; LLVM IR from cryspen/libcrux :: sys/hacl/c/src/msvc (Hacl_Frodo1344)

; Unoptimized IR (clang -disable-llvm-passes):
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

@.str = external hidden unnamed_addr constant [70 x i8], align 1
@.str.1 = external hidden unnamed_addr constant [86 x i8], align 1

; Function Attrs: nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.start.p0(i64 immarg, ptr nocapture) #0

; Function Attrs: nocallback nofree nounwind willreturn memory(argmem: write)
declare void @llvm.memset.p0.i64(ptr nocapture writeonly, i8, i64, i1 immarg) #1

declare void @Hacl_Hash_SHA3_shake256_hacl(i32 noundef, ptr noundef, i32 noundef, ptr noundef) #2

; Function Attrs: nocallback nofree nounwind willreturn memory(argmem: readwrite)
declare void @llvm.memcpy.p0.p0.i64(ptr noalias nocapture writeonly, ptr noalias nocapture readonly, i64, i1 immarg) #3

declare void @Lib_Memzero0_memzero0(ptr noundef, i64 noundef) #2

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @Hacl_Impl_Frodo_Sample_frodo_sample_matrix1344(i32 noundef, i32 noundef, ptr noundef, ptr noundef) #4

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @Hacl_Impl_Frodo_Params_frodo_gen_matrix(i8 noundef zeroext, i32 noundef, ptr noundef, ptr noundef) #4

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @Hacl_Impl_Matrix_matrix_mul_s(i32 noundef, i32 noundef, i32 noundef, ptr noundef, ptr noundef, ptr noundef) #4

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @Hacl_Impl_Matrix_matrix_add(i32 noundef, i32 noundef, ptr noundef, ptr noundef) #4

; Function Attrs: nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.end.p0(i64 immarg, ptr nocapture) #0

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @Hacl_Impl_Matrix_matrix_mul(i32 noundef, i32 noundef, i32 noundef, ptr noundef, ptr noundef, ptr noundef) #4

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @Hacl_Impl_Frodo_Pack_frodo_unpack(i32 noundef, i32 noundef, i32 noundef, ptr noundef, ptr noundef) #4

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @Hacl_Impl_Frodo_Encode_frodo_key_encode(i32 noundef, i32 noundef, i32 noundef, ptr noundef, ptr noundef) #4

declare i32 @printf(ptr noundef, ...) #2

; Function Attrs: noreturn nounwind
declare void @exit(i32 noundef) #5

; Function Attrs: nounwind uwtable
define dso_local i32 @Hacl_Frodo1344_crypto_kem_dec(ptr noundef %0, ptr noundef %1, ptr noundef %2) #6 {
  %4 = alloca ptr, align 8
  %5 = alloca ptr, align 8
  %6 = alloca ptr, align 8
  %7 = alloca [10752 x i16], align 16
  %8 = alloca [64 x i16], align 16
  %9 = alloca ptr, align 8
  %10 = alloca ptr, align 8
  %11 = alloca [32 x i8], align 16
  %12 = alloca ptr, align 8
  %13 = alloca [10752 x i16], align 16
  %14 = alloca [64 x i16], align 16
  %15 = alloca [64 x i8], align 16
  %16 = alloca i32, align 4
  %17 = alloca ptr, align 8
  %18 = alloca ptr, align 8
  %19 = alloca ptr, align 8
  %20 = alloca ptr, align 8
  %21 = alloca ptr, align 8
  %22 = alloca [10752 x i16], align 16
  %23 = alloca [64 x i16], align 16
  %24 = alloca [10752 x i16], align 16
  %25 = alloca [10752 x i16], align 16
  %26 = alloca [64 x i16], align 16
  %27 = alloca [43136 x i8], align 16
  %28 = alloca [33 x i8], align 16
  %29 = alloca ptr, align 8
  %30 = alloca ptr, align 8
  %31 = alloca ptr, align 8
  %32 = alloca [1806336 x i16], align 16
  %33 = alloca [10752 x i16], align 16
  %34 = alloca [64 x i16], align 16
  %35 = alloca i16, align 2
  %36 = alloca i16, align 2
  %37 = alloca i16, align 2
  %38 = alloca i16, align 2
  %39 = alloca [32 x i8], align 16
  %40 = alloca i32, align 4
  %41 = alloca ptr, align 8
  %42 = alloca i8, align 1
  %43 = alloca i8, align 1
  %44 = alloca i32, align 4
  %45 = alloca ptr, align 8
  store ptr %0, ptr %4, align 8, !tbaa !5
  store ptr %1, ptr %5, align 8, !tbaa !5
  store ptr %2, ptr %6, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 21504, ptr %7) #7
  call void @llvm.memset.p0.i64(ptr align 16 %7, i8 0, i64 21504, i1 false)
  call void @llvm.lifetime.start.p0(i64 128, ptr %8) #7
  call void @llvm.memset.p0.i64(ptr align 16 %8, i8 0, i64 128, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %9) #7
  %46 = load ptr, ptr %5, align 8, !tbaa !5
  store ptr %46, ptr %9, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 8, ptr %10) #7
  %47 = load ptr, ptr %5, align 8, !tbaa !5
  %48 = getelementptr inbounds i8, ptr %47, i64 21504
  store ptr %48, ptr %10, align 8, !tbaa !5
  %49 = load ptr, ptr %9, align 8, !tbaa !5
  %50 = getelementptr inbounds [10752 x i16], ptr %7, i64 0, i64 0
  call void @Hacl_Impl_Frodo_Pack_frodo_unpack(i32 noundef 8, i32 noundef 1344, i32 noundef 16, ptr noundef %49, ptr noundef %50)
  %51 = load ptr, ptr %10, align 8, !tbaa !5
  %52 = getelementptr inbounds [64 x i16], ptr %8, i64 0, i64 0
  call void @Hacl_Impl_Frodo_Pack_frodo_unpack(i32 noundef 8, i32 noundef 8, i32 noundef 16, ptr noundef %51, ptr noundef %52)
  call void @llvm.lifetime.start.p0(i64 32, ptr %11) #7
  call void @llvm.memset.p0.i64(ptr align 16 %11, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %12) #7
  %53 = load ptr, ptr %6, align 8, !tbaa !5
  %54 = getelementptr inbounds i8, ptr %53, i64 21552
  store ptr %54, ptr %12, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 21504, ptr %13) #7
  call void @llvm.memset.p0.i64(ptr align 16 %13, i8 0, i64 21504, i1 false)
  call void @llvm.lifetime.start.p0(i64 128, ptr %14) #7
  call void @llvm.memset.p0.i64(ptr align 16 %14, i8 0, i64 128, i1 false)
  %55 = load ptr, ptr %12, align 8, !tbaa !5
  %56 = getelementptr inbounds [10752 x i16], ptr %13, i64 0, i64 0
  call void @Hacl_Impl_Matrix_matrix_from_lbytes(i32 noundef 1344, i32 noundef 8, ptr noundef %55, ptr noundef %56)
  %57 = getelementptr inbounds [10752 x i16], ptr %7, i64 0, i64 0
  %58 = getelementptr inbounds [10752 x i16], ptr %13, i64 0, i64 0
  %59 = getelementptr inbounds [64 x i16], ptr %14, i64 0, i64 0
  call void @Hacl_Impl_Matrix_matrix_mul_s(i32 noundef 8, i32 noundef 1344, i32 noundef 8, ptr noundef %57, ptr noundef %58, ptr noundef %59)
  %60 = getelementptr inbounds [64 x i16], ptr %8, i64 0, i64 0
  %61 = getelementptr inbounds [64 x i16], ptr %14, i64 0, i64 0
  call void @Hacl_Impl_Matrix_matrix_sub(i32 noundef 8, i32 noundef 8, ptr noundef %60, ptr noundef %61)
  %62 = getelementptr inbounds [64 x i16], ptr %14, i64 0, i64 0
  %63 = getelementptr inbounds [32 x i8], ptr %11, i64 0, i64 0
  call void @Hacl_Impl_Frodo_Encode_frodo_key_decode(i32 noundef 16, i32 noundef 4, i32 noundef 8, ptr noundef %62, ptr noundef %63)
  %64 = getelementptr inbounds [10752 x i16], ptr %13, i64 0, i64 0
  call void @Lib_Memzero0_memzero0(ptr noundef %64, i64 noundef 21504)
  %65 = getelementptr inbounds [64 x i16], ptr %14, i64 0, i64 0
  call void @Lib_Memzero0_memzero0(ptr noundef %65, i64 noundef 128)
  call void @llvm.lifetime.start.p0(i64 64, ptr %15) #7
  call void @llvm.memset.p0.i64(ptr align 16 %15, i8 0, i64 64, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %16) #7
  store i32 64, ptr %16, align 4, !tbaa !9
  br label %66

66:                                               ; preds = %3
  %67 = load i32, ptr %16, align 4, !tbaa !9
  %68 = zext i32 %67 to i64
  %69 = icmp ugt i64 %68, -1
  br i1 %69, label %70, label %72

70:                                               ; preds = %66
  %71 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 161)
  call void @exit(i32 noundef 253) #8
  unreachable

72:                                               ; preds = %66
  br label %73

73:                                               ; preds = %72
  br label %74

74:                                               ; preds = %73
  call void @llvm.lifetime.start.p0(i64 8, ptr %17) #7
  %75 = load i32, ptr %16, align 4, !tbaa !9
  %76 = zext i32 %75 to i64
  %77 = mul i64 %76, 1
  %78 = alloca i8, i64 %77, align 16
  store ptr %78, ptr %17, align 8, !tbaa !5
  %79 = load ptr, ptr %17, align 8, !tbaa !5
  %80 = load i32, ptr %16, align 4, !tbaa !9
  %81 = zext i32 %80 to i64
  %82 = mul i64 %81, 1
  call void @llvm.memset.p0.i64(ptr align 1 %79, i8 0, i64 %82, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %18) #7
  %83 = load ptr, ptr %6, align 8, !tbaa !5
  %84 = getelementptr inbounds i8, ptr %83, i64 43056
  store ptr %84, ptr %18, align 8, !tbaa !5
  %85 = load ptr, ptr %17, align 8, !tbaa !5
  %86 = load ptr, ptr %18, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %85, ptr align 1 %86, i64 32, i1 false)
  %87 = load ptr, ptr %17, align 8, !tbaa !5
  %88 = getelementptr inbounds i8, ptr %87, i64 32
  %89 = getelementptr inbounds [32 x i8], ptr %11, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %88, ptr align 16 %89, i64 32, i1 false)
  %90 = load i32, ptr %16, align 4, !tbaa !9
  %91 = load ptr, ptr %17, align 8, !tbaa !5
  %92 = getelementptr inbounds [64 x i8], ptr %15, i64 0, i64 0
  call void @Hacl_Hash_SHA3_shake256_hacl(i32 noundef %90, ptr noundef %91, i32 noundef 64, ptr noundef %92)
  call void @llvm.lifetime.start.p0(i64 8, ptr %19) #7
  %93 = getelementptr inbounds [64 x i8], ptr %15, i64 0, i64 0
  store ptr %93, ptr %19, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 8, ptr %20) #7
  %94 = getelementptr inbounds [64 x i8], ptr %15, i64 0, i64 0
  %95 = getelementptr inbounds i8, ptr %94, i64 32
  store ptr %95, ptr %20, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 8, ptr %21) #7
  %96 = load ptr, ptr %6, align 8, !tbaa !5
  store ptr %96, ptr %21, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 21504, ptr %22) #7
  call void @llvm.memset.p0.i64(ptr align 16 %22, i8 0, i64 21504, i1 false)
  call void @llvm.lifetime.start.p0(i64 128, ptr %23) #7
  call void @llvm.memset.p0.i64(ptr align 16 %23, i8 0, i64 128, i1 false)
  call void @llvm.lifetime.start.p0(i64 21504, ptr %24) #7
  call void @llvm.memset.p0.i64(ptr align 16 %24, i8 0, i64 21504, i1 false)
  call void @llvm.lifetime.start.p0(i64 21504, ptr %25) #7
  call void @llvm.memset.p0.i64(ptr align 16 %25, i8 0, i64 21504, i1 false)
  call void @llvm.lifetime.start.p0(i64 128, ptr %26) #7
  call void @llvm.memset.p0.i64(ptr align 16 %26, i8 0, i64 128, i1 false)
  call void @llvm.lifetime.start.p0(i64 43136, ptr %27) #7
  call void @llvm.memset.p0.i64(ptr align 16 %27, i8 0, i64 43136, i1 false)
  call void @llvm.lifetime.start.p0(i64 33, ptr %28) #7
  call void @llvm.memset.p0.i64(ptr align 16 %28, i8 0, i64 33, i1 false)
  %97 = getelementptr inbounds [33 x i8], ptr %28, i64 0, i64 0
  store i8 -106, ptr %97, align 16, !tbaa !11
  %98 = getelementptr inbounds [33 x i8], ptr %28, i64 0, i64 0
  %99 = getelementptr inbounds i8, ptr %98, i64 1
  %100 = load ptr, ptr %19, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %99, ptr align 1 %100, i64 32, i1 false)
  %101 = getelementptr inbounds [33 x i8], ptr %28, i64 0, i64 0
  %102 = getelementptr inbounds [43136 x i8], ptr %27, i64 0, i64 0
  call void @Hacl_Hash_SHA3_shake256_hacl(i32 noundef 33, ptr noundef %101, i32 noundef 43136, ptr noundef %102)
  %103 = getelementptr inbounds [33 x i8], ptr %28, i64 0, i64 0
  call void @Lib_Memzero0_memzero0(ptr noundef %103, i64 noundef 33)
  %104 = getelementptr inbounds [43136 x i8], ptr %27, i64 0, i64 0
  %105 = getelementptr inbounds [10752 x i16], ptr %24, i64 0, i64 0
  call void @Hacl_Impl_Frodo_Sample_frodo_sample_matrix1344(i32 noundef 8, i32 noundef 1344, ptr noundef %104, ptr noundef %105)
  %106 = getelementptr inbounds [43136 x i8], ptr %27, i64 0, i64 0
  %107 = getelementptr inbounds i8, ptr %106, i64 21504
  %108 = getelementptr inbounds [10752 x i16], ptr %25, i64 0, i64 0
  call void @Hacl_Impl_Frodo_Sample_frodo_sample_matrix1344(i32 noundef 8, i32 noundef 1344, ptr noundef %107, ptr noundef %108)
  %109 = getelementptr inbounds [43136 x i8], ptr %27, i64 0, i64 0
  %110 = getelementptr inbounds i8, ptr %109, i64 43008
  %111 = getelementptr inbounds [64 x i16], ptr %26, i64 0, i64 0
  call void @Hacl_Impl_Frodo_Sample_frodo_sample_matrix1344(i32 noundef 8, i32 noundef 8, ptr noundef %110, ptr noundef %111)
  call void @llvm.lifetime.start.p0(i64 8, ptr %29) #7
  %112 = load ptr, ptr %6, align 8, !tbaa !5
  %113 = getelementptr inbounds i8, ptr %112, i64 32
  store ptr %113, ptr %29, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 8, ptr %30) #7
  %114 = load ptr, ptr %29, align 8, !tbaa !5
  store ptr %114, ptr %30, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 8, ptr %31) #7
  %115 = load ptr, ptr %29, align 8, !tbaa !5
  %116 = getelementptr inbounds i8, ptr %115, i64 16
  store ptr %116, ptr %31, align 8, !tbaa !5
  br label %117

117:                                              ; preds = %74
  br label %118

118:                                              ; preds = %117
  br label %119

119:                                              ; preds = %118
  call void @llvm.lifetime.start.p0(i64 3612672, ptr %32) #7
  call void @llvm.memset.p0.i64(ptr align 16 %32, i8 0, i64 3612672, i1 false)
  %120 = load ptr, ptr %30, align 8, !tbaa !5
  %121 = getelementptr inbounds [1806336 x i16], ptr %32, i64 0, i64 0
  call void @Hacl_Impl_Frodo_Params_frodo_gen_matrix(i8 noundef zeroext 0, i32 noundef 1344, ptr noundef %120, ptr noundef %121)
  %122 = getelementptr inbounds [10752 x i16], ptr %24, i64 0, i64 0
  %123 = getelementptr inbounds [1806336 x i16], ptr %32, i64 0, i64 0
  %124 = getelementptr inbounds [10752 x i16], ptr %22, i64 0, i64 0
  call void @Hacl_Impl_Matrix_matrix_mul(i32 noundef 8, i32 noundef 1344, i32 noundef 1344, ptr noundef %122, ptr noundef %123, ptr noundef %124)
  %125 = getelementptr inbounds [10752 x i16], ptr %22, i64 0, i64 0
  %126 = getelementptr inbounds [10752 x i16], ptr %25, i64 0, i64 0
  call void @Hacl_Impl_Matrix_matrix_add(i32 noundef 8, i32 noundef 1344, ptr noundef %125, ptr noundef %126)
  call void @llvm.lifetime.start.p0(i64 21504, ptr %33) #7
  call void @llvm.memset.p0.i64(ptr align 16 %33, i8 0, i64 21504, i1 false)
  %127 = load ptr, ptr %31, align 8, !tbaa !5
  %128 = getelementptr inbounds [10752 x i16], ptr %33, i64 0, i64 0
  call void @Hacl_Impl_Frodo_Pack_frodo_unpack(i32 noundef 1344, i32 noundef 8, i32 noundef 16, ptr noundef %127, ptr noundef %128)
  %129 = getelementptr inbounds [10752 x i16], ptr %24, i64 0, i64 0
  %130 = getelementptr inbounds [10752 x i16], ptr %33, i64 0, i64 0
  %131 = getelementptr inbounds [64 x i16], ptr %23, i64 0, i64 0
  call void @Hacl_Impl_Matrix_matrix_mul(i32 noundef 8, i32 noundef 1344, i32 noundef 8, ptr noundef %129, ptr noundef %130, ptr noundef %131)
  %132 = getelementptr inbounds [64 x i16], ptr %23, i64 0, i64 0
  %133 = getelementptr inbounds [64 x i16], ptr %26, i64 0, i64 0
  call void @Hacl_Impl_Matrix_matrix_add(i32 noundef 8, i32 noundef 8, ptr noundef %132, ptr noundef %133)
  call void @llvm.lifetime.start.p0(i64 128, ptr %34) #7
  call void @llvm.memset.p0.i64(ptr align 16 %34, i8 0, i64 128, i1 false)
  %134 = getelementptr inbounds [32 x i8], ptr %11, i64 0, i64 0
  %135 = getelementptr inbounds [64 x i16], ptr %34, i64 0, i64 0
  call void @Hacl_Impl_Frodo_Encode_frodo_key_encode(i32 noundef 16, i32 noundef 4, i32 noundef 8, ptr noundef %134, ptr noundef %135)
  %136 = getelementptr inbounds [64 x i16], ptr %23, i64 0, i64 0
  %137 = getelementptr inbounds [64 x i16], ptr %34, i64 0, i64 0
  call void @Hacl_Impl_Matrix_matrix_add(i32 noundef 8, i32 noundef 8, ptr noundef %136, ptr noundef %137)
  %138 = getelementptr inbounds [64 x i16], ptr %34, i64 0, i64 0
  call void @Lib_Memzero0_memzero0(ptr noundef %138, i64 noundef 128)
  %139 = getelementptr inbounds [10752 x i16], ptr %22, i64 0, i64 0
  call void @Hacl_Impl_Matrix_mod_pow2(i32 noundef 8, i32 noundef 1344, i32 noundef 16, ptr noundef %139)
  %140 = getelementptr inbounds [64 x i16], ptr %23, i64 0, i64 0
  call void @Hacl_Impl_Matrix_mod_pow2(i32 noundef 8, i32 noundef 8, i32 noundef 16, ptr noundef %140)
  %141 = getelementptr inbounds [10752 x i16], ptr %24, i64 0, i64 0
  call void @Lib_Memzero0_memzero0(ptr noundef %141, i64 noundef 21504)
  %142 = getelementptr inbounds [10752 x i16], ptr %25, i64 0, i64 0
  call void @Lib_Memzero0_memzero0(ptr noundef %142, i64 noundef 21504)
  %143 = getelementptr inbounds [64 x i16], ptr %26, i64 0, i64 0
  call void @Lib_Memzero0_memzero0(ptr noundef %143, i64 noundef 128)
  call void @llvm.lifetime.start.p0(i64 2, ptr %35) #7
  %144 = getelementptr inbounds [10752 x i16], ptr %7, i64 0, i64 0
  %145 = getelementptr inbounds [10752 x i16], ptr %22, i64 0, i64 0
  %146 = call zeroext i16 @Hacl_Impl_Matrix_matrix_eq(i32 noundef 8, i32 noundef 1344, ptr noundef %144, ptr noundef %145)
  store i16 %146, ptr %35, align 2, !tbaa !12
  call void @llvm.lifetime.start.p0(i64 2, ptr %36) #7
  %147 = getelementptr inbounds [64 x i16], ptr %8, i64 0, i64 0
  %148 = getelementptr inbounds [64 x i16], ptr %23, i64 0, i64 0
  %149 = call zeroext i16 @Hacl_Impl_Matrix_matrix_eq(i32 noundef 8, i32 noundef 8, ptr noundef %147, ptr noundef %148)
  store i16 %149, ptr %36, align 2, !tbaa !12
  call void @llvm.lifetime.start.p0(i64 2, ptr %37) #7
  %150 = load i16, ptr %35, align 2, !tbaa !12
  %151 = zext i16 %150 to i32
  %152 = load i16, ptr %36, align 2, !tbaa !12
  %153 = zext i16 %152 to i32
  %154 = and i32 %151, %153
  %155 = trunc i32 %154 to i16
  store i16 %155, ptr %37, align 2, !tbaa !12
  call void @llvm.lifetime.start.p0(i64 2, ptr %38) #7
  %156 = load i16, ptr %37, align 2, !tbaa !12
  store i16 %156, ptr %38, align 2, !tbaa !12
  call void @llvm.lifetime.start.p0(i64 32, ptr %39) #7
  call void @llvm.memset.p0.i64(ptr align 16 %39, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %40) #7
  store i32 0, ptr %40, align 4, !tbaa !9
  br label %157

157:                                              ; preds = %190, %119
  %158 = load i32, ptr %40, align 4, !tbaa !9
  %159 = icmp ult i32 %158, 32
  br i1 %159, label %161, label %160

160:                                              ; preds = %157
  call void @llvm.lifetime.end.p0(i64 4, ptr %40) #7
  br label %193

161:                                              ; preds = %157
  call void @llvm.lifetime.start.p0(i64 8, ptr %41) #7
  %162 = getelementptr inbounds [32 x i8], ptr %39, i64 0, i64 0
  store ptr %162, ptr %41, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 1, ptr %42) #7
  %163 = load ptr, ptr %21, align 8, !tbaa !5
  %164 = load i32, ptr %40, align 4, !tbaa !9
  %165 = zext i32 %164 to i64
  %166 = getelementptr inbounds i8, ptr %163, i64 %165
  %167 = load i8, ptr %166, align 1, !tbaa !11
  store i8 %167, ptr %42, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 1, ptr %43) #7
  %168 = load i8, ptr %42, align 1, !tbaa !11
  %169 = zext i8 %168 to i32
  %170 = load i16, ptr %38, align 2, !tbaa !12
  %171 = trunc i16 %170 to i8
  %172 = zext i8 %171 to i32
  %173 = load ptr, ptr %20, align 8, !tbaa !5
  %174 = load i32, ptr %40, align 4, !tbaa !9
  %175 = zext i32 %174 to i64
  %176 = getelementptr inbounds i8, ptr %173, i64 %175
  %177 = load i8, ptr %176, align 1, !tbaa !11
  %178 = zext i8 %177 to i32
  %179 = load i8, ptr %42, align 1, !tbaa !11
  %180 = zext i8 %179 to i32
  %181 = xor i32 %178, %180
  %182 = and i32 %172, %181
  %183 = xor i32 %169, %182
  %184 = trunc i32 %183 to i8
  store i8 %184, ptr %43, align 1, !tbaa !11
  %185 = load i8, ptr %43, align 1, !tbaa !11
  %186 = load ptr, ptr %41, align 8, !tbaa !5
  %187 = load i32, ptr %40, align 4, !tbaa !9
  %188 = zext i32 %187 to i64
  %189 = getelementptr inbounds i8, ptr %186, i64 %188
  store i8 %185, ptr %189, align 1, !tbaa !11
  call void @llvm.lifetime.end.p0(i64 1, ptr %43) #7
  call void @llvm.lifetime.end.p0(i64 1, ptr %42) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %41) #7
  br label %190

190:                                              ; preds = %161
  %191 = load i32, ptr %40, align 4, !tbaa !9
  %192 = add i32 %191, 1
  store i32 %192, ptr %40, align 4, !tbaa !9
  br label %157, !llvm.loop !14

193:                                              ; preds = %160
  call void @llvm.lifetime.start.p0(i64 4, ptr %44) #7
  store i32 21664, ptr %44, align 4, !tbaa !9
  br label %194

194:                                              ; preds = %193
  %195 = load i32, ptr %44, align 4, !tbaa !9
  %196 = zext i32 %195 to i64
  %197 = icmp ugt i64 %196, -1
  br i1 %197, label %198, label %200

198:                                              ; preds = %194
  %199 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 220)
  call void @exit(i32 noundef 253) #8
  unreachable

200:                                              ; preds = %194
  br label %201

201:                                              ; preds = %200
  br label %202

202:                                              ; preds = %201
  call void @llvm.lifetime.start.p0(i64 8, ptr %45) #7
  %203 = load i32, ptr %44, align 4, !tbaa !9
  %204 = zext i32 %203 to i64
  %205 = mul i64 %204, 1
  %206 = alloca i8, i64 %205, align 16
  store ptr %206, ptr %45, align 8, !tbaa !5
  %207 = load ptr, ptr %45, align 8, !tbaa !5
  %208 = load i32, ptr %44, align 4, !tbaa !9
  %209 = zext i32 %208 to i64
  %210 = mul i64 %209, 1
  call void @llvm.memset.p0.i64(ptr align 1 %207, i8 0, i64 %210, i1 false)
  %211 = load ptr, ptr %45, align 8, !tbaa !5
  %212 = load ptr, ptr %5, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %211, ptr align 1 %212, i64 21632, i1 false)
  %213 = load ptr, ptr %45, align 8, !tbaa !5
  %214 = getelementptr inbounds i8, ptr %213, i64 21632
  %215 = getelementptr inbounds [32 x i8], ptr %39, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %214, ptr align 16 %215, i64 32, i1 false)
  %216 = load i32, ptr %44, align 4, !tbaa !9
  %217 = load ptr, ptr %45, align 8, !tbaa !5
  %218 = load ptr, ptr %4, align 8, !tbaa !5
  call void @Hacl_Hash_SHA3_shake256_hacl(i32 noundef %216, ptr noundef %217, i32 noundef 32, ptr noundef %218)
  %219 = load ptr, ptr %45, align 8, !tbaa !5
  %220 = load i32, ptr %44, align 4, !tbaa !9
  %221 = zext i32 %220 to i64
  %222 = mul i64 %221, 1
  call void @Lib_Memzero0_memzero0(ptr noundef %219, i64 noundef %222)
  %223 = getelementptr inbounds [32 x i8], ptr %39, i64 0, i64 0
  call void @Lib_Memzero0_memzero0(ptr noundef %223, i64 noundef 32)
  %224 = getelementptr inbounds [64 x i8], ptr %15, i64 0, i64 0
  call void @Lib_Memzero0_memzero0(ptr noundef %224, i64 noundef 64)
  %225 = getelementptr inbounds [32 x i8], ptr %11, i64 0, i64 0
  call void @Lib_Memzero0_memzero0(ptr noundef %225, i64 noundef 32)
  call void @llvm.lifetime.end.p0(i64 8, ptr %45) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %44) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr %39) #7
  call void @llvm.lifetime.end.p0(i64 2, ptr %38) #7
  call void @llvm.lifetime.end.p0(i64 2, ptr %37) #7
  call void @llvm.lifetime.end.p0(i64 2, ptr %36) #7
  call void @llvm.lifetime.end.p0(i64 2, ptr %35) #7
  call void @llvm.lifetime.end.p0(i64 128, ptr %34) #7
  call void @llvm.lifetime.end.p0(i64 21504, ptr %33) #7
  call void @llvm.lifetime.end.p0(i64 3612672, ptr %32) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %31) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %30) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %29) #7
  call void @llvm.lifetime.end.p0(i64 33, ptr %28) #7
  call void @llvm.lifetime.end.p0(i64 43136, ptr %27) #7
  call void @llvm.lifetime.end.p0(i64 128, ptr %26) #7
  call void @llvm.lifetime.end.p0(i64 21504, ptr %25) #7
  call void @llvm.lifetime.end.p0(i64 21504, ptr %24) #7
  call void @llvm.lifetime.end.p0(i64 128, ptr %23) #7
  call void @llvm.lifetime.end.p0(i64 21504, ptr %22) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %21) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %20) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %19) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %18) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %17) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %16) #7
  call void @llvm.lifetime.end.p0(i64 64, ptr %15) #7
  call void @llvm.lifetime.end.p0(i64 128, ptr %14) #7
  call void @llvm.lifetime.end.p0(i64 21504, ptr %13) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %12) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr %11) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %10) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %9) #7
  call void @llvm.lifetime.end.p0(i64 128, ptr %8) #7
  call void @llvm.lifetime.end.p0(i64 21504, ptr %7) #7
  ret i32 0
}

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @Hacl_Impl_Matrix_matrix_from_lbytes(i32 noundef, i32 noundef, ptr noundef, ptr noundef) #4

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @Hacl_Impl_Matrix_matrix_sub(i32 noundef, i32 noundef, ptr noundef, ptr noundef) #4

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @Hacl_Impl_Frodo_Encode_frodo_key_decode(i32 noundef, i32 noundef, i32 noundef, ptr noundef, ptr noundef) #4

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @Hacl_Impl_Matrix_mod_pow2(i32 noundef, i32 noundef, i32 noundef, ptr noundef) #4

; Function Attrs: inlinehint nounwind uwtable
declare hidden zeroext i16 @Hacl_Impl_Matrix_matrix_eq(i32 noundef, i32 noundef, ptr noundef, ptr noundef) #4

attributes #0 = { nocallback nofree nosync nounwind willreturn memory(argmem: readwrite) }
attributes #1 = { nocallback nofree nounwind willreturn memory(argmem: write) }
attributes #2 = { "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #3 = { nocallback nofree nounwind willreturn memory(argmem: readwrite) }
attributes #4 = { inlinehint nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #5 = { noreturn nounwind "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #6 = { nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #7 = { nounwind }
attributes #8 = { noreturn nounwind }

!llvm.module.flags = !{!0, !1, !2, !3}
!llvm.ident = !{!4}

!0 = !{i32 1, !"wchar_size", i32 4}
!1 = !{i32 8, !"PIC Level", i32 2}
!2 = !{i32 7, !"PIE Level", i32 2}
!3 = !{i32 7, !"uwtable", i32 2}
!4 = !{!"clang version 19.1.0 (git@github.com:llvm/llvm-project.git a4bf6cd7cfb1a1421ba92bca9d017b49936c55e4)"}
!5 = !{!6, !6, i64 0}
!6 = !{!"any pointer", !7, i64 0}
!7 = !{!"omnipotent char", !8, i64 0}
!8 = !{!"Simple C/C++ TBAA"}
!9 = !{!10, !10, i64 0}
!10 = !{!"int", !7, i64 0}
!11 = !{!7, !7, i64 0}
!12 = !{!13, !13, i64 0}
!13 = !{!"short", !7, i64 0}
!14 = distinct !{!14, !15}
!15 = !{!"llvm.loop.mustprogress"}


; Optimized IR (opt -passes='default<O3>'):
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

; Function Attrs: mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.start.p0(i64 immarg, ptr nocapture) #0

; Function Attrs: mustprogress nocallback nofree nounwind willreturn memory(argmem: write)
declare void @llvm.memset.p0.i64(ptr nocapture writeonly, i8, i64, i1 immarg) #1

declare void @Hacl_Hash_SHA3_shake256_hacl(i32 noundef, ptr noundef, i32 noundef, ptr noundef) local_unnamed_addr #2

; Function Attrs: mustprogress nocallback nofree nounwind willreturn memory(argmem: readwrite)
declare void @llvm.memcpy.p0.p0.i64(ptr noalias nocapture writeonly, ptr noalias nocapture readonly, i64, i1 immarg) #3

declare void @Lib_Memzero0_memzero0(ptr noundef, i64 noundef) local_unnamed_addr #2

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @Hacl_Impl_Frodo_Sample_frodo_sample_matrix1344(i32 noundef, i32 noundef, ptr noundef, ptr noundef) local_unnamed_addr #4

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @Hacl_Impl_Frodo_Params_frodo_gen_matrix(i8 noundef zeroext, i32 noundef, ptr noundef, ptr noundef) local_unnamed_addr #4

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @Hacl_Impl_Matrix_matrix_mul_s(i32 noundef, i32 noundef, i32 noundef, ptr noundef, ptr noundef, ptr noundef) local_unnamed_addr #4

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @Hacl_Impl_Matrix_matrix_add(i32 noundef, i32 noundef, ptr noundef, ptr noundef) local_unnamed_addr #4

; Function Attrs: mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.end.p0(i64 immarg, ptr nocapture) #0

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @Hacl_Impl_Matrix_matrix_mul(i32 noundef, i32 noundef, i32 noundef, ptr noundef, ptr noundef, ptr noundef) local_unnamed_addr #4

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @Hacl_Impl_Frodo_Pack_frodo_unpack(i32 noundef, i32 noundef, i32 noundef, ptr noundef, ptr noundef) local_unnamed_addr #4

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @Hacl_Impl_Frodo_Encode_frodo_key_encode(i32 noundef, i32 noundef, i32 noundef, ptr noundef, ptr noundef) local_unnamed_addr #4

; Function Attrs: nounwind uwtable
define dso_local noundef i32 @Hacl_Frodo1344_crypto_kem_dec(ptr noundef %0, ptr noundef %1, ptr noundef %2) local_unnamed_addr #5 {
  %4 = alloca [10752 x i16], align 16
  %5 = alloca [64 x i16], align 16
  %6 = alloca [32 x i8], align 16
  %7 = alloca [10752 x i16], align 16
  %8 = alloca [64 x i16], align 16
  %9 = alloca [64 x i8], align 16
  %10 = alloca [10752 x i16], align 16
  %11 = alloca [64 x i16], align 16
  %12 = alloca [10752 x i16], align 16
  %13 = alloca [10752 x i16], align 16
  %14 = alloca [64 x i16], align 16
  %15 = alloca [43136 x i8], align 16
  %16 = alloca [33 x i8], align 16
  %17 = alloca [1806336 x i16], align 16
  %18 = alloca [10752 x i16], align 16
  %19 = alloca [64 x i16], align 16
  %20 = alloca [32 x i8], align 16
  call void @llvm.lifetime.start.p0(i64 21504, ptr nonnull %4) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(21504) %4, i8 0, i64 21504, i1 false)
  call void @llvm.lifetime.start.p0(i64 128, ptr nonnull %5) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(128) %5, i8 0, i64 128, i1 false)
  %21 = getelementptr inbounds i8, ptr %1, i64 21504
  call void @Hacl_Impl_Frodo_Pack_frodo_unpack(i32 noundef 8, i32 noundef 1344, i32 noundef 16, ptr noundef %1, ptr noundef nonnull %4)
  call void @Hacl_Impl_Frodo_Pack_frodo_unpack(i32 noundef 8, i32 noundef 8, i32 noundef 16, ptr noundef nonnull %21, ptr noundef nonnull %5)
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %6) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %6, i8 0, i64 32, i1 false)
  %22 = getelementptr inbounds i8, ptr %2, i64 21552
  call void @llvm.lifetime.start.p0(i64 21504, ptr nonnull %7) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(21504) %7, i8 0, i64 21504, i1 false)
  call void @llvm.lifetime.start.p0(i64 128, ptr nonnull %8) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(128) %8, i8 0, i64 128, i1 false)
  call void @Hacl_Impl_Matrix_matrix_from_lbytes(i32 noundef 1344, i32 noundef 8, ptr noundef nonnull %22, ptr noundef nonnull %7)
  call void @Hacl_Impl_Matrix_matrix_mul_s(i32 noundef 8, i32 noundef 1344, i32 noundef 8, ptr noundef nonnull %4, ptr noundef nonnull %7, ptr noundef nonnull %8)
  call void @Hacl_Impl_Matrix_matrix_sub(i32 noundef 8, i32 noundef 8, ptr noundef nonnull %5, ptr noundef nonnull %8)
  call void @Hacl_Impl_Frodo_Encode_frodo_key_decode(i32 noundef 16, i32 noundef 4, i32 noundef 8, ptr noundef nonnull %8, ptr noundef nonnull %6)
  call void @Lib_Memzero0_memzero0(ptr noundef nonnull %7, i64 noundef 21504) #6
  call void @Lib_Memzero0_memzero0(ptr noundef nonnull %8, i64 noundef 128) #6
  call void @llvm.lifetime.start.p0(i64 64, ptr nonnull %9) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(64) %9, i8 0, i64 64, i1 false)
  %23 = alloca [64 x i8], align 16
  %24 = getelementptr inbounds i8, ptr %2, i64 43056
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %23, ptr noundef nonnull align 1 dereferenceable(32) %24, i64 32, i1 false)
  %25 = getelementptr inbounds i8, ptr %23, i64 32
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %25, ptr noundef nonnull align 16 dereferenceable(32) %6, i64 32, i1 false)
  call void @Hacl_Hash_SHA3_shake256_hacl(i32 noundef 64, ptr noundef nonnull %23, i32 noundef 64, ptr noundef nonnull %9) #6
  %26 = getelementptr inbounds i8, ptr %9, i64 32
  call void @llvm.lifetime.start.p0(i64 21504, ptr nonnull %10) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(21504) %10, i8 0, i64 21504, i1 false)
  call void @llvm.lifetime.start.p0(i64 128, ptr nonnull %11) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(128) %11, i8 0, i64 128, i1 false)
  call void @llvm.lifetime.start.p0(i64 21504, ptr nonnull %12) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(21504) %12, i8 0, i64 21504, i1 false)
  call void @llvm.lifetime.start.p0(i64 21504, ptr nonnull %13) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(21504) %13, i8 0, i64 21504, i1 false)
  call void @llvm.lifetime.start.p0(i64 128, ptr nonnull %14) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(128) %14, i8 0, i64 128, i1 false)
  call void @llvm.lifetime.start.p0(i64 43136, ptr nonnull %15) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(43136) %15, i8 0, i64 43136, i1 false)
  call void @llvm.lifetime.start.p0(i64 33, ptr nonnull %16) #6
  store i8 -106, ptr %16, align 16, !tbaa !5
  %27 = getelementptr inbounds i8, ptr %16, i64 1
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %27, ptr noundef nonnull align 16 dereferenceable(32) %9, i64 32, i1 false)
  call void @Hacl_Hash_SHA3_shake256_hacl(i32 noundef 33, ptr noundef nonnull %16, i32 noundef 43136, ptr noundef nonnull %15) #6
  call void @Lib_Memzero0_memzero0(ptr noundef nonnull %16, i64 noundef 33) #6
  call void @Hacl_Impl_Frodo_Sample_frodo_sample_matrix1344(i32 noundef 8, i32 noundef 1344, ptr noundef nonnull %15, ptr noundef nonnull %12)
  %28 = getelementptr inbounds i8, ptr %15, i64 21504
  call void @Hacl_Impl_Frodo_Sample_frodo_sample_matrix1344(i32 noundef 8, i32 noundef 1344, ptr noundef nonnull %28, ptr noundef nonnull %13)
  %29 = getelementptr inbounds i8, ptr %15, i64 43008
  call void @Hacl_Impl_Frodo_Sample_frodo_sample_matrix1344(i32 noundef 8, i32 noundef 8, ptr noundef nonnull %29, ptr noundef nonnull %14)
  %30 = getelementptr inbounds i8, ptr %2, i64 32
  %31 = getelementptr inbounds i8, ptr %2, i64 48
  call void @llvm.lifetime.start.p0(i64 3612672, ptr nonnull %17) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(3612672) %17, i8 0, i64 3612672, i1 false)
  call void @Hacl_Impl_Frodo_Params_frodo_gen_matrix(i8 noundef zeroext 0, i32 noundef 1344, ptr noundef nonnull %30, ptr noundef nonnull %17)
  call void @Hacl_Impl_Matrix_matrix_mul(i32 noundef 8, i32 noundef 1344, i32 noundef 1344, ptr noundef nonnull %12, ptr noundef nonnull %17, ptr noundef nonnull %10)
  call void @Hacl_Impl_Matrix_matrix_add(i32 noundef 8, i32 noundef 1344, ptr noundef nonnull %10, ptr noundef nonnull %13)
  call void @llvm.lifetime.start.p0(i64 21504, ptr nonnull %18) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(21504) %18, i8 0, i64 21504, i1 false)
  call void @Hacl_Impl_Frodo_Pack_frodo_unpack(i32 noundef 1344, i32 noundef 8, i32 noundef 16, ptr noundef nonnull %31, ptr noundef nonnull %18)
  call void @Hacl_Impl_Matrix_matrix_mul(i32 noundef 8, i32 noundef 1344, i32 noundef 8, ptr noundef nonnull %12, ptr noundef nonnull %18, ptr noundef nonnull %11)
  call void @Hacl_Impl_Matrix_matrix_add(i32 noundef 8, i32 noundef 8, ptr noundef nonnull %11, ptr noundef nonnull %14)
  call void @llvm.lifetime.start.p0(i64 128, ptr nonnull %19) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(128) %19, i8 0, i64 128, i1 false)
  call void @Hacl_Impl_Frodo_Encode_frodo_key_encode(i32 noundef 16, i32 noundef 4, i32 noundef 8, ptr noundef nonnull %6, ptr noundef nonnull %19)
  call void @Hacl_Impl_Matrix_matrix_add(i32 noundef 8, i32 noundef 8, ptr noundef nonnull %11, ptr noundef nonnull %19)
  call void @Lib_Memzero0_memzero0(ptr noundef nonnull %19, i64 noundef 128) #6
  call void @Hacl_Impl_Matrix_mod_pow2(i32 noundef 8, i32 noundef 1344, i32 noundef 16, ptr noundef nonnull %10)
  call void @Hacl_Impl_Matrix_mod_pow2(i32 noundef 8, i32 noundef 8, i32 noundef 16, ptr noundef nonnull %11)
  call void @Lib_Memzero0_memzero0(ptr noundef nonnull %12, i64 noundef 21504) #6
  call void @Lib_Memzero0_memzero0(ptr noundef nonnull %13, i64 noundef 21504) #6
  call void @Lib_Memzero0_memzero0(ptr noundef nonnull %14, i64 noundef 128) #6
  %32 = call zeroext i16 @Hacl_Impl_Matrix_matrix_eq(i32 noundef 8, i32 noundef 1344, ptr noundef nonnull %4, ptr noundef nonnull %10)
  %33 = call zeroext i16 @Hacl_Impl_Matrix_matrix_eq(i32 noundef 8, i32 noundef 8, ptr noundef nonnull %5, ptr noundef nonnull %11)
  %34 = and i16 %33, %32
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %20) #6
  %35 = trunc i16 %34 to i8
  %36 = load <16 x i8>, ptr %2, align 1, !tbaa !5
  %37 = load <16 x i8>, ptr %26, align 16, !tbaa !5
  %38 = xor <16 x i8> %37, %36
  %39 = insertelement <16 x i8> poison, i8 %35, i64 0
  %40 = shufflevector <16 x i8> %39, <16 x i8> poison, <16 x i32> zeroinitializer
  %41 = and <16 x i8> %38, %40
  %42 = xor <16 x i8> %41, %36
  store <16 x i8> %42, ptr %20, align 16, !tbaa !5
  %43 = getelementptr inbounds i8, ptr %2, i64 16
  %44 = getelementptr inbounds i8, ptr %9, i64 48
  %45 = getelementptr inbounds i8, ptr %20, i64 16
  %46 = load <16 x i8>, ptr %43, align 1, !tbaa !5
  %47 = load <16 x i8>, ptr %44, align 16, !tbaa !5
  %48 = xor <16 x i8> %47, %46
  %49 = and <16 x i8> %48, %40
  %50 = xor <16 x i8> %49, %46
  store <16 x i8> %50, ptr %45, align 16, !tbaa !5
  %51 = alloca [21664 x i8], align 16
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 16 dereferenceable(21632) %51, ptr noundef nonnull align 1 dereferenceable(21632) %1, i64 21632, i1 false)
  %52 = getelementptr inbounds i8, ptr %51, i64 21632
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %52, ptr noundef nonnull align 16 dereferenceable(32) %20, i64 32, i1 false)
  call void @Hacl_Hash_SHA3_shake256_hacl(i32 noundef 21664, ptr noundef nonnull %51, i32 noundef 32, ptr noundef %0) #6
  call void @Lib_Memzero0_memzero0(ptr noundef nonnull %51, i64 noundef 21664) #6
  call void @Lib_Memzero0_memzero0(ptr noundef nonnull %20, i64 noundef 32) #6
  call void @Lib_Memzero0_memzero0(ptr noundef nonnull %9, i64 noundef 64) #6
  call void @Lib_Memzero0_memzero0(ptr noundef nonnull %6, i64 noundef 32) #6
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %20) #6
  call void @llvm.lifetime.end.p0(i64 128, ptr nonnull %19) #6
  call void @llvm.lifetime.end.p0(i64 21504, ptr nonnull %18) #6
  call void @llvm.lifetime.end.p0(i64 3612672, ptr nonnull %17) #6
  call void @llvm.lifetime.end.p0(i64 33, ptr nonnull %16) #6
  call void @llvm.lifetime.end.p0(i64 43136, ptr nonnull %15) #6
  call void @llvm.lifetime.end.p0(i64 128, ptr nonnull %14) #6
  call void @llvm.lifetime.end.p0(i64 21504, ptr nonnull %13) #6
  call void @llvm.lifetime.end.p0(i64 21504, ptr nonnull %12) #6
  call void @llvm.lifetime.end.p0(i64 128, ptr nonnull %11) #6
  call void @llvm.lifetime.end.p0(i64 21504, ptr nonnull %10) #6
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %9) #6
  call void @llvm.lifetime.end.p0(i64 128, ptr nonnull %8) #6
  call void @llvm.lifetime.end.p0(i64 21504, ptr nonnull %7) #6
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %6) #6
  call void @llvm.lifetime.end.p0(i64 128, ptr nonnull %5) #6
  call void @llvm.lifetime.end.p0(i64 21504, ptr nonnull %4) #6
  ret i32 0
}

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @Hacl_Impl_Matrix_matrix_from_lbytes(i32 noundef, i32 noundef, ptr noundef, ptr noundef) local_unnamed_addr #4

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @Hacl_Impl_Matrix_matrix_sub(i32 noundef, i32 noundef, ptr noundef, ptr noundef) local_unnamed_addr #4

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @Hacl_Impl_Frodo_Encode_frodo_key_decode(i32 noundef, i32 noundef, i32 noundef, ptr noundef, ptr noundef) local_unnamed_addr #4

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @Hacl_Impl_Matrix_mod_pow2(i32 noundef, i32 noundef, i32 noundef, ptr noundef) local_unnamed_addr #4

; Function Attrs: inlinehint nounwind uwtable
declare hidden zeroext i16 @Hacl_Impl_Matrix_matrix_eq(i32 noundef, i32 noundef, ptr noundef, ptr noundef) local_unnamed_addr #4

attributes #0 = { mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite) }
attributes #1 = { mustprogress nocallback nofree nounwind willreturn memory(argmem: write) }
attributes #2 = { "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #3 = { mustprogress nocallback nofree nounwind willreturn memory(argmem: readwrite) }
attributes #4 = { inlinehint nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #5 = { nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #6 = { nounwind }

!llvm.module.flags = !{!0, !1, !2, !3}
!llvm.ident = !{!4}

!0 = !{i32 1, !"wchar_size", i32 4}
!1 = !{i32 8, !"PIC Level", i32 2}
!2 = !{i32 7, !"PIE Level", i32 2}
!3 = !{i32 7, !"uwtable", i32 2}
!4 = !{!"clang version 19.1.0 (git@github.com:llvm/llvm-project.git a4bf6cd7cfb1a1421ba92bca9d017b49936c55e4)"}
!5 = !{!6, !6, i64 0}
!6 = !{!"omnipotent char", !7, i64 0}
!7 = !{!"Simple C/C++ TBAA"}


; Effective O3 passes: DSEPass,EarlyCSEPass,GVNPass,GlobalOptPass,IPSCCPPass,IndVarSimplifyPass,InferAlignmentPass,InferFunctionAttrsPass,InstCombinePass,LICMPass,LoopRotatePass,MemCpyOptPass,PostOrderFunctionAttrsPass,ReassociatePass,SLPVectorizerPass,SROAPass,SimplifyCFGPass