Add BranchOnCount functions to exploit BRCT/BRCTG
Replace bdnz with BranchOnCount