fix proof in prog_x64Script.sml