; LLVM IR from thalium/icebox :: third_party/virtualbox/src/VBox/Devices/EFI/Firmware/NetworkPkg/UefiPxeBcDxe_ (PxeBcSelectDhcp6Offer)

; Unoptimized IR (clang -disable-llvm-passes):
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

%struct._PXEBC_PRIVATE_DATA = type { i32, ptr, ptr, %struct._PXEBC_PRIVATE_PROTOCOL, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, %struct._EFI_PXE_BASE_CODE_PROTOCOL, %struct._EFI_PXE_BASE_CODE_CALLBACK_PROTOCOL, ptr, ptr, %struct.EFI_PXE_BASE_CODE_MODE, i32, i32, i32, i64, %struct.EFI_UDP4_CONFIG_DATA, %struct.EFI_UDP6_CONFIG_DATA, %struct.EFI_IP4_CONFIG_DATA, %struct.EFI_IP6_CONFIG_DATA, ptr, ptr, %struct.EFI_IP4_COMPLETION_TOKEN, %struct.EFI_IP6_COMPLETION_TOKEN, i8, i8, i8, i8, %union.EFI_IP_ADDRESS, %union.EFI_IP_ADDRESS, %union.EFI_IP_ADDRESS, %union.EFI_IP_ADDRESS, i16, i32, i32, i32, ptr, i64, i64, %union.PXEBC_DHCP_PACKET_CACHE, %union.PXEBC_DHCP_PACKET_CACHE, %union.PXEBC_DHCP_PACKET_CACHE, ptr, %struct.EFI_DHCP4_PACKET, i32, i32, [16 x %union.PXEBC_DHCP_PACKET_CACHE], i32, [8 x i32], [8 x [16 x i32]] }
%struct._PXEBC_PRIVATE_PROTOCOL = type { i64 }
%struct._EFI_PXE_BASE_CODE_PROTOCOL = type { i64, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr, ptr }
%struct._EFI_PXE_BASE_CODE_CALLBACK_PROTOCOL = type { i64, ptr }
%struct.EFI_PXE_BASE_CODE_MODE = type { i8, i8, i8, i8, i8, i8, i8, i8, i8, i8, i8, i8, i8, i8, i8, i8, i8, i8, i8, %union.EFI_IP_ADDRESS, %union.EFI_IP_ADDRESS, %union.EFI_PXE_BASE_CODE_PACKET, %union.EFI_PXE_BASE_CODE_PACKET, %union.EFI_PXE_BASE_CODE_PACKET, %union.EFI_PXE_BASE_CODE_PACKET, %union.EFI_PXE_BASE_CODE_PACKET, %union.EFI_PXE_BASE_CODE_PACKET, %struct.EFI_PXE_BASE_CODE_IP_FILTER, i32, [8 x %struct.EFI_PXE_BASE_CODE_ARP_ENTRY], i32, [8 x %struct.EFI_PXE_BASE_CODE_ROUTE_ENTRY], %struct.EFI_PXE_BASE_CODE_ICMP_ERROR, %struct.EFI_PXE_BASE_CODE_TFTP_ERROR }
%union.EFI_PXE_BASE_CODE_PACKET = type { %struct.EFI_PXE_BASE_CODE_DHCPV6_PACKET, [444 x i8] }
%struct.EFI_PXE_BASE_CODE_DHCPV6_PACKET = type { i32, [1024 x i8] }
%struct.EFI_PXE_BASE_CODE_IP_FILTER = type { i8, i8, i16, [8 x %union.EFI_IP_ADDRESS] }
%struct.EFI_PXE_BASE_CODE_ARP_ENTRY = type { %union.EFI_IP_ADDRESS, %struct.EFI_MAC_ADDRESS }
%struct.EFI_MAC_ADDRESS = type { [32 x i8] }
%struct.EFI_PXE_BASE_CODE_ROUTE_ENTRY = type { %union.EFI_IP_ADDRESS, %union.EFI_IP_ADDRESS, %union.EFI_IP_ADDRESS }
%struct.EFI_PXE_BASE_CODE_ICMP_ERROR = type { i8, i8, i16, %union.anon, [494 x i8] }
%union.anon = type { i32 }
%struct.EFI_PXE_BASE_CODE_TFTP_ERROR = type { i8, [127 x i8] }
%struct.EFI_UDP4_CONFIG_DATA = type { i8, i8, i8, i8, i8, i8, i8, i32, i32, i8, %struct.EFI_IPv4_ADDRESS, %struct.EFI_IPv4_ADDRESS, i16, %struct.EFI_IPv4_ADDRESS, i16 }
%struct.EFI_IPv4_ADDRESS = type { [4 x i8] }
%struct.EFI_UDP6_CONFIG_DATA = type { i8, i8, i8, i8, i8, i32, i32, %struct.EFI_IPv6_ADDRESS, i16, %struct.EFI_IPv6_ADDRESS, i16 }
%struct.EFI_IPv6_ADDRESS = type { [16 x i8] }
%struct.EFI_IP4_CONFIG_DATA = type { i8, i8, i8, i8, i8, i8, %struct.EFI_IPv4_ADDRESS, %struct.EFI_IPv4_ADDRESS, i8, i8, i8, i8, i32, i32 }
%struct.EFI_IP6_CONFIG_DATA = type { i8, i8, i8, i8, %struct.EFI_IPv6_ADDRESS, %struct.EFI_IPv6_ADDRESS, i8, i8, i32, i32, i32 }
%struct.EFI_IP4_COMPLETION_TOKEN = type { ptr, i64, %union.anon.0 }
%union.anon.0 = type { ptr }
%struct.EFI_IP6_COMPLETION_TOKEN = type { ptr, i64, %union.anon.1 }
%union.anon.1 = type { ptr }
%union.EFI_IP_ADDRESS = type { [4 x i32] }
%union.PXEBC_DHCP_PACKET_CACHE = type { %struct.PXEBC_DHCP4_PACKET_CACHE }
%struct.PXEBC_DHCP4_PACKET_CACHE = type { %union.PXEBC_DHCP4_PACKET, i32, [7 x ptr], %struct.PXEBC_VENDOR_OPTION }
%union.PXEBC_DHCP4_PACKET = type { [1472 x i8] }
%struct.PXEBC_VENDOR_OPTION = type { [8 x i32], %struct.EFI_IPv4_ADDRESS, i16, i16, i8, i8, i8, %struct.EFI_IPv4_ADDRESS, %struct.EFI_IPv4_ADDRESS, i16, i16, i16, i16, ptr, i8, ptr, i8, ptr, i8, ptr, i8 }
%struct.EFI_DHCP4_PACKET = type <{ i32, i32, %struct.anon.2 }>
%struct.anon.2 = type <{ %struct.EFI_DHCP4_HEADER, i32, [1 x i8] }>
%struct.EFI_DHCP4_HEADER = type { i8, i8, i8, i8, i32, i16, i16, %struct.EFI_IPv4_ADDRESS, %struct.EFI_IPv4_ADDRESS, %struct.EFI_IPv4_ADDRESS, %struct.EFI_IPv4_ADDRESS, [16 x i8], [64 x i8], [128 x i8] }
%struct.PXEBC_DHCP6_PACKET_CACHE = type { %union.PXEBC_DHCP6_PACKET, i32, [4 x ptr] }
%union.PXEBC_DHCP6_PACKET = type { [1472 x i8] }

; Function Attrs: nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.start.p0(i64 immarg, ptr nocapture) #0

; Function Attrs: nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.end.p0(i64 immarg, ptr nocapture) #0

; Function Attrs: nounwind uwtable
define dso_local void @PxeBcSelectDhcp6Offer(ptr noundef %0) #1 {
  %2 = alloca ptr, align 8
  %3 = alloca i32, align 4
  %4 = alloca i32, align 4
  %5 = alloca i32, align 4
  store ptr %0, ptr %2, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 4, ptr %3) #2
  call void @llvm.lifetime.start.p0(i64 4, ptr %4) #2
  call void @llvm.lifetime.start.p0(i64 4, ptr %5) #2
  %6 = load ptr, ptr %2, align 8, !tbaa !5
  %7 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %6, i32 0, i32 68
  store i32 0, ptr %7, align 4, !tbaa !9
  %8 = load ptr, ptr %2, align 8, !tbaa !5
  %9 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %8, i32 0, i32 49
  %10 = load i8, ptr %9, align 1, !tbaa !30
  %11 = icmp ne i8 %10, 0
  br i1 %11, label %12, label %167

12:                                               ; preds = %1
  %13 = load ptr, ptr %2, align 8, !tbaa !5
  %14 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %13, i32 0, i32 72
  %15 = getelementptr inbounds [8 x i32], ptr %14, i64 0, i64 1
  %16 = load i32, ptr %15, align 4, !tbaa !31
  %17 = icmp ugt i32 %16, 0
  br i1 %17, label %18, label %27

18:                                               ; preds = %12
  %19 = load ptr, ptr %2, align 8, !tbaa !5
  %20 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %19, i32 0, i32 73
  %21 = getelementptr inbounds [8 x [16 x i32]], ptr %20, i64 0, i64 1
  %22 = getelementptr inbounds [16 x i32], ptr %21, i64 0, i64 0
  %23 = load i32, ptr %22, align 4, !tbaa !31
  %24 = add i32 %23, 1
  %25 = load ptr, ptr %2, align 8, !tbaa !5
  %26 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %25, i32 0, i32 68
  store i32 %24, ptr %26, align 4, !tbaa !9
  br label %166

27:                                               ; preds = %12
  %28 = load ptr, ptr %2, align 8, !tbaa !5
  %29 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %28, i32 0, i32 72
  %30 = getelementptr inbounds [8 x i32], ptr %29, i64 0, i64 2
  %31 = load i32, ptr %30, align 4, !tbaa !31
  %32 = icmp ugt i32 %31, 0
  br i1 %32, label %33, label %42

33:                                               ; preds = %27
  %34 = load ptr, ptr %2, align 8, !tbaa !5
  %35 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %34, i32 0, i32 73
  %36 = getelementptr inbounds [8 x [16 x i32]], ptr %35, i64 0, i64 2
  %37 = getelementptr inbounds [16 x i32], ptr %36, i64 0, i64 0
  %38 = load i32, ptr %37, align 4, !tbaa !31
  %39 = add i32 %38, 1
  %40 = load ptr, ptr %2, align 8, !tbaa !5
  %41 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %40, i32 0, i32 68
  store i32 %39, ptr %41, align 4, !tbaa !9
  br label %165

42:                                               ; preds = %27
  %43 = load ptr, ptr %2, align 8, !tbaa !5
  %44 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %43, i32 0, i32 72
  %45 = getelementptr inbounds [8 x i32], ptr %44, i64 0, i64 0
  %46 = load i32, ptr %45, align 4, !tbaa !31
  %47 = icmp ugt i32 %46, 0
  br i1 %47, label %48, label %65

48:                                               ; preds = %42
  %49 = load ptr, ptr %2, align 8, !tbaa !5
  %50 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %49, i32 0, i32 72
  %51 = getelementptr inbounds [8 x i32], ptr %50, i64 0, i64 4
  %52 = load i32, ptr %51, align 4, !tbaa !31
  %53 = icmp ugt i32 %52, 0
  br i1 %53, label %54, label %65

54:                                               ; preds = %48
  %55 = load ptr, ptr %2, align 8, !tbaa !5
  %56 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %55, i32 0, i32 73
  %57 = getelementptr inbounds [8 x [16 x i32]], ptr %56, i64 0, i64 0
  %58 = getelementptr inbounds [16 x i32], ptr %57, i64 0, i64 0
  %59 = load i32, ptr %58, align 4, !tbaa !31
  %60 = add i32 %59, 1
  %61 = load ptr, ptr %2, align 8, !tbaa !5
  %62 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %61, i32 0, i32 68
  store i32 %60, ptr %62, align 4, !tbaa !9
  %63 = load ptr, ptr %2, align 8, !tbaa !5
  %64 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %63, i32 0, i32 69
  store i32 4, ptr %64, align 8, !tbaa !32
  br label %164

65:                                               ; preds = %48, %42
  %66 = load ptr, ptr %2, align 8, !tbaa !5
  %67 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %66, i32 0, i32 72
  %68 = getelementptr inbounds [8 x i32], ptr %67, i64 0, i64 0
  %69 = load i32, ptr %68, align 4, !tbaa !31
  %70 = icmp ugt i32 %69, 0
  br i1 %70, label %71, label %88

71:                                               ; preds = %65
  %72 = load ptr, ptr %2, align 8, !tbaa !5
  %73 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %72, i32 0, i32 72
  %74 = getelementptr inbounds [8 x i32], ptr %73, i64 0, i64 5
  %75 = load i32, ptr %74, align 4, !tbaa !31
  %76 = icmp ugt i32 %75, 0
  br i1 %76, label %77, label %88

77:                                               ; preds = %71
  %78 = load ptr, ptr %2, align 8, !tbaa !5
  %79 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %78, i32 0, i32 73
  %80 = getelementptr inbounds [8 x [16 x i32]], ptr %79, i64 0, i64 0
  %81 = getelementptr inbounds [16 x i32], ptr %80, i64 0, i64 0
  %82 = load i32, ptr %81, align 4, !tbaa !31
  %83 = add i32 %82, 1
  %84 = load ptr, ptr %2, align 8, !tbaa !5
  %85 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %84, i32 0, i32 68
  store i32 %83, ptr %85, align 4, !tbaa !9
  %86 = load ptr, ptr %2, align 8, !tbaa !5
  %87 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %86, i32 0, i32 69
  store i32 5, ptr %87, align 8, !tbaa !32
  br label %163

88:                                               ; preds = %71, %65
  %89 = load ptr, ptr %2, align 8, !tbaa !5
  %90 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %89, i32 0, i32 72
  %91 = getelementptr inbounds [8 x i32], ptr %90, i64 0, i64 3
  %92 = load i32, ptr %91, align 4, !tbaa !31
  %93 = icmp ugt i32 %92, 0
  br i1 %93, label %94, label %103

94:                                               ; preds = %88
  %95 = load ptr, ptr %2, align 8, !tbaa !5
  %96 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %95, i32 0, i32 73
  %97 = getelementptr inbounds [8 x [16 x i32]], ptr %96, i64 0, i64 3
  %98 = getelementptr inbounds [16 x i32], ptr %97, i64 0, i64 0
  %99 = load i32, ptr %98, align 4, !tbaa !31
  %100 = add i32 %99, 1
  %101 = load ptr, ptr %2, align 8, !tbaa !5
  %102 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %101, i32 0, i32 68
  store i32 %100, ptr %102, align 4, !tbaa !9
  br label %162

103:                                              ; preds = %88
  %104 = load ptr, ptr %2, align 8, !tbaa !5
  %105 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %104, i32 0, i32 72
  %106 = getelementptr inbounds [8 x i32], ptr %105, i64 0, i64 0
  %107 = load i32, ptr %106, align 4, !tbaa !31
  %108 = icmp ugt i32 %107, 0
  br i1 %108, label %109, label %126

109:                                              ; preds = %103
  %110 = load ptr, ptr %2, align 8, !tbaa !5
  %111 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %110, i32 0, i32 72
  %112 = getelementptr inbounds [8 x i32], ptr %111, i64 0, i64 6
  %113 = load i32, ptr %112, align 4, !tbaa !31
  %114 = icmp ugt i32 %113, 0
  br i1 %114, label %115, label %126

115:                                              ; preds = %109
  %116 = load ptr, ptr %2, align 8, !tbaa !5
  %117 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %116, i32 0, i32 73
  %118 = getelementptr inbounds [8 x [16 x i32]], ptr %117, i64 0, i64 0
  %119 = getelementptr inbounds [16 x i32], ptr %118, i64 0, i64 0
  %120 = load i32, ptr %119, align 4, !tbaa !31
  %121 = add i32 %120, 1
  %122 = load ptr, ptr %2, align 8, !tbaa !5
  %123 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %122, i32 0, i32 68
  store i32 %121, ptr %123, align 4, !tbaa !9
  %124 = load ptr, ptr %2, align 8, !tbaa !5
  %125 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %124, i32 0, i32 69
  store i32 6, ptr %125, align 8, !tbaa !32
  br label %161

126:                                              ; preds = %109, %103
  store i32 0, ptr %3, align 4, !tbaa !31
  br label %127

127:                                              ; preds = %157, %126
  %128 = load i32, ptr %3, align 4, !tbaa !31
  %129 = load ptr, ptr %2, align 8, !tbaa !5
  %130 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %129, i32 0, i32 72
  %131 = getelementptr inbounds [8 x i32], ptr %130, i64 0, i64 0
  %132 = load i32, ptr %131, align 4, !tbaa !31
  %133 = icmp ult i32 %128, %132
  br i1 %133, label %134, label %160

134:                                              ; preds = %127
  %135 = load ptr, ptr %2, align 8, !tbaa !5
  %136 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %135, i32 0, i32 73
  %137 = getelementptr inbounds [8 x [16 x i32]], ptr %136, i64 0, i64 0
  %138 = load i32, ptr %3, align 4, !tbaa !31
  %139 = zext i32 %138 to i64
  %140 = getelementptr inbounds [16 x i32], ptr %137, i64 0, i64 %139
  %141 = load i32, ptr %140, align 4, !tbaa !31
  store i32 %141, ptr %4, align 4, !tbaa !31
  %142 = load ptr, ptr %2, align 8, !tbaa !5
  %143 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %142, i32 0, i32 70
  %144 = load i32, ptr %4, align 4, !tbaa !31
  %145 = zext i32 %144 to i64
  %146 = getelementptr inbounds [16 x %union.PXEBC_DHCP_PACKET_CACHE], ptr %143, i64 0, i64 %145
  %147 = getelementptr inbounds %struct.PXEBC_DHCP6_PACKET_CACHE, ptr %146, i32 0, i32 2
  %148 = getelementptr inbounds [4 x ptr], ptr %147, i64 0, i64 1
  %149 = load ptr, ptr %148, align 8, !tbaa !33
  %150 = icmp ne ptr %149, null
  br i1 %150, label %151, label %156

151:                                              ; preds = %134
  %152 = load i32, ptr %4, align 4, !tbaa !31
  %153 = add i32 %152, 1
  %154 = load ptr, ptr %2, align 8, !tbaa !5
  %155 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %154, i32 0, i32 68
  store i32 %153, ptr %155, align 4, !tbaa !9
  br label %160

156:                                              ; preds = %134
  br label %157

157:                                              ; preds = %156
  %158 = load i32, ptr %3, align 4, !tbaa !31
  %159 = add i32 %158, 1
  store i32 %159, ptr %3, align 4, !tbaa !31
  br label %127, !llvm.loop !34

160:                                              ; preds = %151, %127
  br label %161

161:                                              ; preds = %160, %115
  br label %162

162:                                              ; preds = %161, %94
  br label %163

163:                                              ; preds = %162, %77
  br label %164

164:                                              ; preds = %163, %54
  br label %165

165:                                              ; preds = %164, %33
  br label %166

166:                                              ; preds = %165, %18
  br label %219

167:                                              ; preds = %1
  store i32 0, ptr %3, align 4, !tbaa !31
  br label %168

168:                                              ; preds = %215, %167
  %169 = load i32, ptr %3, align 4, !tbaa !31
  %170 = load ptr, ptr %2, align 8, !tbaa !5
  %171 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %170, i32 0, i32 71
  %172 = load i32, ptr %171, align 8, !tbaa !36
  %173 = icmp ult i32 %169, %172
  br i1 %173, label %174, label %218

174:                                              ; preds = %168
  %175 = load ptr, ptr %2, align 8, !tbaa !5
  %176 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %175, i32 0, i32 70
  %177 = load i32, ptr %3, align 4, !tbaa !31
  %178 = zext i32 %177 to i64
  %179 = getelementptr inbounds [16 x %union.PXEBC_DHCP_PACKET_CACHE], ptr %176, i64 0, i64 %178
  %180 = getelementptr inbounds %struct.PXEBC_DHCP6_PACKET_CACHE, ptr %179, i32 0, i32 1
  %181 = load i32, ptr %180, align 8, !tbaa !33
  store i32 %181, ptr %5, align 4, !tbaa !31
  %182 = load i32, ptr %5, align 4, !tbaa !31
  %183 = icmp eq i32 %182, 6
  br i1 %183, label %190, label %184

184:                                              ; preds = %174
  %185 = load i32, ptr %5, align 4, !tbaa !31
  %186 = icmp eq i32 %185, 4
  br i1 %186, label %190, label %187

187:                                              ; preds = %184
  %188 = load i32, ptr %5, align 4, !tbaa !31
  %189 = icmp eq i32 %188, 5
  br i1 %189, label %190, label %191

190:                                              ; preds = %187, %184, %174
  br label %215

191:                                              ; preds = %187
  %192 = load ptr, ptr %2, align 8, !tbaa !5
  %193 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %192, i32 0, i32 50
  %194 = load i8, ptr %193, align 2, !tbaa !37
  %195 = icmp ne i8 %194, 0
  br i1 %195, label %210, label %196

196:                                              ; preds = %191
  %197 = load i32, ptr %5, align 4, !tbaa !31
  %198 = icmp eq i32 %197, 0
  br i1 %198, label %199, label %210

199:                                              ; preds = %196
  %200 = load ptr, ptr %2, align 8, !tbaa !5
  %201 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %200, i32 0, i32 70
  %202 = load i32, ptr %3, align 4, !tbaa !31
  %203 = zext i32 %202 to i64
  %204 = getelementptr inbounds [16 x %union.PXEBC_DHCP_PACKET_CACHE], ptr %201, i64 0, i64 %203
  %205 = getelementptr inbounds %struct.PXEBC_DHCP6_PACKET_CACHE, ptr %204, i32 0, i32 2
  %206 = getelementptr inbounds [4 x ptr], ptr %205, i64 0, i64 1
  %207 = load ptr, ptr %206, align 8, !tbaa !33
  %208 = icmp eq ptr %207, null
  br i1 %208, label %209, label %210

209:                                              ; preds = %199
  br label %215

210:                                              ; preds = %199, %196, %191
  %211 = load i32, ptr %3, align 4, !tbaa !31
  %212 = add i32 %211, 1
  %213 = load ptr, ptr %2, align 8, !tbaa !5
  %214 = getelementptr inbounds %struct._PXEBC_PRIVATE_DATA, ptr %213, i32 0, i32 68
  store i32 %212, ptr %214, align 4, !tbaa !9
  br label %218

215:                                              ; preds = %209, %190
  %216 = load i32, ptr %3, align 4, !tbaa !31
  %217 = add i32 %216, 1
  store i32 %217, ptr %3, align 4, !tbaa !31
  br label %168, !llvm.loop !38

218:                                              ; preds = %210, %168
  br label %219

219:                                              ; preds = %218, %166
  call void @llvm.lifetime.end.p0(i64 4, ptr %5) #2
  call void @llvm.lifetime.end.p0(i64 4, ptr %4) #2
  call void @llvm.lifetime.end.p0(i64 4, ptr %3) #2
  ret void
}

attributes #0 = { nocallback nofree nosync nounwind willreturn memory(argmem: readwrite) }
attributes #1 = { nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #2 = { nounwind }

!llvm.module.flags = !{!0, !1, !2, !3}
!llvm.ident = !{!4}

!0 = !{i32 1, !"wchar_size", i32 4}
!1 = !{i32 8, !"PIC Level", i32 2}
!2 = !{i32 7, !"PIE Level", i32 2}
!3 = !{i32 7, !"uwtable", i32 2}
!4 = !{!"clang version 19.1.0 (git@github.com:llvm/llvm-project.git a4bf6cd7cfb1a1421ba92bca9d017b49936c55e4)"}
!5 = !{!6, !6, i64 0}
!6 = !{!"any pointer", !7, i64 0}
!7 = !{!"omnipotent char", !8, i64 0}
!8 = !{!"Simple C/C++ TBAA"}
!9 = !{!10, !11, i64 16436}
!10 = !{!"_PXEBC_PRIVATE_DATA", !11, i64 0, !6, i64 8, !6, i64 16, !12, i64 24, !6, i64 32, !6, i64 40, !6, i64 48, !6, i64 56, !6, i64 64, !6, i64 72, !6, i64 80, !6, i64 88, !6, i64 96, !6, i64 104, !6, i64 112, !6, i64 120, !6, i64 128, !6, i64 136, !6, i64 144, !6, i64 152, !6, i64 160, !6, i64 168, !6, i64 176, !6, i64 184, !6, i64 192, !6, i64 200, !6, i64 208, !6, i64 216, !6, i64 224, !6, i64 232, !6, i64 240, !14, i64 248, !15, i64 360, !6, i64 376, !6, i64 384, !16, i64 392, !11, i64 10816, !11, i64 10820, !11, i64 10824, !13, i64 10832, !21, i64 10840, !23, i64 10876, !24, i64 10928, !25, i64 10956, !6, i64 11008, !6, i64 11016, !26, i64 11024, !26, i64 11048, !7, i64 11072, !7, i64 11073, !7, i64 11074, !7, i64 11075, !7, i64 11076, !7, i64 11092, !7, i64 11108, !7, i64 11124, !18, i64 11140, !11, i64 11144, !11, i64 11148, !11, i64 11152, !6, i64 11160, !13, i64 11168, !13, i64 11176, !7, i64 11184, !7, i64 12848, !7, i64 14512, !6, i64 16176, !27, i64 16184, !11, i64 16436, !11, i64 16440, !7, i64 16448, !11, i64 43072, !7, i64 43076, !7, i64 43108}
!11 = !{!"int", !7, i64 0}
!12 = !{!"_PXEBC_PRIVATE_PROTOCOL", !13, i64 0}
!13 = !{!"long long", !7, i64 0}
!14 = !{!"_EFI_PXE_BASE_CODE_PROTOCOL", !13, i64 0, !6, i64 8, !6, i64 16, !6, i64 24, !6, i64 32, !6, i64 40, !6, i64 48, !6, i64 56, !6, i64 64, !6, i64 72, !6, i64 80, !6, i64 88, !6, i64 96, !6, i64 104}
!15 = !{!"_EFI_PXE_BASE_CODE_CALLBACK_PROTOCOL", !13, i64 0, !6, i64 8}
!16 = !{!"", !7, i64 0, !7, i64 1, !7, i64 2, !7, i64 3, !7, i64 4, !7, i64 5, !7, i64 6, !7, i64 7, !7, i64 8, !7, i64 9, !7, i64 10, !7, i64 11, !7, i64 12, !7, i64 13, !7, i64 14, !7, i64 15, !7, i64 16, !7, i64 17, !7, i64 18, !7, i64 20, !7, i64 36, !7, i64 52, !7, i64 1524, !7, i64 2996, !7, i64 4468, !7, i64 5940, !7, i64 7412, !17, i64 8884, !11, i64 9016, !7, i64 9020, !11, i64 9404, !7, i64 9408, !19, i64 9792, !20, i64 10296}
!17 = !{!"", !7, i64 0, !7, i64 1, !18, i64 2, !7, i64 4}
!18 = !{!"short", !7, i64 0}
!19 = !{!"", !7, i64 0, !7, i64 1, !18, i64 2, !7, i64 4, !7, i64 8}
!20 = !{!"", !7, i64 0, !7, i64 1}
!21 = !{!"", !7, i64 0, !7, i64 1, !7, i64 2, !7, i64 3, !7, i64 4, !7, i64 5, !7, i64 6, !11, i64 8, !11, i64 12, !7, i64 16, !22, i64 17, !22, i64 21, !18, i64 26, !22, i64 28, !18, i64 32}
!22 = !{!"", !7, i64 0}
!23 = !{!"", !7, i64 0, !7, i64 1, !7, i64 2, !7, i64 3, !7, i64 4, !11, i64 8, !11, i64 12, !22, i64 16, !18, i64 32, !22, i64 34, !18, i64 50}
!24 = !{!"", !7, i64 0, !7, i64 1, !7, i64 2, !7, i64 3, !7, i64 4, !7, i64 5, !22, i64 6, !22, i64 10, !7, i64 14, !7, i64 15, !7, i64 16, !7, i64 17, !11, i64 20, !11, i64 24}
!25 = !{!"", !7, i64 0, !7, i64 1, !7, i64 2, !7, i64 3, !22, i64 4, !22, i64 20, !7, i64 36, !7, i64 37, !11, i64 40, !11, i64 44, !11, i64 48}
!26 = !{!"", !6, i64 0, !13, i64 8, !7, i64 16}
!27 = !{!"", !11, i64 0, !11, i64 4, !28, i64 8}
!28 = !{!"", !29, i64 0, !11, i64 236, !7, i64 240}
!29 = !{!"", !7, i64 0, !7, i64 1, !7, i64 2, !7, i64 3, !11, i64 4, !18, i64 8, !18, i64 10, !22, i64 12, !22, i64 16, !22, i64 20, !22, i64 24, !7, i64 28, !7, i64 44, !7, i64 108}
!30 = !{!10, !7, i64 11073}
!31 = !{!11, !11, i64 0}
!32 = !{!10, !11, i64 16440}
!33 = !{!7, !7, i64 0}
!34 = distinct !{!34, !35}
!35 = !{!"llvm.loop.mustprogress"}
!36 = !{!10, !11, i64 43072}
!37 = !{!10, !7, i64 11074}
!38 = distinct !{!38, !35}


; Optimized IR (opt -passes='default<O3>'):
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

%union.PXEBC_DHCP_PACKET_CACHE = type { %struct.PXEBC_DHCP4_PACKET_CACHE }
%struct.PXEBC_DHCP4_PACKET_CACHE = type { %union.PXEBC_DHCP4_PACKET, i32, [7 x ptr], %struct.PXEBC_VENDOR_OPTION }
%union.PXEBC_DHCP4_PACKET = type { [1472 x i8] }
%struct.PXEBC_VENDOR_OPTION = type { [8 x i32], %struct.EFI_IPv4_ADDRESS, i16, i16, i8, i8, i8, %struct.EFI_IPv4_ADDRESS, %struct.EFI_IPv4_ADDRESS, i16, i16, i16, i16, ptr, i8, ptr, i8, ptr, i8, ptr, i8 }
%struct.EFI_IPv4_ADDRESS = type { [4 x i8] }

; Function Attrs: nofree norecurse nosync nounwind memory(argmem: readwrite) uwtable
define dso_local void @PxeBcSelectDhcp6Offer(ptr nocapture noundef %0) local_unnamed_addr #0 {
  %2 = getelementptr inbounds i8, ptr %0, i64 16436
  store i32 0, ptr %2, align 4, !tbaa !5
  %3 = getelementptr inbounds i8, ptr %0, i64 11073
  %4 = load i8, ptr %3, align 1, !tbaa !29
  %.not = icmp eq i8 %4, 0
  br i1 %.not, label %.preheader, label %9

.preheader:                                       ; preds = %1
  %5 = getelementptr inbounds i8, ptr %0, i64 43072
  %6 = load i32, ptr %5, align 8, !tbaa !30
  %.not73 = icmp eq i32 %6, 0
  br i1 %.not73, label %.loopexit, label %.lr.ph71

.lr.ph71:                                         ; preds = %.preheader
  %7 = getelementptr inbounds i8, ptr %0, i64 16448
  %8 = getelementptr inbounds i8, ptr %0, i64 11074
  %wide.trip.count81 = zext i32 %6 to i64
  br label %67

9:                                                ; preds = %1
  %10 = getelementptr inbounds i8, ptr %0, i64 43076
  %11 = getelementptr inbounds i8, ptr %0, i64 43080
  %12 = load i32, ptr %11, align 4, !tbaa !31
  %.not54 = icmp eq i32 %12, 0
  br i1 %.not54, label %17, label %13

13:                                               ; preds = %9
  %14 = getelementptr inbounds i8, ptr %0, i64 43172
  %15 = load i32, ptr %14, align 4, !tbaa !31
  %16 = add i32 %15, 1
  store i32 %16, ptr %2, align 4, !tbaa !5
  br label %.loopexit

17:                                               ; preds = %9
  %18 = getelementptr inbounds i8, ptr %0, i64 43084
  %19 = load i32, ptr %18, align 4, !tbaa !31
  %.not55 = icmp eq i32 %19, 0
  br i1 %.not55, label %24, label %20

20:                                               ; preds = %17
  %21 = getelementptr inbounds i8, ptr %0, i64 43236
  %22 = load i32, ptr %21, align 4, !tbaa !31
  %23 = add i32 %22, 1
  store i32 %23, ptr %2, align 4, !tbaa !5
  br label %.loopexit

24:                                               ; preds = %17
  %25 = load i32, ptr %10, align 4, !tbaa !31
  %.not56 = icmp eq i32 %25, 0
  br i1 %.not56, label %.thread, label %26

26:                                               ; preds = %24
  %27 = getelementptr inbounds i8, ptr %0, i64 43092
  %28 = load i32, ptr %27, align 4, !tbaa !31
  %.not57 = icmp eq i32 %28, 0
  br i1 %.not57, label %34, label %29

29:                                               ; preds = %26
  %30 = getelementptr inbounds i8, ptr %0, i64 43108
  %31 = load i32, ptr %30, align 4, !tbaa !31
  %32 = add i32 %31, 1
  store i32 %32, ptr %2, align 4, !tbaa !5
  %33 = getelementptr inbounds i8, ptr %0, i64 16440
  store i32 4, ptr %33, align 8, !tbaa !32
  br label %.loopexit

34:                                               ; preds = %26
  %35 = getelementptr inbounds i8, ptr %0, i64 43096
  %36 = load i32, ptr %35, align 4, !tbaa !31
  %.not59 = icmp eq i32 %36, 0
  br i1 %.not59, label %.thread64, label %37

37:                                               ; preds = %34
  %38 = getelementptr inbounds i8, ptr %0, i64 43108
  %39 = load i32, ptr %38, align 4, !tbaa !31
  %40 = add i32 %39, 1
  store i32 %40, ptr %2, align 4, !tbaa !5
  %41 = getelementptr inbounds i8, ptr %0, i64 16440
  store i32 5, ptr %41, align 8, !tbaa !32
  br label %.loopexit

.thread:                                          ; preds = %24
  %42 = getelementptr inbounds i8, ptr %0, i64 43088
  %43 = load i32, ptr %42, align 4, !tbaa !31
  %.not60 = icmp eq i32 %43, 0
  br i1 %.not60, label %.loopexit, label %46

.thread64:                                        ; preds = %34
  %44 = getelementptr inbounds i8, ptr %0, i64 43088
  %45 = load i32, ptr %44, align 4, !tbaa !31
  %.not6065 = icmp eq i32 %45, 0
  br i1 %.not6065, label %.thread66, label %46

46:                                               ; preds = %.thread64, %.thread
  %47 = getelementptr inbounds i8, ptr %0, i64 43300
  %48 = load i32, ptr %47, align 4, !tbaa !31
  %49 = add i32 %48, 1
  store i32 %49, ptr %2, align 4, !tbaa !5
  br label %.loopexit

.thread66:                                        ; preds = %.thread64
  %50 = getelementptr inbounds i8, ptr %0, i64 43100
  %51 = load i32, ptr %50, align 4, !tbaa !31
  %.not62 = icmp eq i32 %51, 0
  %52 = getelementptr inbounds i8, ptr %0, i64 43108
  br i1 %.not62, label %.lr.ph, label %53

53:                                               ; preds = %.thread66
  %54 = load i32, ptr %52, align 4, !tbaa !31
  %55 = add i32 %54, 1
  store i32 %55, ptr %2, align 4, !tbaa !5
  %56 = getelementptr inbounds i8, ptr %0, i64 16440
  store i32 6, ptr %56, align 8, !tbaa !32
  br label %.loopexit

.lr.ph:                                           ; preds = %.thread66
  %57 = getelementptr inbounds i8, ptr %0, i64 16448
  %wide.trip.count = zext i32 %25 to i64
  br label %59

58:                                               ; preds = %59
  %indvars.iv.next = add nuw nsw i64 %indvars.iv, 1
  %exitcond.not = icmp eq i64 %indvars.iv.next, %wide.trip.count
  br i1 %exitcond.not, label %.loopexit, label %59, !llvm.loop !33

59:                                               ; preds = %.lr.ph, %58
  %indvars.iv = phi i64 [ 0, %.lr.ph ], [ %indvars.iv.next, %58 ]
  %60 = getelementptr inbounds [16 x i32], ptr %52, i64 0, i64 %indvars.iv
  %61 = load i32, ptr %60, align 4, !tbaa !31
  %62 = zext i32 %61 to i64
  %63 = getelementptr inbounds [16 x %union.PXEBC_DHCP_PACKET_CACHE], ptr %57, i64 0, i64 %62, i32 0, i32 2, i64 1
  %64 = load ptr, ptr %63, align 8, !tbaa !35
  %.not63 = icmp eq ptr %64, null
  br i1 %.not63, label %58, label %65

65:                                               ; preds = %59
  %66 = add i32 %61, 1
  store i32 %66, ptr %2, align 4, !tbaa !5
  br label %.loopexit

67:                                               ; preds = %.lr.ph71, %82
  %indvars.iv78 = phi i64 [ 0, %.lr.ph71 ], [ %indvars.iv.next79, %82 ]
  %68 = getelementptr inbounds [16 x %union.PXEBC_DHCP_PACKET_CACHE], ptr %7, i64 0, i64 %indvars.iv78
  %69 = getelementptr inbounds i8, ptr %68, i64 1472
  %70 = load i32, ptr %69, align 8, !tbaa !35
  %.off = add i32 %70, -4
  %switch = icmp ult i32 %.off, 3
  br i1 %switch, label %82, label %71

71:                                               ; preds = %67
  %72 = load i8, ptr %8, align 2, !tbaa !36
  %73 = icmp eq i8 %72, 0
  %74 = icmp eq i32 %70, 0
  %or.cond5 = and i1 %74, %73
  br i1 %or.cond5, label %75, label %79

75:                                               ; preds = %71
  %76 = getelementptr inbounds i8, ptr %68, i64 1488
  %77 = load ptr, ptr %76, align 8, !tbaa !35
  %78 = icmp eq ptr %77, null
  br i1 %78, label %82, label %79

79:                                               ; preds = %75, %71
  %80 = trunc nuw i64 %indvars.iv78 to i32
  %81 = add nuw i32 %80, 1
  store i32 %81, ptr %2, align 4, !tbaa !5
  br label %.loopexit

82:                                               ; preds = %67, %75
  %indvars.iv.next79 = add nuw nsw i64 %indvars.iv78, 1
  %exitcond82.not = icmp eq i64 %indvars.iv.next79, %wide.trip.count81
  br i1 %exitcond82.not, label %.loopexit, label %67, !llvm.loop !37

.loopexit:                                        ; preds = %58, %82, %.thread, %.preheader, %79, %13, %29, %46, %65, %53, %37, %20
  ret void
}

attributes #0 = { nofree norecurse nosync nounwind memory(argmem: readwrite) uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }

!llvm.module.flags = !{!0, !1, !2, !3}
!llvm.ident = !{!4}

!0 = !{i32 1, !"wchar_size", i32 4}
!1 = !{i32 8, !"PIC Level", i32 2}
!2 = !{i32 7, !"PIE Level", i32 2}
!3 = !{i32 7, !"uwtable", i32 2}
!4 = !{!"clang version 19.1.0 (git@github.com:llvm/llvm-project.git a4bf6cd7cfb1a1421ba92bca9d017b49936c55e4)"}
!5 = !{!6, !7, i64 16436}
!6 = !{!"_PXEBC_PRIVATE_DATA", !7, i64 0, !10, i64 8, !10, i64 16, !11, i64 24, !10, i64 32, !10, i64 40, !10, i64 48, !10, i64 56, !10, i64 64, !10, i64 72, !10, i64 80, !10, i64 88, !10, i64 96, !10, i64 104, !10, i64 112, !10, i64 120, !10, i64 128, !10, i64 136, !10, i64 144, !10, i64 152, !10, i64 160, !10, i64 168, !10, i64 176, !10, i64 184, !10, i64 192, !10, i64 200, !10, i64 208, !10, i64 216, !10, i64 224, !10, i64 232, !10, i64 240, !13, i64 248, !14, i64 360, !10, i64 376, !10, i64 384, !15, i64 392, !7, i64 10816, !7, i64 10820, !7, i64 10824, !12, i64 10832, !20, i64 10840, !22, i64 10876, !23, i64 10928, !24, i64 10956, !10, i64 11008, !10, i64 11016, !25, i64 11024, !25, i64 11048, !8, i64 11072, !8, i64 11073, !8, i64 11074, !8, i64 11075, !8, i64 11076, !8, i64 11092, !8, i64 11108, !8, i64 11124, !17, i64 11140, !7, i64 11144, !7, i64 11148, !7, i64 11152, !10, i64 11160, !12, i64 11168, !12, i64 11176, !8, i64 11184, !8, i64 12848, !8, i64 14512, !10, i64 16176, !26, i64 16184, !7, i64 16436, !7, i64 16440, !8, i64 16448, !7, i64 43072, !8, i64 43076, !8, i64 43108}
!7 = !{!"int", !8, i64 0}
!8 = !{!"omnipotent char", !9, i64 0}
!9 = !{!"Simple C/C++ TBAA"}
!10 = !{!"any pointer", !8, i64 0}
!11 = !{!"_PXEBC_PRIVATE_PROTOCOL", !12, i64 0}
!12 = !{!"long long", !8, i64 0}
!13 = !{!"_EFI_PXE_BASE_CODE_PROTOCOL", !12, i64 0, !10, i64 8, !10, i64 16, !10, i64 24, !10, i64 32, !10, i64 40, !10, i64 48, !10, i64 56, !10, i64 64, !10, i64 72, !10, i64 80, !10, i64 88, !10, i64 96, !10, i64 104}
!14 = !{!"_EFI_PXE_BASE_CODE_CALLBACK_PROTOCOL", !12, i64 0, !10, i64 8}
!15 = !{!"", !8, i64 0, !8, i64 1, !8, i64 2, !8, i64 3, !8, i64 4, !8, i64 5, !8, i64 6, !8, i64 7, !8, i64 8, !8, i64 9, !8, i64 10, !8, i64 11, !8, i64 12, !8, i64 13, !8, i64 14, !8, i64 15, !8, i64 16, !8, i64 17, !8, i64 18, !8, i64 20, !8, i64 36, !8, i64 52, !8, i64 1524, !8, i64 2996, !8, i64 4468, !8, i64 5940, !8, i64 7412, !16, i64 8884, !7, i64 9016, !8, i64 9020, !7, i64 9404, !8, i64 9408, !18, i64 9792, !19, i64 10296}
!16 = !{!"", !8, i64 0, !8, i64 1, !17, i64 2, !8, i64 4}
!17 = !{!"short", !8, i64 0}
!18 = !{!"", !8, i64 0, !8, i64 1, !17, i64 2, !8, i64 4, !8, i64 8}
!19 = !{!"", !8, i64 0, !8, i64 1}
!20 = !{!"", !8, i64 0, !8, i64 1, !8, i64 2, !8, i64 3, !8, i64 4, !8, i64 5, !8, i64 6, !7, i64 8, !7, i64 12, !8, i64 16, !21, i64 17, !21, i64 21, !17, i64 26, !21, i64 28, !17, i64 32}
!21 = !{!"", !8, i64 0}
!22 = !{!"", !8, i64 0, !8, i64 1, !8, i64 2, !8, i64 3, !8, i64 4, !7, i64 8, !7, i64 12, !21, i64 16, !17, i64 32, !21, i64 34, !17, i64 50}
!23 = !{!"", !8, i64 0, !8, i64 1, !8, i64 2, !8, i64 3, !8, i64 4, !8, i64 5, !21, i64 6, !21, i64 10, !8, i64 14, !8, i64 15, !8, i64 16, !8, i64 17, !7, i64 20, !7, i64 24}
!24 = !{!"", !8, i64 0, !8, i64 1, !8, i64 2, !8, i64 3, !21, i64 4, !21, i64 20, !8, i64 36, !8, i64 37, !7, i64 40, !7, i64 44, !7, i64 48}
!25 = !{!"", !10, i64 0, !12, i64 8, !8, i64 16}
!26 = !{!"", !7, i64 0, !7, i64 4, !27, i64 8}
!27 = !{!"", !28, i64 0, !7, i64 236, !8, i64 240}
!28 = !{!"", !8, i64 0, !8, i64 1, !8, i64 2, !8, i64 3, !7, i64 4, !17, i64 8, !17, i64 10, !21, i64 12, !21, i64 16, !21, i64 20, !21, i64 24, !8, i64 28, !8, i64 44, !8, i64 108}
!29 = !{!6, !8, i64 11073}
!30 = !{!6, !7, i64 43072}
!31 = !{!7, !7, i64 0}
!32 = !{!6, !7, i64 16440}
!33 = distinct !{!33, !34}
!34 = !{!"llvm.loop.mustprogress"}
!35 = !{!8, !8, i64 0}
!36 = !{!6, !8, i64 11074}
!37 = distinct !{!37, !34}


; Effective O3 passes: CorrelatedValuePropagationPass,EarlyCSEPass,GVNPass,GlobalOptPass,IndVarSimplifyPass,InferFunctionAttrsPass,InstCombinePass,InstSimplifyPass,JumpThreadingPass,LCSSAPass,LICMPass,LoopRotatePass,LoopSimplifyPass,LoopUnrollPass,PostOrderFunctionAttrsPass,ReassociatePass,SROAPass,SimplifyCFGPass