; LLVM IR from cryspen/libcrux :: sys/hacl/c/src/msvc (Hacl_HPKE_P256_CP128_SHA256)

; Unoptimized IR (clang -disable-llvm-passes):
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

%struct.Hacl_Impl_HPKE_context_s_s = type { ptr, ptr, ptr, ptr }

@.str = external hidden unnamed_addr constant [70 x i8], align 1
@.str.1 = external hidden unnamed_addr constant [99 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_eae_prk = external hidden unnamed_addr constant [7 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_shared_secret = external hidden unnamed_addr constant [13 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_psk_id_hash = external hidden unnamed_addr constant [11 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_info_hash = external hidden unnamed_addr constant [9 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_secret = external hidden unnamed_addr constant [6 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_exp = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_key = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_base_nonce = external hidden unnamed_addr constant [10 x i8], align 1

; Function Attrs: nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.start.p0(i64 immarg, ptr nocapture) #0

; Function Attrs: nocallback nofree nounwind willreturn memory(argmem: write)
declare void @llvm.memset.p0.i64(ptr nocapture writeonly, i8, i64, i1 immarg) #1

declare zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_i(ptr noundef, ptr noundef) #2

declare zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_r(ptr noundef, ptr noundef, ptr noundef) #2

; Function Attrs: nocallback nofree nounwind willreturn memory(argmem: readwrite)
declare void @llvm.memcpy.p0.p0.i64(ptr noalias nocapture writeonly, ptr noalias nocapture readonly, i64, i1 immarg) #3

declare i32 @printf(ptr noundef, ...) #2

; Function Attrs: noreturn nounwind
declare void @exit(i32 noundef) #4

declare void @Hacl_HKDF_extract_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef) #2

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @store16(ptr noundef, i16 noundef zeroext) #5

; Function Attrs: inlinehint nounwind uwtable
declare hidden zeroext i16 @__bswap_16(i16 noundef zeroext) #5

declare void @Hacl_HKDF_expand_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef, i32 noundef) #2

; Function Attrs: nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.end.p0(i64 immarg, ptr nocapture) #0

; Function Attrs: nounwind uwtable
define dso_local i32 @Hacl_HPKE_P256_CP128_SHA256_setupBaseR(ptr noundef byval(%struct.Hacl_Impl_HPKE_context_s_s) align 8 %0, ptr noundef %1, ptr noundef %2, i32 noundef %3, ptr noundef %4) #6 {
  %6 = alloca i32, align 4
  %7 = alloca ptr, align 8
  %8 = alloca ptr, align 8
  %9 = alloca i32, align 4
  %10 = alloca ptr, align 8
  %11 = alloca [64 x i8], align 16
  %12 = alloca i8, align 1
  %13 = alloca i32, align 4
  %14 = alloca [32 x i8], align 16
  %15 = alloca ptr, align 8
  %16 = alloca [64 x i8], align 16
  %17 = alloca [64 x i8], align 16
  %18 = alloca i8, align 1
  %19 = alloca i32, align 4
  %20 = alloca i32, align 4
  %21 = alloca [130 x i8], align 16
  %22 = alloca ptr, align 8
  %23 = alloca ptr, align 8
  %24 = alloca i8, align 1
  %25 = alloca i32, align 4
  %26 = alloca ptr, align 8
  %27 = alloca [32 x i8], align 16
  %28 = alloca [5 x i8], align 1
  %29 = alloca ptr, align 8
  %30 = alloca ptr, align 8
  %31 = alloca ptr, align 8
  %32 = alloca [7 x i8], align 1
  %33 = alloca i32, align 4
  %34 = alloca ptr, align 8
  %35 = alloca ptr, align 8
  %36 = alloca [13 x i8], align 1
  %37 = alloca i32, align 4
  %38 = alloca ptr, align 8
  %39 = alloca ptr, align 8
  %40 = alloca [65 x i8], align 16
  %41 = alloca [32 x i8], align 16
  %42 = alloca [10 x i8], align 1
  %43 = alloca ptr, align 8
  %44 = alloca ptr, align 8
  %45 = alloca ptr, align 8
  %46 = alloca ptr, align 8
  %47 = alloca [11 x i8], align 1
  %48 = alloca [32 x i8], align 16
  %49 = alloca ptr, align 8
  %50 = alloca i32, align 4
  %51 = alloca ptr, align 8
  %52 = alloca ptr, align 8
  %53 = alloca [9 x i8], align 1
  %54 = alloca [32 x i8], align 16
  %55 = alloca i32, align 4
  %56 = alloca ptr, align 8
  %57 = alloca ptr, align 8
  %58 = alloca [6 x i8], align 1
  %59 = alloca i32, align 4
  %60 = alloca ptr, align 8
  %61 = alloca ptr, align 8
  %62 = alloca [3 x i8], align 1
  %63 = alloca i32, align 4
  %64 = alloca ptr, align 8
  %65 = alloca ptr, align 8
  %66 = alloca [3 x i8], align 1
  %67 = alloca i32, align 4
  %68 = alloca ptr, align 8
  %69 = alloca ptr, align 8
  %70 = alloca [10 x i8], align 1
  %71 = alloca i32, align 4
  %72 = alloca ptr, align 8
  %73 = alloca ptr, align 8
  %74 = alloca i32, align 4
  store ptr %1, ptr %7, align 8, !tbaa !5
  store ptr %2, ptr %8, align 8, !tbaa !5
  store i32 %3, ptr %9, align 4, !tbaa !9
  store ptr %4, ptr %10, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 64, ptr %11) #7
  call void @llvm.memset.p0.i64(ptr align 16 %11, i8 0, i64 64, i1 false)
  call void @llvm.lifetime.start.p0(i64 1, ptr %12) #7
  %75 = getelementptr inbounds [64 x i8], ptr %11, i64 0, i64 0
  %76 = load ptr, ptr %8, align 8, !tbaa !5
  %77 = call zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_i(ptr noundef %75, ptr noundef %76)
  %78 = zext i1 %77 to i8
  store i8 %78, ptr %12, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 4, ptr %13) #7
  %79 = load i8, ptr %12, align 1, !tbaa !11, !range !13, !noundef !14
  %80 = trunc i8 %79 to i1
  br i1 %80, label %81, label %82

81:                                               ; preds = %5
  store i32 0, ptr %13, align 4, !tbaa !9
  br label %83

82:                                               ; preds = %5
  store i32 1, ptr %13, align 4, !tbaa !9
  br label %83

83:                                               ; preds = %82, %81
  call void @llvm.lifetime.start.p0(i64 32, ptr %14) #7
  call void @llvm.memset.p0.i64(ptr align 16 %14, i8 0, i64 32, i1 false)
  %84 = load i32, ptr %13, align 4, !tbaa !9
  %85 = icmp eq i32 %84, 0
  br i1 %85, label %86, label %566

86:                                               ; preds = %83
  call void @llvm.lifetime.start.p0(i64 8, ptr %15) #7
  %87 = load ptr, ptr %7, align 8, !tbaa !5
  %88 = getelementptr inbounds i8, ptr %87, i64 1
  store ptr %88, ptr %15, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 64, ptr %16) #7
  call void @llvm.memset.p0.i64(ptr align 16 %16, i8 0, i64 64, i1 false)
  call void @llvm.lifetime.start.p0(i64 64, ptr %17) #7
  call void @llvm.memset.p0.i64(ptr align 16 %17, i8 0, i64 64, i1 false)
  call void @llvm.lifetime.start.p0(i64 1, ptr %18) #7
  %89 = getelementptr inbounds [64 x i8], ptr %17, i64 0, i64 0
  %90 = load ptr, ptr %15, align 8, !tbaa !5
  %91 = load ptr, ptr %8, align 8, !tbaa !5
  %92 = call zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_r(ptr noundef %89, ptr noundef %90, ptr noundef %91)
  %93 = zext i1 %92 to i8
  store i8 %93, ptr %18, align 1, !tbaa !11
  %94 = getelementptr inbounds [64 x i8], ptr %16, i64 0, i64 0
  %95 = getelementptr inbounds [64 x i8], ptr %17, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 16 %94, ptr align 16 %95, i64 64, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %19) #7
  %96 = load i8, ptr %18, align 1, !tbaa !11, !range !13, !noundef !14
  %97 = trunc i8 %96 to i1
  br i1 %97, label %98, label %99

98:                                               ; preds = %86
  store i32 0, ptr %19, align 4, !tbaa !9
  br label %100

99:                                               ; preds = %86
  store i32 1, ptr %19, align 4, !tbaa !9
  br label %100

100:                                              ; preds = %99, %98
  call void @llvm.lifetime.start.p0(i64 4, ptr %20) #7
  call void @llvm.lifetime.start.p0(i64 130, ptr %21) #7
  call void @llvm.memset.p0.i64(ptr align 16 %21, i8 0, i64 130, i1 false)
  %101 = load i32, ptr %19, align 4, !tbaa !9
  %102 = icmp eq i32 %101, 0
  br i1 %102, label %103, label %234

103:                                              ; preds = %100
  call void @llvm.lifetime.start.p0(i64 8, ptr %22) #7
  %104 = getelementptr inbounds [130 x i8], ptr %21, i64 0, i64 0
  %105 = getelementptr inbounds i8, ptr %104, i64 65
  store ptr %105, ptr %22, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 8, ptr %23) #7
  %106 = load ptr, ptr %22, align 8, !tbaa !5
  %107 = getelementptr inbounds i8, ptr %106, i64 1
  store ptr %107, ptr %23, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 1, ptr %24) #7
  %108 = load ptr, ptr %23, align 8, !tbaa !5
  %109 = load ptr, ptr %8, align 8, !tbaa !5
  %110 = call zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_i(ptr noundef %108, ptr noundef %109)
  %111 = zext i1 %110 to i8
  store i8 %111, ptr %24, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 4, ptr %25) #7
  %112 = load i8, ptr %24, align 1, !tbaa !11, !range !13, !noundef !14
  %113 = trunc i8 %112 to i1
  br i1 %113, label %114, label %115

114:                                              ; preds = %103
  store i32 0, ptr %25, align 4, !tbaa !9
  br label %116

115:                                              ; preds = %103
  store i32 1, ptr %25, align 4, !tbaa !9
  br label %116

116:                                              ; preds = %115, %114
  %117 = load i32, ptr %25, align 4, !tbaa !9
  %118 = icmp eq i32 %117, 0
  br i1 %118, label %119, label %232

119:                                              ; preds = %116
  %120 = getelementptr inbounds [130 x i8], ptr %21, i64 0, i64 0
  %121 = load ptr, ptr %7, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 16 %120, ptr align 1 %121, i64 65, i1 false)
  %122 = load ptr, ptr %22, align 8, !tbaa !5
  %123 = getelementptr inbounds i8, ptr %122, i64 0
  store i8 4, ptr %123, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %26) #7
  %124 = getelementptr inbounds [64 x i8], ptr %16, i64 0, i64 0
  store ptr %124, ptr %26, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 32, ptr %27) #7
  call void @llvm.memset.p0.i64(ptr align 16 %27, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 5, ptr %28) #7
  call void @llvm.memset.p0.i64(ptr align 1 %28, i8 0, i64 5, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %29) #7
  %125 = getelementptr inbounds [5 x i8], ptr %28, i64 0, i64 0
  store ptr %125, ptr %29, align 8, !tbaa !5
  %126 = load ptr, ptr %29, align 8, !tbaa !5
  %127 = getelementptr inbounds i8, ptr %126, i64 0
  store i8 75, ptr %127, align 1, !tbaa !15
  %128 = load ptr, ptr %29, align 8, !tbaa !5
  %129 = getelementptr inbounds i8, ptr %128, i64 1
  store i8 69, ptr %129, align 1, !tbaa !15
  %130 = load ptr, ptr %29, align 8, !tbaa !5
  %131 = getelementptr inbounds i8, ptr %130, i64 2
  store i8 77, ptr %131, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %30) #7
  %132 = getelementptr inbounds [5 x i8], ptr %28, i64 0, i64 0
  %133 = getelementptr inbounds i8, ptr %132, i64 3
  store ptr %133, ptr %30, align 8, !tbaa !5
  %134 = load ptr, ptr %30, align 8, !tbaa !5
  %135 = getelementptr inbounds i8, ptr %134, i64 0
  store i8 0, ptr %135, align 1, !tbaa !15
  %136 = load ptr, ptr %30, align 8, !tbaa !5
  %137 = getelementptr inbounds i8, ptr %136, i64 1
  store i8 16, ptr %137, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %31) #7
  %138 = getelementptr inbounds [5 x i8], ptr %28, i64 0, i64 0
  store ptr %138, ptr %31, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 7, ptr %32) #7
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %32, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_eae_prk, i64 7, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %33) #7
  store i32 51, ptr %33, align 4, !tbaa !9
  br label %139

139:                                              ; preds = %119
  %140 = load i32, ptr %33, align 4, !tbaa !9
  %141 = zext i32 %140 to i64
  %142 = icmp ugt i64 %141, -1
  br i1 %142, label %143, label %145

143:                                              ; preds = %139
  %144 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 349)
  call void @exit(i32 noundef 253) #8
  unreachable

145:                                              ; preds = %139
  br label %146

146:                                              ; preds = %145
  br label %147

147:                                              ; preds = %146
  call void @llvm.lifetime.start.p0(i64 8, ptr %34) #7
  %148 = load i32, ptr %33, align 4, !tbaa !9
  %149 = zext i32 %148 to i64
  %150 = mul i64 %149, 1
  %151 = alloca i8, i64 %150, align 16
  store ptr %151, ptr %34, align 8, !tbaa !5
  %152 = load ptr, ptr %34, align 8, !tbaa !5
  %153 = load i32, ptr %33, align 4, !tbaa !9
  %154 = zext i32 %153 to i64
  %155 = mul i64 %154, 1
  call void @llvm.memset.p0.i64(ptr align 1 %152, i8 0, i64 %155, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %35) #7
  %156 = load ptr, ptr %34, align 8, !tbaa !5
  store ptr %156, ptr %35, align 8, !tbaa !5
  %157 = load ptr, ptr %35, align 8, !tbaa !5
  %158 = getelementptr inbounds i8, ptr %157, i64 0
  store i8 72, ptr %158, align 1, !tbaa !15
  %159 = load ptr, ptr %35, align 8, !tbaa !5
  %160 = getelementptr inbounds i8, ptr %159, i64 1
  store i8 80, ptr %160, align 1, !tbaa !15
  %161 = load ptr, ptr %35, align 8, !tbaa !5
  %162 = getelementptr inbounds i8, ptr %161, i64 2
  store i8 75, ptr %162, align 1, !tbaa !15
  %163 = load ptr, ptr %35, align 8, !tbaa !5
  %164 = getelementptr inbounds i8, ptr %163, i64 3
  store i8 69, ptr %164, align 1, !tbaa !15
  %165 = load ptr, ptr %35, align 8, !tbaa !5
  %166 = getelementptr inbounds i8, ptr %165, i64 4
  store i8 45, ptr %166, align 1, !tbaa !15
  %167 = load ptr, ptr %35, align 8, !tbaa !5
  %168 = getelementptr inbounds i8, ptr %167, i64 5
  store i8 118, ptr %168, align 1, !tbaa !15
  %169 = load ptr, ptr %35, align 8, !tbaa !5
  %170 = getelementptr inbounds i8, ptr %169, i64 6
  store i8 49, ptr %170, align 1, !tbaa !15
  %171 = load ptr, ptr %34, align 8, !tbaa !5
  %172 = getelementptr inbounds i8, ptr %171, i64 7
  %173 = getelementptr inbounds [5 x i8], ptr %28, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %172, ptr align 1 %173, i64 5, i1 false)
  %174 = load ptr, ptr %34, align 8, !tbaa !5
  %175 = getelementptr inbounds i8, ptr %174, i64 12
  %176 = getelementptr inbounds [7 x i8], ptr %32, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %175, ptr align 1 %176, i64 7, i1 false)
  %177 = load ptr, ptr %34, align 8, !tbaa !5
  %178 = getelementptr inbounds i8, ptr %177, i64 19
  %179 = load ptr, ptr %26, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %178, ptr align 1 %179, i64 32, i1 false)
  %180 = getelementptr inbounds [32 x i8], ptr %27, i64 0, i64 0
  %181 = load ptr, ptr %31, align 8, !tbaa !5
  %182 = load ptr, ptr %34, align 8, !tbaa !5
  %183 = load i32, ptr %33, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %180, ptr noundef %181, i32 noundef 0, ptr noundef %182, i32 noundef %183)
  call void @llvm.lifetime.start.p0(i64 13, ptr %36) #7
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %36, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_shared_secret, i64 13, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %37) #7
  store i32 157, ptr %37, align 4, !tbaa !9
  br label %184

184:                                              ; preds = %147
  %185 = load i32, ptr %37, align 4, !tbaa !9
  %186 = zext i32 %185 to i64
  %187 = icmp ugt i64 %186, -1
  br i1 %187, label %188, label %190

188:                                              ; preds = %184
  %189 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 371)
  call void @exit(i32 noundef 253) #8
  unreachable

190:                                              ; preds = %184
  br label %191

191:                                              ; preds = %190
  br label %192

192:                                              ; preds = %191
  call void @llvm.lifetime.start.p0(i64 8, ptr %38) #7
  %193 = load i32, ptr %37, align 4, !tbaa !9
  %194 = zext i32 %193 to i64
  %195 = mul i64 %194, 1
  %196 = alloca i8, i64 %195, align 16
  store ptr %196, ptr %38, align 8, !tbaa !5
  %197 = load ptr, ptr %38, align 8, !tbaa !5
  %198 = load i32, ptr %37, align 4, !tbaa !9
  %199 = zext i32 %198 to i64
  %200 = mul i64 %199, 1
  call void @llvm.memset.p0.i64(ptr align 1 %197, i8 0, i64 %200, i1 false)
  %201 = load ptr, ptr %38, align 8, !tbaa !5
  %202 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef %201, i16 noundef zeroext %202)
  call void @llvm.lifetime.start.p0(i64 8, ptr %39) #7
  %203 = load ptr, ptr %38, align 8, !tbaa !5
  %204 = getelementptr inbounds i8, ptr %203, i64 2
  store ptr %204, ptr %39, align 8, !tbaa !5
  %205 = load ptr, ptr %39, align 8, !tbaa !5
  %206 = getelementptr inbounds i8, ptr %205, i64 0
  store i8 72, ptr %206, align 1, !tbaa !15
  %207 = load ptr, ptr %39, align 8, !tbaa !5
  %208 = getelementptr inbounds i8, ptr %207, i64 1
  store i8 80, ptr %208, align 1, !tbaa !15
  %209 = load ptr, ptr %39, align 8, !tbaa !5
  %210 = getelementptr inbounds i8, ptr %209, i64 2
  store i8 75, ptr %210, align 1, !tbaa !15
  %211 = load ptr, ptr %39, align 8, !tbaa !5
  %212 = getelementptr inbounds i8, ptr %211, i64 3
  store i8 69, ptr %212, align 1, !tbaa !15
  %213 = load ptr, ptr %39, align 8, !tbaa !5
  %214 = getelementptr inbounds i8, ptr %213, i64 4
  store i8 45, ptr %214, align 1, !tbaa !15
  %215 = load ptr, ptr %39, align 8, !tbaa !5
  %216 = getelementptr inbounds i8, ptr %215, i64 5
  store i8 118, ptr %216, align 1, !tbaa !15
  %217 = load ptr, ptr %39, align 8, !tbaa !5
  %218 = getelementptr inbounds i8, ptr %217, i64 6
  store i8 49, ptr %218, align 1, !tbaa !15
  %219 = load ptr, ptr %38, align 8, !tbaa !5
  %220 = getelementptr inbounds i8, ptr %219, i64 9
  %221 = getelementptr inbounds [5 x i8], ptr %28, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %220, ptr align 1 %221, i64 5, i1 false)
  %222 = load ptr, ptr %38, align 8, !tbaa !5
  %223 = getelementptr inbounds i8, ptr %222, i64 14
  %224 = getelementptr inbounds [13 x i8], ptr %36, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %223, ptr align 1 %224, i64 13, i1 false)
  %225 = load ptr, ptr %38, align 8, !tbaa !5
  %226 = getelementptr inbounds i8, ptr %225, i64 27
  %227 = getelementptr inbounds [130 x i8], ptr %21, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %226, ptr align 16 %227, i64 130, i1 false)
  %228 = getelementptr inbounds [32 x i8], ptr %14, i64 0, i64 0
  %229 = getelementptr inbounds [32 x i8], ptr %27, i64 0, i64 0
  %230 = load ptr, ptr %38, align 8, !tbaa !5
  %231 = load i32, ptr %37, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %228, ptr noundef %229, i32 noundef 32, ptr noundef %230, i32 noundef %231, i32 noundef 32)
  store i32 0, ptr %20, align 4, !tbaa !9
  call void @llvm.lifetime.end.p0(i64 8, ptr %39) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %38) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %37) #7
  call void @llvm.lifetime.end.p0(i64 13, ptr %36) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %35) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %34) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %33) #7
  call void @llvm.lifetime.end.p0(i64 7, ptr %32) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %31) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %30) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %29) #7
  call void @llvm.lifetime.end.p0(i64 5, ptr %28) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr %27) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %26) #7
  br label %233

232:                                              ; preds = %116
  store i32 1, ptr %20, align 4, !tbaa !9
  br label %233

233:                                              ; preds = %232, %192
  call void @llvm.lifetime.end.p0(i64 4, ptr %25) #7
  call void @llvm.lifetime.end.p0(i64 1, ptr %24) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %23) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %22) #7
  br label %235

234:                                              ; preds = %100
  store i32 1, ptr %20, align 4, !tbaa !9
  br label %235

235:                                              ; preds = %234, %233
  %236 = load i32, ptr %20, align 4, !tbaa !9
  %237 = icmp eq i32 %236, 0
  br i1 %237, label %238, label %564

238:                                              ; preds = %235
  call void @llvm.lifetime.start.p0(i64 65, ptr %40) #7
  call void @llvm.memset.p0.i64(ptr align 16 %40, i8 0, i64 65, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr %41) #7
  call void @llvm.memset.p0.i64(ptr align 16 %41, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 10, ptr %42) #7
  call void @llvm.memset.p0.i64(ptr align 1 %42, i8 0, i64 10, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %43) #7
  %239 = getelementptr inbounds [10 x i8], ptr %42, i64 0, i64 0
  store ptr %239, ptr %43, align 8, !tbaa !5
  %240 = load ptr, ptr %43, align 8, !tbaa !5
  %241 = getelementptr inbounds i8, ptr %240, i64 0
  store i8 72, ptr %241, align 1, !tbaa !15
  %242 = load ptr, ptr %43, align 8, !tbaa !5
  %243 = getelementptr inbounds i8, ptr %242, i64 1
  store i8 80, ptr %243, align 1, !tbaa !15
  %244 = load ptr, ptr %43, align 8, !tbaa !5
  %245 = getelementptr inbounds i8, ptr %244, i64 2
  store i8 75, ptr %245, align 1, !tbaa !15
  %246 = load ptr, ptr %43, align 8, !tbaa !5
  %247 = getelementptr inbounds i8, ptr %246, i64 3
  store i8 69, ptr %247, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %44) #7
  %248 = getelementptr inbounds [10 x i8], ptr %42, i64 0, i64 0
  %249 = getelementptr inbounds i8, ptr %248, i64 4
  store ptr %249, ptr %44, align 8, !tbaa !5
  %250 = load ptr, ptr %44, align 8, !tbaa !5
  %251 = getelementptr inbounds i8, ptr %250, i64 0
  store i8 0, ptr %251, align 1, !tbaa !15
  %252 = load ptr, ptr %44, align 8, !tbaa !5
  %253 = getelementptr inbounds i8, ptr %252, i64 1
  store i8 16, ptr %253, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %45) #7
  %254 = getelementptr inbounds [10 x i8], ptr %42, i64 0, i64 0
  %255 = getelementptr inbounds i8, ptr %254, i64 6
  store ptr %255, ptr %45, align 8, !tbaa !5
  %256 = load ptr, ptr %45, align 8, !tbaa !5
  %257 = getelementptr inbounds i8, ptr %256, i64 0
  store i8 0, ptr %257, align 1, !tbaa !15
  %258 = load ptr, ptr %45, align 8, !tbaa !5
  %259 = getelementptr inbounds i8, ptr %258, i64 1
  store i8 1, ptr %259, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %46) #7
  %260 = getelementptr inbounds [10 x i8], ptr %42, i64 0, i64 0
  %261 = getelementptr inbounds i8, ptr %260, i64 8
  store ptr %261, ptr %46, align 8, !tbaa !5
  %262 = load ptr, ptr %46, align 8, !tbaa !5
  %263 = getelementptr inbounds i8, ptr %262, i64 0
  store i8 0, ptr %263, align 1, !tbaa !15
  %264 = load ptr, ptr %46, align 8, !tbaa !5
  %265 = getelementptr inbounds i8, ptr %264, i64 1
  store i8 3, ptr %265, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 11, ptr %47) #7
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %47, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_psk_id_hash, i64 11, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr %48) #7
  call void @llvm.memset.p0.i64(ptr align 16 %48, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %49) #7
  %266 = getelementptr inbounds [10 x i8], ptr %42, i64 0, i64 0
  store ptr %266, ptr %49, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 4, ptr %50) #7
  store i32 28, ptr %50, align 4, !tbaa !9
  br label %267

267:                                              ; preds = %238
  %268 = load i32, ptr %50, align 4, !tbaa !9
  %269 = zext i32 %268 to i64
  %270 = icmp ugt i64 %269, -1
  br i1 %270, label %271, label %273

271:                                              ; preds = %267
  %272 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 423)
  call void @exit(i32 noundef 253) #8
  unreachable

273:                                              ; preds = %267
  br label %274

274:                                              ; preds = %273
  br label %275

275:                                              ; preds = %274
  call void @llvm.lifetime.start.p0(i64 8, ptr %51) #7
  %276 = load i32, ptr %50, align 4, !tbaa !9
  %277 = zext i32 %276 to i64
  %278 = mul i64 %277, 1
  %279 = alloca i8, i64 %278, align 16
  store ptr %279, ptr %51, align 8, !tbaa !5
  %280 = load ptr, ptr %51, align 8, !tbaa !5
  %281 = load i32, ptr %50, align 4, !tbaa !9
  %282 = zext i32 %281 to i64
  %283 = mul i64 %282, 1
  call void @llvm.memset.p0.i64(ptr align 1 %280, i8 0, i64 %283, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %52) #7
  %284 = load ptr, ptr %51, align 8, !tbaa !5
  store ptr %284, ptr %52, align 8, !tbaa !5
  %285 = load ptr, ptr %52, align 8, !tbaa !5
  %286 = getelementptr inbounds i8, ptr %285, i64 0
  store i8 72, ptr %286, align 1, !tbaa !15
  %287 = load ptr, ptr %52, align 8, !tbaa !5
  %288 = getelementptr inbounds i8, ptr %287, i64 1
  store i8 80, ptr %288, align 1, !tbaa !15
  %289 = load ptr, ptr %52, align 8, !tbaa !5
  %290 = getelementptr inbounds i8, ptr %289, i64 2
  store i8 75, ptr %290, align 1, !tbaa !15
  %291 = load ptr, ptr %52, align 8, !tbaa !5
  %292 = getelementptr inbounds i8, ptr %291, i64 3
  store i8 69, ptr %292, align 1, !tbaa !15
  %293 = load ptr, ptr %52, align 8, !tbaa !5
  %294 = getelementptr inbounds i8, ptr %293, i64 4
  store i8 45, ptr %294, align 1, !tbaa !15
  %295 = load ptr, ptr %52, align 8, !tbaa !5
  %296 = getelementptr inbounds i8, ptr %295, i64 5
  store i8 118, ptr %296, align 1, !tbaa !15
  %297 = load ptr, ptr %52, align 8, !tbaa !5
  %298 = getelementptr inbounds i8, ptr %297, i64 6
  store i8 49, ptr %298, align 1, !tbaa !15
  %299 = load ptr, ptr %51, align 8, !tbaa !5
  %300 = getelementptr inbounds i8, ptr %299, i64 7
  %301 = getelementptr inbounds [10 x i8], ptr %42, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %300, ptr align 1 %301, i64 10, i1 false)
  %302 = load ptr, ptr %51, align 8, !tbaa !5
  %303 = getelementptr inbounds i8, ptr %302, i64 17
  %304 = getelementptr inbounds [11 x i8], ptr %47, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %303, ptr align 1 %304, i64 11, i1 false)
  %305 = load ptr, ptr %51, align 8, !tbaa !5
  %306 = getelementptr inbounds i8, ptr %305, i64 28
  %307 = load ptr, ptr %49, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %306, ptr align 1 %307, i64 0, i1 false)
  %308 = getelementptr inbounds [32 x i8], ptr %48, i64 0, i64 0
  %309 = load ptr, ptr %49, align 8, !tbaa !5
  %310 = load ptr, ptr %51, align 8, !tbaa !5
  %311 = load i32, ptr %50, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %308, ptr noundef %309, i32 noundef 0, ptr noundef %310, i32 noundef %311)
  call void @llvm.lifetime.start.p0(i64 9, ptr %53) #7
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %53, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_info_hash, i64 9, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr %54) #7
  call void @llvm.memset.p0.i64(ptr align 16 %54, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %55) #7
  %312 = load i32, ptr %9, align 4, !tbaa !9
  %313 = add i32 26, %312
  store i32 %313, ptr %55, align 4, !tbaa !9
  br label %314

314:                                              ; preds = %275
  %315 = load i32, ptr %55, align 4, !tbaa !9
  %316 = zext i32 %315 to i64
  %317 = icmp ugt i64 %316, -1
  br i1 %317, label %318, label %320

318:                                              ; preds = %314
  %319 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 442)
  call void @exit(i32 noundef 253) #8
  unreachable

320:                                              ; preds = %314
  br label %321

321:                                              ; preds = %320
  br label %322

322:                                              ; preds = %321
  call void @llvm.lifetime.start.p0(i64 8, ptr %56) #7
  %323 = load i32, ptr %55, align 4, !tbaa !9
  %324 = zext i32 %323 to i64
  %325 = mul i64 %324, 1
  %326 = alloca i8, i64 %325, align 16
  store ptr %326, ptr %56, align 8, !tbaa !5
  %327 = load ptr, ptr %56, align 8, !tbaa !5
  %328 = load i32, ptr %55, align 4, !tbaa !9
  %329 = zext i32 %328 to i64
  %330 = mul i64 %329, 1
  call void @llvm.memset.p0.i64(ptr align 1 %327, i8 0, i64 %330, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %57) #7
  %331 = load ptr, ptr %56, align 8, !tbaa !5
  store ptr %331, ptr %57, align 8, !tbaa !5
  %332 = load ptr, ptr %57, align 8, !tbaa !5
  %333 = getelementptr inbounds i8, ptr %332, i64 0
  store i8 72, ptr %333, align 1, !tbaa !15
  %334 = load ptr, ptr %57, align 8, !tbaa !5
  %335 = getelementptr inbounds i8, ptr %334, i64 1
  store i8 80, ptr %335, align 1, !tbaa !15
  %336 = load ptr, ptr %57, align 8, !tbaa !5
  %337 = getelementptr inbounds i8, ptr %336, i64 2
  store i8 75, ptr %337, align 1, !tbaa !15
  %338 = load ptr, ptr %57, align 8, !tbaa !5
  %339 = getelementptr inbounds i8, ptr %338, i64 3
  store i8 69, ptr %339, align 1, !tbaa !15
  %340 = load ptr, ptr %57, align 8, !tbaa !5
  %341 = getelementptr inbounds i8, ptr %340, i64 4
  store i8 45, ptr %341, align 1, !tbaa !15
  %342 = load ptr, ptr %57, align 8, !tbaa !5
  %343 = getelementptr inbounds i8, ptr %342, i64 5
  store i8 118, ptr %343, align 1, !tbaa !15
  %344 = load ptr, ptr %57, align 8, !tbaa !5
  %345 = getelementptr inbounds i8, ptr %344, i64 6
  store i8 49, ptr %345, align 1, !tbaa !15
  %346 = load ptr, ptr %56, align 8, !tbaa !5
  %347 = getelementptr inbounds i8, ptr %346, i64 7
  %348 = getelementptr inbounds [10 x i8], ptr %42, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %347, ptr align 1 %348, i64 10, i1 false)
  %349 = load ptr, ptr %56, align 8, !tbaa !5
  %350 = getelementptr inbounds i8, ptr %349, i64 17
  %351 = getelementptr inbounds [9 x i8], ptr %53, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %350, ptr align 1 %351, i64 9, i1 false)
  %352 = load ptr, ptr %56, align 8, !tbaa !5
  %353 = getelementptr inbounds i8, ptr %352, i64 26
  %354 = load ptr, ptr %10, align 8, !tbaa !5
  %355 = load i32, ptr %9, align 4, !tbaa !9
  %356 = zext i32 %355 to i64
  %357 = mul i64 %356, 1
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %353, ptr align 1 %354, i64 %357, i1 false)
  %358 = getelementptr inbounds [32 x i8], ptr %54, i64 0, i64 0
  %359 = load ptr, ptr %49, align 8, !tbaa !5
  %360 = load ptr, ptr %56, align 8, !tbaa !5
  %361 = load i32, ptr %55, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %358, ptr noundef %359, i32 noundef 0, ptr noundef %360, i32 noundef %361)
  %362 = getelementptr inbounds [65 x i8], ptr %40, i64 0, i64 0
  store i8 0, ptr %362, align 16, !tbaa !15
  %363 = getelementptr inbounds [65 x i8], ptr %40, i64 0, i64 0
  %364 = getelementptr inbounds i8, ptr %363, i64 1
  %365 = getelementptr inbounds [32 x i8], ptr %48, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %364, ptr align 16 %365, i64 32, i1 false)
  %366 = getelementptr inbounds [65 x i8], ptr %40, i64 0, i64 0
  %367 = getelementptr inbounds i8, ptr %366, i64 33
  %368 = getelementptr inbounds [32 x i8], ptr %54, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %367, ptr align 16 %368, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 6, ptr %58) #7
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %58, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_secret, i64 6, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %59) #7
  store i32 23, ptr %59, align 4, !tbaa !9
  br label %369

369:                                              ; preds = %322
  %370 = load i32, ptr %59, align 4, !tbaa !9
  %371 = zext i32 %370 to i64
  %372 = icmp ugt i64 %371, -1
  br i1 %372, label %373, label %375

373:                                              ; preds = %369
  %374 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 462)
  call void @exit(i32 noundef 253) #8
  unreachable

375:                                              ; preds = %369
  br label %376

376:                                              ; preds = %375
  br label %377

377:                                              ; preds = %376
  call void @llvm.lifetime.start.p0(i64 8, ptr %60) #7
  %378 = load i32, ptr %59, align 4, !tbaa !9
  %379 = zext i32 %378 to i64
  %380 = mul i64 %379, 1
  %381 = alloca i8, i64 %380, align 16
  store ptr %381, ptr %60, align 8, !tbaa !5
  %382 = load ptr, ptr %60, align 8, !tbaa !5
  %383 = load i32, ptr %59, align 4, !tbaa !9
  %384 = zext i32 %383 to i64
  %385 = mul i64 %384, 1
  call void @llvm.memset.p0.i64(ptr align 1 %382, i8 0, i64 %385, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %61) #7
  %386 = load ptr, ptr %60, align 8, !tbaa !5
  store ptr %386, ptr %61, align 8, !tbaa !5
  %387 = load ptr, ptr %61, align 8, !tbaa !5
  %388 = getelementptr inbounds i8, ptr %387, i64 0
  store i8 72, ptr %388, align 1, !tbaa !15
  %389 = load ptr, ptr %61, align 8, !tbaa !5
  %390 = getelementptr inbounds i8, ptr %389, i64 1
  store i8 80, ptr %390, align 1, !tbaa !15
  %391 = load ptr, ptr %61, align 8, !tbaa !5
  %392 = getelementptr inbounds i8, ptr %391, i64 2
  store i8 75, ptr %392, align 1, !tbaa !15
  %393 = load ptr, ptr %61, align 8, !tbaa !5
  %394 = getelementptr inbounds i8, ptr %393, i64 3
  store i8 69, ptr %394, align 1, !tbaa !15
  %395 = load ptr, ptr %61, align 8, !tbaa !5
  %396 = getelementptr inbounds i8, ptr %395, i64 4
  store i8 45, ptr %396, align 1, !tbaa !15
  %397 = load ptr, ptr %61, align 8, !tbaa !5
  %398 = getelementptr inbounds i8, ptr %397, i64 5
  store i8 118, ptr %398, align 1, !tbaa !15
  %399 = load ptr, ptr %61, align 8, !tbaa !5
  %400 = getelementptr inbounds i8, ptr %399, i64 6
  store i8 49, ptr %400, align 1, !tbaa !15
  %401 = load ptr, ptr %60, align 8, !tbaa !5
  %402 = getelementptr inbounds i8, ptr %401, i64 7
  %403 = getelementptr inbounds [10 x i8], ptr %42, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %402, ptr align 1 %403, i64 10, i1 false)
  %404 = load ptr, ptr %60, align 8, !tbaa !5
  %405 = getelementptr inbounds i8, ptr %404, i64 17
  %406 = getelementptr inbounds [6 x i8], ptr %58, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %405, ptr align 1 %406, i64 6, i1 false)
  %407 = load ptr, ptr %60, align 8, !tbaa !5
  %408 = getelementptr inbounds i8, ptr %407, i64 23
  %409 = load ptr, ptr %49, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %408, ptr align 1 %409, i64 0, i1 false)
  %410 = getelementptr inbounds [32 x i8], ptr %41, i64 0, i64 0
  %411 = getelementptr inbounds [32 x i8], ptr %14, i64 0, i64 0
  %412 = load ptr, ptr %60, align 8, !tbaa !5
  %413 = load i32, ptr %59, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %410, ptr noundef %411, i32 noundef 32, ptr noundef %412, i32 noundef %413)
  call void @llvm.lifetime.start.p0(i64 3, ptr %62) #7
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %62, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_exp, i64 3, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %63) #7
  store i32 87, ptr %63, align 4, !tbaa !9
  br label %414

414:                                              ; preds = %377
  %415 = load i32, ptr %63, align 4, !tbaa !9
  %416 = zext i32 %415 to i64
  %417 = icmp ugt i64 %416, -1
  br i1 %417, label %418, label %420

418:                                              ; preds = %414
  %419 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 479)
  call void @exit(i32 noundef 253) #8
  unreachable

420:                                              ; preds = %414
  br label %421

421:                                              ; preds = %420
  br label %422

422:                                              ; preds = %421
  call void @llvm.lifetime.start.p0(i64 8, ptr %64) #7
  %423 = load i32, ptr %63, align 4, !tbaa !9
  %424 = zext i32 %423 to i64
  %425 = mul i64 %424, 1
  %426 = alloca i8, i64 %425, align 16
  store ptr %426, ptr %64, align 8, !tbaa !5
  %427 = load ptr, ptr %64, align 8, !tbaa !5
  %428 = load i32, ptr %63, align 4, !tbaa !9
  %429 = zext i32 %428 to i64
  %430 = mul i64 %429, 1
  call void @llvm.memset.p0.i64(ptr align 1 %427, i8 0, i64 %430, i1 false)
  %431 = load ptr, ptr %64, align 8, !tbaa !5
  %432 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef %431, i16 noundef zeroext %432)
  call void @llvm.lifetime.start.p0(i64 8, ptr %65) #7
  %433 = load ptr, ptr %64, align 8, !tbaa !5
  %434 = getelementptr inbounds i8, ptr %433, i64 2
  store ptr %434, ptr %65, align 8, !tbaa !5
  %435 = load ptr, ptr %65, align 8, !tbaa !5
  %436 = getelementptr inbounds i8, ptr %435, i64 0
  store i8 72, ptr %436, align 1, !tbaa !15
  %437 = load ptr, ptr %65, align 8, !tbaa !5
  %438 = getelementptr inbounds i8, ptr %437, i64 1
  store i8 80, ptr %438, align 1, !tbaa !15
  %439 = load ptr, ptr %65, align 8, !tbaa !5
  %440 = getelementptr inbounds i8, ptr %439, i64 2
  store i8 75, ptr %440, align 1, !tbaa !15
  %441 = load ptr, ptr %65, align 8, !tbaa !5
  %442 = getelementptr inbounds i8, ptr %441, i64 3
  store i8 69, ptr %442, align 1, !tbaa !15
  %443 = load ptr, ptr %65, align 8, !tbaa !5
  %444 = getelementptr inbounds i8, ptr %443, i64 4
  store i8 45, ptr %444, align 1, !tbaa !15
  %445 = load ptr, ptr %65, align 8, !tbaa !5
  %446 = getelementptr inbounds i8, ptr %445, i64 5
  store i8 118, ptr %446, align 1, !tbaa !15
  %447 = load ptr, ptr %65, align 8, !tbaa !5
  %448 = getelementptr inbounds i8, ptr %447, i64 6
  store i8 49, ptr %448, align 1, !tbaa !15
  %449 = load ptr, ptr %64, align 8, !tbaa !5
  %450 = getelementptr inbounds i8, ptr %449, i64 9
  %451 = getelementptr inbounds [10 x i8], ptr %42, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %450, ptr align 1 %451, i64 10, i1 false)
  %452 = load ptr, ptr %64, align 8, !tbaa !5
  %453 = getelementptr inbounds i8, ptr %452, i64 19
  %454 = getelementptr inbounds [3 x i8], ptr %62, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %453, ptr align 1 %454, i64 3, i1 false)
  %455 = load ptr, ptr %64, align 8, !tbaa !5
  %456 = getelementptr inbounds i8, ptr %455, i64 22
  %457 = getelementptr inbounds [65 x i8], ptr %40, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %456, ptr align 16 %457, i64 65, i1 false)
  %458 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %0, i32 0, i32 3
  %459 = load ptr, ptr %458, align 8, !tbaa !16
  %460 = getelementptr inbounds [32 x i8], ptr %41, i64 0, i64 0
  %461 = load ptr, ptr %64, align 8, !tbaa !5
  %462 = load i32, ptr %63, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %459, ptr noundef %460, i32 noundef 32, ptr noundef %461, i32 noundef %462, i32 noundef 32)
  call void @llvm.lifetime.start.p0(i64 3, ptr %66) #7
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %66, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_key, i64 3, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %67) #7
  store i32 87, ptr %67, align 4, !tbaa !9
  br label %463

463:                                              ; preds = %422
  %464 = load i32, ptr %67, align 4, !tbaa !9
  %465 = zext i32 %464 to i64
  %466 = icmp ugt i64 %465, -1
  br i1 %466, label %467, label %469

467:                                              ; preds = %463
  %468 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 497)
  call void @exit(i32 noundef 253) #8
  unreachable

469:                                              ; preds = %463
  br label %470

470:                                              ; preds = %469
  br label %471

471:                                              ; preds = %470
  call void @llvm.lifetime.start.p0(i64 8, ptr %68) #7
  %472 = load i32, ptr %67, align 4, !tbaa !9
  %473 = zext i32 %472 to i64
  %474 = mul i64 %473, 1
  %475 = alloca i8, i64 %474, align 16
  store ptr %475, ptr %68, align 8, !tbaa !5
  %476 = load ptr, ptr %68, align 8, !tbaa !5
  %477 = load i32, ptr %67, align 4, !tbaa !9
  %478 = zext i32 %477 to i64
  %479 = mul i64 %478, 1
  call void @llvm.memset.p0.i64(ptr align 1 %476, i8 0, i64 %479, i1 false)
  %480 = load ptr, ptr %68, align 8, !tbaa !5
  %481 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef %480, i16 noundef zeroext %481)
  call void @llvm.lifetime.start.p0(i64 8, ptr %69) #7
  %482 = load ptr, ptr %68, align 8, !tbaa !5
  %483 = getelementptr inbounds i8, ptr %482, i64 2
  store ptr %483, ptr %69, align 8, !tbaa !5
  %484 = load ptr, ptr %69, align 8, !tbaa !5
  %485 = getelementptr inbounds i8, ptr %484, i64 0
  store i8 72, ptr %485, align 1, !tbaa !15
  %486 = load ptr, ptr %69, align 8, !tbaa !5
  %487 = getelementptr inbounds i8, ptr %486, i64 1
  store i8 80, ptr %487, align 1, !tbaa !15
  %488 = load ptr, ptr %69, align 8, !tbaa !5
  %489 = getelementptr inbounds i8, ptr %488, i64 2
  store i8 75, ptr %489, align 1, !tbaa !15
  %490 = load ptr, ptr %69, align 8, !tbaa !5
  %491 = getelementptr inbounds i8, ptr %490, i64 3
  store i8 69, ptr %491, align 1, !tbaa !15
  %492 = load ptr, ptr %69, align 8, !tbaa !5
  %493 = getelementptr inbounds i8, ptr %492, i64 4
  store i8 45, ptr %493, align 1, !tbaa !15
  %494 = load ptr, ptr %69, align 8, !tbaa !5
  %495 = getelementptr inbounds i8, ptr %494, i64 5
  store i8 118, ptr %495, align 1, !tbaa !15
  %496 = load ptr, ptr %69, align 8, !tbaa !5
  %497 = getelementptr inbounds i8, ptr %496, i64 6
  store i8 49, ptr %497, align 1, !tbaa !15
  %498 = load ptr, ptr %68, align 8, !tbaa !5
  %499 = getelementptr inbounds i8, ptr %498, i64 9
  %500 = getelementptr inbounds [10 x i8], ptr %42, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %499, ptr align 1 %500, i64 10, i1 false)
  %501 = load ptr, ptr %68, align 8, !tbaa !5
  %502 = getelementptr inbounds i8, ptr %501, i64 19
  %503 = getelementptr inbounds [3 x i8], ptr %66, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %502, ptr align 1 %503, i64 3, i1 false)
  %504 = load ptr, ptr %68, align 8, !tbaa !5
  %505 = getelementptr inbounds i8, ptr %504, i64 22
  %506 = getelementptr inbounds [65 x i8], ptr %40, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %505, ptr align 16 %506, i64 65, i1 false)
  %507 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %0, i32 0, i32 0
  %508 = load ptr, ptr %507, align 8, !tbaa !18
  %509 = getelementptr inbounds [32 x i8], ptr %41, i64 0, i64 0
  %510 = load ptr, ptr %68, align 8, !tbaa !5
  %511 = load i32, ptr %67, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %508, ptr noundef %509, i32 noundef 32, ptr noundef %510, i32 noundef %511, i32 noundef 32)
  call void @llvm.lifetime.start.p0(i64 10, ptr %70) #7
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %70, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_base_nonce, i64 10, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %71) #7
  store i32 94, ptr %71, align 4, !tbaa !9
  br label %512

512:                                              ; preds = %471
  %513 = load i32, ptr %71, align 4, !tbaa !9
  %514 = zext i32 %513 to i64
  %515 = icmp ugt i64 %514, -1
  br i1 %515, label %516, label %518

516:                                              ; preds = %512
  %517 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 517)
  call void @exit(i32 noundef 253) #8
  unreachable

518:                                              ; preds = %512
  br label %519

519:                                              ; preds = %518
  br label %520

520:                                              ; preds = %519
  call void @llvm.lifetime.start.p0(i64 8, ptr %72) #7
  %521 = load i32, ptr %71, align 4, !tbaa !9
  %522 = zext i32 %521 to i64
  %523 = mul i64 %522, 1
  %524 = alloca i8, i64 %523, align 16
  store ptr %524, ptr %72, align 8, !tbaa !5
  %525 = load ptr, ptr %72, align 8, !tbaa !5
  %526 = load i32, ptr %71, align 4, !tbaa !9
  %527 = zext i32 %526 to i64
  %528 = mul i64 %527, 1
  call void @llvm.memset.p0.i64(ptr align 1 %525, i8 0, i64 %528, i1 false)
  %529 = load ptr, ptr %72, align 8, !tbaa !5
  %530 = call zeroext i16 @__bswap_16(i16 noundef zeroext 12)
  call void @store16(ptr noundef %529, i16 noundef zeroext %530)
  call void @llvm.lifetime.start.p0(i64 8, ptr %73) #7
  %531 = load ptr, ptr %72, align 8, !tbaa !5
  %532 = getelementptr inbounds i8, ptr %531, i64 2
  store ptr %532, ptr %73, align 8, !tbaa !5
  %533 = load ptr, ptr %73, align 8, !tbaa !5
  %534 = getelementptr inbounds i8, ptr %533, i64 0
  store i8 72, ptr %534, align 1, !tbaa !15
  %535 = load ptr, ptr %73, align 8, !tbaa !5
  %536 = getelementptr inbounds i8, ptr %535, i64 1
  store i8 80, ptr %536, align 1, !tbaa !15
  %537 = load ptr, ptr %73, align 8, !tbaa !5
  %538 = getelementptr inbounds i8, ptr %537, i64 2
  store i8 75, ptr %538, align 1, !tbaa !15
  %539 = load ptr, ptr %73, align 8, !tbaa !5
  %540 = getelementptr inbounds i8, ptr %539, i64 3
  store i8 69, ptr %540, align 1, !tbaa !15
  %541 = load ptr, ptr %73, align 8, !tbaa !5
  %542 = getelementptr inbounds i8, ptr %541, i64 4
  store i8 45, ptr %542, align 1, !tbaa !15
  %543 = load ptr, ptr %73, align 8, !tbaa !5
  %544 = getelementptr inbounds i8, ptr %543, i64 5
  store i8 118, ptr %544, align 1, !tbaa !15
  %545 = load ptr, ptr %73, align 8, !tbaa !5
  %546 = getelementptr inbounds i8, ptr %545, i64 6
  store i8 49, ptr %546, align 1, !tbaa !15
  %547 = load ptr, ptr %72, align 8, !tbaa !5
  %548 = getelementptr inbounds i8, ptr %547, i64 9
  %549 = getelementptr inbounds [10 x i8], ptr %42, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %548, ptr align 1 %549, i64 10, i1 false)
  %550 = load ptr, ptr %72, align 8, !tbaa !5
  %551 = getelementptr inbounds i8, ptr %550, i64 19
  %552 = getelementptr inbounds [10 x i8], ptr %70, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %551, ptr align 1 %552, i64 10, i1 false)
  %553 = load ptr, ptr %72, align 8, !tbaa !5
  %554 = getelementptr inbounds i8, ptr %553, i64 29
  %555 = getelementptr inbounds [65 x i8], ptr %40, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %554, ptr align 16 %555, i64 65, i1 false)
  %556 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %0, i32 0, i32 1
  %557 = load ptr, ptr %556, align 8, !tbaa !19
  %558 = getelementptr inbounds [32 x i8], ptr %41, i64 0, i64 0
  %559 = load ptr, ptr %72, align 8, !tbaa !5
  %560 = load i32, ptr %71, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %557, ptr noundef %558, i32 noundef 32, ptr noundef %559, i32 noundef %560, i32 noundef 12)
  %561 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %0, i32 0, i32 2
  %562 = load ptr, ptr %561, align 8, !tbaa !20
  %563 = getelementptr inbounds i64, ptr %562, i64 0
  store i64 0, ptr %563, align 8, !tbaa !21
  store i32 0, ptr %6, align 4
  store i32 1, ptr %74, align 4
  call void @llvm.lifetime.end.p0(i64 8, ptr %73) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %72) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %71) #7
  call void @llvm.lifetime.end.p0(i64 10, ptr %70) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %69) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %68) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %67) #7
  call void @llvm.lifetime.end.p0(i64 3, ptr %66) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %65) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %64) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %63) #7
  call void @llvm.lifetime.end.p0(i64 3, ptr %62) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %61) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %60) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %59) #7
  call void @llvm.lifetime.end.p0(i64 6, ptr %58) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %57) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %56) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %55) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr %54) #7
  call void @llvm.lifetime.end.p0(i64 9, ptr %53) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %52) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %51) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %50) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %49) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr %48) #7
  call void @llvm.lifetime.end.p0(i64 11, ptr %47) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %46) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %45) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %44) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %43) #7
  call void @llvm.lifetime.end.p0(i64 10, ptr %42) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr %41) #7
  call void @llvm.lifetime.end.p0(i64 65, ptr %40) #7
  br label %565

564:                                              ; preds = %235
  store i32 1, ptr %6, align 4
  store i32 1, ptr %74, align 4
  br label %565

565:                                              ; preds = %564, %520
  call void @llvm.lifetime.end.p0(i64 130, ptr %21) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %20) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %19) #7
  call void @llvm.lifetime.end.p0(i64 1, ptr %18) #7
  call void @llvm.lifetime.end.p0(i64 64, ptr %17) #7
  call void @llvm.lifetime.end.p0(i64 64, ptr %16) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %15) #7
  br label %567

566:                                              ; preds = %83
  store i32 1, ptr %6, align 4
  store i32 1, ptr %74, align 4
  br label %567

567:                                              ; preds = %566, %565
  call void @llvm.lifetime.end.p0(i64 32, ptr %14) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %13) #7
  call void @llvm.lifetime.end.p0(i64 1, ptr %12) #7
  call void @llvm.lifetime.end.p0(i64 64, ptr %11) #7
  %568 = load i32, ptr %6, align 4
  ret i32 %568
}

attributes #0 = { nocallback nofree nosync nounwind willreturn memory(argmem: readwrite) }
attributes #1 = { nocallback nofree nounwind willreturn memory(argmem: write) }
attributes #2 = { "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #3 = { nocallback nofree nounwind willreturn memory(argmem: readwrite) }
attributes #4 = { noreturn nounwind "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #5 = { inlinehint nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #6 = { nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #7 = { nounwind }
attributes #8 = { noreturn nounwind }

!llvm.module.flags = !{!0, !1, !2, !3}
!llvm.ident = !{!4}

!0 = !{i32 1, !"wchar_size", i32 4}
!1 = !{i32 8, !"PIC Level", i32 2}
!2 = !{i32 7, !"PIE Level", i32 2}
!3 = !{i32 7, !"uwtable", i32 2}
!4 = !{!"clang version 19.1.0 (git@github.com:llvm/llvm-project.git a4bf6cd7cfb1a1421ba92bca9d017b49936c55e4)"}
!5 = !{!6, !6, i64 0}
!6 = !{!"any pointer", !7, i64 0}
!7 = !{!"omnipotent char", !8, i64 0}
!8 = !{!"Simple C/C++ TBAA"}
!9 = !{!10, !10, i64 0}
!10 = !{!"int", !7, i64 0}
!11 = !{!12, !12, i64 0}
!12 = !{!"_Bool", !7, i64 0}
!13 = !{i8 0, i8 2}
!14 = !{}
!15 = !{!7, !7, i64 0}
!16 = !{!17, !6, i64 24}
!17 = !{!"Hacl_Impl_HPKE_context_s_s", !6, i64 0, !6, i64 8, !6, i64 16, !6, i64 24}
!18 = !{!17, !6, i64 0}
!19 = !{!17, !6, i64 8}
!20 = !{!17, !6, i64 16}
!21 = !{!22, !22, i64 0}
!22 = !{!"long", !7, i64 0}


; Optimized IR (opt -passes='default<O3>'):
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

%struct.Hacl_Impl_HPKE_context_s_s = type { ptr, ptr, ptr, ptr }

@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_eae_prk = external hidden unnamed_addr constant [7 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_shared_secret = external hidden unnamed_addr constant [13 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_psk_id_hash = external hidden unnamed_addr constant [11 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_info_hash = external hidden unnamed_addr constant [9 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_secret = external hidden unnamed_addr constant [6 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_exp = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_key = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_base_nonce = external hidden unnamed_addr constant [10 x i8], align 1

; Function Attrs: mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.start.p0(i64 immarg, ptr nocapture) #0

; Function Attrs: mustprogress nocallback nofree nounwind willreturn memory(argmem: write)
declare void @llvm.memset.p0.i64(ptr nocapture writeonly, i8, i64, i1 immarg) #1

declare zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_i(ptr noundef, ptr noundef) local_unnamed_addr #2

declare zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_r(ptr noundef, ptr noundef, ptr noundef) local_unnamed_addr #2

; Function Attrs: mustprogress nocallback nofree nounwind willreturn memory(argmem: readwrite)
declare void @llvm.memcpy.p0.p0.i64(ptr noalias nocapture writeonly, ptr noalias nocapture readonly, i64, i1 immarg) #3

declare void @Hacl_HKDF_extract_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef) local_unnamed_addr #2

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @store16(ptr noundef, i16 noundef zeroext) local_unnamed_addr #4

; Function Attrs: inlinehint nounwind uwtable
declare hidden zeroext i16 @__bswap_16(i16 noundef zeroext) local_unnamed_addr #4

declare void @Hacl_HKDF_expand_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef, i32 noundef) local_unnamed_addr #2

; Function Attrs: mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.end.p0(i64 immarg, ptr nocapture) #0

; Function Attrs: nounwind uwtable
define dso_local range(i32 0, 2) i32 @Hacl_HPKE_P256_CP128_SHA256_setupBaseR(ptr nocapture noundef readonly byval(%struct.Hacl_Impl_HPKE_context_s_s) align 8 %0, ptr noundef %1, ptr noundef %2, i32 noundef %3, ptr nocapture noundef readonly %4) local_unnamed_addr #5 {
  %6 = alloca [64 x i8], align 16
  %7 = alloca [32 x i8], align 16
  %8 = alloca [64 x i8], align 16
  %9 = alloca [64 x i8], align 16
  %10 = alloca [130 x i8], align 16
  %11 = alloca [32 x i8], align 16
  %12 = alloca [5 x i8], align 4
  %.sroa.7 = alloca [32 x i8], align 1
  %.sroa.8 = alloca [32 x i8], align 1
  %13 = alloca [32 x i8], align 16
  %14 = alloca [10 x i8], align 8
  %15 = alloca [32 x i8], align 16
  %16 = alloca [32 x i8], align 16
  call void @llvm.lifetime.start.p0(i64 64, ptr nonnull %6) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(64) %6, i8 0, i64 64, i1 false)
  %17 = call zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_i(ptr noundef nonnull %6, ptr noundef %2) #6
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %7) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %7, i8 0, i64 32, i1 false)
  br i1 %17, label %18, label %101

18:                                               ; preds = %5
  %19 = getelementptr inbounds i8, ptr %1, i64 1
  call void @llvm.lifetime.start.p0(i64 64, ptr nonnull %8)
  call void @llvm.lifetime.start.p0(i64 64, ptr nonnull %9) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(64) %9, i8 0, i64 64, i1 false)
  %20 = call zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_r(ptr noundef nonnull %9, ptr noundef nonnull %19, ptr noundef %2) #6
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 16 dereferenceable(64) %8, ptr noundef nonnull align 16 dereferenceable(64) %9, i64 64, i1 false)
  call void @llvm.lifetime.start.p0(i64 130, ptr nonnull %10) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(130) %10, i8 0, i64 130, i1 false)
  br i1 %20, label %21, label %.critedge

21:                                               ; preds = %18
  %22 = getelementptr inbounds i8, ptr %10, i64 66
  %23 = call zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_i(ptr noundef nonnull %22, ptr noundef %2) #6
  br i1 %23, label %24, label %.critedge

24:                                               ; preds = %21
  %25 = getelementptr inbounds i8, ptr %10, i64 65
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 16 dereferenceable(65) %10, ptr noundef nonnull align 1 dereferenceable(65) %1, i64 65, i1 false)
  store i8 4, ptr %25, align 1, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %11) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %11, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 5, ptr nonnull %12) #6
  store <4 x i8> <i8 75, i8 69, i8 77, i8 0>, ptr %12, align 4, !tbaa !5
  %26 = getelementptr inbounds i8, ptr %12, i64 4
  store i8 16, ptr %26, align 4, !tbaa !5
  %27 = alloca [51 x i8], align 16
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %27, align 16, !tbaa !5
  %28 = getelementptr inbounds i8, ptr %27, i64 4
  store i8 45, ptr %28, align 4, !tbaa !5
  %29 = getelementptr inbounds i8, ptr %27, i64 5
  store i8 118, ptr %29, align 1, !tbaa !5
  %30 = getelementptr inbounds i8, ptr %27, i64 6
  store i8 49, ptr %30, align 2, !tbaa !5
  %31 = getelementptr inbounds i8, ptr %27, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(5) %31, ptr noundef nonnull align 4 dereferenceable(5) %12, i64 5, i1 false)
  %32 = getelementptr inbounds i8, ptr %27, i64 12
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 4 dereferenceable(7) %32, ptr noundef nonnull align 1 dereferenceable(7) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_eae_prk, i64 7, i1 false)
  %33 = getelementptr inbounds i8, ptr %27, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %33, ptr noundef nonnull align 16 dereferenceable(32) %8, i64 32, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %11, ptr noundef nonnull %12, i32 noundef 0, ptr noundef nonnull %27, i32 noundef 51) #6
  %34 = alloca [157 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(157) %34, i8 0, i64 157, i1 false)
  %35 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef nonnull %34, i16 noundef zeroext %35)
  %36 = getelementptr inbounds i8, ptr %34, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %36, align 2, !tbaa !5
  %37 = getelementptr inbounds i8, ptr %34, i64 6
  store i8 45, ptr %37, align 2, !tbaa !5
  %38 = getelementptr inbounds i8, ptr %34, i64 7
  store i8 118, ptr %38, align 1, !tbaa !5
  %39 = getelementptr inbounds i8, ptr %34, i64 8
  store i8 49, ptr %39, align 8, !tbaa !5
  %40 = getelementptr inbounds i8, ptr %34, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(5) %40, ptr noundef nonnull align 4 dereferenceable(5) %12, i64 5, i1 false)
  %41 = getelementptr inbounds i8, ptr %34, i64 14
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 2 dereferenceable(13) %41, ptr noundef nonnull align 1 dereferenceable(13) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_shared_secret, i64 13, i1 false)
  %42 = getelementptr inbounds i8, ptr %34, i64 27
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(130) %42, ptr noundef nonnull align 16 dereferenceable(130) %10, i64 130, i1 false)
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef nonnull %7, ptr noundef nonnull %11, i32 noundef 32, ptr noundef nonnull %34, i32 noundef 157, i32 noundef 32) #6
  call void @llvm.lifetime.end.p0(i64 5, ptr nonnull %12) #6
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %11) #6
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %.sroa.7)
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %.sroa.8)
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %13) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %13, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 10, ptr nonnull %14) #6
  store <8 x i8> <i8 72, i8 80, i8 75, i8 69, i8 0, i8 16, i8 0, i8 1>, ptr %14, align 8, !tbaa !5
  %43 = getelementptr inbounds i8, ptr %14, i64 8
  store i8 0, ptr %43, align 8, !tbaa !5
  %44 = getelementptr inbounds i8, ptr %14, i64 9
  store i8 3, ptr %44, align 1, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %15) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %15, i8 0, i64 32, i1 false)
  %45 = alloca [28 x i8], align 16
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %45, align 16, !tbaa !5
  %46 = getelementptr inbounds i8, ptr %45, i64 4
  store i8 45, ptr %46, align 4, !tbaa !5
  %47 = getelementptr inbounds i8, ptr %45, i64 5
  store i8 118, ptr %47, align 1, !tbaa !5
  %48 = getelementptr inbounds i8, ptr %45, i64 6
  store i8 49, ptr %48, align 2, !tbaa !5
  %49 = getelementptr inbounds i8, ptr %45, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %49, ptr noundef nonnull align 8 dereferenceable(10) %14, i64 10, i1 false)
  %50 = getelementptr inbounds i8, ptr %45, i64 17
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(11) %50, ptr noundef nonnull align 1 dereferenceable(11) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_psk_id_hash, i64 11, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %15, ptr noundef nonnull %14, i32 noundef 0, ptr noundef nonnull %45, i32 noundef 28) #6
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %16) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %16, i8 0, i64 32, i1 false)
  %51 = add i32 %3, 26
  %52 = zext i32 %51 to i64
  %53 = alloca i8, i64 %52, align 16
  call void @llvm.memset.p0.i64(ptr nonnull align 16 %53, i8 0, i64 %52, i1 false)
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %53, align 16, !tbaa !5
  %54 = getelementptr inbounds i8, ptr %53, i64 4
  store i8 45, ptr %54, align 4, !tbaa !5
  %55 = getelementptr inbounds i8, ptr %53, i64 5
  store i8 118, ptr %55, align 1, !tbaa !5
  %56 = getelementptr inbounds i8, ptr %53, i64 6
  store i8 49, ptr %56, align 2, !tbaa !5
  %57 = getelementptr inbounds i8, ptr %53, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %57, ptr noundef nonnull align 8 dereferenceable(10) %14, i64 10, i1 false)
  %58 = getelementptr inbounds i8, ptr %53, i64 17
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(9) %58, ptr noundef nonnull align 1 dereferenceable(9) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_info_hash, i64 9, i1 false)
  %59 = getelementptr inbounds i8, ptr %53, i64 26
  %60 = zext i32 %3 to i64
  call void @llvm.memcpy.p0.p0.i64(ptr nonnull align 2 %59, ptr align 1 %4, i64 %60, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %16, ptr noundef nonnull %14, i32 noundef 0, ptr noundef nonnull %53, i32 noundef %51) #6
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, ptr noundef nonnull align 16 dereferenceable(32) %15, i64 32, i1 false)
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, ptr noundef nonnull align 16 dereferenceable(32) %16, i64 32, i1 false)
  %61 = alloca [23 x i8], align 16
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %61, align 16, !tbaa !5
  %62 = getelementptr inbounds i8, ptr %61, i64 4
  store i8 45, ptr %62, align 4, !tbaa !5
  %63 = getelementptr inbounds i8, ptr %61, i64 5
  store i8 118, ptr %63, align 1, !tbaa !5
  %64 = getelementptr inbounds i8, ptr %61, i64 6
  store i8 49, ptr %64, align 2, !tbaa !5
  %65 = getelementptr inbounds i8, ptr %61, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %65, ptr noundef nonnull align 8 dereferenceable(10) %14, i64 10, i1 false)
  %66 = getelementptr inbounds i8, ptr %61, i64 17
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(6) %66, ptr noundef nonnull align 1 dereferenceable(6) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_secret, i64 6, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %13, ptr noundef nonnull %7, i32 noundef 32, ptr noundef nonnull %61, i32 noundef 23) #6
  %67 = alloca [87 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(87) %67, i8 0, i64 87, i1 false)
  %68 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef nonnull %67, i16 noundef zeroext %68)
  %69 = getelementptr inbounds i8, ptr %67, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %69, align 2, !tbaa !5
  %70 = getelementptr inbounds i8, ptr %67, i64 6
  store i8 45, ptr %70, align 2, !tbaa !5
  %71 = getelementptr inbounds i8, ptr %67, i64 7
  store i8 118, ptr %71, align 1, !tbaa !5
  %72 = getelementptr inbounds i8, ptr %67, i64 8
  store i8 49, ptr %72, align 8, !tbaa !5
  %73 = getelementptr inbounds i8, ptr %67, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %73, ptr noundef nonnull align 8 dereferenceable(10) %14, i64 10, i1 false)
  %74 = getelementptr inbounds i8, ptr %67, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(3) %74, ptr noundef nonnull align 1 dereferenceable(3) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_exp, i64 3, i1 false)
  %75 = getelementptr inbounds i8, ptr %67, i64 22
  store i8 0, ptr %75, align 2
  %.sroa.7.0..sroa_idx = getelementptr inbounds i8, ptr %67, i64 23
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7.0..sroa_idx, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, i64 32, i1 false)
  %.sroa.8.0..sroa_idx = getelementptr inbounds i8, ptr %67, i64 55
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8.0..sroa_idx, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, i64 32, i1 false)
  %76 = getelementptr inbounds i8, ptr %0, i64 24
  %77 = load ptr, ptr %76, align 8, !tbaa !8
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %77, ptr noundef nonnull %13, i32 noundef 32, ptr noundef nonnull %67, i32 noundef 87, i32 noundef 32) #6
  %78 = alloca [87 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(87) %78, i8 0, i64 87, i1 false)
  %79 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef nonnull %78, i16 noundef zeroext %79)
  %80 = getelementptr inbounds i8, ptr %78, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %80, align 2, !tbaa !5
  %81 = getelementptr inbounds i8, ptr %78, i64 6
  store i8 45, ptr %81, align 2, !tbaa !5
  %82 = getelementptr inbounds i8, ptr %78, i64 7
  store i8 118, ptr %82, align 1, !tbaa !5
  %83 = getelementptr inbounds i8, ptr %78, i64 8
  store i8 49, ptr %83, align 8, !tbaa !5
  %84 = getelementptr inbounds i8, ptr %78, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %84, ptr noundef nonnull align 8 dereferenceable(10) %14, i64 10, i1 false)
  %85 = getelementptr inbounds i8, ptr %78, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(3) %85, ptr noundef nonnull align 1 dereferenceable(3) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_key, i64 3, i1 false)
  %86 = getelementptr inbounds i8, ptr %78, i64 22
  store i8 0, ptr %86, align 2
  %.sroa.7.0..sroa_idx120 = getelementptr inbounds i8, ptr %78, i64 23
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7.0..sroa_idx120, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, i64 32, i1 false)
  %.sroa.8.0..sroa_idx122 = getelementptr inbounds i8, ptr %78, i64 55
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8.0..sroa_idx122, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, i64 32, i1 false)
  %87 = load ptr, ptr %0, align 8, !tbaa !11
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %87, ptr noundef nonnull %13, i32 noundef 32, ptr noundef nonnull %78, i32 noundef 87, i32 noundef 32) #6
  %88 = alloca [94 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(94) %88, i8 0, i64 94, i1 false)
  %89 = call zeroext i16 @__bswap_16(i16 noundef zeroext 12)
  call void @store16(ptr noundef nonnull %88, i16 noundef zeroext %89)
  %90 = getelementptr inbounds i8, ptr %88, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %90, align 2, !tbaa !5
  %91 = getelementptr inbounds i8, ptr %88, i64 6
  store i8 45, ptr %91, align 2, !tbaa !5
  %92 = getelementptr inbounds i8, ptr %88, i64 7
  store i8 118, ptr %92, align 1, !tbaa !5
  %93 = getelementptr inbounds i8, ptr %88, i64 8
  store i8 49, ptr %93, align 8, !tbaa !5
  %94 = getelementptr inbounds i8, ptr %88, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %94, ptr noundef nonnull align 8 dereferenceable(10) %14, i64 10, i1 false)
  %95 = getelementptr inbounds i8, ptr %88, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %95, ptr noundef nonnull align 1 dereferenceable(10) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseR.label_base_nonce, i64 10, i1 false)
  %96 = getelementptr inbounds i8, ptr %88, i64 29
  store i8 0, ptr %96, align 1
  %.sroa.7.0..sroa_idx121 = getelementptr inbounds i8, ptr %88, i64 30
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 2 dereferenceable(32) %.sroa.7.0..sroa_idx121, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, i64 32, i1 false)
  %.sroa.8.0..sroa_idx123 = getelementptr inbounds i8, ptr %88, i64 62
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 2 dereferenceable(32) %.sroa.8.0..sroa_idx123, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, i64 32, i1 false)
  %97 = getelementptr inbounds i8, ptr %0, i64 8
  %98 = load ptr, ptr %97, align 8, !tbaa !12
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %98, ptr noundef nonnull %13, i32 noundef 32, ptr noundef nonnull %88, i32 noundef 94, i32 noundef 12) #6
  %99 = getelementptr inbounds i8, ptr %0, i64 16
  %100 = load ptr, ptr %99, align 8, !tbaa !13
  store i64 0, ptr %100, align 8, !tbaa !14
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %16) #6
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %15) #6
  call void @llvm.lifetime.end.p0(i64 10, ptr nonnull %14) #6
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %13) #6
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %.sroa.7)
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %.sroa.8)
  br label %.critedge

.critedge:                                        ; preds = %18, %21, %24
  %.0 = phi i32 [ 0, %24 ], [ 1, %21 ], [ 1, %18 ]
  call void @llvm.lifetime.end.p0(i64 130, ptr nonnull %10) #6
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %9) #6
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %8)
  br label %101

101:                                              ; preds = %5, %.critedge
  %.1 = phi i32 [ %.0, %.critedge ], [ 1, %5 ]
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %7) #6
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %6) #6
  ret i32 %.1
}

attributes #0 = { mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite) }
attributes #1 = { mustprogress nocallback nofree nounwind willreturn memory(argmem: write) }
attributes #2 = { "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #3 = { mustprogress nocallback nofree nounwind willreturn memory(argmem: readwrite) }
attributes #4 = { inlinehint nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #5 = { nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #6 = { nounwind }

!llvm.module.flags = !{!0, !1, !2, !3}
!llvm.ident = !{!4}

!0 = !{i32 1, !"wchar_size", i32 4}
!1 = !{i32 8, !"PIC Level", i32 2}
!2 = !{i32 7, !"PIE Level", i32 2}
!3 = !{i32 7, !"uwtable", i32 2}
!4 = !{!"clang version 19.1.0 (git@github.com:llvm/llvm-project.git a4bf6cd7cfb1a1421ba92bca9d017b49936c55e4)"}
!5 = !{!6, !6, i64 0}
!6 = !{!"omnipotent char", !7, i64 0}
!7 = !{!"Simple C/C++ TBAA"}
!8 = !{!9, !10, i64 24}
!9 = !{!"Hacl_Impl_HPKE_context_s_s", !10, i64 0, !10, i64 8, !10, i64 16, !10, i64 24}
!10 = !{!"any pointer", !6, i64 0}
!11 = !{!9, !10, i64 0}
!12 = !{!9, !10, i64 8}
!13 = !{!9, !10, i64 16}
!14 = !{!15, !15, i64 0}
!15 = !{!"long", !6, i64 0}


; Effective O3 passes: CorrelatedValuePropagationPass,DSEPass,EarlyCSEPass,GlobalOptPass,IPSCCPPass,InferAlignmentPass,InferFunctionAttrsPass,InstCombinePass,MemCpyOptPass,PostOrderFunctionAttrsPass,SLPVectorizerPass,SROAPass,SimplifyCFGPass