; LLVM IR from cryspen/libcrux :: sys/hacl/c/src (Hacl_HPKE_P256_CP128_SHA256)

; Unoptimized IR (clang -disable-llvm-passes):
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

%struct.Hacl_Impl_HPKE_context_s_s = type { ptr, ptr, ptr, ptr }

@.str = external hidden unnamed_addr constant [70 x i8], align 1
@.str.1 = external hidden unnamed_addr constant [94 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_eae_prk = external hidden unnamed_addr constant [7 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_shared_secret = external hidden unnamed_addr constant [13 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_psk_id_hash = external hidden unnamed_addr constant [11 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_info_hash = external hidden unnamed_addr constant [9 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_secret = external hidden unnamed_addr constant [6 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_exp = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_key = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_base_nonce = external hidden unnamed_addr constant [10 x i8], align 1

; Function Attrs: nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.start.p0(i64 immarg, ptr nocapture) #0

; Function Attrs: nocallback nofree nounwind willreturn memory(argmem: write)
declare void @llvm.memset.p0.i64(ptr nocapture writeonly, i8, i64, i1 immarg) #1

declare zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_i(ptr noundef, ptr noundef) #2

declare zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_r(ptr noundef, ptr noundef, ptr noundef) #2

; Function Attrs: nocallback nofree nounwind willreturn memory(argmem: readwrite)
declare void @llvm.memcpy.p0.p0.i64(ptr noalias nocapture writeonly, ptr noalias nocapture readonly, i64, i1 immarg) #3

declare i32 @printf(ptr noundef, ...) #2

; Function Attrs: noreturn nounwind
declare void @exit(i32 noundef) #4

; Function Attrs: nocallback nofree nosync nounwind willreturn
declare ptr @llvm.stacksave.p0() #5

declare void @Hacl_HKDF_extract_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef) #2

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @store16(ptr noundef, i16 noundef zeroext) #6

; Function Attrs: inlinehint nounwind uwtable
declare hidden zeroext i16 @__bswap_16(i16 noundef zeroext) #6

declare void @Hacl_HKDF_expand_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef, i32 noundef) #2

; Function Attrs: nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.end.p0(i64 immarg, ptr nocapture) #0

; Function Attrs: nocallback nofree nosync nounwind willreturn
declare void @llvm.stackrestore.p0(ptr) #5

; Function Attrs: nounwind uwtable
define dso_local i32 @Hacl_HPKE_P256_CP128_SHA256_setupBaseR(ptr noundef byval(%struct.Hacl_Impl_HPKE_context_s_s) align 8 %0, ptr noundef %1, ptr noundef %2, i32 noundef %3, ptr noundef %4) #7 {
  %6 = alloca i32, align 4
  %7 = alloca ptr, align 8
  %8 = alloca ptr, align 8
  %9 = alloca i32, align 4
  %10 = alloca ptr, align 8
  %11 = alloca [64 x i8], align 16
  %12 = alloca i8, align 1
  %13 = alloca i32, align 4
  %14 = alloca [32 x i8], align 16
  %15 = alloca ptr, align 8
  %16 = alloca [64 x i8], align 16
  %17 = alloca [64 x i8], align 16
  %18 = alloca i8, align 1
  %19 = alloca i32, align 4
  %20 = alloca i32, align 4
  %21 = alloca [130 x i8], align 16
  %22 = alloca ptr, align 8
  %23 = alloca ptr, align 8
  %24 = alloca i8, align 1
  %25 = alloca i32, align 4
  %26 = alloca ptr, align 8
  %27 = alloca [32 x i8], align 16
  %28 = alloca [5 x i8], align 1
  %29 = alloca ptr, align 8
  %30 = alloca ptr, align 8
  %31 = alloca ptr, align 8
  %32 = alloca [7 x i8], align 1
  %33 = alloca i32, align 4
  %34 = alloca ptr, align 8
  %35 = alloca i64, align 8
  %36 = alloca ptr, align 8
  %37 = alloca [13 x i8], align 1
  %38 = alloca i32, align 4
  %39 = alloca i64, align 8
  %40 = alloca ptr, align 8
  %41 = alloca [65 x i8], align 16
  %42 = alloca [32 x i8], align 16
  %43 = alloca [10 x i8], align 1
  %44 = alloca ptr, align 8
  %45 = alloca ptr, align 8
  %46 = alloca ptr, align 8
  %47 = alloca ptr, align 8
  %48 = alloca [11 x i8], align 1
  %49 = alloca [32 x i8], align 16
  %50 = alloca ptr, align 8
  %51 = alloca i32, align 4
  %52 = alloca ptr, align 8
  %53 = alloca i64, align 8
  %54 = alloca ptr, align 8
  %55 = alloca [9 x i8], align 1
  %56 = alloca [32 x i8], align 16
  %57 = alloca i32, align 4
  %58 = alloca i64, align 8
  %59 = alloca ptr, align 8
  %60 = alloca [6 x i8], align 1
  %61 = alloca i32, align 4
  %62 = alloca i64, align 8
  %63 = alloca ptr, align 8
  %64 = alloca [3 x i8], align 1
  %65 = alloca i32, align 4
  %66 = alloca i64, align 8
  %67 = alloca ptr, align 8
  %68 = alloca [3 x i8], align 1
  %69 = alloca i32, align 4
  %70 = alloca i64, align 8
  %71 = alloca ptr, align 8
  %72 = alloca [10 x i8], align 1
  %73 = alloca i32, align 4
  %74 = alloca i64, align 8
  %75 = alloca ptr, align 8
  %76 = alloca i32, align 4
  store ptr %1, ptr %7, align 8, !tbaa !5
  store ptr %2, ptr %8, align 8, !tbaa !5
  store i32 %3, ptr %9, align 4, !tbaa !9
  store ptr %4, ptr %10, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 64, ptr %11) #8
  call void @llvm.memset.p0.i64(ptr align 16 %11, i8 0, i64 64, i1 false)
  call void @llvm.lifetime.start.p0(i64 1, ptr %12) #8
  %77 = getelementptr inbounds [64 x i8], ptr %11, i64 0, i64 0
  %78 = load ptr, ptr %8, align 8, !tbaa !5
  %79 = call zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_i(ptr noundef %77, ptr noundef %78)
  %80 = zext i1 %79 to i8
  store i8 %80, ptr %12, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 4, ptr %13) #8
  %81 = load i8, ptr %12, align 1, !tbaa !11, !range !13, !noundef !14
  %82 = trunc i8 %81 to i1
  br i1 %82, label %83, label %84

83:                                               ; preds = %5
  store i32 0, ptr %13, align 4, !tbaa !9
  br label %85

84:                                               ; preds = %5
  store i32 1, ptr %13, align 4, !tbaa !9
  br label %85

85:                                               ; preds = %84, %83
  call void @llvm.lifetime.start.p0(i64 32, ptr %14) #8
  call void @llvm.memset.p0.i64(ptr align 16 %14, i8 0, i64 32, i1 false)
  %86 = load i32, ptr %13, align 4, !tbaa !9
  %87 = icmp eq i32 %86, 0
  br i1 %87, label %88, label %512

88:                                               ; preds = %85
  call void @llvm.lifetime.start.p0(i64 8, ptr %15) #8
  %89 = load ptr, ptr %7, align 8, !tbaa !5
  %90 = getelementptr inbounds i8, ptr %89, i64 1
  store ptr %90, ptr %15, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 64, ptr %16) #8
  call void @llvm.memset.p0.i64(ptr align 16 %16, i8 0, i64 64, i1 false)
  call void @llvm.lifetime.start.p0(i64 64, ptr %17) #8
  call void @llvm.memset.p0.i64(ptr align 16 %17, i8 0, i64 64, i1 false)
  call void @llvm.lifetime.start.p0(i64 1, ptr %18) #8
  %91 = getelementptr inbounds [64 x i8], ptr %17, i64 0, i64 0
  %92 = load ptr, ptr %15, align 8, !tbaa !5
  %93 = load ptr, ptr %8, align 8, !tbaa !5
  %94 = call zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_r(ptr noundef %91, ptr noundef %92, ptr noundef %93)
  %95 = zext i1 %94 to i8
  store i8 %95, ptr %18, align 1, !tbaa !11
  %96 = getelementptr inbounds [64 x i8], ptr %16, i64 0, i64 0
  %97 = getelementptr inbounds [64 x i8], ptr %17, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 16 %96, ptr align 16 %97, i64 64, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %19) #8
  %98 = load i8, ptr %18, align 1, !tbaa !11, !range !13, !noundef !14
  %99 = trunc i8 %98 to i1
  br i1 %99, label %100, label %101

100:                                              ; preds = %88
  store i32 0, ptr %19, align 4, !tbaa !9
  br label %102

101:                                              ; preds = %88
  store i32 1, ptr %19, align 4, !tbaa !9
  br label %102

102:                                              ; preds = %101, %100
  call void @llvm.lifetime.start.p0(i64 4, ptr %20) #8
  call void @llvm.lifetime.start.p0(i64 130, ptr %21) #8
  call void @llvm.memset.p0.i64(ptr align 16 %21, i8 0, i64 130, i1 false)
  %103 = load i32, ptr %19, align 4, !tbaa !9
  %104 = icmp eq i32 %103, 0
  br i1 %104, label %105, label %223

105:                                              ; preds = %102
  call void @llvm.lifetime.start.p0(i64 8, ptr %22) #8
  %106 = getelementptr inbounds [130 x i8], ptr %21, i64 0, i64 0
  %107 = getelementptr inbounds i8, ptr %106, i64 65
  store ptr %107, ptr %22, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 8, ptr %23) #8
  %108 = load ptr, ptr %22, align 8, !tbaa !5
  %109 = getelementptr inbounds i8, ptr %108, i64 1
  store ptr %109, ptr %23, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 1, ptr %24) #8
  %110 = load ptr, ptr %23, align 8, !tbaa !5
  %111 = load ptr, ptr %8, align 8, !tbaa !5
  %112 = call zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_i(ptr noundef %110, ptr noundef %111)
  %113 = zext i1 %112 to i8
  store i8 %113, ptr %24, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 4, ptr %25) #8
  %114 = load i8, ptr %24, align 1, !tbaa !11, !range !13, !noundef !14
  %115 = trunc i8 %114 to i1
  br i1 %115, label %116, label %117

116:                                              ; preds = %105
  store i32 0, ptr %25, align 4, !tbaa !9
  br label %118

117:                                              ; preds = %105
  store i32 1, ptr %25, align 4, !tbaa !9
  br label %118

118:                                              ; preds = %117, %116
  %119 = load i32, ptr %25, align 4, !tbaa !9
  %120 = icmp eq i32 %119, 0
  br i1 %120, label %121, label %221

121:                                              ; preds = %118
  %122 = getelementptr inbounds [130 x i8], ptr %21, i64 0, i64 0
  %123 = load ptr, ptr %7, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 16 %122, ptr align 1 %123, i64 65, i1 false)
  %124 = load ptr, ptr %22, align 8, !tbaa !5
  %125 = getelementptr inbounds i8, ptr %124, i64 0
  store i8 4, ptr %125, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %26) #8
  %126 = getelementptr inbounds [64 x i8], ptr %16, i64 0, i64 0
  store ptr %126, ptr %26, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 32, ptr %27) #8
  call void @llvm.memset.p0.i64(ptr align 16 %27, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 5, ptr %28) #8
  call void @llvm.memset.p0.i64(ptr align 1 %28, i8 0, i64 5, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %29) #8
  %127 = getelementptr inbounds [5 x i8], ptr %28, i64 0, i64 0
  store ptr %127, ptr %29, align 8, !tbaa !5
  %128 = load ptr, ptr %29, align 8, !tbaa !5
  %129 = getelementptr inbounds i8, ptr %128, i64 0
  store i8 75, ptr %129, align 1, !tbaa !15
  %130 = load ptr, ptr %29, align 8, !tbaa !5
  %131 = getelementptr inbounds i8, ptr %130, i64 1
  store i8 69, ptr %131, align 1, !tbaa !15
  %132 = load ptr, ptr %29, align 8, !tbaa !5
  %133 = getelementptr inbounds i8, ptr %132, i64 2
  store i8 77, ptr %133, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %30) #8
  %134 = getelementptr inbounds [5 x i8], ptr %28, i64 0, i64 0
  %135 = getelementptr inbounds i8, ptr %134, i64 3
  store ptr %135, ptr %30, align 8, !tbaa !5
  %136 = load ptr, ptr %30, align 8, !tbaa !5
  %137 = getelementptr inbounds i8, ptr %136, i64 0
  store i8 0, ptr %137, align 1, !tbaa !15
  %138 = load ptr, ptr %30, align 8, !tbaa !5
  %139 = getelementptr inbounds i8, ptr %138, i64 1
  store i8 16, ptr %139, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %31) #8
  %140 = getelementptr inbounds [5 x i8], ptr %28, i64 0, i64 0
  store ptr %140, ptr %31, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 7, ptr %32) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %32, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_eae_prk, i64 7, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %33) #8
  store i32 51, ptr %33, align 4, !tbaa !9
  br label %141

141:                                              ; preds = %121
  %142 = load i32, ptr %33, align 4, !tbaa !9
  %143 = zext i32 %142 to i64
  %144 = icmp ugt i64 %143, -1
  br i1 %144, label %145, label %147

145:                                              ; preds = %141
  %146 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 349)
  call void @exit(i32 noundef 253) #9
  unreachable

147:                                              ; preds = %141
  br label %148

148:                                              ; preds = %147
  br label %149

149:                                              ; preds = %148
  %150 = load i32, ptr %33, align 4, !tbaa !9
  %151 = zext i32 %150 to i64
  %152 = call ptr @llvm.stacksave.p0()
  store ptr %152, ptr %34, align 8
  %153 = alloca i8, i64 %151, align 16
  store i64 %151, ptr %35, align 8
  %154 = load i32, ptr %33, align 4, !tbaa !9
  %155 = zext i32 %154 to i64
  %156 = mul i64 %155, 1
  call void @llvm.memset.p0.i64(ptr align 16 %153, i8 0, i64 %156, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %36) #8
  store ptr %153, ptr %36, align 8, !tbaa !5
  %157 = load ptr, ptr %36, align 8, !tbaa !5
  %158 = getelementptr inbounds i8, ptr %157, i64 0
  store i8 72, ptr %158, align 1, !tbaa !15
  %159 = load ptr, ptr %36, align 8, !tbaa !5
  %160 = getelementptr inbounds i8, ptr %159, i64 1
  store i8 80, ptr %160, align 1, !tbaa !15
  %161 = load ptr, ptr %36, align 8, !tbaa !5
  %162 = getelementptr inbounds i8, ptr %161, i64 2
  store i8 75, ptr %162, align 1, !tbaa !15
  %163 = load ptr, ptr %36, align 8, !tbaa !5
  %164 = getelementptr inbounds i8, ptr %163, i64 3
  store i8 69, ptr %164, align 1, !tbaa !15
  %165 = load ptr, ptr %36, align 8, !tbaa !5
  %166 = getelementptr inbounds i8, ptr %165, i64 4
  store i8 45, ptr %166, align 1, !tbaa !15
  %167 = load ptr, ptr %36, align 8, !tbaa !5
  %168 = getelementptr inbounds i8, ptr %167, i64 5
  store i8 118, ptr %168, align 1, !tbaa !15
  %169 = load ptr, ptr %36, align 8, !tbaa !5
  %170 = getelementptr inbounds i8, ptr %169, i64 6
  store i8 49, ptr %170, align 1, !tbaa !15
  %171 = getelementptr inbounds i8, ptr %153, i64 7
  %172 = getelementptr inbounds [5 x i8], ptr %28, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %171, ptr align 1 %172, i64 5, i1 false)
  %173 = getelementptr inbounds i8, ptr %153, i64 12
  %174 = getelementptr inbounds [7 x i8], ptr %32, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %173, ptr align 1 %174, i64 7, i1 false)
  %175 = getelementptr inbounds i8, ptr %153, i64 19
  %176 = load ptr, ptr %26, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %175, ptr align 1 %176, i64 32, i1 false)
  %177 = getelementptr inbounds [32 x i8], ptr %27, i64 0, i64 0
  %178 = load ptr, ptr %31, align 8, !tbaa !5
  %179 = load i32, ptr %33, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %177, ptr noundef %178, i32 noundef 0, ptr noundef %153, i32 noundef %179)
  call void @llvm.lifetime.start.p0(i64 13, ptr %37) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %37, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_shared_secret, i64 13, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %38) #8
  store i32 157, ptr %38, align 4, !tbaa !9
  br label %180

180:                                              ; preds = %149
  %181 = load i32, ptr %38, align 4, !tbaa !9
  %182 = zext i32 %181 to i64
  %183 = icmp ugt i64 %182, -1
  br i1 %183, label %184, label %186

184:                                              ; preds = %180
  %185 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 371)
  call void @exit(i32 noundef 253) #9
  unreachable

186:                                              ; preds = %180
  br label %187

187:                                              ; preds = %186
  br label %188

188:                                              ; preds = %187
  %189 = load i32, ptr %38, align 4, !tbaa !9
  %190 = zext i32 %189 to i64
  %191 = alloca i8, i64 %190, align 16
  store i64 %190, ptr %39, align 8
  %192 = load i32, ptr %38, align 4, !tbaa !9
  %193 = zext i32 %192 to i64
  %194 = mul i64 %193, 1
  call void @llvm.memset.p0.i64(ptr align 16 %191, i8 0, i64 %194, i1 false)
  %195 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef %191, i16 noundef zeroext %195)
  call void @llvm.lifetime.start.p0(i64 8, ptr %40) #8
  %196 = getelementptr inbounds i8, ptr %191, i64 2
  store ptr %196, ptr %40, align 8, !tbaa !5
  %197 = load ptr, ptr %40, align 8, !tbaa !5
  %198 = getelementptr inbounds i8, ptr %197, i64 0
  store i8 72, ptr %198, align 1, !tbaa !15
  %199 = load ptr, ptr %40, align 8, !tbaa !5
  %200 = getelementptr inbounds i8, ptr %199, i64 1
  store i8 80, ptr %200, align 1, !tbaa !15
  %201 = load ptr, ptr %40, align 8, !tbaa !5
  %202 = getelementptr inbounds i8, ptr %201, i64 2
  store i8 75, ptr %202, align 1, !tbaa !15
  %203 = load ptr, ptr %40, align 8, !tbaa !5
  %204 = getelementptr inbounds i8, ptr %203, i64 3
  store i8 69, ptr %204, align 1, !tbaa !15
  %205 = load ptr, ptr %40, align 8, !tbaa !5
  %206 = getelementptr inbounds i8, ptr %205, i64 4
  store i8 45, ptr %206, align 1, !tbaa !15
  %207 = load ptr, ptr %40, align 8, !tbaa !5
  %208 = getelementptr inbounds i8, ptr %207, i64 5
  store i8 118, ptr %208, align 1, !tbaa !15
  %209 = load ptr, ptr %40, align 8, !tbaa !5
  %210 = getelementptr inbounds i8, ptr %209, i64 6
  store i8 49, ptr %210, align 1, !tbaa !15
  %211 = getelementptr inbounds i8, ptr %191, i64 9
  %212 = getelementptr inbounds [5 x i8], ptr %28, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %211, ptr align 1 %212, i64 5, i1 false)
  %213 = getelementptr inbounds i8, ptr %191, i64 14
  %214 = getelementptr inbounds [13 x i8], ptr %37, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %213, ptr align 1 %214, i64 13, i1 false)
  %215 = getelementptr inbounds i8, ptr %191, i64 27
  %216 = getelementptr inbounds [130 x i8], ptr %21, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %215, ptr align 16 %216, i64 130, i1 false)
  %217 = getelementptr inbounds [32 x i8], ptr %14, i64 0, i64 0
  %218 = getelementptr inbounds [32 x i8], ptr %27, i64 0, i64 0
  %219 = load i32, ptr %38, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %217, ptr noundef %218, i32 noundef 32, ptr noundef %191, i32 noundef %219, i32 noundef 32)
  store i32 0, ptr %20, align 4, !tbaa !9
  call void @llvm.lifetime.end.p0(i64 8, ptr %40) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %38) #8
  call void @llvm.lifetime.end.p0(i64 13, ptr %37) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %36) #8
  %220 = load ptr, ptr %34, align 8
  call void @llvm.stackrestore.p0(ptr %220)
  call void @llvm.lifetime.end.p0(i64 4, ptr %33) #8
  call void @llvm.lifetime.end.p0(i64 7, ptr %32) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %31) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %30) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %29) #8
  call void @llvm.lifetime.end.p0(i64 5, ptr %28) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %27) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %26) #8
  br label %222

221:                                              ; preds = %118
  store i32 1, ptr %20, align 4, !tbaa !9
  br label %222

222:                                              ; preds = %221, %188
  call void @llvm.lifetime.end.p0(i64 4, ptr %25) #8
  call void @llvm.lifetime.end.p0(i64 1, ptr %24) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %23) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %22) #8
  br label %224

223:                                              ; preds = %102
  store i32 1, ptr %20, align 4, !tbaa !9
  br label %224

224:                                              ; preds = %223, %222
  %225 = load i32, ptr %20, align 4, !tbaa !9
  %226 = icmp eq i32 %225, 0
  br i1 %226, label %227, label %510

227:                                              ; preds = %224
  call void @llvm.lifetime.start.p0(i64 65, ptr %41) #8
  call void @llvm.memset.p0.i64(ptr align 16 %41, i8 0, i64 65, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr %42) #8
  call void @llvm.memset.p0.i64(ptr align 16 %42, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 10, ptr %43) #8
  call void @llvm.memset.p0.i64(ptr align 1 %43, i8 0, i64 10, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %44) #8
  %228 = getelementptr inbounds [10 x i8], ptr %43, i64 0, i64 0
  store ptr %228, ptr %44, align 8, !tbaa !5
  %229 = load ptr, ptr %44, align 8, !tbaa !5
  %230 = getelementptr inbounds i8, ptr %229, i64 0
  store i8 72, ptr %230, align 1, !tbaa !15
  %231 = load ptr, ptr %44, align 8, !tbaa !5
  %232 = getelementptr inbounds i8, ptr %231, i64 1
  store i8 80, ptr %232, align 1, !tbaa !15
  %233 = load ptr, ptr %44, align 8, !tbaa !5
  %234 = getelementptr inbounds i8, ptr %233, i64 2
  store i8 75, ptr %234, align 1, !tbaa !15
  %235 = load ptr, ptr %44, align 8, !tbaa !5
  %236 = getelementptr inbounds i8, ptr %235, i64 3
  store i8 69, ptr %236, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %45) #8
  %237 = getelementptr inbounds [10 x i8], ptr %43, i64 0, i64 0
  %238 = getelementptr inbounds i8, ptr %237, i64 4
  store ptr %238, ptr %45, align 8, !tbaa !5
  %239 = load ptr, ptr %45, align 8, !tbaa !5
  %240 = getelementptr inbounds i8, ptr %239, i64 0
  store i8 0, ptr %240, align 1, !tbaa !15
  %241 = load ptr, ptr %45, align 8, !tbaa !5
  %242 = getelementptr inbounds i8, ptr %241, i64 1
  store i8 16, ptr %242, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %46) #8
  %243 = getelementptr inbounds [10 x i8], ptr %43, i64 0, i64 0
  %244 = getelementptr inbounds i8, ptr %243, i64 6
  store ptr %244, ptr %46, align 8, !tbaa !5
  %245 = load ptr, ptr %46, align 8, !tbaa !5
  %246 = getelementptr inbounds i8, ptr %245, i64 0
  store i8 0, ptr %246, align 1, !tbaa !15
  %247 = load ptr, ptr %46, align 8, !tbaa !5
  %248 = getelementptr inbounds i8, ptr %247, i64 1
  store i8 1, ptr %248, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %47) #8
  %249 = getelementptr inbounds [10 x i8], ptr %43, i64 0, i64 0
  %250 = getelementptr inbounds i8, ptr %249, i64 8
  store ptr %250, ptr %47, align 8, !tbaa !5
  %251 = load ptr, ptr %47, align 8, !tbaa !5
  %252 = getelementptr inbounds i8, ptr %251, i64 0
  store i8 0, ptr %252, align 1, !tbaa !15
  %253 = load ptr, ptr %47, align 8, !tbaa !5
  %254 = getelementptr inbounds i8, ptr %253, i64 1
  store i8 3, ptr %254, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 11, ptr %48) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %48, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_psk_id_hash, i64 11, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr %49) #8
  call void @llvm.memset.p0.i64(ptr align 16 %49, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %50) #8
  %255 = getelementptr inbounds [10 x i8], ptr %43, i64 0, i64 0
  store ptr %255, ptr %50, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 4, ptr %51) #8
  store i32 28, ptr %51, align 4, !tbaa !9
  br label %256

256:                                              ; preds = %227
  %257 = load i32, ptr %51, align 4, !tbaa !9
  %258 = zext i32 %257 to i64
  %259 = icmp ugt i64 %258, -1
  br i1 %259, label %260, label %262

260:                                              ; preds = %256
  %261 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 423)
  call void @exit(i32 noundef 253) #9
  unreachable

262:                                              ; preds = %256
  br label %263

263:                                              ; preds = %262
  br label %264

264:                                              ; preds = %263
  %265 = load i32, ptr %51, align 4, !tbaa !9
  %266 = zext i32 %265 to i64
  %267 = call ptr @llvm.stacksave.p0()
  store ptr %267, ptr %52, align 8
  %268 = alloca i8, i64 %266, align 16
  store i64 %266, ptr %53, align 8
  %269 = load i32, ptr %51, align 4, !tbaa !9
  %270 = zext i32 %269 to i64
  %271 = mul i64 %270, 1
  call void @llvm.memset.p0.i64(ptr align 16 %268, i8 0, i64 %271, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %54) #8
  store ptr %268, ptr %54, align 8, !tbaa !5
  %272 = load ptr, ptr %54, align 8, !tbaa !5
  %273 = getelementptr inbounds i8, ptr %272, i64 0
  store i8 72, ptr %273, align 1, !tbaa !15
  %274 = load ptr, ptr %54, align 8, !tbaa !5
  %275 = getelementptr inbounds i8, ptr %274, i64 1
  store i8 80, ptr %275, align 1, !tbaa !15
  %276 = load ptr, ptr %54, align 8, !tbaa !5
  %277 = getelementptr inbounds i8, ptr %276, i64 2
  store i8 75, ptr %277, align 1, !tbaa !15
  %278 = load ptr, ptr %54, align 8, !tbaa !5
  %279 = getelementptr inbounds i8, ptr %278, i64 3
  store i8 69, ptr %279, align 1, !tbaa !15
  %280 = load ptr, ptr %54, align 8, !tbaa !5
  %281 = getelementptr inbounds i8, ptr %280, i64 4
  store i8 45, ptr %281, align 1, !tbaa !15
  %282 = load ptr, ptr %54, align 8, !tbaa !5
  %283 = getelementptr inbounds i8, ptr %282, i64 5
  store i8 118, ptr %283, align 1, !tbaa !15
  %284 = load ptr, ptr %54, align 8, !tbaa !5
  %285 = getelementptr inbounds i8, ptr %284, i64 6
  store i8 49, ptr %285, align 1, !tbaa !15
  %286 = getelementptr inbounds i8, ptr %268, i64 7
  %287 = getelementptr inbounds [10 x i8], ptr %43, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %286, ptr align 1 %287, i64 10, i1 false)
  %288 = getelementptr inbounds i8, ptr %268, i64 17
  %289 = getelementptr inbounds [11 x i8], ptr %48, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %288, ptr align 1 %289, i64 11, i1 false)
  %290 = getelementptr inbounds i8, ptr %268, i64 28
  %291 = load ptr, ptr %50, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %290, ptr align 1 %291, i64 0, i1 false)
  %292 = getelementptr inbounds [32 x i8], ptr %49, i64 0, i64 0
  %293 = load ptr, ptr %50, align 8, !tbaa !5
  %294 = load i32, ptr %51, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %292, ptr noundef %293, i32 noundef 0, ptr noundef %268, i32 noundef %294)
  call void @llvm.lifetime.start.p0(i64 9, ptr %55) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %55, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_info_hash, i64 9, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr %56) #8
  call void @llvm.memset.p0.i64(ptr align 16 %56, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %57) #8
  %295 = load i32, ptr %9, align 4, !tbaa !9
  %296 = add i32 26, %295
  store i32 %296, ptr %57, align 4, !tbaa !9
  br label %297

297:                                              ; preds = %264
  %298 = load i32, ptr %57, align 4, !tbaa !9
  %299 = zext i32 %298 to i64
  %300 = icmp ugt i64 %299, -1
  br i1 %300, label %301, label %303

301:                                              ; preds = %297
  %302 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 442)
  call void @exit(i32 noundef 253) #9
  unreachable

303:                                              ; preds = %297
  br label %304

304:                                              ; preds = %303
  br label %305

305:                                              ; preds = %304
  %306 = load i32, ptr %57, align 4, !tbaa !9
  %307 = zext i32 %306 to i64
  %308 = alloca i8, i64 %307, align 16
  store i64 %307, ptr %58, align 8
  %309 = load i32, ptr %57, align 4, !tbaa !9
  %310 = zext i32 %309 to i64
  %311 = mul i64 %310, 1
  call void @llvm.memset.p0.i64(ptr align 16 %308, i8 0, i64 %311, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %59) #8
  store ptr %308, ptr %59, align 8, !tbaa !5
  %312 = load ptr, ptr %59, align 8, !tbaa !5
  %313 = getelementptr inbounds i8, ptr %312, i64 0
  store i8 72, ptr %313, align 1, !tbaa !15
  %314 = load ptr, ptr %59, align 8, !tbaa !5
  %315 = getelementptr inbounds i8, ptr %314, i64 1
  store i8 80, ptr %315, align 1, !tbaa !15
  %316 = load ptr, ptr %59, align 8, !tbaa !5
  %317 = getelementptr inbounds i8, ptr %316, i64 2
  store i8 75, ptr %317, align 1, !tbaa !15
  %318 = load ptr, ptr %59, align 8, !tbaa !5
  %319 = getelementptr inbounds i8, ptr %318, i64 3
  store i8 69, ptr %319, align 1, !tbaa !15
  %320 = load ptr, ptr %59, align 8, !tbaa !5
  %321 = getelementptr inbounds i8, ptr %320, i64 4
  store i8 45, ptr %321, align 1, !tbaa !15
  %322 = load ptr, ptr %59, align 8, !tbaa !5
  %323 = getelementptr inbounds i8, ptr %322, i64 5
  store i8 118, ptr %323, align 1, !tbaa !15
  %324 = load ptr, ptr %59, align 8, !tbaa !5
  %325 = getelementptr inbounds i8, ptr %324, i64 6
  store i8 49, ptr %325, align 1, !tbaa !15
  %326 = getelementptr inbounds i8, ptr %308, i64 7
  %327 = getelementptr inbounds [10 x i8], ptr %43, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %326, ptr align 1 %327, i64 10, i1 false)
  %328 = getelementptr inbounds i8, ptr %308, i64 17
  %329 = getelementptr inbounds [9 x i8], ptr %55, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %328, ptr align 1 %329, i64 9, i1 false)
  %330 = getelementptr inbounds i8, ptr %308, i64 26
  %331 = load ptr, ptr %10, align 8, !tbaa !5
  %332 = load i32, ptr %9, align 4, !tbaa !9
  %333 = zext i32 %332 to i64
  %334 = mul i64 %333, 1
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %330, ptr align 1 %331, i64 %334, i1 false)
  %335 = getelementptr inbounds [32 x i8], ptr %56, i64 0, i64 0
  %336 = load ptr, ptr %50, align 8, !tbaa !5
  %337 = load i32, ptr %57, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %335, ptr noundef %336, i32 noundef 0, ptr noundef %308, i32 noundef %337)
  %338 = getelementptr inbounds [65 x i8], ptr %41, i64 0, i64 0
  store i8 0, ptr %338, align 16, !tbaa !15
  %339 = getelementptr inbounds [65 x i8], ptr %41, i64 0, i64 0
  %340 = getelementptr inbounds i8, ptr %339, i64 1
  %341 = getelementptr inbounds [32 x i8], ptr %49, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %340, ptr align 16 %341, i64 32, i1 false)
  %342 = getelementptr inbounds [65 x i8], ptr %41, i64 0, i64 0
  %343 = getelementptr inbounds i8, ptr %342, i64 33
  %344 = getelementptr inbounds [32 x i8], ptr %56, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %343, ptr align 16 %344, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 6, ptr %60) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %60, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_secret, i64 6, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %61) #8
  store i32 23, ptr %61, align 4, !tbaa !9
  br label %345

345:                                              ; preds = %305
  %346 = load i32, ptr %61, align 4, !tbaa !9
  %347 = zext i32 %346 to i64
  %348 = icmp ugt i64 %347, -1
  br i1 %348, label %349, label %351

349:                                              ; preds = %345
  %350 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 462)
  call void @exit(i32 noundef 253) #9
  unreachable

351:                                              ; preds = %345
  br label %352

352:                                              ; preds = %351
  br label %353

353:                                              ; preds = %352
  %354 = load i32, ptr %61, align 4, !tbaa !9
  %355 = zext i32 %354 to i64
  %356 = alloca i8, i64 %355, align 16
  store i64 %355, ptr %62, align 8
  %357 = load i32, ptr %61, align 4, !tbaa !9
  %358 = zext i32 %357 to i64
  %359 = mul i64 %358, 1
  call void @llvm.memset.p0.i64(ptr align 16 %356, i8 0, i64 %359, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %63) #8
  store ptr %356, ptr %63, align 8, !tbaa !5
  %360 = load ptr, ptr %63, align 8, !tbaa !5
  %361 = getelementptr inbounds i8, ptr %360, i64 0
  store i8 72, ptr %361, align 1, !tbaa !15
  %362 = load ptr, ptr %63, align 8, !tbaa !5
  %363 = getelementptr inbounds i8, ptr %362, i64 1
  store i8 80, ptr %363, align 1, !tbaa !15
  %364 = load ptr, ptr %63, align 8, !tbaa !5
  %365 = getelementptr inbounds i8, ptr %364, i64 2
  store i8 75, ptr %365, align 1, !tbaa !15
  %366 = load ptr, ptr %63, align 8, !tbaa !5
  %367 = getelementptr inbounds i8, ptr %366, i64 3
  store i8 69, ptr %367, align 1, !tbaa !15
  %368 = load ptr, ptr %63, align 8, !tbaa !5
  %369 = getelementptr inbounds i8, ptr %368, i64 4
  store i8 45, ptr %369, align 1, !tbaa !15
  %370 = load ptr, ptr %63, align 8, !tbaa !5
  %371 = getelementptr inbounds i8, ptr %370, i64 5
  store i8 118, ptr %371, align 1, !tbaa !15
  %372 = load ptr, ptr %63, align 8, !tbaa !5
  %373 = getelementptr inbounds i8, ptr %372, i64 6
  store i8 49, ptr %373, align 1, !tbaa !15
  %374 = getelementptr inbounds i8, ptr %356, i64 7
  %375 = getelementptr inbounds [10 x i8], ptr %43, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %374, ptr align 1 %375, i64 10, i1 false)
  %376 = getelementptr inbounds i8, ptr %356, i64 17
  %377 = getelementptr inbounds [6 x i8], ptr %60, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %376, ptr align 1 %377, i64 6, i1 false)
  %378 = getelementptr inbounds i8, ptr %356, i64 23
  %379 = load ptr, ptr %50, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %378, ptr align 1 %379, i64 0, i1 false)
  %380 = getelementptr inbounds [32 x i8], ptr %42, i64 0, i64 0
  %381 = getelementptr inbounds [32 x i8], ptr %14, i64 0, i64 0
  %382 = load i32, ptr %61, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %380, ptr noundef %381, i32 noundef 32, ptr noundef %356, i32 noundef %382)
  call void @llvm.lifetime.start.p0(i64 3, ptr %64) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %64, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_exp, i64 3, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %65) #8
  store i32 87, ptr %65, align 4, !tbaa !9
  br label %383

383:                                              ; preds = %353
  %384 = load i32, ptr %65, align 4, !tbaa !9
  %385 = zext i32 %384 to i64
  %386 = icmp ugt i64 %385, -1
  br i1 %386, label %387, label %389

387:                                              ; preds = %383
  %388 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 479)
  call void @exit(i32 noundef 253) #9
  unreachable

389:                                              ; preds = %383
  br label %390

390:                                              ; preds = %389
  br label %391

391:                                              ; preds = %390
  %392 = load i32, ptr %65, align 4, !tbaa !9
  %393 = zext i32 %392 to i64
  %394 = alloca i8, i64 %393, align 16
  store i64 %393, ptr %66, align 8
  %395 = load i32, ptr %65, align 4, !tbaa !9
  %396 = zext i32 %395 to i64
  %397 = mul i64 %396, 1
  call void @llvm.memset.p0.i64(ptr align 16 %394, i8 0, i64 %397, i1 false)
  %398 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef %394, i16 noundef zeroext %398)
  call void @llvm.lifetime.start.p0(i64 8, ptr %67) #8
  %399 = getelementptr inbounds i8, ptr %394, i64 2
  store ptr %399, ptr %67, align 8, !tbaa !5
  %400 = load ptr, ptr %67, align 8, !tbaa !5
  %401 = getelementptr inbounds i8, ptr %400, i64 0
  store i8 72, ptr %401, align 1, !tbaa !15
  %402 = load ptr, ptr %67, align 8, !tbaa !5
  %403 = getelementptr inbounds i8, ptr %402, i64 1
  store i8 80, ptr %403, align 1, !tbaa !15
  %404 = load ptr, ptr %67, align 8, !tbaa !5
  %405 = getelementptr inbounds i8, ptr %404, i64 2
  store i8 75, ptr %405, align 1, !tbaa !15
  %406 = load ptr, ptr %67, align 8, !tbaa !5
  %407 = getelementptr inbounds i8, ptr %406, i64 3
  store i8 69, ptr %407, align 1, !tbaa !15
  %408 = load ptr, ptr %67, align 8, !tbaa !5
  %409 = getelementptr inbounds i8, ptr %408, i64 4
  store i8 45, ptr %409, align 1, !tbaa !15
  %410 = load ptr, ptr %67, align 8, !tbaa !5
  %411 = getelementptr inbounds i8, ptr %410, i64 5
  store i8 118, ptr %411, align 1, !tbaa !15
  %412 = load ptr, ptr %67, align 8, !tbaa !5
  %413 = getelementptr inbounds i8, ptr %412, i64 6
  store i8 49, ptr %413, align 1, !tbaa !15
  %414 = getelementptr inbounds i8, ptr %394, i64 9
  %415 = getelementptr inbounds [10 x i8], ptr %43, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %414, ptr align 1 %415, i64 10, i1 false)
  %416 = getelementptr inbounds i8, ptr %394, i64 19
  %417 = getelementptr inbounds [3 x i8], ptr %64, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %416, ptr align 1 %417, i64 3, i1 false)
  %418 = getelementptr inbounds i8, ptr %394, i64 22
  %419 = getelementptr inbounds [65 x i8], ptr %41, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %418, ptr align 16 %419, i64 65, i1 false)
  %420 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %0, i32 0, i32 3
  %421 = load ptr, ptr %420, align 8, !tbaa !16
  %422 = getelementptr inbounds [32 x i8], ptr %42, i64 0, i64 0
  %423 = load i32, ptr %65, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %421, ptr noundef %422, i32 noundef 32, ptr noundef %394, i32 noundef %423, i32 noundef 32)
  call void @llvm.lifetime.start.p0(i64 3, ptr %68) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %68, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_key, i64 3, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %69) #8
  store i32 87, ptr %69, align 4, !tbaa !9
  br label %424

424:                                              ; preds = %391
  %425 = load i32, ptr %69, align 4, !tbaa !9
  %426 = zext i32 %425 to i64
  %427 = icmp ugt i64 %426, -1
  br i1 %427, label %428, label %430

428:                                              ; preds = %424
  %429 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 497)
  call void @exit(i32 noundef 253) #9
  unreachable

430:                                              ; preds = %424
  br label %431

431:                                              ; preds = %430
  br label %432

432:                                              ; preds = %431
  %433 = load i32, ptr %69, align 4, !tbaa !9
  %434 = zext i32 %433 to i64
  %435 = alloca i8, i64 %434, align 16
  store i64 %434, ptr %70, align 8
  %436 = load i32, ptr %69, align 4, !tbaa !9
  %437 = zext i32 %436 to i64
  %438 = mul i64 %437, 1
  call void @llvm.memset.p0.i64(ptr align 16 %435, i8 0, i64 %438, i1 false)
  %439 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef %435, i16 noundef zeroext %439)
  call void @llvm.lifetime.start.p0(i64 8, ptr %71) #8
  %440 = getelementptr inbounds i8, ptr %435, i64 2
  store ptr %440, ptr %71, align 8, !tbaa !5
  %441 = load ptr, ptr %71, align 8, !tbaa !5
  %442 = getelementptr inbounds i8, ptr %441, i64 0
  store i8 72, ptr %442, align 1, !tbaa !15
  %443 = load ptr, ptr %71, align 8, !tbaa !5
  %444 = getelementptr inbounds i8, ptr %443, i64 1
  store i8 80, ptr %444, align 1, !tbaa !15
  %445 = load ptr, ptr %71, align 8, !tbaa !5
  %446 = getelementptr inbounds i8, ptr %445, i64 2
  store i8 75, ptr %446, align 1, !tbaa !15
  %447 = load ptr, ptr %71, align 8, !tbaa !5
  %448 = getelementptr inbounds i8, ptr %447, i64 3
  store i8 69, ptr %448, align 1, !tbaa !15
  %449 = load ptr, ptr %71, align 8, !tbaa !5
  %450 = getelementptr inbounds i8, ptr %449, i64 4
  store i8 45, ptr %450, align 1, !tbaa !15
  %451 = load ptr, ptr %71, align 8, !tbaa !5
  %452 = getelementptr inbounds i8, ptr %451, i64 5
  store i8 118, ptr %452, align 1, !tbaa !15
  %453 = load ptr, ptr %71, align 8, !tbaa !5
  %454 = getelementptr inbounds i8, ptr %453, i64 6
  store i8 49, ptr %454, align 1, !tbaa !15
  %455 = getelementptr inbounds i8, ptr %435, i64 9
  %456 = getelementptr inbounds [10 x i8], ptr %43, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %455, ptr align 1 %456, i64 10, i1 false)
  %457 = getelementptr inbounds i8, ptr %435, i64 19
  %458 = getelementptr inbounds [3 x i8], ptr %68, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %457, ptr align 1 %458, i64 3, i1 false)
  %459 = getelementptr inbounds i8, ptr %435, i64 22
  %460 = getelementptr inbounds [65 x i8], ptr %41, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %459, ptr align 16 %460, i64 65, i1 false)
  %461 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %0, i32 0, i32 0
  %462 = load ptr, ptr %461, align 8, !tbaa !18
  %463 = getelementptr inbounds [32 x i8], ptr %42, i64 0, i64 0
  %464 = load i32, ptr %69, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %462, ptr noundef %463, i32 noundef 32, ptr noundef %435, i32 noundef %464, i32 noundef 32)
  call void @llvm.lifetime.start.p0(i64 10, ptr %72) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %72, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_base_nonce, i64 10, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %73) #8
  store i32 94, ptr %73, align 4, !tbaa !9
  br label %465

465:                                              ; preds = %432
  %466 = load i32, ptr %73, align 4, !tbaa !9
  %467 = zext i32 %466 to i64
  %468 = icmp ugt i64 %467, -1
  br i1 %468, label %469, label %471

469:                                              ; preds = %465
  %470 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 517)
  call void @exit(i32 noundef 253) #9
  unreachable

471:                                              ; preds = %465
  br label %472

472:                                              ; preds = %471
  br label %473

473:                                              ; preds = %472
  %474 = load i32, ptr %73, align 4, !tbaa !9
  %475 = zext i32 %474 to i64
  %476 = alloca i8, i64 %475, align 16
  store i64 %475, ptr %74, align 8
  %477 = load i32, ptr %73, align 4, !tbaa !9
  %478 = zext i32 %477 to i64
  %479 = mul i64 %478, 1
  call void @llvm.memset.p0.i64(ptr align 16 %476, i8 0, i64 %479, i1 false)
  %480 = call zeroext i16 @__bswap_16(i16 noundef zeroext 12)
  call void @store16(ptr noundef %476, i16 noundef zeroext %480)
  call void @llvm.lifetime.start.p0(i64 8, ptr %75) #8
  %481 = getelementptr inbounds i8, ptr %476, i64 2
  store ptr %481, ptr %75, align 8, !tbaa !5
  %482 = load ptr, ptr %75, align 8, !tbaa !5
  %483 = getelementptr inbounds i8, ptr %482, i64 0
  store i8 72, ptr %483, align 1, !tbaa !15
  %484 = load ptr, ptr %75, align 8, !tbaa !5
  %485 = getelementptr inbounds i8, ptr %484, i64 1
  store i8 80, ptr %485, align 1, !tbaa !15
  %486 = load ptr, ptr %75, align 8, !tbaa !5
  %487 = getelementptr inbounds i8, ptr %486, i64 2
  store i8 75, ptr %487, align 1, !tbaa !15
  %488 = load ptr, ptr %75, align 8, !tbaa !5
  %489 = getelementptr inbounds i8, ptr %488, i64 3
  store i8 69, ptr %489, align 1, !tbaa !15
  %490 = load ptr, ptr %75, align 8, !tbaa !5
  %491 = getelementptr inbounds i8, ptr %490, i64 4
  store i8 45, ptr %491, align 1, !tbaa !15
  %492 = load ptr, ptr %75, align 8, !tbaa !5
  %493 = getelementptr inbounds i8, ptr %492, i64 5
  store i8 118, ptr %493, align 1, !tbaa !15
  %494 = load ptr, ptr %75, align 8, !tbaa !5
  %495 = getelementptr inbounds i8, ptr %494, i64 6
  store i8 49, ptr %495, align 1, !tbaa !15
  %496 = getelementptr inbounds i8, ptr %476, i64 9
  %497 = getelementptr inbounds [10 x i8], ptr %43, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %496, ptr align 1 %497, i64 10, i1 false)
  %498 = getelementptr inbounds i8, ptr %476, i64 19
  %499 = getelementptr inbounds [10 x i8], ptr %72, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %498, ptr align 1 %499, i64 10, i1 false)
  %500 = getelementptr inbounds i8, ptr %476, i64 29
  %501 = getelementptr inbounds [65 x i8], ptr %41, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %500, ptr align 16 %501, i64 65, i1 false)
  %502 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %0, i32 0, i32 1
  %503 = load ptr, ptr %502, align 8, !tbaa !19
  %504 = getelementptr inbounds [32 x i8], ptr %42, i64 0, i64 0
  %505 = load i32, ptr %73, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %503, ptr noundef %504, i32 noundef 32, ptr noundef %476, i32 noundef %505, i32 noundef 12)
  %506 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %0, i32 0, i32 2
  %507 = load ptr, ptr %506, align 8, !tbaa !20
  %508 = getelementptr inbounds i64, ptr %507, i64 0
  store i64 0, ptr %508, align 8, !tbaa !21
  store i32 0, ptr %6, align 4
  store i32 1, ptr %76, align 4
  call void @llvm.lifetime.end.p0(i64 8, ptr %75) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %73) #8
  call void @llvm.lifetime.end.p0(i64 10, ptr %72) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %71) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %69) #8
  call void @llvm.lifetime.end.p0(i64 3, ptr %68) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %67) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %65) #8
  call void @llvm.lifetime.end.p0(i64 3, ptr %64) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %63) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %61) #8
  call void @llvm.lifetime.end.p0(i64 6, ptr %60) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %59) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %57) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %56) #8
  call void @llvm.lifetime.end.p0(i64 9, ptr %55) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %54) #8
  %509 = load ptr, ptr %52, align 8
  call void @llvm.stackrestore.p0(ptr %509)
  call void @llvm.lifetime.end.p0(i64 4, ptr %51) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %50) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %49) #8
  call void @llvm.lifetime.end.p0(i64 11, ptr %48) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %47) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %46) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %45) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %44) #8
  call void @llvm.lifetime.end.p0(i64 10, ptr %43) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %42) #8
  call void @llvm.lifetime.end.p0(i64 65, ptr %41) #8
  br label %511

510:                                              ; preds = %224
  store i32 1, ptr %6, align 4
  store i32 1, ptr %76, align 4
  br label %511

511:                                              ; preds = %510, %473
  call void @llvm.lifetime.end.p0(i64 130, ptr %21) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %20) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %19) #8
  call void @llvm.lifetime.end.p0(i64 1, ptr %18) #8
  call void @llvm.lifetime.end.p0(i64 64, ptr %17) #8
  call void @llvm.lifetime.end.p0(i64 64, ptr %16) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %15) #8
  br label %513

512:                                              ; preds = %85
  store i32 1, ptr %6, align 4
  store i32 1, ptr %76, align 4
  br label %513

513:                                              ; preds = %512, %511
  call void @llvm.lifetime.end.p0(i64 32, ptr %14) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %13) #8
  call void @llvm.lifetime.end.p0(i64 1, ptr %12) #8
  call void @llvm.lifetime.end.p0(i64 64, ptr %11) #8
  %514 = load i32, ptr %6, align 4
  ret i32 %514
}

attributes #0 = { nocallback nofree nosync nounwind willreturn memory(argmem: readwrite) }
attributes #1 = { nocallback nofree nounwind willreturn memory(argmem: write) }
attributes #2 = { "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #3 = { nocallback nofree nounwind willreturn memory(argmem: readwrite) }
attributes #4 = { noreturn nounwind "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #5 = { nocallback nofree nosync nounwind willreturn }
attributes #6 = { inlinehint nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #7 = { nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #8 = { nounwind }
attributes #9 = { noreturn nounwind }

!llvm.module.flags = !{!0, !1, !2, !3}
!llvm.ident = !{!4}

!0 = !{i32 1, !"wchar_size", i32 4}
!1 = !{i32 8, !"PIC Level", i32 2}
!2 = !{i32 7, !"PIE Level", i32 2}
!3 = !{i32 7, !"uwtable", i32 2}
!4 = !{!"clang version 19.1.0 (git@github.com:llvm/llvm-project.git a4bf6cd7cfb1a1421ba92bca9d017b49936c55e4)"}
!5 = !{!6, !6, i64 0}
!6 = !{!"any pointer", !7, i64 0}
!7 = !{!"omnipotent char", !8, i64 0}
!8 = !{!"Simple C/C++ TBAA"}
!9 = !{!10, !10, i64 0}
!10 = !{!"int", !7, i64 0}
!11 = !{!12, !12, i64 0}
!12 = !{!"_Bool", !7, i64 0}
!13 = !{i8 0, i8 2}
!14 = !{}
!15 = !{!7, !7, i64 0}
!16 = !{!17, !6, i64 24}
!17 = !{!"Hacl_Impl_HPKE_context_s_s", !6, i64 0, !6, i64 8, !6, i64 16, !6, i64 24}
!18 = !{!17, !6, i64 0}
!19 = !{!17, !6, i64 8}
!20 = !{!17, !6, i64 16}
!21 = !{!22, !22, i64 0}
!22 = !{!"long", !7, i64 0}


; Optimized IR (opt -passes='default<O3>'):
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

%struct.Hacl_Impl_HPKE_context_s_s = type { ptr, ptr, ptr, ptr }

@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_eae_prk = external hidden unnamed_addr constant [7 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_shared_secret = external hidden unnamed_addr constant [13 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_psk_id_hash = external hidden unnamed_addr constant [11 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_info_hash = external hidden unnamed_addr constant [9 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_secret = external hidden unnamed_addr constant [6 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_exp = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_key = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_base_nonce = external hidden unnamed_addr constant [10 x i8], align 1

; Function Attrs: mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.start.p0(i64 immarg, ptr nocapture) #0

; Function Attrs: mustprogress nocallback nofree nounwind willreturn memory(argmem: write)
declare void @llvm.memset.p0.i64(ptr nocapture writeonly, i8, i64, i1 immarg) #1

declare zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_i(ptr noundef, ptr noundef) local_unnamed_addr #2

declare zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_r(ptr noundef, ptr noundef, ptr noundef) local_unnamed_addr #2

; Function Attrs: mustprogress nocallback nofree nounwind willreturn memory(argmem: readwrite)
declare void @llvm.memcpy.p0.p0.i64(ptr noalias nocapture writeonly, ptr noalias nocapture readonly, i64, i1 immarg) #3

; Function Attrs: mustprogress nocallback nofree nosync nounwind willreturn
declare ptr @llvm.stacksave.p0() #4

declare void @Hacl_HKDF_extract_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef) local_unnamed_addr #2

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @store16(ptr noundef, i16 noundef zeroext) local_unnamed_addr #5

; Function Attrs: inlinehint nounwind uwtable
declare hidden zeroext i16 @__bswap_16(i16 noundef zeroext) local_unnamed_addr #5

declare void @Hacl_HKDF_expand_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef, i32 noundef) local_unnamed_addr #2

; Function Attrs: mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.end.p0(i64 immarg, ptr nocapture) #0

; Function Attrs: mustprogress nocallback nofree nosync nounwind willreturn
declare void @llvm.stackrestore.p0(ptr) #4

; Function Attrs: nounwind uwtable
define dso_local range(i32 0, 2) i32 @Hacl_HPKE_P256_CP128_SHA256_setupBaseR(ptr nocapture noundef readonly byval(%struct.Hacl_Impl_HPKE_context_s_s) align 8 %0, ptr noundef %1, ptr noundef %2, i32 noundef %3, ptr nocapture noundef readonly %4) local_unnamed_addr #6 {
  %6 = alloca [64 x i8], align 16
  %7 = alloca [32 x i8], align 16
  %8 = alloca [64 x i8], align 16
  %9 = alloca [64 x i8], align 16
  %10 = alloca [130 x i8], align 16
  %11 = alloca [32 x i8], align 16
  %12 = alloca [5 x i8], align 4
  %.sroa.7 = alloca [32 x i8], align 1
  %.sroa.8 = alloca [32 x i8], align 1
  %13 = alloca [32 x i8], align 16
  %14 = alloca [10 x i8], align 8
  %15 = alloca [32 x i8], align 16
  %16 = alloca [32 x i8], align 16
  call void @llvm.lifetime.start.p0(i64 64, ptr nonnull %6) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(64) %6, i8 0, i64 64, i1 false)
  %17 = call zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_i(ptr noundef nonnull %6, ptr noundef %2) #7
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %7) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %7, i8 0, i64 32, i1 false)
  br i1 %17, label %18, label %103

18:                                               ; preds = %5
  %19 = getelementptr inbounds i8, ptr %1, i64 1
  call void @llvm.lifetime.start.p0(i64 64, ptr nonnull %8)
  call void @llvm.lifetime.start.p0(i64 64, ptr nonnull %9) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(64) %9, i8 0, i64 64, i1 false)
  %20 = call zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_r(ptr noundef nonnull %9, ptr noundef nonnull %19, ptr noundef %2) #7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 16 dereferenceable(64) %8, ptr noundef nonnull align 16 dereferenceable(64) %9, i64 64, i1 false)
  call void @llvm.lifetime.start.p0(i64 130, ptr nonnull %10) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(130) %10, i8 0, i64 130, i1 false)
  br i1 %20, label %21, label %.critedge

21:                                               ; preds = %18
  %22 = getelementptr inbounds i8, ptr %10, i64 66
  %23 = call zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_i(ptr noundef nonnull %22, ptr noundef %2) #7
  br i1 %23, label %24, label %.critedge

24:                                               ; preds = %21
  %25 = getelementptr inbounds i8, ptr %10, i64 65
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 16 dereferenceable(65) %10, ptr noundef nonnull align 1 dereferenceable(65) %1, i64 65, i1 false)
  store i8 4, ptr %25, align 1, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %11) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %11, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 5, ptr nonnull %12) #7
  store <4 x i8> <i8 75, i8 69, i8 77, i8 0>, ptr %12, align 4, !tbaa !5
  %26 = getelementptr inbounds i8, ptr %12, i64 4
  store i8 16, ptr %26, align 4, !tbaa !5
  %27 = call ptr @llvm.stacksave.p0()
  %28 = alloca [51 x i8], align 16
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %28, align 16, !tbaa !5
  %29 = getelementptr inbounds i8, ptr %28, i64 4
  store i8 45, ptr %29, align 4, !tbaa !5
  %30 = getelementptr inbounds i8, ptr %28, i64 5
  store i8 118, ptr %30, align 1, !tbaa !5
  %31 = getelementptr inbounds i8, ptr %28, i64 6
  store i8 49, ptr %31, align 2, !tbaa !5
  %32 = getelementptr inbounds i8, ptr %28, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(5) %32, ptr noundef nonnull align 4 dereferenceable(5) %12, i64 5, i1 false)
  %33 = getelementptr inbounds i8, ptr %28, i64 12
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 4 dereferenceable(7) %33, ptr noundef nonnull align 1 dereferenceable(7) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_eae_prk, i64 7, i1 false)
  %34 = getelementptr inbounds i8, ptr %28, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %34, ptr noundef nonnull align 16 dereferenceable(32) %8, i64 32, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %11, ptr noundef nonnull %12, i32 noundef 0, ptr noundef nonnull %28, i32 noundef 51) #7
  %35 = alloca [157 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(157) %35, i8 0, i64 157, i1 false)
  %36 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef nonnull %35, i16 noundef zeroext %36)
  %37 = getelementptr inbounds i8, ptr %35, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %37, align 2, !tbaa !5
  %38 = getelementptr inbounds i8, ptr %35, i64 6
  store i8 45, ptr %38, align 2, !tbaa !5
  %39 = getelementptr inbounds i8, ptr %35, i64 7
  store i8 118, ptr %39, align 1, !tbaa !5
  %40 = getelementptr inbounds i8, ptr %35, i64 8
  store i8 49, ptr %40, align 8, !tbaa !5
  %41 = getelementptr inbounds i8, ptr %35, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(5) %41, ptr noundef nonnull align 4 dereferenceable(5) %12, i64 5, i1 false)
  %42 = getelementptr inbounds i8, ptr %35, i64 14
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 2 dereferenceable(13) %42, ptr noundef nonnull align 1 dereferenceable(13) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_shared_secret, i64 13, i1 false)
  %43 = getelementptr inbounds i8, ptr %35, i64 27
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(130) %43, ptr noundef nonnull align 16 dereferenceable(130) %10, i64 130, i1 false)
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef nonnull %7, ptr noundef nonnull %11, i32 noundef 32, ptr noundef nonnull %35, i32 noundef 157, i32 noundef 32) #7
  call void @llvm.stackrestore.p0(ptr %27)
  call void @llvm.lifetime.end.p0(i64 5, ptr nonnull %12) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %11) #7
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %.sroa.7)
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %.sroa.8)
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %13) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %13, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 10, ptr nonnull %14) #7
  store <8 x i8> <i8 72, i8 80, i8 75, i8 69, i8 0, i8 16, i8 0, i8 1>, ptr %14, align 8, !tbaa !5
  %44 = getelementptr inbounds i8, ptr %14, i64 8
  store i8 0, ptr %44, align 8, !tbaa !5
  %45 = getelementptr inbounds i8, ptr %14, i64 9
  store i8 3, ptr %45, align 1, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %15) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %15, i8 0, i64 32, i1 false)
  %46 = call ptr @llvm.stacksave.p0()
  %47 = alloca [28 x i8], align 16
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %47, align 16, !tbaa !5
  %48 = getelementptr inbounds i8, ptr %47, i64 4
  store i8 45, ptr %48, align 4, !tbaa !5
  %49 = getelementptr inbounds i8, ptr %47, i64 5
  store i8 118, ptr %49, align 1, !tbaa !5
  %50 = getelementptr inbounds i8, ptr %47, i64 6
  store i8 49, ptr %50, align 2, !tbaa !5
  %51 = getelementptr inbounds i8, ptr %47, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %51, ptr noundef nonnull align 8 dereferenceable(10) %14, i64 10, i1 false)
  %52 = getelementptr inbounds i8, ptr %47, i64 17
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(11) %52, ptr noundef nonnull align 1 dereferenceable(11) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_psk_id_hash, i64 11, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %15, ptr noundef nonnull %14, i32 noundef 0, ptr noundef nonnull %47, i32 noundef 28) #7
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %16) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %16, i8 0, i64 32, i1 false)
  %53 = add i32 %3, 26
  %54 = zext i32 %53 to i64
  %55 = alloca i8, i64 %54, align 16
  call void @llvm.memset.p0.i64(ptr nonnull align 16 %55, i8 0, i64 %54, i1 false)
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %55, align 16, !tbaa !5
  %56 = getelementptr inbounds i8, ptr %55, i64 4
  store i8 45, ptr %56, align 4, !tbaa !5
  %57 = getelementptr inbounds i8, ptr %55, i64 5
  store i8 118, ptr %57, align 1, !tbaa !5
  %58 = getelementptr inbounds i8, ptr %55, i64 6
  store i8 49, ptr %58, align 2, !tbaa !5
  %59 = getelementptr inbounds i8, ptr %55, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %59, ptr noundef nonnull align 8 dereferenceable(10) %14, i64 10, i1 false)
  %60 = getelementptr inbounds i8, ptr %55, i64 17
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(9) %60, ptr noundef nonnull align 1 dereferenceable(9) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_info_hash, i64 9, i1 false)
  %61 = getelementptr inbounds i8, ptr %55, i64 26
  %62 = zext i32 %3 to i64
  call void @llvm.memcpy.p0.p0.i64(ptr nonnull align 2 %61, ptr align 1 %4, i64 %62, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %16, ptr noundef nonnull %14, i32 noundef 0, ptr noundef nonnull %55, i32 noundef %53) #7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, ptr noundef nonnull align 16 dereferenceable(32) %15, i64 32, i1 false)
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, ptr noundef nonnull align 16 dereferenceable(32) %16, i64 32, i1 false)
  %63 = alloca [23 x i8], align 16
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %63, align 16, !tbaa !5
  %64 = getelementptr inbounds i8, ptr %63, i64 4
  store i8 45, ptr %64, align 4, !tbaa !5
  %65 = getelementptr inbounds i8, ptr %63, i64 5
  store i8 118, ptr %65, align 1, !tbaa !5
  %66 = getelementptr inbounds i8, ptr %63, i64 6
  store i8 49, ptr %66, align 2, !tbaa !5
  %67 = getelementptr inbounds i8, ptr %63, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %67, ptr noundef nonnull align 8 dereferenceable(10) %14, i64 10, i1 false)
  %68 = getelementptr inbounds i8, ptr %63, i64 17
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(6) %68, ptr noundef nonnull align 1 dereferenceable(6) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_secret, i64 6, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %13, ptr noundef nonnull %7, i32 noundef 32, ptr noundef nonnull %63, i32 noundef 23) #7
  %69 = alloca [87 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(87) %69, i8 0, i64 87, i1 false)
  %70 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef nonnull %69, i16 noundef zeroext %70)
  %71 = getelementptr inbounds i8, ptr %69, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %71, align 2, !tbaa !5
  %72 = getelementptr inbounds i8, ptr %69, i64 6
  store i8 45, ptr %72, align 2, !tbaa !5
  %73 = getelementptr inbounds i8, ptr %69, i64 7
  store i8 118, ptr %73, align 1, !tbaa !5
  %74 = getelementptr inbounds i8, ptr %69, i64 8
  store i8 49, ptr %74, align 8, !tbaa !5
  %75 = getelementptr inbounds i8, ptr %69, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %75, ptr noundef nonnull align 8 dereferenceable(10) %14, i64 10, i1 false)
  %76 = getelementptr inbounds i8, ptr %69, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(3) %76, ptr noundef nonnull align 1 dereferenceable(3) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_exp, i64 3, i1 false)
  %77 = getelementptr inbounds i8, ptr %69, i64 22
  store i8 0, ptr %77, align 2
  %.sroa.7.0..sroa_idx = getelementptr inbounds i8, ptr %69, i64 23
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7.0..sroa_idx, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, i64 32, i1 false)
  %.sroa.8.0..sroa_idx = getelementptr inbounds i8, ptr %69, i64 55
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8.0..sroa_idx, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, i64 32, i1 false)
  %78 = getelementptr inbounds i8, ptr %0, i64 24
  %79 = load ptr, ptr %78, align 8, !tbaa !8
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %79, ptr noundef nonnull %13, i32 noundef 32, ptr noundef nonnull %69, i32 noundef 87, i32 noundef 32) #7
  %80 = alloca [87 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(87) %80, i8 0, i64 87, i1 false)
  %81 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef nonnull %80, i16 noundef zeroext %81)
  %82 = getelementptr inbounds i8, ptr %80, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %82, align 2, !tbaa !5
  %83 = getelementptr inbounds i8, ptr %80, i64 6
  store i8 45, ptr %83, align 2, !tbaa !5
  %84 = getelementptr inbounds i8, ptr %80, i64 7
  store i8 118, ptr %84, align 1, !tbaa !5
  %85 = getelementptr inbounds i8, ptr %80, i64 8
  store i8 49, ptr %85, align 8, !tbaa !5
  %86 = getelementptr inbounds i8, ptr %80, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %86, ptr noundef nonnull align 8 dereferenceable(10) %14, i64 10, i1 false)
  %87 = getelementptr inbounds i8, ptr %80, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(3) %87, ptr noundef nonnull align 1 dereferenceable(3) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_key, i64 3, i1 false)
  %88 = getelementptr inbounds i8, ptr %80, i64 22
  store i8 0, ptr %88, align 2
  %.sroa.7.0..sroa_idx82 = getelementptr inbounds i8, ptr %80, i64 23
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7.0..sroa_idx82, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, i64 32, i1 false)
  %.sroa.8.0..sroa_idx84 = getelementptr inbounds i8, ptr %80, i64 55
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8.0..sroa_idx84, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, i64 32, i1 false)
  %89 = load ptr, ptr %0, align 8, !tbaa !11
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %89, ptr noundef nonnull %13, i32 noundef 32, ptr noundef nonnull %80, i32 noundef 87, i32 noundef 32) #7
  %90 = alloca [94 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(94) %90, i8 0, i64 94, i1 false)
  %91 = call zeroext i16 @__bswap_16(i16 noundef zeroext 12)
  call void @store16(ptr noundef nonnull %90, i16 noundef zeroext %91)
  %92 = getelementptr inbounds i8, ptr %90, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %92, align 2, !tbaa !5
  %93 = getelementptr inbounds i8, ptr %90, i64 6
  store i8 45, ptr %93, align 2, !tbaa !5
  %94 = getelementptr inbounds i8, ptr %90, i64 7
  store i8 118, ptr %94, align 1, !tbaa !5
  %95 = getelementptr inbounds i8, ptr %90, i64 8
  store i8 49, ptr %95, align 8, !tbaa !5
  %96 = getelementptr inbounds i8, ptr %90, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %96, ptr noundef nonnull align 8 dereferenceable(10) %14, i64 10, i1 false)
  %97 = getelementptr inbounds i8, ptr %90, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %97, ptr noundef nonnull align 1 dereferenceable(10) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_base_nonce, i64 10, i1 false)
  %98 = getelementptr inbounds i8, ptr %90, i64 29
  store i8 0, ptr %98, align 1
  %.sroa.7.0..sroa_idx83 = getelementptr inbounds i8, ptr %90, i64 30
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 2 dereferenceable(32) %.sroa.7.0..sroa_idx83, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, i64 32, i1 false)
  %.sroa.8.0..sroa_idx85 = getelementptr inbounds i8, ptr %90, i64 62
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 2 dereferenceable(32) %.sroa.8.0..sroa_idx85, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, i64 32, i1 false)
  %99 = getelementptr inbounds i8, ptr %0, i64 8
  %100 = load ptr, ptr %99, align 8, !tbaa !12
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %100, ptr noundef nonnull %13, i32 noundef 32, ptr noundef nonnull %90, i32 noundef 94, i32 noundef 12) #7
  %101 = getelementptr inbounds i8, ptr %0, i64 16
  %102 = load ptr, ptr %101, align 8, !tbaa !13
  store i64 0, ptr %102, align 8, !tbaa !14
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %16) #7
  call void @llvm.stackrestore.p0(ptr %46)
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %15) #7
  call void @llvm.lifetime.end.p0(i64 10, ptr nonnull %14) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %13) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %.sroa.7)
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %.sroa.8)
  br label %.critedge

.critedge:                                        ; preds = %18, %21, %24
  %.0 = phi i32 [ 0, %24 ], [ 1, %21 ], [ 1, %18 ]
  call void @llvm.lifetime.end.p0(i64 130, ptr nonnull %10) #7
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %9) #7
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %8)
  br label %103

103:                                              ; preds = %5, %.critedge
  %.1 = phi i32 [ %.0, %.critedge ], [ 1, %5 ]
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %7) #7
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %6) #7
  ret i32 %.1
}

attributes #0 = { mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite) }
attributes #1 = { mustprogress nocallback nofree nounwind willreturn memory(argmem: write) }
attributes #2 = { "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #3 = { mustprogress nocallback nofree nounwind willreturn memory(argmem: readwrite) }
attributes #4 = { mustprogress nocallback nofree nosync nounwind willreturn }
attributes #5 = { inlinehint nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #6 = { nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #7 = { nounwind }

!llvm.module.flags = !{!0, !1, !2, !3}
!llvm.ident = !{!4}

!0 = !{i32 1, !"wchar_size", i32 4}
!1 = !{i32 8, !"PIC Level", i32 2}
!2 = !{i32 7, !"PIE Level", i32 2}
!3 = !{i32 7, !"uwtable", i32 2}
!4 = !{!"clang version 19.1.0 (git@github.com:llvm/llvm-project.git a4bf6cd7cfb1a1421ba92bca9d017b49936c55e4)"}
!5 = !{!6, !6, i64 0}
!6 = !{!"omnipotent char", !7, i64 0}
!7 = !{!"Simple C/C++ TBAA"}
!8 = !{!9, !10, i64 24}
!9 = !{!"Hacl_Impl_HPKE_context_s_s", !10, i64 0, !10, i64 8, !10, i64 16, !10, i64 24}
!10 = !{!"any pointer", !6, i64 0}
!11 = !{!9, !10, i64 0}
!12 = !{!9, !10, i64 8}
!13 = !{!9, !10, i64 16}
!14 = !{!15, !15, i64 0}
!15 = !{!"long", !6, i64 0}


; Effective O3 passes: CorrelatedValuePropagationPass,DSEPass,EarlyCSEPass,GlobalOptPass,IPSCCPPass,InferAlignmentPass,InferFunctionAttrsPass,InstCombinePass,MemCpyOptPass,PostOrderFunctionAttrsPass,SLPVectorizerPass,SROAPass,SimplifyCFGPass