; LLVM IR from cryspen/libcrux :: sys/hacl/c/src/msvc (Hacl_HPKE_Curve51_CP128_SHA256)

; Unoptimized IR (clang -disable-llvm-passes):
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

%struct.Hacl_Impl_HPKE_context_s_s = type { ptr, ptr, ptr, ptr }

@.str = external hidden unnamed_addr constant [70 x i8], align 1
@.str.1 = external hidden unnamed_addr constant [102 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_eae_prk = external hidden unnamed_addr constant [7 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_shared_secret = external hidden unnamed_addr constant [13 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_psk_id_hash = external hidden unnamed_addr constant [11 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_info_hash = external hidden unnamed_addr constant [9 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_secret = external hidden unnamed_addr constant [6 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_exp = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_key = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_base_nonce = external hidden unnamed_addr constant [10 x i8], align 1

; Function Attrs: nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.start.p0(i64 immarg, ptr nocapture) #0

; Function Attrs: nocallback nofree nounwind willreturn memory(argmem: write)
declare void @llvm.memset.p0.i64(ptr nocapture writeonly, i8, i64, i1 immarg) #1

declare void @Hacl_Curve25519_51_secret_to_public(ptr noundef, ptr noundef) #2

declare void @Hacl_Curve25519_51_scalarmult(ptr noundef, ptr noundef, ptr noundef) #2

; Function Attrs: noinline nounwind uwtable
declare hidden zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext, i8 noundef zeroext) #3

; Function Attrs: nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.end.p0(i64 immarg, ptr nocapture) #0

; Function Attrs: nocallback nofree nounwind willreturn memory(argmem: readwrite)
declare void @llvm.memcpy.p0.p0.i64(ptr noalias nocapture writeonly, ptr noalias nocapture readonly, i64, i1 immarg) #4

declare i32 @printf(ptr noundef, ...) #2

; Function Attrs: noreturn nounwind
declare void @exit(i32 noundef) #5

declare void @Hacl_HKDF_extract_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef) #2

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @store16(ptr noundef, i16 noundef zeroext) #6

; Function Attrs: inlinehint nounwind uwtable
declare hidden zeroext i16 @__bswap_16(i16 noundef zeroext) #6

declare void @Hacl_HKDF_expand_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef, i32 noundef) #2

; Function Attrs: nounwind uwtable
define dso_local i32 @Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR(ptr noundef byval(%struct.Hacl_Impl_HPKE_context_s_s) align 8 %0, ptr noundef %1, ptr noundef %2, i32 noundef %3, ptr noundef %4) #7 {
  %6 = alloca i32, align 4
  %7 = alloca ptr, align 8
  %8 = alloca ptr, align 8
  %9 = alloca i32, align 4
  %10 = alloca ptr, align 8
  %11 = alloca [32 x i8], align 16
  %12 = alloca i32, align 4
  %13 = alloca [32 x i8], align 16
  %14 = alloca ptr, align 8
  %15 = alloca [32 x i8], align 16
  %16 = alloca [32 x i8], align 16
  %17 = alloca i8, align 1
  %18 = alloca i32, align 4
  %19 = alloca i8, align 1
  %20 = alloca i8, align 1
  %21 = alloca i32, align 4
  %22 = alloca i32, align 4
  %23 = alloca i32, align 4
  %24 = alloca [64 x i8], align 16
  %25 = alloca ptr, align 8
  %26 = alloca ptr, align 8
  %27 = alloca i32, align 4
  %28 = alloca ptr, align 8
  %29 = alloca [32 x i8], align 16
  %30 = alloca [5 x i8], align 1
  %31 = alloca ptr, align 8
  %32 = alloca ptr, align 8
  %33 = alloca ptr, align 8
  %34 = alloca [7 x i8], align 1
  %35 = alloca i32, align 4
  %36 = alloca ptr, align 8
  %37 = alloca ptr, align 8
  %38 = alloca [13 x i8], align 1
  %39 = alloca i32, align 4
  %40 = alloca ptr, align 8
  %41 = alloca ptr, align 8
  %42 = alloca [65 x i8], align 16
  %43 = alloca [32 x i8], align 16
  %44 = alloca [10 x i8], align 1
  %45 = alloca ptr, align 8
  %46 = alloca ptr, align 8
  %47 = alloca ptr, align 8
  %48 = alloca ptr, align 8
  %49 = alloca [11 x i8], align 1
  %50 = alloca [32 x i8], align 16
  %51 = alloca ptr, align 8
  %52 = alloca i32, align 4
  %53 = alloca ptr, align 8
  %54 = alloca ptr, align 8
  %55 = alloca [9 x i8], align 1
  %56 = alloca [32 x i8], align 16
  %57 = alloca i32, align 4
  %58 = alloca ptr, align 8
  %59 = alloca ptr, align 8
  %60 = alloca [6 x i8], align 1
  %61 = alloca i32, align 4
  %62 = alloca ptr, align 8
  %63 = alloca ptr, align 8
  %64 = alloca [3 x i8], align 1
  %65 = alloca i32, align 4
  %66 = alloca ptr, align 8
  %67 = alloca ptr, align 8
  %68 = alloca [3 x i8], align 1
  %69 = alloca i32, align 4
  %70 = alloca ptr, align 8
  %71 = alloca ptr, align 8
  %72 = alloca [10 x i8], align 1
  %73 = alloca i32, align 4
  %74 = alloca ptr, align 8
  %75 = alloca ptr, align 8
  %76 = alloca i32, align 4
  store ptr %1, ptr %7, align 8, !tbaa !5
  store ptr %2, ptr %8, align 8, !tbaa !5
  store i32 %3, ptr %9, align 4, !tbaa !9
  store ptr %4, ptr %10, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 32, ptr %11) #8
  call void @llvm.memset.p0.i64(ptr align 16 %11, i8 0, i64 32, i1 false)
  %77 = getelementptr inbounds [32 x i8], ptr %11, i64 0, i64 0
  %78 = load ptr, ptr %8, align 8, !tbaa !5
  call void @Hacl_Curve25519_51_secret_to_public(ptr noundef %77, ptr noundef %78)
  call void @llvm.lifetime.start.p0(i64 4, ptr %12) #8
  store i32 0, ptr %12, align 4, !tbaa !9
  call void @llvm.lifetime.start.p0(i64 32, ptr %13) #8
  call void @llvm.memset.p0.i64(ptr align 16 %13, i8 0, i64 32, i1 false)
  %79 = load i32, ptr %12, align 4, !tbaa !9
  %80 = icmp eq i32 %79, 0
  br i1 %80, label %81, label %573

81:                                               ; preds = %5
  call void @llvm.lifetime.start.p0(i64 8, ptr %14) #8
  %82 = load ptr, ptr %7, align 8, !tbaa !5
  store ptr %82, ptr %14, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 32, ptr %15) #8
  call void @llvm.memset.p0.i64(ptr align 16 %15, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr %16) #8
  call void @llvm.memset.p0.i64(ptr align 16 %16, i8 0, i64 32, i1 false)
  %83 = getelementptr inbounds [32 x i8], ptr %15, i64 0, i64 0
  %84 = load ptr, ptr %8, align 8, !tbaa !5
  %85 = load ptr, ptr %14, align 8, !tbaa !5
  call void @Hacl_Curve25519_51_scalarmult(ptr noundef %83, ptr noundef %84, ptr noundef %85)
  call void @llvm.lifetime.start.p0(i64 1, ptr %17) #8
  store i8 -1, ptr %17, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 4, ptr %18) #8
  store i32 0, ptr %18, align 4, !tbaa !9
  br label %86

86:                                               ; preds = %106, %81
  %87 = load i32, ptr %18, align 4, !tbaa !9
  %88 = icmp ult i32 %87, 32
  br i1 %88, label %90, label %89

89:                                               ; preds = %86
  call void @llvm.lifetime.end.p0(i64 4, ptr %18) #8
  br label %109

90:                                               ; preds = %86
  call void @llvm.lifetime.start.p0(i64 1, ptr %19) #8
  %91 = load i32, ptr %18, align 4, !tbaa !9
  %92 = zext i32 %91 to i64
  %93 = getelementptr inbounds [32 x i8], ptr %15, i64 0, i64 %92
  %94 = load i8, ptr %93, align 1, !tbaa !11
  %95 = load i32, ptr %18, align 4, !tbaa !9
  %96 = zext i32 %95 to i64
  %97 = getelementptr inbounds [32 x i8], ptr %16, i64 0, i64 %96
  %98 = load i8, ptr %97, align 1, !tbaa !11
  %99 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %94, i8 noundef zeroext %98)
  store i8 %99, ptr %19, align 1, !tbaa !11
  %100 = load i8, ptr %19, align 1, !tbaa !11
  %101 = zext i8 %100 to i32
  %102 = load i8, ptr %17, align 1, !tbaa !11
  %103 = zext i8 %102 to i32
  %104 = and i32 %101, %103
  %105 = trunc i32 %104 to i8
  store i8 %105, ptr %17, align 1, !tbaa !11
  call void @llvm.lifetime.end.p0(i64 1, ptr %19) #8
  br label %106

106:                                              ; preds = %90
  %107 = load i32, ptr %18, align 4, !tbaa !9
  %108 = add i32 %107, 1
  store i32 %108, ptr %18, align 4, !tbaa !9
  br label %86, !llvm.loop !12

109:                                              ; preds = %89
  call void @llvm.lifetime.start.p0(i64 1, ptr %20) #8
  %110 = load i8, ptr %17, align 1, !tbaa !11
  store i8 %110, ptr %20, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 4, ptr %21) #8
  %111 = load i8, ptr %20, align 1, !tbaa !11
  %112 = zext i8 %111 to i32
  %113 = icmp eq i32 %112, 255
  br i1 %113, label %114, label %115

114:                                              ; preds = %109
  store i32 1, ptr %21, align 4, !tbaa !9
  br label %116

115:                                              ; preds = %109
  store i32 0, ptr %21, align 4, !tbaa !9
  br label %116

116:                                              ; preds = %115, %114
  call void @llvm.lifetime.start.p0(i64 4, ptr %22) #8
  %117 = load i32, ptr %21, align 4, !tbaa !9
  store i32 %117, ptr %22, align 4, !tbaa !9
  call void @llvm.lifetime.start.p0(i64 4, ptr %23) #8
  call void @llvm.lifetime.start.p0(i64 64, ptr %24) #8
  call void @llvm.memset.p0.i64(ptr align 16 %24, i8 0, i64 64, i1 false)
  %118 = load i32, ptr %22, align 4, !tbaa !9
  %119 = icmp eq i32 %118, 0
  br i1 %119, label %120, label %241

120:                                              ; preds = %116
  call void @llvm.lifetime.start.p0(i64 8, ptr %25) #8
  %121 = getelementptr inbounds [64 x i8], ptr %24, i64 0, i64 0
  %122 = getelementptr inbounds i8, ptr %121, i64 32
  store ptr %122, ptr %25, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 8, ptr %26) #8
  %123 = load ptr, ptr %25, align 8, !tbaa !5
  store ptr %123, ptr %26, align 8, !tbaa !5
  %124 = load ptr, ptr %26, align 8, !tbaa !5
  %125 = load ptr, ptr %8, align 8, !tbaa !5
  call void @Hacl_Curve25519_51_secret_to_public(ptr noundef %124, ptr noundef %125)
  call void @llvm.lifetime.start.p0(i64 4, ptr %27) #8
  store i32 0, ptr %27, align 4, !tbaa !9
  %126 = load i32, ptr %27, align 4, !tbaa !9
  %127 = icmp eq i32 %126, 0
  br i1 %127, label %128, label %239

128:                                              ; preds = %120
  %129 = getelementptr inbounds [64 x i8], ptr %24, i64 0, i64 0
  %130 = load ptr, ptr %7, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 16 %129, ptr align 1 %130, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %28) #8
  %131 = getelementptr inbounds [32 x i8], ptr %15, i64 0, i64 0
  store ptr %131, ptr %28, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 32, ptr %29) #8
  call void @llvm.memset.p0.i64(ptr align 16 %29, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 5, ptr %30) #8
  call void @llvm.memset.p0.i64(ptr align 1 %30, i8 0, i64 5, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %31) #8
  %132 = getelementptr inbounds [5 x i8], ptr %30, i64 0, i64 0
  store ptr %132, ptr %31, align 8, !tbaa !5
  %133 = load ptr, ptr %31, align 8, !tbaa !5
  %134 = getelementptr inbounds i8, ptr %133, i64 0
  store i8 75, ptr %134, align 1, !tbaa !11
  %135 = load ptr, ptr %31, align 8, !tbaa !5
  %136 = getelementptr inbounds i8, ptr %135, i64 1
  store i8 69, ptr %136, align 1, !tbaa !11
  %137 = load ptr, ptr %31, align 8, !tbaa !5
  %138 = getelementptr inbounds i8, ptr %137, i64 2
  store i8 77, ptr %138, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 8, ptr %32) #8
  %139 = getelementptr inbounds [5 x i8], ptr %30, i64 0, i64 0
  %140 = getelementptr inbounds i8, ptr %139, i64 3
  store ptr %140, ptr %32, align 8, !tbaa !5
  %141 = load ptr, ptr %32, align 8, !tbaa !5
  %142 = getelementptr inbounds i8, ptr %141, i64 0
  store i8 0, ptr %142, align 1, !tbaa !11
  %143 = load ptr, ptr %32, align 8, !tbaa !5
  %144 = getelementptr inbounds i8, ptr %143, i64 1
  store i8 32, ptr %144, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 8, ptr %33) #8
  %145 = getelementptr inbounds [5 x i8], ptr %30, i64 0, i64 0
  store ptr %145, ptr %33, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 7, ptr %34) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %34, ptr align 1 @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_eae_prk, i64 7, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %35) #8
  store i32 51, ptr %35, align 4, !tbaa !9
  br label %146

146:                                              ; preds = %128
  %147 = load i32, ptr %35, align 4, !tbaa !9
  %148 = zext i32 %147 to i64
  %149 = icmp ugt i64 %148, -1
  br i1 %149, label %150, label %152

150:                                              ; preds = %146
  %151 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 336)
  call void @exit(i32 noundef 253) #9
  unreachable

152:                                              ; preds = %146
  br label %153

153:                                              ; preds = %152
  br label %154

154:                                              ; preds = %153
  call void @llvm.lifetime.start.p0(i64 8, ptr %36) #8
  %155 = load i32, ptr %35, align 4, !tbaa !9
  %156 = zext i32 %155 to i64
  %157 = mul i64 %156, 1
  %158 = alloca i8, i64 %157, align 16
  store ptr %158, ptr %36, align 8, !tbaa !5
  %159 = load ptr, ptr %36, align 8, !tbaa !5
  %160 = load i32, ptr %35, align 4, !tbaa !9
  %161 = zext i32 %160 to i64
  %162 = mul i64 %161, 1
  call void @llvm.memset.p0.i64(ptr align 1 %159, i8 0, i64 %162, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %37) #8
  %163 = load ptr, ptr %36, align 8, !tbaa !5
  store ptr %163, ptr %37, align 8, !tbaa !5
  %164 = load ptr, ptr %37, align 8, !tbaa !5
  %165 = getelementptr inbounds i8, ptr %164, i64 0
  store i8 72, ptr %165, align 1, !tbaa !11
  %166 = load ptr, ptr %37, align 8, !tbaa !5
  %167 = getelementptr inbounds i8, ptr %166, i64 1
  store i8 80, ptr %167, align 1, !tbaa !11
  %168 = load ptr, ptr %37, align 8, !tbaa !5
  %169 = getelementptr inbounds i8, ptr %168, i64 2
  store i8 75, ptr %169, align 1, !tbaa !11
  %170 = load ptr, ptr %37, align 8, !tbaa !5
  %171 = getelementptr inbounds i8, ptr %170, i64 3
  store i8 69, ptr %171, align 1, !tbaa !11
  %172 = load ptr, ptr %37, align 8, !tbaa !5
  %173 = getelementptr inbounds i8, ptr %172, i64 4
  store i8 45, ptr %173, align 1, !tbaa !11
  %174 = load ptr, ptr %37, align 8, !tbaa !5
  %175 = getelementptr inbounds i8, ptr %174, i64 5
  store i8 118, ptr %175, align 1, !tbaa !11
  %176 = load ptr, ptr %37, align 8, !tbaa !5
  %177 = getelementptr inbounds i8, ptr %176, i64 6
  store i8 49, ptr %177, align 1, !tbaa !11
  %178 = load ptr, ptr %36, align 8, !tbaa !5
  %179 = getelementptr inbounds i8, ptr %178, i64 7
  %180 = getelementptr inbounds [5 x i8], ptr %30, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %179, ptr align 1 %180, i64 5, i1 false)
  %181 = load ptr, ptr %36, align 8, !tbaa !5
  %182 = getelementptr inbounds i8, ptr %181, i64 12
  %183 = getelementptr inbounds [7 x i8], ptr %34, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %182, ptr align 1 %183, i64 7, i1 false)
  %184 = load ptr, ptr %36, align 8, !tbaa !5
  %185 = getelementptr inbounds i8, ptr %184, i64 19
  %186 = load ptr, ptr %28, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %185, ptr align 1 %186, i64 32, i1 false)
  %187 = getelementptr inbounds [32 x i8], ptr %29, i64 0, i64 0
  %188 = load ptr, ptr %33, align 8, !tbaa !5
  %189 = load ptr, ptr %36, align 8, !tbaa !5
  %190 = load i32, ptr %35, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %187, ptr noundef %188, i32 noundef 0, ptr noundef %189, i32 noundef %190)
  call void @llvm.lifetime.start.p0(i64 13, ptr %38) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %38, ptr align 1 @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_shared_secret, i64 13, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %39) #8
  store i32 91, ptr %39, align 4, !tbaa !9
  br label %191

191:                                              ; preds = %154
  %192 = load i32, ptr %39, align 4, !tbaa !9
  %193 = zext i32 %192 to i64
  %194 = icmp ugt i64 %193, -1
  br i1 %194, label %195, label %197

195:                                              ; preds = %191
  %196 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 358)
  call void @exit(i32 noundef 253) #9
  unreachable

197:                                              ; preds = %191
  br label %198

198:                                              ; preds = %197
  br label %199

199:                                              ; preds = %198
  call void @llvm.lifetime.start.p0(i64 8, ptr %40) #8
  %200 = load i32, ptr %39, align 4, !tbaa !9
  %201 = zext i32 %200 to i64
  %202 = mul i64 %201, 1
  %203 = alloca i8, i64 %202, align 16
  store ptr %203, ptr %40, align 8, !tbaa !5
  %204 = load ptr, ptr %40, align 8, !tbaa !5
  %205 = load i32, ptr %39, align 4, !tbaa !9
  %206 = zext i32 %205 to i64
  %207 = mul i64 %206, 1
  call void @llvm.memset.p0.i64(ptr align 1 %204, i8 0, i64 %207, i1 false)
  %208 = load ptr, ptr %40, align 8, !tbaa !5
  %209 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef %208, i16 noundef zeroext %209)
  call void @llvm.lifetime.start.p0(i64 8, ptr %41) #8
  %210 = load ptr, ptr %40, align 8, !tbaa !5
  %211 = getelementptr inbounds i8, ptr %210, i64 2
  store ptr %211, ptr %41, align 8, !tbaa !5
  %212 = load ptr, ptr %41, align 8, !tbaa !5
  %213 = getelementptr inbounds i8, ptr %212, i64 0
  store i8 72, ptr %213, align 1, !tbaa !11
  %214 = load ptr, ptr %41, align 8, !tbaa !5
  %215 = getelementptr inbounds i8, ptr %214, i64 1
  store i8 80, ptr %215, align 1, !tbaa !11
  %216 = load ptr, ptr %41, align 8, !tbaa !5
  %217 = getelementptr inbounds i8, ptr %216, i64 2
  store i8 75, ptr %217, align 1, !tbaa !11
  %218 = load ptr, ptr %41, align 8, !tbaa !5
  %219 = getelementptr inbounds i8, ptr %218, i64 3
  store i8 69, ptr %219, align 1, !tbaa !11
  %220 = load ptr, ptr %41, align 8, !tbaa !5
  %221 = getelementptr inbounds i8, ptr %220, i64 4
  store i8 45, ptr %221, align 1, !tbaa !11
  %222 = load ptr, ptr %41, align 8, !tbaa !5
  %223 = getelementptr inbounds i8, ptr %222, i64 5
  store i8 118, ptr %223, align 1, !tbaa !11
  %224 = load ptr, ptr %41, align 8, !tbaa !5
  %225 = getelementptr inbounds i8, ptr %224, i64 6
  store i8 49, ptr %225, align 1, !tbaa !11
  %226 = load ptr, ptr %40, align 8, !tbaa !5
  %227 = getelementptr inbounds i8, ptr %226, i64 9
  %228 = getelementptr inbounds [5 x i8], ptr %30, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %227, ptr align 1 %228, i64 5, i1 false)
  %229 = load ptr, ptr %40, align 8, !tbaa !5
  %230 = getelementptr inbounds i8, ptr %229, i64 14
  %231 = getelementptr inbounds [13 x i8], ptr %38, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %230, ptr align 1 %231, i64 13, i1 false)
  %232 = load ptr, ptr %40, align 8, !tbaa !5
  %233 = getelementptr inbounds i8, ptr %232, i64 27
  %234 = getelementptr inbounds [64 x i8], ptr %24, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %233, ptr align 16 %234, i64 64, i1 false)
  %235 = getelementptr inbounds [32 x i8], ptr %13, i64 0, i64 0
  %236 = getelementptr inbounds [32 x i8], ptr %29, i64 0, i64 0
  %237 = load ptr, ptr %40, align 8, !tbaa !5
  %238 = load i32, ptr %39, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %235, ptr noundef %236, i32 noundef 32, ptr noundef %237, i32 noundef %238, i32 noundef 32)
  store i32 0, ptr %23, align 4, !tbaa !9
  call void @llvm.lifetime.end.p0(i64 8, ptr %41) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %40) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %39) #8
  call void @llvm.lifetime.end.p0(i64 13, ptr %38) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %37) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %36) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %35) #8
  call void @llvm.lifetime.end.p0(i64 7, ptr %34) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %33) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %32) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %31) #8
  call void @llvm.lifetime.end.p0(i64 5, ptr %30) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %29) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %28) #8
  br label %240

239:                                              ; preds = %120
  store i32 1, ptr %23, align 4, !tbaa !9
  br label %240

240:                                              ; preds = %239, %199
  call void @llvm.lifetime.end.p0(i64 4, ptr %27) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %26) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %25) #8
  br label %242

241:                                              ; preds = %116
  store i32 1, ptr %23, align 4, !tbaa !9
  br label %242

242:                                              ; preds = %241, %240
  %243 = load i32, ptr %23, align 4, !tbaa !9
  %244 = icmp eq i32 %243, 0
  br i1 %244, label %245, label %571

245:                                              ; preds = %242
  call void @llvm.lifetime.start.p0(i64 65, ptr %42) #8
  call void @llvm.memset.p0.i64(ptr align 16 %42, i8 0, i64 65, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr %43) #8
  call void @llvm.memset.p0.i64(ptr align 16 %43, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 10, ptr %44) #8
  call void @llvm.memset.p0.i64(ptr align 1 %44, i8 0, i64 10, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %45) #8
  %246 = getelementptr inbounds [10 x i8], ptr %44, i64 0, i64 0
  store ptr %246, ptr %45, align 8, !tbaa !5
  %247 = load ptr, ptr %45, align 8, !tbaa !5
  %248 = getelementptr inbounds i8, ptr %247, i64 0
  store i8 72, ptr %248, align 1, !tbaa !11
  %249 = load ptr, ptr %45, align 8, !tbaa !5
  %250 = getelementptr inbounds i8, ptr %249, i64 1
  store i8 80, ptr %250, align 1, !tbaa !11
  %251 = load ptr, ptr %45, align 8, !tbaa !5
  %252 = getelementptr inbounds i8, ptr %251, i64 2
  store i8 75, ptr %252, align 1, !tbaa !11
  %253 = load ptr, ptr %45, align 8, !tbaa !5
  %254 = getelementptr inbounds i8, ptr %253, i64 3
  store i8 69, ptr %254, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 8, ptr %46) #8
  %255 = getelementptr inbounds [10 x i8], ptr %44, i64 0, i64 0
  %256 = getelementptr inbounds i8, ptr %255, i64 4
  store ptr %256, ptr %46, align 8, !tbaa !5
  %257 = load ptr, ptr %46, align 8, !tbaa !5
  %258 = getelementptr inbounds i8, ptr %257, i64 0
  store i8 0, ptr %258, align 1, !tbaa !11
  %259 = load ptr, ptr %46, align 8, !tbaa !5
  %260 = getelementptr inbounds i8, ptr %259, i64 1
  store i8 32, ptr %260, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 8, ptr %47) #8
  %261 = getelementptr inbounds [10 x i8], ptr %44, i64 0, i64 0
  %262 = getelementptr inbounds i8, ptr %261, i64 6
  store ptr %262, ptr %47, align 8, !tbaa !5
  %263 = load ptr, ptr %47, align 8, !tbaa !5
  %264 = getelementptr inbounds i8, ptr %263, i64 0
  store i8 0, ptr %264, align 1, !tbaa !11
  %265 = load ptr, ptr %47, align 8, !tbaa !5
  %266 = getelementptr inbounds i8, ptr %265, i64 1
  store i8 1, ptr %266, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 8, ptr %48) #8
  %267 = getelementptr inbounds [10 x i8], ptr %44, i64 0, i64 0
  %268 = getelementptr inbounds i8, ptr %267, i64 8
  store ptr %268, ptr %48, align 8, !tbaa !5
  %269 = load ptr, ptr %48, align 8, !tbaa !5
  %270 = getelementptr inbounds i8, ptr %269, i64 0
  store i8 0, ptr %270, align 1, !tbaa !11
  %271 = load ptr, ptr %48, align 8, !tbaa !5
  %272 = getelementptr inbounds i8, ptr %271, i64 1
  store i8 3, ptr %272, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 11, ptr %49) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %49, ptr align 1 @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_psk_id_hash, i64 11, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr %50) #8
  call void @llvm.memset.p0.i64(ptr align 16 %50, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %51) #8
  %273 = getelementptr inbounds [10 x i8], ptr %44, i64 0, i64 0
  store ptr %273, ptr %51, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 4, ptr %52) #8
  store i32 28, ptr %52, align 4, !tbaa !9
  br label %274

274:                                              ; preds = %245
  %275 = load i32, ptr %52, align 4, !tbaa !9
  %276 = zext i32 %275 to i64
  %277 = icmp ugt i64 %276, -1
  br i1 %277, label %278, label %280

278:                                              ; preds = %274
  %279 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 410)
  call void @exit(i32 noundef 253) #9
  unreachable

280:                                              ; preds = %274
  br label %281

281:                                              ; preds = %280
  br label %282

282:                                              ; preds = %281
  call void @llvm.lifetime.start.p0(i64 8, ptr %53) #8
  %283 = load i32, ptr %52, align 4, !tbaa !9
  %284 = zext i32 %283 to i64
  %285 = mul i64 %284, 1
  %286 = alloca i8, i64 %285, align 16
  store ptr %286, ptr %53, align 8, !tbaa !5
  %287 = load ptr, ptr %53, align 8, !tbaa !5
  %288 = load i32, ptr %52, align 4, !tbaa !9
  %289 = zext i32 %288 to i64
  %290 = mul i64 %289, 1
  call void @llvm.memset.p0.i64(ptr align 1 %287, i8 0, i64 %290, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %54) #8
  %291 = load ptr, ptr %53, align 8, !tbaa !5
  store ptr %291, ptr %54, align 8, !tbaa !5
  %292 = load ptr, ptr %54, align 8, !tbaa !5
  %293 = getelementptr inbounds i8, ptr %292, i64 0
  store i8 72, ptr %293, align 1, !tbaa !11
  %294 = load ptr, ptr %54, align 8, !tbaa !5
  %295 = getelementptr inbounds i8, ptr %294, i64 1
  store i8 80, ptr %295, align 1, !tbaa !11
  %296 = load ptr, ptr %54, align 8, !tbaa !5
  %297 = getelementptr inbounds i8, ptr %296, i64 2
  store i8 75, ptr %297, align 1, !tbaa !11
  %298 = load ptr, ptr %54, align 8, !tbaa !5
  %299 = getelementptr inbounds i8, ptr %298, i64 3
  store i8 69, ptr %299, align 1, !tbaa !11
  %300 = load ptr, ptr %54, align 8, !tbaa !5
  %301 = getelementptr inbounds i8, ptr %300, i64 4
  store i8 45, ptr %301, align 1, !tbaa !11
  %302 = load ptr, ptr %54, align 8, !tbaa !5
  %303 = getelementptr inbounds i8, ptr %302, i64 5
  store i8 118, ptr %303, align 1, !tbaa !11
  %304 = load ptr, ptr %54, align 8, !tbaa !5
  %305 = getelementptr inbounds i8, ptr %304, i64 6
  store i8 49, ptr %305, align 1, !tbaa !11
  %306 = load ptr, ptr %53, align 8, !tbaa !5
  %307 = getelementptr inbounds i8, ptr %306, i64 7
  %308 = getelementptr inbounds [10 x i8], ptr %44, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %307, ptr align 1 %308, i64 10, i1 false)
  %309 = load ptr, ptr %53, align 8, !tbaa !5
  %310 = getelementptr inbounds i8, ptr %309, i64 17
  %311 = getelementptr inbounds [11 x i8], ptr %49, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %310, ptr align 1 %311, i64 11, i1 false)
  %312 = load ptr, ptr %53, align 8, !tbaa !5
  %313 = getelementptr inbounds i8, ptr %312, i64 28
  %314 = load ptr, ptr %51, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %313, ptr align 1 %314, i64 0, i1 false)
  %315 = getelementptr inbounds [32 x i8], ptr %50, i64 0, i64 0
  %316 = load ptr, ptr %51, align 8, !tbaa !5
  %317 = load ptr, ptr %53, align 8, !tbaa !5
  %318 = load i32, ptr %52, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %315, ptr noundef %316, i32 noundef 0, ptr noundef %317, i32 noundef %318)
  call void @llvm.lifetime.start.p0(i64 9, ptr %55) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %55, ptr align 1 @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_info_hash, i64 9, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr %56) #8
  call void @llvm.memset.p0.i64(ptr align 16 %56, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %57) #8
  %319 = load i32, ptr %9, align 4, !tbaa !9
  %320 = add i32 26, %319
  store i32 %320, ptr %57, align 4, !tbaa !9
  br label %321

321:                                              ; preds = %282
  %322 = load i32, ptr %57, align 4, !tbaa !9
  %323 = zext i32 %322 to i64
  %324 = icmp ugt i64 %323, -1
  br i1 %324, label %325, label %327

325:                                              ; preds = %321
  %326 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 429)
  call void @exit(i32 noundef 253) #9
  unreachable

327:                                              ; preds = %321
  br label %328

328:                                              ; preds = %327
  br label %329

329:                                              ; preds = %328
  call void @llvm.lifetime.start.p0(i64 8, ptr %58) #8
  %330 = load i32, ptr %57, align 4, !tbaa !9
  %331 = zext i32 %330 to i64
  %332 = mul i64 %331, 1
  %333 = alloca i8, i64 %332, align 16
  store ptr %333, ptr %58, align 8, !tbaa !5
  %334 = load ptr, ptr %58, align 8, !tbaa !5
  %335 = load i32, ptr %57, align 4, !tbaa !9
  %336 = zext i32 %335 to i64
  %337 = mul i64 %336, 1
  call void @llvm.memset.p0.i64(ptr align 1 %334, i8 0, i64 %337, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %59) #8
  %338 = load ptr, ptr %58, align 8, !tbaa !5
  store ptr %338, ptr %59, align 8, !tbaa !5
  %339 = load ptr, ptr %59, align 8, !tbaa !5
  %340 = getelementptr inbounds i8, ptr %339, i64 0
  store i8 72, ptr %340, align 1, !tbaa !11
  %341 = load ptr, ptr %59, align 8, !tbaa !5
  %342 = getelementptr inbounds i8, ptr %341, i64 1
  store i8 80, ptr %342, align 1, !tbaa !11
  %343 = load ptr, ptr %59, align 8, !tbaa !5
  %344 = getelementptr inbounds i8, ptr %343, i64 2
  store i8 75, ptr %344, align 1, !tbaa !11
  %345 = load ptr, ptr %59, align 8, !tbaa !5
  %346 = getelementptr inbounds i8, ptr %345, i64 3
  store i8 69, ptr %346, align 1, !tbaa !11
  %347 = load ptr, ptr %59, align 8, !tbaa !5
  %348 = getelementptr inbounds i8, ptr %347, i64 4
  store i8 45, ptr %348, align 1, !tbaa !11
  %349 = load ptr, ptr %59, align 8, !tbaa !5
  %350 = getelementptr inbounds i8, ptr %349, i64 5
  store i8 118, ptr %350, align 1, !tbaa !11
  %351 = load ptr, ptr %59, align 8, !tbaa !5
  %352 = getelementptr inbounds i8, ptr %351, i64 6
  store i8 49, ptr %352, align 1, !tbaa !11
  %353 = load ptr, ptr %58, align 8, !tbaa !5
  %354 = getelementptr inbounds i8, ptr %353, i64 7
  %355 = getelementptr inbounds [10 x i8], ptr %44, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %354, ptr align 1 %355, i64 10, i1 false)
  %356 = load ptr, ptr %58, align 8, !tbaa !5
  %357 = getelementptr inbounds i8, ptr %356, i64 17
  %358 = getelementptr inbounds [9 x i8], ptr %55, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %357, ptr align 1 %358, i64 9, i1 false)
  %359 = load ptr, ptr %58, align 8, !tbaa !5
  %360 = getelementptr inbounds i8, ptr %359, i64 26
  %361 = load ptr, ptr %10, align 8, !tbaa !5
  %362 = load i32, ptr %9, align 4, !tbaa !9
  %363 = zext i32 %362 to i64
  %364 = mul i64 %363, 1
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %360, ptr align 1 %361, i64 %364, i1 false)
  %365 = getelementptr inbounds [32 x i8], ptr %56, i64 0, i64 0
  %366 = load ptr, ptr %51, align 8, !tbaa !5
  %367 = load ptr, ptr %58, align 8, !tbaa !5
  %368 = load i32, ptr %57, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %365, ptr noundef %366, i32 noundef 0, ptr noundef %367, i32 noundef %368)
  %369 = getelementptr inbounds [65 x i8], ptr %42, i64 0, i64 0
  store i8 0, ptr %369, align 16, !tbaa !11
  %370 = getelementptr inbounds [65 x i8], ptr %42, i64 0, i64 0
  %371 = getelementptr inbounds i8, ptr %370, i64 1
  %372 = getelementptr inbounds [32 x i8], ptr %50, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %371, ptr align 16 %372, i64 32, i1 false)
  %373 = getelementptr inbounds [65 x i8], ptr %42, i64 0, i64 0
  %374 = getelementptr inbounds i8, ptr %373, i64 33
  %375 = getelementptr inbounds [32 x i8], ptr %56, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %374, ptr align 16 %375, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 6, ptr %60) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %60, ptr align 1 @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_secret, i64 6, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %61) #8
  store i32 23, ptr %61, align 4, !tbaa !9
  br label %376

376:                                              ; preds = %329
  %377 = load i32, ptr %61, align 4, !tbaa !9
  %378 = zext i32 %377 to i64
  %379 = icmp ugt i64 %378, -1
  br i1 %379, label %380, label %382

380:                                              ; preds = %376
  %381 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 449)
  call void @exit(i32 noundef 253) #9
  unreachable

382:                                              ; preds = %376
  br label %383

383:                                              ; preds = %382
  br label %384

384:                                              ; preds = %383
  call void @llvm.lifetime.start.p0(i64 8, ptr %62) #8
  %385 = load i32, ptr %61, align 4, !tbaa !9
  %386 = zext i32 %385 to i64
  %387 = mul i64 %386, 1
  %388 = alloca i8, i64 %387, align 16
  store ptr %388, ptr %62, align 8, !tbaa !5
  %389 = load ptr, ptr %62, align 8, !tbaa !5
  %390 = load i32, ptr %61, align 4, !tbaa !9
  %391 = zext i32 %390 to i64
  %392 = mul i64 %391, 1
  call void @llvm.memset.p0.i64(ptr align 1 %389, i8 0, i64 %392, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %63) #8
  %393 = load ptr, ptr %62, align 8, !tbaa !5
  store ptr %393, ptr %63, align 8, !tbaa !5
  %394 = load ptr, ptr %63, align 8, !tbaa !5
  %395 = getelementptr inbounds i8, ptr %394, i64 0
  store i8 72, ptr %395, align 1, !tbaa !11
  %396 = load ptr, ptr %63, align 8, !tbaa !5
  %397 = getelementptr inbounds i8, ptr %396, i64 1
  store i8 80, ptr %397, align 1, !tbaa !11
  %398 = load ptr, ptr %63, align 8, !tbaa !5
  %399 = getelementptr inbounds i8, ptr %398, i64 2
  store i8 75, ptr %399, align 1, !tbaa !11
  %400 = load ptr, ptr %63, align 8, !tbaa !5
  %401 = getelementptr inbounds i8, ptr %400, i64 3
  store i8 69, ptr %401, align 1, !tbaa !11
  %402 = load ptr, ptr %63, align 8, !tbaa !5
  %403 = getelementptr inbounds i8, ptr %402, i64 4
  store i8 45, ptr %403, align 1, !tbaa !11
  %404 = load ptr, ptr %63, align 8, !tbaa !5
  %405 = getelementptr inbounds i8, ptr %404, i64 5
  store i8 118, ptr %405, align 1, !tbaa !11
  %406 = load ptr, ptr %63, align 8, !tbaa !5
  %407 = getelementptr inbounds i8, ptr %406, i64 6
  store i8 49, ptr %407, align 1, !tbaa !11
  %408 = load ptr, ptr %62, align 8, !tbaa !5
  %409 = getelementptr inbounds i8, ptr %408, i64 7
  %410 = getelementptr inbounds [10 x i8], ptr %44, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %409, ptr align 1 %410, i64 10, i1 false)
  %411 = load ptr, ptr %62, align 8, !tbaa !5
  %412 = getelementptr inbounds i8, ptr %411, i64 17
  %413 = getelementptr inbounds [6 x i8], ptr %60, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %412, ptr align 1 %413, i64 6, i1 false)
  %414 = load ptr, ptr %62, align 8, !tbaa !5
  %415 = getelementptr inbounds i8, ptr %414, i64 23
  %416 = load ptr, ptr %51, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %415, ptr align 1 %416, i64 0, i1 false)
  %417 = getelementptr inbounds [32 x i8], ptr %43, i64 0, i64 0
  %418 = getelementptr inbounds [32 x i8], ptr %13, i64 0, i64 0
  %419 = load ptr, ptr %62, align 8, !tbaa !5
  %420 = load i32, ptr %61, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %417, ptr noundef %418, i32 noundef 32, ptr noundef %419, i32 noundef %420)
  call void @llvm.lifetime.start.p0(i64 3, ptr %64) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %64, ptr align 1 @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_exp, i64 3, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %65) #8
  store i32 87, ptr %65, align 4, !tbaa !9
  br label %421

421:                                              ; preds = %384
  %422 = load i32, ptr %65, align 4, !tbaa !9
  %423 = zext i32 %422 to i64
  %424 = icmp ugt i64 %423, -1
  br i1 %424, label %425, label %427

425:                                              ; preds = %421
  %426 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 466)
  call void @exit(i32 noundef 253) #9
  unreachable

427:                                              ; preds = %421
  br label %428

428:                                              ; preds = %427
  br label %429

429:                                              ; preds = %428
  call void @llvm.lifetime.start.p0(i64 8, ptr %66) #8
  %430 = load i32, ptr %65, align 4, !tbaa !9
  %431 = zext i32 %430 to i64
  %432 = mul i64 %431, 1
  %433 = alloca i8, i64 %432, align 16
  store ptr %433, ptr %66, align 8, !tbaa !5
  %434 = load ptr, ptr %66, align 8, !tbaa !5
  %435 = load i32, ptr %65, align 4, !tbaa !9
  %436 = zext i32 %435 to i64
  %437 = mul i64 %436, 1
  call void @llvm.memset.p0.i64(ptr align 1 %434, i8 0, i64 %437, i1 false)
  %438 = load ptr, ptr %66, align 8, !tbaa !5
  %439 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef %438, i16 noundef zeroext %439)
  call void @llvm.lifetime.start.p0(i64 8, ptr %67) #8
  %440 = load ptr, ptr %66, align 8, !tbaa !5
  %441 = getelementptr inbounds i8, ptr %440, i64 2
  store ptr %441, ptr %67, align 8, !tbaa !5
  %442 = load ptr, ptr %67, align 8, !tbaa !5
  %443 = getelementptr inbounds i8, ptr %442, i64 0
  store i8 72, ptr %443, align 1, !tbaa !11
  %444 = load ptr, ptr %67, align 8, !tbaa !5
  %445 = getelementptr inbounds i8, ptr %444, i64 1
  store i8 80, ptr %445, align 1, !tbaa !11
  %446 = load ptr, ptr %67, align 8, !tbaa !5
  %447 = getelementptr inbounds i8, ptr %446, i64 2
  store i8 75, ptr %447, align 1, !tbaa !11
  %448 = load ptr, ptr %67, align 8, !tbaa !5
  %449 = getelementptr inbounds i8, ptr %448, i64 3
  store i8 69, ptr %449, align 1, !tbaa !11
  %450 = load ptr, ptr %67, align 8, !tbaa !5
  %451 = getelementptr inbounds i8, ptr %450, i64 4
  store i8 45, ptr %451, align 1, !tbaa !11
  %452 = load ptr, ptr %67, align 8, !tbaa !5
  %453 = getelementptr inbounds i8, ptr %452, i64 5
  store i8 118, ptr %453, align 1, !tbaa !11
  %454 = load ptr, ptr %67, align 8, !tbaa !5
  %455 = getelementptr inbounds i8, ptr %454, i64 6
  store i8 49, ptr %455, align 1, !tbaa !11
  %456 = load ptr, ptr %66, align 8, !tbaa !5
  %457 = getelementptr inbounds i8, ptr %456, i64 9
  %458 = getelementptr inbounds [10 x i8], ptr %44, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %457, ptr align 1 %458, i64 10, i1 false)
  %459 = load ptr, ptr %66, align 8, !tbaa !5
  %460 = getelementptr inbounds i8, ptr %459, i64 19
  %461 = getelementptr inbounds [3 x i8], ptr %64, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %460, ptr align 1 %461, i64 3, i1 false)
  %462 = load ptr, ptr %66, align 8, !tbaa !5
  %463 = getelementptr inbounds i8, ptr %462, i64 22
  %464 = getelementptr inbounds [65 x i8], ptr %42, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %463, ptr align 16 %464, i64 65, i1 false)
  %465 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %0, i32 0, i32 3
  %466 = load ptr, ptr %465, align 8, !tbaa !14
  %467 = getelementptr inbounds [32 x i8], ptr %43, i64 0, i64 0
  %468 = load ptr, ptr %66, align 8, !tbaa !5
  %469 = load i32, ptr %65, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %466, ptr noundef %467, i32 noundef 32, ptr noundef %468, i32 noundef %469, i32 noundef 32)
  call void @llvm.lifetime.start.p0(i64 3, ptr %68) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %68, ptr align 1 @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_key, i64 3, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %69) #8
  store i32 87, ptr %69, align 4, !tbaa !9
  br label %470

470:                                              ; preds = %429
  %471 = load i32, ptr %69, align 4, !tbaa !9
  %472 = zext i32 %471 to i64
  %473 = icmp ugt i64 %472, -1
  br i1 %473, label %474, label %476

474:                                              ; preds = %470
  %475 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 484)
  call void @exit(i32 noundef 253) #9
  unreachable

476:                                              ; preds = %470
  br label %477

477:                                              ; preds = %476
  br label %478

478:                                              ; preds = %477
  call void @llvm.lifetime.start.p0(i64 8, ptr %70) #8
  %479 = load i32, ptr %69, align 4, !tbaa !9
  %480 = zext i32 %479 to i64
  %481 = mul i64 %480, 1
  %482 = alloca i8, i64 %481, align 16
  store ptr %482, ptr %70, align 8, !tbaa !5
  %483 = load ptr, ptr %70, align 8, !tbaa !5
  %484 = load i32, ptr %69, align 4, !tbaa !9
  %485 = zext i32 %484 to i64
  %486 = mul i64 %485, 1
  call void @llvm.memset.p0.i64(ptr align 1 %483, i8 0, i64 %486, i1 false)
  %487 = load ptr, ptr %70, align 8, !tbaa !5
  %488 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef %487, i16 noundef zeroext %488)
  call void @llvm.lifetime.start.p0(i64 8, ptr %71) #8
  %489 = load ptr, ptr %70, align 8, !tbaa !5
  %490 = getelementptr inbounds i8, ptr %489, i64 2
  store ptr %490, ptr %71, align 8, !tbaa !5
  %491 = load ptr, ptr %71, align 8, !tbaa !5
  %492 = getelementptr inbounds i8, ptr %491, i64 0
  store i8 72, ptr %492, align 1, !tbaa !11
  %493 = load ptr, ptr %71, align 8, !tbaa !5
  %494 = getelementptr inbounds i8, ptr %493, i64 1
  store i8 80, ptr %494, align 1, !tbaa !11
  %495 = load ptr, ptr %71, align 8, !tbaa !5
  %496 = getelementptr inbounds i8, ptr %495, i64 2
  store i8 75, ptr %496, align 1, !tbaa !11
  %497 = load ptr, ptr %71, align 8, !tbaa !5
  %498 = getelementptr inbounds i8, ptr %497, i64 3
  store i8 69, ptr %498, align 1, !tbaa !11
  %499 = load ptr, ptr %71, align 8, !tbaa !5
  %500 = getelementptr inbounds i8, ptr %499, i64 4
  store i8 45, ptr %500, align 1, !tbaa !11
  %501 = load ptr, ptr %71, align 8, !tbaa !5
  %502 = getelementptr inbounds i8, ptr %501, i64 5
  store i8 118, ptr %502, align 1, !tbaa !11
  %503 = load ptr, ptr %71, align 8, !tbaa !5
  %504 = getelementptr inbounds i8, ptr %503, i64 6
  store i8 49, ptr %504, align 1, !tbaa !11
  %505 = load ptr, ptr %70, align 8, !tbaa !5
  %506 = getelementptr inbounds i8, ptr %505, i64 9
  %507 = getelementptr inbounds [10 x i8], ptr %44, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %506, ptr align 1 %507, i64 10, i1 false)
  %508 = load ptr, ptr %70, align 8, !tbaa !5
  %509 = getelementptr inbounds i8, ptr %508, i64 19
  %510 = getelementptr inbounds [3 x i8], ptr %68, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %509, ptr align 1 %510, i64 3, i1 false)
  %511 = load ptr, ptr %70, align 8, !tbaa !5
  %512 = getelementptr inbounds i8, ptr %511, i64 22
  %513 = getelementptr inbounds [65 x i8], ptr %42, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %512, ptr align 16 %513, i64 65, i1 false)
  %514 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %0, i32 0, i32 0
  %515 = load ptr, ptr %514, align 8, !tbaa !16
  %516 = getelementptr inbounds [32 x i8], ptr %43, i64 0, i64 0
  %517 = load ptr, ptr %70, align 8, !tbaa !5
  %518 = load i32, ptr %69, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %515, ptr noundef %516, i32 noundef 32, ptr noundef %517, i32 noundef %518, i32 noundef 32)
  call void @llvm.lifetime.start.p0(i64 10, ptr %72) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %72, ptr align 1 @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_base_nonce, i64 10, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %73) #8
  store i32 94, ptr %73, align 4, !tbaa !9
  br label %519

519:                                              ; preds = %478
  %520 = load i32, ptr %73, align 4, !tbaa !9
  %521 = zext i32 %520 to i64
  %522 = icmp ugt i64 %521, -1
  br i1 %522, label %523, label %525

523:                                              ; preds = %519
  %524 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 504)
  call void @exit(i32 noundef 253) #9
  unreachable

525:                                              ; preds = %519
  br label %526

526:                                              ; preds = %525
  br label %527

527:                                              ; preds = %526
  call void @llvm.lifetime.start.p0(i64 8, ptr %74) #8
  %528 = load i32, ptr %73, align 4, !tbaa !9
  %529 = zext i32 %528 to i64
  %530 = mul i64 %529, 1
  %531 = alloca i8, i64 %530, align 16
  store ptr %531, ptr %74, align 8, !tbaa !5
  %532 = load ptr, ptr %74, align 8, !tbaa !5
  %533 = load i32, ptr %73, align 4, !tbaa !9
  %534 = zext i32 %533 to i64
  %535 = mul i64 %534, 1
  call void @llvm.memset.p0.i64(ptr align 1 %532, i8 0, i64 %535, i1 false)
  %536 = load ptr, ptr %74, align 8, !tbaa !5
  %537 = call zeroext i16 @__bswap_16(i16 noundef zeroext 12)
  call void @store16(ptr noundef %536, i16 noundef zeroext %537)
  call void @llvm.lifetime.start.p0(i64 8, ptr %75) #8
  %538 = load ptr, ptr %74, align 8, !tbaa !5
  %539 = getelementptr inbounds i8, ptr %538, i64 2
  store ptr %539, ptr %75, align 8, !tbaa !5
  %540 = load ptr, ptr %75, align 8, !tbaa !5
  %541 = getelementptr inbounds i8, ptr %540, i64 0
  store i8 72, ptr %541, align 1, !tbaa !11
  %542 = load ptr, ptr %75, align 8, !tbaa !5
  %543 = getelementptr inbounds i8, ptr %542, i64 1
  store i8 80, ptr %543, align 1, !tbaa !11
  %544 = load ptr, ptr %75, align 8, !tbaa !5
  %545 = getelementptr inbounds i8, ptr %544, i64 2
  store i8 75, ptr %545, align 1, !tbaa !11
  %546 = load ptr, ptr %75, align 8, !tbaa !5
  %547 = getelementptr inbounds i8, ptr %546, i64 3
  store i8 69, ptr %547, align 1, !tbaa !11
  %548 = load ptr, ptr %75, align 8, !tbaa !5
  %549 = getelementptr inbounds i8, ptr %548, i64 4
  store i8 45, ptr %549, align 1, !tbaa !11
  %550 = load ptr, ptr %75, align 8, !tbaa !5
  %551 = getelementptr inbounds i8, ptr %550, i64 5
  store i8 118, ptr %551, align 1, !tbaa !11
  %552 = load ptr, ptr %75, align 8, !tbaa !5
  %553 = getelementptr inbounds i8, ptr %552, i64 6
  store i8 49, ptr %553, align 1, !tbaa !11
  %554 = load ptr, ptr %74, align 8, !tbaa !5
  %555 = getelementptr inbounds i8, ptr %554, i64 9
  %556 = getelementptr inbounds [10 x i8], ptr %44, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %555, ptr align 1 %556, i64 10, i1 false)
  %557 = load ptr, ptr %74, align 8, !tbaa !5
  %558 = getelementptr inbounds i8, ptr %557, i64 19
  %559 = getelementptr inbounds [10 x i8], ptr %72, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %558, ptr align 1 %559, i64 10, i1 false)
  %560 = load ptr, ptr %74, align 8, !tbaa !5
  %561 = getelementptr inbounds i8, ptr %560, i64 29
  %562 = getelementptr inbounds [65 x i8], ptr %42, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %561, ptr align 16 %562, i64 65, i1 false)
  %563 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %0, i32 0, i32 1
  %564 = load ptr, ptr %563, align 8, !tbaa !17
  %565 = getelementptr inbounds [32 x i8], ptr %43, i64 0, i64 0
  %566 = load ptr, ptr %74, align 8, !tbaa !5
  %567 = load i32, ptr %73, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %564, ptr noundef %565, i32 noundef 32, ptr noundef %566, i32 noundef %567, i32 noundef 12)
  %568 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %0, i32 0, i32 2
  %569 = load ptr, ptr %568, align 8, !tbaa !18
  %570 = getelementptr inbounds i64, ptr %569, i64 0
  store i64 0, ptr %570, align 8, !tbaa !19
  store i32 0, ptr %6, align 4
  store i32 1, ptr %76, align 4
  call void @llvm.lifetime.end.p0(i64 8, ptr %75) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %74) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %73) #8
  call void @llvm.lifetime.end.p0(i64 10, ptr %72) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %71) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %70) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %69) #8
  call void @llvm.lifetime.end.p0(i64 3, ptr %68) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %67) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %66) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %65) #8
  call void @llvm.lifetime.end.p0(i64 3, ptr %64) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %63) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %62) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %61) #8
  call void @llvm.lifetime.end.p0(i64 6, ptr %60) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %59) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %58) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %57) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %56) #8
  call void @llvm.lifetime.end.p0(i64 9, ptr %55) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %54) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %53) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %52) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %51) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %50) #8
  call void @llvm.lifetime.end.p0(i64 11, ptr %49) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %48) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %47) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %46) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %45) #8
  call void @llvm.lifetime.end.p0(i64 10, ptr %44) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %43) #8
  call void @llvm.lifetime.end.p0(i64 65, ptr %42) #8
  br label %572

571:                                              ; preds = %242
  store i32 1, ptr %6, align 4
  store i32 1, ptr %76, align 4
  br label %572

572:                                              ; preds = %571, %527
  call void @llvm.lifetime.end.p0(i64 64, ptr %24) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %23) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %22) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %21) #8
  call void @llvm.lifetime.end.p0(i64 1, ptr %20) #8
  call void @llvm.lifetime.end.p0(i64 1, ptr %17) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %16) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %15) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %14) #8
  br label %574

573:                                              ; preds = %5
  store i32 1, ptr %6, align 4
  store i32 1, ptr %76, align 4
  br label %574

574:                                              ; preds = %573, %572
  call void @llvm.lifetime.end.p0(i64 32, ptr %13) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %12) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %11) #8
  %575 = load i32, ptr %6, align 4
  ret i32 %575
}

attributes #0 = { nocallback nofree nosync nounwind willreturn memory(argmem: readwrite) }
attributes #1 = { nocallback nofree nounwind willreturn memory(argmem: write) }
attributes #2 = { "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #3 = { noinline nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #4 = { nocallback nofree nounwind willreturn memory(argmem: readwrite) }
attributes #5 = { noreturn nounwind "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #6 = { inlinehint nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #7 = { nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #8 = { nounwind }
attributes #9 = { noreturn nounwind }

!llvm.module.flags = !{!0, !1, !2, !3}
!llvm.ident = !{!4}

!0 = !{i32 1, !"wchar_size", i32 4}
!1 = !{i32 8, !"PIC Level", i32 2}
!2 = !{i32 7, !"PIE Level", i32 2}
!3 = !{i32 7, !"uwtable", i32 2}
!4 = !{!"clang version 19.1.0 (git@github.com:llvm/llvm-project.git a4bf6cd7cfb1a1421ba92bca9d017b49936c55e4)"}
!5 = !{!6, !6, i64 0}
!6 = !{!"any pointer", !7, i64 0}
!7 = !{!"omnipotent char", !8, i64 0}
!8 = !{!"Simple C/C++ TBAA"}
!9 = !{!10, !10, i64 0}
!10 = !{!"int", !7, i64 0}
!11 = !{!7, !7, i64 0}
!12 = distinct !{!12, !13}
!13 = !{!"llvm.loop.mustprogress"}
!14 = !{!15, !6, i64 24}
!15 = !{!"Hacl_Impl_HPKE_context_s_s", !6, i64 0, !6, i64 8, !6, i64 16, !6, i64 24}
!16 = !{!15, !6, i64 0}
!17 = !{!15, !6, i64 8}
!18 = !{!15, !6, i64 16}
!19 = !{!20, !20, i64 0}
!20 = !{!"long", !7, i64 0}


; Optimized IR (opt -passes='default<O3>'):
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

%struct.Hacl_Impl_HPKE_context_s_s = type { ptr, ptr, ptr, ptr }

@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_eae_prk = external hidden unnamed_addr constant [7 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_shared_secret = external hidden unnamed_addr constant [13 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_psk_id_hash = external hidden unnamed_addr constant [11 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_info_hash = external hidden unnamed_addr constant [9 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_secret = external hidden unnamed_addr constant [6 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_exp = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_key = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_base_nonce = external hidden unnamed_addr constant [10 x i8], align 1

; Function Attrs: mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.start.p0(i64 immarg, ptr nocapture) #0

; Function Attrs: mustprogress nocallback nofree nounwind willreturn memory(argmem: write)
declare void @llvm.memset.p0.i64(ptr nocapture writeonly, i8, i64, i1 immarg) #1

declare void @Hacl_Curve25519_51_secret_to_public(ptr noundef, ptr noundef) local_unnamed_addr #2

declare void @Hacl_Curve25519_51_scalarmult(ptr noundef, ptr noundef, ptr noundef) local_unnamed_addr #2

; Function Attrs: noinline nounwind uwtable
declare hidden zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext, i8 noundef zeroext) local_unnamed_addr #3

; Function Attrs: mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.end.p0(i64 immarg, ptr nocapture) #0

; Function Attrs: mustprogress nocallback nofree nounwind willreturn memory(argmem: readwrite)
declare void @llvm.memcpy.p0.p0.i64(ptr noalias nocapture writeonly, ptr noalias nocapture readonly, i64, i1 immarg) #4

declare void @Hacl_HKDF_extract_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef) local_unnamed_addr #2

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @store16(ptr noundef, i16 noundef zeroext) local_unnamed_addr #5

; Function Attrs: inlinehint nounwind uwtable
declare hidden zeroext i16 @__bswap_16(i16 noundef zeroext) local_unnamed_addr #5

declare void @Hacl_HKDF_expand_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef, i32 noundef) local_unnamed_addr #2

; Function Attrs: nounwind uwtable
define dso_local range(i32 0, 2) i32 @Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR(ptr nocapture noundef readonly byval(%struct.Hacl_Impl_HPKE_context_s_s) align 8 %0, ptr noundef %1, ptr noundef %2, i32 noundef %3, ptr nocapture noundef readonly %4) local_unnamed_addr #6 {
  %6 = alloca [32 x i8], align 16
  %7 = alloca [32 x i8], align 16
  %8 = alloca [32 x i8], align 16
  %9 = alloca [64 x i8], align 16
  %10 = alloca [32 x i8], align 16
  %11 = alloca [5 x i8], align 4
  %.sroa.7 = alloca [32 x i8], align 1
  %.sroa.8 = alloca [32 x i8], align 1
  %12 = alloca [32 x i8], align 16
  %13 = alloca [10 x i8], align 8
  %14 = alloca [32 x i8], align 16
  %15 = alloca [32 x i8], align 16
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %6) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %6, i8 0, i64 32, i1 false)
  call void @Hacl_Curve25519_51_secret_to_public(ptr noundef nonnull %6, ptr noundef %2) #7
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %7) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %7, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %8) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %8, i8 0, i64 32, i1 false)
  call void @Hacl_Curve25519_51_scalarmult(ptr noundef nonnull %8, ptr noundef %2, ptr noundef %1) #7
  %16 = load i8, ptr %8, align 16, !tbaa !5
  %17 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %16, i8 noundef zeroext 0)
  %18 = getelementptr inbounds i8, ptr %8, i64 1
  %19 = load i8, ptr %18, align 1, !tbaa !5
  %20 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %19, i8 noundef zeroext 0)
  %21 = and i8 %20, %17
  %22 = getelementptr inbounds i8, ptr %8, i64 2
  %23 = load i8, ptr %22, align 2, !tbaa !5
  %24 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %23, i8 noundef zeroext 0)
  %25 = and i8 %24, %21
  %26 = getelementptr inbounds i8, ptr %8, i64 3
  %27 = load i8, ptr %26, align 1, !tbaa !5
  %28 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %27, i8 noundef zeroext 0)
  %29 = and i8 %28, %25
  %30 = getelementptr inbounds i8, ptr %8, i64 4
  %31 = load i8, ptr %30, align 4, !tbaa !5
  %32 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %31, i8 noundef zeroext 0)
  %33 = and i8 %32, %29
  %34 = getelementptr inbounds i8, ptr %8, i64 5
  %35 = load i8, ptr %34, align 1, !tbaa !5
  %36 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %35, i8 noundef zeroext 0)
  %37 = and i8 %36, %33
  %38 = getelementptr inbounds i8, ptr %8, i64 6
  %39 = load i8, ptr %38, align 2, !tbaa !5
  %40 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %39, i8 noundef zeroext 0)
  %41 = and i8 %40, %37
  %42 = getelementptr inbounds i8, ptr %8, i64 7
  %43 = load i8, ptr %42, align 1, !tbaa !5
  %44 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %43, i8 noundef zeroext 0)
  %45 = and i8 %44, %41
  %46 = getelementptr inbounds i8, ptr %8, i64 8
  %47 = load i8, ptr %46, align 8, !tbaa !5
  %48 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %47, i8 noundef zeroext 0)
  %49 = and i8 %48, %45
  %50 = getelementptr inbounds i8, ptr %8, i64 9
  %51 = load i8, ptr %50, align 1, !tbaa !5
  %52 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %51, i8 noundef zeroext 0)
  %53 = and i8 %52, %49
  %54 = getelementptr inbounds i8, ptr %8, i64 10
  %55 = load i8, ptr %54, align 2, !tbaa !5
  %56 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %55, i8 noundef zeroext 0)
  %57 = and i8 %56, %53
  %58 = getelementptr inbounds i8, ptr %8, i64 11
  %59 = load i8, ptr %58, align 1, !tbaa !5
  %60 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %59, i8 noundef zeroext 0)
  %61 = and i8 %60, %57
  %62 = getelementptr inbounds i8, ptr %8, i64 12
  %63 = load i8, ptr %62, align 4, !tbaa !5
  %64 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %63, i8 noundef zeroext 0)
  %65 = and i8 %64, %61
  %66 = getelementptr inbounds i8, ptr %8, i64 13
  %67 = load i8, ptr %66, align 1, !tbaa !5
  %68 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %67, i8 noundef zeroext 0)
  %69 = and i8 %68, %65
  %70 = getelementptr inbounds i8, ptr %8, i64 14
  %71 = load i8, ptr %70, align 2, !tbaa !5
  %72 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %71, i8 noundef zeroext 0)
  %73 = and i8 %72, %69
  %74 = getelementptr inbounds i8, ptr %8, i64 15
  %75 = load i8, ptr %74, align 1, !tbaa !5
  %76 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %75, i8 noundef zeroext 0)
  %77 = and i8 %76, %73
  %78 = getelementptr inbounds i8, ptr %8, i64 16
  %79 = load i8, ptr %78, align 16, !tbaa !5
  %80 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %79, i8 noundef zeroext 0)
  %81 = and i8 %80, %77
  %82 = getelementptr inbounds i8, ptr %8, i64 17
  %83 = load i8, ptr %82, align 1, !tbaa !5
  %84 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %83, i8 noundef zeroext 0)
  %85 = and i8 %84, %81
  %86 = getelementptr inbounds i8, ptr %8, i64 18
  %87 = load i8, ptr %86, align 2, !tbaa !5
  %88 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %87, i8 noundef zeroext 0)
  %89 = and i8 %88, %85
  %90 = getelementptr inbounds i8, ptr %8, i64 19
  %91 = load i8, ptr %90, align 1, !tbaa !5
  %92 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %91, i8 noundef zeroext 0)
  %93 = and i8 %92, %89
  %94 = getelementptr inbounds i8, ptr %8, i64 20
  %95 = load i8, ptr %94, align 4, !tbaa !5
  %96 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %95, i8 noundef zeroext 0)
  %97 = and i8 %96, %93
  %98 = getelementptr inbounds i8, ptr %8, i64 21
  %99 = load i8, ptr %98, align 1, !tbaa !5
  %100 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %99, i8 noundef zeroext 0)
  %101 = and i8 %100, %97
  %102 = getelementptr inbounds i8, ptr %8, i64 22
  %103 = load i8, ptr %102, align 2, !tbaa !5
  %104 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %103, i8 noundef zeroext 0)
  %105 = and i8 %104, %101
  %106 = getelementptr inbounds i8, ptr %8, i64 23
  %107 = load i8, ptr %106, align 1, !tbaa !5
  %108 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %107, i8 noundef zeroext 0)
  %109 = and i8 %108, %105
  %110 = getelementptr inbounds i8, ptr %8, i64 24
  %111 = load i8, ptr %110, align 8, !tbaa !5
  %112 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %111, i8 noundef zeroext 0)
  %113 = and i8 %112, %109
  %114 = getelementptr inbounds i8, ptr %8, i64 25
  %115 = load i8, ptr %114, align 1, !tbaa !5
  %116 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %115, i8 noundef zeroext 0)
  %117 = and i8 %116, %113
  %118 = getelementptr inbounds i8, ptr %8, i64 26
  %119 = load i8, ptr %118, align 2, !tbaa !5
  %120 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %119, i8 noundef zeroext 0)
  %121 = and i8 %120, %117
  %122 = getelementptr inbounds i8, ptr %8, i64 27
  %123 = load i8, ptr %122, align 1, !tbaa !5
  %124 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %123, i8 noundef zeroext 0)
  %125 = and i8 %124, %121
  %126 = getelementptr inbounds i8, ptr %8, i64 28
  %127 = load i8, ptr %126, align 4, !tbaa !5
  %128 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %127, i8 noundef zeroext 0)
  %129 = and i8 %128, %125
  %130 = getelementptr inbounds i8, ptr %8, i64 29
  %131 = load i8, ptr %130, align 1, !tbaa !5
  %132 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %131, i8 noundef zeroext 0)
  %133 = and i8 %132, %129
  %134 = getelementptr inbounds i8, ptr %8, i64 30
  %135 = load i8, ptr %134, align 2, !tbaa !5
  %136 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %135, i8 noundef zeroext 0)
  %137 = and i8 %136, %133
  %138 = getelementptr inbounds i8, ptr %8, i64 31
  %139 = load i8, ptr %138, align 1, !tbaa !5
  %140 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %139, i8 noundef zeroext 0)
  %141 = and i8 %140, %137
  %.not.not = icmp eq i8 %141, -1
  call void @llvm.lifetime.start.p0(i64 64, ptr nonnull %9) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(64) %9, i8 0, i64 64, i1 false)
  br i1 %.not.not, label %.critedge, label %142

142:                                              ; preds = %5
  %143 = getelementptr inbounds i8, ptr %9, i64 32
  call void @Hacl_Curve25519_51_secret_to_public(ptr noundef nonnull %143, ptr noundef %2) #7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %9, ptr noundef nonnull align 1 dereferenceable(32) %1, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %10) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %10, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 5, ptr nonnull %11) #7
  store <4 x i8> <i8 75, i8 69, i8 77, i8 0>, ptr %11, align 4, !tbaa !5
  %144 = getelementptr inbounds i8, ptr %11, i64 4
  store i8 32, ptr %144, align 4, !tbaa !5
  %145 = alloca [51 x i8], align 16
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %145, align 16, !tbaa !5
  %146 = getelementptr inbounds i8, ptr %145, i64 4
  store i8 45, ptr %146, align 4, !tbaa !5
  %147 = getelementptr inbounds i8, ptr %145, i64 5
  store i8 118, ptr %147, align 1, !tbaa !5
  %148 = getelementptr inbounds i8, ptr %145, i64 6
  store i8 49, ptr %148, align 2, !tbaa !5
  %149 = getelementptr inbounds i8, ptr %145, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(5) %149, ptr noundef nonnull align 4 dereferenceable(5) %11, i64 5, i1 false)
  %150 = getelementptr inbounds i8, ptr %145, i64 12
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 4 dereferenceable(7) %150, ptr noundef nonnull align 1 dereferenceable(7) @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_eae_prk, i64 7, i1 false)
  %151 = getelementptr inbounds i8, ptr %145, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %151, ptr noundef nonnull align 16 dereferenceable(32) %8, i64 32, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %10, ptr noundef nonnull %11, i32 noundef 0, ptr noundef nonnull %145, i32 noundef 51) #7
  %152 = alloca [91 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(91) %152, i8 0, i64 91, i1 false)
  %153 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef nonnull %152, i16 noundef zeroext %153)
  %154 = getelementptr inbounds i8, ptr %152, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %154, align 2, !tbaa !5
  %155 = getelementptr inbounds i8, ptr %152, i64 6
  store i8 45, ptr %155, align 2, !tbaa !5
  %156 = getelementptr inbounds i8, ptr %152, i64 7
  store i8 118, ptr %156, align 1, !tbaa !5
  %157 = getelementptr inbounds i8, ptr %152, i64 8
  store i8 49, ptr %157, align 8, !tbaa !5
  %158 = getelementptr inbounds i8, ptr %152, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(5) %158, ptr noundef nonnull align 4 dereferenceable(5) %11, i64 5, i1 false)
  %159 = getelementptr inbounds i8, ptr %152, i64 14
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 2 dereferenceable(13) %159, ptr noundef nonnull align 1 dereferenceable(13) @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_shared_secret, i64 13, i1 false)
  %160 = getelementptr inbounds i8, ptr %152, i64 27
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(64) %160, ptr noundef nonnull align 16 dereferenceable(64) %9, i64 64, i1 false)
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef nonnull %7, ptr noundef nonnull %10, i32 noundef 32, ptr noundef nonnull %152, i32 noundef 91, i32 noundef 32) #7
  call void @llvm.lifetime.end.p0(i64 5, ptr nonnull %11) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %10) #7
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %.sroa.7)
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %.sroa.8)
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %12) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %12, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 10, ptr nonnull %13) #7
  store <8 x i8> <i8 72, i8 80, i8 75, i8 69, i8 0, i8 32, i8 0, i8 1>, ptr %13, align 8, !tbaa !5
  %161 = getelementptr inbounds i8, ptr %13, i64 8
  store i8 0, ptr %161, align 8, !tbaa !5
  %162 = getelementptr inbounds i8, ptr %13, i64 9
  store i8 3, ptr %162, align 1, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %14) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %14, i8 0, i64 32, i1 false)
  %163 = alloca [28 x i8], align 16
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %163, align 16, !tbaa !5
  %164 = getelementptr inbounds i8, ptr %163, i64 4
  store i8 45, ptr %164, align 4, !tbaa !5
  %165 = getelementptr inbounds i8, ptr %163, i64 5
  store i8 118, ptr %165, align 1, !tbaa !5
  %166 = getelementptr inbounds i8, ptr %163, i64 6
  store i8 49, ptr %166, align 2, !tbaa !5
  %167 = getelementptr inbounds i8, ptr %163, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %167, ptr noundef nonnull align 8 dereferenceable(10) %13, i64 10, i1 false)
  %168 = getelementptr inbounds i8, ptr %163, i64 17
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(11) %168, ptr noundef nonnull align 1 dereferenceable(11) @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_psk_id_hash, i64 11, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %14, ptr noundef nonnull %13, i32 noundef 0, ptr noundef nonnull %163, i32 noundef 28) #7
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %15) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %15, i8 0, i64 32, i1 false)
  %169 = add i32 %3, 26
  %170 = zext i32 %169 to i64
  %171 = alloca i8, i64 %170, align 16
  call void @llvm.memset.p0.i64(ptr nonnull align 16 %171, i8 0, i64 %170, i1 false)
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %171, align 16, !tbaa !5
  %172 = getelementptr inbounds i8, ptr %171, i64 4
  store i8 45, ptr %172, align 4, !tbaa !5
  %173 = getelementptr inbounds i8, ptr %171, i64 5
  store i8 118, ptr %173, align 1, !tbaa !5
  %174 = getelementptr inbounds i8, ptr %171, i64 6
  store i8 49, ptr %174, align 2, !tbaa !5
  %175 = getelementptr inbounds i8, ptr %171, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %175, ptr noundef nonnull align 8 dereferenceable(10) %13, i64 10, i1 false)
  %176 = getelementptr inbounds i8, ptr %171, i64 17
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(9) %176, ptr noundef nonnull align 1 dereferenceable(9) @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_info_hash, i64 9, i1 false)
  %177 = getelementptr inbounds i8, ptr %171, i64 26
  %178 = zext i32 %3 to i64
  call void @llvm.memcpy.p0.p0.i64(ptr nonnull align 2 %177, ptr align 1 %4, i64 %178, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %15, ptr noundef nonnull %13, i32 noundef 0, ptr noundef nonnull %171, i32 noundef %169) #7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, ptr noundef nonnull align 16 dereferenceable(32) %14, i64 32, i1 false)
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, ptr noundef nonnull align 16 dereferenceable(32) %15, i64 32, i1 false)
  %179 = alloca [23 x i8], align 16
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %179, align 16, !tbaa !5
  %180 = getelementptr inbounds i8, ptr %179, i64 4
  store i8 45, ptr %180, align 4, !tbaa !5
  %181 = getelementptr inbounds i8, ptr %179, i64 5
  store i8 118, ptr %181, align 1, !tbaa !5
  %182 = getelementptr inbounds i8, ptr %179, i64 6
  store i8 49, ptr %182, align 2, !tbaa !5
  %183 = getelementptr inbounds i8, ptr %179, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %183, ptr noundef nonnull align 8 dereferenceable(10) %13, i64 10, i1 false)
  %184 = getelementptr inbounds i8, ptr %179, i64 17
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(6) %184, ptr noundef nonnull align 1 dereferenceable(6) @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_secret, i64 6, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %12, ptr noundef nonnull %7, i32 noundef 32, ptr noundef nonnull %179, i32 noundef 23) #7
  %185 = alloca [87 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(87) %185, i8 0, i64 87, i1 false)
  %186 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef nonnull %185, i16 noundef zeroext %186)
  %187 = getelementptr inbounds i8, ptr %185, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %187, align 2, !tbaa !5
  %188 = getelementptr inbounds i8, ptr %185, i64 6
  store i8 45, ptr %188, align 2, !tbaa !5
  %189 = getelementptr inbounds i8, ptr %185, i64 7
  store i8 118, ptr %189, align 1, !tbaa !5
  %190 = getelementptr inbounds i8, ptr %185, i64 8
  store i8 49, ptr %190, align 8, !tbaa !5
  %191 = getelementptr inbounds i8, ptr %185, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %191, ptr noundef nonnull align 8 dereferenceable(10) %13, i64 10, i1 false)
  %192 = getelementptr inbounds i8, ptr %185, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(3) %192, ptr noundef nonnull align 1 dereferenceable(3) @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_exp, i64 3, i1 false)
  %193 = getelementptr inbounds i8, ptr %185, i64 22
  store i8 0, ptr %193, align 2
  %.sroa.7.0..sroa_idx = getelementptr inbounds i8, ptr %185, i64 23
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7.0..sroa_idx, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, i64 32, i1 false)
  %.sroa.8.0..sroa_idx = getelementptr inbounds i8, ptr %185, i64 55
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8.0..sroa_idx, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, i64 32, i1 false)
  %194 = getelementptr inbounds i8, ptr %0, i64 24
  %195 = load ptr, ptr %194, align 8, !tbaa !8
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %195, ptr noundef nonnull %12, i32 noundef 32, ptr noundef nonnull %185, i32 noundef 87, i32 noundef 32) #7
  %196 = alloca [87 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(87) %196, i8 0, i64 87, i1 false)
  %197 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef nonnull %196, i16 noundef zeroext %197)
  %198 = getelementptr inbounds i8, ptr %196, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %198, align 2, !tbaa !5
  %199 = getelementptr inbounds i8, ptr %196, i64 6
  store i8 45, ptr %199, align 2, !tbaa !5
  %200 = getelementptr inbounds i8, ptr %196, i64 7
  store i8 118, ptr %200, align 1, !tbaa !5
  %201 = getelementptr inbounds i8, ptr %196, i64 8
  store i8 49, ptr %201, align 8, !tbaa !5
  %202 = getelementptr inbounds i8, ptr %196, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %202, ptr noundef nonnull align 8 dereferenceable(10) %13, i64 10, i1 false)
  %203 = getelementptr inbounds i8, ptr %196, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(3) %203, ptr noundef nonnull align 1 dereferenceable(3) @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_key, i64 3, i1 false)
  %204 = getelementptr inbounds i8, ptr %196, i64 22
  store i8 0, ptr %204, align 2
  %.sroa.7.0..sroa_idx120 = getelementptr inbounds i8, ptr %196, i64 23
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7.0..sroa_idx120, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, i64 32, i1 false)
  %.sroa.8.0..sroa_idx122 = getelementptr inbounds i8, ptr %196, i64 55
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8.0..sroa_idx122, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, i64 32, i1 false)
  %205 = load ptr, ptr %0, align 8, !tbaa !11
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %205, ptr noundef nonnull %12, i32 noundef 32, ptr noundef nonnull %196, i32 noundef 87, i32 noundef 32) #7
  %206 = alloca [94 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(94) %206, i8 0, i64 94, i1 false)
  %207 = call zeroext i16 @__bswap_16(i16 noundef zeroext 12)
  call void @store16(ptr noundef nonnull %206, i16 noundef zeroext %207)
  %208 = getelementptr inbounds i8, ptr %206, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %208, align 2, !tbaa !5
  %209 = getelementptr inbounds i8, ptr %206, i64 6
  store i8 45, ptr %209, align 2, !tbaa !5
  %210 = getelementptr inbounds i8, ptr %206, i64 7
  store i8 118, ptr %210, align 1, !tbaa !5
  %211 = getelementptr inbounds i8, ptr %206, i64 8
  store i8 49, ptr %211, align 8, !tbaa !5
  %212 = getelementptr inbounds i8, ptr %206, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %212, ptr noundef nonnull align 8 dereferenceable(10) %13, i64 10, i1 false)
  %213 = getelementptr inbounds i8, ptr %206, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %213, ptr noundef nonnull align 1 dereferenceable(10) @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseR.label_base_nonce, i64 10, i1 false)
  %214 = getelementptr inbounds i8, ptr %206, i64 29
  store i8 0, ptr %214, align 1
  %.sroa.7.0..sroa_idx121 = getelementptr inbounds i8, ptr %206, i64 30
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 2 dereferenceable(32) %.sroa.7.0..sroa_idx121, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, i64 32, i1 false)
  %.sroa.8.0..sroa_idx123 = getelementptr inbounds i8, ptr %206, i64 62
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 2 dereferenceable(32) %.sroa.8.0..sroa_idx123, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, i64 32, i1 false)
  %215 = getelementptr inbounds i8, ptr %0, i64 8
  %216 = load ptr, ptr %215, align 8, !tbaa !12
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %216, ptr noundef nonnull %12, i32 noundef 32, ptr noundef nonnull %206, i32 noundef 94, i32 noundef 12) #7
  %217 = getelementptr inbounds i8, ptr %0, i64 16
  %218 = load ptr, ptr %217, align 8, !tbaa !13
  store i64 0, ptr %218, align 8, !tbaa !14
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %15) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %14) #7
  call void @llvm.lifetime.end.p0(i64 10, ptr nonnull %13) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %12) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %.sroa.7)
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %.sroa.8)
  br label %.critedge

.critedge:                                        ; preds = %5, %142
  %.0 = phi i32 [ 0, %142 ], [ 1, %5 ]
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %9) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %8) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %7) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %6) #7
  ret i32 %.0
}

attributes #0 = { mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite) }
attributes #1 = { mustprogress nocallback nofree nounwind willreturn memory(argmem: write) }
attributes #2 = { "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #3 = { noinline nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #4 = { mustprogress nocallback nofree nounwind willreturn memory(argmem: readwrite) }
attributes #5 = { inlinehint nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #6 = { nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #7 = { nounwind }

!llvm.module.flags = !{!0, !1, !2, !3}
!llvm.ident = !{!4}

!0 = !{i32 1, !"wchar_size", i32 4}
!1 = !{i32 8, !"PIC Level", i32 2}
!2 = !{i32 7, !"PIE Level", i32 2}
!3 = !{i32 7, !"uwtable", i32 2}
!4 = !{!"clang version 19.1.0 (git@github.com:llvm/llvm-project.git a4bf6cd7cfb1a1421ba92bca9d017b49936c55e4)"}
!5 = !{!6, !6, i64 0}
!6 = !{!"omnipotent char", !7, i64 0}
!7 = !{!"Simple C/C++ TBAA"}
!8 = !{!9, !10, i64 24}
!9 = !{!"Hacl_Impl_HPKE_context_s_s", !10, i64 0, !10, i64 8, !10, i64 16, !10, i64 24}
!10 = !{!"any pointer", !6, i64 0}
!11 = !{!9, !10, i64 0}
!12 = !{!9, !10, i64 8}
!13 = !{!9, !10, i64 16}
!14 = !{!15, !15, i64 0}
!15 = !{!"long", !6, i64 0}


; Effective O3 passes: CorrelatedValuePropagationPass,DSEPass,EarlyCSEPass,GVNPass,GlobalOptPass,IPSCCPPass,IndVarSimplifyPass,InferAlignmentPass,InferFunctionAttrsPass,InstCombinePass,LCSSAPass,LoopRotatePass,MemCpyOptPass,PostOrderFunctionAttrsPass,SLPVectorizerPass,SROAPass,SimplifyCFGPass