val va_wpProof_Dealloc_stack : n:nat64 -> va_s0:va_state -> va_k:(va_state -> unit -> Type0)
  -> Ghost (va_state & va_fuel & unit)
  (requires (va_t_require va_s0 /\ va_wp_Dealloc_stack n va_s0 va_k))
  (ensures (fun (va_sM, va_f0, va_g) -> va_t_ensure (va_code_Dealloc_stack n) ([va_Mod_stack;
    va_Mod_reg 1]) va_s0 va_k ((va_sM, va_f0, va_g))))
let va_wpProof_Dealloc_stack n va_s0 va_k =
  let (va_sM, va_f0) = va_lemma_Dealloc_stack (va_code_Dealloc_stack n) va_s0 n in
  va_lemma_upd_update va_sM;
  assert (va_state_eq va_sM (va_update_stack va_sM (va_update_reg 1 va_sM (va_update_ok va_sM
    va_s0))));
  va_lemma_norm_mods ([va_Mod_stack; va_Mod_reg 1]) va_sM va_s0;
  let va_g = () in
  (va_sM, va_f0, va_g)
val va_wpProof_Dealloc_stack : n:nat64 -> va_s0:va_state -> va_k:(va_state -> unit -> Type0)
  -> Ghost (va_state & va_fuel & unit)
  (requires (va_t_require va_s0 /\ va_wp_Dealloc_stack n va_s0 va_k))
  (ensures (fun (va_sM, va_f0, va_g) -> va_t_ensure (va_code_Dealloc_stack n) ([va_Mod_stack;
    va_Mod_reg 1]) va_s0 va_k ((va_sM, va_f0, va_g))))
let va_wpProof_Dealloc_stack n va_s0 va_k =
let va_sM, va_f0 = va_lemma_Dealloc_stack (va_code_Dealloc_stack n) va_s0 n in
va_lemma_upd_update va_sM;
assert (va_state_eq va_sM (va_update_stack va_sM (va_update_reg 1 va_sM (va_update_ok va_sM va_s0)))
  );
va_lemma_norm_mods ([va_Mod_stack; va_Mod_reg 1]) va_sM va_s0;
let va_g = () in
(va_sM, va_f0, va_g)
Vale.PPC64LE.InsStack.fst.checked
Vale.PPC64LE.StateLemmas.fsti.checked Vale.PPC64LE.State.fsti.checked Vale.PPC64LE.Stack_Sems.fst.checked Vale.PPC64LE.Stack_Sems.fst.checked Vale.PPC64LE.Stack_i.fst.checked Vale.PPC64LE.Stack_i.fst.checked Vale.PPC64LE.Semantics_s.fst.checked Vale.PPC64LE.Print_s.fst.checked Vale.PPC64LE.Memory.fsti.checked Vale.PPC64LE.Machine_s.fst.checked Vale.PPC64LE.InsVector.fsti.checked Vale.PPC64LE.InsBasic.fsti.checked Vale.PPC64LE.Decls.fst.checked Vale.PPC64LE.Decls.fst.checked prims.fst.checked FStar.Pervasives.Native.fst.checked FStar.Pervasives.fsti.checked
Vale.PPC64LE.InsStack.fst
Vale.PPC64LE.Memory.nat64 Vale.PPC64LE.Decls.va_state Prims.unit Vale.PPC64LE.Decls.va_fuel FStar.Pervasives.Native.Mktuple3 Vale.PPC64LE.QuickCode.va_lemma_norm_mods Prims.Cons Vale.PPC64LE.QuickCode.mod_t Vale.PPC64LE.QuickCode.va_Mod_stack Vale.PPC64LE.QuickCode.va_Mod_reg Prims.Nil Prims._assert Vale.PPC64LE.Decls.va_state_eq Vale.PPC64LE.Decls.va_update_stack Vale.PPC64LE.Decls.va_update_reg Vale.PPC64LE.Decls.va_update_ok Vale.PPC64LE.Decls.va_lemma_upd_update FStar.Pervasives.Native.tuple3 FStar.Pervasives.Native.tuple2 Vale.PPC64LE.Machine_s.state Vale.PPC64LE.InsStack.va_lemma_Dealloc_stack Vale.PPC64LE.InsStack.va_code_Dealloc_stack
module Vale.PPC64LE.InsStack
open Vale.PPC64LE.Machine_s
open Vale.PPC64LE.Memory
open Vale.PPC64LE.Stack_i
open Vale.PPC64LE.State
open Vale.PPC64LE.StateLemmas
open Vale.PPC64LE.Decls
open Vale.PPC64LE.InsBasic
open Vale.PPC64LE.InsVector
open Vale.PPC64LE.Stack_Sems
module S = Vale.PPC64LE.Semantics_s
module P = Vale.PPC64LE.Print_s

friend Vale.PPC64LE.Decls
friend Vale.PPC64LE.Stack_i
friend Vale.PPC64LE.Stack_Sems
#reset-options "--initial_fuel 2 --max_fuel 4 --max_ifuel 2 --z3rlimit 200"
//-- Alloc_stack

[@ "opaque_to_smt"]
let va_code_Alloc_stack n =
  (Ins (S.Alloc n))

[@ "opaque_to_smt"]
let va_codegen_success_Alloc_stack n =
  (va_ttrue ())

[@"opaque_to_smt"]
let va_lemma_Alloc_stack va_b0 va_s0 n =
  va_reveal_opaque (`%va_code_Alloc_stack) (va_code_Alloc_stack n);
  let (va_old_s:va_state) = va_s0 in
  va_ins_lemma (Ins (S.Alloc n)) va_s0;
  let (va_sM, va_fM) = va_eval_ins (Ins (S.Alloc n)) va_s0 in
  (va_sM, va_fM)


[@"opaque_to_smt"]
let va_wpProof_Alloc_stack n va_s0 va_k =
  let (va_sM, va_f0) = va_lemma_Alloc_stack (va_code_Alloc_stack n) va_s0 n in
  va_lemma_upd_update va_sM;
  assert (va_state_eq va_sM (va_update_reg 1 va_sM (va_update_ok va_sM va_s0)));
  va_lemma_norm_mods ([va_Mod_reg 1]) va_sM va_s0;
  let va_g = () in
  (va_sM, va_f0, va_g)

//--
//-- Dealloc_stack

[@ "opaque_to_smt"]
let va_code_Dealloc_stack n =
  (Ins (S.Dealloc n))

[@ "opaque_to_smt"]
let va_codegen_success_Dealloc_stack n =
  (va_ttrue ())

[@"opaque_to_smt"]
let va_lemma_Dealloc_stack va_b0 va_s0 n =
  va_reveal_opaque (`%va_code_Dealloc_stack) (va_code_Dealloc_stack n);
  let (va_old_s:va_state) = va_s0 in
  va_ins_lemma (Ins (S.Dealloc n)) va_s0;
  let (va_sM, va_fM) = va_eval_ins (Ins (S.Dealloc n)) va_s0 in
  (va_sM, va_fM)
val va_wpProof_Dealloc_stack : n:nat64 -> va_s0:va_state -> va_k:(va_state -> unit -> Type0)
  -> Ghost (va_state & va_fuel & unit)
  (requires (va_t_require va_s0 /\ va_wp_Dealloc_stack n va_s0 va_k))
  (ensures (fun (va_sM, va_f0, va_g) -> va_t_ensure (va_code_Dealloc_stack n) ([va_Mod_stack;
    va_Mod_reg 1]) va_s0 va_k ((va_sM, va_f0, va_g))))

    n: Vale.PPC64LE.Memory.nat64 ->
    va_s0: Vale.PPC64LE.Decls.va_state ->
    va_k: (_: Vale.PPC64LE.Decls.va_state -> _: Prims.unit -> Type0)
  -> Prims.Ghost ((Vale.PPC64LE.Decls.va_state * Vale.PPC64LE.Decls.va_fuel) * Prims.unit)