val va_wpProof_Cmovc64 : dst:va_operand_dst_opr64 -> src:va_operand_opr64 -> va_s0:va_state ->
  va_k:(va_state -> unit -> Type0)
  -> Ghost (va_state & va_fuel & unit)
  (requires (va_t_require va_s0 /\ va_wp_Cmovc64 dst src va_s0 va_k))
  (ensures (fun (va_sM, va_f0, va_g) -> va_t_ensure (va_code_Cmovc64 dst src) ([va_mod_dst_opr64
    dst]) va_s0 va_k ((va_sM, va_f0, va_g))))
let va_wpProof_Cmovc64 dst src va_s0 va_k =
  let (va_sM, va_f0) = va_lemma_Cmovc64 (va_code_Cmovc64 dst src) va_s0 dst src in
  va_lemma_upd_update va_sM;
  assert (va_state_eq va_sM (va_update_ok va_sM (va_update_operand_dst_opr64 dst va_sM va_s0)));
  va_lemma_norm_mods ([va_mod_dst_opr64 dst]) va_sM va_s0;
  let va_g = () in
  (va_sM, va_f0, va_g)
val va_wpProof_Cmovc64 : dst:va_operand_dst_opr64 -> src:va_operand_opr64 -> va_s0:va_state ->
  va_k:(va_state -> unit -> Type0)
  -> Ghost (va_state & va_fuel & unit)
  (requires (va_t_require va_s0 /\ va_wp_Cmovc64 dst src va_s0 va_k))
  (ensures (fun (va_sM, va_f0, va_g) -> va_t_ensure (va_code_Cmovc64 dst src) ([va_mod_dst_opr64
    dst]) va_s0 va_k ((va_sM, va_f0, va_g))))
let va_wpProof_Cmovc64 dst src va_s0 va_k =
let va_sM, va_f0 = va_lemma_Cmovc64 (va_code_Cmovc64 dst src) va_s0 dst src in
va_lemma_upd_update va_sM;
assert (va_state_eq va_sM (va_update_ok va_sM (va_update_operand_dst_opr64 dst va_sM va_s0)));
va_lemma_norm_mods ([va_mod_dst_opr64 dst]) va_sM va_s0;
let va_g = () in
(va_sM, va_f0, va_g)
Vale.X64.InsBasic.fst.checked
Vale.X64.Taint_Semantics.fst.checked Vale.X64.StateLemmas.fsti.checked Vale.X64.Stack_i.fsti.checked Vale.X64.Memory.fsti.checked Vale.X64.Machine_Semantics_s.fst.checked Vale.X64.Instructions_s.fsti.checked Vale.X64.InsLemmas.fsti.checked Vale.X64.Decls.fst.checked Vale.X64.CPU_Features_s.fst.checked Vale.Arch.Types.fsti.checked prims.fst.checked FStar.UInt.fsti.checked FStar.Pervasives.Native.fst.checked FStar.Pervasives.fsti.checked FStar.Math.Lemmas.fst.checked
Vale.X64.InsBasic.fst
Vale.X64.Decls.va_operand_dst_opr64 Vale.X64.Decls.va_operand_opr64 Vale.X64.Decls.va_state Prims.unit Vale.X64.Decls.va_fuel FStar.Pervasives.Native.Mktuple3 Vale.X64.QuickCode.va_lemma_norm_mods Prims.Cons Vale.X64.QuickCode.mod_t Vale.X64.QuickCode.va_mod_dst_opr64 Prims.Nil Prims._assert Vale.X64.Decls.va_state_eq Vale.X64.Decls.va_update_ok Vale.X64.Decls.va_update_operand_dst_opr64 Vale.X64.Decls.va_lemma_upd_update FStar.Pervasives.Native.tuple3 FStar.Pervasives.Native.tuple2 Vale.X64.State.vale_state Vale.X64.InsBasic.va_lemma_Cmovc64 Vale.X64.InsBasic.va_code_Cmovc64
module Vale.X64.InsBasic
open Vale.X64
open Vale.X64.StateLemmas
open Vale.X64.InsLemmas
open Vale.X64.Taint_Semantics
open Vale.X64.CPU_Features_s
open Vale.X64.Memory
open Vale.X64.Stack_i
module I = Vale.X64.Instructions_s
module S = Vale.X64.Machine_Semantics_s
friend Vale.X64.Decls
#reset-options "--initial_fuel 5 --max_fuel 5 --max_ifuel 2 --z3rlimit 20"
//-- Mov64

[@ "opaque_to_smt"]
let va_code_Mov64 dst src =
  (mk_ins (make_instr_annotate (I.ins_Mov64) (S.AnnotateMov64 ()) dst src))

[@ "opaque_to_smt"]
let va_codegen_success_Mov64 dst src =
  (va_ttrue ())

[@"opaque_to_smt"]
let va_lemma_Mov64 va_b0 va_s0 dst src =
  va_reveal_opaque (`%va_code_Mov64) (va_code_Mov64 dst src);
  let (va_old_s:va_state) = va_s0 in
  va_ins_lemma (mk_ins (make_instr_annotate (I.ins_Mov64) (S.AnnotateMov64 ()) dst src)) va_s0;
  let (va_sM, va_fM) = va_eval_ins (mk_ins (make_instr_annotate (I.ins_Mov64) (S.AnnotateMov64 ())
    dst src)) va_s0 in
  (va_sM, va_fM)


[@"opaque_to_smt"]
let va_wpProof_Mov64 dst src va_s0 va_k =
  let (va_sM, va_f0) = va_lemma_Mov64 (va_code_Mov64 dst src) va_s0 dst src in
  va_lemma_upd_update va_sM;
  assert (va_state_eq va_sM (va_update_ok va_sM (va_update_operand_dst_opr64 dst va_sM va_s0)));
  va_lemma_norm_mods ([va_mod_dst_opr64 dst]) va_sM va_s0;
  let va_g = () in
  (va_sM, va_f0, va_g)

//--
//-- Cmovc64

[@ "opaque_to_smt"]
let va_code_Cmovc64 dst src =
  (mk_ins (make_instr (I.ins_Cmovc64) dst src))

[@ "opaque_to_smt"]
let va_codegen_success_Cmovc64 dst src =
  (va_ttrue ())

[@"opaque_to_smt"]
let va_lemma_Cmovc64 va_b0 va_s0 dst src =
  va_reveal_opaque (`%va_code_Cmovc64) (va_code_Cmovc64 dst src);
  let (va_old_s:va_state) = va_s0 in
  va_ins_lemma (mk_ins (make_instr (I.ins_Cmovc64) dst src)) va_s0;
  let (va_sM, va_fM) = va_eval_ins (mk_ins (make_instr (I.ins_Cmovc64) dst src)) va_s0 in
  (va_sM, va_fM)
val va_wpProof_Cmovc64 : dst:va_operand_dst_opr64 -> src:va_operand_opr64 -> va_s0:va_state ->
  va_k:(va_state -> unit -> Type0)
  -> Ghost (va_state & va_fuel & unit)
  (requires (va_t_require va_s0 /\ va_wp_Cmovc64 dst src va_s0 va_k))
  (ensures (fun (va_sM, va_f0, va_g) -> va_t_ensure (va_code_Cmovc64 dst src) ([va_mod_dst_opr64
    dst]) va_s0 va_k ((va_sM, va_f0, va_g))))

    dst: Vale.X64.Decls.va_operand_dst_opr64 ->
    src: Vale.X64.Decls.va_operand_opr64 ->
    va_s0: Vale.X64.Decls.va_state ->
    va_k: (_: Vale.X64.Decls.va_state -> _: Prims.unit -> Type0)
  -> Prims.Ghost ((Vale.X64.Decls.va_state * Vale.X64.Decls.va_fuel) * Prims.unit)