; LLVM IR from cryspen/libcrux :: sys/hacl/c/src/msvc (Hacl_HPKE_P256_CP128_SHA256)

; Unoptimized IR (clang -disable-llvm-passes):
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

%struct.Hacl_Impl_HPKE_context_s_s = type { ptr, ptr, ptr, ptr }

@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_eae_prk = external hidden unnamed_addr constant [7 x i8], align 1
@.str = external hidden unnamed_addr constant [70 x i8], align 1
@.str.1 = external hidden unnamed_addr constant [99 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_shared_secret = external hidden unnamed_addr constant [13 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_psk_id_hash = external hidden unnamed_addr constant [11 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_info_hash = external hidden unnamed_addr constant [9 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_secret = external hidden unnamed_addr constant [6 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_exp = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_key = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_base_nonce = external hidden unnamed_addr constant [10 x i8], align 1

; Function Attrs: nounwind uwtable
define dso_local i32 @Hacl_HPKE_P256_CP128_SHA256_setupBaseS(ptr noundef %0, ptr noundef byval(%struct.Hacl_Impl_HPKE_context_s_s) align 8 %1, ptr noundef %2, ptr noundef %3, i32 noundef %4, ptr noundef %5) #0 {
  %7 = alloca i32, align 4
  %8 = alloca ptr, align 8
  %9 = alloca ptr, align 8
  %10 = alloca ptr, align 8
  %11 = alloca i32, align 4
  %12 = alloca ptr, align 8
  %13 = alloca [32 x i8], align 16
  %14 = alloca ptr, align 8
  %15 = alloca i8, align 1
  %16 = alloca i32, align 4
  %17 = alloca i32, align 4
  %18 = alloca [64 x i8], align 16
  %19 = alloca [64 x i8], align 16
  %20 = alloca i8, align 1
  %21 = alloca i32, align 4
  %22 = alloca [130 x i8], align 16
  %23 = alloca ptr, align 8
  %24 = alloca ptr, align 8
  %25 = alloca ptr, align 8
  %26 = alloca [32 x i8], align 16
  %27 = alloca [5 x i8], align 1
  %28 = alloca ptr, align 8
  %29 = alloca ptr, align 8
  %30 = alloca ptr, align 8
  %31 = alloca [7 x i8], align 1
  %32 = alloca i32, align 4
  %33 = alloca ptr, align 8
  %34 = alloca ptr, align 8
  %35 = alloca [13 x i8], align 1
  %36 = alloca i32, align 4
  %37 = alloca ptr, align 8
  %38 = alloca ptr, align 8
  %39 = alloca [65 x i8], align 16
  %40 = alloca [32 x i8], align 16
  %41 = alloca [10 x i8], align 1
  %42 = alloca ptr, align 8
  %43 = alloca ptr, align 8
  %44 = alloca ptr, align 8
  %45 = alloca ptr, align 8
  %46 = alloca [11 x i8], align 1
  %47 = alloca [32 x i8], align 16
  %48 = alloca ptr, align 8
  %49 = alloca i32, align 4
  %50 = alloca ptr, align 8
  %51 = alloca ptr, align 8
  %52 = alloca [9 x i8], align 1
  %53 = alloca [32 x i8], align 16
  %54 = alloca i32, align 4
  %55 = alloca ptr, align 8
  %56 = alloca ptr, align 8
  %57 = alloca [6 x i8], align 1
  %58 = alloca i32, align 4
  %59 = alloca ptr, align 8
  %60 = alloca ptr, align 8
  %61 = alloca [3 x i8], align 1
  %62 = alloca i32, align 4
  %63 = alloca ptr, align 8
  %64 = alloca ptr, align 8
  %65 = alloca [3 x i8], align 1
  %66 = alloca i32, align 4
  %67 = alloca ptr, align 8
  %68 = alloca ptr, align 8
  %69 = alloca [10 x i8], align 1
  %70 = alloca i32, align 4
  %71 = alloca ptr, align 8
  %72 = alloca ptr, align 8
  %73 = alloca i32, align 4
  store ptr %0, ptr %8, align 8, !tbaa !5
  store ptr %2, ptr %9, align 8, !tbaa !5
  store ptr %3, ptr %10, align 8, !tbaa !5
  store i32 %4, ptr %11, align 4, !tbaa !9
  store ptr %5, ptr %12, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 32, ptr %13) #7
  call void @llvm.memset.p0.i64(ptr align 16 %13, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %14) #7
  %74 = load ptr, ptr %8, align 8, !tbaa !5
  %75 = getelementptr inbounds i8, ptr %74, i64 1
  store ptr %75, ptr %14, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 1, ptr %15) #7
  %76 = load ptr, ptr %14, align 8, !tbaa !5
  %77 = load ptr, ptr %9, align 8, !tbaa !5
  %78 = call zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_i(ptr noundef %76, ptr noundef %77)
  %79 = zext i1 %78 to i8
  store i8 %79, ptr %15, align 1, !tbaa !11
  call void @llvm.lifetime.start.p0(i64 4, ptr %16) #7
  %80 = load i8, ptr %15, align 1, !tbaa !11, !range !13, !noundef !14
  %81 = trunc i8 %80 to i1
  br i1 %81, label %82, label %83

82:                                               ; preds = %6
  store i32 0, ptr %16, align 4, !tbaa !9
  br label %84

83:                                               ; preds = %6
  store i32 1, ptr %16, align 4, !tbaa !9
  br label %84

84:                                               ; preds = %83, %82
  call void @llvm.lifetime.start.p0(i64 4, ptr %17) #7
  %85 = load i32, ptr %16, align 4, !tbaa !9
  %86 = icmp eq i32 %85, 0
  br i1 %86, label %87, label %225

87:                                               ; preds = %84
  %88 = load ptr, ptr %8, align 8, !tbaa !5
  %89 = getelementptr inbounds i8, ptr %88, i64 0
  store i8 4, ptr %89, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 64, ptr %18) #7
  call void @llvm.memset.p0.i64(ptr align 16 %18, i8 0, i64 64, i1 false)
  call void @llvm.lifetime.start.p0(i64 64, ptr %19) #7
  call void @llvm.memset.p0.i64(ptr align 16 %19, i8 0, i64 64, i1 false)
  call void @llvm.lifetime.start.p0(i64 1, ptr %20) #7
  %90 = getelementptr inbounds [64 x i8], ptr %19, i64 0, i64 0
  %91 = load ptr, ptr %10, align 8, !tbaa !5
  %92 = load ptr, ptr %9, align 8, !tbaa !5
  %93 = call zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_r(ptr noundef %90, ptr noundef %91, ptr noundef %92)
  %94 = zext i1 %93 to i8
  store i8 %94, ptr %20, align 1, !tbaa !11
  %95 = getelementptr inbounds [64 x i8], ptr %18, i64 0, i64 0
  %96 = getelementptr inbounds [64 x i8], ptr %19, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 16 %95, ptr align 16 %96, i64 64, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %21) #7
  %97 = load i8, ptr %20, align 1, !tbaa !11, !range !13, !noundef !14
  %98 = trunc i8 %97 to i1
  br i1 %98, label %99, label %100

99:                                               ; preds = %87
  store i32 0, ptr %21, align 4, !tbaa !9
  br label %101

100:                                              ; preds = %87
  store i32 1, ptr %21, align 4, !tbaa !9
  br label %101

101:                                              ; preds = %100, %99
  call void @llvm.lifetime.start.p0(i64 130, ptr %22) #7
  call void @llvm.memset.p0.i64(ptr align 16 %22, i8 0, i64 130, i1 false)
  %102 = load i32, ptr %21, align 4, !tbaa !9
  %103 = icmp eq i32 %102, 0
  br i1 %103, label %104, label %223

104:                                              ; preds = %101
  %105 = getelementptr inbounds [130 x i8], ptr %22, i64 0, i64 0
  %106 = load ptr, ptr %8, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 16 %105, ptr align 1 %106, i64 65, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %23) #7
  %107 = getelementptr inbounds [130 x i8], ptr %22, i64 0, i64 0
  %108 = getelementptr inbounds i8, ptr %107, i64 65
  store ptr %108, ptr %23, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 8, ptr %24) #7
  %109 = load ptr, ptr %23, align 8, !tbaa !5
  %110 = getelementptr inbounds i8, ptr %109, i64 1
  store ptr %110, ptr %24, align 8, !tbaa !5
  %111 = load ptr, ptr %24, align 8, !tbaa !5
  %112 = load ptr, ptr %10, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %111, ptr align 1 %112, i64 64, i1 false)
  %113 = load ptr, ptr %23, align 8, !tbaa !5
  %114 = getelementptr inbounds i8, ptr %113, i64 0
  store i8 4, ptr %114, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %25) #7
  %115 = getelementptr inbounds [64 x i8], ptr %18, i64 0, i64 0
  store ptr %115, ptr %25, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 32, ptr %26) #7
  call void @llvm.memset.p0.i64(ptr align 16 %26, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 5, ptr %27) #7
  call void @llvm.memset.p0.i64(ptr align 1 %27, i8 0, i64 5, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %28) #7
  %116 = getelementptr inbounds [5 x i8], ptr %27, i64 0, i64 0
  store ptr %116, ptr %28, align 8, !tbaa !5
  %117 = load ptr, ptr %28, align 8, !tbaa !5
  %118 = getelementptr inbounds i8, ptr %117, i64 0
  store i8 75, ptr %118, align 1, !tbaa !15
  %119 = load ptr, ptr %28, align 8, !tbaa !5
  %120 = getelementptr inbounds i8, ptr %119, i64 1
  store i8 69, ptr %120, align 1, !tbaa !15
  %121 = load ptr, ptr %28, align 8, !tbaa !5
  %122 = getelementptr inbounds i8, ptr %121, i64 2
  store i8 77, ptr %122, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %29) #7
  %123 = getelementptr inbounds [5 x i8], ptr %27, i64 0, i64 0
  %124 = getelementptr inbounds i8, ptr %123, i64 3
  store ptr %124, ptr %29, align 8, !tbaa !5
  %125 = load ptr, ptr %29, align 8, !tbaa !5
  %126 = getelementptr inbounds i8, ptr %125, i64 0
  store i8 0, ptr %126, align 1, !tbaa !15
  %127 = load ptr, ptr %29, align 8, !tbaa !5
  %128 = getelementptr inbounds i8, ptr %127, i64 1
  store i8 16, ptr %128, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %30) #7
  %129 = getelementptr inbounds [5 x i8], ptr %27, i64 0, i64 0
  store ptr %129, ptr %30, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 7, ptr %31) #7
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %31, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_eae_prk, i64 7, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %32) #7
  store i32 51, ptr %32, align 4, !tbaa !9
  br label %130

130:                                              ; preds = %104
  %131 = load i32, ptr %32, align 4, !tbaa !9
  %132 = zext i32 %131 to i64
  %133 = icmp ugt i64 %132, -1
  br i1 %133, label %134, label %136

134:                                              ; preds = %130
  %135 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 90)
  call void @exit(i32 noundef 253) #8
  unreachable

136:                                              ; preds = %130
  br label %137

137:                                              ; preds = %136
  br label %138

138:                                              ; preds = %137
  call void @llvm.lifetime.start.p0(i64 8, ptr %33) #7
  %139 = load i32, ptr %32, align 4, !tbaa !9
  %140 = zext i32 %139 to i64
  %141 = mul i64 %140, 1
  %142 = alloca i8, i64 %141, align 16
  store ptr %142, ptr %33, align 8, !tbaa !5
  %143 = load ptr, ptr %33, align 8, !tbaa !5
  %144 = load i32, ptr %32, align 4, !tbaa !9
  %145 = zext i32 %144 to i64
  %146 = mul i64 %145, 1
  call void @llvm.memset.p0.i64(ptr align 1 %143, i8 0, i64 %146, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %34) #7
  %147 = load ptr, ptr %33, align 8, !tbaa !5
  store ptr %147, ptr %34, align 8, !tbaa !5
  %148 = load ptr, ptr %34, align 8, !tbaa !5
  %149 = getelementptr inbounds i8, ptr %148, i64 0
  store i8 72, ptr %149, align 1, !tbaa !15
  %150 = load ptr, ptr %34, align 8, !tbaa !5
  %151 = getelementptr inbounds i8, ptr %150, i64 1
  store i8 80, ptr %151, align 1, !tbaa !15
  %152 = load ptr, ptr %34, align 8, !tbaa !5
  %153 = getelementptr inbounds i8, ptr %152, i64 2
  store i8 75, ptr %153, align 1, !tbaa !15
  %154 = load ptr, ptr %34, align 8, !tbaa !5
  %155 = getelementptr inbounds i8, ptr %154, i64 3
  store i8 69, ptr %155, align 1, !tbaa !15
  %156 = load ptr, ptr %34, align 8, !tbaa !5
  %157 = getelementptr inbounds i8, ptr %156, i64 4
  store i8 45, ptr %157, align 1, !tbaa !15
  %158 = load ptr, ptr %34, align 8, !tbaa !5
  %159 = getelementptr inbounds i8, ptr %158, i64 5
  store i8 118, ptr %159, align 1, !tbaa !15
  %160 = load ptr, ptr %34, align 8, !tbaa !5
  %161 = getelementptr inbounds i8, ptr %160, i64 6
  store i8 49, ptr %161, align 1, !tbaa !15
  %162 = load ptr, ptr %33, align 8, !tbaa !5
  %163 = getelementptr inbounds i8, ptr %162, i64 7
  %164 = getelementptr inbounds [5 x i8], ptr %27, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %163, ptr align 1 %164, i64 5, i1 false)
  %165 = load ptr, ptr %33, align 8, !tbaa !5
  %166 = getelementptr inbounds i8, ptr %165, i64 12
  %167 = getelementptr inbounds [7 x i8], ptr %31, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %166, ptr align 1 %167, i64 7, i1 false)
  %168 = load ptr, ptr %33, align 8, !tbaa !5
  %169 = getelementptr inbounds i8, ptr %168, i64 19
  %170 = load ptr, ptr %25, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %169, ptr align 1 %170, i64 32, i1 false)
  %171 = getelementptr inbounds [32 x i8], ptr %26, i64 0, i64 0
  %172 = load ptr, ptr %30, align 8, !tbaa !5
  %173 = load ptr, ptr %33, align 8, !tbaa !5
  %174 = load i32, ptr %32, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %171, ptr noundef %172, i32 noundef 0, ptr noundef %173, i32 noundef %174)
  call void @llvm.lifetime.start.p0(i64 13, ptr %35) #7
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %35, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_shared_secret, i64 13, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %36) #7
  store i32 157, ptr %36, align 4, !tbaa !9
  br label %175

175:                                              ; preds = %138
  %176 = load i32, ptr %36, align 4, !tbaa !9
  %177 = zext i32 %176 to i64
  %178 = icmp ugt i64 %177, -1
  br i1 %178, label %179, label %181

179:                                              ; preds = %175
  %180 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 111)
  call void @exit(i32 noundef 253) #8
  unreachable

181:                                              ; preds = %175
  br label %182

182:                                              ; preds = %181
  br label %183

183:                                              ; preds = %182
  call void @llvm.lifetime.start.p0(i64 8, ptr %37) #7
  %184 = load i32, ptr %36, align 4, !tbaa !9
  %185 = zext i32 %184 to i64
  %186 = mul i64 %185, 1
  %187 = alloca i8, i64 %186, align 16
  store ptr %187, ptr %37, align 8, !tbaa !5
  %188 = load ptr, ptr %37, align 8, !tbaa !5
  %189 = load i32, ptr %36, align 4, !tbaa !9
  %190 = zext i32 %189 to i64
  %191 = mul i64 %190, 1
  call void @llvm.memset.p0.i64(ptr align 1 %188, i8 0, i64 %191, i1 false)
  %192 = load ptr, ptr %37, align 8, !tbaa !5
  %193 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef %192, i16 noundef zeroext %193)
  call void @llvm.lifetime.start.p0(i64 8, ptr %38) #7
  %194 = load ptr, ptr %37, align 8, !tbaa !5
  %195 = getelementptr inbounds i8, ptr %194, i64 2
  store ptr %195, ptr %38, align 8, !tbaa !5
  %196 = load ptr, ptr %38, align 8, !tbaa !5
  %197 = getelementptr inbounds i8, ptr %196, i64 0
  store i8 72, ptr %197, align 1, !tbaa !15
  %198 = load ptr, ptr %38, align 8, !tbaa !5
  %199 = getelementptr inbounds i8, ptr %198, i64 1
  store i8 80, ptr %199, align 1, !tbaa !15
  %200 = load ptr, ptr %38, align 8, !tbaa !5
  %201 = getelementptr inbounds i8, ptr %200, i64 2
  store i8 75, ptr %201, align 1, !tbaa !15
  %202 = load ptr, ptr %38, align 8, !tbaa !5
  %203 = getelementptr inbounds i8, ptr %202, i64 3
  store i8 69, ptr %203, align 1, !tbaa !15
  %204 = load ptr, ptr %38, align 8, !tbaa !5
  %205 = getelementptr inbounds i8, ptr %204, i64 4
  store i8 45, ptr %205, align 1, !tbaa !15
  %206 = load ptr, ptr %38, align 8, !tbaa !5
  %207 = getelementptr inbounds i8, ptr %206, i64 5
  store i8 118, ptr %207, align 1, !tbaa !15
  %208 = load ptr, ptr %38, align 8, !tbaa !5
  %209 = getelementptr inbounds i8, ptr %208, i64 6
  store i8 49, ptr %209, align 1, !tbaa !15
  %210 = load ptr, ptr %37, align 8, !tbaa !5
  %211 = getelementptr inbounds i8, ptr %210, i64 9
  %212 = getelementptr inbounds [5 x i8], ptr %27, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %211, ptr align 1 %212, i64 5, i1 false)
  %213 = load ptr, ptr %37, align 8, !tbaa !5
  %214 = getelementptr inbounds i8, ptr %213, i64 14
  %215 = getelementptr inbounds [13 x i8], ptr %35, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %214, ptr align 1 %215, i64 13, i1 false)
  %216 = load ptr, ptr %37, align 8, !tbaa !5
  %217 = getelementptr inbounds i8, ptr %216, i64 27
  %218 = getelementptr inbounds [130 x i8], ptr %22, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %217, ptr align 16 %218, i64 130, i1 false)
  %219 = getelementptr inbounds [32 x i8], ptr %13, i64 0, i64 0
  %220 = getelementptr inbounds [32 x i8], ptr %26, i64 0, i64 0
  %221 = load ptr, ptr %37, align 8, !tbaa !5
  %222 = load i32, ptr %36, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %219, ptr noundef %220, i32 noundef 32, ptr noundef %221, i32 noundef %222, i32 noundef 32)
  store i32 0, ptr %17, align 4, !tbaa !9
  call void @llvm.lifetime.end.p0(i64 8, ptr %38) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %37) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %36) #7
  call void @llvm.lifetime.end.p0(i64 13, ptr %35) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %34) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %33) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %32) #7
  call void @llvm.lifetime.end.p0(i64 7, ptr %31) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %30) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %29) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %28) #7
  call void @llvm.lifetime.end.p0(i64 5, ptr %27) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr %26) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %25) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %24) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %23) #7
  br label %224

223:                                              ; preds = %101
  store i32 1, ptr %17, align 4, !tbaa !9
  br label %224

224:                                              ; preds = %223, %183
  call void @llvm.lifetime.end.p0(i64 130, ptr %22) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %21) #7
  call void @llvm.lifetime.end.p0(i64 1, ptr %20) #7
  call void @llvm.lifetime.end.p0(i64 64, ptr %19) #7
  call void @llvm.lifetime.end.p0(i64 64, ptr %18) #7
  br label %226

225:                                              ; preds = %84
  store i32 1, ptr %17, align 4, !tbaa !9
  br label %226

226:                                              ; preds = %225, %224
  %227 = load i32, ptr %17, align 4, !tbaa !9
  %228 = icmp eq i32 %227, 0
  br i1 %228, label %229, label %556

229:                                              ; preds = %226
  call void @llvm.lifetime.start.p0(i64 65, ptr %39) #7
  call void @llvm.memset.p0.i64(ptr align 16 %39, i8 0, i64 65, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr %40) #7
  call void @llvm.memset.p0.i64(ptr align 16 %40, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 10, ptr %41) #7
  call void @llvm.memset.p0.i64(ptr align 1 %41, i8 0, i64 10, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %42) #7
  %230 = getelementptr inbounds [10 x i8], ptr %41, i64 0, i64 0
  store ptr %230, ptr %42, align 8, !tbaa !5
  %231 = load ptr, ptr %42, align 8, !tbaa !5
  %232 = getelementptr inbounds i8, ptr %231, i64 0
  store i8 72, ptr %232, align 1, !tbaa !15
  %233 = load ptr, ptr %42, align 8, !tbaa !5
  %234 = getelementptr inbounds i8, ptr %233, i64 1
  store i8 80, ptr %234, align 1, !tbaa !15
  %235 = load ptr, ptr %42, align 8, !tbaa !5
  %236 = getelementptr inbounds i8, ptr %235, i64 2
  store i8 75, ptr %236, align 1, !tbaa !15
  %237 = load ptr, ptr %42, align 8, !tbaa !5
  %238 = getelementptr inbounds i8, ptr %237, i64 3
  store i8 69, ptr %238, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %43) #7
  %239 = getelementptr inbounds [10 x i8], ptr %41, i64 0, i64 0
  %240 = getelementptr inbounds i8, ptr %239, i64 4
  store ptr %240, ptr %43, align 8, !tbaa !5
  %241 = load ptr, ptr %43, align 8, !tbaa !5
  %242 = getelementptr inbounds i8, ptr %241, i64 0
  store i8 0, ptr %242, align 1, !tbaa !15
  %243 = load ptr, ptr %43, align 8, !tbaa !5
  %244 = getelementptr inbounds i8, ptr %243, i64 1
  store i8 16, ptr %244, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %44) #7
  %245 = getelementptr inbounds [10 x i8], ptr %41, i64 0, i64 0
  %246 = getelementptr inbounds i8, ptr %245, i64 6
  store ptr %246, ptr %44, align 8, !tbaa !5
  %247 = load ptr, ptr %44, align 8, !tbaa !5
  %248 = getelementptr inbounds i8, ptr %247, i64 0
  store i8 0, ptr %248, align 1, !tbaa !15
  %249 = load ptr, ptr %44, align 8, !tbaa !5
  %250 = getelementptr inbounds i8, ptr %249, i64 1
  store i8 1, ptr %250, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 8, ptr %45) #7
  %251 = getelementptr inbounds [10 x i8], ptr %41, i64 0, i64 0
  %252 = getelementptr inbounds i8, ptr %251, i64 8
  store ptr %252, ptr %45, align 8, !tbaa !5
  %253 = load ptr, ptr %45, align 8, !tbaa !5
  %254 = getelementptr inbounds i8, ptr %253, i64 0
  store i8 0, ptr %254, align 1, !tbaa !15
  %255 = load ptr, ptr %45, align 8, !tbaa !5
  %256 = getelementptr inbounds i8, ptr %255, i64 1
  store i8 3, ptr %256, align 1, !tbaa !15
  call void @llvm.lifetime.start.p0(i64 11, ptr %46) #7
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %46, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_psk_id_hash, i64 11, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr %47) #7
  call void @llvm.memset.p0.i64(ptr align 16 %47, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %48) #7
  %257 = getelementptr inbounds [10 x i8], ptr %41, i64 0, i64 0
  store ptr %257, ptr %48, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 4, ptr %49) #7
  store i32 28, ptr %49, align 4, !tbaa !9
  br label %258

258:                                              ; preds = %229
  %259 = load i32, ptr %49, align 4, !tbaa !9
  %260 = zext i32 %259 to i64
  %261 = icmp ugt i64 %260, -1
  br i1 %261, label %262, label %264

262:                                              ; preds = %258
  %263 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 163)
  call void @exit(i32 noundef 253) #8
  unreachable

264:                                              ; preds = %258
  br label %265

265:                                              ; preds = %264
  br label %266

266:                                              ; preds = %265
  call void @llvm.lifetime.start.p0(i64 8, ptr %50) #7
  %267 = load i32, ptr %49, align 4, !tbaa !9
  %268 = zext i32 %267 to i64
  %269 = mul i64 %268, 1
  %270 = alloca i8, i64 %269, align 16
  store ptr %270, ptr %50, align 8, !tbaa !5
  %271 = load ptr, ptr %50, align 8, !tbaa !5
  %272 = load i32, ptr %49, align 4, !tbaa !9
  %273 = zext i32 %272 to i64
  %274 = mul i64 %273, 1
  call void @llvm.memset.p0.i64(ptr align 1 %271, i8 0, i64 %274, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %51) #7
  %275 = load ptr, ptr %50, align 8, !tbaa !5
  store ptr %275, ptr %51, align 8, !tbaa !5
  %276 = load ptr, ptr %51, align 8, !tbaa !5
  %277 = getelementptr inbounds i8, ptr %276, i64 0
  store i8 72, ptr %277, align 1, !tbaa !15
  %278 = load ptr, ptr %51, align 8, !tbaa !5
  %279 = getelementptr inbounds i8, ptr %278, i64 1
  store i8 80, ptr %279, align 1, !tbaa !15
  %280 = load ptr, ptr %51, align 8, !tbaa !5
  %281 = getelementptr inbounds i8, ptr %280, i64 2
  store i8 75, ptr %281, align 1, !tbaa !15
  %282 = load ptr, ptr %51, align 8, !tbaa !5
  %283 = getelementptr inbounds i8, ptr %282, i64 3
  store i8 69, ptr %283, align 1, !tbaa !15
  %284 = load ptr, ptr %51, align 8, !tbaa !5
  %285 = getelementptr inbounds i8, ptr %284, i64 4
  store i8 45, ptr %285, align 1, !tbaa !15
  %286 = load ptr, ptr %51, align 8, !tbaa !5
  %287 = getelementptr inbounds i8, ptr %286, i64 5
  store i8 118, ptr %287, align 1, !tbaa !15
  %288 = load ptr, ptr %51, align 8, !tbaa !5
  %289 = getelementptr inbounds i8, ptr %288, i64 6
  store i8 49, ptr %289, align 1, !tbaa !15
  %290 = load ptr, ptr %50, align 8, !tbaa !5
  %291 = getelementptr inbounds i8, ptr %290, i64 7
  %292 = getelementptr inbounds [10 x i8], ptr %41, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %291, ptr align 1 %292, i64 10, i1 false)
  %293 = load ptr, ptr %50, align 8, !tbaa !5
  %294 = getelementptr inbounds i8, ptr %293, i64 17
  %295 = getelementptr inbounds [11 x i8], ptr %46, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %294, ptr align 1 %295, i64 11, i1 false)
  %296 = load ptr, ptr %50, align 8, !tbaa !5
  %297 = getelementptr inbounds i8, ptr %296, i64 28
  %298 = load ptr, ptr %48, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %297, ptr align 1 %298, i64 0, i1 false)
  %299 = getelementptr inbounds [32 x i8], ptr %47, i64 0, i64 0
  %300 = load ptr, ptr %48, align 8, !tbaa !5
  %301 = load ptr, ptr %50, align 8, !tbaa !5
  %302 = load i32, ptr %49, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %299, ptr noundef %300, i32 noundef 0, ptr noundef %301, i32 noundef %302)
  call void @llvm.lifetime.start.p0(i64 9, ptr %52) #7
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %52, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_info_hash, i64 9, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr %53) #7
  call void @llvm.memset.p0.i64(ptr align 16 %53, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %54) #7
  %303 = load i32, ptr %11, align 4, !tbaa !9
  %304 = add i32 26, %303
  store i32 %304, ptr %54, align 4, !tbaa !9
  br label %305

305:                                              ; preds = %266
  %306 = load i32, ptr %54, align 4, !tbaa !9
  %307 = zext i32 %306 to i64
  %308 = icmp ugt i64 %307, -1
  br i1 %308, label %309, label %311

309:                                              ; preds = %305
  %310 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 182)
  call void @exit(i32 noundef 253) #8
  unreachable

311:                                              ; preds = %305
  br label %312

312:                                              ; preds = %311
  br label %313

313:                                              ; preds = %312
  call void @llvm.lifetime.start.p0(i64 8, ptr %55) #7
  %314 = load i32, ptr %54, align 4, !tbaa !9
  %315 = zext i32 %314 to i64
  %316 = mul i64 %315, 1
  %317 = alloca i8, i64 %316, align 16
  store ptr %317, ptr %55, align 8, !tbaa !5
  %318 = load ptr, ptr %55, align 8, !tbaa !5
  %319 = load i32, ptr %54, align 4, !tbaa !9
  %320 = zext i32 %319 to i64
  %321 = mul i64 %320, 1
  call void @llvm.memset.p0.i64(ptr align 1 %318, i8 0, i64 %321, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %56) #7
  %322 = load ptr, ptr %55, align 8, !tbaa !5
  store ptr %322, ptr %56, align 8, !tbaa !5
  %323 = load ptr, ptr %56, align 8, !tbaa !5
  %324 = getelementptr inbounds i8, ptr %323, i64 0
  store i8 72, ptr %324, align 1, !tbaa !15
  %325 = load ptr, ptr %56, align 8, !tbaa !5
  %326 = getelementptr inbounds i8, ptr %325, i64 1
  store i8 80, ptr %326, align 1, !tbaa !15
  %327 = load ptr, ptr %56, align 8, !tbaa !5
  %328 = getelementptr inbounds i8, ptr %327, i64 2
  store i8 75, ptr %328, align 1, !tbaa !15
  %329 = load ptr, ptr %56, align 8, !tbaa !5
  %330 = getelementptr inbounds i8, ptr %329, i64 3
  store i8 69, ptr %330, align 1, !tbaa !15
  %331 = load ptr, ptr %56, align 8, !tbaa !5
  %332 = getelementptr inbounds i8, ptr %331, i64 4
  store i8 45, ptr %332, align 1, !tbaa !15
  %333 = load ptr, ptr %56, align 8, !tbaa !5
  %334 = getelementptr inbounds i8, ptr %333, i64 5
  store i8 118, ptr %334, align 1, !tbaa !15
  %335 = load ptr, ptr %56, align 8, !tbaa !5
  %336 = getelementptr inbounds i8, ptr %335, i64 6
  store i8 49, ptr %336, align 1, !tbaa !15
  %337 = load ptr, ptr %55, align 8, !tbaa !5
  %338 = getelementptr inbounds i8, ptr %337, i64 7
  %339 = getelementptr inbounds [10 x i8], ptr %41, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %338, ptr align 1 %339, i64 10, i1 false)
  %340 = load ptr, ptr %55, align 8, !tbaa !5
  %341 = getelementptr inbounds i8, ptr %340, i64 17
  %342 = getelementptr inbounds [9 x i8], ptr %52, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %341, ptr align 1 %342, i64 9, i1 false)
  %343 = load ptr, ptr %55, align 8, !tbaa !5
  %344 = getelementptr inbounds i8, ptr %343, i64 26
  %345 = load ptr, ptr %12, align 8, !tbaa !5
  %346 = load i32, ptr %11, align 4, !tbaa !9
  %347 = zext i32 %346 to i64
  %348 = mul i64 %347, 1
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %344, ptr align 1 %345, i64 %348, i1 false)
  %349 = getelementptr inbounds [32 x i8], ptr %53, i64 0, i64 0
  %350 = load ptr, ptr %48, align 8, !tbaa !5
  %351 = load ptr, ptr %55, align 8, !tbaa !5
  %352 = load i32, ptr %54, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %349, ptr noundef %350, i32 noundef 0, ptr noundef %351, i32 noundef %352)
  %353 = getelementptr inbounds [65 x i8], ptr %39, i64 0, i64 0
  store i8 0, ptr %353, align 16, !tbaa !15
  %354 = getelementptr inbounds [65 x i8], ptr %39, i64 0, i64 0
  %355 = getelementptr inbounds i8, ptr %354, i64 1
  %356 = getelementptr inbounds [32 x i8], ptr %47, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %355, ptr align 16 %356, i64 32, i1 false)
  %357 = getelementptr inbounds [65 x i8], ptr %39, i64 0, i64 0
  %358 = getelementptr inbounds i8, ptr %357, i64 33
  %359 = getelementptr inbounds [32 x i8], ptr %53, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %358, ptr align 16 %359, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 6, ptr %57) #7
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %57, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_secret, i64 6, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %58) #7
  store i32 23, ptr %58, align 4, !tbaa !9
  br label %360

360:                                              ; preds = %313
  %361 = load i32, ptr %58, align 4, !tbaa !9
  %362 = zext i32 %361 to i64
  %363 = icmp ugt i64 %362, -1
  br i1 %363, label %364, label %366

364:                                              ; preds = %360
  %365 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 202)
  call void @exit(i32 noundef 253) #8
  unreachable

366:                                              ; preds = %360
  br label %367

367:                                              ; preds = %366
  br label %368

368:                                              ; preds = %367
  call void @llvm.lifetime.start.p0(i64 8, ptr %59) #7
  %369 = load i32, ptr %58, align 4, !tbaa !9
  %370 = zext i32 %369 to i64
  %371 = mul i64 %370, 1
  %372 = alloca i8, i64 %371, align 16
  store ptr %372, ptr %59, align 8, !tbaa !5
  %373 = load ptr, ptr %59, align 8, !tbaa !5
  %374 = load i32, ptr %58, align 4, !tbaa !9
  %375 = zext i32 %374 to i64
  %376 = mul i64 %375, 1
  call void @llvm.memset.p0.i64(ptr align 1 %373, i8 0, i64 %376, i1 false)
  call void @llvm.lifetime.start.p0(i64 8, ptr %60) #7
  %377 = load ptr, ptr %59, align 8, !tbaa !5
  store ptr %377, ptr %60, align 8, !tbaa !5
  %378 = load ptr, ptr %60, align 8, !tbaa !5
  %379 = getelementptr inbounds i8, ptr %378, i64 0
  store i8 72, ptr %379, align 1, !tbaa !15
  %380 = load ptr, ptr %60, align 8, !tbaa !5
  %381 = getelementptr inbounds i8, ptr %380, i64 1
  store i8 80, ptr %381, align 1, !tbaa !15
  %382 = load ptr, ptr %60, align 8, !tbaa !5
  %383 = getelementptr inbounds i8, ptr %382, i64 2
  store i8 75, ptr %383, align 1, !tbaa !15
  %384 = load ptr, ptr %60, align 8, !tbaa !5
  %385 = getelementptr inbounds i8, ptr %384, i64 3
  store i8 69, ptr %385, align 1, !tbaa !15
  %386 = load ptr, ptr %60, align 8, !tbaa !5
  %387 = getelementptr inbounds i8, ptr %386, i64 4
  store i8 45, ptr %387, align 1, !tbaa !15
  %388 = load ptr, ptr %60, align 8, !tbaa !5
  %389 = getelementptr inbounds i8, ptr %388, i64 5
  store i8 118, ptr %389, align 1, !tbaa !15
  %390 = load ptr, ptr %60, align 8, !tbaa !5
  %391 = getelementptr inbounds i8, ptr %390, i64 6
  store i8 49, ptr %391, align 1, !tbaa !15
  %392 = load ptr, ptr %59, align 8, !tbaa !5
  %393 = getelementptr inbounds i8, ptr %392, i64 7
  %394 = getelementptr inbounds [10 x i8], ptr %41, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %393, ptr align 1 %394, i64 10, i1 false)
  %395 = load ptr, ptr %59, align 8, !tbaa !5
  %396 = getelementptr inbounds i8, ptr %395, i64 17
  %397 = getelementptr inbounds [6 x i8], ptr %57, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %396, ptr align 1 %397, i64 6, i1 false)
  %398 = load ptr, ptr %59, align 8, !tbaa !5
  %399 = getelementptr inbounds i8, ptr %398, i64 23
  %400 = load ptr, ptr %48, align 8, !tbaa !5
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %399, ptr align 1 %400, i64 0, i1 false)
  %401 = getelementptr inbounds [32 x i8], ptr %40, i64 0, i64 0
  %402 = getelementptr inbounds [32 x i8], ptr %13, i64 0, i64 0
  %403 = load ptr, ptr %59, align 8, !tbaa !5
  %404 = load i32, ptr %58, align 4, !tbaa !9
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef %401, ptr noundef %402, i32 noundef 32, ptr noundef %403, i32 noundef %404)
  call void @llvm.lifetime.start.p0(i64 3, ptr %61) #7
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %61, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_exp, i64 3, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %62) #7
  store i32 87, ptr %62, align 4, !tbaa !9
  br label %405

405:                                              ; preds = %368
  %406 = load i32, ptr %62, align 4, !tbaa !9
  %407 = zext i32 %406 to i64
  %408 = icmp ugt i64 %407, -1
  br i1 %408, label %409, label %411

409:                                              ; preds = %405
  %410 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 219)
  call void @exit(i32 noundef 253) #8
  unreachable

411:                                              ; preds = %405
  br label %412

412:                                              ; preds = %411
  br label %413

413:                                              ; preds = %412
  call void @llvm.lifetime.start.p0(i64 8, ptr %63) #7
  %414 = load i32, ptr %62, align 4, !tbaa !9
  %415 = zext i32 %414 to i64
  %416 = mul i64 %415, 1
  %417 = alloca i8, i64 %416, align 16
  store ptr %417, ptr %63, align 8, !tbaa !5
  %418 = load ptr, ptr %63, align 8, !tbaa !5
  %419 = load i32, ptr %62, align 4, !tbaa !9
  %420 = zext i32 %419 to i64
  %421 = mul i64 %420, 1
  call void @llvm.memset.p0.i64(ptr align 1 %418, i8 0, i64 %421, i1 false)
  %422 = load ptr, ptr %63, align 8, !tbaa !5
  %423 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef %422, i16 noundef zeroext %423)
  call void @llvm.lifetime.start.p0(i64 8, ptr %64) #7
  %424 = load ptr, ptr %63, align 8, !tbaa !5
  %425 = getelementptr inbounds i8, ptr %424, i64 2
  store ptr %425, ptr %64, align 8, !tbaa !5
  %426 = load ptr, ptr %64, align 8, !tbaa !5
  %427 = getelementptr inbounds i8, ptr %426, i64 0
  store i8 72, ptr %427, align 1, !tbaa !15
  %428 = load ptr, ptr %64, align 8, !tbaa !5
  %429 = getelementptr inbounds i8, ptr %428, i64 1
  store i8 80, ptr %429, align 1, !tbaa !15
  %430 = load ptr, ptr %64, align 8, !tbaa !5
  %431 = getelementptr inbounds i8, ptr %430, i64 2
  store i8 75, ptr %431, align 1, !tbaa !15
  %432 = load ptr, ptr %64, align 8, !tbaa !5
  %433 = getelementptr inbounds i8, ptr %432, i64 3
  store i8 69, ptr %433, align 1, !tbaa !15
  %434 = load ptr, ptr %64, align 8, !tbaa !5
  %435 = getelementptr inbounds i8, ptr %434, i64 4
  store i8 45, ptr %435, align 1, !tbaa !15
  %436 = load ptr, ptr %64, align 8, !tbaa !5
  %437 = getelementptr inbounds i8, ptr %436, i64 5
  store i8 118, ptr %437, align 1, !tbaa !15
  %438 = load ptr, ptr %64, align 8, !tbaa !5
  %439 = getelementptr inbounds i8, ptr %438, i64 6
  store i8 49, ptr %439, align 1, !tbaa !15
  %440 = load ptr, ptr %63, align 8, !tbaa !5
  %441 = getelementptr inbounds i8, ptr %440, i64 9
  %442 = getelementptr inbounds [10 x i8], ptr %41, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %441, ptr align 1 %442, i64 10, i1 false)
  %443 = load ptr, ptr %63, align 8, !tbaa !5
  %444 = getelementptr inbounds i8, ptr %443, i64 19
  %445 = getelementptr inbounds [3 x i8], ptr %61, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %444, ptr align 1 %445, i64 3, i1 false)
  %446 = load ptr, ptr %63, align 8, !tbaa !5
  %447 = getelementptr inbounds i8, ptr %446, i64 22
  %448 = getelementptr inbounds [65 x i8], ptr %39, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %447, ptr align 16 %448, i64 65, i1 false)
  %449 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %1, i32 0, i32 3
  %450 = load ptr, ptr %449, align 8, !tbaa !16
  %451 = getelementptr inbounds [32 x i8], ptr %40, i64 0, i64 0
  %452 = load ptr, ptr %63, align 8, !tbaa !5
  %453 = load i32, ptr %62, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %450, ptr noundef %451, i32 noundef 32, ptr noundef %452, i32 noundef %453, i32 noundef 32)
  call void @llvm.lifetime.start.p0(i64 3, ptr %65) #7
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %65, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_key, i64 3, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %66) #7
  store i32 87, ptr %66, align 4, !tbaa !9
  br label %454

454:                                              ; preds = %413
  %455 = load i32, ptr %66, align 4, !tbaa !9
  %456 = zext i32 %455 to i64
  %457 = icmp ugt i64 %456, -1
  br i1 %457, label %458, label %460

458:                                              ; preds = %454
  %459 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 237)
  call void @exit(i32 noundef 253) #8
  unreachable

460:                                              ; preds = %454
  br label %461

461:                                              ; preds = %460
  br label %462

462:                                              ; preds = %461
  call void @llvm.lifetime.start.p0(i64 8, ptr %67) #7
  %463 = load i32, ptr %66, align 4, !tbaa !9
  %464 = zext i32 %463 to i64
  %465 = mul i64 %464, 1
  %466 = alloca i8, i64 %465, align 16
  store ptr %466, ptr %67, align 8, !tbaa !5
  %467 = load ptr, ptr %67, align 8, !tbaa !5
  %468 = load i32, ptr %66, align 4, !tbaa !9
  %469 = zext i32 %468 to i64
  %470 = mul i64 %469, 1
  call void @llvm.memset.p0.i64(ptr align 1 %467, i8 0, i64 %470, i1 false)
  %471 = load ptr, ptr %67, align 8, !tbaa !5
  %472 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef %471, i16 noundef zeroext %472)
  call void @llvm.lifetime.start.p0(i64 8, ptr %68) #7
  %473 = load ptr, ptr %67, align 8, !tbaa !5
  %474 = getelementptr inbounds i8, ptr %473, i64 2
  store ptr %474, ptr %68, align 8, !tbaa !5
  %475 = load ptr, ptr %68, align 8, !tbaa !5
  %476 = getelementptr inbounds i8, ptr %475, i64 0
  store i8 72, ptr %476, align 1, !tbaa !15
  %477 = load ptr, ptr %68, align 8, !tbaa !5
  %478 = getelementptr inbounds i8, ptr %477, i64 1
  store i8 80, ptr %478, align 1, !tbaa !15
  %479 = load ptr, ptr %68, align 8, !tbaa !5
  %480 = getelementptr inbounds i8, ptr %479, i64 2
  store i8 75, ptr %480, align 1, !tbaa !15
  %481 = load ptr, ptr %68, align 8, !tbaa !5
  %482 = getelementptr inbounds i8, ptr %481, i64 3
  store i8 69, ptr %482, align 1, !tbaa !15
  %483 = load ptr, ptr %68, align 8, !tbaa !5
  %484 = getelementptr inbounds i8, ptr %483, i64 4
  store i8 45, ptr %484, align 1, !tbaa !15
  %485 = load ptr, ptr %68, align 8, !tbaa !5
  %486 = getelementptr inbounds i8, ptr %485, i64 5
  store i8 118, ptr %486, align 1, !tbaa !15
  %487 = load ptr, ptr %68, align 8, !tbaa !5
  %488 = getelementptr inbounds i8, ptr %487, i64 6
  store i8 49, ptr %488, align 1, !tbaa !15
  %489 = load ptr, ptr %67, align 8, !tbaa !5
  %490 = getelementptr inbounds i8, ptr %489, i64 9
  %491 = getelementptr inbounds [10 x i8], ptr %41, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %490, ptr align 1 %491, i64 10, i1 false)
  %492 = load ptr, ptr %67, align 8, !tbaa !5
  %493 = getelementptr inbounds i8, ptr %492, i64 19
  %494 = getelementptr inbounds [3 x i8], ptr %65, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %493, ptr align 1 %494, i64 3, i1 false)
  %495 = load ptr, ptr %67, align 8, !tbaa !5
  %496 = getelementptr inbounds i8, ptr %495, i64 22
  %497 = getelementptr inbounds [65 x i8], ptr %39, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %496, ptr align 16 %497, i64 65, i1 false)
  %498 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %1, i32 0, i32 0
  %499 = load ptr, ptr %498, align 8, !tbaa !18
  %500 = getelementptr inbounds [32 x i8], ptr %40, i64 0, i64 0
  %501 = load ptr, ptr %67, align 8, !tbaa !5
  %502 = load i32, ptr %66, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %499, ptr noundef %500, i32 noundef 32, ptr noundef %501, i32 noundef %502, i32 noundef 32)
  call void @llvm.lifetime.start.p0(i64 10, ptr %69) #7
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %69, ptr align 1 @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_base_nonce, i64 10, i1 false)
  call void @llvm.lifetime.start.p0(i64 4, ptr %70) #7
  store i32 94, ptr %70, align 4, !tbaa !9
  br label %503

503:                                              ; preds = %462
  %504 = load i32, ptr %70, align 4, !tbaa !9
  %505 = zext i32 %504 to i64
  %506 = icmp ugt i64 %505, -1
  br i1 %506, label %507, label %509

507:                                              ; preds = %503
  %508 = call i32 (ptr, ...) @printf(ptr noundef @.str, ptr noundef @.str.1, i32 noundef 257)
  call void @exit(i32 noundef 253) #8
  unreachable

509:                                              ; preds = %503
  br label %510

510:                                              ; preds = %509
  br label %511

511:                                              ; preds = %510
  call void @llvm.lifetime.start.p0(i64 8, ptr %71) #7
  %512 = load i32, ptr %70, align 4, !tbaa !9
  %513 = zext i32 %512 to i64
  %514 = mul i64 %513, 1
  %515 = alloca i8, i64 %514, align 16
  store ptr %515, ptr %71, align 8, !tbaa !5
  %516 = load ptr, ptr %71, align 8, !tbaa !5
  %517 = load i32, ptr %70, align 4, !tbaa !9
  %518 = zext i32 %517 to i64
  %519 = mul i64 %518, 1
  call void @llvm.memset.p0.i64(ptr align 1 %516, i8 0, i64 %519, i1 false)
  %520 = load ptr, ptr %71, align 8, !tbaa !5
  %521 = call zeroext i16 @__bswap_16(i16 noundef zeroext 12)
  call void @store16(ptr noundef %520, i16 noundef zeroext %521)
  call void @llvm.lifetime.start.p0(i64 8, ptr %72) #7
  %522 = load ptr, ptr %71, align 8, !tbaa !5
  %523 = getelementptr inbounds i8, ptr %522, i64 2
  store ptr %523, ptr %72, align 8, !tbaa !5
  %524 = load ptr, ptr %72, align 8, !tbaa !5
  %525 = getelementptr inbounds i8, ptr %524, i64 0
  store i8 72, ptr %525, align 1, !tbaa !15
  %526 = load ptr, ptr %72, align 8, !tbaa !5
  %527 = getelementptr inbounds i8, ptr %526, i64 1
  store i8 80, ptr %527, align 1, !tbaa !15
  %528 = load ptr, ptr %72, align 8, !tbaa !5
  %529 = getelementptr inbounds i8, ptr %528, i64 2
  store i8 75, ptr %529, align 1, !tbaa !15
  %530 = load ptr, ptr %72, align 8, !tbaa !5
  %531 = getelementptr inbounds i8, ptr %530, i64 3
  store i8 69, ptr %531, align 1, !tbaa !15
  %532 = load ptr, ptr %72, align 8, !tbaa !5
  %533 = getelementptr inbounds i8, ptr %532, i64 4
  store i8 45, ptr %533, align 1, !tbaa !15
  %534 = load ptr, ptr %72, align 8, !tbaa !5
  %535 = getelementptr inbounds i8, ptr %534, i64 5
  store i8 118, ptr %535, align 1, !tbaa !15
  %536 = load ptr, ptr %72, align 8, !tbaa !5
  %537 = getelementptr inbounds i8, ptr %536, i64 6
  store i8 49, ptr %537, align 1, !tbaa !15
  %538 = load ptr, ptr %71, align 8, !tbaa !5
  %539 = getelementptr inbounds i8, ptr %538, i64 9
  %540 = getelementptr inbounds [10 x i8], ptr %41, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %539, ptr align 1 %540, i64 10, i1 false)
  %541 = load ptr, ptr %71, align 8, !tbaa !5
  %542 = getelementptr inbounds i8, ptr %541, i64 19
  %543 = getelementptr inbounds [10 x i8], ptr %69, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %542, ptr align 1 %543, i64 10, i1 false)
  %544 = load ptr, ptr %71, align 8, !tbaa !5
  %545 = getelementptr inbounds i8, ptr %544, i64 29
  %546 = getelementptr inbounds [65 x i8], ptr %39, i64 0, i64 0
  call void @llvm.memcpy.p0.p0.i64(ptr align 1 %545, ptr align 16 %546, i64 65, i1 false)
  %547 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %1, i32 0, i32 1
  %548 = load ptr, ptr %547, align 8, !tbaa !19
  %549 = getelementptr inbounds [32 x i8], ptr %40, i64 0, i64 0
  %550 = load ptr, ptr %71, align 8, !tbaa !5
  %551 = load i32, ptr %70, align 4, !tbaa !9
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %548, ptr noundef %549, i32 noundef 32, ptr noundef %550, i32 noundef %551, i32 noundef 12)
  %552 = getelementptr inbounds %struct.Hacl_Impl_HPKE_context_s_s, ptr %1, i32 0, i32 2
  %553 = load ptr, ptr %552, align 8, !tbaa !20
  %554 = getelementptr inbounds i64, ptr %553, i64 0
  store i64 0, ptr %554, align 8, !tbaa !21
  %555 = load i32, ptr %17, align 4, !tbaa !9
  store i32 %555, ptr %7, align 4
  store i32 1, ptr %73, align 4
  call void @llvm.lifetime.end.p0(i64 8, ptr %72) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %71) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %70) #7
  call void @llvm.lifetime.end.p0(i64 10, ptr %69) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %68) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %67) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %66) #7
  call void @llvm.lifetime.end.p0(i64 3, ptr %65) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %64) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %63) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %62) #7
  call void @llvm.lifetime.end.p0(i64 3, ptr %61) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %60) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %59) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %58) #7
  call void @llvm.lifetime.end.p0(i64 6, ptr %57) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %56) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %55) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %54) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr %53) #7
  call void @llvm.lifetime.end.p0(i64 9, ptr %52) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %51) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %50) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %49) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %48) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr %47) #7
  call void @llvm.lifetime.end.p0(i64 11, ptr %46) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %45) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %44) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %43) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %42) #7
  call void @llvm.lifetime.end.p0(i64 10, ptr %41) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr %40) #7
  call void @llvm.lifetime.end.p0(i64 65, ptr %39) #7
  br label %558

556:                                              ; preds = %226
  %557 = load i32, ptr %17, align 4, !tbaa !9
  store i32 %557, ptr %7, align 4
  store i32 1, ptr %73, align 4
  br label %558

558:                                              ; preds = %556, %511
  call void @llvm.lifetime.end.p0(i64 4, ptr %17) #7
  call void @llvm.lifetime.end.p0(i64 4, ptr %16) #7
  call void @llvm.lifetime.end.p0(i64 1, ptr %15) #7
  call void @llvm.lifetime.end.p0(i64 8, ptr %14) #7
  call void @llvm.lifetime.end.p0(i64 32, ptr %13) #7
  %559 = load i32, ptr %7, align 4
  ret i32 %559
}

; Function Attrs: nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.start.p0(i64 immarg, ptr nocapture) #1

; Function Attrs: nocallback nofree nounwind willreturn memory(argmem: write)
declare void @llvm.memset.p0.i64(ptr nocapture writeonly, i8, i64, i1 immarg) #2

declare zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_i(ptr noundef, ptr noundef) #3

declare zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_r(ptr noundef, ptr noundef, ptr noundef) #3

; Function Attrs: nocallback nofree nounwind willreturn memory(argmem: readwrite)
declare void @llvm.memcpy.p0.p0.i64(ptr noalias nocapture writeonly, ptr noalias nocapture readonly, i64, i1 immarg) #4

declare i32 @printf(ptr noundef, ...) #3

; Function Attrs: noreturn nounwind
declare void @exit(i32 noundef) #5

declare void @Hacl_HKDF_extract_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef) #3

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @store16(ptr noundef, i16 noundef zeroext) #6

; Function Attrs: inlinehint nounwind uwtable
declare hidden zeroext i16 @__bswap_16(i16 noundef zeroext) #6

declare void @Hacl_HKDF_expand_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef, i32 noundef) #3

; Function Attrs: nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.end.p0(i64 immarg, ptr nocapture) #1

attributes #0 = { nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #1 = { nocallback nofree nosync nounwind willreturn memory(argmem: readwrite) }
attributes #2 = { nocallback nofree nounwind willreturn memory(argmem: write) }
attributes #3 = { "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #4 = { nocallback nofree nounwind willreturn memory(argmem: readwrite) }
attributes #5 = { noreturn nounwind "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #6 = { inlinehint nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #7 = { nounwind }
attributes #8 = { noreturn nounwind }

!llvm.module.flags = !{!0, !1, !2, !3}
!llvm.ident = !{!4}

!0 = !{i32 1, !"wchar_size", i32 4}
!1 = !{i32 8, !"PIC Level", i32 2}
!2 = !{i32 7, !"PIE Level", i32 2}
!3 = !{i32 7, !"uwtable", i32 2}
!4 = !{!"clang version 19.1.0 (git@github.com:llvm/llvm-project.git a4bf6cd7cfb1a1421ba92bca9d017b49936c55e4)"}
!5 = !{!6, !6, i64 0}
!6 = !{!"any pointer", !7, i64 0}
!7 = !{!"omnipotent char", !8, i64 0}
!8 = !{!"Simple C/C++ TBAA"}
!9 = !{!10, !10, i64 0}
!10 = !{!"int", !7, i64 0}
!11 = !{!12, !12, i64 0}
!12 = !{!"_Bool", !7, i64 0}
!13 = !{i8 0, i8 2}
!14 = !{}
!15 = !{!7, !7, i64 0}
!16 = !{!17, !6, i64 24}
!17 = !{!"Hacl_Impl_HPKE_context_s_s", !6, i64 0, !6, i64 8, !6, i64 16, !6, i64 24}
!18 = !{!17, !6, i64 0}
!19 = !{!17, !6, i64 8}
!20 = !{!17, !6, i64 16}
!21 = !{!22, !22, i64 0}
!22 = !{!"long", !7, i64 0}


; Optimized IR (opt -passes='default<O3>'):
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

%struct.Hacl_Impl_HPKE_context_s_s = type { ptr, ptr, ptr, ptr }

@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_eae_prk = external hidden unnamed_addr constant [7 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_shared_secret = external hidden unnamed_addr constant [13 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_psk_id_hash = external hidden unnamed_addr constant [11 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_info_hash = external hidden unnamed_addr constant [9 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_secret = external hidden unnamed_addr constant [6 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_exp = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_key = external hidden unnamed_addr constant [3 x i8], align 1
@__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_base_nonce = external hidden unnamed_addr constant [10 x i8], align 1

; Function Attrs: nounwind uwtable
define dso_local range(i32 0, 2) i32 @Hacl_HPKE_P256_CP128_SHA256_setupBaseS(ptr noundef %0, ptr nocapture noundef readonly byval(%struct.Hacl_Impl_HPKE_context_s_s) align 8 %1, ptr noundef %2, ptr noundef %3, i32 noundef %4, ptr nocapture noundef readonly %5) local_unnamed_addr #0 {
  %7 = alloca [32 x i8], align 16
  %8 = alloca [64 x i8], align 16
  %.sroa.0 = alloca [65 x i8], align 16
  %.sroa.6 = alloca [64 x i8], align 2
  %9 = alloca [32 x i8], align 16
  %10 = alloca [5 x i8], align 4
  %.sroa.7 = alloca [32 x i8], align 1
  %.sroa.8 = alloca [32 x i8], align 1
  %11 = alloca [32 x i8], align 16
  %12 = alloca [10 x i8], align 8
  %13 = alloca [32 x i8], align 16
  %14 = alloca [32 x i8], align 16
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %7) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %7, i8 0, i64 32, i1 false)
  %15 = getelementptr inbounds i8, ptr %0, i64 1
  %16 = tail call zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_i(ptr noundef nonnull %15, ptr noundef %2) #6
  br i1 %16, label %17, label %.thread

17:                                               ; preds = %6
  store i8 4, ptr %0, align 1, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 64, ptr nonnull %8) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(64) %8, i8 0, i64 64, i1 false)
  %18 = call zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_r(ptr noundef nonnull %8, ptr noundef %3, ptr noundef %2) #6
  call void @llvm.lifetime.start.p0(i64 65, ptr nonnull %.sroa.0)
  call void @llvm.lifetime.start.p0(i64 64, ptr nonnull %.sroa.6)
  br i1 %18, label %20, label %19

19:                                               ; preds = %17
  call void @llvm.lifetime.end.p0(i64 65, ptr nonnull %.sroa.0)
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %.sroa.6)
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %8) #6
  br label %.thread

20:                                               ; preds = %17
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 16 dereferenceable(65) %.sroa.0, ptr noundef nonnull align 1 dereferenceable(65) %0, i64 65, i1 false)
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 2 dereferenceable(64) %.sroa.6, ptr noundef nonnull align 1 dereferenceable(64) %3, i64 64, i1 false)
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %9) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %9, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 5, ptr nonnull %10) #6
  store <4 x i8> <i8 75, i8 69, i8 77, i8 0>, ptr %10, align 4, !tbaa !5
  %21 = getelementptr inbounds i8, ptr %10, i64 4
  store i8 16, ptr %21, align 4, !tbaa !5
  %22 = alloca [51 x i8], align 16
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %22, align 16, !tbaa !5
  %23 = getelementptr inbounds i8, ptr %22, i64 4
  store i8 45, ptr %23, align 4, !tbaa !5
  %24 = getelementptr inbounds i8, ptr %22, i64 5
  store i8 118, ptr %24, align 1, !tbaa !5
  %25 = getelementptr inbounds i8, ptr %22, i64 6
  store i8 49, ptr %25, align 2, !tbaa !5
  %26 = getelementptr inbounds i8, ptr %22, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(5) %26, ptr noundef nonnull align 4 dereferenceable(5) %10, i64 5, i1 false)
  %27 = getelementptr inbounds i8, ptr %22, i64 12
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 4 dereferenceable(7) %27, ptr noundef nonnull align 1 dereferenceable(7) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_eae_prk, i64 7, i1 false)
  %28 = getelementptr inbounds i8, ptr %22, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %28, ptr noundef nonnull align 16 dereferenceable(32) %8, i64 32, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %9, ptr noundef nonnull %10, i32 noundef 0, ptr noundef nonnull %22, i32 noundef 51) #6
  %29 = alloca [157 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(157) %29, i8 0, i64 157, i1 false)
  %30 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef nonnull %29, i16 noundef zeroext %30)
  %31 = getelementptr inbounds i8, ptr %29, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %31, align 2, !tbaa !5
  %32 = getelementptr inbounds i8, ptr %29, i64 6
  store i8 45, ptr %32, align 2, !tbaa !5
  %33 = getelementptr inbounds i8, ptr %29, i64 7
  store i8 118, ptr %33, align 1, !tbaa !5
  %34 = getelementptr inbounds i8, ptr %29, i64 8
  store i8 49, ptr %34, align 8, !tbaa !5
  %35 = getelementptr inbounds i8, ptr %29, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(5) %35, ptr noundef nonnull align 4 dereferenceable(5) %10, i64 5, i1 false)
  %36 = getelementptr inbounds i8, ptr %29, i64 14
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 2 dereferenceable(13) %36, ptr noundef nonnull align 1 dereferenceable(13) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_shared_secret, i64 13, i1 false)
  %37 = getelementptr inbounds i8, ptr %29, i64 27
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(65) %37, ptr noundef nonnull align 16 dereferenceable(65) %.sroa.0, i64 65, i1 false)
  %.sroa.5.0..sroa_idx = getelementptr inbounds i8, ptr %29, i64 92
  store i8 4, ptr %.sroa.5.0..sroa_idx, align 4
  %.sroa.6.0..sroa_idx = getelementptr inbounds i8, ptr %29, i64 93
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(64) %.sroa.6.0..sroa_idx, ptr noundef nonnull align 2 dereferenceable(64) %.sroa.6, i64 64, i1 false)
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef nonnull %7, ptr noundef nonnull %9, i32 noundef 32, ptr noundef nonnull %29, i32 noundef 157, i32 noundef 32) #6
  call void @llvm.lifetime.end.p0(i64 5, ptr nonnull %10) #6
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %9) #6
  call void @llvm.lifetime.end.p0(i64 65, ptr nonnull %.sroa.0)
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %.sroa.6)
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %8) #6
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %.sroa.7)
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %.sroa.8)
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %11) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %11, i8 0, i64 32, i1 false)
  call void @llvm.lifetime.start.p0(i64 10, ptr nonnull %12) #6
  store <8 x i8> <i8 72, i8 80, i8 75, i8 69, i8 0, i8 16, i8 0, i8 1>, ptr %12, align 8, !tbaa !5
  %38 = getelementptr inbounds i8, ptr %12, i64 8
  store i8 0, ptr %38, align 8, !tbaa !5
  %39 = getelementptr inbounds i8, ptr %12, i64 9
  store i8 3, ptr %39, align 1, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %13) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %13, i8 0, i64 32, i1 false)
  %40 = alloca [28 x i8], align 16
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %40, align 16, !tbaa !5
  %41 = getelementptr inbounds i8, ptr %40, i64 4
  store i8 45, ptr %41, align 4, !tbaa !5
  %42 = getelementptr inbounds i8, ptr %40, i64 5
  store i8 118, ptr %42, align 1, !tbaa !5
  %43 = getelementptr inbounds i8, ptr %40, i64 6
  store i8 49, ptr %43, align 2, !tbaa !5
  %44 = getelementptr inbounds i8, ptr %40, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %44, ptr noundef nonnull align 8 dereferenceable(10) %12, i64 10, i1 false)
  %45 = getelementptr inbounds i8, ptr %40, i64 17
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(11) %45, ptr noundef nonnull align 1 dereferenceable(11) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_psk_id_hash, i64 11, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %13, ptr noundef nonnull %12, i32 noundef 0, ptr noundef nonnull %40, i32 noundef 28) #6
  call void @llvm.lifetime.start.p0(i64 32, ptr nonnull %14) #6
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(32) %14, i8 0, i64 32, i1 false)
  %46 = add i32 %4, 26
  %47 = zext i32 %46 to i64
  %48 = alloca i8, i64 %47, align 16
  call void @llvm.memset.p0.i64(ptr nonnull align 16 %48, i8 0, i64 %47, i1 false)
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %48, align 16, !tbaa !5
  %49 = getelementptr inbounds i8, ptr %48, i64 4
  store i8 45, ptr %49, align 4, !tbaa !5
  %50 = getelementptr inbounds i8, ptr %48, i64 5
  store i8 118, ptr %50, align 1, !tbaa !5
  %51 = getelementptr inbounds i8, ptr %48, i64 6
  store i8 49, ptr %51, align 2, !tbaa !5
  %52 = getelementptr inbounds i8, ptr %48, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %52, ptr noundef nonnull align 8 dereferenceable(10) %12, i64 10, i1 false)
  %53 = getelementptr inbounds i8, ptr %48, i64 17
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(9) %53, ptr noundef nonnull align 1 dereferenceable(9) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_info_hash, i64 9, i1 false)
  %54 = getelementptr inbounds i8, ptr %48, i64 26
  %55 = zext i32 %4 to i64
  call void @llvm.memcpy.p0.p0.i64(ptr nonnull align 2 %54, ptr align 1 %5, i64 %55, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %14, ptr noundef nonnull %12, i32 noundef 0, ptr noundef nonnull %48, i32 noundef %46) #6
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, ptr noundef nonnull align 16 dereferenceable(32) %13, i64 32, i1 false)
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, ptr noundef nonnull align 16 dereferenceable(32) %14, i64 32, i1 false)
  %56 = alloca [23 x i8], align 16
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %56, align 16, !tbaa !5
  %57 = getelementptr inbounds i8, ptr %56, i64 4
  store i8 45, ptr %57, align 4, !tbaa !5
  %58 = getelementptr inbounds i8, ptr %56, i64 5
  store i8 118, ptr %58, align 1, !tbaa !5
  %59 = getelementptr inbounds i8, ptr %56, i64 6
  store i8 49, ptr %59, align 2, !tbaa !5
  %60 = getelementptr inbounds i8, ptr %56, i64 7
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %60, ptr noundef nonnull align 8 dereferenceable(10) %12, i64 10, i1 false)
  %61 = getelementptr inbounds i8, ptr %56, i64 17
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(6) %61, ptr noundef nonnull align 1 dereferenceable(6) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_secret, i64 6, i1 false)
  call void @Hacl_HKDF_extract_sha2_256(ptr noundef nonnull %11, ptr noundef nonnull %7, i32 noundef 32, ptr noundef nonnull %56, i32 noundef 23) #6
  %62 = alloca [87 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(87) %62, i8 0, i64 87, i1 false)
  %63 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef nonnull %62, i16 noundef zeroext %63)
  %64 = getelementptr inbounds i8, ptr %62, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %64, align 2, !tbaa !5
  %65 = getelementptr inbounds i8, ptr %62, i64 6
  store i8 45, ptr %65, align 2, !tbaa !5
  %66 = getelementptr inbounds i8, ptr %62, i64 7
  store i8 118, ptr %66, align 1, !tbaa !5
  %67 = getelementptr inbounds i8, ptr %62, i64 8
  store i8 49, ptr %67, align 8, !tbaa !5
  %68 = getelementptr inbounds i8, ptr %62, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %68, ptr noundef nonnull align 8 dereferenceable(10) %12, i64 10, i1 false)
  %69 = getelementptr inbounds i8, ptr %62, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(3) %69, ptr noundef nonnull align 1 dereferenceable(3) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_exp, i64 3, i1 false)
  %70 = getelementptr inbounds i8, ptr %62, i64 22
  store i8 0, ptr %70, align 2
  %.sroa.7.0..sroa_idx = getelementptr inbounds i8, ptr %62, i64 23
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7.0..sroa_idx, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, i64 32, i1 false)
  %.sroa.8.0..sroa_idx = getelementptr inbounds i8, ptr %62, i64 55
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8.0..sroa_idx, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, i64 32, i1 false)
  %71 = getelementptr inbounds i8, ptr %1, i64 24
  %72 = load ptr, ptr %71, align 8, !tbaa !8
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %72, ptr noundef nonnull %11, i32 noundef 32, ptr noundef nonnull %62, i32 noundef 87, i32 noundef 32) #6
  %73 = alloca [87 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(87) %73, i8 0, i64 87, i1 false)
  %74 = call zeroext i16 @__bswap_16(i16 noundef zeroext 32)
  call void @store16(ptr noundef nonnull %73, i16 noundef zeroext %74)
  %75 = getelementptr inbounds i8, ptr %73, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %75, align 2, !tbaa !5
  %76 = getelementptr inbounds i8, ptr %73, i64 6
  store i8 45, ptr %76, align 2, !tbaa !5
  %77 = getelementptr inbounds i8, ptr %73, i64 7
  store i8 118, ptr %77, align 1, !tbaa !5
  %78 = getelementptr inbounds i8, ptr %73, i64 8
  store i8 49, ptr %78, align 8, !tbaa !5
  %79 = getelementptr inbounds i8, ptr %73, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %79, ptr noundef nonnull align 8 dereferenceable(10) %12, i64 10, i1 false)
  %80 = getelementptr inbounds i8, ptr %73, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(3) %80, ptr noundef nonnull align 1 dereferenceable(3) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_key, i64 3, i1 false)
  %81 = getelementptr inbounds i8, ptr %73, i64 22
  store i8 0, ptr %81, align 2
  %.sroa.7.0..sroa_idx120 = getelementptr inbounds i8, ptr %73, i64 23
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7.0..sroa_idx120, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, i64 32, i1 false)
  %.sroa.8.0..sroa_idx122 = getelementptr inbounds i8, ptr %73, i64 55
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8.0..sroa_idx122, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, i64 32, i1 false)
  %82 = load ptr, ptr %1, align 8, !tbaa !11
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %82, ptr noundef nonnull %11, i32 noundef 32, ptr noundef nonnull %73, i32 noundef 87, i32 noundef 32) #6
  %83 = alloca [94 x i8], align 16
  call void @llvm.memset.p0.i64(ptr noundef nonnull align 16 dereferenceable(94) %83, i8 0, i64 94, i1 false)
  %84 = call zeroext i16 @__bswap_16(i16 noundef zeroext 12)
  call void @store16(ptr noundef nonnull %83, i16 noundef zeroext %84)
  %85 = getelementptr inbounds i8, ptr %83, i64 2
  store <4 x i8> <i8 72, i8 80, i8 75, i8 69>, ptr %85, align 2, !tbaa !5
  %86 = getelementptr inbounds i8, ptr %83, i64 6
  store i8 45, ptr %86, align 2, !tbaa !5
  %87 = getelementptr inbounds i8, ptr %83, i64 7
  store i8 118, ptr %87, align 1, !tbaa !5
  %88 = getelementptr inbounds i8, ptr %83, i64 8
  store i8 49, ptr %88, align 8, !tbaa !5
  %89 = getelementptr inbounds i8, ptr %83, i64 9
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %89, ptr noundef nonnull align 8 dereferenceable(10) %12, i64 10, i1 false)
  %90 = getelementptr inbounds i8, ptr %83, i64 19
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 1 dereferenceable(10) %90, ptr noundef nonnull align 1 dereferenceable(10) @__const.Hacl_HPKE_P256_CP128_SHA256_setupBaseS.label_base_nonce, i64 10, i1 false)
  %91 = getelementptr inbounds i8, ptr %83, i64 29
  store i8 0, ptr %91, align 1
  %.sroa.7.0..sroa_idx121 = getelementptr inbounds i8, ptr %83, i64 30
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 2 dereferenceable(32) %.sroa.7.0..sroa_idx121, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.7, i64 32, i1 false)
  %.sroa.8.0..sroa_idx123 = getelementptr inbounds i8, ptr %83, i64 62
  call void @llvm.memcpy.p0.p0.i64(ptr noundef nonnull align 2 dereferenceable(32) %.sroa.8.0..sroa_idx123, ptr noundef nonnull align 1 dereferenceable(32) %.sroa.8, i64 32, i1 false)
  %92 = getelementptr inbounds i8, ptr %1, i64 8
  %93 = load ptr, ptr %92, align 8, !tbaa !12
  call void @Hacl_HKDF_expand_sha2_256(ptr noundef %93, ptr noundef nonnull %11, i32 noundef 32, ptr noundef nonnull %83, i32 noundef 94, i32 noundef 12) #6
  %94 = getelementptr inbounds i8, ptr %1, i64 16
  %95 = load ptr, ptr %94, align 8, !tbaa !13
  store i64 0, ptr %95, align 8, !tbaa !14
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %14) #6
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %13) #6
  call void @llvm.lifetime.end.p0(i64 10, ptr nonnull %12) #6
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %11) #6
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %.sroa.7)
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %.sroa.8)
  br label %.thread

.thread:                                          ; preds = %6, %19, %20
  %.1194 = phi i32 [ 1, %19 ], [ 0, %20 ], [ 1, %6 ]
  call void @llvm.lifetime.end.p0(i64 32, ptr nonnull %7) #6
  ret i32 %.1194
}

; Function Attrs: mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.start.p0(i64 immarg, ptr nocapture) #1

; Function Attrs: mustprogress nocallback nofree nounwind willreturn memory(argmem: write)
declare void @llvm.memset.p0.i64(ptr nocapture writeonly, i8, i64, i1 immarg) #2

declare zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_i(ptr noundef, ptr noundef) local_unnamed_addr #3

declare zeroext i1 @Hacl_Impl_P256_DH_ecp256dh_r(ptr noundef, ptr noundef, ptr noundef) local_unnamed_addr #3

; Function Attrs: mustprogress nocallback nofree nounwind willreturn memory(argmem: readwrite)
declare void @llvm.memcpy.p0.p0.i64(ptr noalias nocapture writeonly, ptr noalias nocapture readonly, i64, i1 immarg) #4

declare void @Hacl_HKDF_extract_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef) local_unnamed_addr #3

; Function Attrs: inlinehint nounwind uwtable
declare hidden void @store16(ptr noundef, i16 noundef zeroext) local_unnamed_addr #5

; Function Attrs: inlinehint nounwind uwtable
declare hidden zeroext i16 @__bswap_16(i16 noundef zeroext) local_unnamed_addr #5

declare void @Hacl_HKDF_expand_sha2_256(ptr noundef, ptr noundef, i32 noundef, ptr noundef, i32 noundef, i32 noundef) local_unnamed_addr #3

; Function Attrs: mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.end.p0(i64 immarg, ptr nocapture) #1

attributes #0 = { nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #1 = { mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite) }
attributes #2 = { mustprogress nocallback nofree nounwind willreturn memory(argmem: write) }
attributes #3 = { "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #4 = { mustprogress nocallback nofree nounwind willreturn memory(argmem: readwrite) }
attributes #5 = { inlinehint nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #6 = { nounwind }

!llvm.module.flags = !{!0, !1, !2, !3}
!llvm.ident = !{!4}

!0 = !{i32 1, !"wchar_size", i32 4}
!1 = !{i32 8, !"PIC Level", i32 2}
!2 = !{i32 7, !"PIE Level", i32 2}
!3 = !{i32 7, !"uwtable", i32 2}
!4 = !{!"clang version 19.1.0 (git@github.com:llvm/llvm-project.git a4bf6cd7cfb1a1421ba92bca9d017b49936c55e4)"}
!5 = !{!6, !6, i64 0}
!6 = !{!"omnipotent char", !7, i64 0}
!7 = !{!"Simple C/C++ TBAA"}
!8 = !{!9, !10, i64 24}
!9 = !{!"Hacl_Impl_HPKE_context_s_s", !10, i64 0, !10, i64 8, !10, i64 16, !10, i64 24}
!10 = !{!"any pointer", !6, i64 0}
!11 = !{!9, !10, i64 0}
!12 = !{!9, !10, i64 8}
!13 = !{!9, !10, i64 16}
!14 = !{!15, !15, i64 0}
!15 = !{!"long", !6, i64 0}


; Effective O3 passes: CorrelatedValuePropagationPass,DSEPass,EarlyCSEPass,GlobalOptPass,IPSCCPPass,InferAlignmentPass,InferFunctionAttrsPass,InstCombinePass,JumpThreadingPass,MemCpyOptPass,PostOrderFunctionAttrsPass,SLPVectorizerPass,SROAPass,SimplifyCFGPass,TailCallElimPass