Combining SMT with theorem proving for AMS verification : analytically verifying global convergence of a digital PLL