#define NULL ((void *)0)
typedef unsigned long size_t; // Customize by platform.
typedef long intptr_t;
typedef unsigned long uintptr_t;
typedef long scalar_t__; // Either arithmetic or pointer type.
/* By default, we understand bool (as a convenience). */
typedef int bool;
#define false 0
#define true 1

/* Forward declarations */

/* Type definitions */
typedef int /*<<< orphan*/ EVP_MD;

/* Variables and functions */
int /*<<< orphan*/ EVP_Digest(void *, int, unsigned char *,
                              int /*<<< orphan*/ *, int /*<<< orphan*/ const *,
                              int /*<<< orphan*/ *);
int EVP_MAX_MD_SIZE;
int EVP_MD_size(int /*<<< orphan*/ const *);
int /*<<< orphan*/ *EVP_sha1();
int /*<<< orphan*/ OPENSSL_free(unsigned char *);
unsigned char *OPENSSL_malloc(int);
scalar_t__ RAND_bytes(unsigned char *, int);
scalar_t__ beta_PKCS1_MGF1(unsigned char *, int, unsigned char *, int,
                           int /*<<< orphan*/ const *);
int /*<<< orphan*/ memcpy(unsigned char *, unsigned char const *, unsigned int);
int /*<<< orphan*/ memset(unsigned char *, int /*<<< orphan*/, int);
int beta_RSA_padding_add_PKCS1_OAEP_mgf1(unsigned char *to, int tlen,
                                         const unsigned char *from, int flen,
                                         const unsigned char *param, int plen,
                                         const EVP_MD *md,
                                         const EVP_MD *mgf1md) {
  int i, emlen = tlen - 1;
  unsigned char *db, *seed;
  unsigned char *dbmask, seedmask[EVP_MAX_MD_SIZE];
  int mdlen;
  if (md == NULL)
    md = EVP_sha1();
  if (mgf1md == NULL)
    mgf1md = md;
  mdlen = EVP_MD_size(md);
  if (flen > emlen - 2 * mdlen - 1) {
    return 0;
  }
  if (emlen < 2 * mdlen + 1) {
    return 0;
  }
  to[0] = 0;
  seed = to + 1;
  db = to + mdlen + 1;
  if (!EVP_Digest((void *)param, plen, db, NULL, md, NULL))
    return 0;
  memset(db + mdlen, 0, emlen - flen - 2 * mdlen - 1);
  db[emlen - flen - mdlen - 1] = 0x01;
  memcpy(db + emlen - flen - mdlen, from, (unsigned int)flen);
  if (RAND_bytes(seed, mdlen) <= 0)
    return 0;
  dbmask = OPENSSL_malloc(emlen - mdlen);
  if (dbmask == NULL) {
    return 0;
  }
  if (beta_PKCS1_MGF1(dbmask, emlen - mdlen, seed, mdlen, mgf1md) < 0)
    return 0;
  for (i = 0; i < emlen - mdlen; i++)
    db[i] ^= dbmask[i];
  if (beta_PKCS1_MGF1(seedmask, mdlen, db, emlen - mdlen, mgf1md) < 0)
    return 0;
  for (i = 0; i < mdlen; i++)
    seed[i] ^= seedmask[i];
  OPENSSL_free(dbmask);
  return 1;
}


x86 assembly (clang, -O0):
<beta_RSA_padding_add_PKCS1_OAEP_mgf1>:
push   %rbp
mov    %rsp,%rbp
sub    $0x80,%rsp
mov    0x18(%rbp),%rax
mov    0x10(%rbp),%rax
mov    %rdi,-0x10(%rbp)
mov    %esi,-0x14(%rbp)
mov    %rdx,-0x20(%rbp)
mov    %ecx,-0x24(%rbp)
mov    %r8,-0x30(%rbp)
mov    %r9d,-0x34(%rbp)
mov    -0x14(%rbp),%eax
add    $0xffffffff,%eax
mov    %eax,-0x3c(%rbp)
mov    0x2e1f(%rip),%rax
mov    (%rax),%eax
mov    %rsp,%rcx
mov    %rcx,-0x60(%rbp)
mov    %rax,%rdx
add    $0xf,%rdx
and    $0xfffffffffffffff0,%rdx
mov    %rsp,%rcx
sub    %rdx,%rcx
mov    %rcx,-0x78(%rbp)
mov    %rcx,%rsp
mov    %rax,-0x68(%rbp)
cmpq   $0x0,0x10(%rbp)
jne    1204 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x74>
mov    $0x0,%al
call   1040 <EVP_sha1@plt>
mov    %rax,0x10(%rbp)
cmpq   $0x0,0x18(%rbp)
jne    1217 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x87>
mov    0x10(%rbp),%rax
mov    %rax,0x18(%rbp)
mov    0x10(%rbp),%rdi
call   1030 <EVP_MD_size@plt>
mov    %eax,-0x6c(%rbp)
mov    -0x24(%rbp),%eax
mov    -0x3c(%rbp),%ecx
mov    -0x6c(%rbp),%edx
shl    $0x1,%edx
sub    %edx,%ecx
sub    $0x1,%ecx
cmp    %ecx,%eax
jle    124f <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0xbf>
movl   $0x0,-0x4(%rbp)
movl   $0x1,-0x70(%rbp)
jmp    1499 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x309>
mov    -0x3c(%rbp),%eax
mov    -0x6c(%rbp),%ecx
shl    $0x1,%ecx
add    $0x1,%ecx
cmp    %ecx,%eax
jge    1276 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0xe6>
movl   $0x0,-0x4(%rbp)
movl   $0x1,-0x70(%rbp)
jmp    1499 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x309>
mov    -0x10(%rbp),%rax
movb   $0x0,(%rax)
mov    -0x10(%rbp),%rax
add    $0x1,%rax
mov    %rax,-0x50(%rbp)
mov    -0x10(%rbp),%rax
movslq -0x6c(%rbp),%rcx
add    %rcx,%rax
add    $0x1,%rax
mov    %rax,-0x48(%rbp)
mov    -0x30(%rbp),%rdi
mov    -0x34(%rbp),%esi
mov    -0x48(%rbp),%rdx
mov    0x10(%rbp),%r8
xor    %eax,%eax
mov    %eax,%r9d
mov    %r9,%rcx
call   10a0 <EVP_Digest@plt>
cmp    $0x0,%eax
jne    12d4 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x144>
movl   $0x0,-0x4(%rbp)
movl   $0x1,-0x70(%rbp)
jmp    1499 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x309>
mov    -0x48(%rbp),%rdi
movslq -0x6c(%rbp),%rax
add    %rax,%rdi
mov    -0x3c(%rbp),%edx
sub    -0x24(%rbp),%edx
mov    -0x6c(%rbp),%eax
shl    $0x1,%eax
sub    %eax,%edx
sub    $0x1,%edx
xor    %esi,%esi
call   1060 <memset@plt>
mov    -0x48(%rbp),%rax
mov    -0x3c(%rbp),%ecx
sub    -0x24(%rbp),%ecx
sub    -0x6c(%rbp),%ecx
sub    $0x1,%ecx
movslq %ecx,%rcx
movb   $0x1,(%rax,%rcx,1)
mov    -0x48(%rbp),%rdi
movslq -0x3c(%rbp),%rax
add    %rax,%rdi
movslq -0x24(%rbp),%rcx
xor    %eax,%eax
sub    %rcx,%rax
add    %rax,%rdi
movslq -0x6c(%rbp),%rcx
xor    %eax,%eax
sub    %rcx,%rax
add    %rax,%rdi
mov    -0x20(%rbp),%rsi
mov    -0x24(%rbp),%edx
call   1070 <memcpy@plt>
mov    -0x50(%rbp),%rdi
mov    -0x6c(%rbp),%esi
call   1050 <RAND_bytes@plt>
cmp    $0x0,%rax
jg     1366 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x1d6>
movl   $0x0,-0x4(%rbp)
movl   $0x1,-0x70(%rbp)
jmp    1499 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x309>
mov    -0x3c(%rbp),%edi
sub    -0x6c(%rbp),%edi
call   1090 <OPENSSL_malloc@plt>
mov    %rax,-0x58(%rbp)
cmpq   $0x0,-0x58(%rbp)
jne    1393 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x203>
movl   $0x0,-0x4(%rbp)
movl   $0x1,-0x70(%rbp)
jmp    1499 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x309>
mov    -0x58(%rbp),%rdi
mov    -0x3c(%rbp),%esi
sub    -0x6c(%rbp),%esi
mov    -0x50(%rbp),%rdx
mov    -0x6c(%rbp),%ecx
mov    0x18(%rbp),%r8
call   1080 <beta_PKCS1_MGF1@plt>
cmp    $0x0,%rax
jge    13ca <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x23a>
movl   $0x0,-0x4(%rbp)
movl   $0x1,-0x70(%rbp)
jmp    1499 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x309>
movl   $0x0,-0x38(%rbp)
mov    -0x38(%rbp),%eax
mov    -0x3c(%rbp),%ecx
sub    -0x6c(%rbp),%ecx
cmp    %ecx,%eax
jge    140d <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x27d>
mov    -0x58(%rbp),%rax
movslq -0x38(%rbp),%rcx
movzbl (%rax,%rcx,1),%esi
mov    -0x48(%rbp),%rax
movslq -0x38(%rbp),%rcx
movzbl (%rax,%rcx,1),%edx
xor    %esi,%edx
mov    %dl,(%rax,%rcx,1)
mov    -0x38(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x38(%rbp)
jmp    13d1 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x241>
mov    -0x78(%rbp),%rdi
mov    -0x6c(%rbp),%esi
mov    -0x48(%rbp),%rdx
mov    -0x3c(%rbp),%ecx
sub    -0x6c(%rbp),%ecx
mov    0x18(%rbp),%r8
call   1080 <beta_PKCS1_MGF1@plt>
cmp    $0x0,%rax
jge    1444 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x2b4>
movl   $0x0,-0x4(%rbp)
movl   $0x1,-0x70(%rbp)
jmp    1499 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x309>
movl   $0x0,-0x38(%rbp)
mov    -0x38(%rbp),%eax
cmp    -0x6c(%rbp),%eax
jge    1482 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x2f2>
mov    -0x78(%rbp),%rax
movslq -0x38(%rbp),%rcx
movzbl (%rax,%rcx,1),%esi
mov    -0x50(%rbp),%rax
movslq -0x38(%rbp),%rcx
movzbl (%rax,%rcx,1),%edx
xor    %esi,%edx
mov    %dl,(%rax,%rcx,1)
mov    -0x38(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x38(%rbp)
jmp    144b <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x2bb>
mov    -0x58(%rbp),%rdi
call   10b0 <OPENSSL_free@plt>
movl   $0x1,-0x4(%rbp)
movl   $0x1,-0x70(%rbp)
mov    -0x60(%rbp),%rax
mov    %rax,%rsp
mov    -0x4(%rbp),%eax
mov    %rbp,%rsp
pop    %rbp
ret

x86 assembly (clang, -O2):
<beta_RSA_padding_add_PKCS1_OAEP_mgf1>:
push   %rbp
mov    %rsp,%rbp
push   %r15
push   %r14
push   %r13
push   %r12
push   %rbx
sub    $0x58,%rsp
mov    %r9d,-0x48(%rbp)
mov    %r8,-0x40(%rbp)
mov    %ecx,%r12d
mov    %rdx,-0x78(%rbp)
mov    %rdi,-0x30(%rbp)
mov    0x18(%rbp),%rbx
mov    0x10(%rbp),%r13
mov    %rsi,%rax
mov    %rsi,-0x38(%rbp)
lea    -0x1(%rsi),%r14d
mov    0x2e1a(%rip),%rax
mov    (%rax),%eax
mov    %rsp,%rcx
add    $0xf,%rax
and    $0xfffffffffffffff0,%rax
sub    %rax,%rcx
mov    %rcx,-0x58(%rbp)
mov    %rcx,%rsp
test   %r13,%r13
jne    11f4 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x64>
xor    %eax,%eax
call   1040 <EVP_sha1@plt>
mov    %rax,%r13
test   %rbx,%rbx
cmove  %r13,%rbx
mov    %rbx,-0x70(%rbp)
mov    %r13,%rdi
call   1030 <EVP_MD_size@plt>
lea    (%rax,%rax,1),%r15d
not    %r15d
lea    (%r14,%r15,1),%ecx
xor    %edx,%edx
cmp    %r12d,%ecx
jl     141c <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x28c>
mov    %r12d,-0x4c(%rbp)
lea    (%rax,%rax,1),%ecx
add    $0x1,%ecx
cmp    -0x38(%rbp),%ecx
mov    -0x30(%rbp),%rbx
jge    141c <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x28c>
mov    %r14,%rsi
movb   $0x0,(%rbx)
movslq %eax,%r14
lea    (%rbx,%r14,1),%r12
add    $0x1,%r12
mov    -0x40(%rbp),%rdi
mov    %rsi,-0x40(%rbp)
mov    -0x48(%rbp),%esi
mov    %r12,%rdx
mov    %rax,-0x38(%rbp)
xor    %ecx,%ecx
mov    %r13,%r8
xor    %r9d,%r9d
call   10a0 <EVP_Digest@plt>
mov    -0x40(%rbp),%r13
xor    %edx,%edx
mov    -0x38(%rbp),%rcx
test   %eax,%eax
je     141c <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x28c>
lea    0x1(%rbx),%rax
mov    %rax,-0x48(%rbp)
lea    (%r12,%r14,1),%rdi
mov    %r14,-0x68(%rbp)
mov    %r13d,%ebx
mov    -0x4c(%rbp),%r14d
sub    %r14d,%ebx
add    %ebx,%r15d
xor    %esi,%esi
mov    %r15d,%edx
mov    %rcx,%r15
call   1060 <memset@plt>
mov    %r15d,%eax
not    %eax
add    %ebx,%eax
cltq
movb   $0x1,(%r12,%rax,1)
movslq %r13d,%rdi
mov    %r12,-0x60(%rbp)
add    %r12,%rdi
movslq %r14d,%rax
sub    %rax,%rdi
mov    -0x68(%rbp),%rbx
sub    %rbx,%rdi
mov    -0x78(%rbp),%rsi
mov    %r14d,%edx
call   1070 <memcpy@plt>
mov    -0x48(%rbp),%rdi
mov    %rdi,%r14
mov    %rbx,%rsi
mov    %rbx,%r12
call   1050 <RAND_bytes@plt>
test   %rax,%rax
jle    141a <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x28a>
sub    %r15d,%r13d
mov    %r13d,%edi
call   1090 <OPENSSL_malloc@plt>
test   %rax,%rax
je     141a <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x28a>
mov    %r13,%r15
mov    %rax,%rbx
mov    %rax,%rdi
mov    %r15d,%esi
mov    %r14,%r13
mov    %r14,%rdx
mov    %r12d,%ecx
mov    -0x70(%rbp),%r14
mov    %r14,%r8
call   1080 <beta_PKCS1_MGF1@plt>
test   %rax,%rax
js     141a <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x28a>
mov    %r15,%rcx
test   %r15d,%r15d
mov    -0x60(%rbp),%r10
jle    13db <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x24b>
mov    %rcx,%rax
mov    %eax,%r9d
cmp    $0x8,%eax
jb     136a <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x1da>
lea    (%rbx,%r9,1),%rax
cmp    %rax,%r10
jae    1439 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x2a9>
lea    (%r12,%r9,1),%rax
mov    -0x30(%rbp),%rdx
add    %rdx,%rax
add    $0x1,%rax
cmp    %rax,%rbx
jae    1439 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x2a9>
xor    %edx,%edx
mov    %rdx,%rdi
not    %rdi
add    %r9,%rdi
mov    %r9,%rsi
and    $0x3,%rsi
je     1392 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x202>
xchg   %ax,%ax
movzbl (%rbx,%rdx,1),%eax
xor    %al,(%r10,%rdx,1)
add    $0x1,%rdx
add    $0xffffffffffffffff,%rsi
jne    1380 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x1f0>
cmp    $0x3,%rdi
jb     13db <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x24b>
mov    -0x30(%rbp),%rax
lea    (%r12,%rax,1),%rsi
add    $0x4,%rsi
cs nopw 0x0(%rax,%rax,1)
xchg   %ax,%ax
movzbl (%rbx,%rdx,1),%eax
xor    %al,-0x3(%rsi,%rdx,1)
movzbl 0x1(%rbx,%rdx,1),%eax
xor    %al,-0x2(%rsi,%rdx,1)
movzbl 0x2(%rbx,%rdx,1),%eax
xor    %al,-0x1(%rsi,%rdx,1)
movzbl 0x3(%rbx,%rdx,1),%eax
xor    %al,(%rsi,%rdx,1)
add    $0x4,%rdx
cmp    %rdx,%r9
jne    13b0 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x220>
mov    -0x58(%rbp),%rdi
mov    %r12d,%esi
mov    %r10,%rdx
mov    %r14,%r8
call   1080 <beta_PKCS1_MGF1@plt>
test   %rax,%rax
mov    -0x38(%rbp),%rcx
mov    $0x0,%edx
mov    -0x30(%rbp),%rsi
js     141c <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x28c>
test   %ecx,%ecx
mov    -0x58(%rbp),%rax
jle    15b2 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x422>
mov    %ecx,%r8d
cmp    $0x8,%ecx
jae    142d <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x29d>
xor    %ecx,%ecx
jmp    15a0 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x410>
xor    %edx,%edx
mov    %edx,%eax
lea    -0x28(%rbp),%rsp
pop    %rbx
pop    %r12
pop    %r13
pop    %r14
pop    %r15
pop    %rbp
ret
cmp    $0x20,%ecx
jae    1445 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x2b5>
xor    %ecx,%ecx
jmp    1571 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x3e1>
cmp    $0x20,%ecx
jae    14b6 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x326>
xor    %edx,%edx
jmp    1604 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x474>
mov    %r8d,%ecx
and    $0xffffffe0,%ecx
lea    -0x20(%rcx),%rdx
mov    %rdx,%r9
shr    $0x5,%r9
add    $0x1,%r9
test   %rdx,%rdx
je     153d <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x3ad>
mov    %r9,%rdi
and    $0xfffffffffffffffe,%rdi
xor    %edx,%edx
movups 0x1(%rsi,%rdx,1),%xmm0
movups 0x11(%rsi,%rdx,1),%xmm1
movups 0x21(%rsi,%rdx,1),%xmm2
movups 0x31(%rsi,%rdx,1),%xmm3
xorps  (%rax,%rdx,1),%xmm0
xorps  0x10(%rax,%rdx,1),%xmm1
movups %xmm0,0x1(%rsi,%rdx,1)
movups %xmm1,0x11(%rsi,%rdx,1)
xorps  0x20(%rax,%rdx,1),%xmm2
xorps  0x30(%rax,%rdx,1),%xmm3
movups %xmm2,0x21(%rsi,%rdx,1)
movups %xmm3,0x31(%rsi,%rdx,1)
add    $0x40,%rdx
add    $0xfffffffffffffffe,%rdi
jne    146c <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x2dc>
jmp    153f <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x3af>
mov    %r9d,%edx
and    $0xffffffe0,%edx
lea    -0x20(%rdx),%rax
mov    %rax,%r8
shr    $0x5,%r8
add    $0x1,%r8
test   %rax,%rax
je     15c4 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x434>
mov    %r8,%rdi
and    $0xfffffffffffffffe,%rdi
mov    -0x30(%rbp),%rax
lea    (%r12,%rax,1),%rsi
add    $0x31,%rsi
xor    %eax,%eax
movups (%rbx,%rax,1),%xmm0
movups 0x10(%rbx,%rax,1),%xmm1
movups -0x30(%rsi,%rax,1),%xmm2
xorps  %xmm0,%xmm2
movups -0x20(%rsi,%rax,1),%xmm0
xorps  %xmm1,%xmm0
movups -0x10(%rsi,%rax,1),%xmm1
movups (%rsi,%rax,1),%xmm3
movups %xmm2,-0x30(%rsi,%rax,1)
movups %xmm0,-0x20(%rsi,%rax,1)
movups 0x20(%rbx,%rax,1),%xmm0
xorps  %xmm1,%xmm0
movups 0x30(%rbx,%rax,1),%xmm1
xorps  %xmm3,%xmm1
movups %xmm0,-0x10(%rsi,%rax,1)
movups %xmm1,(%rsi,%rax,1)
add    $0x40,%rax
add    $0xfffffffffffffffe,%rdi
jne    14e9 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x359>
jmp    15c6 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x436>
xor    %edx,%edx
test   $0x1,%r9b
je     1566 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x3d6>
movups 0x0(%r13,%rdx,1),%xmm0
movups 0x10(%r13,%rdx,1),%xmm1
xorps  (%rax,%rdx,1),%xmm0
xorps  0x10(%rax,%rdx,1),%xmm1
movups %xmm0,0x0(%r13,%rdx,1)
movups %xmm1,0x10(%r13,%rdx,1)
cmp    %r8,%rcx
je     15b2 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x422>
test   $0x18,%r8b
je     15a0 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x410>
mov    %rcx,%rdx
mov    %r8d,%ecx
and    $0xfffffff8,%ecx
nopw   0x0(%rax,%rax,1)
mov    (%rax,%rdx,1),%rsi
xor    %rsi,0x0(%r13,%rdx,1)
add    $0x8,%rdx
cmp    %rdx,%rcx
jne    1580 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x3f0>
cmp    %r8,%rcx
je     15b2 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x422>
nopw   0x0(%rax,%rax,1)
movzbl (%rax,%rcx,1),%edx
xor    %dl,0x0(%r13,%rcx,1)
add    $0x1,%rcx
cmp    %rcx,%r8
jne    15a0 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x410>
mov    %rbx,%rdi
call   10b0 <OPENSSL_free@plt>
mov    $0x1,%edx
jmp    141c <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x28c>
xor    %eax,%eax
test   $0x1,%r8b
je     15f1 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x461>
movups (%rbx,%rax,1),%xmm0
movups 0x10(%rbx,%rax,1),%xmm1
movups (%r10,%rax,1),%xmm2
xorps  %xmm0,%xmm2
movups 0x10(%r10,%rax,1),%xmm0
xorps  %xmm1,%xmm0
movups %xmm2,(%r10,%rax,1)
movups %xmm0,0x10(%r10,%rax,1)
cmp    %r9,%rdx
je     13db <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x24b>
test   $0x18,%r9b
je     136c <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x1dc>
mov    %rdx,%rax
mov    %r9d,%edx
and    $0xfffffff8,%edx
nopl   (%rax)
mov    (%rbx,%rax,1),%rsi
xor    %rsi,(%r10,%rax,1)
add    $0x8,%rax
cmp    %rax,%rdx
jne    1610 <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x480>
cmp    %r9,%rdx
je     13db <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x24b>
jmp    136c <beta_RSA_padding_add_PKCS1_OAEP_mgf1+0x1dc>

LLVM IR (-O0):
@EVP_MAX_MD_SIZE = global i32 0
define i32 @beta_RSA_padding_add_PKCS1_OAEP_mgf1(i8* %0, i32 %1, i8* %2, i32 %3, i8* %4, i32 %5, i32* %6, i32* %7) {
%9 = alloca i32
%10 = alloca i8*
%11 = alloca i32
%12 = alloca i8*
%13 = alloca i32
%14 = alloca i8*
%15 = alloca i32
%16 = alloca i32*
%17 = alloca i32*
%18 = alloca i32
%19 = alloca i32
%20 = alloca i8*
%21 = alloca i8*
%22 = alloca i8*
%23 = alloca i8*
%24 = alloca i64
%25 = alloca i32
%26 = alloca i32
store i8* %0, i8** %10
store i32 %1, i32* %11
store i8* %2, i8** %12
store i32 %3, i32* %13
store i8* %4, i8** %14
store i32 %5, i32* %15
store i32* %6, i32** %16
store i32* %7, i32** %17
%27 = load i32, i32* %11
%28 = sub nsw i32 %27, 1
store i32 %28, i32* %19
%29 = load i32, i32* @EVP_MAX_MD_SIZE
%30 = zext i32 %29 to i64
%31 = call i8* @llvm.stacksave()
store i8* %31, i8** %23
%32 = alloca i8, i64 %30
store i64 %30, i64* %24
%33 = load i32*, i32** %16
%34 = icmp eq i32* %33, null
br i1 %34, label %35, label %37
35: ; preds = %8
%36 = call i32* (...) @EVP_sha1()
store i32* %36, i32** %16
br label %37
37: ; preds = %35, %8
%38 = load i32*, i32** %17
%39 = icmp eq i32* %38, null
br i1 %39, label %40, label %42
40: ; preds = %37
%41 = load i32*, i32** %16
store i32* %41, i32** %17
br label %42
42: ; preds = %40, %37
%43 = load i32*, i32** %16
%44 = call i32 @EVP_MD_size(i32* %43)
store i32 %44, i32* %25
%45 = load i32, i32* %13
%46 = load i32, i32* %19
%47 = load i32, i32* %25
%48 = mul nsw i32 2, %47
%49 = sub nsw i32 %46, %48
%50 = sub nsw i32 %49, 1
%51 = icmp sgt i32 %45, %50
br i1 %51, label %52, label %53
52: ; preds = %42
store i32 0, i32* %9
store i32 1, i32* %26
br label %198
53: ; preds = %42
%54 = load i32, i32* %19
%55 = load i32, i32* %25
%56 = mul nsw i32 2, %55
%57 = add nsw i32 %56, 1
%58 = icmp slt i32 %54, %57
br i1 %58, label %59, label %60
59: ; preds = %53
store i32 0, i32* %9
store i32 1, i32* %26
br label %198
60: ; preds = %53
%61 = load i8*, i8** %10
%62 = getelementptr inbounds i8, i8* %61, i64 0
store i8 0, i8* %62
%63 = load i8*, i8** %10
%64 = getelementptr inbounds i8, i8* %63, i64 1
store i8* %64, i8** %21
%65 = load i8*, i8** %10
%66 = load i32, i32* %25
%67 = sext i32 %66 to i64
%68 = getelementptr inbounds i8, i8* %65, i64 %67
%69 = getelementptr inbounds i8, i8* %68, i64 1
store i8* %69, i8** %20
%70 = load i8*, i8** %14
%71 = load i32, i32* %15
%72 = load i8*, i8** %20
%73 = load i32*, i32** %16
%74 = call i32 @EVP_Digest(i8* %70, i32 %71, i8* %72, i32* null, i32* %73, i32* null)
%75 = icmp ne i32 %74, 0
br i1 %75, label %77, label %76
76: ; preds = %60
store i32 0, i32* %9
store i32 1, i32* %26
br label %198
77: ; preds = %60
%78 = load i8*, i8** %20
%79 = load i32, i32* %25
%80 = sext i32 %79 to i64
%81 = getelementptr inbounds i8, i8* %78, i64 %80
%82 = load i32, i32* %19
%83 = load i32, i32* %13
%84 = sub nsw i32 %82, %83
%85 = load i32, i32* %25
%86 = mul nsw i32 2, %85
%87 = sub nsw i32 %84, %86
%88 = sub nsw i32 %87, 1
%89 = call i32 @memset(i8* %81, i32 0, i32 %88)
%90 = load i8*, i8** %20
%91 = load i32, i32* %19
%92 = load i32, i32* %13
%93 = sub nsw i32 %91, %92
%94 = load i32, i32* %25
%95 = sub nsw i32 %93, %94
%96 = sub nsw i32 %95, 1
%97 = sext i32 %96 to i64
%98 = getelementptr inbounds i8, i8* %90, i64 %97
store i8 1, i8* %98
%99 = load i8*, i8** %20
%100 = load i32, i32* %19
%101 = sext i32 %100 to i64
%102 = getelementptr inbounds i8, i8* %99, i64 %101
%103 = load i32, i32* %13
%104 = sext i32 %103 to i64
%105 = sub i64 0, %104
%106 = getelementptr inbounds i8, i8* %102, i64 %105
%107 = load i32, i32* %25
%108 = sext i32 %107 to i64
%109 = sub i64 0, %108
%110 = getelementptr inbounds i8, i8* %106, i64 %109
%111 = load i8*, i8** %12
%112 = load i32, i32* %13
%113 = call i32 @memcpy(i8* %110, i8* %111, i32 %112)
%114 = load i8*, i8** %21
%115 = load i32, i32* %25
%116 = call i64 @RAND_bytes(i8* %114, i32 %115)
%117 = icmp sle i64 %116, 0
br i1 %117, label %118, label %119
118: ; preds = %77
store i32 0, i32* %9
store i32 1, i32* %26
br label %198
119: ; preds = %77
%120 = load i32, i32* %19
%121 = load i32, i32* %25
%122 = sub nsw i32 %120, %121
%123 = call i8* @OPENSSL_malloc(i32 %122)
store i8* %123, i8** %22
%124 = load i8*, i8** %22
%125 = icmp eq i8* %124, null
br i1 %125, label %126, label %127
126: ; preds = %119
store i32 0, i32* %9
store i32 1, i32* %26
br label %198
127: ; preds = %119
%128 = load i8*, i8** %22
%129 = load i32, i32* %19
%130 = load i32, i32* %25
%131 = sub nsw i32 %129, %130
%132 = load i8*, i8** %21
%133 = load i32, i32* %25
%134 = load i32*, i32** %17
%135 = call i64 @beta_PKCS1_MGF1(i8* %128, i32 %131, i8* %132, i32 %133, i32* %134)
%136 = icmp slt i64 %135, 0
br i1 %136, label %137, label %138
137: ; preds = %127
store i32 0, i32* %9
store i32 1, i32* %26
br label %198
138: ; preds = %127
store i32 0, i32* %18
br label %139
139: ; preds = %160, %138
%140 = load i32, i32* %18
%141 = load i32, i32* %19
%142 = load i32, i32* %25
%143 = sub nsw i32 %141, %142
%144 = icmp slt i32 %140, %143
br i1 %144, label %145, label %163
145: ; preds = %139
%146 = load i8*, i8** %22
%147 = load i32, i32* %18
%148 = sext i32 %147 to i64
%149 = getelementptr inbounds i8, i8* %146, i64 %148
%150 = load i8, i8* %149
%151 = zext i8 %150 to i32
%152 = load i8*, i8** %20
%153 = load i32, i32* %18
%154 = sext i32 %153 to i64
%155 = getelementptr inbounds i8, i8* %152, i64 %154
%156 = load i8, i8* %155
%157 = zext i8 %156 to i32
%158 = xor i32 %157, %151
%159 = trunc i32 %158 to i8
store i8 %159, i8* %155
br label %160
160: ; preds = %145
%161 = load i32, i32* %18
%162 = add nsw i32 %161, 1
store i32 %162, i32* %18
br label %139
163: ; preds = %139
%164 = load i32, i32* %25
%165 = load i8*, i8** %20
%166 = load i32, i32* %19
%167 = load i32, i32* %25
%168 = sub nsw i32 %166, %167
%169 = load i32*, i32** %17
%170 = call i64 @beta_PKCS1_MGF1(i8* %32, i32 %164, i8* %165, i32 %168, i32* %169)
%171 = icmp slt i64 %170, 0
br i1 %171, label %172, label %173
172: ; preds = %163
store i32 0, i32* %9
store i32 1, i32* %26
br label %198
173: ; preds = %163
store i32 0, i32* %18
br label %174
174: ; preds = %192, %173
%175 = load i32, i32* %18
%176 = load i32, i32* %25
%177 = icmp slt i32 %175, %176
br i1 %177, label %178, label %195
178: ; preds = %174
%179 = load i32, i32* %18
%180 = sext i32 %179 to i64
%181 = getelementptr inbounds i8, i8* %32, i64 %180
%182 = load i8, i8* %181
%183 = zext i8 %182 to i32
%184 = load i8*, i8** %21
%185 = load i32, i32* %18
%186 = sext i32 %185 to i64
%187 = getelementptr inbounds i8, i8* %184, i64 %186
%188 = load i8, i8* %187
%189 = zext i8 %188 to i32
%190 = xor i32 %189, %183
%191 = trunc i32 %190 to i8
store i8 %191, i8* %187
br label %192
192: ; preds = %178
%193 = load i32, i32* %18
%194 = add nsw i32 %193, 1
store i32 %194, i32* %18
br label %174
195: ; preds = %174
%196 = load i8*, i8** %22
%197 = call i32 @OPENSSL_free(i8* %196)
store i32 1, i32* %9
store i32 1, i32* %26
br label %198
198: ; preds = %195, %172, %137, %126, %118, %76, %59, %52
%199 = load i8*, i8** %23
%200 = load i32, i32* %9
ret i32 %200
}

LLVM IR (-O2):
@EVP_MAX_MD_SIZE = global i32 0
define i32 @beta_RSA_padding_add_PKCS1_OAEP_mgf1(i8* %0, i32 %1, i8* %2, i32 %3, i8* %4, i32 %5, i32* %6, i32* %7) {
%9 = add nsw i32 %1, -1
%10 = load i32, i32* @EVP_MAX_MD_SIZE
%11 = zext i32 %10 to i64
%12 = alloca i8, i64 %11
%13 = icmp eq i32* %6, null
br i1 %13, label %14, label %16
14: ; preds = %8
%15 = tail call i32* (...) @EVP_sha1()
br label %16
16: ; preds = %14, %8
%17 = phi i32* [ %15, %14 ], [ %6, %8 ]
%18 = icmp eq i32* %7, null
%19 = select i1 %18, i32* %17, i32* %7
%20 = tail call i32 @EVP_MD_size(i32* %17)
%21 = shl nsw i32 %20, 1
%22 = xor i32 %21, -1
%23 = add i32 %9, %22
%24 = icmp sge i32 %23, %3
%25 = or i32 %21, 1
%26 = icmp slt i32 %25, %1
%27 = select i1 %24, i1 %26, i1 false
br i1 %27, label %28, label %326
28: ; preds = %16
store i8 0, i8* %0
%29 = getelementptr inbounds i8, i8* %0, i64 1
%30 = sext i32 %20 to i64
%31 = getelementptr inbounds i8, i8* %0, i64 %30
%32 = getelementptr inbounds i8, i8* %31, i64 1
%33 = tail call i32 @EVP_Digest(i8* %4, i32 %5, i8* %32, i32* null, i32* %17, i32* null)
%34 = icmp eq i32 %33, 0
br i1 %34, label %326, label %35
35: ; preds = %28
%36 = getelementptr inbounds i8, i8* %32, i64 %30
%37 = sub nsw i32 %9, %3
%38 = add i32 %37, %22
%39 = tail call i32 @memset(i8* %36, i32 0, i32 %38)
%40 = xor i32 %20, -1
%41 = add i32 %37, %40
%42 = sext i32 %41 to i64
%43 = getelementptr inbounds i8, i8* %32, i64 %42
store i8 1, i8* %43
%44 = sext i32 %9 to i64
%45 = getelementptr inbounds i8, i8* %32, i64 %44
%46 = sext i32 %3 to i64
%47 = sub nsw i64 0, %46
%48 = getelementptr inbounds i8, i8* %45, i64 %47
%49 = sub nsw i64 0, %30
%50 = getelementptr inbounds i8, i8* %48, i64 %49
%51 = tail call i32 @memcpy(i8* %50, i8* %2, i32 %3)
%52 = tail call i64 @RAND_bytes(i8* %29, i32 %20)
%53 = icmp slt i64 %52, 1
br i1 %53, label %326, label %54
54: ; preds = %35
%55 = sub nsw i32 %9, %20
%56 = tail call i8* @OPENSSL_malloc(i32 %55)
%57 = icmp eq i8* %56, null
br i1 %57, label %326, label %58
58: ; preds = %54
%59 = tail call i64 @beta_PKCS1_MGF1(i8* %56, i32 %55, i8* %29, i32 %20, i32* %19)
%60 = icmp slt i64 %59, 0
br i1 %60, label %326, label %61
61: ; preds = %58
%62 = icmp sgt i32 %55, 0
br i1 %62, label %63, label %213
63: ; preds = %61
%64 = zext i32 %55 to i64
%65 = icmp ult i32 %55, 8
br i1 %65, label %166, label %66
66: ; preds = %63
%67 = add nsw i64 %30, %64
%68 = add nsw i64 %67, 1
%69 = getelementptr i8, i8* %0, i64 %68
%70 = getelementptr i8, i8* %56, i64 %64
%71 = icmp ult i8* %32, %70
%72 = icmp ult i8* %56, %69
%73 = and i1 %71, %72
br i1 %73, label %166, label %74
74: ; preds = %66
%75 = icmp ult i32 %55, 32
br i1 %75, label %149, label %76
76: ; preds = %74
%77 = and i64 %64, 4294967264
%78 = add nsw i64 %77, -32
%79 = lshr exact i64 %78, 5
%80 = add nuw nsw i64 %79, 1
%81 = and i64 %80, 1
%82 = icmp eq i64 %78, 0
br i1 %82, label %124, label %83
83: ; preds = %76
%84 = and i64 %80, 1152921504606846974
br label %85
85: ; preds = %85, %83
%86 = phi i64 [ 0, %83 ], [ %121, %85 ]
%87 = phi i64 [ 0, %83 ], [ %122, %85 ]
%88 = getelementptr inbounds i8, i8* %56, i64 %86
%89 = bitcast i8* %88 to <16 x i8>*
%90 = load <16 x i8>, <16 x i8>* %89
%91 = getelementptr inbounds i8, i8* %88, i64 16
%92 = bitcast i8* %91 to <16 x i8>*
%93 = load <16 x i8>, <16 x i8>* %92
%94 = getelementptr inbounds i8, i8* %32, i64 %86
%95 = bitcast i8* %94 to <16 x i8>*
%96 = load <16 x i8>, <16 x i8>* %95
%97 = getelementptr inbounds i8, i8* %94, i64 16
%98 = bitcast i8* %97 to <16 x i8>*
%99 = load <16 x i8>, <16 x i8>* %98
%100 = xor <16 x i8> %96, %90
%101 = xor <16 x i8> %99, %93
%102 = bitcast i8* %94 to <16 x i8>*
store <16 x i8> %100, <16 x i8>* %102
%103 = bitcast i8* %97 to <16 x i8>*
store <16 x i8> %101, <16 x i8>* %103
%104 = or i64 %86, 32
%105 = getelementptr inbounds i8, i8* %56, i64 %104
%106 = bitcast i8* %105 to <16 x i8>*
%107 = load <16 x i8>, <16 x i8>* %106
%108 = getelementptr inbounds i8, i8* %105, i64 16
%109 = bitcast i8* %108 to <16 x i8>*
%110 = load <16 x i8>, <16 x i8>* %109
%111 = getelementptr inbounds i8, i8* %32, i64 %104
%112 = bitcast i8* %111 to <16 x i8>*
%113 = load <16 x i8>, <16 x i8>* %112
%114 = getelementptr inbounds i8, i8* %111, i64 16
%115 = bitcast i8* %114 to <16 x i8>*
%116 = load <16 x i8>, <16 x i8>* %115
%117 = xor <16 x i8> %113, %107
%118 = xor <16 x i8> %116, %110
%119 = bitcast i8* %111 to <16 x i8>*
store <16 x i8> %117, <16 x i8>* %119
%120 = bitcast i8* %114 to <16 x i8>*
store <16 x i8> %118, <16 x i8>* %120
%121 = add nuw i64 %86, 64
%122 = add i64 %87, 2
%123 = icmp eq i64 %122, %84
br i1 %123, label %124, label %85
124: ; preds = %85, %76
%125 = phi i64 [ 0, %76 ], [ %121, %85 ]
%126 = icmp eq i64 %81, 0
br i1 %126, label %144, label %127
127: ; preds = %124
%128 = getelementptr inbounds i8, i8* %56, i64 %125
%129 = bitcast i8* %128 to <16 x i8>*
%130 = load <16 x i8>, <16 x i8>* %129
%131 = getelementptr inbounds i8, i8* %128, i64 16
%132 = bitcast i8* %131 to <16 x i8>*
%133 = load <16 x i8>, <16 x i8>* %132
%134 = getelementptr inbounds i8, i8* %32, i64 %125
%135 = bitcast i8* %134 to <16 x i8>*
%136 = load <16 x i8>, <16 x i8>* %135
%137 = getelementptr inbounds i8, i8* %134, i64 16
%138 = bitcast i8* %137 to <16 x i8>*
%139 = load <16 x i8>, <16 x i8>* %138
%140 = xor <16 x i8> %136, %130
%141 = xor <16 x i8> %139, %133
%142 = bitcast i8* %134 to <16 x i8>*
store <16 x i8> %140, <16 x i8>* %142
%143 = bitcast i8* %137 to <16 x i8>*
store <16 x i8> %141, <16 x i8>* %143
br label %144
144: ; preds = %124, %127
%145 = icmp eq i64 %77, %64
br i1 %145, label %213, label %146
146: ; preds = %144
%147 = and i64 %64, 24
%148 = icmp eq i64 %147, 0
br i1 %148, label %166, label %149
149: ; preds = %74, %146
%150 = phi i64 [ %77, %146 ], [ 0, %74 ]
%151 = and i64 %64, 4294967288
br label %152
152: ; preds = %152, %149
%153 = phi i64 [ %150, %149 ], [ %162, %152 ]
%154 = getelementptr inbounds i8, i8* %56, i64 %153
%155 = bitcast i8* %154 to <8 x i8>*
%156 = load <8 x i8>, <8 x i8>* %155
%157 = getelementptr inbounds i8, i8* %32, i64 %153
%158 = bitcast i8* %157 to <8 x i8>*
%159 = load <8 x i8>, <8 x i8>* %158
%160 = xor <8 x i8> %159, %156
%161 = bitcast i8* %157 to <8 x i8>*
store <8 x i8> %160, <8 x i8>* %161
%162 = add nuw i64 %153, 8
%163 = icmp eq i64 %162, %151
br i1 %163, label %164, label %152
164: ; preds = %152
%165 = icmp eq i64 %151, %64
br i1 %165, label %213, label %166
166: ; preds = %66, %63, %146, %164
%167 = phi i64 [ 0, %63 ], [ 0, %66 ], [ %77, %146 ], [ %151, %164 ]
%168 = xor i64 %167, -1
%169 = add nsw i64 %168, %64
%170 = and i64 %64, 3
%171 = icmp eq i64 %170, 0
br i1 %171, label %183, label %172
172: ; preds = %166, %172
%173 = phi i64 [ %180, %172 ], [ %167, %166 ]
%174 = phi i64 [ %181, %172 ], [ 0, %166 ]
%175 = getelementptr inbounds i8, i8* %56, i64 %173
%176 = load i8, i8* %175
%177 = getelementptr inbounds i8, i8* %32, i64 %173
%178 = load i8, i8* %177
%179 = xor i8 %178, %176
store i8 %179, i8* %177
%180 = add nuw nsw i64 %173, 1
%181 = add i64 %174, 1
%182 = icmp eq i64 %181, %170
br i1 %182, label %183, label %172
183: ; preds = %172, %166
%184 = phi i64 [ %167, %166 ], [ %180, %172 ]
%185 = icmp ult i64 %169, 3
br i1 %185, label %213, label %186
186: ; preds = %183, %186
%187 = phi i64 [ %211, %186 ], [ %184, %183 ]
%188 = getelementptr inbounds i8, i8* %56, i64 %187
%189 = load i8, i8* %188
%190 = getelementptr inbounds i8, i8* %32, i64 %187
%191 = load i8, i8* %190
%192 = xor i8 %191, %189
store i8 %192, i8* %190
%193 = add nuw nsw i64 %187, 1
%194 = getelementptr inbounds i8, i8* %56, i64 %193
%195 = load i8, i8* %194
%196 = getelementptr inbounds i8, i8* %32, i64 %193
%197 = load i8, i8* %196
%198 = xor i8 %197, %195
store i8 %198, i8* %196
%199 = add nuw nsw i64 %187, 2
%200 = getelementptr inbounds i8, i8* %56, i64 %199
%201 = load i8, i8* %200
%202 = getelementptr inbounds i8, i8* %32, i64 %199
%203 = load i8, i8* %202
%204 = xor i8 %203, %201
store i8 %204, i8* %202
%205 = add nuw nsw i64 %187, 3
%206 = getelementptr inbounds i8, i8* %56, i64 %205
%207 = load i8, i8* %206
%208 = getelementptr inbounds i8, i8* %32, i64 %205
%209 = load i8, i8* %208
%210 = xor i8 %209, %207
store i8 %210, i8* %208
%211 = add nuw nsw i64 %187, 4
%212 = icmp eq i64 %211, %64
br i1 %212, label %213, label %186
213: ; preds = %183, %186, %144, %164, %61
%214 = call i64 @beta_PKCS1_MGF1(i8* %12, i32 %20, i8* %32, i32 %55, i32* %19)
%215 = icmp slt i64 %214, 0
br i1 %215, label %326, label %216
216: ; preds = %213
%217 = icmp sgt i32 %20, 0
br i1 %217, label %218, label %324
218: ; preds = %216
%219 = zext i32 %20 to i64
%220 = icmp ult i32 %20, 8
br i1 %220, label %313, label %221
221: ; preds = %218
%222 = icmp ult i32 %20, 32
br i1 %222, label %296, label %223
223: ; preds = %221
%224 = and i64 %219, 4294967264
%225 = add nsw i64 %224, -32
%226 = lshr exact i64 %225, 5
%227 = add nuw nsw i64 %226, 1
%228 = and i64 %227, 1
%229 = icmp eq i64 %225, 0
br i1 %229, label %271, label %230
230: ; preds = %223
%231 = and i64 %227, 1152921504606846974
br label %232
232: ; preds = %232, %230
%233 = phi i64 [ 0, %230 ], [ %268, %232 ]
%234 = phi i64 [ 0, %230 ], [ %269, %232 ]
%235 = getelementptr inbounds i8, i8* %12, i64 %233
%236 = bitcast i8* %235 to <16 x i8>*
%237 = load <16 x i8>, <16 x i8>* %236
%238 = getelementptr inbounds i8, i8* %235, i64 16
%239 = bitcast i8* %238 to <16 x i8>*
%240 = load <16 x i8>, <16 x i8>* %239
%241 = getelementptr inbounds i8, i8* %29, i64 %233
%242 = bitcast i8* %241 to <16 x i8>*
%243 = load <16 x i8>, <16 x i8>* %242
%244 = getelementptr inbounds i8, i8* %241, i64 16
%245 = bitcast i8* %244 to <16 x i8>*
%246 = load <16 x i8>, <16 x i8>* %245
%247 = xor <16 x i8> %243, %237
%248 = xor <16 x i8> %246, %240
%249 = bitcast i8* %241 to <16 x i8>*
store <16 x i8> %247, <16 x i8>* %249
%250 = bitcast i8* %244 to <16 x i8>*
store <16 x i8> %248, <16 x i8>* %250
%251 = or i64 %233, 32
%252 = getelementptr inbounds i8, i8* %12, i64 %251
%253 = bitcast i8* %252 to <16 x i8>*
%254 = load <16 x i8>, <16 x i8>* %253
%255 = getelementptr inbounds i8, i8* %252, i64 16
%256 = bitcast i8* %255 to <16 x i8>*
%257 = load <16 x i8>, <16 x i8>* %256
%258 = getelementptr inbounds i8, i8* %29, i64 %251
%259 = bitcast i8* %258 to <16 x i8>*
%260 = load <16 x i8>, <16 x i8>* %259
%261 = getelementptr inbounds i8, i8* %258, i64 16
%262 = bitcast i8* %261 to <16 x i8>*
%263 = load <16 x i8>, <16 x i8>* %262
%264 = xor <16 x i8> %260, %254
%265 = xor <16 x i8> %263, %257
%266 = bitcast i8* %258 to <16 x i8>*
store <16 x i8> %264, <16 x i8>* %266
%267 = bitcast i8* %261 to <16 x i8>*
store <16 x i8> %265, <16 x i8>* %267
%268 = add nuw i64 %233, 64
%269 = add i64 %234, 2
%270 = icmp eq i64 %269, %231
br i1 %270, label %271, label %232
271: ; preds = %232, %223
%272 = phi i64 [ 0, %223 ], [ %268, %232 ]
%273 = icmp eq i64 %228, 0
br i1 %273, label %291, label %274
274: ; preds = %271
%275 = getelementptr inbounds i8, i8* %12, i64 %272
%276 = bitcast i8* %275 to <16 x i8>*
%277 = load <16 x i8>, <16 x i8>* %276
%278 = getelementptr inbounds i8, i8* %275, i64 16
%279 = bitcast i8* %278 to <16 x i8>*
%280 = load <16 x i8>, <16 x i8>* %279
%281 = getelementptr inbounds i8, i8* %29, i64 %272
%282 = bitcast i8* %281 to <16 x i8>*
%283 = load <16 x i8>, <16 x i8>* %282
%284 = getelementptr inbounds i8, i8* %281, i64 16
%285 = bitcast i8* %284 to <16 x i8>*
%286 = load <16 x i8>, <16 x i8>* %285
%287 = xor <16 x i8> %283, %277
%288 = xor <16 x i8> %286, %280
%289 = bitcast i8* %281 to <16 x i8>*
store <16 x i8> %287, <16 x i8>* %289
%290 = bitcast i8* %284 to <16 x i8>*
store <16 x i8> %288, <16 x i8>* %290
br label %291
291: ; preds = %271, %274
%292 = icmp eq i64 %224, %219
br i1 %292, label %324, label %293
293: ; preds = %291
%294 = and i64 %219, 24
%295 = icmp eq i64 %294, 0
br i1 %295, label %313, label %296
296: ; preds = %221, %293
%297 = phi i64 [ %224, %293 ], [ 0, %221 ]
%298 = and i64 %219, 4294967288
br label %299
299: ; preds = %299, %296
%300 = phi i64 [ %297, %296 ], [ %309, %299 ]
%301 = getelementptr inbounds i8, i8* %12, i64 %300
%302 = bitcast i8* %301 to <8 x i8>*
%303 = load <8 x i8>, <8 x i8>* %302
%304 = getelementptr inbounds i8, i8* %29, i64 %300
%305 = bitcast i8* %304 to <8 x i8>*
%306 = load <8 x i8>, <8 x i8>* %305
%307 = xor <8 x i8> %306, %303
%308 = bitcast i8* %304 to <8 x i8>*
store <8 x i8> %307, <8 x i8>* %308
%309 = add nuw i64 %300, 8
%310 = icmp eq i64 %309, %298
br i1 %310, label %311, label %299
311: ; preds = %299
%312 = icmp eq i64 %298, %219
br i1 %312, label %324, label %313
313: ; preds = %218, %293, %311
%314 = phi i64 [ 0, %218 ], [ %224, %293 ], [ %298, %311 ]
br label %315
315: ; preds = %313, %315
%316 = phi i64 [ %322, %315 ], [ %314, %313 ]
%317 = getelementptr inbounds i8, i8* %12, i64 %316
%318 = load i8, i8* %317
%319 = getelementptr inbounds i8, i8* %29, i64 %316
%320 = load i8, i8* %319
%321 = xor i8 %320, %318
store i8 %321, i8* %319
%322 = add nuw nsw i64 %316, 1
%323 = icmp eq i64 %322, %219
br i1 %323, label %324, label %315
324: ; preds = %315, %291, %311, %216
%325 = call i32 @OPENSSL_free(i8* %56)
br label %326
326: ; preds = %213, %58, %54, %35, %28, %16, %324
%327 = phi i32 [ 1, %324 ], [ 0, %16 ], [ 0, %28 ], [ 0, %35 ], [ 0, %54 ], [ 0, %58 ], [ 0, %213 ]
ret i32 %327
}