; LLVM IR from cryspen/libcrux :: sys/hacl/c/src/msvc (Hacl_HPKE_Curve51_CP128_SHA256)

; Unoptimized IR (clang -disable-llvm-passes):
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

%struct.Hacl_Impl_HPKE_context_s_s = type { ptr, ptr, ptr, ptr }

@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_eae_prk = external hidden unnamed_addr constant [7 x i8], align 1
@.str = external hidden unnamed_addr constant [70 x i8], align 1
@.str.1 = external hidden unnamed_addr constant [102 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_shared_secret = external hidden unnamed_addr constant [13 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_psk_id_hash = external hidden unnamed_addr constant [11 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_info_hash = external hidden unnamed_addr constant [9 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_secret = external hidden unnamed_addr constant [6 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_exp = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_key = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_base_nonce = external hidden unnamed_addr constant [10 x i8], align 1

; Function Attrs: nounwind uwtable
define dso_local i32 @Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS(ptr noundef %0, ptr noundef byval(%struct.Hacl_Impl_HPKE_context_s_s) align 8 %1, ptr noundef %2, ptr noundef %3, i32 noundef %4, ptr noundef %5) #0 {
  %7 = alloca i32, align 4
  %8 = alloca ptr, align 8
  %9 = alloca ptr, align 8
  %10 = alloca ptr, align 8
  %11 = alloca i32, align 4
  %12 = alloca ptr, align 8
  %13 = alloca [32 x i8], align 16
  %14 = alloca ptr, align 8
  %15 = alloca i32, align 4
  %16 = alloca i32, align 4
  %17 = alloca [32 x i8], align 16
  %18 = alloca [32 x i8], align 16
  %19 = alloca i8, align 1
  %20 = alloca i32, align 4
  %21 = alloca i8, align 1
  %22 = alloca i8, align 1
  %23 = alloca i32, align 4
  %24 = alloca i32, align 4
  %25 = alloca [64 x i8], align 16
  %26 = alloca ptr, align 8
  %27 = alloca ptr, align 8
  %28 = alloca ptr, align 8
  %29 = alloca [32 x i8], align 16
  %30 = alloca [5 x i8], align 1
  %31 = alloca ptr, align 8
  %32 = alloca ptr, align 8
  %33 = alloca ptr, align 8
  %34 = alloca [7 x i8], align 1
  %35 = alloca i32, align 4
  %36 = alloca ptr, align 8
  %37 = alloca ptr, align 8
  %38 = alloca [13 x i8], align 1
  %39 = alloca i32, align 4
  %40 = alloca ptr, align 8
  %41 = alloca ptr, align 8
  %42 = alloca [65 x i8], align 16
  %43 = alloca [32 x i8], align 16
  %44 = alloca [10 x i8], align 1
  %45 = alloca ptr, align 8
  %46 = alloca ptr, align 8
  %47 = alloca ptr, align 8
  %48 = alloca ptr, align 8
  %49 = alloca [11 x i8], align 1
  %50 = alloca [32 x i8], align 16
  %51 = alloca ptr, align 8
  %52 = alloca i32, align 4
  %53 = alloca ptr, align 8
  %54 = alloca ptr, align 8
  %55 = alloca [9 x i8], align 1
  %56 = alloca [32 x i8], align 16
  %57 = alloca i32, align 4
  %58 = alloca ptr, align 8
  %59 = alloca ptr, align 8
  %60 = alloca [6 x i8], align 1
  %61 = alloca i32, align 4
  %62 = alloca ptr, align 8
  %63 = alloca ptr, align 8
  %64 = alloca [3 x i8], align 1
  %65 = alloca i32, align 4
  %66 = alloca ptr, align 8
  %67 = alloca ptr, align 8
  %68 = alloca [3 x i8], align 1
  %69 = alloca i32, align 4
  %70 = alloca ptr, align 8
  %71 = alloca ptr, align 8
  %72 = alloca [10 x i8], align 1
  %73 = alloca i32, align 4
  %74 = alloca ptr, align 8
  %75 = alloca ptr, align 8
  %76 = alloca i32, align 4
  store ptr %0, ptr %8, align 8, !tbaa !5
  store ptr %2, ptr %9, align 8, !tbaa !5
  store ptr %3, ptr %10, align 8, !tbaa !5
  store i32 %4, ptr %11, align 4, !tbaa !9
  store ptr %5, ptr %12, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 32, ptr %13) #8
  call void @llvm.memset.p0.i64(ptr align 16 %13, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %14) #8
  %77 = load ptr, ptr %8, align 8, !tbaa !5
  store ptr %77, ptr %14, align 8, !tbaa !5
  %78 = load ptr, ptr %14, align 8, !tbaa !5
  %79 = load ptr, ptr %9, align 8, !tbaa !5
  call void @Hacl_Curve25519_51_secret_to_public(ptr noundef %78, ptr noundef %79)
  call void @llvm.lifetime.start.p0(i64 4, ptr %15) #8
  store i32 0, ptr %15, align 4, !tbaa !9
  call void @llvm.lifetime.start.p0(i64 4, ptr %16) #8
  %80 = load i32, ptr %15, align 4, !tbaa !9
  %81 = icmp eq i32 %80, 0
  br i1 %81, label %82, label %238

82:                                               ; preds = %6
  call void @llvm.lifetime.start.p0(i64 32, ptr %17) #8
  call void @llvm.memset.p0.i64(ptr align 16 %17, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr %18) #8
  call void @llvm.memset.p0.i64(ptr align 16 %18, i8 0, i64 32, i1 false)
  %83 = getelementptr inbounds [32 x i8], ptr %17, i64 0, i64 0
  %84 = load ptr, ptr %9, align 8, !tbaa !5
  %85 = load ptr, ptr %10, align 8, !tbaa !5
  call void @Hacl_Curve25519_51_scalarmult(ptr noundef %83, ptr noundef %84, ptr noundef %85)
  call void @llvm.lifetime.start.p0(i64 1, ptr %19) #8
  store i8 -1, ptr %19, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 4, ptr %20) #8
  store i32 0, ptr %20, align 4, !tbaa !9
  br label %86

86:                                               ; preds = %106, %82
  %87 = load i32, ptr %20, align 4, !tbaa !9
  %88 = icmp ult i32 %87, 32
  br i1 %88, label %90, label %89

89:                                               ; preds = %86
  call void @llvm.lifetime.end.p0(i64 4, ptr %20) #8
  br label %109

90:                                               ; preds = %86
  call void @llvm.lifetime.start.p0(i64 1, ptr %21) #8
  %91 = load i32, ptr %20, align 4, !tbaa !9
  %92 = zext i32 %91 to i64
  %93 = getelementptr inbounds [32 x i8], ptr %17, i64 0, i64 %92
  %94 = load i8, ptr %93, align 1, !tbaa !11
  %95 = load i32, ptr %20, align 4, !tbaa !9
  %96 = zext i32 %95 to i64
  %97 = getelementptr inbounds [32 x i8], ptr %18, i64 0, i64 %96
  %98 = load i8, ptr %97, align 1, !tbaa !11
  %99 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %94, i8 noundef zeroext %98)
  store i8 %99, ptr %21, align 1, !tbaa !11
  %100 = load i8, ptr %21, align 1, !tbaa !11
  %101 = zext i8 %100 to i32
  %102 = load i8, ptr %19, align 1, !tbaa !11
  %103 = zext i8 %102 to i32
  %104 = and i32 %101, %103
  %105 = trunc i32 %104 to i8
  store i8 %105, ptr %19, align 1, !tbaa !11
  call void @llvm.lifetime.end.p0(i64 1, ptr %21) #8
  br label %106

106:                                              ; preds = %90
  %107 = load i32, ptr %20, align 4, !tbaa !9
  %108 = add i32 %107, 1
  store i32 %108, ptr %20, align 4, !tbaa !9
  br label %86, !llvm.loop !12

109:                                              ; preds = %89
  call void @llvm.lifetime.start.p0(i64 1, ptr %22) #8
  %110 = load i8, ptr %19, align 1, !tbaa !11
  store i8 %110, ptr %22, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 4, ptr %23) #8
  %111 = load i8, ptr %22, align 1, !tbaa !11
  %112 = zext i8 %111 to i32
  %113 = icmp eq i32 %112, 255
  br i1 %113, label %114, label %115

114:                                              ; preds = %109
  store i32 1, ptr %23, align 4, !tbaa !9
  br label %116

115:                                              ; preds = %109
  store i32 0, ptr %23, align 4, !tbaa !9
  br label %116

116:                                              ; preds = %115, %114
  call void @llvm.lifetime.start.p0(i64 4, ptr %24) #8
  %117 = load i32, ptr %23, align 4, !tbaa !9
  store i32 %117, ptr %24, align 4, !tbaa !9
  call void @llvm.lifetime.start.p0(i64 64, ptr %25) #8
  call void @llvm.memset.p0.i64(ptr align 16 %25, i8 0, i64 64, i1 false)
  %118 = load i32, ptr %24, align 4, !tbaa !9
  %119 = icmp eq i32 %118, 0
  br i1 %119, label %120, label %236

120:                                              ; preds = %116
  %121 = getelementptr inbounds [64 x i8], ptr %25, i64 0, i64 0
  %122 = load ptr, ptr %8, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 16 %121, ptr align 1 %122, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %26) #8
  %123 = getelementptr inbounds [64 x i8], ptr %25, i64 0, i64 0
  %124 = getelementptr inbounds i8, ptr %123, i64 32
  store ptr %124, ptr %26, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 8, ptr %27) #8
  %125 = load ptr, ptr %26, align 8, !tbaa !5
  store ptr %125, ptr %27, align 8, !tbaa !5
  %126 = load ptr, ptr %27, align 8, !tbaa !5
  %127 = load ptr, ptr %10, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %126, ptr align 1 %127, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %28) #8
  %128 = getelementptr inbounds [32 x i8], ptr %17, i64 0, i64 0
  store ptr %128, ptr %28, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 32, ptr %29) #8
  call void @llvm.memset.p0.i64(ptr align 16 %29, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 5, ptr %30) #8
  call void @llvm.memset.p0.i64(ptr align 1 %30, i8 0, i64 5, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %31) #8
  %129 = getelementptr inbounds [5 x i8], ptr %30, i64 0, i64 0
  store ptr %129, ptr %31, align 8, !tbaa !5
  %130 = load ptr, ptr %31, align 8, !tbaa !5
  %131 = getelementptr inbounds i8, ptr %130, i64 0
  store i8 75, ptr %131, align 1, !tbaa !11
  %132 = load ptr, ptr %31, align 8, !tbaa !5
  %133 = getelementptr inbounds i8, ptr %132, i64 1
  store i8 69, ptr %133, align 1, !tbaa !11
  %134 = load ptr, ptr %31, align 8, !tbaa !5
  %135 = getelementptr inbounds i8, ptr %134, i64 2
  store i8 77, ptr %135, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 8, ptr %32) #8
  %136 = getelementptr inbounds [5 x i8], ptr %30, i64 0, i64 0
  %137 = getelementptr inbounds i8, ptr %136, i64 3
  store ptr %137, ptr %32, align 8, !tbaa !5
  %138 = load ptr, ptr %32, align 8, !tbaa !5
  %139 = getelementptr inbounds i8, ptr %138, i64 0
  store i8 0, ptr %139, align 1, !tbaa !11
  %140 = load ptr, ptr %32, align 8, !tbaa !5
  %141 = getelementptr inbounds i8, ptr %140, i64 1
  store i8 32, ptr %141, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 8, ptr %33) #8
  %142 = getelementptr inbounds [5 x i8], ptr %30, i64 0, i64 0
  store ptr %142, ptr %33, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 7, ptr %34) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %34, ptr align 1 @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_eae_prk, i64 7, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %35) #8
  store i32 51, ptr %35, align 4, !tbaa !9
  br label %143

143:                                              ; preds = %120
  %144 = load i32, ptr %35, align 4, !tbaa !9
  %145 = zext i32 %144 to i64
  %146 = icmp ugt i64 %145, -1
  br i1 %146, label %147, label %149

147:                                              ; preds = %143
  %148 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 87)
  call void @exit(i32 noundef 253) #9
  unreachable

149:                                              ; preds = %143
  br label %150

150:                                              ; preds = %149
  br label %151

151:                                              ; preds = %150
  call void @llvm.lifetime.start.p0(i64 8, ptr %36) #8
  %152 = load i32, ptr %35, align 4, !tbaa !9
  %153 = zext i32 %152 to i64
  %154 = mul i64 %153, 1
  %155 = alloca i8, i64 %154, align 16
  store ptr %155, ptr %36, align 8, !tbaa !5
  %156 = load ptr, ptr %36, align 8, !tbaa !5
  %157 = load i32, ptr %35, align 4, !tbaa !9
  %158 = zext i32 %157 to i64
  %159 = mul i64 %158, 1
  call void @llvm.memset.p0.i64(ptr align 1 %156, i8 0, i64 %159, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %37) #8
  %160 = load ptr, ptr %36, align 8, !tbaa !5
  store ptr %160, ptr %37, align 8, !tbaa !5
  %161 = load ptr, ptr %37, align 8, !tbaa !5
  %162 = getelementptr inbounds i8, ptr %161, i64 0
  store i8 72, ptr %162, align 1, !tbaa !11
  %163 = load ptr, ptr %37, align 8, !tbaa !5
  %164 = getelementptr inbounds i8, ptr %163, i64 1
  store i8 80, ptr %164, align 1, !tbaa !11
  %165 = load ptr, ptr %37, align 8, !tbaa !5
  %166 = getelementptr inbounds i8, ptr %165, i64 2
  store i8 75, ptr %166, align 1, !tbaa !11
  %167 = load ptr, ptr %37, align 8, !tbaa !5
  %168 = getelementptr inbounds i8, ptr %167, i64 3
  store i8 69, ptr %168, align 1, !tbaa !11
  %169 = load ptr, ptr %37, align 8, !tbaa !5
  %170 = getelementptr inbounds i8, ptr %169, i64 4
  store i8 45, ptr %170, align 1, !tbaa !11
  %171 = load ptr, ptr %37, align 8, !tbaa !5
  %172 = getelementptr inbounds i8, ptr %171, i64 5
  store i8 118, ptr %172, align 1, !tbaa !11
  %173 = load ptr, ptr %37, align 8, !tbaa !5
  %174 = getelementptr inbounds i8, ptr %173, i64 6
  store i8 49, ptr %174, align 1, !tbaa !11
  %175 = load ptr, ptr %36, align 8, !tbaa !5
  %176 = getelementptr inbounds i8, ptr %175, i64 7
  %177 = getelementptr inbounds [5 x i8], ptr %30, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %176, ptr align 1 %177, i64 5, i1 false)
  %178 = load ptr, ptr %36, align 8, !tbaa !5
  %179 = getelementptr inbounds i8, ptr %178, i64 12
  %180 = getelementptr inbounds [7 x i8], ptr %34, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %179, ptr align 1 %180, i64 7, i1 false)
  %181 = load ptr, ptr %36, align 8, !tbaa !5
  %182 = getelementptr inbounds i8, ptr %181, i64 19
  %183 = load ptr, ptr %28, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %182, ptr align 1 %183, i64 32, i1 false)
  %184 = getelementptr inbounds [32 x i8], ptr %29, i64 0, i64 0
  %185 = load ptr, ptr %33, align 8, !tbaa !5
  %186 = load ptr, ptr %36, align 8, !tbaa !5
  %187 = load i32, ptr %35, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %184, ptr noundef %185, i32 noundef 0, ptr noundef %186, i32 noundef %187)
  call void @llvm.lifetime.start.p0(i64 13, ptr %38) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %38, ptr align 1 @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_shared_secret, i64 13, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %39) #8
  store i32 91, ptr %39, align 4, !tbaa !9
  br label %188

188:                                              ; preds = %151
  %189 = load i32, ptr %39, align 4, !tbaa !9
  %190 = zext i32 %189 to i64
  %191 = icmp ugt i64 %190, -1
  br i1 %191, label %192, label %194

192:                                              ; preds = %188
  %193 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 108)
  call void @exit(i32 noundef 253) #9
  unreachable

194:                                              ; preds = %188
  br label %195

195:                                              ; preds = %194
  br label %196

196:                                              ; preds = %195
  call void @llvm.lifetime.start.p0(i64 8, ptr %40) #8
  %197 = load i32, ptr %39, align 4, !tbaa !9
  %198 = zext i32 %197 to i64
  %199 = mul i64 %198, 1
  %200 = alloca i8, i64 %199, align 16
  store ptr %200, ptr %40, align 8, !tbaa !5
  %201 = load ptr, ptr %40, align 8, !tbaa !5
  %202 = load i32, ptr %39, align 4, !tbaa !9
  %203 = zext i32 %202 to i64
  %204 = mul i64 %203, 1
  call void @llvm.memset.p0.i64(ptr align 1 %201, i8 0, i64 %204, i1 false)
  %205 = load ptr, ptr %40, align 8, !tbaa !5
  %206 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef %205, i16 noundef zeroext %206)
  call void @llvm.lifetime.start.p0(i64 8, ptr %41) #8
  %207 = load ptr, ptr %40, align 8, !tbaa !5
  %208 = getelementptr inbounds i8, ptr %207, i64 2
  store ptr %208, ptr %41, align 8, !tbaa !5
  %209 = load ptr, ptr %41, align 8, !tbaa !5
  %210 = getelementptr inbounds i8, ptr %209, i64 0
  store i8 72, ptr %210, align 1, !tbaa !11
  %211 = load ptr, ptr %41, align 8, !tbaa !5
  %212 = getelementptr inbounds i8, ptr %211, i64 1
  store i8 80, ptr %212, align 1, !tbaa !11
  %213 = load ptr, ptr %41, align 8, !tbaa !5
  %214 = getelementptr inbounds i8, ptr %213, i64 2
  store i8 75, ptr %214, align 1, !tbaa !11
  %215 = load ptr, ptr %41, align 8, !tbaa !5
  %216 = getelementptr inbounds i8, ptr %215, i64 3
  store i8 69, ptr %216, align 1, !tbaa !11
  %217 = load ptr, ptr %41, align 8, !tbaa !5
  %218 = getelementptr inbounds i8, ptr %217, i64 4
  store i8 45, ptr %218, align 1, !tbaa !11
  %219 = load ptr, ptr %41, align 8, !tbaa !5
  %220 = getelementptr inbounds i8, ptr %219, i64 5
  store i8 118, ptr %220, align 1, !tbaa !11
  %221 = load ptr, ptr %41, align 8, !tbaa !5
  %222 = getelementptr inbounds i8, ptr %221, i64 6
  store i8 49, ptr %222, align 1, !tbaa !11
  %223 = load ptr, ptr %40, align 8, !tbaa !5
  %224 = getelementptr inbounds i8, ptr %223, i64 9
  %225 = getelementptr inbounds [5 x i8], ptr %30, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %224, ptr align 1 %225, i64 5, i1 false)
  %226 = load ptr, ptr %40, align 8, !tbaa !5
  %227 = getelementptr inbounds i8, ptr %226, i64 14
  %228 = getelementptr inbounds [13 x i8], ptr %38, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %227, ptr align 1 %228, i64 13, i1 false)
  %229 = load ptr, ptr %40, align 8, !tbaa !5
  %230 = getelementptr inbounds i8, ptr %229, i64 27
  %231 = getelementptr inbounds [64 x i8], ptr %25, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %230, ptr align 16 %231, i64 64, i1 false)
  %232 = getelementptr inbounds [32 x i8], ptr %13, i64 0, i64 0
  %233 = getelementptr inbounds [32 x i8], ptr %29, i64 0, i64 0
  %234 = load ptr, ptr %40, align 8, !tbaa !5
  %235 = load i32, ptr %39, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %232, ptr noundef %233, i32 noundef 32, ptr noundef %234, i32 noundef %235, i32 noundef 32)
  store i32 0, ptr %16, align 4, !tbaa !9
  call void @llvm.lifetime.end.p0(i64 8, ptr %41) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %40) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %39) #8
  call void @llvm.lifetime.end.p0(i64 13, ptr %38) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %37) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %36) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %35) #8
  call void @llvm.lifetime.end.p0(i64 7, ptr %34) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %33) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %32) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %31) #8
  call void @llvm.lifetime.end.p0(i64 5, ptr %30) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %29) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %28) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %27) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %26) #8
  br label %237

236:                                              ; preds = %116
  store i32 1, ptr %16, align 4, !tbaa !9
  br label %237

237:                                              ; preds = %236, %196
  call void @llvm.lifetime.end.p0(i64 64, ptr %25) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %24) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %23) #8
  call void @llvm.lifetime.end.p0(i64 1, ptr %22) #8
  call void @llvm.lifetime.end.p0(i64 1, ptr %19) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %18) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %17) #8
  br label %239

238:                                              ; preds = %6
  store i32 1, ptr %16, align 4, !tbaa !9
  br label %239

239:                                              ; preds = %238, %237
  %240 = load i32, ptr %16, align 4, !tbaa !9
  %241 = icmp eq i32 %240, 0
  br i1 %241, label %242, label %569

242:                                              ; preds = %239
  call void @llvm.lifetime.start.p0(i64 65, ptr %42) #8
  call void @llvm.memset.p0.i64(ptr align 16 %42, i8 0, i64 65, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr %43) #8
  call void @llvm.memset.p0.i64(ptr align 16 %43, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 10, ptr %44) #8
  call void @llvm.memset.p0.i64(ptr align 1 %44, i8 0, i64 10, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %45) #8
  %243 = getelementptr inbounds [10 x i8], ptr %44, i64 0, i64 0
  store ptr %243, ptr %45, align 8, !tbaa !5
  %244 = load ptr, ptr %45, align 8, !tbaa !5
  %245 = getelementptr inbounds i8, ptr %244, i64 0
  store i8 72, ptr %245, align 1, !tbaa !11
  %246 = load ptr, ptr %45, align 8, !tbaa !5
  %247 = getelementptr inbounds i8, ptr %246, i64 1
  store i8 80, ptr %247, align 1, !tbaa !11
  %248 = load ptr, ptr %45, align 8, !tbaa !5
  %249 = getelementptr inbounds i8, ptr %248, i64 2
  store i8 75, ptr %249, align 1, !tbaa !11
  %250 = load ptr, ptr %45, align 8, !tbaa !5
  %251 = getelementptr inbounds i8, ptr %250, i64 3
  store i8 69, ptr %251, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 8, ptr %46) #8
  %252 = getelementptr inbounds [10 x i8], ptr %44, i64 0, i64 0
  %253 = getelementptr inbounds i8, ptr %252, i64 4
  store ptr %253, ptr %46, align 8, !tbaa !5
  %254 = load ptr, ptr %46, align 8, !tbaa !5
  %255 = getelementptr inbounds i8, ptr %254, i64 0
  store i8 0, ptr %255, align 1, !tbaa !11
  %256 = load ptr, ptr %46, align 8, !tbaa !5
  %257 = getelementptr inbounds i8, ptr %256, i64 1
  store i8 32, ptr %257, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 8, ptr %47) #8
  %258 = getelementptr inbounds [10 x i8], ptr %44, i64 0, i64 0
  %259 = getelementptr inbounds i8, ptr %258, i64 6
  store ptr %259, ptr %47, align 8, !tbaa !5
  %260 = load ptr, ptr %47, align 8, !tbaa !5
  %261 = getelementptr inbounds i8, ptr %260, i64 0
  store i8 0, ptr %261, align 1, !tbaa !11
  %262 = load ptr, ptr %47, align 8, !tbaa !5
  %263 = getelementptr inbounds i8, ptr %262, i64 1
  store i8 1, ptr %263, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 8, ptr %48) #8
  %264 = getelementptr inbounds [10 x i8], ptr %44, i64 0, i64 0
  %265 = getelementptr inbounds i8, ptr %264, i64 8
  store ptr %265, ptr %48, align 8, !tbaa !5
  %266 = load ptr, ptr %48, align 8, !tbaa !5
  %267 = getelementptr inbounds i8, ptr %266, i64 0
  store i8 0, ptr %267, align 1, !tbaa !11
  %268 = load ptr, ptr %48, align 8, !tbaa !5
  %269 = getelementptr inbounds i8, ptr %268, i64 1
  store i8 3, ptr %269, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 11, ptr %49) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %49, ptr align 1 @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_psk_id_hash, i64 11, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr %50) #8
  call void @llvm.memset.p0.i64(ptr align 16 %50, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %51) #8
  %270 = getelementptr inbounds [10 x i8], ptr %44, i64 0, i64 0
  store ptr %270, ptr %51, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 4, ptr %52) #8
  store i32 28, ptr %52, align 4, !tbaa !9
  br label %271

271:                                              ; preds = %242
  %272 = load i32, ptr %52, align 4, !tbaa !9
  %273 = zext i32 %272 to i64
  %274 = icmp ugt i64 %273, -1
  br i1 %274, label %275, label %277

275:                                              ; preds = %271
  %276 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 160)
  call void @exit(i32 noundef 253) #9
  unreachable

277:                                              ; preds = %271
  br label %278

278:                                              ; preds = %277
  br label %279

279:                                              ; preds = %278
  call void @llvm.lifetime.start.p0(i64 8, ptr %53) #8
  %280 = load i32, ptr %52, align 4, !tbaa !9
  %281 = zext i32 %280 to i64
  %282 = mul i64 %281, 1
  %283 = alloca i8, i64 %282, align 16
  store ptr %283, ptr %53, align 8, !tbaa !5
  %284 = load ptr, ptr %53, align 8, !tbaa !5
  %285 = load i32, ptr %52, align 4, !tbaa !9
  %286 = zext i32 %285 to i64
  %287 = mul i64 %286, 1
  call void @llvm.memset.p0.i64(ptr align 1 %284, i8 0, i64 %287, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %54) #8
  %288 = load ptr, ptr %53, align 8, !tbaa !5
  store ptr %288, ptr %54, align 8, !tbaa !5
  %289 = load ptr, ptr %54, align 8, !tbaa !5
  %290 = getelementptr inbounds i8, ptr %289, i64 0
  store i8 72, ptr %290, align 1, !tbaa !11
  %291 = load ptr, ptr %54, align 8, !tbaa !5
  %292 = getelementptr inbounds i8, ptr %291, i64 1
  store i8 80, ptr %292, align 1, !tbaa !11
  %293 = load ptr, ptr %54, align 8, !tbaa !5
  %294 = getelementptr inbounds i8, ptr %293, i64 2
  store i8 75, ptr %294, align 1, !tbaa !11
  %295 = load ptr, ptr %54, align 8, !tbaa !5
  %296 = getelementptr inbounds i8, ptr %295, i64 3
  store i8 69, ptr %296, align 1, !tbaa !11
  %297 = load ptr, ptr %54, align 8, !tbaa !5
  %298 = getelementptr inbounds i8, ptr %297, i64 4
  store i8 45, ptr %298, align 1, !tbaa !11
  %299 = load ptr, ptr %54, align 8, !tbaa !5
  %300 = getelementptr inbounds i8, ptr %299, i64 5
  store i8 118, ptr %300, align 1, !tbaa !11
  %301 = load ptr, ptr %54, align 8, !tbaa !5
  %302 = getelementptr inbounds i8, ptr %301, i64 6
  store i8 49, ptr %302, align 1, !tbaa !11
  %303 = load ptr, ptr %53, align 8, !tbaa !5
  %304 = getelementptr inbounds i8, ptr %303, i64 7
  %305 = getelementptr inbounds [10 x i8], ptr %44, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %304, ptr align 1 %305, i64 10, i1 false)
  %306 = load ptr, ptr %53, align 8, !tbaa !5
  %307 = getelementptr inbounds i8, ptr %306, i64 17
  %308 = getelementptr inbounds [11 x i8], ptr %49, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %307, ptr align 1 %308, i64 11, i1 false)
  %309 = load ptr, ptr %53, align 8, !tbaa !5
  %310 = getelementptr inbounds i8, ptr %309, i64 28
  %311 = load ptr, ptr %51, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %310, ptr align 1 %311, i64 0, i1 false)
  %312 = getelementptr inbounds [32 x i8], ptr %50, i64 0, i64 0
  %313 = load ptr, ptr %51, align 8, !tbaa !5
  %314 = load ptr, ptr %53, align 8, !tbaa !5
  %315 = load i32, ptr %52, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %312, ptr noundef %313, i32 noundef 0, ptr noundef %314, i32 noundef %315)
  call void @llvm.lifetime.start.p0(i64 9, ptr %55) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %55, ptr align 1 @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_info_hash, i64 9, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr %56) #8
  call void @llvm.memset.p0.i64(ptr align 16 %56, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %57) #8
  %316 = load i32, ptr %11, align 4, !tbaa !9
  %317 = add i32 26, %316
  store i32 %317, ptr %57, align 4, !tbaa !9
  br label %318

318:                                              ; preds = %279
  %319 = load i32, ptr %57, align 4, !tbaa !9
  %320 = zext i32 %319 to i64
  %321 = icmp ugt i64 %320, -1
  br i1 %321, label %322, label %324

322:                                              ; preds = %318
  %323 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 179)
  call void @exit(i32 noundef 253) #9
  unreachable

324:                                              ; preds = %318
  br label %325

325:                                              ; preds = %324
  br label %326

326:                                              ; preds = %325
  call void @llvm.lifetime.start.p0(i64 8, ptr %58) #8
  %327 = load i32, ptr %57, align 4, !tbaa !9
  %328 = zext i32 %327 to i64
  %329 = mul i64 %328, 1
  %330 = alloca i8, i64 %329, align 16
  store ptr %330, ptr %58, align 8, !tbaa !5
  %331 = load ptr, ptr %58, align 8, !tbaa !5
  %332 = load i32, ptr %57, align 4, !tbaa !9
  %333 = zext i32 %332 to i64
  %334 = mul i64 %333, 1
  call void @llvm.memset.p0.i64(ptr align 1 %331, i8 0, i64 %334, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %59) #8
  %335 = load ptr, ptr %58, align 8, !tbaa !5
  store ptr %335, ptr %59, align 8, !tbaa !5
  %336 = load ptr, ptr %59, align 8, !tbaa !5
  %337 = getelementptr inbounds i8, ptr %336, i64 0
  store i8 72, ptr %337, align 1, !tbaa !11
  %338 = load ptr, ptr %59, align 8, !tbaa !5
  %339 = getelementptr inbounds i8, ptr %338, i64 1
  store i8 80, ptr %339, align 1, !tbaa !11
  %340 = load ptr, ptr %59, align 8, !tbaa !5
  %341 = getelementptr inbounds i8, ptr %340, i64 2
  store i8 75, ptr %341, align 1, !tbaa !11
  %342 = load ptr, ptr %59, align 8, !tbaa !5
  %343 = getelementptr inbounds i8, ptr %342, i64 3
  store i8 69, ptr %343, align 1, !tbaa !11
  %344 = load ptr, ptr %59, align 8, !tbaa !5
  %345 = getelementptr inbounds i8, ptr %344, i64 4
  store i8 45, ptr %345, align 1, !tbaa !11
  %346 = load ptr, ptr %59, align 8, !tbaa !5
  %347 = getelementptr inbounds i8, ptr %346, i64 5
  store i8 118, ptr %347, align 1, !tbaa !11
  %348 = load ptr, ptr %59, align 8, !tbaa !5
  %349 = getelementptr inbounds i8, ptr %348, i64 6
  store i8 49, ptr %349, align 1, !tbaa !11
  %350 = load ptr, ptr %58, align 8, !tbaa !5
  %351 = getelementptr inbounds i8, ptr %350, i64 7
  %352 = getelementptr inbounds [10 x i8], ptr %44, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %351, ptr align 1 %352, i64 10, i1 false)
  %353 = load ptr, ptr %58, align 8, !tbaa !5
  %354 = getelementptr inbounds i8, ptr %353, i64 17
  %355 = getelementptr inbounds [9 x i8], ptr %55, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %354, ptr align 1 %355, i64 9, i1 false)
  %356 = load ptr, ptr %58, align 8, !tbaa !5
  %357 = getelementptr inbounds i8, ptr %356, i64 26
  %358 = load ptr, ptr %12, align 8, !tbaa !5
  %359 = load i32, ptr %11, align 4, !tbaa !9
  %360 = zext i32 %359 to i64
  %361 = mul i64 %360, 1
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %357, ptr align 1 %358, i64 %361, i1 false)
  %362 = getelementptr inbounds [32 x i8], ptr %56, i64 0, i64 0
  %363 = load ptr, ptr %51, align 8, !tbaa !5
  %364 = load ptr, ptr %58, align 8, !tbaa !5
  %365 = load i32, ptr %57, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %362, ptr noundef %363, i32 noundef 0, ptr noundef %364, i32 noundef %365)
  %366 = getelementptr inbounds [65 x i8], ptr %42, i64 0, i64 0
  store i8 0, ptr %366, align 16, !tbaa !11
  %367 = getelementptr inbounds [65 x i8], ptr %42, i64 0, i64 0
  %368 = getelementptr inbounds i8, ptr %367, i64 1
  %369 = getelementptr inbounds [32 x i8], ptr %50, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %368, ptr align 16 %369, i64 32, i1 false)
  %370 = getelementptr inbounds [65 x i8], ptr %42, i64 0, i64 0
  %371 = getelementptr inbounds i8, ptr %370, i64 33
  %372 = getelementptr inbounds [32 x i8], ptr %56, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %371, ptr align 16 %372, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 6, ptr %60) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %60, ptr align 1 @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_secret, i64 6, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %61) #8
  store i32 23, ptr %61, align 4, !tbaa !9
  br label %373

373:                                              ; preds = %326
  %374 = load i32, ptr %61, align 4, !tbaa !9
  %375 = zext i32 %374 to i64
  %376 = icmp ugt i64 %375, -1
  br i1 %376, label %377, label %379

377:                                              ; preds = %373
  %378 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 199)
  call void @exit(i32 noundef 253) #9
  unreachable

379:                                              ; preds = %373
  br label %380

380:                                              ; preds = %379
  br label %381

381:                                              ; preds = %380
  call void @llvm.lifetime.start.p0(i64 8, ptr %62) #8
  %382 = load i32, ptr %61, align 4, !tbaa !9
  %383 = zext i32 %382 to i64
  %384 = mul i64 %383, 1
  %385 = alloca i8, i64 %384, align 16
  store ptr %385, ptr %62, align 8, !tbaa !5
  %386 = load ptr, ptr %62, align 8, !tbaa !5
  %387 = load i32, ptr %61, align 4, !tbaa !9
  %388 = zext i32 %387 to i64
  %389 = mul i64 %388, 1
  call void @llvm.memset.p0.i64(ptr align 1 %386, i8 0, i64 %389, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %63) #8
  %390 = load ptr, ptr %62, align 8, !tbaa !5
  store ptr %390, ptr %63, align 8, !tbaa !5
  %391 = load ptr, ptr %63, align 8, !tbaa !5
  %392 = getelementptr inbounds i8, ptr %391, i64 0
  store i8 72, ptr %392, align 1, !tbaa !11
  %393 = load ptr, ptr %63, align 8, !tbaa !5
  %394 = getelementptr inbounds i8, ptr %393, i64 1
  store i8 80, ptr %394, align 1, !tbaa !11
  %395 = load ptr, ptr %63, align 8, !tbaa !5
  %396 = getelementptr inbounds i8, ptr %395, i64 2
  store i8 75, ptr %396, align 1, !tbaa !11
  %397 = load ptr, ptr %63, align 8, !tbaa !5
  %398 = getelementptr inbounds i8, ptr %397, i64 3
  store i8 69, ptr %398, align 1, !tbaa !11
  %399 = load ptr, ptr %63, align 8, !tbaa !5
  %400 = getelementptr inbounds i8, ptr %399, i64 4
  store i8 45, ptr %400, align 1, !tbaa !11
  %401 = load ptr, ptr %63, align 8, !tbaa !5
  %402 = getelementptr inbounds i8, ptr %401, i64 5
  store i8 118, ptr %402, align 1, !tbaa !11
  %403 = load ptr, ptr %63, align 8, !tbaa !5
  %404 = getelementptr inbounds i8, ptr %403, i64 6
  store i8 49, ptr %404, align 1, !tbaa !11
  %405 = load ptr, ptr %62, align 8, !tbaa !5
  %406 = getelementptr inbounds i8, ptr %405, i64 7
  %407 = getelementptr inbounds [10 x i8], ptr %44, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %406, ptr align 1 %407, i64 10, i1 false)
  %408 = load ptr, ptr %62, align 8, !tbaa !5
  %409 = getelementptr inbounds i8, ptr %408, i64 17
  %410 = getelementptr inbounds [6 x i8], ptr %60, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %409, ptr align 1 %410, i64 6, i1 false)
  %411 = load ptr, ptr %62, align 8, !tbaa !5
  %412 = getelementptr inbounds i8, ptr %411, i64 23
  %413 = load ptr, ptr %51, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %412, ptr align 1 %413, i64 0, i1 false)
  %414 = getelementptr inbounds [32 x i8], ptr %43, i64 0, i64 0
  %415 = getelementptr inbounds [32 x i8], ptr %13, i64 0, i64 0
  %416 = load ptr, ptr %62, align 8, !tbaa !5
  %417 = load i32, ptr %61, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %414, ptr noundef %415, i32 noundef 32, ptr noundef %416, i32 noundef %417)
  call void @llvm.lifetime.start.p0(i64 3, ptr %64) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %64, ptr align 1 @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_exp, i64 3, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %65) #8
  store i32 87, ptr %65, align 4, !tbaa !9
  br label %418

418:                                              ; preds = %381
  %419 = load i32, ptr %65, align 4, !tbaa !9
  %420 = zext i32 %419 to i64
  %421 = icmp ugt i64 %420, -1
  br i1 %421, label %422, label %424

422:                                              ; preds = %418
  %423 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 216)
  call void @exit(i32 noundef 253) #9
  unreachable

424:                                              ; preds = %418
  br label %425

425:                                              ; preds = %424
  br label %426

426:                                              ; preds = %425
  call void @llvm.lifetime.start.p0(i64 8, ptr %66) #8
  %427 = load i32, ptr %65, align 4, !tbaa !9
  %428 = zext i32 %427 to i64
  %429 = mul i64 %428, 1
  %430 = alloca i8, i64 %429, align 16
  store ptr %430, ptr %66, align 8, !tbaa !5
  %431 = load ptr, ptr %66, align 8, !tbaa !5
  %432 = load i32, ptr %65, align 4, !tbaa !9
  %433 = zext i32 %432 to i64
  %434 = mul i64 %433, 1
  call void @llvm.memset.p0.i64(ptr align 1 %431, i8 0, i64 %434, i1 false)
  %435 = load ptr, ptr %66, align 8, !tbaa !5
  %436 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef %435, i16 noundef zeroext %436)
  call void @llvm.lifetime.start.p0(i64 8, ptr %67) #8
  %437 = load ptr, ptr %66, align 8, !tbaa !5
  %438 = getelementptr inbounds i8, ptr %437, i64 2
  store ptr %438, ptr %67, align 8, !tbaa !5
  %439 = load ptr, ptr %67, align 8, !tbaa !5
  %440 = getelementptr inbounds i8, ptr %439, i64 0
  store i8 72, ptr %440, align 1, !tbaa !11
  %441 = load ptr, ptr %67, align 8, !tbaa !5
  %442 = getelementptr inbounds i8, ptr %441, i64 1
  store i8 80, ptr %442, align 1, !tbaa !11
  %443 = load ptr, ptr %67, align 8, !tbaa !5
  %444 = getelementptr inbounds i8, ptr %443, i64 2
  store i8 75, ptr %444, align 1, !tbaa !11
  %445 = load ptr, ptr %67, align 8, !tbaa !5
  %446 = getelementptr inbounds i8, ptr %445, i64 3
  store i8 69, ptr %446, align 1, !tbaa !11
  %447 = load ptr, ptr %67, align 8, !tbaa !5
  %448 = getelementptr inbounds i8, ptr %447, i64 4
  store i8 45, ptr %448, align 1, !tbaa !11
  %449 = load ptr, ptr %67, align 8, !tbaa !5
  %450 = getelementptr inbounds i8, ptr %449, i64 5
  store i8 118, ptr %450, align 1, !tbaa !11
  %451 = load ptr, ptr %67, align 8, !tbaa !5
  %452 = getelementptr inbounds i8, ptr %451, i64 6
  store i8 49, ptr %452, align 1, !tbaa !11
  %453 = load ptr, ptr %66, align 8, !tbaa !5
  %454 = getelementptr inbounds i8, ptr %453, i64 9
  %455 = getelementptr inbounds [10 x i8], ptr %44, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %454, ptr align 1 %455, i64 10, i1 false)
  %456 = load ptr, ptr %66, align 8, !tbaa !5
  %457 = getelementptr inbounds i8, ptr %456, i64 19
  %458 = getelementptr inbounds [3 x i8], ptr %64, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %457, ptr align 1 %458, i64 3, i1 false)
  %459 = load ptr, ptr %66, align 8, !tbaa !5
  %460 = getelementptr inbounds i8, ptr %459, i64 22
  %461 = getelementptr inbounds [65 x i8], ptr %42, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %460, ptr align 16 %461, i64 65, i1 false)
  %462 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %1, i32 0, i32 3
  %463 = load ptr, ptr %462, align 8, !tbaa !14
  %464 = getelementptr inbounds [32 x i8], ptr %43, i64 0, i64 0
  %465 = load ptr, ptr %66, align 8, !tbaa !5
  %466 = load i32, ptr %65, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %463, ptr noundef %464, i32 noundef 32, ptr noundef %465, i32 noundef %466, i32 noundef 32)
  call void @llvm.lifetime.start.p0(i64 3, ptr %68) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %68, ptr align 1 @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_key, i64 3, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %69) #8
  store i32 87, ptr %69, align 4, !tbaa !9
  br label %467

467:                                              ; preds = %426
  %468 = load i32, ptr %69, align 4, !tbaa !9
  %469 = zext i32 %468 to i64
  %470 = icmp ugt i64 %469, -1
  br i1 %470, label %471, label %473

471:                                              ; preds = %467
  %472 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 234)
  call void @exit(i32 noundef 253) #9
  unreachable

473:                                              ; preds = %467
  br label %474

474:                                              ; preds = %473
  br label %475

475:                                              ; preds = %474
  call void @llvm.lifetime.start.p0(i64 8, ptr %70) #8
  %476 = load i32, ptr %69, align 4, !tbaa !9
  %477 = zext i32 %476 to i64
  %478 = mul i64 %477, 1
  %479 = alloca i8, i64 %478, align 16
  store ptr %479, ptr %70, align 8, !tbaa !5
  %480 = load ptr, ptr %70, align 8, !tbaa !5
  %481 = load i32, ptr %69, align 4, !tbaa !9
  %482 = zext i32 %481 to i64
  %483 = mul i64 %482, 1
  call void @llvm.memset.p0.i64(ptr align 1 %480, i8 0, i64 %483, i1 false)
  %484 = load ptr, ptr %70, align 8, !tbaa !5
  %485 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef %484, i16 noundef zeroext %485)
  call void @llvm.lifetime.start.p0(i64 8, ptr %71) #8
  %486 = load ptr, ptr %70, align 8, !tbaa !5
  %487 = getelementptr inbounds i8, ptr %486, i64 2
  store ptr %487, ptr %71, align 8, !tbaa !5
  %488 = load ptr, ptr %71, align 8, !tbaa !5
  %489 = getelementptr inbounds i8, ptr %488, i64 0
  store i8 72, ptr %489, align 1, !tbaa !11
  %490 = load ptr, ptr %71, align 8, !tbaa !5
  %491 = getelementptr inbounds i8, ptr %490, i64 1
  store i8 80, ptr %491, align 1, !tbaa !11
  %492 = load ptr, ptr %71, align 8, !tbaa !5
  %493 = getelementptr inbounds i8, ptr %492, i64 2
  store i8 75, ptr %493, align 1, !tbaa !11
  %494 = load ptr, ptr %71, align 8, !tbaa !5
  %495 = getelementptr inbounds i8, ptr %494, i64 3
  store i8 69, ptr %495, align 1, !tbaa !11
  %496 = load ptr, ptr %71, align 8, !tbaa !5
  %497 = getelementptr inbounds i8, ptr %496, i64 4
  store i8 45, ptr %497, align 1, !tbaa !11
  %498 = load ptr, ptr %71, align 8, !tbaa !5
  %499 = getelementptr inbounds i8, ptr %498, i64 5
  store i8 118, ptr %499, align 1, !tbaa !11
  %500 = load ptr, ptr %71, align 8, !tbaa !5
  %501 = getelementptr inbounds i8, ptr %500, i64 6
  store i8 49, ptr %501, align 1, !tbaa !11
  %502 = load ptr, ptr %70, align 8, !tbaa !5
  %503 = getelementptr inbounds i8, ptr %502, i64 9
  %504 = getelementptr inbounds [10 x i8], ptr %44, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %503, ptr align 1 %504, i64 10, i1 false)
  %505 = load ptr, ptr %70, align 8, !tbaa !5
  %506 = getelementptr inbounds i8, ptr %505, i64 19
  %507 = getelementptr inbounds [3 x i8], ptr %68, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %506, ptr align 1 %507, i64 3, i1 false)
  %508 = load ptr, ptr %70, align 8, !tbaa !5
  %509 = getelementptr inbounds i8, ptr %508, i64 22
  %510 = getelementptr inbounds [65 x i8], ptr %42, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %509, ptr align 16 %510, i64 65, i1 false)
  %511 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %1, i32 0, i32 0
  %512 = load ptr, ptr %511, align 8, !tbaa !16
  %513 = getelementptr inbounds [32 x i8], ptr %43, i64 0, i64 0
  %514 = load ptr, ptr %70, align 8, !tbaa !5
  %515 = load i32, ptr %69, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %512, ptr noundef %513, i32 noundef 32, ptr noundef %514, i32 noundef %515, i32 noundef 32)
  call void @llvm.lifetime.start.p0(i64 10, ptr %72) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %72, ptr align 1 @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_base_nonce, i64 10, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %73) #8
  store i32 94, ptr %73, align 4, !tbaa !9
  br label %516

516:                                              ; preds = %475
  %517 = load i32, ptr %73, align 4, !tbaa !9
  %518 = zext i32 %517 to i64
  %519 = icmp ugt i64 %518, -1
  br i1 %519, label %520, label %522

520:                                              ; preds = %516
  %521 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 254)
  call void @exit(i32 noundef 253) #9
  unreachable

522:                                              ; preds = %516
  br label %523

523:                                              ; preds = %522
  br label %524

524:                                              ; preds = %523
  call void @llvm.lifetime.start.p0(i64 8, ptr %74) #8
  %525 = load i32, ptr %73, align 4, !tbaa !9
  %526 = zext i32 %525 to i64
  %527 = mul i64 %526, 1
  %528 = alloca i8, i64 %527, align 16
  store ptr %528, ptr %74, align 8, !tbaa !5
  %529 = load ptr, ptr %74, align 8, !tbaa !5
  %530 = load i32, ptr %73, align 4, !tbaa !9
  %531 = zext i32 %530 to i64
  %532 = mul i64 %531, 1
  call void @llvm.memset.p0.i64(ptr align 1 %529, i8 0, i64 %532, i1 false)
  %533 = load ptr, ptr %74, align 8, !tbaa !5
  %534 = call zeroext i16 @__bswap_16(i16 noundef zeroext 12)
  call void @store16(ptr noundef %533, i16 noundef zeroext %534)
  call void @llvm.lifetime.start.p0(i64 8, ptr %75) #8
  %535 = load ptr, ptr %74, align 8, !tbaa !5
  %536 = getelementptr inbounds i8, ptr %535, i64 2
  store ptr %536, ptr %75, align 8, !tbaa !5
  %537 = load ptr, ptr %75, align 8, !tbaa !5
  %538 = getelementptr inbounds i8, ptr %537, i64 0
  store i8 72, ptr %538, align 1, !tbaa !11
  %539 = load ptr, ptr %75, align 8, !tbaa !5
  %540 = getelementptr inbounds i8, ptr %539, i64 1
  store i8 80, ptr %540, align 1, !tbaa !11
  %541 = load ptr, ptr %75, align 8, !tbaa !5
  %542 = getelementptr inbounds i8, ptr %541, i64 2
  store i8 75, ptr %542, align 1, !tbaa !11
  %543 = load ptr, ptr %75, align 8, !tbaa !5
  %544 = getelementptr inbounds i8, ptr %543, i64 3
  store i8 69, ptr %544, align 1, !tbaa !11
  %545 = load ptr, ptr %75, align 8, !tbaa !5
  %546 = getelementptr inbounds i8, ptr %545, i64 4
  store i8 45, ptr %546, align 1, !tbaa !11
  %547 = load ptr, ptr %75, align 8, !tbaa !5
  %548 = getelementptr inbounds i8, ptr %547, i64 5
  store i8 118, ptr %548, align 1, !tbaa !11
  %549 = load ptr, ptr %75, align 8, !tbaa !5
  %550 = getelementptr inbounds i8, ptr %549, i64 6
  store i8 49, ptr %550, align 1, !tbaa !11
  %551 = load ptr, ptr %74, align 8, !tbaa !5
  %552 = getelementptr inbounds i8, ptr %551, i64 9
  %553 = getelementptr inbounds [10 x i8], ptr %44, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %552, ptr align 1 %553, i64 10, i1 false)
  %554 = load ptr, ptr %74, align 8, !tbaa !5
  %555 = getelementptr inbounds i8, ptr %554, i64 19
  %556 = getelementptr inbounds [10 x i8], ptr %72, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %555, ptr align 1 %556, i64 10, i1 false)
  %557 = load ptr, ptr %74, align 8, !tbaa !5
  %558 = getelementptr inbounds i8, ptr %557, i64 29
  %559 = getelementptr inbounds [65 x i8], ptr %42, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %558, ptr align 16 %559, i64 65, i1 false)
  %560 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %1, i32 0, i32 1
  %561 = load ptr, ptr %560, align 8, !tbaa !17
  %562 = getelementptr inbounds [32 x i8], ptr %43, i64 0, i64 0
  %563 = load ptr, ptr %74, align 8, !tbaa !5
  %564 = load i32, ptr %73, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %561, ptr noundef %562, i32 noundef 32, ptr noundef %563, i32 noundef %564, i32 noundef 12)
  %565 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %1, i32 0, i32 2
  %566 = load ptr, ptr %565, align 8, !tbaa !18
  %567 = getelementptr inbounds i64, ptr %566, i64 0
  store i64 0, ptr %567, align 8, !tbaa !19
  %568 = load i32, ptr %16, align 4, !tbaa !9
  store i32 %568, ptr %7, align 4
  store i32 1, ptr %76, align 4
  call void @llvm.lifetime.end.p0(i64 8, ptr %75) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %74) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %73) #8
  call void @llvm.lifetime.end.p0(i64 10, ptr %72) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %71) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %70) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %69) #8
  call void @llvm.lifetime.end.p0(i64 3, ptr %68) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %67) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %66) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %65) #8
  call void @llvm.lifetime.end.p0(i64 3, ptr %64) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %63) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %62) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %61) #8
  call void @llvm.lifetime.end.p0(i64 6, ptr %60) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %59) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %58) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %57) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %56) #8
  call void @llvm.lifetime.end.p0(i64 9, ptr %55) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %54) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %53) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %52) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %51) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %50) #8
  call void @llvm.lifetime.end.p0(i64 11, ptr %49) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %48) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %47) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %46) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %45) #8
  call void @llvm.lifetime.end.p0(i64 10, ptr %44) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %43) #8
  call void @llvm.lifetime.end.p0(i64 65, ptr %42) #8
  br label %571

569:                                              ; preds = %239
  %570 = load i32, ptr %16, align 4, !tbaa !9
  store i32 %570, ptr %7, align 4
  store i32 1, ptr %76, align 4
  br label %571

571:                                              ; preds = %569, %524
  call void @llvm.lifetime.end.p0(i64 4, ptr %16) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %15) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %14) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %13) #8
  %572 = load i32, ptr %7, align 4
  ret i32 %572
}

; Function Attrs: nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.start.p0(i64 immarg, ptr nocapture) #1

; Function Attrs: nocallback nofree nounwind willreturn memory(argmem: write)
declare void @llvm.memset.p0.i64(ptr nocapture writeonly, i8, i64, i1 immarg) #2

declare void @Hacl_Curve25519_51_secret_to_public(ptr noundef, ptr noundef) #3

declare void @Hacl_Curve25519_51_scalarmult(ptr noundef, ptr noundef, ptr noundef) #3

; Function Attrs: noinline nounwind uwtable
declare hidden zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext, i8 noundef zeroext) #4

; Function Attrs: nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.end.p0(i64 immarg, ptr nocapture) #1

; Function Attrs: nocallback nofree nounwind willreturn memory(argmem: readwrite)
declare void @llvm.memcpy.p0.p0.i64(ptr noalias nocapture writeonly, ptr noalias nocapture readonly, i64, i1 immarg) #5

declare i32 @printf(ptr noundef, ...) #3

; Function Attrs: noreturn nounwind
declare void @exit(i32 noundef) #6

declare void @Hacl_HKDF_extract_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef) #3

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @store16(ptr noundef, i16 noundef zeroext) #7

; Function Attrs: inlinehint nounwind uwtable
declare hidden zeroext i16 @__bswap_16(i16 noundef zeroext) #7

declare void @Hacl_HKDF_expand_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef, i32 noundef) #3

attributes #0 = { nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #1 = { nocallback nofree nosync nounwind willreturn memory(argmem: readwrite) }
attributes #2 = { nocallback nofree nounwind willreturn memory(argmem: write) }
attributes #3 = { "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #4 = { noinline nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #5 = { nocallback nofree nounwind willreturn memory(argmem: readwrite) }
attributes #6 = { noreturn nounwind "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #7 = { inlinehint nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #8 = { nounwind }
attributes #9 = { noreturn nounwind }

!llvm.module.flags = !{!0, !1, !2, !3}
!llvm.ident = !{!4}

!0 = !{i32 1, !"wchar_size", i32 4}
!1 = !{i32 8, !"PIC Level", i32 2}
!2 = !{i32 7, !"PIE Level", i32 2}
!3 = !{i32 7, !"uwtable", i32 2}
!4 = !{!"clang version 19.1.0 (git@github.com:llvm/llvm-project.git a4bf6cd7cfb1a1421ba92bca9d017b49936c55e4)"}
!5 = !{!6, !6, i64 0}
!6 = !{!"any pointer", !7, i64 0}
!7 = !{!"omnipotent char", !8, i64 0}
!8 = !{!"Simple C/C++ TBAA"}
!9 = !{!10, !10, i64 0}
!10 = !{!"int", !7, i64 0}
!11 = !{!7, !7, i64 0}
!12 = distinct !{!12, !13}
!13 = !{!"llvm.loop.mustprogress"}
!14 = !{!15, !6, i64 24}
!15 = !{!"Hacl_Impl_HPKE_context_s_s", !6, i64 0, !6, i64 8, !6, i64 16, !6, i64 24}
!16 = !{!15, !6, i64 0}
!17 = !{!15, !6, i64 8}
!18 = !{!15, !6, i64 16}
!19 = !{!20, !20, i64 0}
!20 = !{!"long", !7, i64 0}


; Optimized IR (opt -passes='default<O3>'):
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

%struct.Hacl_Impl_HPKE_context_s_s = type { ptr, ptr, ptr, ptr }

@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_eae_prk = external hidden unnamed_addr constant [7 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_shared_secret = external hidden unnamed_addr constant [13 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_psk_id_hash = external hidden unnamed_addr constant [11 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_info_hash = external hidden unnamed_addr constant [9 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_secret = external hidden unnamed_addr constant [6 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_exp = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_key = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_base_nonce = external hidden unnamed_addr constant [10 x i8], align 1

; Function Attrs: nounwind uwtable
define dso_local range(i32 0, 2) i32 @Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS(ptr noundef %0, ptr nocapture noundef readonly byval(%struct.Hacl_Impl_HPKE_context_s_s) align 8 %1, ptr noundef %2, ptr noundef %3, i32 noundef %4, ptr nocapture noundef readonly %5) local_unnamed_addr #0 {
  %7 = alloca [32 x i8], align 16
  %8 = alloca [32 x i8], align 16
  %9 = alloca [64 x i8], align 16
  %10 = alloca [32 x i8], align 16
  %11 = alloca [5 x i8], align 4
  %.sroa.7 = alloca [32 x i8], align 1
  %.sroa.8 = alloca [32 x i8], align 1
  %12 = alloca [32 x i8], align 16
  %13 = alloca [10 x i8], align 8
  %14 = alloca [32 x i8], align 16
  %15 = alloca [32 x i8], align 16
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %7) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %7, i8 0, i64 32, i1 false)
  tail call void @Hacl_Curve25519_51_secret_to_public(ptr noundef %0, ptr noundef %2) #7
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %8) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %8, i8 0, i64 32, i1 false)
  call void @Hacl_Curve25519_51_scalarmult(ptr noundef nonnull %8, ptr noundef %2, ptr noundef %3) #7
  %16 = load i8, ptr %8, align 16, !tbaa !5
  %17 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %16, i8 noundef zeroext 0)
  %18 = getelementptr inbounds i8, ptr %8, i64 1
  %19 = load i8, ptr %18, align 1, !tbaa !5
  %20 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %19, i8 noundef zeroext 0)
  %21 = and i8 %20, %17
  %22 = getelementptr inbounds i8, ptr %8, i64 2
  %23 = load i8, ptr %22, align 2, !tbaa !5
  %24 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %23, i8 noundef zeroext 0)
  %25 = and i8 %24, %21
  %26 = getelementptr inbounds i8, ptr %8, i64 3
  %27 = load i8, ptr %26, align 1, !tbaa !5
  %28 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %27, i8 noundef zeroext 0)
  %29 = and i8 %28, %25
  %30 = getelementptr inbounds i8, ptr %8, i64 4
  %31 = load i8, ptr %30, align 4, !tbaa !5
  %32 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %31, i8 noundef zeroext 0)
  %33 = and i8 %32, %29
  %34 = getelementptr inbounds i8, ptr %8, i64 5
  %35 = load i8, ptr %34, align 1, !tbaa !5
  %36 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %35, i8 noundef zeroext 0)
  %37 = and i8 %36, %33
  %38 = getelementptr inbounds i8, ptr %8, i64 6
  %39 = load i8, ptr %38, align 2, !tbaa !5
  %40 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %39, i8 noundef zeroext 0)
  %41 = and i8 %40, %37
  %42 = getelementptr inbounds i8, ptr %8, i64 7
  %43 = load i8, ptr %42, align 1, !tbaa !5
  %44 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %43, i8 noundef zeroext 0)
  %45 = and i8 %44, %41
  %46 = getelementptr inbounds i8, ptr %8, i64 8
  %47 = load i8, ptr %46, align 8, !tbaa !5
  %48 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %47, i8 noundef zeroext 0)
  %49 = and i8 %48, %45
  %50 = getelementptr inbounds i8, ptr %8, i64 9
  %51 = load i8, ptr %50, align 1, !tbaa !5
  %52 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %51, i8 noundef zeroext 0)
  %53 = and i8 %52, %49
  %54 = getelementptr inbounds i8, ptr %8, i64 10
  %55 = load i8, ptr %54, align 2, !tbaa !5
  %56 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %55, i8 noundef zeroext 0)
  %57 = and i8 %56, %53
  %58 = getelementptr inbounds i8, ptr %8, i64 11
  %59 = load i8, ptr %58, align 1, !tbaa !5
  %60 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %59, i8 noundef zeroext 0)
  %61 = and i8 %60, %57
  %62 = getelementptr inbounds i8, ptr %8, i64 12
  %63 = load i8, ptr %62, align 4, !tbaa !5
  %64 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %63, i8 noundef zeroext 0)
  %65 = and i8 %64, %61
  %66 = getelementptr inbounds i8, ptr %8, i64 13
  %67 = load i8, ptr %66, align 1, !tbaa !5
  %68 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %67, i8 noundef zeroext 0)
  %69 = and i8 %68, %65
  %70 = getelementptr inbounds i8, ptr %8, i64 14
  %71 = load i8, ptr %70, align 2, !tbaa !5
  %72 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %71, i8 noundef zeroext 0)
  %73 = and i8 %72, %69
  %74 = getelementptr inbounds i8, ptr %8, i64 15
  %75 = load i8, ptr %74, align 1, !tbaa !5
  %76 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %75, i8 noundef zeroext 0)
  %77 = and i8 %76, %73
  %78 = getelementptr inbounds i8, ptr %8, i64 16
  %79 = load i8, ptr %78, align 16, !tbaa !5
  %80 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %79, i8 noundef zeroext 0)
  %81 = and i8 %80, %77
  %82 = getelementptr inbounds i8, ptr %8, i64 17
  %83 = load i8, ptr %82, align 1, !tbaa !5
  %84 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %83, i8 noundef zeroext 0)
  %85 = and i8 %84, %81
  %86 = getelementptr inbounds i8, ptr %8, i64 18
  %87 = load i8, ptr %86, align 2, !tbaa !5
  %88 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %87, i8 noundef zeroext 0)
  %89 = and i8 %88, %85
  %90 = getelementptr inbounds i8, ptr %8, i64 19
  %91 = load i8, ptr %90, align 1, !tbaa !5
  %92 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %91, i8 noundef zeroext 0)
  %93 = and i8 %92, %89
  %94 = getelementptr inbounds i8, ptr %8, i64 20
  %95 = load i8, ptr %94, align 4, !tbaa !5
  %96 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %95, i8 noundef zeroext 0)
  %97 = and i8 %96, %93
  %98 = getelementptr inbounds i8, ptr %8, i64 21
  %99 = load i8, ptr %98, align 1, !tbaa !5
  %100 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %99, i8 noundef zeroext 0)
  %101 = and i8 %100, %97
  %102 = getelementptr inbounds i8, ptr %8, i64 22
  %103 = load i8, ptr %102, align 2, !tbaa !5
  %104 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %103, i8 noundef zeroext 0)
  %105 = and i8 %104, %101
  %106 = getelementptr inbounds i8, ptr %8, i64 23
  %107 = load i8, ptr %106, align 1, !tbaa !5
  %108 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %107, i8 noundef zeroext 0)
  %109 = and i8 %108, %105
  %110 = getelementptr inbounds i8, ptr %8, i64 24
  %111 = load i8, ptr %110, align 8, !tbaa !5
  %112 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %111, i8 noundef zeroext 0)
  %113 = and i8 %112, %109
  %114 = getelementptr inbounds i8, ptr %8, i64 25
  %115 = load i8, ptr %114, align 1, !tbaa !5
  %116 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %115, i8 noundef zeroext 0)
  %117 = and i8 %116, %113
  %118 = getelementptr inbounds i8, ptr %8, i64 26
  %119 = load i8, ptr %118, align 2, !tbaa !5
  %120 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %119, i8 noundef zeroext 0)
  %121 = and i8 %120, %117
  %122 = getelementptr inbounds i8, ptr %8, i64 27
  %123 = load i8, ptr %122, align 1, !tbaa !5
  %124 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %123, i8 noundef zeroext 0)
  %125 = and i8 %124, %121
  %126 = getelementptr inbounds i8, ptr %8, i64 28
  %127 = load i8, ptr %126, align 4, !tbaa !5
  %128 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %127, i8 noundef zeroext 0)
  %129 = and i8 %128, %125
  %130 = getelementptr inbounds i8, ptr %8, i64 29
  %131 = load i8, ptr %130, align 1, !tbaa !5
  %132 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %131, i8 noundef zeroext 0)
  %133 = and i8 %132, %129
  %134 = getelementptr inbounds i8, ptr %8, i64 30
  %135 = load i8, ptr %134, align 2, !tbaa !5
  %136 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %135, i8 noundef zeroext 0)
  %137 = and i8 %136, %133
  %138 = getelementptr inbounds i8, ptr %8, i64 31
  %139 = load i8, ptr %138, align 1, !tbaa !5
  %140 = call zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext %139, i8 noundef zeroext 0)
  %141 = and i8 %140, %137
  %.not.not = icmp eq i8 %141, -1
  call void @llvm.lifetime.start.p0(i64 64, ptr nonnull %9)
  br i1 %.not.not, label %.thread, label %142

.thread:                                          ; preds = %6
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %9)
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %8) #7
  br label %219

142:                                              ; preds = %6
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %9, ptr noundef nonnull align 1 dereferenceable(32) %0, i64 32, i1 false)
  %143 = getelementptr inbounds i8, ptr %9, i64 32
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %143, ptr noundef nonnull align 1 dereferenceable(32) %3, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %10) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %10, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 5, ptr nonnull %11) #7
  store <4 x i8> <i8 75, i8 69, i8 77, i8 0>, ptr %11, align 4, !tbaa !5
  %144 = getelementptr inbounds i8, ptr %11, i64 4
  store i8 32, ptr %144, align 4, !tbaa !5
  %145 = alloca [51 x i8], align 16
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %145, align 16, !tbaa !5
  %146 = getelementptr inbounds i8, ptr %145, i64 4
  store i8 45, ptr %146, align 4, !tbaa !5
  %147 = getelementptr inbounds i8, ptr %145, i64 5
  store i8 118, ptr %147, align 1, !tbaa !5
  %148 = getelementptr inbounds i8, ptr %145, i64 6
  store i8 49, ptr %148, align 2, !tbaa !5
  %149 = getelementptr inbounds i8, ptr %145, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(5) %149, ptr noundef nonnull align 4 dereferenceable(5) %11, i64 5, i1 false)
  %150 = getelementptr inbounds i8, ptr %145, i64 12
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 4 dereferenceable(7) %150, ptr noundef nonnull align 1 dereferenceable(7) @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_eae_prk, i64 7, i1 false)
  %151 = getelementptr inbounds i8, ptr %145, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %151, ptr noundef nonnull align 16 dereferenceable(32) %8, i64 32, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %10, ptr noundef nonnull %11, i32 noundef 0, ptr noundef nonnull %145, i32 noundef 51) #7
  %152 = alloca [91 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(91) %152, i8 0, i64 91, i1 false)
  %153 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef nonnull %152, i16 noundef zeroext %153)
  %154 = getelementptr inbounds i8, ptr %152, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %154, align 2, !tbaa !5
  %155 = getelementptr inbounds i8, ptr %152, i64 6
  store i8 45, ptr %155, align 2, !tbaa !5
  %156 = getelementptr inbounds i8, ptr %152, i64 7
  store i8 118, ptr %156, align 1, !tbaa !5
  %157 = getelementptr inbounds i8, ptr %152, i64 8
  store i8 49, ptr %157, align 8, !tbaa !5
  %158 = getelementptr inbounds i8, ptr %152, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(5) %158, ptr noundef nonnull align 4 dereferenceable(5) %11, i64 5, i1 false)
  %159 = getelementptr inbounds i8, ptr %152, i64 14
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 2 dereferenceable(13) %159, ptr noundef nonnull align 1 dereferenceable(13) @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_shared_secret, i64 13, i1 false)
  %160 = getelementptr inbounds i8, ptr %152, i64 27
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(64) %160, ptr noundef nonnull align 16 dereferenceable(64) %9, i64 64, i1 false)
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef nonnull %7, ptr noundef nonnull %10, i32 noundef 32, ptr noundef nonnull %152, i32 noundef 91, i32 noundef 32) #7
  call void @llvm.lifetime.end.p0(i64 5, ptr nonnull %11) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %10) #7
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %9)
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %8) #7
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %.sroa.7)
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %.sroa.8)
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %12) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %12, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 10, ptr nonnull %13) #7
  store <8 x i8> <i8 72, i8 80, i8 75, i8 69, i8 0, i8 32, i8 0, i8 1>, ptr %13, align 8, !tbaa !5
  %161 = getelementptr inbounds i8, ptr %13, i64 8
  store i8 0, ptr %161, align 8, !tbaa !5
  %162 = getelementptr inbounds i8, ptr %13, i64 9
  store i8 3, ptr %162, align 1, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %14) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %14, i8 0, i64 32, i1 false)
  %163 = alloca [28 x i8], align 16
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %163, align 16, !tbaa !5
  %164 = getelementptr inbounds i8, ptr %163, i64 4
  store i8 45, ptr %164, align 4, !tbaa !5
  %165 = getelementptr inbounds i8, ptr %163, i64 5
  store i8 118, ptr %165, align 1, !tbaa !5
  %166 = getelementptr inbounds i8, ptr %163, i64 6
  store i8 49, ptr %166, align 2, !tbaa !5
  %167 = getelementptr inbounds i8, ptr %163, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %167, ptr noundef nonnull align 8 dereferenceable(10) %13, i64 10, i1 false)
  %168 = getelementptr inbounds i8, ptr %163, i64 17
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(11) %168, ptr noundef nonnull align 1 dereferenceable(11) @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_psk_id_hash, i64 11, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %14, ptr noundef nonnull %13, i32 noundef 0, ptr noundef nonnull %163, i32 noundef 28) #7
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %15) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %15, i8 0, i64 32, i1 false)
  %169 = add i32 %4, 26
  %170 = zext i32 %169 to i64
  %171 = alloca i8, i64 %170, align 16
  call void @llvm.memset.p0.i64(ptr nonnull align 16 %171, i8 0, i64 %170, i1 false)
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %171, align 16, !tbaa !5
  %172 = getelementptr inbounds i8, ptr %171, i64 4
  store i8 45, ptr %172, align 4, !tbaa !5
  %173 = getelementptr inbounds i8, ptr %171, i64 5
  store i8 118, ptr %173, align 1, !tbaa !5
  %174 = getelementptr inbounds i8, ptr %171, i64 6
  store i8 49, ptr %174, align 2, !tbaa !5
  %175 = getelementptr inbounds i8, ptr %171, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %175, ptr noundef nonnull align 8 dereferenceable(10) %13, i64 10, i1 false)
  %176 = getelementptr inbounds i8, ptr %171, i64 17
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(9) %176, ptr noundef nonnull align 1 dereferenceable(9) @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_info_hash, i64 9, i1 false)
  %177 = getelementptr inbounds i8, ptr %171, i64 26
  %178 = zext i32 %4 to i64
  call void @llvm.memcpy.p0.p0.i64(ptr nonnull align 2 %177, ptr align 1 %5, i64 %178, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %15, ptr noundef nonnull %13, i32 noundef 0, ptr noundef nonnull %171, i32 noundef %169) #7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, ptr noundef nonnull align 16 dereferenceable(32) %14, i64 32, i1 false)
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, ptr noundef nonnull align 16 dereferenceable(32) %15, i64 32, i1 false)
  %179 = alloca [23 x i8], align 16
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %179, align 16, !tbaa !5
  %180 = getelementptr inbounds i8, ptr %179, i64 4
  store i8 45, ptr %180, align 4, !tbaa !5
  %181 = getelementptr inbounds i8, ptr %179, i64 5
  store i8 118, ptr %181, align 1, !tbaa !5
  %182 = getelementptr inbounds i8, ptr %179, i64 6
  store i8 49, ptr %182, align 2, !tbaa !5
  %183 = getelementptr inbounds i8, ptr %179, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %183, ptr noundef nonnull align 8 dereferenceable(10) %13, i64 10, i1 false)
  %184 = getelementptr inbounds i8, ptr %179, i64 17
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(6) %184, ptr noundef nonnull align 1 dereferenceable(6) @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_secret, i64 6, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %12, ptr noundef nonnull %7, i32 noundef 32, ptr noundef nonnull %179, i32 noundef 23) #7
  %185 = alloca [87 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(87) %185, i8 0, i64 87, i1 false)
  %186 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef nonnull %185, i16 noundef zeroext %186)
  %187 = getelementptr inbounds i8, ptr %185, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %187, align 2, !tbaa !5
  %188 = getelementptr inbounds i8, ptr %185, i64 6
  store i8 45, ptr %188, align 2, !tbaa !5
  %189 = getelementptr inbounds i8, ptr %185, i64 7
  store i8 118, ptr %189, align 1, !tbaa !5
  %190 = getelementptr inbounds i8, ptr %185, i64 8
  store i8 49, ptr %190, align 8, !tbaa !5
  %191 = getelementptr inbounds i8, ptr %185, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %191, ptr noundef nonnull align 8 dereferenceable(10) %13, i64 10, i1 false)
  %192 = getelementptr inbounds i8, ptr %185, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(3) %192, ptr noundef nonnull align 1 dereferenceable(3) @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_exp, i64 3, i1 false)
  %193 = getelementptr inbounds i8, ptr %185, i64 22
  store i8 0, ptr %193, align 2
  %.sroa.7.0..sroa_idx = getelementptr inbounds i8, ptr %185, i64 23
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7.0..sroa_idx, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, i64 32, i1 false)
  %.sroa.8.0..sroa_idx = getelementptr inbounds i8, ptr %185, i64 55
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8.0..sroa_idx, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, i64 32, i1 false)
  %194 = getelementptr inbounds i8, ptr %1, i64 24
  %195 = load ptr, ptr %194, align 8, !tbaa !8
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %195, ptr noundef nonnull %12, i32 noundef 32, ptr noundef nonnull %185, i32 noundef 87, i32 noundef 32) #7
  %196 = alloca [87 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(87) %196, i8 0, i64 87, i1 false)
  %197 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef nonnull %196, i16 noundef zeroext %197)
  %198 = getelementptr inbounds i8, ptr %196, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %198, align 2, !tbaa !5
  %199 = getelementptr inbounds i8, ptr %196, i64 6
  store i8 45, ptr %199, align 2, !tbaa !5
  %200 = getelementptr inbounds i8, ptr %196, i64 7
  store i8 118, ptr %200, align 1, !tbaa !5
  %201 = getelementptr inbounds i8, ptr %196, i64 8
  store i8 49, ptr %201, align 8, !tbaa !5
  %202 = getelementptr inbounds i8, ptr %196, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %202, ptr noundef nonnull align 8 dereferenceable(10) %13, i64 10, i1 false)
  %203 = getelementptr inbounds i8, ptr %196, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(3) %203, ptr noundef nonnull align 1 dereferenceable(3) @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_key, i64 3, i1 false)
  %204 = getelementptr inbounds i8, ptr %196, i64 22
  store i8 0, ptr %204, align 2
  %.sroa.7.0..sroa_idx120 = getelementptr inbounds i8, ptr %196, i64 23
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7.0..sroa_idx120, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, i64 32, i1 false)
  %.sroa.8.0..sroa_idx122 = getelementptr inbounds i8, ptr %196, i64 55
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8.0..sroa_idx122, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, i64 32, i1 false)
  %205 = load ptr, ptr %1, align 8, !tbaa !11
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %205, ptr noundef nonnull %12, i32 noundef 32, ptr noundef nonnull %196, i32 noundef 87, i32 noundef 32) #7
  %206 = alloca [94 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(94) %206, i8 0, i64 94, i1 false)
  %207 = call zeroext i16 @__bswap_16(i16 noundef zeroext 12)
  call void @store16(ptr noundef nonnull %206, i16 noundef zeroext %207)
  %208 = getelementptr inbounds i8, ptr %206, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %208, align 2, !tbaa !5
  %209 = getelementptr inbounds i8, ptr %206, i64 6
  store i8 45, ptr %209, align 2, !tbaa !5
  %210 = getelementptr inbounds i8, ptr %206, i64 7
  store i8 118, ptr %210, align 1, !tbaa !5
  %211 = getelementptr inbounds i8, ptr %206, i64 8
  store i8 49, ptr %211, align 8, !tbaa !5
  %212 = getelementptr inbounds i8, ptr %206, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %212, ptr noundef nonnull align 8 dereferenceable(10) %13, i64 10, i1 false)
  %213 = getelementptr inbounds i8, ptr %206, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %213, ptr noundef nonnull align 1 dereferenceable(10) @__const.Hacl_HPKE_Curve51_CP128_SHA256_setupBaseS.label_base_nonce, i64 10, i1 false)
  %214 = getelementptr inbounds i8, ptr %206, i64 29
  store i8 0, ptr %214, align 1
  %.sroa.7.0..sroa_idx121 = getelementptr inbounds i8, ptr %206, i64 30
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 2 dereferenceable(32) %.sroa.7.0..sroa_idx121, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, i64 32, i1 false)
  %.sroa.8.0..sroa_idx123 = getelementptr inbounds i8, ptr %206, i64 62
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 2 dereferenceable(32) %.sroa.8.0..sroa_idx123, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, i64 32, i1 false)
  %215 = getelementptr inbounds i8, ptr %1, i64 8
  %216 = load ptr, ptr %215, align 8, !tbaa !12
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %216, ptr noundef nonnull %12, i32 noundef 32, ptr noundef nonnull %206, i32 noundef 94, i32 noundef 12) #7
  %217 = getelementptr inbounds i8, ptr %1, i64 16
  %218 = load ptr, ptr %217, align 8, !tbaa !13
  store i64 0, ptr %218, align 8, !tbaa !14
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %15) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %14) #7
  call void @llvm.lifetime.end.p0(i64 10, ptr nonnull %13) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %12) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %.sroa.7)
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %.sroa.8)
  br label %219

219:                                              ; preds = %.thread, %142
  %.0195200 = phi i32 [ 1, %.thread ], [ 0, %142 ]
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %7) #7
  ret i32 %.0195200
}

; Function Attrs: mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.start.p0(i64 immarg, ptr nocapture) #1

; Function Attrs: mustprogress nocallback nofree nounwind willreturn memory(argmem: write)
declare void @llvm.memset.p0.i64(ptr nocapture writeonly, i8, i64, i1 immarg) #2

declare void @Hacl_Curve25519_51_secret_to_public(ptr noundef, ptr noundef) local_unnamed_addr #3

declare void @Hacl_Curve25519_51_scalarmult(ptr noundef, ptr noundef, ptr noundef) local_unnamed_addr #3

; Function Attrs: noinline nounwind uwtable
declare hidden zeroext i8 @FStar_UInt8_eq_mask(i8 noundef zeroext, i8 noundef zeroext) local_unnamed_addr #4

; Function Attrs: mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.end.p0(i64 immarg, ptr nocapture) #1

; Function Attrs: mustprogress nocallback nofree nounwind willreturn memory(argmem: readwrite)
declare void @llvm.memcpy.p0.p0.i64(ptr noalias nocapture writeonly, ptr noalias nocapture readonly, i64, i1 immarg) #5

declare void @Hacl_HKDF_extract_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef) local_unnamed_addr #3

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @store16(ptr noundef, i16 noundef zeroext) local_unnamed_addr #6

; Function Attrs: inlinehint nounwind uwtable
declare hidden zeroext i16 @__bswap_16(i16 noundef zeroext) local_unnamed_addr #6

declare void @Hacl_HKDF_expand_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef, i32 noundef) local_unnamed_addr #3

attributes #0 = { nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #1 = { mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite) }
attributes #2 = { mustprogress nocallback nofree nounwind willreturn memory(argmem: write) }
attributes #3 = { "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #4 = { noinline nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #5 = { mustprogress nocallback nofree nounwind willreturn memory(argmem: readwrite) }
attributes #6 = { inlinehint nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #7 = { nounwind }

!llvm.module.flags = !{!0, !1, !2, !3}
!llvm.ident = !{!4}

!0 = !{i32 1, !"wchar_size", i32 4}
!1 = !{i32 8, !"PIC Level", i32 2}
!2 = !{i32 7, !"PIE Level", i32 2}
!3 = !{i32 7, !"uwtable", i32 2}
!4 = !{!"clang version 19.1.0 (git@github.com:llvm/llvm-project.git a4bf6cd7cfb1a1421ba92bca9d017b49936c55e4)"}
!5 = !{!6, !6, i64 0}
!6 = !{!"omnipotent char", !7, i64 0}
!7 = !{!"Simple C/C++ TBAA"}
!8 = !{!9, !10, i64 24}
!9 = !{!"Hacl_Impl_HPKE_context_s_s", !10, i64 0, !10, i64 8, !10, i64 16, !10, i64 24}
!10 = !{!"any pointer", !6, i64 0}
!11 = !{!9, !10, i64 0}
!12 = !{!9, !10, i64 8}
!13 = !{!9, !10, i64 16}
!14 = !{!15, !15, i64 0}
!15 = !{!"long", !6, i64 0}


; Effective O3 passes: CorrelatedValuePropagationPass,DSEPass,EarlyCSEPass,GVNPass,GlobalOptPass,IPSCCPPass,IndVarSimplifyPass,InferAlignmentPass,InferFunctionAttrsPass,InstCombinePass,JumpThreadingPass,LCSSAPass,LoopRotatePass,MemCpyOptPass,PostOrderFunctionAttrsPass,SLPVectorizerPass,SROAPass,SimplifyCFGPass,TailCallElimPass