va_sM (())))

val va_wpProof_Fadd : dst_b:buffer64 -> inA_b:buffer64 -> inB_b:buffer64 -> va_s0:va_state ->
  va_k:(va_state -> unit -> Type0)
  -> Ghost (va_state & va_fuel & unit)
  (requires (va_t_require va_s0 /\ va_wp_Fadd dst_b inA_b inB_b va_s0 va_k))
  (ensures (fun (va_sM, va_f0, va_g) -> va_t_ensure (va_code_Fadd ()) ([va_Mod_flags;
    va_Mod_mem_layout; va_Mod_mem_heaplet 0; va_Mod_reg64 rR11; va_Mod_reg64 rR10; va_Mod_reg64
    rR9; va_Mod_reg64 rR8; va_Mod_reg64 rRdx; va_Mod_reg64 rRcx; va_Mod_reg64 rRax; va_Mod_mem])
    va_s0 va_k ((va_sM, va_f0, va_g))))
[@ "opaque_to_smt" va_qattr]
let va_quick_Fadd (dst_b:buffer64) (inA_b:buffer64) (inB_b:buffer64) : (va_quickCode unit
  (va_code_Fadd ())) =
  (va_QProc (va_code_Fadd ()) ([va_Mod_flags; va_Mod_mem_layout; va_Mod_mem_heaplet 0; va_Mod_reg64
    rR11; va_Mod_reg64 rR10; va_Mod_reg64 rR9; va_Mod_reg64 rR8; va_Mod_reg64 rRdx; va_Mod_reg64
    rRcx; va_Mod_reg64 rRax; va_Mod_mem]) (va_wp_Fadd dst_b inA_b inB_b) (va_wpProof_Fadd dst_b
    inA_b inB_b))
//--
//-- Fadd_stdcall

val va_code_Fadd_stdcall : win:bool -> Tot va_code

val va_codegen_success_Fadd_stdcall : win:bool -> Tot va_pbool
let va_req_Fadd_stdcall (va_b0:va_code) (va_s0:va_state) (win:bool) (dst_b:buffer64)
  (inA_b:buffer64) (inB_b:buffer64) : prop =
  (va_require_total va_b0 (va_code_Fadd_stdcall win) va_s0 /\ va_get_ok va_s0 /\ (let
    (dst_in:(va_int_range 0 18446744073709551615)) = (if win then va_get_reg64 rRcx va_s0 else
    va_get_reg64 rRdi va_s0) in let (inA_in:(va_int_range 0 18446744073709551615)) = (if win then
    va_get_reg64 rRdx va_s0 else va_get_reg64 rRsi va_s0) in let (inB_in:(va_int_range 0
    18446744073709551615)) = (if win then va_get_reg64 rR8 va_s0 else va_get_reg64 rRdx va_s0) in
    va_get_reg64 rRsp va_s0 == Vale.X64.Stack_i.init_rsp (va_get_stack va_s0) /\
    Vale.X64.Memory.is_initial_heap (va_get_mem_layout va_s0) (va_get_mem va_s0) /\ (adx_enabled /\
    bmi2_enabled) /\ (Vale.X64.Decls.buffers_disjoint dst_b inA_b \/ dst_b == inA_b) /\
    (Vale.X64.Decls.buffers_disjoint dst_b inB_b \/ dst_b == inB_b) /\
    Vale.X64.Decls.validDstAddrs64 (va_get_mem va_s0) dst_in dst_b 4 (va_get_mem_layout va_s0)
    Secret /\ Vale.X64.Decls.validSrcAddrs64 (va_get_mem va_s0) inA_in inA_b 4 (va_get_mem_layout
    va_s0) Secret /\ Vale.X64.Decls.validSrcAddrs64 (va_get_mem va_s0) inB_in inB_b 4
    (va_get_mem_layout va_s0) Secret))
let va_ens_Fadd_stdcall (va_b0:va_code) (va_s0:va_state) (win:bool) (dst_b:buffer64)
val va_ens_Fadd_stdcall
      (va_b0: va_code)
      (va_s0: va_state)
      (win: bool)
      (dst_b inA_b inB_b: buffer64)
      (va_sM: va_state)
      (va_fM: va_fuel)
    : prop

    va_b0: Vale.X64.Decls.va_code ->
    va_s0: Vale.X64.Decls.va_state ->
    win: Prims.bool ->
    dst_b: Vale.X64.Memory.buffer64 ->
    inA_b: Vale.X64.Memory.buffer64 ->
    inB_b: Vale.X64.Memory.buffer64 ->
    va_sM: Vale.X64.Decls.va_state ->
    va_fM: Vale.X64.Decls.va_fuel
  -> Prims.prop