Right shift of a value of type
Function:
(defun shr-ullong-ullong (x y) (declare (xargs :guard (and (ullongp x) (ullongp y) (shr-ullong-ullong-okp x y)))) (shr-ullong x (integer-from-ullong y)))
Theorem:
(defthm ullongp-of-shr-ullong-ullong (ullongp (shr-ullong-ullong x y)))
Theorem:
(defthm shr-ullong-ullong-of-ullong-fix-x (equal (shr-ullong-ullong (ullong-fix x) y) (shr-ullong-ullong x y)))
Theorem:
(defthm shr-ullong-ullong-ullong-equiv-congruence-on-x (implies (ullong-equiv x x-equiv) (equal (shr-ullong-ullong x y) (shr-ullong-ullong x-equiv y))) :rule-classes :congruence)
Theorem:
(defthm shr-ullong-ullong-of-ullong-fix-y (equal (shr-ullong-ullong x (ullong-fix y)) (shr-ullong-ullong x y)))
Theorem:
(defthm shr-ullong-ullong-ullong-equiv-congruence-on-y (implies (ullong-equiv y y-equiv) (equal (shr-ullong-ullong x y) (shr-ullong-ullong x y-equiv))) :rule-classes :congruence)