; LLVM IR from cryspen/libcrux :: sys/hacl/c/src (Hacl_HPKE_P256_CP128_SHA256)

; Unoptimized IR (clang -disable-llvm-passes):
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

%struct.Hacl_Impl_HPKE_context_s_s = type { ptr, ptr, ptr, ptr }

@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_eae_prk = external hidden unnamed_addr constant [7 x i8], align 1
@.str = external hidden unnamed_addr constant [70 x i8], align 1
@.str.1 = external hidden unnamed_addr constant [94 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_shared_secret = external hidden unnamed_addr constant [13 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_psk_id_hash = external hidden unnamed_addr constant [11 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_info_hash = external hidden unnamed_addr constant [9 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_secret = external hidden unnamed_addr constant [6 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_exp = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_key = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_base_nonce = external hidden unnamed_addr constant [10 x i8], align 1

; Function Attrs: nounwind uwtable
define dso_local i32 @Hacl_HPKE_P256_CP128_SHA256_setupBaseS(ptr noundef %0, ptr noundef byval(%struct.Hacl_Impl_HPKE_context_s_s) align 8 %1, ptr noundef %2, ptr noundef %3, i32 noundef %4, ptr noundef %5) #0 {
  %7 = alloca i32, align 4
  %8 = alloca ptr, align 8
  %9 = alloca ptr, align 8
  %10 = alloca ptr, align 8
  %11 = alloca i32, align 4
  %12 = alloca ptr, align 8
  %13 = alloca [32 x i8], align 16
  %14 = alloca ptr, align 8
  %15 = alloca i8, align 1
  %16 = alloca i32, align 4
  %17 = alloca i32, align 4
  %18 = alloca [64 x i8], align 16
  %19 = alloca [64 x i8], align 16
  %20 = alloca i8, align 1
  %21 = alloca i32, align 4
  %22 = alloca [130 x i8], align 16
  %23 = alloca ptr, align 8
  %24 = alloca ptr, align 8
  %25 = alloca ptr, align 8
  %26 = alloca [32 x i8], align 16
  %27 = alloca [5 x i8], align 1
  %28 = alloca ptr, align 8
  %29 = alloca ptr, align 8
  %30 = alloca ptr, align 8
  %31 = alloca [7 x i8], align 1
  %32 = alloca i32, align 4
  %33 = alloca ptr, align 8
  %34 = alloca i64, align 8
  %35 = alloca ptr, align 8
  %36 = alloca [13 x i8], align 1
  %37 = alloca i32, align 4
  %38 = alloca i64, align 8
  %39 = alloca ptr, align 8
  %40 = alloca [65 x i8], align 16
  %41 = alloca [32 x i8], align 16
  %42 = alloca [10 x i8], align 1
  %43 = alloca ptr, align 8
  %44 = alloca ptr, align 8
  %45 = alloca ptr, align 8
  %46 = alloca ptr, align 8
  %47 = alloca [11 x i8], align 1
  %48 = alloca [32 x i8], align 16
  %49 = alloca ptr, align 8
  %50 = alloca i32, align 4
  %51 = alloca ptr, align 8
  %52 = alloca i64, align 8
  %53 = alloca ptr, align 8
  %54 = alloca [9 x i8], align 1
  %55 = alloca [32 x i8], align 16
  %56 = alloca i32, align 4
  %57 = alloca i64, align 8
  %58 = alloca ptr, align 8
  %59 = alloca [6 x i8], align 1
  %60 = alloca i32, align 4
  %61 = alloca i64, align 8
  %62 = alloca ptr, align 8
  %63 = alloca [3 x i8], align 1
  %64 = alloca i32, align 4
  %65 = alloca i64, align 8
  %66 = alloca ptr, align 8
  %67 = alloca [3 x i8], align 1
  %68 = alloca i32, align 4
  %69 = alloca i64, align 8
  %70 = alloca ptr, align 8
  %71 = alloca [10 x i8], align 1
  %72 = alloca i32, align 4
  %73 = alloca i64, align 8
  %74 = alloca ptr, align 8
  %75 = alloca i32, align 4
  store ptr %0, ptr %8, align 8, !tbaa !5
  store ptr %2, ptr %9, align 8, !tbaa !5
  store ptr %3, ptr %10, align 8, !tbaa !5
  store i32 %4, ptr %11, align 4, !tbaa !9
  store ptr %5, ptr %12, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 32, ptr %13) #8
  call void @llvm.memset.p0.i64(ptr align 16 %13, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %14) #8
  %76 = load ptr, ptr %8, align 8, !tbaa !5
  %77 = getelementptr inbounds i8, ptr %76, i64 1
  store ptr %77, ptr %14, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 1, ptr %15) #8
  %78 = load ptr, ptr %14, align 8, !tbaa !5
  %79 = load ptr, ptr %9, align 8, !tbaa !5
  %80 = call zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_i(ptr noundef %78, ptr noundef %79)
  %81 = zext i1 %80 to i8
  store i8 %81, ptr %15, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 4, ptr %16) #8
  %82 = load i8, ptr %15, align 1, !tbaa !11, !range !13, !noundef !14
  %83 = trunc i8 %82 to i1
  br i1 %83, label %84, label %85

84:                                               ; preds = %6
  store i32 0, ptr %16, align 4, !tbaa !9
  br label %86

85:                                               ; preds = %6
  store i32 1, ptr %16, align 4, !tbaa !9
  br label %86

86:                                               ; preds = %85, %84
  call void @llvm.lifetime.start.p0(i64 4, ptr %17) #8
  %87 = load i32, ptr %16, align 4, !tbaa !9
  %88 = icmp eq i32 %87, 0
  br i1 %88, label %89, label %214

89:                                               ; preds = %86
  %90 = load ptr, ptr %8, align 8, !tbaa !5
  %91 = getelementptr inbounds i8, ptr %90, i64 0
  store i8 4, ptr %91, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 64, ptr %18) #8
  call void @llvm.memset.p0.i64(ptr align 16 %18, i8 0, i64 64, i1 false)
  call void @llvm.lifetime.start.p0(i64 64, ptr %19) #8
  call void @llvm.memset.p0.i64(ptr align 16 %19, i8 0, i64 64, i1 false)
  call void @llvm.lifetime.start.p0(i64 1, ptr %20) #8
  %92 = getelementptr inbounds [64 x i8], ptr %19, i64 0, i64 0
  %93 = load ptr, ptr %10, align 8, !tbaa !5
  %94 = load ptr, ptr %9, align 8, !tbaa !5
  %95 = call zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_r(ptr noundef %92, ptr noundef %93, ptr noundef %94)
  %96 = zext i1 %95 to i8
  store i8 %96, ptr %20, align 1, !tbaa !11
  %97 = getelementptr inbounds [64 x i8], ptr %18, i64 0, i64 0
  %98 = getelementptr inbounds [64 x i8], ptr %19, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 16 %97, ptr align 16 %98, i64 64, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %21) #8
  %99 = load i8, ptr %20, align 1, !tbaa !11, !range !13, !noundef !14
  %100 = trunc i8 %99 to i1
  br i1 %100, label %101, label %102

101:                                              ; preds = %89
  store i32 0, ptr %21, align 4, !tbaa !9
  br label %103

102:                                              ; preds = %89
  store i32 1, ptr %21, align 4, !tbaa !9
  br label %103

103:                                              ; preds = %102, %101
  call void @llvm.lifetime.start.p0(i64 130, ptr %22) #8
  call void @llvm.memset.p0.i64(ptr align 16 %22, i8 0, i64 130, i1 false)
  %104 = load i32, ptr %21, align 4, !tbaa !9
  %105 = icmp eq i32 %104, 0
  br i1 %105, label %106, label %212

106:                                              ; preds = %103
  %107 = getelementptr inbounds [130 x i8], ptr %22, i64 0, i64 0
  %108 = load ptr, ptr %8, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 16 %107, ptr align 1 %108, i64 65, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %23) #8
  %109 = getelementptr inbounds [130 x i8], ptr %22, i64 0, i64 0
  %110 = getelementptr inbounds i8, ptr %109, i64 65
  store ptr %110, ptr %23, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 8, ptr %24) #8
  %111 = load ptr, ptr %23, align 8, !tbaa !5
  %112 = getelementptr inbounds i8, ptr %111, i64 1
  store ptr %112, ptr %24, align 8, !tbaa !5
  %113 = load ptr, ptr %24, align 8, !tbaa !5
  %114 = load ptr, ptr %10, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %113, ptr align 1 %114, i64 64, i1 false)
  %115 = load ptr, ptr %23, align 8, !tbaa !5
  %116 = getelementptr inbounds i8, ptr %115, i64 0
  store i8 4, ptr %116, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %25) #8
  %117 = getelementptr inbounds [64 x i8], ptr %18, i64 0, i64 0
  store ptr %117, ptr %25, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 32, ptr %26) #8
  call void @llvm.memset.p0.i64(ptr align 16 %26, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 5, ptr %27) #8
  call void @llvm.memset.p0.i64(ptr align 1 %27, i8 0, i64 5, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %28) #8
  %118 = getelementptr inbounds [5 x i8], ptr %27, i64 0, i64 0
  store ptr %118, ptr %28, align 8, !tbaa !5
  %119 = load ptr, ptr %28, align 8, !tbaa !5
  %120 = getelementptr inbounds i8, ptr %119, i64 0
  store i8 75, ptr %120, align 1, !tbaa !15
  %121 = load ptr, ptr %28, align 8, !tbaa !5
  %122 = getelementptr inbounds i8, ptr %121, i64 1
  store i8 69, ptr %122, align 1, !tbaa !15
  %123 = load ptr, ptr %28, align 8, !tbaa !5
  %124 = getelementptr inbounds i8, ptr %123, i64 2
  store i8 77, ptr %124, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %29) #8
  %125 = getelementptr inbounds [5 x i8], ptr %27, i64 0, i64 0
  %126 = getelementptr inbounds i8, ptr %125, i64 3
  store ptr %126, ptr %29, align 8, !tbaa !5
  %127 = load ptr, ptr %29, align 8, !tbaa !5
  %128 = getelementptr inbounds i8, ptr %127, i64 0
  store i8 0, ptr %128, align 1, !tbaa !15
  %129 = load ptr, ptr %29, align 8, !tbaa !5
  %130 = getelementptr inbounds i8, ptr %129, i64 1
  store i8 16, ptr %130, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %30) #8
  %131 = getelementptr inbounds [5 x i8], ptr %27, i64 0, i64 0
  store ptr %131, ptr %30, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 7, ptr %31) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %31, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_eae_prk, i64 7, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %32) #8
  store i32 51, ptr %32, align 4, !tbaa !9
  br label %132

132:                                              ; preds = %106
  %133 = load i32, ptr %32, align 4, !tbaa !9
  %134 = zext i32 %133 to i64
  %135 = icmp ugt i64 %134, -1
  br i1 %135, label %136, label %138

136:                                              ; preds = %132
  %137 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 90)
  call void @exit(i32 noundef 253) #9
  unreachable

138:                                              ; preds = %132
  br label %139

139:                                              ; preds = %138
  br label %140

140:                                              ; preds = %139
  %141 = load i32, ptr %32, align 4, !tbaa !9
  %142 = zext i32 %141 to i64
  %143 = call ptr @llvm.stacksave.p0()
  store ptr %143, ptr %33, align 8
  %144 = alloca i8, i64 %142, align 16
  store i64 %142, ptr %34, align 8
  %145 = load i32, ptr %32, align 4, !tbaa !9
  %146 = zext i32 %145 to i64
  %147 = mul i64 %146, 1
  call void @llvm.memset.p0.i64(ptr align 16 %144, i8 0, i64 %147, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %35) #8
  store ptr %144, ptr %35, align 8, !tbaa !5
  %148 = load ptr, ptr %35, align 8, !tbaa !5
  %149 = getelementptr inbounds i8, ptr %148, i64 0
  store i8 72, ptr %149, align 1, !tbaa !15
  %150 = load ptr, ptr %35, align 8, !tbaa !5
  %151 = getelementptr inbounds i8, ptr %150, i64 1
  store i8 80, ptr %151, align 1, !tbaa !15
  %152 = load ptr, ptr %35, align 8, !tbaa !5
  %153 = getelementptr inbounds i8, ptr %152, i64 2
  store i8 75, ptr %153, align 1, !tbaa !15
  %154 = load ptr, ptr %35, align 8, !tbaa !5
  %155 = getelementptr inbounds i8, ptr %154, i64 3
  store i8 69, ptr %155, align 1, !tbaa !15
  %156 = load ptr, ptr %35, align 8, !tbaa !5
  %157 = getelementptr inbounds i8, ptr %156, i64 4
  store i8 45, ptr %157, align 1, !tbaa !15
  %158 = load ptr, ptr %35, align 8, !tbaa !5
  %159 = getelementptr inbounds i8, ptr %158, i64 5
  store i8 118, ptr %159, align 1, !tbaa !15
  %160 = load ptr, ptr %35, align 8, !tbaa !5
  %161 = getelementptr inbounds i8, ptr %160, i64 6
  store i8 49, ptr %161, align 1, !tbaa !15
  %162 = getelementptr inbounds i8, ptr %144, i64 7
  %163 = getelementptr inbounds [5 x i8], ptr %27, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %162, ptr align 1 %163, i64 5, i1 false)
  %164 = getelementptr inbounds i8, ptr %144, i64 12
  %165 = getelementptr inbounds [7 x i8], ptr %31, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %164, ptr align 1 %165, i64 7, i1 false)
  %166 = getelementptr inbounds i8, ptr %144, i64 19
  %167 = load ptr, ptr %25, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %166, ptr align 1 %167, i64 32, i1 false)
  %168 = getelementptr inbounds [32 x i8], ptr %26, i64 0, i64 0
  %169 = load ptr, ptr %30, align 8, !tbaa !5
  %170 = load i32, ptr %32, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %168, ptr noundef %169, i32 noundef 0, ptr noundef %144, i32 noundef %170)
  call void @llvm.lifetime.start.p0(i64 13, ptr %36) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %36, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_shared_secret, i64 13, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %37) #8
  store i32 157, ptr %37, align 4, !tbaa !9
  br label %171

171:                                              ; preds = %140
  %172 = load i32, ptr %37, align 4, !tbaa !9
  %173 = zext i32 %172 to i64
  %174 = icmp ugt i64 %173, -1
  br i1 %174, label %175, label %177

175:                                              ; preds = %171
  %176 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 111)
  call void @exit(i32 noundef 253) #9
  unreachable

177:                                              ; preds = %171
  br label %178

178:                                              ; preds = %177
  br label %179

179:                                              ; preds = %178
  %180 = load i32, ptr %37, align 4, !tbaa !9
  %181 = zext i32 %180 to i64
  %182 = alloca i8, i64 %181, align 16
  store i64 %181, ptr %38, align 8
  %183 = load i32, ptr %37, align 4, !tbaa !9
  %184 = zext i32 %183 to i64
  %185 = mul i64 %184, 1
  call void @llvm.memset.p0.i64(ptr align 16 %182, i8 0, i64 %185, i1 false)
  %186 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef %182, i16 noundef zeroext %186)
  call void @llvm.lifetime.start.p0(i64 8, ptr %39) #8
  %187 = getelementptr inbounds i8, ptr %182, i64 2
  store ptr %187, ptr %39, align 8, !tbaa !5
  %188 = load ptr, ptr %39, align 8, !tbaa !5
  %189 = getelementptr inbounds i8, ptr %188, i64 0
  store i8 72, ptr %189, align 1, !tbaa !15
  %190 = load ptr, ptr %39, align 8, !tbaa !5
  %191 = getelementptr inbounds i8, ptr %190, i64 1
  store i8 80, ptr %191, align 1, !tbaa !15
  %192 = load ptr, ptr %39, align 8, !tbaa !5
  %193 = getelementptr inbounds i8, ptr %192, i64 2
  store i8 75, ptr %193, align 1, !tbaa !15
  %194 = load ptr, ptr %39, align 8, !tbaa !5
  %195 = getelementptr inbounds i8, ptr %194, i64 3
  store i8 69, ptr %195, align 1, !tbaa !15
  %196 = load ptr, ptr %39, align 8, !tbaa !5
  %197 = getelementptr inbounds i8, ptr %196, i64 4
  store i8 45, ptr %197, align 1, !tbaa !15
  %198 = load ptr, ptr %39, align 8, !tbaa !5
  %199 = getelementptr inbounds i8, ptr %198, i64 5
  store i8 118, ptr %199, align 1, !tbaa !15
  %200 = load ptr, ptr %39, align 8, !tbaa !5
  %201 = getelementptr inbounds i8, ptr %200, i64 6
  store i8 49, ptr %201, align 1, !tbaa !15
  %202 = getelementptr inbounds i8, ptr %182, i64 9
  %203 = getelementptr inbounds [5 x i8], ptr %27, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %202, ptr align 1 %203, i64 5, i1 false)
  %204 = getelementptr inbounds i8, ptr %182, i64 14
  %205 = getelementptr inbounds [13 x i8], ptr %36, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %204, ptr align 1 %205, i64 13, i1 false)
  %206 = getelementptr inbounds i8, ptr %182, i64 27
  %207 = getelementptr inbounds [130 x i8], ptr %22, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %206, ptr align 16 %207, i64 130, i1 false)
  %208 = getelementptr inbounds [32 x i8], ptr %13, i64 0, i64 0
  %209 = getelementptr inbounds [32 x i8], ptr %26, i64 0, i64 0
  %210 = load i32, ptr %37, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %208, ptr noundef %209, i32 noundef 32, ptr noundef %182, i32 noundef %210, i32 noundef 32)
  store i32 0, ptr %17, align 4, !tbaa !9
  call void @llvm.lifetime.end.p0(i64 8, ptr %39) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %37) #8
  call void @llvm.lifetime.end.p0(i64 13, ptr %36) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %35) #8
  %211 = load ptr, ptr %33, align 8
  call void @llvm.stackrestore.p0(ptr %211)
  call void @llvm.lifetime.end.p0(i64 4, ptr %32) #8
  call void @llvm.lifetime.end.p0(i64 7, ptr %31) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %30) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %29) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %28) #8
  call void @llvm.lifetime.end.p0(i64 5, ptr %27) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %26) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %25) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %24) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %23) #8
  br label %213

212:                                              ; preds = %103
  store i32 1, ptr %17, align 4, !tbaa !9
  br label %213

213:                                              ; preds = %212, %179
  call void @llvm.lifetime.end.p0(i64 130, ptr %22) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %21) #8
  call void @llvm.lifetime.end.p0(i64 1, ptr %20) #8
  call void @llvm.lifetime.end.p0(i64 64, ptr %19) #8
  call void @llvm.lifetime.end.p0(i64 64, ptr %18) #8
  br label %215

214:                                              ; preds = %86
  store i32 1, ptr %17, align 4, !tbaa !9
  br label %215

215:                                              ; preds = %214, %213
  %216 = load i32, ptr %17, align 4, !tbaa !9
  %217 = icmp eq i32 %216, 0
  br i1 %217, label %218, label %502

218:                                              ; preds = %215
  call void @llvm.lifetime.start.p0(i64 65, ptr %40) #8
  call void @llvm.memset.p0.i64(ptr align 16 %40, i8 0, i64 65, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr %41) #8
  call void @llvm.memset.p0.i64(ptr align 16 %41, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 10, ptr %42) #8
  call void @llvm.memset.p0.i64(ptr align 1 %42, i8 0, i64 10, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %43) #8
  %219 = getelementptr inbounds [10 x i8], ptr %42, i64 0, i64 0
  store ptr %219, ptr %43, align 8, !tbaa !5
  %220 = load ptr, ptr %43, align 8, !tbaa !5
  %221 = getelementptr inbounds i8, ptr %220, i64 0
  store i8 72, ptr %221, align 1, !tbaa !15
  %222 = load ptr, ptr %43, align 8, !tbaa !5
  %223 = getelementptr inbounds i8, ptr %222, i64 1
  store i8 80, ptr %223, align 1, !tbaa !15
  %224 = load ptr, ptr %43, align 8, !tbaa !5
  %225 = getelementptr inbounds i8, ptr %224, i64 2
  store i8 75, ptr %225, align 1, !tbaa !15
  %226 = load ptr, ptr %43, align 8, !tbaa !5
  %227 = getelementptr inbounds i8, ptr %226, i64 3
  store i8 69, ptr %227, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %44) #8
  %228 = getelementptr inbounds [10 x i8], ptr %42, i64 0, i64 0
  %229 = getelementptr inbounds i8, ptr %228, i64 4
  store ptr %229, ptr %44, align 8, !tbaa !5
  %230 = load ptr, ptr %44, align 8, !tbaa !5
  %231 = getelementptr inbounds i8, ptr %230, i64 0
  store i8 0, ptr %231, align 1, !tbaa !15
  %232 = load ptr, ptr %44, align 8, !tbaa !5
  %233 = getelementptr inbounds i8, ptr %232, i64 1
  store i8 16, ptr %233, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %45) #8
  %234 = getelementptr inbounds [10 x i8], ptr %42, i64 0, i64 0
  %235 = getelementptr inbounds i8, ptr %234, i64 6
  store ptr %235, ptr %45, align 8, !tbaa !5
  %236 = load ptr, ptr %45, align 8, !tbaa !5
  %237 = getelementptr inbounds i8, ptr %236, i64 0
  store i8 0, ptr %237, align 1, !tbaa !15
  %238 = load ptr, ptr %45, align 8, !tbaa !5
  %239 = getelementptr inbounds i8, ptr %238, i64 1
  store i8 1, ptr %239, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %46) #8
  %240 = getelementptr inbounds [10 x i8], ptr %42, i64 0, i64 0
  %241 = getelementptr inbounds i8, ptr %240, i64 8
  store ptr %241, ptr %46, align 8, !tbaa !5
  %242 = load ptr, ptr %46, align 8, !tbaa !5
  %243 = getelementptr inbounds i8, ptr %242, i64 0
  store i8 0, ptr %243, align 1, !tbaa !15
  %244 = load ptr, ptr %46, align 8, !tbaa !5
  %245 = getelementptr inbounds i8, ptr %244, i64 1
  store i8 3, ptr %245, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 11, ptr %47) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %47, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_psk_id_hash, i64 11, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr %48) #8
  call void @llvm.memset.p0.i64(ptr align 16 %48, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %49) #8
  %246 = getelementptr inbounds [10 x i8], ptr %42, i64 0, i64 0
  store ptr %246, ptr %49, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 4, ptr %50) #8
  store i32 28, ptr %50, align 4, !tbaa !9
  br label %247

247:                                              ; preds = %218
  %248 = load i32, ptr %50, align 4, !tbaa !9
  %249 = zext i32 %248 to i64
  %250 = icmp ugt i64 %249, -1
  br i1 %250, label %251, label %253

251:                                              ; preds = %247
  %252 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 163)
  call void @exit(i32 noundef 253) #9
  unreachable

253:                                              ; preds = %247
  br label %254

254:                                              ; preds = %253
  br label %255

255:                                              ; preds = %254
  %256 = load i32, ptr %50, align 4, !tbaa !9
  %257 = zext i32 %256 to i64
  %258 = call ptr @llvm.stacksave.p0()
  store ptr %258, ptr %51, align 8
  %259 = alloca i8, i64 %257, align 16
  store i64 %257, ptr %52, align 8
  %260 = load i32, ptr %50, align 4, !tbaa !9
  %261 = zext i32 %260 to i64
  %262 = mul i64 %261, 1
  call void @llvm.memset.p0.i64(ptr align 16 %259, i8 0, i64 %262, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %53) #8
  store ptr %259, ptr %53, align 8, !tbaa !5
  %263 = load ptr, ptr %53, align 8, !tbaa !5
  %264 = getelementptr inbounds i8, ptr %263, i64 0
  store i8 72, ptr %264, align 1, !tbaa !15
  %265 = load ptr, ptr %53, align 8, !tbaa !5
  %266 = getelementptr inbounds i8, ptr %265, i64 1
  store i8 80, ptr %266, align 1, !tbaa !15
  %267 = load ptr, ptr %53, align 8, !tbaa !5
  %268 = getelementptr inbounds i8, ptr %267, i64 2
  store i8 75, ptr %268, align 1, !tbaa !15
  %269 = load ptr, ptr %53, align 8, !tbaa !5
  %270 = getelementptr inbounds i8, ptr %269, i64 3
  store i8 69, ptr %270, align 1, !tbaa !15
  %271 = load ptr, ptr %53, align 8, !tbaa !5
  %272 = getelementptr inbounds i8, ptr %271, i64 4
  store i8 45, ptr %272, align 1, !tbaa !15
  %273 = load ptr, ptr %53, align 8, !tbaa !5
  %274 = getelementptr inbounds i8, ptr %273, i64 5
  store i8 118, ptr %274, align 1, !tbaa !15
  %275 = load ptr, ptr %53, align 8, !tbaa !5
  %276 = getelementptr inbounds i8, ptr %275, i64 6
  store i8 49, ptr %276, align 1, !tbaa !15
  %277 = getelementptr inbounds i8, ptr %259, i64 7
  %278 = getelementptr inbounds [10 x i8], ptr %42, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %277, ptr align 1 %278, i64 10, i1 false)
  %279 = getelementptr inbounds i8, ptr %259, i64 17
  %280 = getelementptr inbounds [11 x i8], ptr %47, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %279, ptr align 1 %280, i64 11, i1 false)
  %281 = getelementptr inbounds i8, ptr %259, i64 28
  %282 = load ptr, ptr %49, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %281, ptr align 1 %282, i64 0, i1 false)
  %283 = getelementptr inbounds [32 x i8], ptr %48, i64 0, i64 0
  %284 = load ptr, ptr %49, align 8, !tbaa !5
  %285 = load i32, ptr %50, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %283, ptr noundef %284, i32 noundef 0, ptr noundef %259, i32 noundef %285)
  call void @llvm.lifetime.start.p0(i64 9, ptr %54) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %54, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_info_hash, i64 9, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr %55) #8
  call void @llvm.memset.p0.i64(ptr align 16 %55, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %56) #8
  %286 = load i32, ptr %11, align 4, !tbaa !9
  %287 = add i32 26, %286
  store i32 %287, ptr %56, align 4, !tbaa !9
  br label %288

288:                                              ; preds = %255
  %289 = load i32, ptr %56, align 4, !tbaa !9
  %290 = zext i32 %289 to i64
  %291 = icmp ugt i64 %290, -1
  br i1 %291, label %292, label %294

292:                                              ; preds = %288
  %293 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 182)
  call void @exit(i32 noundef 253) #9
  unreachable

294:                                              ; preds = %288
  br label %295

295:                                              ; preds = %294
  br label %296

296:                                              ; preds = %295
  %297 = load i32, ptr %56, align 4, !tbaa !9
  %298 = zext i32 %297 to i64
  %299 = alloca i8, i64 %298, align 16
  store i64 %298, ptr %57, align 8
  %300 = load i32, ptr %56, align 4, !tbaa !9
  %301 = zext i32 %300 to i64
  %302 = mul i64 %301, 1
  call void @llvm.memset.p0.i64(ptr align 16 %299, i8 0, i64 %302, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %58) #8
  store ptr %299, ptr %58, align 8, !tbaa !5
  %303 = load ptr, ptr %58, align 8, !tbaa !5
  %304 = getelementptr inbounds i8, ptr %303, i64 0
  store i8 72, ptr %304, align 1, !tbaa !15
  %305 = load ptr, ptr %58, align 8, !tbaa !5
  %306 = getelementptr inbounds i8, ptr %305, i64 1
  store i8 80, ptr %306, align 1, !tbaa !15
  %307 = load ptr, ptr %58, align 8, !tbaa !5
  %308 = getelementptr inbounds i8, ptr %307, i64 2
  store i8 75, ptr %308, align 1, !tbaa !15
  %309 = load ptr, ptr %58, align 8, !tbaa !5
  %310 = getelementptr inbounds i8, ptr %309, i64 3
  store i8 69, ptr %310, align 1, !tbaa !15
  %311 = load ptr, ptr %58, align 8, !tbaa !5
  %312 = getelementptr inbounds i8, ptr %311, i64 4
  store i8 45, ptr %312, align 1, !tbaa !15
  %313 = load ptr, ptr %58, align 8, !tbaa !5
  %314 = getelementptr inbounds i8, ptr %313, i64 5
  store i8 118, ptr %314, align 1, !tbaa !15
  %315 = load ptr, ptr %58, align 8, !tbaa !5
  %316 = getelementptr inbounds i8, ptr %315, i64 6
  store i8 49, ptr %316, align 1, !tbaa !15
  %317 = getelementptr inbounds i8, ptr %299, i64 7
  %318 = getelementptr inbounds [10 x i8], ptr %42, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %317, ptr align 1 %318, i64 10, i1 false)
  %319 = getelementptr inbounds i8, ptr %299, i64 17
  %320 = getelementptr inbounds [9 x i8], ptr %54, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %319, ptr align 1 %320, i64 9, i1 false)
  %321 = getelementptr inbounds i8, ptr %299, i64 26
  %322 = load ptr, ptr %12, align 8, !tbaa !5
  %323 = load i32, ptr %11, align 4, !tbaa !9
  %324 = zext i32 %323 to i64
  %325 = mul i64 %324, 1
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %321, ptr align 1 %322, i64 %325, i1 false)
  %326 = getelementptr inbounds [32 x i8], ptr %55, i64 0, i64 0
  %327 = load ptr, ptr %49, align 8, !tbaa !5
  %328 = load i32, ptr %56, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %326, ptr noundef %327, i32 noundef 0, ptr noundef %299, i32 noundef %328)
  %329 = getelementptr inbounds [65 x i8], ptr %40, i64 0, i64 0
  store i8 0, ptr %329, align 16, !tbaa !15
  %330 = getelementptr inbounds [65 x i8], ptr %40, i64 0, i64 0
  %331 = getelementptr inbounds i8, ptr %330, i64 1
  %332 = getelementptr inbounds [32 x i8], ptr %48, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %331, ptr align 16 %332, i64 32, i1 false)
  %333 = getelementptr inbounds [65 x i8], ptr %40, i64 0, i64 0
  %334 = getelementptr inbounds i8, ptr %333, i64 33
  %335 = getelementptr inbounds [32 x i8], ptr %55, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %334, ptr align 16 %335, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 6, ptr %59) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %59, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_secret, i64 6, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %60) #8
  store i32 23, ptr %60, align 4, !tbaa !9
  br label %336

336:                                              ; preds = %296
  %337 = load i32, ptr %60, align 4, !tbaa !9
  %338 = zext i32 %337 to i64
  %339 = icmp ugt i64 %338, -1
  br i1 %339, label %340, label %342

340:                                              ; preds = %336
  %341 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 202)
  call void @exit(i32 noundef 253) #9
  unreachable

342:                                              ; preds = %336
  br label %343

343:                                              ; preds = %342
  br label %344

344:                                              ; preds = %343
  %345 = load i32, ptr %60, align 4, !tbaa !9
  %346 = zext i32 %345 to i64
  %347 = alloca i8, i64 %346, align 16
  store i64 %346, ptr %61, align 8
  %348 = load i32, ptr %60, align 4, !tbaa !9
  %349 = zext i32 %348 to i64
  %350 = mul i64 %349, 1
  call void @llvm.memset.p0.i64(ptr align 16 %347, i8 0, i64 %350, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %62) #8
  store ptr %347, ptr %62, align 8, !tbaa !5
  %351 = load ptr, ptr %62, align 8, !tbaa !5
  %352 = getelementptr inbounds i8, ptr %351, i64 0
  store i8 72, ptr %352, align 1, !tbaa !15
  %353 = load ptr, ptr %62, align 8, !tbaa !5
  %354 = getelementptr inbounds i8, ptr %353, i64 1
  store i8 80, ptr %354, align 1, !tbaa !15
  %355 = load ptr, ptr %62, align 8, !tbaa !5
  %356 = getelementptr inbounds i8, ptr %355, i64 2
  store i8 75, ptr %356, align 1, !tbaa !15
  %357 = load ptr, ptr %62, align 8, !tbaa !5
  %358 = getelementptr inbounds i8, ptr %357, i64 3
  store i8 69, ptr %358, align 1, !tbaa !15
  %359 = load ptr, ptr %62, align 8, !tbaa !5
  %360 = getelementptr inbounds i8, ptr %359, i64 4
  store i8 45, ptr %360, align 1, !tbaa !15
  %361 = load ptr, ptr %62, align 8, !tbaa !5
  %362 = getelementptr inbounds i8, ptr %361, i64 5
  store i8 118, ptr %362, align 1, !tbaa !15
  %363 = load ptr, ptr %62, align 8, !tbaa !5
  %364 = getelementptr inbounds i8, ptr %363, i64 6
  store i8 49, ptr %364, align 1, !tbaa !15
  %365 = getelementptr inbounds i8, ptr %347, i64 7
  %366 = getelementptr inbounds [10 x i8], ptr %42, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %365, ptr align 1 %366, i64 10, i1 false)
  %367 = getelementptr inbounds i8, ptr %347, i64 17
  %368 = getelementptr inbounds [6 x i8], ptr %59, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %367, ptr align 1 %368, i64 6, i1 false)
  %369 = getelementptr inbounds i8, ptr %347, i64 23
  %370 = load ptr, ptr %49, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %369, ptr align 1 %370, i64 0, i1 false)
  %371 = getelementptr inbounds [32 x i8], ptr %41, i64 0, i64 0
  %372 = getelementptr inbounds [32 x i8], ptr %13, i64 0, i64 0
  %373 = load i32, ptr %60, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %371, ptr noundef %372, i32 noundef 32, ptr noundef %347, i32 noundef %373)
  call void @llvm.lifetime.start.p0(i64 3, ptr %63) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %63, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_exp, i64 3, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %64) #8
  store i32 87, ptr %64, align 4, !tbaa !9
  br label %374

374:                                              ; preds = %344
  %375 = load i32, ptr %64, align 4, !tbaa !9
  %376 = zext i32 %375 to i64
  %377 = icmp ugt i64 %376, -1
  br i1 %377, label %378, label %380

378:                                              ; preds = %374
  %379 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 219)
  call void @exit(i32 noundef 253) #9
  unreachable

380:                                              ; preds = %374
  br label %381

381:                                              ; preds = %380
  br label %382

382:                                              ; preds = %381
  %383 = load i32, ptr %64, align 4, !tbaa !9
  %384 = zext i32 %383 to i64
  %385 = alloca i8, i64 %384, align 16
  store i64 %384, ptr %65, align 8
  %386 = load i32, ptr %64, align 4, !tbaa !9
  %387 = zext i32 %386 to i64
  %388 = mul i64 %387, 1
  call void @llvm.memset.p0.i64(ptr align 16 %385, i8 0, i64 %388, i1 false)
  %389 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef %385, i16 noundef zeroext %389)
  call void @llvm.lifetime.start.p0(i64 8, ptr %66) #8
  %390 = getelementptr inbounds i8, ptr %385, i64 2
  store ptr %390, ptr %66, align 8, !tbaa !5
  %391 = load ptr, ptr %66, align 8, !tbaa !5
  %392 = getelementptr inbounds i8, ptr %391, i64 0
  store i8 72, ptr %392, align 1, !tbaa !15
  %393 = load ptr, ptr %66, align 8, !tbaa !5
  %394 = getelementptr inbounds i8, ptr %393, i64 1
  store i8 80, ptr %394, align 1, !tbaa !15
  %395 = load ptr, ptr %66, align 8, !tbaa !5
  %396 = getelementptr inbounds i8, ptr %395, i64 2
  store i8 75, ptr %396, align 1, !tbaa !15
  %397 = load ptr, ptr %66, align 8, !tbaa !5
  %398 = getelementptr inbounds i8, ptr %397, i64 3
  store i8 69, ptr %398, align 1, !tbaa !15
  %399 = load ptr, ptr %66, align 8, !tbaa !5
  %400 = getelementptr inbounds i8, ptr %399, i64 4
  store i8 45, ptr %400, align 1, !tbaa !15
  %401 = load ptr, ptr %66, align 8, !tbaa !5
  %402 = getelementptr inbounds i8, ptr %401, i64 5
  store i8 118, ptr %402, align 1, !tbaa !15
  %403 = load ptr, ptr %66, align 8, !tbaa !5
  %404 = getelementptr inbounds i8, ptr %403, i64 6
  store i8 49, ptr %404, align 1, !tbaa !15
  %405 = getelementptr inbounds i8, ptr %385, i64 9
  %406 = getelementptr inbounds [10 x i8], ptr %42, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %405, ptr align 1 %406, i64 10, i1 false)
  %407 = getelementptr inbounds i8, ptr %385, i64 19
  %408 = getelementptr inbounds [3 x i8], ptr %63, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %407, ptr align 1 %408, i64 3, i1 false)
  %409 = getelementptr inbounds i8, ptr %385, i64 22
  %410 = getelementptr inbounds [65 x i8], ptr %40, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %409, ptr align 16 %410, i64 65, i1 false)
  %411 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %1, i32 0, i32 3
  %412 = load ptr, ptr %411, align 8, !tbaa !16
  %413 = getelementptr inbounds [32 x i8], ptr %41, i64 0, i64 0
  %414 = load i32, ptr %64, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %412, ptr noundef %413, i32 noundef 32, ptr noundef %385, i32 noundef %414, i32 noundef 32)
  call void @llvm.lifetime.start.p0(i64 3, ptr %67) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %67, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_key, i64 3, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %68) #8
  store i32 87, ptr %68, align 4, !tbaa !9
  br label %415

415:                                              ; preds = %382
  %416 = load i32, ptr %68, align 4, !tbaa !9
  %417 = zext i32 %416 to i64
  %418 = icmp ugt i64 %417, -1
  br i1 %418, label %419, label %421

419:                                              ; preds = %415
  %420 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 237)
  call void @exit(i32 noundef 253) #9
  unreachable

421:                                              ; preds = %415
  br label %422

422:                                              ; preds = %421
  br label %423

423:                                              ; preds = %422
  %424 = load i32, ptr %68, align 4, !tbaa !9
  %425 = zext i32 %424 to i64
  %426 = alloca i8, i64 %425, align 16
  store i64 %425, ptr %69, align 8
  %427 = load i32, ptr %68, align 4, !tbaa !9
  %428 = zext i32 %427 to i64
  %429 = mul i64 %428, 1
  call void @llvm.memset.p0.i64(ptr align 16 %426, i8 0, i64 %429, i1 false)
  %430 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef %426, i16 noundef zeroext %430)
  call void @llvm.lifetime.start.p0(i64 8, ptr %70) #8
  %431 = getelementptr inbounds i8, ptr %426, i64 2
  store ptr %431, ptr %70, align 8, !tbaa !5
  %432 = load ptr, ptr %70, align 8, !tbaa !5
  %433 = getelementptr inbounds i8, ptr %432, i64 0
  store i8 72, ptr %433, align 1, !tbaa !15
  %434 = load ptr, ptr %70, align 8, !tbaa !5
  %435 = getelementptr inbounds i8, ptr %434, i64 1
  store i8 80, ptr %435, align 1, !tbaa !15
  %436 = load ptr, ptr %70, align 8, !tbaa !5
  %437 = getelementptr inbounds i8, ptr %436, i64 2
  store i8 75, ptr %437, align 1, !tbaa !15
  %438 = load ptr, ptr %70, align 8, !tbaa !5
  %439 = getelementptr inbounds i8, ptr %438, i64 3
  store i8 69, ptr %439, align 1, !tbaa !15
  %440 = load ptr, ptr %70, align 8, !tbaa !5
  %441 = getelementptr inbounds i8, ptr %440, i64 4
  store i8 45, ptr %441, align 1, !tbaa !15
  %442 = load ptr, ptr %70, align 8, !tbaa !5
  %443 = getelementptr inbounds i8, ptr %442, i64 5
  store i8 118, ptr %443, align 1, !tbaa !15
  %444 = load ptr, ptr %70, align 8, !tbaa !5
  %445 = getelementptr inbounds i8, ptr %444, i64 6
  store i8 49, ptr %445, align 1, !tbaa !15
  %446 = getelementptr inbounds i8, ptr %426, i64 9
  %447 = getelementptr inbounds [10 x i8], ptr %42, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %446, ptr align 1 %447, i64 10, i1 false)
  %448 = getelementptr inbounds i8, ptr %426, i64 19
  %449 = getelementptr inbounds [3 x i8], ptr %67, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %448, ptr align 1 %449, i64 3, i1 false)
  %450 = getelementptr inbounds i8, ptr %426, i64 22
  %451 = getelementptr inbounds [65 x i8], ptr %40, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %450, ptr align 16 %451, i64 65, i1 false)
  %452 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %1, i32 0, i32 0
  %453 = load ptr, ptr %452, align 8, !tbaa !18
  %454 = getelementptr inbounds [32 x i8], ptr %41, i64 0, i64 0
  %455 = load i32, ptr %68, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %453, ptr noundef %454, i32 noundef 32, ptr noundef %426, i32 noundef %455, i32 noundef 32)
  call void @llvm.lifetime.start.p0(i64 10, ptr %71) #8
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %71, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_base_nonce, i64 10, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %72) #8
  store i32 94, ptr %72, align 4, !tbaa !9
  br label %456

456:                                              ; preds = %423
  %457 = load i32, ptr %72, align 4, !tbaa !9
  %458 = zext i32 %457 to i64
  %459 = icmp ugt i64 %458, -1
  br i1 %459, label %460, label %462

460:                                              ; preds = %456
  %461 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 257)
  call void @exit(i32 noundef 253) #9
  unreachable

462:                                              ; preds = %456
  br label %463

463:                                              ; preds = %462
  br label %464

464:                                              ; preds = %463
  %465 = load i32, ptr %72, align 4, !tbaa !9
  %466 = zext i32 %465 to i64
  %467 = alloca i8, i64 %466, align 16
  store i64 %466, ptr %73, align 8
  %468 = load i32, ptr %72, align 4, !tbaa !9
  %469 = zext i32 %468 to i64
  %470 = mul i64 %469, 1
  call void @llvm.memset.p0.i64(ptr align 16 %467, i8 0, i64 %470, i1 false)
  %471 = call zeroext i16 @__bswap_16(i16 noundef zeroext 12)
  call void @store16(ptr noundef %467, i16 noundef zeroext %471)
  call void @llvm.lifetime.start.p0(i64 8, ptr %74) #8
  %472 = getelementptr inbounds i8, ptr %467, i64 2
  store ptr %472, ptr %74, align 8, !tbaa !5
  %473 = load ptr, ptr %74, align 8, !tbaa !5
  %474 = getelementptr inbounds i8, ptr %473, i64 0
  store i8 72, ptr %474, align 1, !tbaa !15
  %475 = load ptr, ptr %74, align 8, !tbaa !5
  %476 = getelementptr inbounds i8, ptr %475, i64 1
  store i8 80, ptr %476, align 1, !tbaa !15
  %477 = load ptr, ptr %74, align 8, !tbaa !5
  %478 = getelementptr inbounds i8, ptr %477, i64 2
  store i8 75, ptr %478, align 1, !tbaa !15
  %479 = load ptr, ptr %74, align 8, !tbaa !5
  %480 = getelementptr inbounds i8, ptr %479, i64 3
  store i8 69, ptr %480, align 1, !tbaa !15
  %481 = load ptr, ptr %74, align 8, !tbaa !5
  %482 = getelementptr inbounds i8, ptr %481, i64 4
  store i8 45, ptr %482, align 1, !tbaa !15
  %483 = load ptr, ptr %74, align 8, !tbaa !5
  %484 = getelementptr inbounds i8, ptr %483, i64 5
  store i8 118, ptr %484, align 1, !tbaa !15
  %485 = load ptr, ptr %74, align 8, !tbaa !5
  %486 = getelementptr inbounds i8, ptr %485, i64 6
  store i8 49, ptr %486, align 1, !tbaa !15
  %487 = getelementptr inbounds i8, ptr %467, i64 9
  %488 = getelementptr inbounds [10 x i8], ptr %42, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %487, ptr align 1 %488, i64 10, i1 false)
  %489 = getelementptr inbounds i8, ptr %467, i64 19
  %490 = getelementptr inbounds [10 x i8], ptr %71, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %489, ptr align 1 %490, i64 10, i1 false)
  %491 = getelementptr inbounds i8, ptr %467, i64 29
  %492 = getelementptr inbounds [65 x i8], ptr %40, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %491, ptr align 16 %492, i64 65, i1 false)
  %493 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %1, i32 0, i32 1
  %494 = load ptr, ptr %493, align 8, !tbaa !19
  %495 = getelementptr inbounds [32 x i8], ptr %41, i64 0, i64 0
  %496 = load i32, ptr %72, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %494, ptr noundef %495, i32 noundef 32, ptr noundef %467, i32 noundef %496, i32 noundef 12)
  %497 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %1, i32 0, i32 2
  %498 = load ptr, ptr %497, align 8, !tbaa !20
  %499 = getelementptr inbounds i64, ptr %498, i64 0
  store i64 0, ptr %499, align 8, !tbaa !21
  %500 = load i32, ptr %17, align 4, !tbaa !9
  store i32 %500, ptr %7, align 4
  store i32 1, ptr %75, align 4
  call void @llvm.lifetime.end.p0(i64 8, ptr %74) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %72) #8
  call void @llvm.lifetime.end.p0(i64 10, ptr %71) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %70) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %68) #8
  call void @llvm.lifetime.end.p0(i64 3, ptr %67) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %66) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %64) #8
  call void @llvm.lifetime.end.p0(i64 3, ptr %63) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %62) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %60) #8
  call void @llvm.lifetime.end.p0(i64 6, ptr %59) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %58) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %56) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %55) #8
  call void @llvm.lifetime.end.p0(i64 9, ptr %54) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %53) #8
  %501 = load ptr, ptr %51, align 8
  call void @llvm.stackrestore.p0(ptr %501)
  call void @llvm.lifetime.end.p0(i64 4, ptr %50) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %49) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %48) #8
  call void @llvm.lifetime.end.p0(i64 11, ptr %47) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %46) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %45) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %44) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %43) #8
  call void @llvm.lifetime.end.p0(i64 10, ptr %42) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %41) #8
  call void @llvm.lifetime.end.p0(i64 65, ptr %40) #8
  br label %504

502:                                              ; preds = %215
  %503 = load i32, ptr %17, align 4, !tbaa !9
  store i32 %503, ptr %7, align 4
  store i32 1, ptr %75, align 4
  br label %504

504:                                              ; preds = %502, %464
  call void @llvm.lifetime.end.p0(i64 4, ptr %17) #8
  call void @llvm.lifetime.end.p0(i64 4, ptr %16) #8
  call void @llvm.lifetime.end.p0(i64 1, ptr %15) #8
  call void @llvm.lifetime.end.p0(i64 8, ptr %14) #8
  call void @llvm.lifetime.end.p0(i64 32, ptr %13) #8
  %505 = load i32, ptr %7, align 4
  ret i32 %505
}

; Function Attrs: nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.start.p0(i64 immarg, ptr nocapture) #1

; Function Attrs: nocallback nofree nounwind willreturn memory(argmem: write)
declare void @llvm.memset.p0.i64(ptr nocapture writeonly, i8, i64, i1 immarg) #2

declare zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_i(ptr noundef, ptr noundef) #3

declare zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_r(ptr noundef, ptr noundef, ptr noundef) #3

; Function Attrs: nocallback nofree nounwind willreturn memory(argmem: readwrite)
declare void @llvm.memcpy.p0.p0.i64(ptr noalias nocapture writeonly, ptr noalias nocapture readonly, i64, i1 immarg) #4

declare i32 @printf(ptr noundef, ...) #3

; Function Attrs: noreturn nounwind
declare void @exit(i32 noundef) #5

; Function Attrs: nocallback nofree nosync nounwind willreturn
declare ptr @llvm.stacksave.p0() #6

declare void @Hacl_HKDF_extract_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef) #3

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @store16(ptr noundef, i16 noundef zeroext) #7

; Function Attrs: inlinehint nounwind uwtable
declare hidden zeroext i16 @__bswap_16(i16 noundef zeroext) #7

declare void @Hacl_HKDF_expand_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef, i32 noundef) #3

; Function Attrs: nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.end.p0(i64 immarg, ptr nocapture) #1

; Function Attrs: nocallback nofree nosync nounwind willreturn
declare void @llvm.stackrestore.p0(ptr) #6

attributes #0 = { nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #1 = { nocallback nofree nosync nounwind willreturn memory(argmem: readwrite) }
attributes #2 = { nocallback nofree nounwind willreturn memory(argmem: write) }
attributes #3 = { "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #4 = { nocallback nofree nounwind willreturn memory(argmem: readwrite) }
attributes #5 = { noreturn nounwind "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #6 = { nocallback nofree nosync nounwind willreturn }
attributes #7 = { inlinehint nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #8 = { nounwind }
attributes #9 = { noreturn nounwind }

!llvm.module.flags = !{!0, !1, !2, !3}
!llvm.ident = !{!4}

!0 = !{i32 1, !"wchar_size", i32 4}
!1 = !{i32 8, !"PIC Level", i32 2}
!2 = !{i32 7, !"PIE Level", i32 2}
!3 = !{i32 7, !"uwtable", i32 2}
!4 = !{!"clang version 19.1.0 (git@github.com:llvm/llvm-project.git a4bf6cd7cfb1a1421ba92bca9d017b49936c55e4)"}
!5 = !{!6, !6, i64 0}
!6 = !{!"any pointer", !7, i64 0}
!7 = !{!"omnipotent char", !8, i64 0}
!8 = !{!"Simple C/C++ TBAA"}
!9 = !{!10, !10, i64 0}
!10 = !{!"int", !7, i64 0}
!11 = !{!12, !12, i64 0}
!12 = !{!"_Bool", !7, i64 0}
!13 = !{i8 0, i8 2}
!14 = !{}
!15 = !{!7, !7, i64 0}
!16 = !{!17, !6, i64 24}
!17 = !{!"Hacl_Impl_HPKE_context_s_s", !6, i64 0, !6, i64 8, !6, i64 16, !6, i64 24}
!18 = !{!17, !6, i64 0}
!19 = !{!17, !6, i64 8}
!20 = !{!17, !6, i64 16}
!21 = !{!22, !22, i64 0}
!22 = !{!"long", !7, i64 0}


; Optimized IR (opt -passes='default<O3>'):
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

%struct.Hacl_Impl_HPKE_context_s_s = type { ptr, ptr, ptr, ptr }

@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_eae_prk = external hidden unnamed_addr constant [7 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_shared_secret = external hidden unnamed_addr constant [13 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_psk_id_hash = external hidden unnamed_addr constant [11 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_info_hash = external hidden unnamed_addr constant [9 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_secret = external hidden unnamed_addr constant [6 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_exp = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_key = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_base_nonce = external hidden unnamed_addr constant [10 x i8], align 1

; Function Attrs: nounwind uwtable
define dso_local range(i32 0, 2) i32 @Hacl_HPKE_P256_CP128_SHA256_setupBaseS(ptr noundef %0, ptr nocapture noundef readonly byval(%struct.Hacl_Impl_HPKE_context_s_s) align 8 %1, ptr noundef %2, ptr noundef %3, i32 noundef %4, ptr nocapture noundef readonly %5) local_unnamed_addr #0 {
  %7 = alloca [32 x i8], align 16
  %8 = alloca [64 x i8], align 16
  %9 = alloca [64 x i8], align 16
  %.sroa.0 = alloca [65 x i8], align 16
  %.sroa.6 = alloca [64 x i8], align 2
  %10 = alloca [32 x i8], align 16
  %11 = alloca [5 x i8], align 4
  %.sroa.7 = alloca [32 x i8], align 1
  %.sroa.8 = alloca [32 x i8], align 1
  %12 = alloca [32 x i8], align 16
  %13 = alloca [10 x i8], align 8
  %14 = alloca [32 x i8], align 16
  %15 = alloca [32 x i8], align 16
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %7) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %7, i8 0, i64 32, i1 false)
  %16 = getelementptr inbounds i8, ptr %0, i64 1
  %17 = tail call zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_i(ptr noundef nonnull %16, ptr noundef %2) #7
  br i1 %17, label %18, label %.thread

18:                                               ; preds = %6
  store i8 4, ptr %0, align 1, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 64, ptr nonnull %8)
  call void @llvm.lifetime.start.p0(i64 64, ptr nonnull %9) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(64) %9, i8 0, i64 64, i1 false)
  %19 = call zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_r(ptr noundef nonnull %9, ptr noundef %3, ptr noundef %2) #7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 16 dereferenceable(64) %8, ptr noundef nonnull align 16 dereferenceable(64) %9, i64 64, i1 false)
  call void @llvm.lifetime.start.p0(i64 65, ptr nonnull %.sroa.0)
  call void @llvm.lifetime.start.p0(i64 64, ptr nonnull %.sroa.6)
  br i1 %19, label %21, label %20

20:                                               ; preds = %18
  call void @llvm.lifetime.end.p0(i64 65, ptr nonnull %.sroa.0)
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %.sroa.6)
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %9) #7
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %8)
  br label %.thread

21:                                               ; preds = %18
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 16 dereferenceable(65) %.sroa.0, ptr noundef nonnull align 1 dereferenceable(65) %0, i64 65, i1 false)
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 2 dereferenceable(64) %.sroa.6, ptr noundef nonnull align 1 dereferenceable(64) %3, i64 64, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %10) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %10, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 5, ptr nonnull %11) #7
  store <4 x i8> <i8 75, i8 69, i8 77, i8 0>, ptr %11, align 4, !tbaa !5
  %22 = getelementptr inbounds i8, ptr %11, i64 4
  store i8 16, ptr %22, align 4, !tbaa !5
  %23 = call ptr @llvm.stacksave.p0()
  %24 = alloca [51 x i8], align 16
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %24, align 16, !tbaa !5
  %25 = getelementptr inbounds i8, ptr %24, i64 4
  store i8 45, ptr %25, align 4, !tbaa !5
  %26 = getelementptr inbounds i8, ptr %24, i64 5
  store i8 118, ptr %26, align 1, !tbaa !5
  %27 = getelementptr inbounds i8, ptr %24, i64 6
  store i8 49, ptr %27, align 2, !tbaa !5
  %28 = getelementptr inbounds i8, ptr %24, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(5) %28, ptr noundef nonnull align 4 dereferenceable(5) %11, i64 5, i1 false)
  %29 = getelementptr inbounds i8, ptr %24, i64 12
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 4 dereferenceable(7) %29, ptr noundef nonnull align 1 dereferenceable(7) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_eae_prk, i64 7, i1 false)
  %30 = getelementptr inbounds i8, ptr %24, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %30, ptr noundef nonnull align 16 dereferenceable(32) %8, i64 32, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %10, ptr noundef nonnull %11, i32 noundef 0, ptr noundef nonnull %24, i32 noundef 51) #7
  %31 = alloca [157 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(157) %31, i8 0, i64 157, i1 false)
  %32 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef nonnull %31, i16 noundef zeroext %32)
  %33 = getelementptr inbounds i8, ptr %31, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %33, align 2, !tbaa !5
  %34 = getelementptr inbounds i8, ptr %31, i64 6
  store i8 45, ptr %34, align 2, !tbaa !5
  %35 = getelementptr inbounds i8, ptr %31, i64 7
  store i8 118, ptr %35, align 1, !tbaa !5
  %36 = getelementptr inbounds i8, ptr %31, i64 8
  store i8 49, ptr %36, align 8, !tbaa !5
  %37 = getelementptr inbounds i8, ptr %31, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(5) %37, ptr noundef nonnull align 4 dereferenceable(5) %11, i64 5, i1 false)
  %38 = getelementptr inbounds i8, ptr %31, i64 14
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 2 dereferenceable(13) %38, ptr noundef nonnull align 1 dereferenceable(13) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_shared_secret, i64 13, i1 false)
  %39 = getelementptr inbounds i8, ptr %31, i64 27
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(65) %39, ptr noundef nonnull align 16 dereferenceable(65) %.sroa.0, i64 65, i1 false)
  %.sroa.5.0..sroa_idx = getelementptr inbounds i8, ptr %31, i64 92
  store i8 4, ptr %.sroa.5.0..sroa_idx, align 4
  %.sroa.6.0..sroa_idx = getelementptr inbounds i8, ptr %31, i64 93
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(64) %.sroa.6.0..sroa_idx, ptr noundef nonnull align 2 dereferenceable(64) %.sroa.6, i64 64, i1 false)
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef nonnull %7, ptr noundef nonnull %10, i32 noundef 32, ptr noundef nonnull %31, i32 noundef 157, i32 noundef 32) #7
  call void @llvm.stackrestore.p0(ptr %23)
  call void @llvm.lifetime.end.p0(i64 5, ptr nonnull %11) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %10) #7
  call void @llvm.lifetime.end.p0(i64 65, ptr nonnull %.sroa.0)
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %.sroa.6)
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %9) #7
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %8)
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %.sroa.7)
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %.sroa.8)
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %12) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %12, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 10, ptr nonnull %13) #7
  store <8 x i8> <i8 72, i8 80, i8 75, i8 69, i8 0, i8 16, i8 0, i8 1>, ptr %13, align 8, !tbaa !5
  %40 = getelementptr inbounds i8, ptr %13, i64 8
  store i8 0, ptr %40, align 8, !tbaa !5
  %41 = getelementptr inbounds i8, ptr %13, i64 9
  store i8 3, ptr %41, align 1, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %14) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %14, i8 0, i64 32, i1 false)
  %42 = call ptr @llvm.stacksave.p0()
  %43 = alloca [28 x i8], align 16
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %43, align 16, !tbaa !5
  %44 = getelementptr inbounds i8, ptr %43, i64 4
  store i8 45, ptr %44, align 4, !tbaa !5
  %45 = getelementptr inbounds i8, ptr %43, i64 5
  store i8 118, ptr %45, align 1, !tbaa !5
  %46 = getelementptr inbounds i8, ptr %43, i64 6
  store i8 49, ptr %46, align 2, !tbaa !5
  %47 = getelementptr inbounds i8, ptr %43, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %47, ptr noundef nonnull align 8 dereferenceable(10) %13, i64 10, i1 false)
  %48 = getelementptr inbounds i8, ptr %43, i64 17
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(11) %48, ptr noundef nonnull align 1 dereferenceable(11) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_psk_id_hash, i64 11, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %14, ptr noundef nonnull %13, i32 noundef 0, ptr noundef nonnull %43, i32 noundef 28) #7
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %15) #7
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %15, i8 0, i64 32, i1 false)
  %49 = add i32 %4, 26
  %50 = zext i32 %49 to i64
  %51 = alloca i8, i64 %50, align 16
  call void @llvm.memset.p0.i64(ptr nonnull align 16 %51, i8 0, i64 %50, i1 false)
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %51, align 16, !tbaa !5
  %52 = getelementptr inbounds i8, ptr %51, i64 4
  store i8 45, ptr %52, align 4, !tbaa !5
  %53 = getelementptr inbounds i8, ptr %51, i64 5
  store i8 118, ptr %53, align 1, !tbaa !5
  %54 = getelementptr inbounds i8, ptr %51, i64 6
  store i8 49, ptr %54, align 2, !tbaa !5
  %55 = getelementptr inbounds i8, ptr %51, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %55, ptr noundef nonnull align 8 dereferenceable(10) %13, i64 10, i1 false)
  %56 = getelementptr inbounds i8, ptr %51, i64 17
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(9) %56, ptr noundef nonnull align 1 dereferenceable(9) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_info_hash, i64 9, i1 false)
  %57 = getelementptr inbounds i8, ptr %51, i64 26
  %58 = zext i32 %4 to i64
  call void @llvm.memcpy.p0.p0.i64(ptr nonnull align 2 %57, ptr align 1 %5, i64 %58, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %15, ptr noundef nonnull %13, i32 noundef 0, ptr noundef nonnull %51, i32 noundef %49) #7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, ptr noundef nonnull align 16 dereferenceable(32) %14, i64 32, i1 false)
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, ptr noundef nonnull align 16 dereferenceable(32) %15, i64 32, i1 false)
  %59 = alloca [23 x i8], align 16
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %59, align 16, !tbaa !5
  %60 = getelementptr inbounds i8, ptr %59, i64 4
  store i8 45, ptr %60, align 4, !tbaa !5
  %61 = getelementptr inbounds i8, ptr %59, i64 5
  store i8 118, ptr %61, align 1, !tbaa !5
  %62 = getelementptr inbounds i8, ptr %59, i64 6
  store i8 49, ptr %62, align 2, !tbaa !5
  %63 = getelementptr inbounds i8, ptr %59, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %63, ptr noundef nonnull align 8 dereferenceable(10) %13, i64 10, i1 false)
  %64 = getelementptr inbounds i8, ptr %59, i64 17
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(6) %64, ptr noundef nonnull align 1 dereferenceable(6) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_secret, i64 6, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %12, ptr noundef nonnull %7, i32 noundef 32, ptr noundef nonnull %59, i32 noundef 23) #7
  %65 = alloca [87 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(87) %65, i8 0, i64 87, i1 false)
  %66 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef nonnull %65, i16 noundef zeroext %66)
  %67 = getelementptr inbounds i8, ptr %65, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %67, align 2, !tbaa !5
  %68 = getelementptr inbounds i8, ptr %65, i64 6
  store i8 45, ptr %68, align 2, !tbaa !5
  %69 = getelementptr inbounds i8, ptr %65, i64 7
  store i8 118, ptr %69, align 1, !tbaa !5
  %70 = getelementptr inbounds i8, ptr %65, i64 8
  store i8 49, ptr %70, align 8, !tbaa !5
  %71 = getelementptr inbounds i8, ptr %65, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %71, ptr noundef nonnull align 8 dereferenceable(10) %13, i64 10, i1 false)
  %72 = getelementptr inbounds i8, ptr %65, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(3) %72, ptr noundef nonnull align 1 dereferenceable(3) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_exp, i64 3, i1 false)
  %73 = getelementptr inbounds i8, ptr %65, i64 22
  store i8 0, ptr %73, align 2
  %.sroa.7.0..sroa_idx = getelementptr inbounds i8, ptr %65, i64 23
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7.0..sroa_idx, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, i64 32, i1 false)
  %.sroa.8.0..sroa_idx = getelementptr inbounds i8, ptr %65, i64 55
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8.0..sroa_idx, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, i64 32, i1 false)
  %74 = getelementptr inbounds i8, ptr %1, i64 24
  %75 = load ptr, ptr %74, align 8, !tbaa !8
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %75, ptr noundef nonnull %12, i32 noundef 32, ptr noundef nonnull %65, i32 noundef 87, i32 noundef 32) #7
  %76 = alloca [87 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(87) %76, i8 0, i64 87, i1 false)
  %77 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef nonnull %76, i16 noundef zeroext %77)
  %78 = getelementptr inbounds i8, ptr %76, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %78, align 2, !tbaa !5
  %79 = getelementptr inbounds i8, ptr %76, i64 6
  store i8 45, ptr %79, align 2, !tbaa !5
  %80 = getelementptr inbounds i8, ptr %76, i64 7
  store i8 118, ptr %80, align 1, !tbaa !5
  %81 = getelementptr inbounds i8, ptr %76, i64 8
  store i8 49, ptr %81, align 8, !tbaa !5
  %82 = getelementptr inbounds i8, ptr %76, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %82, ptr noundef nonnull align 8 dereferenceable(10) %13, i64 10, i1 false)
  %83 = getelementptr inbounds i8, ptr %76, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(3) %83, ptr noundef nonnull align 1 dereferenceable(3) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_key, i64 3, i1 false)
  %84 = getelementptr inbounds i8, ptr %76, i64 22
  store i8 0, ptr %84, align 2
  %.sroa.7.0..sroa_idx82 = getelementptr inbounds i8, ptr %76, i64 23
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7.0..sroa_idx82, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, i64 32, i1 false)
  %.sroa.8.0..sroa_idx84 = getelementptr inbounds i8, ptr %76, i64 55
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8.0..sroa_idx84, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, i64 32, i1 false)
  %85 = load ptr, ptr %1, align 8, !tbaa !11
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %85, ptr noundef nonnull %12, i32 noundef 32, ptr noundef nonnull %76, i32 noundef 87, i32 noundef 32) #7
  %86 = alloca [94 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(94) %86, i8 0, i64 94, i1 false)
  %87 = call zeroext i16 @__bswap_16(i16 noundef zeroext 12)
  call void @store16(ptr noundef nonnull %86, i16 noundef zeroext %87)
  %88 = getelementptr inbounds i8, ptr %86, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %88, align 2, !tbaa !5
  %89 = getelementptr inbounds i8, ptr %86, i64 6
  store i8 45, ptr %89, align 2, !tbaa !5
  %90 = getelementptr inbounds i8, ptr %86, i64 7
  store i8 118, ptr %90, align 1, !tbaa !5
  %91 = getelementptr inbounds i8, ptr %86, i64 8
  store i8 49, ptr %91, align 8, !tbaa !5
  %92 = getelementptr inbounds i8, ptr %86, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %92, ptr noundef nonnull align 8 dereferenceable(10) %13, i64 10, i1 false)
  %93 = getelementptr inbounds i8, ptr %86, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %93, ptr noundef nonnull align 1 dereferenceable(10) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_base_nonce, i64 10, i1 false)
  %94 = getelementptr inbounds i8, ptr %86, i64 29
  store i8 0, ptr %94, align 1
  %.sroa.7.0..sroa_idx83 = getelementptr inbounds i8, ptr %86, i64 30
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 2 dereferenceable(32) %.sroa.7.0..sroa_idx83, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, i64 32, i1 false)
  %.sroa.8.0..sroa_idx85 = getelementptr inbounds i8, ptr %86, i64 62
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 2 dereferenceable(32) %.sroa.8.0..sroa_idx85, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, i64 32, i1 false)
  %95 = getelementptr inbounds i8, ptr %1, i64 8
  %96 = load ptr, ptr %95, align 8, !tbaa !12
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %96, ptr noundef nonnull %12, i32 noundef 32, ptr noundef nonnull %86, i32 noundef 94, i32 noundef 12) #7
  %97 = getelementptr inbounds i8, ptr %1, i64 16
  %98 = load ptr, ptr %97, align 8, !tbaa !13
  store i64 0, ptr %98, align 8, !tbaa !14
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %15) #7
  call void @llvm.stackrestore.p0(ptr %42)
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %14) #7
  call void @llvm.lifetime.end.p0(i64 10, ptr nonnull %13) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %12) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %.sroa.7)
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %.sroa.8)
  br label %.thread

.thread:                                          ; preds = %6, %20, %21
  %.1144 = phi i32 [ 1, %20 ], [ 0, %21 ], [ 1, %6 ]
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %7) #7
  ret i32 %.1144
}

; Function Attrs: mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.start.p0(i64 immarg, ptr nocapture) #1

; Function Attrs: mustprogress nocallback nofree nounwind willreturn memory(argmem: write)
declare void @llvm.memset.p0.i64(ptr nocapture writeonly, i8, i64, i1 immarg) #2

declare zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_i(ptr noundef, ptr noundef) local_unnamed_addr #3

declare zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_r(ptr noundef, ptr noundef, ptr noundef) local_unnamed_addr #3

; Function Attrs: mustprogress nocallback nofree nounwind willreturn memory(argmem: readwrite)
declare void @llvm.memcpy.p0.p0.i64(ptr noalias nocapture writeonly, ptr noalias nocapture readonly, i64, i1 immarg) #4

; Function Attrs: mustprogress nocallback nofree nosync nounwind willreturn
declare ptr @llvm.stacksave.p0() #5

declare void @Hacl_HKDF_extract_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef) local_unnamed_addr #3

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @store16(ptr noundef, i16 noundef zeroext) local_unnamed_addr #6

; Function Attrs: inlinehint nounwind uwtable
declare hidden zeroext i16 @__bswap_16(i16 noundef zeroext) local_unnamed_addr #6

declare void @Hacl_HKDF_expand_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef, i32 noundef) local_unnamed_addr #3

; Function Attrs: mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.end.p0(i64 immarg, ptr nocapture) #1

; Function Attrs: mustprogress nocallback nofree nosync nounwind willreturn
declare void @llvm.stackrestore.p0(ptr) #5

attributes #0 = { nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #1 = { mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite) }
attributes #2 = { mustprogress nocallback nofree nounwind willreturn memory(argmem: write) }
attributes #3 = { "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #4 = { mustprogress nocallback nofree nounwind willreturn memory(argmem: readwrite) }
attributes #5 = { mustprogress nocallback nofree nosync nounwind willreturn }
attributes #6 = { inlinehint nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #7 = { nounwind }

!llvm.module.flags = !{!0, !1, !2, !3}
!llvm.ident = !{!4}

!0 = !{i32 1, !"wchar_size", i32 4}
!1 = !{i32 8, !"PIC Level", i32 2}
!2 = !{i32 7, !"PIE Level", i32 2}
!3 = !{i32 7, !"uwtable", i32 2}
!4 = !{!"clang version 19.1.0 (git@github.com:llvm/llvm-project.git a4bf6cd7cfb1a1421ba92bca9d017b49936c55e4)"}
!5 = !{!6, !6, i64 0}
!6 = !{!"omnipotent char", !7, i64 0}
!7 = !{!"Simple C/C++ TBAA"}
!8 = !{!9, !10, i64 24}
!9 = !{!"Hacl_Impl_HPKE_context_s_s", !10, i64 0, !10, i64 8, !10, i64 16, !10, i64 24}
!10 = !{!"any pointer", !6, i64 0}
!11 = !{!9, !10, i64 0}
!12 = !{!9, !10, i64 8}
!13 = !{!9, !10, i64 16}
!14 = !{!15, !15, i64 0}
!15 = !{!"long", !6, i64 0}


; Effective O3 passes: CorrelatedValuePropagationPass,DSEPass,EarlyCSEPass,GlobalOptPass,IPSCCPPass,InferAlignmentPass,InferFunctionAttrsPass,InstCombinePass,JumpThreadingPass,MemCpyOptPass,PostOrderFunctionAttrsPass,SLPVectorizerPass,SROAPass,SimplifyCFGPass,TailCallElimPass