#define NULL ((void *)0)
typedef unsigned long size_t; // Customize by platform.
typedef long intptr_t;
typedef unsigned long uintptr_t;
typedef long scalar_t__; // Either arithmetic or pointer type.
/* By default, we understand bool (as a convenience). */
typedef int bool;
#define false 0
#define true 1

/* Forward declarations */

/* Type definitions */
typedef unsigned char SHA256_CTX;

/* Variables and functions */
int /*<<< orphan*/ SHA256_Final(unsigned char *, unsigned char *);
int /*<<< orphan*/ SHA256_Init(unsigned char *);
int /*<<< orphan*/ SHA256_Update(unsigned char *, ...);
int /*<<< orphan*/ memcpy(unsigned char *, unsigned char *, int);
int /*<<< orphan*/ memset(unsigned char *, int, int);
void hash_proto_pbkdf2_256_len(const char *pass, int passlen,
                               unsigned char *salt, int saltlen, int iter,
                               int keylen, unsigned char *out) {
  SHA256_CTX ctx, ctx1, ctx2;
  unsigned char ipad[64], opad[64], hash[32];
  int a, b;
  memset(ipad, 0x36, 64);
  memset(opad, 0x5C, 64);
  for (a = 0; a < passlen; a++) {
    ipad[a] ^= pass[a];
    opad[a] ^= pass[a];
  }
  SHA256_Init(&ctx);
  SHA256_Update(&ctx, ipad, 64);
  memcpy(&ctx1, &ctx, sizeof(SHA256_CTX));
  SHA256_Update(&ctx, salt, saltlen);
  SHA256_Update(&ctx, "\x0\x0\x0\x1", 4);
  SHA256_Final(hash, &ctx);
  SHA256_Init(&ctx);
  SHA256_Update(&ctx, opad, 64);
  memcpy(&ctx2, &ctx, sizeof(SHA256_CTX));
  SHA256_Update(&ctx, hash, 32);
  SHA256_Final(hash, &ctx);
  memcpy(out, hash, 32);
  for (a = 1; a < iter; a++) {
    memcpy(&ctx, &ctx1, sizeof(SHA256_CTX));
    SHA256_Update(&ctx, hash, 32);
    SHA256_Final(hash, &ctx);
    memcpy(&ctx, &ctx2, sizeof(SHA256_CTX));
    SHA256_Update(&ctx, hash, 32);
    SHA256_Final(hash, &ctx);
    for (b = 0; b < 32; b++)
      out[b] ^= hash[b];
  }
}


x86 assembly (clang, -O0):
<hash_proto_pbkdf2_256_len>:
push   %rbp
mov    %rsp,%rbp
sub    $0xe0,%rsp
mov    0x10(%rbp),%rax
mov    %rdi,-0x8(%rbp)
mov    %esi,-0xc(%rbp)
mov    %rdx,-0x18(%rbp)
mov    %ecx,-0x1c(%rbp)
mov    %r8d,-0x20(%rbp)
mov    %r9d,-0x24(%rbp)
lea    -0x70(%rbp),%rdi
mov    $0x36,%esi
mov    $0x40,%edx
call   1030 <memset@plt>
lea    -0xb0(%rbp),%rdi
mov    $0x5c,%esi
mov    $0x40,%edx
call   1030 <memset@plt>
movl   $0x0,-0xd4(%rbp)
mov    -0xd4(%rbp),%eax
cmp    -0xc(%rbp),%eax
jge    1213 <hash_proto_pbkdf2_256_len+0xc3>
mov    -0x8(%rbp),%rax
movslq -0xd4(%rbp),%rcx
movsbl (%rax,%rcx,1),%edx
movslq -0xd4(%rbp),%rax
movzbl -0x70(%rbp,%rax,1),%ecx
xor    %edx,%ecx
mov    %cl,-0x70(%rbp,%rax,1)
mov    -0x8(%rbp),%rax
movslq -0xd4(%rbp),%rcx
movsbl (%rax,%rcx,1),%edx
movslq -0xd4(%rbp),%rax
movzbl -0xb0(%rbp,%rax,1),%ecx
ff
xor    %edx,%ecx
mov    %cl,-0xb0(%rbp,%rax,1)
mov    -0xd4(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0xd4(%rbp)
jmp    11a8 <hash_proto_pbkdf2_256_len+0x58>
lea    -0x25(%rbp),%rdi
call   1040 <SHA256_Init@plt>
lea    -0x70(%rbp),%rsi
lea    -0x25(%rbp),%rdi
mov    $0x40,%edx
mov    $0x0,%al
call   1070 <SHA256_Update@plt>
lea    -0x26(%rbp),%rdi
lea    -0x25(%rbp),%rsi
mov    $0x1,%edx
call   1050 <memcpy@plt>
mov    -0x18(%rbp),%rsi
mov    -0x1c(%rbp),%edx
lea    -0x25(%rbp),%rdi
mov    $0x0,%al
call   1070 <SHA256_Update@plt>
lea    -0x25(%rbp),%rdi
lea    0xda1(%rip),%rsi
mov    $0x4,%edx
mov    $0x0,%al
call   1070 <SHA256_Update@plt>
lea    -0xd0(%rbp),%rdi
lea    -0x25(%rbp),%rsi
call   1060 <SHA256_Final@plt>
lea    -0x25(%rbp),%rdi
call   1040 <SHA256_Init@plt>
lea    -0xb0(%rbp),%rsi
lea    -0x25(%rbp),%rdi
mov    $0x40,%edx
mov    $0x0,%al
call   1070 <SHA256_Update@plt>
lea    -0x27(%rbp),%rdi
lea    -0x25(%rbp),%rsi
mov    $0x1,%edx
call   1050 <memcpy@plt>
lea    -0xd0(%rbp),%rsi
lea    -0x25(%rbp),%rdi
mov    $0x20,%edx
mov    $0x0,%al
call   1070 <SHA256_Update@plt>
lea    -0xd0(%rbp),%rdi
lea    -0x25(%rbp),%rsi
call   1060 <SHA256_Final@plt>
mov    0x10(%rbp),%rdi
lea    -0xd0(%rbp),%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
movl   $0x1,-0xd4(%rbp)
mov    -0xd4(%rbp),%eax
cmp    -0x20(%rbp),%eax
jge    13db <hash_proto_pbkdf2_256_len+0x28b>
lea    -0x25(%rbp),%rdi
lea    -0x26(%rbp),%rsi
mov    $0x1,%edx
call   1050 <memcpy@plt>
lea    -0xd0(%rbp),%rsi
lea    -0x25(%rbp),%rdi
mov    $0x20,%edx
mov    $0x0,%al
call   1070 <SHA256_Update@plt>
lea    -0xd0(%rbp),%rdi
lea    -0x25(%rbp),%rsi
call   1060 <SHA256_Final@plt>
lea    -0x25(%rbp),%rdi
lea    -0x27(%rbp),%rsi
mov    $0x1,%edx
call   1050 <memcpy@plt>
lea    -0xd0(%rbp),%rsi
lea    -0x25(%rbp),%rdi
mov    $0x20,%edx
mov    $0x0,%al
call   1070 <SHA256_Update@plt>
lea    -0xd0(%rbp),%rdi
lea    -0x25(%rbp),%rsi
call   1060 <SHA256_Final@plt>
movl   $0x0,-0xd8(%rbp)
cmpl   $0x20,-0xd8(%rbp)
jge    13c2 <hash_proto_pbkdf2_256_len+0x272>
movslq -0xd8(%rbp),%rax
movzbl -0xd0(%rbp,%rax,1),%esi
ff
mov    0x10(%rbp),%rax
movslq -0xd8(%rbp),%rcx
movzbl (%rax,%rcx,1),%edx
xor    %esi,%edx
mov    %dl,(%rax,%rcx,1)
mov    -0xd8(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0xd8(%rbp)
jmp    137e <hash_proto_pbkdf2_256_len+0x22e>
jmp    13c7 <hash_proto_pbkdf2_256_len+0x277>
mov    -0xd4(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0xd4(%rbp)
jmp    12f3 <hash_proto_pbkdf2_256_len+0x1a3>
add    $0xe0,%rsp
pop    %rbp
ret

x86 assembly (clang, -O2):
<hash_proto_pbkdf2_256_len>:
push   %rbp
push   %r15
push   %r14
push   %r13
push   %r12
push   %rbx
sub    $0xb8,%rsp
mov    %r8d,%r13d
mov    %ecx,%r15d
mov    %rdx,%r12
mov    %esi,%ebx
mov    %rdi,%rbp
mov    0xf0(%rsp),%r14
lea    0x70(%rsp),%rdi
mov    $0x36,%esi
mov    $0x40,%edx
call   1030 <memset@plt>
lea    0x30(%rsp),%rdi
mov    $0x5c,%esi
mov    $0x40,%edx
call   1030 <memset@plt>
test   %ebx,%ebx
jle    1266 <hash_proto_pbkdf2_256_len+0x116>
mov    %ebx,%eax
cmp    $0x8,%ebx
jae    11b5 <hash_proto_pbkdf2_256_len+0x65>
xor    %ecx,%ecx
jmp    1250 <hash_proto_pbkdf2_256_len+0x100>
cmp    $0x20,%ebx
jae    11be <hash_proto_pbkdf2_256_len+0x6e>
xor    %ecx,%ecx
jmp    1220 <hash_proto_pbkdf2_256_len+0xd0>
mov    %eax,%ecx
and    $0xffffffe0,%ecx
xor    %edx,%edx
cs nopw 0x0(%rax,%rax,1)
nop
movups 0x0(%rbp,%rdx,1),%xmm0
movups 0x10(%rbp,%rdx,1),%xmm1
movaps 0x70(%rsp,%rdx,1),%xmm2
xorps  %xmm0,%xmm2
movaps 0x80(%rsp,%rdx,1),%xmm3
xorps  %xmm1,%xmm3
movaps %xmm2,0x70(%rsp,%rdx,1)
movaps %xmm3,0x80(%rsp,%rdx,1)
xorps  0x30(%rsp,%rdx,1),%xmm0
xorps  0x40(%rsp,%rdx,1),%xmm1
movaps %xmm0,0x30(%rsp,%rdx,1)
movaps %xmm1,0x40(%rsp,%rdx,1)
add    $0x20,%rdx
cmp    %rdx,%rcx
jne    11d0 <hash_proto_pbkdf2_256_len+0x80>
cmp    %rax,%rcx
je     1266 <hash_proto_pbkdf2_256_len+0x116>
test   $0x18,%al
je     1250 <hash_proto_pbkdf2_256_len+0x100>
mov    %rcx,%rdx
mov    %eax,%ecx
and    $0xfffffff8,%ecx
nopl   0x0(%rax,%rax,1)
mov    0x0(%rbp,%rdx,1),%rsi
xor    %rsi,0x70(%rsp,%rdx,1)
xor    %rsi,0x30(%rsp,%rdx,1)
add    $0x8,%rdx
cmp    %rdx,%rcx
jne    1230 <hash_proto_pbkdf2_256_len+0xe0>
cmp    %rax,%rcx
je     1266 <hash_proto_pbkdf2_256_len+0x116>
nopl   (%rax)
movzbl 0x0(%rbp,%rcx,1),%edx
xor    %dl,0x70(%rsp,%rcx,1)
xor    %dl,0x30(%rsp,%rcx,1)
add    $0x1,%rcx
cmp    %rcx,%rax
jne    1250 <hash_proto_pbkdf2_256_len+0x100>
lea    0xf(%rsp),%rbp
mov    %rbp,%rdi
call   1040 <SHA256_Init@plt>
lea    0x70(%rsp),%rsi
mov    %rbp,%rdi
mov    $0x40,%edx
xor    %eax,%eax
call   1070 <SHA256_Update@plt>
lea    0xe(%rsp),%rdi
mov    %rbp,%rsi
mov    $0x1,%edx
call   1050 <memcpy@plt>
mov    %rbp,%rdi
mov    %r12,%rsi
mov    %r15d,%edx
xor    %eax,%eax
call   1070 <SHA256_Update@plt>
lea    0xd50(%rip),%rsi
mov    %rbp,%rdi
mov    $0x4,%edx
xor    %eax,%eax
call   1070 <SHA256_Update@plt>
lea    0x10(%rsp),%rbx
mov    %rbx,%rdi
mov    %rbp,%rsi
call   1060 <SHA256_Final@plt>
mov    %rbp,%rdi
call   1040 <SHA256_Init@plt>
lea    0x30(%rsp),%rsi
mov    %rbp,%rdi
mov    $0x40,%edx
xor    %eax,%eax
call   1070 <SHA256_Update@plt>
lea    0xd(%rsp),%rdi
mov    %rbp,%rsi
mov    $0x1,%edx
call   1050 <memcpy@plt>
mov    %rbp,%rdi
mov    %rbx,%rsi
mov    $0x20,%edx
xor    %eax,%eax
call   1070 <SHA256_Update@plt>
mov    %rbx,%rdi
mov    %rbp,%rsi
call   1060 <SHA256_Final@plt>
mov    %r14,%rdi
mov    %rbx,%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
cmp    $0x2,%r13d
jl     13cc <hash_proto_pbkdf2_256_len+0x27c>
add    $0xffffffff,%r13d
lea    0xf(%rsp),%rbp
lea    0xe(%rsp),%r15
lea    0x10(%rsp),%rbx
lea    0xd(%rsp),%r12
nopl   0x0(%rax)
mov    %rbp,%rdi
mov    %r15,%rsi
mov    $0x1,%edx
call   1050 <memcpy@plt>
mov    %rbp,%rdi
mov    %rbx,%rsi
mov    $0x20,%edx
xor    %eax,%eax
call   1070 <SHA256_Update@plt>
mov    %rbx,%rdi
mov    %rbp,%rsi
call   1060 <SHA256_Final@plt>
mov    %rbp,%rdi
mov    %r12,%rsi
mov    $0x1,%edx
call   1050 <memcpy@plt>
mov    %rbp,%rdi
mov    %rbx,%rsi
mov    $0x20,%edx
xor    %eax,%eax
call   1070 <SHA256_Update@plt>
mov    %rbx,%rdi
mov    %rbp,%rsi
call   1060 <SHA256_Final@plt>
movups (%r14),%xmm0
movups 0x10(%r14),%xmm1
xorps  0x10(%rsp),%xmm0
movups %xmm0,(%r14)
xorps  0x20(%rsp),%xmm1
movups %xmm1,0x10(%r14)
add    $0xffffffff,%r13d
jne    1350 <hash_proto_pbkdf2_256_len+0x200>
add    $0xb8,%rsp
pop    %rbx
pop    %r12
pop    %r13
pop    %r14
pop    %r15
pop    %rbp
ret

LLVM IR (-O0):
@.str = [5 x i8] c"\00\00\00\01\00"
define void @hash_proto_pbkdf2_256_len(i8* %0, i32 %1, i8* %2, i32 %3, i32 %4, i32 %5, i8* %6) {
%8 = alloca i8*
%9 = alloca i32
%10 = alloca i8*
%11 = alloca i32
%12 = alloca i32
%13 = alloca i32
%14 = alloca i8*
%15 = alloca i8
%16 = alloca i8
%17 = alloca i8
%18 = alloca [64 x i8]
%19 = alloca [64 x i8]
%20 = alloca [32 x i8]
%21 = alloca i32
%22 = alloca i32
store i8* %0, i8** %8
store i32 %1, i32* %9
store i8* %2, i8** %10
store i32 %3, i32* %11
store i32 %4, i32* %12
store i32 %5, i32* %13
store i8* %6, i8** %14
%23 = getelementptr inbounds [64 x i8], [64 x i8]* %18, i64 0, i64 0
%24 = call i32 @memset(i8* %23, i32 54, i32 64)
%25 = getelementptr inbounds [64 x i8], [64 x i8]* %19, i64 0, i64 0
%26 = call i32 @memset(i8* %25, i32 92, i32 64)
store i32 0, i32* %21
br label %27
27: ; preds = %58, %7
%28 = load i32, i32* %21
%29 = load i32, i32* %9
%30 = icmp slt i32 %28, %29
br i1 %30, label %31, label %61
31: ; preds = %27
%32 = load i8*, i8** %8
%33 = load i32, i32* %21
%34 = sext i32 %33 to i64
%35 = getelementptr inbounds i8, i8* %32, i64 %34
%36 = load i8, i8* %35
%37 = sext i8 %36 to i32
%38 = load i32, i32* %21
%39 = sext i32 %38 to i64
%40 = getelementptr inbounds [64 x i8], [64 x i8]* %18, i64 0, i64 %39
%41 = load i8, i8* %40
%42 = zext i8 %41 to i32
%43 = xor i32 %42, %37
%44 = trunc i32 %43 to i8
store i8 %44, i8* %40
%45 = load i8*, i8** %8
%46 = load i32, i32* %21
%47 = sext i32 %46 to i64
%48 = getelementptr inbounds i8, i8* %45, i64 %47
%49 = load i8, i8* %48
%50 = sext i8 %49 to i32
%51 = load i32, i32* %21
%52 = sext i32 %51 to i64
%53 = getelementptr inbounds [64 x i8], [64 x i8]* %19, i64 0, i64 %52
%54 = load i8, i8* %53
%55 = zext i8 %54 to i32
%56 = xor i32 %55, %50
%57 = trunc i32 %56 to i8
store i8 %57, i8* %53
br label %58
58: ; preds = %31
%59 = load i32, i32* %21
%60 = add nsw i32 %59, 1
store i32 %60, i32* %21
br label %27
61: ; preds = %27
%62 = call i32 @SHA256_Init(i8* %15)
%63 = getelementptr inbounds [64 x i8], [64 x i8]* %18, i64 0, i64 0
%64 = call i32 (i8*, ...) @SHA256_Update(i8* %15, i8* %63, i32 64)
%65 = call i32 @memcpy(i8* %16, i8* %15, i32 1)
%66 = load i8*, i8** %10
%67 = load i32, i32* %11
%68 = call i32 (i8*, ...) @SHA256_Update(i8* %15, i8* %66, i32 %67)
%69 = call i32 (i8*, ...) @SHA256_Update(i8* %15, i8* getelementptr inbounds ([5 x i8], [5 x i8]* @.str, i64 0, i64 0), i32 4)
%70 = getelementptr inbounds [32 x i8], [32 x i8]* %20, i64 0, i64 0
%71 = call i32 @SHA256_Final(i8* %70, i8* %15)
%72 = call i32 @SHA256_Init(i8* %15)
%73 = getelementptr inbounds [64 x i8], [64 x i8]* %19, i64 0, i64 0
%74 = call i32 (i8*, ...) @SHA256_Update(i8* %15, i8* %73, i32 64)
%75 = call i32 @memcpy(i8* %17, i8* %15, i32 1)
%76 = getelementptr inbounds [32 x i8], [32 x i8]* %20, i64 0, i64 0
%77 = call i32 (i8*, ...) @SHA256_Update(i8* %15, i8* %76, i32 32)
%78 = getelementptr inbounds [32 x i8], [32 x i8]* %20, i64 0, i64 0
%79 = call i32 @SHA256_Final(i8* %78, i8* %15)
%80 = load i8*, i8** %14
%81 = getelementptr inbounds [32 x i8], [32 x i8]* %20, i64 0, i64 0
%82 = call i32 @memcpy(i8* %80, i8* %81, i32 32)
store i32 1, i32* %21
br label %83
83: ; preds = %119, %61
%84 = load i32, i32* %21
%85 = load i32, i32* %12
%86 = icmp slt i32 %84, %85
br i1 %86, label %87, label %122
87: ; preds = %83
%88 = call i32 @memcpy(i8* %15, i8* %16, i32 1)
%89 = getelementptr inbounds [32 x i8], [32 x i8]* %20, i64 0, i64 0
%90 = call i32 (i8*, ...) @SHA256_Update(i8* %15, i8* %89, i32 32)
%91 = getelementptr inbounds [32 x i8], [32 x i8]* %20, i64 0, i64 0
%92 = call i32 @SHA256_Final(i8* %91, i8* %15)
%93 = call i32 @memcpy(i8* %15, i8* %17, i32 1)
%94 = getelementptr inbounds [32 x i8], [32 x i8]* %20, i64 0, i64 0
%95 = call i32 (i8*, ...) @SHA256_Update(i8* %15, i8* %94, i32 32)
%96 = getelementptr inbounds [32 x i8], [32 x i8]* %20, i64 0, i64 0
%97 = call i32 @SHA256_Final(i8* %96, i8* %15)
store i32 0, i32* %22
br label %98
98: ; preds = %115, %87
%99 = load i32, i32* %22
%100 = icmp slt i32 %99, 32
br i1 %100, label %101, label %118
101: ; preds = %98
%102 = load i32, i32* %22
%103 = sext i32 %102 to i64
%104 = getelementptr inbounds [32 x i8], [32 x i8]* %20, i64 0, i64 %103
%105 = load i8, i8* %104
%106 = zext i8 %105 to i32
%107 = load i8*, i8** %14
%108 = load i32, i32* %22
%109 = sext i32 %108 to i64
%110 = getelementptr inbounds i8, i8* %107, i64 %109
%111 = load i8, i8* %110
%112 = zext i8 %111 to i32
%113 = xor i32 %112, %106
%114 = trunc i32 %113 to i8
store i8 %114, i8* %110
br label %115
115: ; preds = %101
%116 = load i32, i32* %22
%117 = add nsw i32 %116, 1
store i32 %117, i32* %22
br label %98
118: ; preds = %98
br label %119
119: ; preds = %118
%120 = load i32, i32* %21
%121 = add nsw i32 %120, 1
store i32 %121, i32* %21
br label %83
122: ; preds = %83
ret void
}

LLVM IR (-O2):
@.str = [5 x i8] c"\00\00\00\01\00"
define void @hash_proto_pbkdf2_256_len(i8* nocapture %0, i32 %1, i8* %2, i32 %3, i32 %4, i32 %5, i8* %6) {
%8 = alloca i8
%9 = alloca i8
%10 = alloca i8
%11 = alloca [64 x i8]
%12 = alloca [64 x i8]
%13 = alloca [32 x i8]
%14 = getelementptr inbounds [64 x i8], [64 x i8]* %11, i64 0, i64 0
%15 = getelementptr inbounds [64 x i8], [64 x i8]* %12, i64 0, i64 0
%16 = getelementptr inbounds [32 x i8], [32 x i8]* %13, i64 0, i64 0
%17 = call i32 @memset(i8* %14, i32 54, i32 64)
%18 = call i32 @memset(i8* %15, i32 92, i32 64)
%19 = icmp sgt i32 %1, 0
br i1 %19, label %20, label %98
20: ; preds = %7
%21 = zext i32 %1 to i64
%22 = icmp ult i32 %1, 8
br i1 %22, label %84, label %23
23: ; preds = %20
%24 = icmp ult i32 %1, 32
br i1 %24, label %62, label %25
25: ; preds = %23
%26 = and i64 %21, 4294967264
br label %27
27: ; preds = %27, %25
%28 = phi i64 [ 0, %25 ], [ %55, %27 ]
%29 = getelementptr inbounds i8, i8* %0, i64 %28
%30 = bitcast i8* %29 to <16 x i8>*
%31 = load <16 x i8>, <16 x i8>* %30
%32 = getelementptr inbounds i8, i8* %29, i64 16
%33 = bitcast i8* %32 to <16 x i8>*
%34 = load <16 x i8>, <16 x i8>* %33
%35 = getelementptr inbounds [64 x i8], [64 x i8]* %11, i64 0, i64 %28
%36 = bitcast i8* %35 to <16 x i8>*
%37 = load <16 x i8>, <16 x i8>* %36
%38 = getelementptr inbounds i8, i8* %35, i64 16
%39 = bitcast i8* %38 to <16 x i8>*
%40 = load <16 x i8>, <16 x i8>* %39
%41 = xor <16 x i8> %37, %31
%42 = xor <16 x i8> %40, %34
%43 = bitcast i8* %35 to <16 x i8>*
store <16 x i8> %41, <16 x i8>* %43
%44 = bitcast i8* %38 to <16 x i8>*
store <16 x i8> %42, <16 x i8>* %44
%45 = getelementptr inbounds [64 x i8], [64 x i8]* %12, i64 0, i64 %28
%46 = bitcast i8* %45 to <16 x i8>*
%47 = load <16 x i8>, <16 x i8>* %46
%48 = getelementptr inbounds i8, i8* %45, i64 16
%49 = bitcast i8* %48 to <16 x i8>*
%50 = load <16 x i8>, <16 x i8>* %49
%51 = xor <16 x i8> %47, %31
%52 = xor <16 x i8> %50, %34
%53 = bitcast i8* %45 to <16 x i8>*
store <16 x i8> %51, <16 x i8>* %53
%54 = bitcast i8* %48 to <16 x i8>*
store <16 x i8> %52, <16 x i8>* %54
%55 = add nuw i64 %28, 32
%56 = icmp eq i64 %55, %26
br i1 %56, label %57, label %27
57: ; preds = %27
%58 = icmp eq i64 %26, %21
br i1 %58, label %98, label %59
59: ; preds = %57
%60 = and i64 %21, 24
%61 = icmp eq i64 %60, 0
br i1 %61, label %84, label %62
62: ; preds = %23, %59
%63 = phi i64 [ %26, %59 ], [ 0, %23 ]
%64 = and i64 %21, 4294967288
br label %65
65: ; preds = %65, %62
%66 = phi i64 [ %63, %62 ], [ %80, %65 ]
%67 = getelementptr inbounds i8, i8* %0, i64 %66
%68 = bitcast i8* %67 to <8 x i8>*
%69 = load <8 x i8>, <8 x i8>* %68
%70 = getelementptr inbounds [64 x i8], [64 x i8]* %11, i64 0, i64 %66
%71 = bitcast i8* %70 to <8 x i8>*
%72 = load <8 x i8>, <8 x i8>* %71
%73 = xor <8 x i8> %72, %69
%74 = bitcast i8* %70 to <8 x i8>*
store <8 x i8> %73, <8 x i8>* %74
%75 = getelementptr inbounds [64 x i8], [64 x i8]* %12, i64 0, i64 %66
%76 = bitcast i8* %75 to <8 x i8>*
%77 = load <8 x i8>, <8 x i8>* %76
%78 = xor <8 x i8> %77, %69
%79 = bitcast i8* %75 to <8 x i8>*
store <8 x i8> %78, <8 x i8>* %79
%80 = add nuw i64 %66, 8
%81 = icmp eq i64 %80, %64
br i1 %81, label %82, label %65
82: ; preds = %65
%83 = icmp eq i64 %64, %21
br i1 %83, label %98, label %84
84: ; preds = %20, %59, %82
%85 = phi i64 [ 0, %20 ], [ %26, %59 ], [ %64, %82 ]
br label %86
86: ; preds = %84, %86
%87 = phi i64 [ %96, %86 ], [ %85, %84 ]
%88 = getelementptr inbounds i8, i8* %0, i64 %87
%89 = load i8, i8* %88
%90 = getelementptr inbounds [64 x i8], [64 x i8]* %11, i64 0, i64 %87
%91 = load i8, i8* %90
%92 = xor i8 %91, %89
store i8 %92, i8* %90
%93 = getelementptr inbounds [64 x i8], [64 x i8]* %12, i64 0, i64 %87
%94 = load i8, i8* %93
%95 = xor i8 %94, %89
store i8 %95, i8* %93
%96 = add nuw nsw i64 %87, 1
%97 = icmp eq i64 %96, %21
br i1 %97, label %98, label %86
98: ; preds = %86, %57, %82, %7
%99 = call i32 @SHA256_Init(i8* %8)
%100 = call i32 (i8*, ...) @SHA256_Update(i8* %8, i8* %14, i32 64)
%101 = call i32 @memcpy(i8* %9, i8* %8, i32 1)
%102 = call i32 (i8*, ...) @SHA256_Update(i8* %8, i8* %2, i32 %3)
%103 = call i32 (i8*, ...) @SHA256_Update(i8* %8, i8* getelementptr inbounds ([5 x i8], [5 x i8]* @.str, i64 0, i64 0), i32 4)
%104 = call i32 @SHA256_Final(i8* %16, i8* %8)
%105 = call i32 @SHA256_Init(i8* %8)
%106 = call i32 (i8*, ...) @SHA256_Update(i8* %8, i8* %15, i32 64)
%107 = call i32 @memcpy(i8* %10, i8* %8, i32 1)
%108 = call i32 (i8*, ...) @SHA256_Update(i8* %8, i8* %16, i32 32)
%109 = call i32 @SHA256_Final(i8* %16, i8* %8)
%110 = call i32 @memcpy(i8* %6, i8* %16, i32 32)
%111 = icmp sgt i32 %4, 1
br i1 %111, label %112, label %137
112: ; preds = %98
%113 = bitcast [32 x i8]* %13 to <16 x i8>*
%114 = bitcast i8* %6 to <16 x i8>*
%115 = bitcast i8* %6 to <16 x i8>*
%116 = getelementptr inbounds [32 x i8], [32 x i8]* %13, i64 0, i64 16
%117 = bitcast i8* %116 to <16 x i8>*
%118 = getelementptr inbounds i8, i8* %6, i64 16
%119 = bitcast i8* %118 to <16 x i8>*
%120 = bitcast i8* %118 to <16 x i8>*
br label %121
121: ; preds = %112, %121
%122 = phi i32 [ %135, %121 ], [ 1, %112 ]
%123 = call i32 @memcpy(i8* %8, i8* %9, i32 1)
%124 = call i32 (i8*, ...) @SHA256_Update(i8* %8, i8* %16, i32 32)
%125 = call i32 @SHA256_Final(i8* %16, i8* %8)
%126 = call i32 @memcpy(i8* %8, i8* %10, i32 1)
%127 = call i32 (i8*, ...) @SHA256_Update(i8* %8, i8* %16, i32 32)
%128 = call i32 @SHA256_Final(i8* %16, i8* %8)
%129 = load <16 x i8>, <16 x i8>* %113
%130 = load <16 x i8>, <16 x i8>* %114
%131 = xor <16 x i8> %130, %129
store <16 x i8> %131, <16 x i8>* %115
%132 = load <16 x i8>, <16 x i8>* %117
%133 = load <16 x i8>, <16 x i8>* %119
%134 = xor <16 x i8> %133, %132
store <16 x i8> %134, <16 x i8>* %120
%135 = add nuw nsw i32 %122, 1
%136 = icmp eq i32 %135, %4
br i1 %136, label %137, label %121
137: ; preds = %121, %98
ret void
}