val va_lemma_Callee_restore_registers : va_b0:va_code -> va_s0:va_state -> win:bool ->
  old_xmm6:quad32 -> old_xmm7:quad32 -> old_xmm8:quad32 -> old_xmm9:quad32 -> old_xmm10:quad32 ->
  old_xmm11:quad32 -> old_xmm12:quad32 -> old_xmm13:quad32 -> old_xmm14:quad32 -> old_xmm15:quad32
  -> Ghost (va_state & va_fuel)
  (requires (va_require_total va_b0 (va_code_Callee_restore_registers win) va_s0 /\ va_get_ok va_s0
    /\ sse_enabled /\ (forall i . va_get_reg64 rRsp va_s0 <= i /\ i <= va_get_reg64 rRsp va_s0 +
    (if win then 216 else 56) ==> Vale.X64.Stack_i.valid_stack_slot64 i (va_get_stack va_s0) Public
    (va_get_stackTaint va_s0)) /\ va_get_reg64 rRsp va_s0 >= Vale.X64.Stack_i.init_rsp
    (va_get_stack va_s0) - 4096 /\ va_get_reg64 rRsp va_s0 + (if win then 224 else 64) <=
    Vale.X64.Stack_i.init_rsp (va_get_stack va_s0) /\ (win ==> Vale.Arch.Types.hi64 old_xmm6 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 64) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm6 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 72)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm7 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 80) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm7 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 88)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm8 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 96) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm8 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 104)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm9 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 112) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm9 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 120)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm10 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 128) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm10 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 136)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm11 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 144) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm11 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 152)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm12 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 160) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm12 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 168)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm13 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 176) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm13 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 184)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm14 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 192) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm14 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 200)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm15 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 208) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm15 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 216)
    (va_get_stack va_s0))))
  (ensures (fun (va_sM, va_fM) -> va_ensure_total va_b0 va_s0 va_sM va_fM /\ va_get_ok va_sM /\
    va_get_reg64 rRbx va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0)
    (va_get_stack va_s0) /\ va_get_reg64 rRbp va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64
    rRsp va_s0 + 8) (va_get_stack va_s0) /\ va_get_reg64 rRdi va_sM ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 16) (va_get_stack va_s0) /\
    va_get_reg64 rRsi va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 24)
    (va_get_stack va_s0) /\ va_get_reg64 rR12 va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64
    rRsp va_s0 + 32) (va_get_stack va_s0) /\ va_get_reg64 rR13 va_sM ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 40) (va_get_stack va_s0) /\
    va_get_reg64 rR14 va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 48)
    (va_get_stack va_s0) /\ va_get_reg64 rR15 va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64
    rRsp va_s0 + 56) (va_get_stack va_s0) /\ (win ==> va_get_xmm 6 va_sM == old_xmm6) /\ (win ==>
    va_get_xmm 7 va_sM == old_xmm7) /\ (win ==> va_get_xmm 8 va_sM == old_xmm8) /\ (win ==>
    va_get_xmm 9 va_sM == old_xmm9) /\ (win ==> va_get_xmm 10 va_sM == old_xmm10) /\ (win ==>
    va_get_xmm 11 va_sM == old_xmm11) /\ (win ==> va_get_xmm 12 va_sM == old_xmm12) /\ (win ==>
    va_get_xmm 13 va_sM == old_xmm13) /\ (win ==> va_get_xmm 14 va_sM == old_xmm14) /\ (win ==>
    va_get_xmm 15 va_sM == old_xmm15) /\ va_get_reg64 rRsp va_sM == va_get_reg64 rRsp va_s0 + (if
    win then 224 else 64) /\ va_get_stack va_sM == Vale.X64.Stack_i.free_stack64 (va_get_reg64 rRsp
    va_s0) (va_get_reg64 rRsp va_s0 + (if win then 224 else 64)) (va_get_stack va_s0) /\
    va_state_eq va_sM (va_update_stack va_sM (va_update_reg64 rRsp va_sM (va_update_xmm 15 va_sM
    (va_update_xmm 14 va_sM (va_update_xmm 13 va_sM (va_update_xmm 12 va_sM (va_update_xmm 11 va_sM
    (va_update_xmm 10 va_sM (va_update_xmm 9 va_sM (va_update_xmm 8 va_sM (va_update_xmm 7 va_sM
    (va_update_xmm 6 va_sM (va_update_reg64 rR15 va_sM (va_update_reg64 rR14 va_sM (va_update_reg64
    rR13 va_sM (va_update_reg64 rR12 va_sM (va_update_reg64 rRsi va_sM (va_update_reg64 rRdi va_sM
    (va_update_reg64 rRbp va_sM (va_update_reg64 rRbx va_sM (va_update_reg64 rRax va_sM
    (va_update_ok va_sM va_s0))))))))))))))))))))))))
let va_lemma_Callee_restore_registers va_b0 va_s0 win old_xmm6 old_xmm7 old_xmm8 old_xmm9 old_xmm10
  old_xmm11 old_xmm12 old_xmm13 old_xmm14 old_xmm15 =
  let (va_mods:va_mods_t) = [va_Mod_stack; va_Mod_reg64 rRsp; va_Mod_xmm 15; va_Mod_xmm 14;
    va_Mod_xmm 13; va_Mod_xmm 12; va_Mod_xmm 11; va_Mod_xmm 10; va_Mod_xmm 9; va_Mod_xmm 8;
    va_Mod_xmm 7; va_Mod_xmm 6; va_Mod_reg64 rR15; va_Mod_reg64 rR14; va_Mod_reg64 rR13;
    va_Mod_reg64 rR12; va_Mod_reg64 rRsi; va_Mod_reg64 rRdi; va_Mod_reg64 rRbp; va_Mod_reg64 rRbx;
    va_Mod_reg64 rRax; va_Mod_ok] in
  let va_qc = va_qcode_Callee_restore_registers va_mods win old_xmm6 old_xmm7 old_xmm8 old_xmm9
    old_xmm10 old_xmm11 old_xmm12 old_xmm13 old_xmm14 old_xmm15 in
  let (va_sM, va_fM, va_g) = va_wp_sound_code_norm (va_code_Callee_restore_registers win) va_qc
    va_s0 (fun va_s0 va_sM va_g -> let () = va_g in label va_range1
    "***** POSTCONDITION NOT MET AT line 95 column 1 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_get_ok va_sM) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 141 column 45 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_get_reg64 rRbx va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0)
    (va_get_stack va_s0)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 142 column 49 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_get_reg64 rRbp va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 8)
    (va_get_stack va_s0)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 143 column 50 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_get_reg64 rRdi va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 16)
    (va_get_stack va_s0)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 144 column 50 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_get_reg64 rRsi va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 24)
    (va_get_stack va_s0)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 145 column 50 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_get_reg64 rR12 va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 32)
    (va_get_stack va_s0)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 146 column 50 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_get_reg64 rR13 va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 40)
    (va_get_stack va_s0)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 147 column 50 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_get_reg64 rR14 va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 48)
    (va_get_stack va_s0)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 148 column 50 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_get_reg64 rR15 va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 56)
    (va_get_stack va_s0)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 150 column 34 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> va_get_xmm 6 va_sM == old_xmm6) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 151 column 34 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> va_get_xmm 7 va_sM == old_xmm7) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 152 column 34 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> va_get_xmm 8 va_sM == old_xmm8) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 153 column 34 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> va_get_xmm 9 va_sM == old_xmm9) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 154 column 35 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> va_get_xmm 10 va_sM == old_xmm10) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 155 column 35 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> va_get_xmm 11 va_sM == old_xmm11) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 156 column 35 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> va_get_xmm 12 va_sM == old_xmm12) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 157 column 35 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> va_get_xmm 13 va_sM == old_xmm13) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 158 column 35 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> va_get_xmm 14 va_sM == old_xmm14) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 159 column 35 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> va_get_xmm 15 va_sM == old_xmm15) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 161 column 52 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_get_reg64 rRsp va_sM == va_get_reg64 rRsp va_s0 + va_if win (fun _ -> 224) (fun _ -> 64))
    /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 162 column 79 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_get_stack va_sM == Vale.X64.Stack_i.free_stack64 (va_get_reg64 rRsp va_s0) (va_get_reg64
    rRsp va_s0 + va_if win (fun _ -> 224) (fun _ -> 64)) (va_get_stack va_s0))) in
  assert_norm (va_qc.mods == va_mods);
  va_lemma_norm_mods ([va_Mod_stack; va_Mod_reg64 rRsp; va_Mod_xmm 15; va_Mod_xmm 14; va_Mod_xmm
    13; va_Mod_xmm 12; va_Mod_xmm 11; va_Mod_xmm 10; va_Mod_xmm 9; va_Mod_xmm 8; va_Mod_xmm 7;
    va_Mod_xmm 6; va_Mod_reg64 rR15; va_Mod_reg64 rR14; va_Mod_reg64 rR13; va_Mod_reg64 rR12;
    va_Mod_reg64 rRsi; va_Mod_reg64 rRdi; va_Mod_reg64 rRbp; va_Mod_reg64 rRbx; va_Mod_reg64 rRax;
    va_Mod_ok]) va_sM va_s0;
  (va_sM, va_fM)
val va_lemma_Callee_restore_registers : va_b0:va_code -> va_s0:va_state -> win:bool ->
  old_xmm6:quad32 -> old_xmm7:quad32 -> old_xmm8:quad32 -> old_xmm9:quad32 -> old_xmm10:quad32 ->
  old_xmm11:quad32 -> old_xmm12:quad32 -> old_xmm13:quad32 -> old_xmm14:quad32 -> old_xmm15:quad32
  -> Ghost (va_state & va_fuel)
  (requires (va_require_total va_b0 (va_code_Callee_restore_registers win) va_s0 /\ va_get_ok va_s0
    /\ sse_enabled /\ (forall i . va_get_reg64 rRsp va_s0 <= i /\ i <= va_get_reg64 rRsp va_s0 +
    (if win then 216 else 56) ==> Vale.X64.Stack_i.valid_stack_slot64 i (va_get_stack va_s0) Public
    (va_get_stackTaint va_s0)) /\ va_get_reg64 rRsp va_s0 >= Vale.X64.Stack_i.init_rsp
    (va_get_stack va_s0) - 4096 /\ va_get_reg64 rRsp va_s0 + (if win then 224 else 64) <=
    Vale.X64.Stack_i.init_rsp (va_get_stack va_s0) /\ (win ==> Vale.Arch.Types.hi64 old_xmm6 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 64) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm6 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 72)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm7 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 80) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm7 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 88)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm8 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 96) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm8 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 104)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm9 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 112) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm9 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 120)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm10 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 128) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm10 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 136)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm11 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 144) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm11 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 152)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm12 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 160) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm12 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 168)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm13 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 176) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm13 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 184)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm14 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 192) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm14 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 200)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm15 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 208) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm15 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 216)
    (va_get_stack va_s0))))
  (ensures (fun (va_sM, va_fM) -> va_ensure_total va_b0 va_s0 va_sM va_fM /\ va_get_ok va_sM /\
    va_get_reg64 rRbx va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0)
    (va_get_stack va_s0) /\ va_get_reg64 rRbp va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64
    rRsp va_s0 + 8) (va_get_stack va_s0) /\ va_get_reg64 rRdi va_sM ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 16) (va_get_stack va_s0) /\
    va_get_reg64 rRsi va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 24)
    (va_get_stack va_s0) /\ va_get_reg64 rR12 va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64
    rRsp va_s0 + 32) (va_get_stack va_s0) /\ va_get_reg64 rR13 va_sM ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 40) (va_get_stack va_s0) /\
    va_get_reg64 rR14 va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 48)
    (va_get_stack va_s0) /\ va_get_reg64 rR15 va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64
    rRsp va_s0 + 56) (va_get_stack va_s0) /\ (win ==> va_get_xmm 6 va_sM == old_xmm6) /\ (win ==>
    va_get_xmm 7 va_sM == old_xmm7) /\ (win ==> va_get_xmm 8 va_sM == old_xmm8) /\ (win ==>
    va_get_xmm 9 va_sM == old_xmm9) /\ (win ==> va_get_xmm 10 va_sM == old_xmm10) /\ (win ==>
    va_get_xmm 11 va_sM == old_xmm11) /\ (win ==> va_get_xmm 12 va_sM == old_xmm12) /\ (win ==>
    va_get_xmm 13 va_sM == old_xmm13) /\ (win ==> va_get_xmm 14 va_sM == old_xmm14) /\ (win ==>
    va_get_xmm 15 va_sM == old_xmm15) /\ va_get_reg64 rRsp va_sM == va_get_reg64 rRsp va_s0 + (if
    win then 224 else 64) /\ va_get_stack va_sM == Vale.X64.Stack_i.free_stack64 (va_get_reg64 rRsp
    va_s0) (va_get_reg64 rRsp va_s0 + (if win then 224 else 64)) (va_get_stack va_s0) /\
    va_state_eq va_sM (va_update_stack va_sM (va_update_reg64 rRsp va_sM (va_update_xmm 15 va_sM
    (va_update_xmm 14 va_sM (va_update_xmm 13 va_sM (va_update_xmm 12 va_sM (va_update_xmm 11 va_sM
    (va_update_xmm 10 va_sM (va_update_xmm 9 va_sM (va_update_xmm 8 va_sM (va_update_xmm 7 va_sM
    (va_update_xmm 6 va_sM (va_update_reg64 rR15 va_sM (va_update_reg64 rR14 va_sM (va_update_reg64
    rR13 va_sM (va_update_reg64 rR12 va_sM (va_update_reg64 rRsi va_sM (va_update_reg64 rRdi va_sM
    (va_update_reg64 rRbp va_sM (va_update_reg64 rRbx va_sM (va_update_reg64 rRax va_sM
    (va_update_ok va_sM va_s0))))))))))))))))))))))))
let va_lemma_Callee_restore_registers
      va_b0
      va_s0
      win
      old_xmm6
      old_xmm7
      old_xmm8
      old_xmm9
      old_xmm10
      old_xmm11
      old_xmm12
      old_xmm13
      old_xmm14
      old_xmm15
     =
let va_mods:va_mods_t =
  [
    va_Mod_stack; va_Mod_reg64 rRsp; va_Mod_xmm 15; va_Mod_xmm 14; va_Mod_xmm 13; va_Mod_xmm 12;
    va_Mod_xmm 11; va_Mod_xmm 10; va_Mod_xmm 9; va_Mod_xmm 8; va_Mod_xmm 7; va_Mod_xmm 6;
    va_Mod_reg64 rR15; va_Mod_reg64 rR14; va_Mod_reg64 rR13; va_Mod_reg64 rR12; va_Mod_reg64 rRsi;
    va_Mod_reg64 rRdi; va_Mod_reg64 rRbp; va_Mod_reg64 rRbx; va_Mod_reg64 rRax; va_Mod_ok
  ]
in
let va_qc =
  va_qcode_Callee_restore_registers va_mods win old_xmm6 old_xmm7 old_xmm8 old_xmm9 old_xmm10
    old_xmm11 old_xmm12 old_xmm13 old_xmm14 old_xmm15
in
let va_sM, va_fM, va_g =
  va_wp_sound_code_norm (va_code_Callee_restore_registers win)
    va_qc
    va_s0
    (fun va_s0 va_sM va_g ->
        let () = va_g in
        label va_range1
          "***** POSTCONDITION NOT MET AT line 95 column 1 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
          (va_get_ok va_sM) /\
        label va_range1
          "***** POSTCONDITION NOT MET AT line 141 column 45 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
          (va_get_reg64 rRbx va_sM ==
            Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0) (va_get_stack va_s0)) /\
        label va_range1
          "***** POSTCONDITION NOT MET AT line 142 column 49 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
          (va_get_reg64 rRbp va_sM ==
            Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 8) (va_get_stack va_s0)) /\
        label va_range1
          "***** POSTCONDITION NOT MET AT line 143 column 50 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
          (va_get_reg64 rRdi va_sM ==
            Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 16) (va_get_stack va_s0)) /\
        label va_range1
          "***** POSTCONDITION NOT MET AT line 144 column 50 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
          (va_get_reg64 rRsi va_sM ==
            Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 24) (va_get_stack va_s0)) /\
        label va_range1
          "***** POSTCONDITION NOT MET AT line 145 column 50 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
          (va_get_reg64 rR12 va_sM ==
            Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 32) (va_get_stack va_s0)) /\
        label va_range1
          "***** POSTCONDITION NOT MET AT line 146 column 50 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
          (va_get_reg64 rR13 va_sM ==
            Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 40) (va_get_stack va_s0)) /\
        label va_range1
          "***** POSTCONDITION NOT MET AT line 147 column 50 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
          (va_get_reg64 rR14 va_sM ==
            Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 48) (va_get_stack va_s0)) /\
        label va_range1
          "***** POSTCONDITION NOT MET AT line 148 column 50 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
          (va_get_reg64 rR15 va_sM ==
            Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 56) (va_get_stack va_s0)) /\
        label va_range1
          "***** POSTCONDITION NOT MET AT line 150 column 34 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
          (win ==> va_get_xmm 6 va_sM == old_xmm6) /\
        label va_range1
          "***** POSTCONDITION NOT MET AT line 151 column 34 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
          (win ==> va_get_xmm 7 va_sM == old_xmm7) /\
        label va_range1
          "***** POSTCONDITION NOT MET AT line 152 column 34 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
          (win ==> va_get_xmm 8 va_sM == old_xmm8) /\
        label va_range1
          "***** POSTCONDITION NOT MET AT line 153 column 34 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
          (win ==> va_get_xmm 9 va_sM == old_xmm9) /\
        label va_range1
          "***** POSTCONDITION NOT MET AT line 154 column 35 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
          (win ==> va_get_xmm 10 va_sM == old_xmm10) /\
        label va_range1
          "***** POSTCONDITION NOT MET AT line 155 column 35 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
          (win ==> va_get_xmm 11 va_sM == old_xmm11) /\
        label va_range1
          "***** POSTCONDITION NOT MET AT line 156 column 35 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
          (win ==> va_get_xmm 12 va_sM == old_xmm12) /\
        label va_range1
          "***** POSTCONDITION NOT MET AT line 157 column 35 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
          (win ==> va_get_xmm 13 va_sM == old_xmm13) /\
        label va_range1
          "***** POSTCONDITION NOT MET AT line 158 column 35 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
          (win ==> va_get_xmm 14 va_sM == old_xmm14) /\
        label va_range1
          "***** POSTCONDITION NOT MET AT line 159 column 35 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
          (win ==> va_get_xmm 15 va_sM == old_xmm15) /\
        label va_range1
          "***** POSTCONDITION NOT MET AT line 161 column 52 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
          (va_get_reg64 rRsp va_sM ==
            va_get_reg64 rRsp va_s0 + va_if win (fun _ -> 224) (fun _ -> 64)) /\
        label va_range1
          "***** POSTCONDITION NOT MET AT line 162 column 79 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
          (va_get_stack va_sM ==
            Vale.X64.Stack_i.free_stack64 (va_get_reg64 rRsp va_s0)
              (va_get_reg64 rRsp va_s0 + va_if win (fun _ -> 224) (fun _ -> 64))
              (va_get_stack va_s0)))
in
assert_norm (va_qc.mods == va_mods);
va_lemma_norm_mods ([
      va_Mod_stack; va_Mod_reg64 rRsp; va_Mod_xmm 15; va_Mod_xmm 14; va_Mod_xmm 13; va_Mod_xmm 12;
      va_Mod_xmm 11; va_Mod_xmm 10; va_Mod_xmm 9; va_Mod_xmm 8; va_Mod_xmm 7; va_Mod_xmm 6;
      va_Mod_reg64 rR15; va_Mod_reg64 rR14; va_Mod_reg64 rR13; va_Mod_reg64 rR12; va_Mod_reg64 rRsi;
      va_Mod_reg64 rRdi; va_Mod_reg64 rRbp; va_Mod_reg64 rRbx; va_Mod_reg64 rRax; va_Mod_ok
    ])
  va_sM
  va_s0;
(va_sM, va_fM)
Vale.X64.Stack.fst.checked
Vale.X64.State.fsti.checked Vale.X64.Stack_i.fsti.checked Vale.X64.QuickCodes.fsti.checked Vale.X64.QuickCode.fst.checked Vale.X64.Memory.fsti.checked Vale.X64.Machine_s.fst.checked Vale.X64.InsVector.fsti.checked Vale.X64.InsStack.fsti.checked Vale.X64.InsMem.fsti.checked Vale.X64.InsBasic.fsti.checked Vale.X64.Decls.fsti.checked Vale.X64.CPU_Features_s.fst.checked Vale.Def.Words_s.fsti.checked Vale.Def.Words.Seq_s.fsti.checked Vale.Def.Types_s.fst.checked Vale.Arch.Types.fsti.checked prims.fst.checked FStar.Seq.fst.checked FStar.Pervasives.Native.fst.checked FStar.Pervasives.fsti.checked
Vale.X64.Stack.fst
Vale.X64.Decls.va_code Vale.X64.Decls.va_state Prims.bool Vale.X64.Decls.quad32 Vale.X64.QuickCodes.fuel Prims.unit FStar.Pervasives.Native.Mktuple2 Vale.X64.Decls.va_fuel Vale.X64.QuickCode.va_lemma_norm_mods Prims.Cons Vale.X64.QuickCode.mod_t Vale.X64.QuickCode.va_Mod_stack Vale.X64.QuickCode.va_Mod_reg64 Vale.X64.Machine_s.rRsp Vale.X64.QuickCode.va_Mod_xmm Vale.X64.Machine_s.rR15 Vale.X64.Machine_s.rR14 Vale.X64.Machine_s.rR13 Vale.X64.Machine_s.rR12 Vale.X64.Machine_s.rRsi Vale.X64.Machine_s.rRdi Vale.X64.Machine_s.rRbp Vale.X64.Machine_s.rRbx Vale.X64.Machine_s.rRax Vale.X64.QuickCode.va_Mod_ok Prims.Nil FStar.Pervasives.assert_norm Prims.eq2 Prims.list Vale.X64.QuickCode.__proj__QProc__item__mods Vale.X64.Stack.va_code_Callee_restore_registers FStar.Pervasives.Native.tuple2 FStar.Pervasives.Native.tuple3 Vale.X64.State.vale_state Vale.X64.QuickCodes.va_wp_sound_code_norm Prims.l_and Vale.X64.QuickCodes.label Vale.X64.QuickCodes.va_range1 Prims.b2t Vale.X64.Decls.va_get_ok Vale.Def.Words_s.nat64 Vale.X64.Decls.va_get_reg64 Vale.X64.Stack_i.load_stack64 Vale.X64.Decls.va_get_stack Prims.op_Addition Prims.l_imp Vale.X64.Decls.va_get_xmm Prims.int Vale.X64.Decls.va_if Prims.l_not Vale.X64.Stack_i.vale_stack Vale.X64.Stack_i.free_stack64 Vale.X64.QuickCode.quickCode Vale.X64.Stack.va_qcode_Callee_restore_registers
module Vale.X64.Stack
//open Vale.Def.Opaque_s
open FStar.Seq
open Vale.Def.Words_s
open Vale.Def.Words.Seq_s
open Vale.Def.Types_s
open Vale.Arch.Types
//open Vale.AES.GCM_helpers
open Vale.X64.Machine_s
open Vale.X64.Memory
open Vale.X64.Stack_i
open Vale.X64.State
open Vale.X64.Decls
open Vale.X64.InsBasic
open Vale.X64.InsMem
open Vale.X64.InsStack
open Vale.X64.InsVector
open Vale.X64.QuickCode
open Vale.X64.QuickCodes
open Vale.X64.CPU_Features_s
#reset-options "--z3rlimit 30"
//-- Callee_save_registers

[@ "opaque_to_smt" va_qattr]
let va_code_Callee_save_registers win =
  (va_Block (va_CCons (if win then va_Block (va_CCons (va_code_PushXmm (va_op_xmm_xmm 15)
    (va_op_reg_opr64_reg64 rRax)) (va_CCons (va_code_PushXmm (va_op_xmm_xmm 14)
    (va_op_reg_opr64_reg64 rRax)) (va_CCons (va_code_PushXmm (va_op_xmm_xmm 13)
    (va_op_reg_opr64_reg64 rRax)) (va_CCons (va_code_PushXmm (va_op_xmm_xmm 12)
    (va_op_reg_opr64_reg64 rRax)) (va_CCons (va_code_PushXmm (va_op_xmm_xmm 11)
    (va_op_reg_opr64_reg64 rRax)) (va_CCons (va_code_PushXmm (va_op_xmm_xmm 10)
    (va_op_reg_opr64_reg64 rRax)) (va_CCons (va_code_PushXmm (va_op_xmm_xmm 9)
    (va_op_reg_opr64_reg64 rRax)) (va_CCons (va_code_PushXmm (va_op_xmm_xmm 8)
    (va_op_reg_opr64_reg64 rRax)) (va_CCons (va_code_PushXmm (va_op_xmm_xmm 7)
    (va_op_reg_opr64_reg64 rRax)) (va_CCons (va_code_PushXmm (va_op_xmm_xmm 6)
    (va_op_reg_opr64_reg64 rRax)) (va_CNil ()))))))))))) else va_Block (va_CNil ())) (va_CCons
    (va_code_Push (va_op_reg_opr64_reg64 rR15)) (va_CCons (va_code_Push (va_op_reg_opr64_reg64
    rR14)) (va_CCons (va_code_Push (va_op_reg_opr64_reg64 rR13)) (va_CCons (va_code_Push
    (va_op_reg_opr64_reg64 rR12)) (va_CCons (va_code_Push (va_op_reg_opr64_reg64 rRsi)) (va_CCons
    (va_code_Push (va_op_reg_opr64_reg64 rRdi)) (va_CCons (va_code_Push (va_op_reg_opr64_reg64
    rRbp)) (va_CCons (va_code_Push (va_op_reg_opr64_reg64 rRbx)) (va_CNil ())))))))))))

[@ "opaque_to_smt" va_qattr]
let va_codegen_success_Callee_save_registers win =
  (va_pbool_and (if win then va_pbool_and (va_codegen_success_PushXmm (va_op_xmm_xmm 15)
    (va_op_reg_opr64_reg64 rRax)) (va_pbool_and (va_codegen_success_PushXmm (va_op_xmm_xmm 14)
    (va_op_reg_opr64_reg64 rRax)) (va_pbool_and (va_codegen_success_PushXmm (va_op_xmm_xmm 13)
    (va_op_reg_opr64_reg64 rRax)) (va_pbool_and (va_codegen_success_PushXmm (va_op_xmm_xmm 12)
    (va_op_reg_opr64_reg64 rRax)) (va_pbool_and (va_codegen_success_PushXmm (va_op_xmm_xmm 11)
    (va_op_reg_opr64_reg64 rRax)) (va_pbool_and (va_codegen_success_PushXmm (va_op_xmm_xmm 10)
    (va_op_reg_opr64_reg64 rRax)) (va_pbool_and (va_codegen_success_PushXmm (va_op_xmm_xmm 9)
    (va_op_reg_opr64_reg64 rRax)) (va_pbool_and (va_codegen_success_PushXmm (va_op_xmm_xmm 8)
    (va_op_reg_opr64_reg64 rRax)) (va_pbool_and (va_codegen_success_PushXmm (va_op_xmm_xmm 7)
    (va_op_reg_opr64_reg64 rRax)) (va_pbool_and (va_codegen_success_PushXmm (va_op_xmm_xmm 6)
    (va_op_reg_opr64_reg64 rRax)) (va_ttrue ())))))))))) else va_ttrue ()) (va_pbool_and
    (va_codegen_success_Push (va_op_reg_opr64_reg64 rR15)) (va_pbool_and (va_codegen_success_Push
    (va_op_reg_opr64_reg64 rR14)) (va_pbool_and (va_codegen_success_Push (va_op_reg_opr64_reg64
    rR13)) (va_pbool_and (va_codegen_success_Push (va_op_reg_opr64_reg64 rR12)) (va_pbool_and
    (va_codegen_success_Push (va_op_reg_opr64_reg64 rRsi)) (va_pbool_and (va_codegen_success_Push
    (va_op_reg_opr64_reg64 rRdi)) (va_pbool_and (va_codegen_success_Push (va_op_reg_opr64_reg64
    rRbp)) (va_pbool_and (va_codegen_success_Push (va_op_reg_opr64_reg64 rRbx)) (va_ttrue
    ()))))))))))

[@ "opaque_to_smt" va_qattr]
let va_qcode_Callee_save_registers (va_mods:va_mods_t) (win:bool) : (va_quickCode unit
  (va_code_Callee_save_registers win)) =
  (qblock va_mods (fun (va_s:va_state) -> let (va_old_s:va_state) = va_s in va_QBind va_range1
    "***** PRECONDITION NOT MET AT line 73 column 15 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_qInlineIf va_mods win (qblock va_mods (fun (va_s:va_state) -> va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 74 column 16 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_PushXmm (va_op_xmm_xmm 15) (va_op_reg_opr64_reg64 rRax)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 75 column 16 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_PushXmm (va_op_xmm_xmm 14) (va_op_reg_opr64_reg64 rRax)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 76 column 16 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_PushXmm (va_op_xmm_xmm 13) (va_op_reg_opr64_reg64 rRax)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 77 column 16 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_PushXmm (va_op_xmm_xmm 12) (va_op_reg_opr64_reg64 rRax)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 78 column 16 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_PushXmm (va_op_xmm_xmm 11) (va_op_reg_opr64_reg64 rRax)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 79 column 16 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_PushXmm (va_op_xmm_xmm 10) (va_op_reg_opr64_reg64 rRax)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 80 column 16 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_PushXmm (va_op_xmm_xmm 9) (va_op_reg_opr64_reg64 rRax)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 81 column 16 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_PushXmm (va_op_xmm_xmm 8) (va_op_reg_opr64_reg64 rRax)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 82 column 16 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_PushXmm (va_op_xmm_xmm 7) (va_op_reg_opr64_reg64 rRax)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 83 column 16 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_PushXmm (va_op_xmm_xmm 6) (va_op_reg_opr64_reg64 rRax)) (va_QEmpty (())))))))))))))
    (qblock va_mods (fun (va_s:va_state) -> va_QEmpty (())))) (fun (va_s:va_state) va_g -> va_QSeq
    va_range1
    "***** PRECONDITION NOT MET AT line 85 column 9 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_Push (va_op_reg_opr64_reg64 rR15)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 86 column 9 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_Push (va_op_reg_opr64_reg64 rR14)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 87 column 9 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_Push (va_op_reg_opr64_reg64 rR13)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 88 column 9 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_Push (va_op_reg_opr64_reg64 rR12)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 89 column 9 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_Push (va_op_reg_opr64_reg64 rRsi)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 90 column 9 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_Push (va_op_reg_opr64_reg64 rRdi)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 91 column 9 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_Push (va_op_reg_opr64_reg64 rRbp)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 92 column 9 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_Push (va_op_reg_opr64_reg64 rRbx)) (va_QEmpty (()))))))))))))

[@"opaque_to_smt"]
let va_lemma_Callee_save_registers va_b0 va_s0 win =
  let (va_mods:va_mods_t) = [va_Mod_stackTaint; va_Mod_reg64 rRax; va_Mod_reg64 rRsp; va_Mod_stack;
    va_Mod_ok] in
  let va_qc = va_qcode_Callee_save_registers va_mods win in
  let (va_sM, va_fM, va_g) = va_wp_sound_code_norm (va_code_Callee_save_registers win) va_qc va_s0
    (fun va_s0 va_sM va_g -> let () = va_g in label va_range1
    "***** POSTCONDITION NOT MET AT line 31 column 1 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_get_ok va_sM) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 41 column 152 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (forall i . Vale.X64.Stack_i.valid_src_stack64 i (va_get_stack va_s0) /\ va_get_reg64 rRsp
    va_sM + va_if win (fun _ -> 224) (fun _ -> 64) <= i ==> Vale.X64.Stack_i.load_stack64 i
    (va_get_stack va_sM) == Vale.X64.Stack_i.load_stack64 i (va_get_stack va_s0)) /\ label
    va_range1
    "***** POSTCONDITION NOT MET AT line 43 column 40 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_get_reg64 rRbx va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_sM)
    (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 44 column 44 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_get_reg64 rRbp va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_sM + 8)
    (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 45 column 45 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_get_reg64 rRdi va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_sM + 16)
    (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 46 column 45 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_get_reg64 rRsi va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_sM + 24)
    (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 47 column 45 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_get_reg64 rR12 va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_sM + 32)
    (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 48 column 45 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_get_reg64 rR13 va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_sM + 40)
    (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 49 column 45 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_get_reg64 rR14 va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_sM + 48)
    (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 50 column 45 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_get_reg64 rR15 va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_sM + 56)
    (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 52 column 60 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> Vale.Arch.Types.hi64 (va_get_xmm 6 va_sM) == Vale.X64.Stack_i.load_stack64
    (va_get_reg64 rRsp va_sM + 64) (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 53 column 60 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> Vale.Arch.Types.lo64 (va_get_xmm 6 va_sM) == Vale.X64.Stack_i.load_stack64
    (va_get_reg64 rRsp va_sM + 72) (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 54 column 60 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> Vale.Arch.Types.hi64 (va_get_xmm 7 va_sM) == Vale.X64.Stack_i.load_stack64
    (va_get_reg64 rRsp va_sM + 80) (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 55 column 60 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> Vale.Arch.Types.lo64 (va_get_xmm 7 va_sM) == Vale.X64.Stack_i.load_stack64
    (va_get_reg64 rRsp va_sM + 88) (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 56 column 60 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> Vale.Arch.Types.hi64 (va_get_xmm 8 va_sM) == Vale.X64.Stack_i.load_stack64
    (va_get_reg64 rRsp va_sM + 96) (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 57 column 61 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> Vale.Arch.Types.lo64 (va_get_xmm 8 va_sM) == Vale.X64.Stack_i.load_stack64
    (va_get_reg64 rRsp va_sM + 104) (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 58 column 61 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> Vale.Arch.Types.hi64 (va_get_xmm 9 va_sM) == Vale.X64.Stack_i.load_stack64
    (va_get_reg64 rRsp va_sM + 112) (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 59 column 61 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> Vale.Arch.Types.lo64 (va_get_xmm 9 va_sM) == Vale.X64.Stack_i.load_stack64
    (va_get_reg64 rRsp va_sM + 120) (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 60 column 62 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> Vale.Arch.Types.hi64 (va_get_xmm 10 va_sM) == Vale.X64.Stack_i.load_stack64
    (va_get_reg64 rRsp va_sM + 128) (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 61 column 62 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> Vale.Arch.Types.lo64 (va_get_xmm 10 va_sM) == Vale.X64.Stack_i.load_stack64
    (va_get_reg64 rRsp va_sM + 136) (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 62 column 62 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> Vale.Arch.Types.hi64 (va_get_xmm 11 va_sM) == Vale.X64.Stack_i.load_stack64
    (va_get_reg64 rRsp va_sM + 144) (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 63 column 62 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> Vale.Arch.Types.lo64 (va_get_xmm 11 va_sM) == Vale.X64.Stack_i.load_stack64
    (va_get_reg64 rRsp va_sM + 152) (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 64 column 62 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> Vale.Arch.Types.hi64 (va_get_xmm 12 va_sM) == Vale.X64.Stack_i.load_stack64
    (va_get_reg64 rRsp va_sM + 160) (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 65 column 62 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> Vale.Arch.Types.lo64 (va_get_xmm 12 va_sM) == Vale.X64.Stack_i.load_stack64
    (va_get_reg64 rRsp va_sM + 168) (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 66 column 62 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> Vale.Arch.Types.hi64 (va_get_xmm 13 va_sM) == Vale.X64.Stack_i.load_stack64
    (va_get_reg64 rRsp va_sM + 176) (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 67 column 62 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> Vale.Arch.Types.lo64 (va_get_xmm 13 va_sM) == Vale.X64.Stack_i.load_stack64
    (va_get_reg64 rRsp va_sM + 184) (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 68 column 62 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> Vale.Arch.Types.hi64 (va_get_xmm 14 va_sM) == Vale.X64.Stack_i.load_stack64
    (va_get_reg64 rRsp va_sM + 192) (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 69 column 62 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> Vale.Arch.Types.lo64 (va_get_xmm 14 va_sM) == Vale.X64.Stack_i.load_stack64
    (va_get_reg64 rRsp va_sM + 200) (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 70 column 62 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> Vale.Arch.Types.hi64 (va_get_xmm 15 va_sM) == Vale.X64.Stack_i.load_stack64
    (va_get_reg64 rRsp va_sM + 208) (va_get_stack va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 71 column 62 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (win ==> Vale.Arch.Types.lo64 (va_get_xmm 15 va_sM) == Vale.X64.Stack_i.load_stack64
    (va_get_reg64 rRsp va_sM + 216) (va_get_stack va_sM))) in
  assert_norm (va_qc.mods == va_mods);
  va_lemma_norm_mods ([va_Mod_stackTaint; va_Mod_reg64 rRax; va_Mod_reg64 rRsp; va_Mod_stack;
    va_Mod_ok]) va_sM va_s0;
  (va_sM, va_fM)


[@"opaque_to_smt"]
let va_wpProof_Callee_save_registers win va_s0 va_k =
  let (va_sM, va_f0) = va_lemma_Callee_save_registers (va_code_Callee_save_registers win) va_s0 win
    in
  va_lemma_upd_update va_sM;
  assert (va_state_eq va_sM (va_update_stackTaint va_sM (va_update_reg64 rRax va_sM
    (va_update_reg64 rRsp va_sM (va_update_stack va_sM (va_update_ok va_sM va_s0))))));
  va_lemma_norm_mods ([va_Mod_stackTaint; va_Mod_reg64 rRax; va_Mod_reg64 rRsp; va_Mod_stack])
    va_sM va_s0;
  let va_g = () in
  (va_sM, va_f0, va_g)

//--
//-- Callee_restore_registers

[@ "opaque_to_smt" va_qattr]
let va_code_Callee_restore_registers win =
  (va_Block (va_CCons (va_code_Pop (va_op_dst_opr64_reg64 rRbx)) (va_CCons (va_code_Pop
    (va_op_dst_opr64_reg64 rRbp)) (va_CCons (va_code_Pop (va_op_dst_opr64_reg64 rRdi)) (va_CCons
    (va_code_Pop (va_op_dst_opr64_reg64 rRsi)) (va_CCons (va_code_Pop (va_op_dst_opr64_reg64 rR12))
    (va_CCons (va_code_Pop (va_op_dst_opr64_reg64 rR13)) (va_CCons (va_code_Pop
    (va_op_dst_opr64_reg64 rR14)) (va_CCons (va_code_Pop (va_op_dst_opr64_reg64 rR15)) (va_CCons
    (if win then va_Block (va_CCons (va_code_PopXmm (va_op_xmm_xmm 6) (va_op_reg_opr64_reg64 rRax))
    (va_CCons (va_code_PopXmm (va_op_xmm_xmm 7) (va_op_reg_opr64_reg64 rRax)) (va_CCons
    (va_code_PopXmm (va_op_xmm_xmm 8) (va_op_reg_opr64_reg64 rRax)) (va_CCons (va_code_PopXmm
    (va_op_xmm_xmm 9) (va_op_reg_opr64_reg64 rRax)) (va_CCons (va_code_PopXmm (va_op_xmm_xmm 10)
    (va_op_reg_opr64_reg64 rRax)) (va_CCons (va_code_PopXmm (va_op_xmm_xmm 11)
    (va_op_reg_opr64_reg64 rRax)) (va_CCons (va_code_PopXmm (va_op_xmm_xmm 12)
    (va_op_reg_opr64_reg64 rRax)) (va_CCons (va_code_PopXmm (va_op_xmm_xmm 13)
    (va_op_reg_opr64_reg64 rRax)) (va_CCons (va_code_PopXmm (va_op_xmm_xmm 14)
    (va_op_reg_opr64_reg64 rRax)) (va_CCons (va_code_PopXmm (va_op_xmm_xmm 15)
    (va_op_reg_opr64_reg64 rRax)) (va_CNil ()))))))))))) else va_Block (va_CNil ())) (va_CNil
    ())))))))))))

[@ "opaque_to_smt" va_qattr]
let va_codegen_success_Callee_restore_registers win =
  (va_pbool_and (va_codegen_success_Pop (va_op_dst_opr64_reg64 rRbx)) (va_pbool_and
    (va_codegen_success_Pop (va_op_dst_opr64_reg64 rRbp)) (va_pbool_and (va_codegen_success_Pop
    (va_op_dst_opr64_reg64 rRdi)) (va_pbool_and (va_codegen_success_Pop (va_op_dst_opr64_reg64
    rRsi)) (va_pbool_and (va_codegen_success_Pop (va_op_dst_opr64_reg64 rR12)) (va_pbool_and
    (va_codegen_success_Pop (va_op_dst_opr64_reg64 rR13)) (va_pbool_and (va_codegen_success_Pop
    (va_op_dst_opr64_reg64 rR14)) (va_pbool_and (va_codegen_success_Pop (va_op_dst_opr64_reg64
    rR15)) (va_pbool_and (if win then va_pbool_and (va_codegen_success_PopXmm (va_op_xmm_xmm 6)
    (va_op_reg_opr64_reg64 rRax)) (va_pbool_and (va_codegen_success_PopXmm (va_op_xmm_xmm 7)
    (va_op_reg_opr64_reg64 rRax)) (va_pbool_and (va_codegen_success_PopXmm (va_op_xmm_xmm 8)
    (va_op_reg_opr64_reg64 rRax)) (va_pbool_and (va_codegen_success_PopXmm (va_op_xmm_xmm 9)
    (va_op_reg_opr64_reg64 rRax)) (va_pbool_and (va_codegen_success_PopXmm (va_op_xmm_xmm 10)
    (va_op_reg_opr64_reg64 rRax)) (va_pbool_and (va_codegen_success_PopXmm (va_op_xmm_xmm 11)
    (va_op_reg_opr64_reg64 rRax)) (va_pbool_and (va_codegen_success_PopXmm (va_op_xmm_xmm 12)
    (va_op_reg_opr64_reg64 rRax)) (va_pbool_and (va_codegen_success_PopXmm (va_op_xmm_xmm 13)
    (va_op_reg_opr64_reg64 rRax)) (va_pbool_and (va_codegen_success_PopXmm (va_op_xmm_xmm 14)
    (va_op_reg_opr64_reg64 rRax)) (va_pbool_and (va_codegen_success_PopXmm (va_op_xmm_xmm 15)
    (va_op_reg_opr64_reg64 rRax)) (va_ttrue ())))))))))) else va_ttrue ()) (va_ttrue ()))))))))))

[@ "opaque_to_smt" va_qattr]
let va_qcode_Callee_restore_registers (va_mods:va_mods_t) (win:bool) (old_xmm6:quad32)
  (old_xmm7:quad32) (old_xmm8:quad32) (old_xmm9:quad32) (old_xmm10:quad32) (old_xmm11:quad32)
  (old_xmm12:quad32) (old_xmm13:quad32) (old_xmm14:quad32) (old_xmm15:quad32) : (va_quickCode unit
  (va_code_Callee_restore_registers win)) =
  (qblock va_mods (fun (va_s:va_state) -> let (va_old_s:va_state) = va_s in va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 165 column 8 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_Pop (va_op_dst_opr64_reg64 rRbx)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 166 column 8 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_Pop (va_op_dst_opr64_reg64 rRbp)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 167 column 8 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_Pop (va_op_dst_opr64_reg64 rRdi)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 168 column 8 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_Pop (va_op_dst_opr64_reg64 rRsi)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 169 column 8 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_Pop (va_op_dst_opr64_reg64 rR12)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 170 column 8 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_Pop (va_op_dst_opr64_reg64 rR13)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 171 column 8 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_Pop (va_op_dst_opr64_reg64 rR14)) (va_QBind va_range1
    "***** PRECONDITION NOT MET AT line 172 column 8 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_Pop (va_op_dst_opr64_reg64 rR15)) (fun (va_s:va_state) _ -> va_QBind va_range1
    "***** PRECONDITION NOT MET AT line 174 column 15 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_qInlineIf va_mods win (qblock va_mods (fun (va_s:va_state) -> va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 175 column 15 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_PopXmm (va_op_xmm_xmm 6) (va_op_reg_opr64_reg64 rRax) old_xmm6) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 176 column 15 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_PopXmm (va_op_xmm_xmm 7) (va_op_reg_opr64_reg64 rRax) old_xmm7) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 177 column 15 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_PopXmm (va_op_xmm_xmm 8) (va_op_reg_opr64_reg64 rRax) old_xmm8) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 178 column 15 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_PopXmm (va_op_xmm_xmm 9) (va_op_reg_opr64_reg64 rRax) old_xmm9) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 179 column 15 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_PopXmm (va_op_xmm_xmm 10) (va_op_reg_opr64_reg64 rRax) old_xmm10) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 180 column 15 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_PopXmm (va_op_xmm_xmm 11) (va_op_reg_opr64_reg64 rRax) old_xmm11) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 181 column 15 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_PopXmm (va_op_xmm_xmm 12) (va_op_reg_opr64_reg64 rRax) old_xmm12) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 182 column 15 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_PopXmm (va_op_xmm_xmm 13) (va_op_reg_opr64_reg64 rRax) old_xmm13) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 183 column 15 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_PopXmm (va_op_xmm_xmm 14) (va_op_reg_opr64_reg64 rRax) old_xmm14) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 184 column 15 of file /home/gebner/everest/hacl-star/vale/code/lib/util/x64/Vale.X64.Stack.vaf *****"
    (va_quick_PopXmm (va_op_xmm_xmm 15) (va_op_reg_opr64_reg64 rRax) old_xmm15) (va_QEmpty
    (()))))))))))))) (qblock va_mods (fun (va_s:va_state) -> va_QEmpty (())))) (fun (va_s:va_state)
    va_g -> va_QEmpty (()))))))))))))

[@"opaque_to_smt"]
val va_lemma_Callee_restore_registers : va_b0:va_code -> va_s0:va_state -> win:bool ->
  old_xmm6:quad32 -> old_xmm7:quad32 -> old_xmm8:quad32 -> old_xmm9:quad32 -> old_xmm10:quad32 ->
  old_xmm11:quad32 -> old_xmm12:quad32 -> old_xmm13:quad32 -> old_xmm14:quad32 -> old_xmm15:quad32
  -> Ghost (va_state & va_fuel)
  (requires (va_require_total va_b0 (va_code_Callee_restore_registers win) va_s0 /\ va_get_ok va_s0
    /\ sse_enabled /\ (forall i . va_get_reg64 rRsp va_s0 <= i /\ i <= va_get_reg64 rRsp va_s0 +
    (if win then 216 else 56) ==> Vale.X64.Stack_i.valid_stack_slot64 i (va_get_stack va_s0) Public
    (va_get_stackTaint va_s0)) /\ va_get_reg64 rRsp va_s0 >= Vale.X64.Stack_i.init_rsp
    (va_get_stack va_s0) - 4096 /\ va_get_reg64 rRsp va_s0 + (if win then 224 else 64) <=
    Vale.X64.Stack_i.init_rsp (va_get_stack va_s0) /\ (win ==> Vale.Arch.Types.hi64 old_xmm6 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 64) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm6 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 72)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm7 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 80) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm7 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 88)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm8 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 96) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm8 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 104)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm9 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 112) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm9 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 120)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm10 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 128) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm10 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 136)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm11 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 144) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm11 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 152)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm12 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 160) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm12 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 168)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm13 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 176) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm13 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 184)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm14 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 192) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm14 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 200)
    (va_get_stack va_s0)) /\ (win ==> Vale.Arch.Types.hi64 old_xmm15 ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 208) (va_get_stack va_s0)) /\ (win ==>
    Vale.Arch.Types.lo64 old_xmm15 == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 216)
    (va_get_stack va_s0))))
  (ensures (fun (va_sM, va_fM) -> va_ensure_total va_b0 va_s0 va_sM va_fM /\ va_get_ok va_sM /\
    va_get_reg64 rRbx va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0)
    (va_get_stack va_s0) /\ va_get_reg64 rRbp va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64
    rRsp va_s0 + 8) (va_get_stack va_s0) /\ va_get_reg64 rRdi va_sM ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 16) (va_get_stack va_s0) /\
    va_get_reg64 rRsi va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 24)
    (va_get_stack va_s0) /\ va_get_reg64 rR12 va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64
    rRsp va_s0 + 32) (va_get_stack va_s0) /\ va_get_reg64 rR13 va_sM ==
    Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 40) (va_get_stack va_s0) /\
    va_get_reg64 rR14 va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64 rRsp va_s0 + 48)
    (va_get_stack va_s0) /\ va_get_reg64 rR15 va_sM == Vale.X64.Stack_i.load_stack64 (va_get_reg64
    rRsp va_s0 + 56) (va_get_stack va_s0) /\ (win ==> va_get_xmm 6 va_sM == old_xmm6) /\ (win ==>
    va_get_xmm 7 va_sM == old_xmm7) /\ (win ==> va_get_xmm 8 va_sM == old_xmm8) /\ (win ==>
    va_get_xmm 9 va_sM == old_xmm9) /\ (win ==> va_get_xmm 10 va_sM == old_xmm10) /\ (win ==>
    va_get_xmm 11 va_sM == old_xmm11) /\ (win ==> va_get_xmm 12 va_sM == old_xmm12) /\ (win ==>
    va_get_xmm 13 va_sM == old_xmm13) /\ (win ==> va_get_xmm 14 va_sM == old_xmm14) /\ (win ==>
    va_get_xmm 15 va_sM == old_xmm15) /\ va_get_reg64 rRsp va_sM == va_get_reg64 rRsp va_s0 + (if
    win then 224 else 64) /\ va_get_stack va_sM == Vale.X64.Stack_i.free_stack64 (va_get_reg64 rRsp
    va_s0) (va_get_reg64 rRsp va_s0 + (if win then 224 else 64)) (va_get_stack va_s0) /\
    va_state_eq va_sM (va_update_stack va_sM (va_update_reg64 rRsp va_sM (va_update_xmm 15 va_sM
    (va_update_xmm 14 va_sM (va_update_xmm 13 va_sM (va_update_xmm 12 va_sM (va_update_xmm 11 va_sM
    (va_update_xmm 10 va_sM (va_update_xmm 9 va_sM (va_update_xmm 8 va_sM (va_update_xmm 7 va_sM
    (va_update_xmm 6 va_sM (va_update_reg64 rR15 va_sM (va_update_reg64 rR14 va_sM (va_update_reg64
    rR13 va_sM (va_update_reg64 rR12 va_sM (va_update_reg64 rRsi va_sM (va_update_reg64 rRdi va_sM
    (va_update_reg64 rRbp va_sM (va_update_reg64 rRbx va_sM (va_update_reg64 rRax va_sM
    (va_update_ok va_sM va_s0))))))))))))))))))))))))

    va_b0: Vale.X64.Decls.va_code ->
    va_s0: Vale.X64.Decls.va_state ->
    win: Prims.bool ->
    old_xmm6: Vale.X64.Decls.quad32 ->
    old_xmm7: Vale.X64.Decls.quad32 ->
    old_xmm8: Vale.X64.Decls.quad32 ->
    old_xmm9: Vale.X64.Decls.quad32 ->
    old_xmm10: Vale.X64.Decls.quad32 ->
    old_xmm11: Vale.X64.Decls.quad32 ->
    old_xmm12: Vale.X64.Decls.quad32 ->
    old_xmm13: Vale.X64.Decls.quad32 ->
    old_xmm14: Vale.X64.Decls.quad32 ->
    old_xmm15: Vale.X64.Decls.quad32
  -> Prims.Ghost (Vale.X64.Decls.va_state * Vale.X64.Decls.va_fuel)