#define NULL ((void *)0)
typedef unsigned long size_t; // Customize by platform.
typedef long intptr_t;
typedef unsigned long uintptr_t;
typedef long scalar_t__; // Either arithmetic or pointer type.
/* By default, we understand bool (as a convenience). */
typedef int bool;
#define false 0
#define true 1

/* Forward declarations */

/* Type definitions */

/* Variables and functions */
int /*<<< orphan*/ AESROUND(unsigned char *, unsigned char *, unsigned char *);
int /*<<< orphan*/ memcpy(unsigned char *, unsigned char const *, int);
void aegis128_initialization(const unsigned char *key, const unsigned char *iv,
                             unsigned char *state) {
  int i;
  unsigned char constant[32] = {0x0,  0x1,  0x01, 0x02, 0x03, 0x05, 0x08, 0x0d,
                                0x15, 0x22, 0x37, 0x59, 0x90, 0xe9, 0x79, 0x62,
                                0xdb, 0x3d, 0x18, 0x55, 0x6d, 0xc2, 0x2f, 0xf1,
                                0x20, 0x11, 0x31, 0x42, 0x73, 0xb5, 0x28, 0xdd};
  unsigned char tmp[16];
  unsigned char keytmp[16];
  unsigned char ivtmp[16];
  memcpy(keytmp, key, 16);
  memcpy(ivtmp, iv, 16);
  memcpy(state, ivtmp, 16);
  memcpy(state + 16, constant + 16, 16);
  memcpy(state + 32, constant + 0, 16);
  {
    ((unsigned long long *)(state + 48))[0] =
        ((unsigned long long *)(keytmp))[0] ^
        ((unsigned long long *)(constant))[0];
    ((unsigned long long *)(state + 48))[1] =
        ((unsigned long long *)(keytmp))[1] ^
        ((unsigned long long *)(constant))[1];
  };
  {
    ((unsigned long long *)(state + 64))[0] =
        ((unsigned long long *)(keytmp))[0] ^
        ((unsigned long long *)(constant + 16))[0];
    ((unsigned long long *)(state + 64))[1] =
        ((unsigned long long *)(keytmp))[1] ^
        ((unsigned long long *)(constant + 16))[1];
  };
  {
    ((unsigned long long *)(state))[0] = ((unsigned long long *)(state))[0] ^
                                         ((unsigned long long *)(keytmp))[0];
    ((unsigned long long *)(state))[1] = ((unsigned long long *)(state))[1] ^
                                         ((unsigned long long *)(keytmp))[1];
  };
  {
    ((unsigned long long *)(keytmp))[0] = ((unsigned long long *)(keytmp))[0] ^
                                          ((unsigned long long *)(ivtmp))[0];
    ((unsigned long long *)(keytmp))[1] = ((unsigned long long *)(keytmp))[1] ^
                                          ((unsigned long long *)(ivtmp))[1];
  };
  for (i = 0; i < 10; i++) {
    memcpy(tmp, state + 64, 16);
    AESROUND(state + 64, state + 48, state + 64);
    AESROUND(state + 48, state + 32, state + 48);
    AESROUND(state + 32, state + 16, state + 32);
    AESROUND(state + 16, state + 0, state + 16);
    AESROUND(state + 0, tmp, state + 0);
    {
      ((unsigned long long *)(keytmp))[0] =
          ((unsigned long long *)(keytmp))[0] ^
          ((unsigned long long *)(ivtmp))[0];
      ((unsigned long long *)(keytmp))[1] =
          ((unsigned long long *)(keytmp))[1] ^
          ((unsigned long long *)(ivtmp))[1];
    };
    {
      ((unsigned long long *)(state))[0] = ((unsigned long long *)(state))[0] ^
                                           ((unsigned long long *)(keytmp))[0];
      ((unsigned long long *)(state))[1] = ((unsigned long long *)(state))[1] ^
                                           ((unsigned long long *)(keytmp))[1];
    };
  }
}


x86 assembly (clang, -O0):
<aegis128_initialization>:
push   %rbp
mov    %rsp,%rbp
sub    $0x70,%rsp
mov    %rdi,-0x8(%rbp)
mov    %rsi,-0x10(%rbp)
mov    %rdx,-0x18(%rbp)
mov    0xec5(%rip),%rax
mov    %rax,-0x40(%rbp)
mov    0xec2(%rip),%rax
mov    %rax,-0x38(%rbp)
mov    0xebf(%rip),%rax
mov    %rax,-0x30(%rbp)
mov    0xebc(%rip),%rax
mov    %rax,-0x28(%rbp)
lea    -0x60(%rbp),%rdi
mov    -0x8(%rbp),%rsi
mov    $0x10,%edx
call   1030 <memcpy@plt>
lea    -0x70(%rbp),%rdi
mov    -0x10(%rbp),%rsi
mov    $0x10,%edx
call   1030 <memcpy@plt>
mov    -0x18(%rbp),%rdi
lea    -0x70(%rbp),%rsi
mov    $0x10,%edx
call   1030 <memcpy@plt>
mov    -0x18(%rbp),%rdi
add    $0x10,%rdi
lea    -0x40(%rbp),%rsi
add    $0x10,%rsi
mov    $0x10,%edx
call   1030 <memcpy@plt>
mov    -0x18(%rbp),%rdi
add    $0x20,%rdi
lea    -0x40(%rbp),%rsi
mov    $0x10,%edx
call   1030 <memcpy@plt>
mov    -0x60(%rbp),%rcx
xor    -0x40(%rbp),%rcx
mov    -0x18(%rbp),%rax
mov    %rcx,0x30(%rax)
mov    -0x58(%rbp),%rcx
xor    -0x38(%rbp),%rcx
mov    -0x18(%rbp),%rax
mov    %rcx,0x38(%rax)
mov    -0x60(%rbp),%rcx
xor    -0x30(%rbp),%rcx
mov    -0x18(%rbp),%rax
mov    %rcx,0x40(%rax)
mov    -0x58(%rbp),%rcx
xor    -0x28(%rbp),%rcx
mov    -0x18(%rbp),%rax
mov    %rcx,0x48(%rax)
mov    -0x18(%rbp),%rax
mov    (%rax),%rcx
xor    -0x60(%rbp),%rcx
mov    -0x18(%rbp),%rax
mov    %rcx,(%rax)
mov    -0x18(%rbp),%rax
mov    0x8(%rax),%rcx
xor    -0x58(%rbp),%rcx
mov    -0x18(%rbp),%rax
mov    %rcx,0x8(%rax)
mov    -0x60(%rbp),%rax
xor    -0x70(%rbp),%rax
mov    %rax,-0x60(%rbp)
mov    -0x58(%rbp),%rax
xor    -0x68(%rbp),%rax
mov    %rax,-0x58(%rbp)
movl   $0x0,-0x1c(%rbp)
cmpl   $0xa,-0x1c(%rbp)
jge    1338 <aegis128_initialization+0x218>
lea    -0x50(%rbp),%rdi
mov    -0x18(%rbp),%rsi
add    $0x40,%rsi
mov    $0x10,%edx
call   1030 <memcpy@plt>
mov    -0x18(%rbp),%rdi
add    $0x40,%rdi
mov    -0x18(%rbp),%rsi
add    $0x30,%rsi
mov    -0x18(%rbp),%rdx
add    $0x40,%rdx
call   1040 <AESROUND@plt>
mov    -0x18(%rbp),%rdi
add    $0x30,%rdi
mov    -0x18(%rbp),%rsi
add    $0x20,%rsi
mov    -0x18(%rbp),%rdx
add    $0x30,%rdx
call   1040 <AESROUND@plt>
mov    -0x18(%rbp),%rdi
add    $0x20,%rdi
mov    -0x18(%rbp),%rsi
add    $0x10,%rsi
mov    -0x18(%rbp),%rdx
add    $0x20,%rdx
call   1040 <AESROUND@plt>
mov    -0x18(%rbp),%rdi
add    $0x10,%rdi
mov    -0x18(%rbp),%rsi
mov    -0x18(%rbp),%rdx
add    $0x10,%rdx
call   1040 <AESROUND@plt>
mov    -0x18(%rbp),%rdi
lea    -0x50(%rbp),%rsi
mov    -0x18(%rbp),%rdx
call   1040 <AESROUND@plt>
mov    -0x60(%rbp),%rax
xor    -0x70(%rbp),%rax
mov    %rax,-0x60(%rbp)
mov    -0x58(%rbp),%rax
xor    -0x68(%rbp),%rax
mov    %rax,-0x58(%rbp)
mov    -0x18(%rbp),%rax
mov    (%rax),%rcx
xor    -0x60(%rbp),%rcx
mov    -0x18(%rbp),%rax
mov    %rcx,(%rax)
mov    -0x18(%rbp),%rax
mov    0x8(%rax),%rcx
xor    -0x58(%rbp),%rcx
mov    -0x18(%rbp),%rax
mov    %rcx,0x8(%rax)
mov    -0x1c(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x1c(%rbp)
jmp    124b <aegis128_initialization+0x12b>
add    $0x70,%rsp
pop    %rbp
ret

x86 assembly (clang, -O2):
<aegis128_initialization>:
push   %rbp
push   %r15
push   %r14
push   %r13
push   %r12
push   %rbx
sub    $0x58,%rsp
mov    %rdx,%rbx
mov    %rsi,%rbp
mov    %rdi,%rsi
movaps 0xed2(%rip),%xmm0
movaps %xmm0,0x30(%rsp)
movaps 0xeb6(%rip),%xmm0
movaps %xmm0,0x20(%rsp)
lea    0x30(%rsp),%r15
mov    %rsp,%rdi
mov    $0x10,%edx
call   1030 <memcpy@plt>
lea    0x10(%rsp),%r14
mov    %r14,%rdi
mov    %rbp,%rsi
mov    $0x10,%edx
call   1030 <memcpy@plt>
mov    %rbx,%rdi
mov    %r14,%rsi
mov    $0x10,%edx
call   1030 <memcpy@plt>
lea    0x10(%rbx),%r14
mov    %r14,%rdi
mov    %r15,%rsi
mov    $0x10,%edx
call   1030 <memcpy@plt>
lea    0x20(%rbx),%r15
lea    0x20(%rsp),%rsi
mov    %r15,%rdi
mov    $0x10,%edx
call   1030 <memcpy@plt>
movaps (%rsp),%xmm0
lea    0x30(%rbx),%r12
movaps 0x20(%rsp),%xmm1
xorps  %xmm0,%xmm1
movups %xmm1,0x30(%rbx)
movaps 0x30(%rsp),%xmm1
xorps  %xmm0,%xmm1
movups %xmm1,0x40(%rbx)
movups (%rbx),%xmm1
xorps  %xmm0,%xmm1
movups %xmm1,(%rbx)
xorps  0x10(%rsp),%xmm0
lea    0x40(%rbx),%r13
movaps %xmm0,(%rsp)
mov    $0xa,%ebp
nopl   0x0(%rax,%rax,1)
lea    0x40(%rsp),%rdi
mov    %r13,%rsi
mov    $0x10,%edx
call   1030 <memcpy@plt>
mov    %r13,%rdi
mov    %r12,%rsi
mov    %r13,%rdx
call   1040 <AESROUND@plt>
mov    %r12,%rdi
mov    %r15,%rsi
mov    %r12,%rdx
call   1040 <AESROUND@plt>
mov    %r15,%rdi
mov    %r14,%rsi
mov    %r15,%rdx
call   1040 <AESROUND@plt>
mov    %r14,%rdi
mov    %rbx,%rsi
mov    %r14,%rdx
call   1040 <AESROUND@plt>
mov    %rbx,%rdi
lea    0x40(%rsp),%rsi
mov    %rbx,%rdx
call   1040 <AESROUND@plt>
movaps 0x10(%rsp),%xmm0
xorps  (%rsp),%xmm0
movaps %xmm0,(%rsp)
movups (%rbx),%xmm1
xorps  %xmm0,%xmm1
movups %xmm1,(%rbx)
add    $0xffffffff,%ebp
jne    11f0 <aegis128_initialization+0xd0>
add    $0x58,%rsp
pop    %rbx
pop    %r12
pop    %r13
pop    %r14
pop    %r15
pop    %rbp
ret

LLVM IR (-O0):
@__const.aegis128_initialization.constant = [32 x i8] c"\00\01\01\02\03\05\08\0D\15\227Y\90\E9yb\DB=\18Um\C2/\F1 \111Bs\B5(\DD"
define void @aegis128_initialization(i8* %0, i8* %1, i8* %2) {
%4 = alloca i8*
%5 = alloca i8*
%6 = alloca i8*
%7 = alloca i32
%8 = alloca [32 x i8]
%9 = alloca [16 x i8]
%10 = alloca [16 x i8]
%11 = alloca [16 x i8]
store i8* %0, i8** %4
store i8* %1, i8** %5
store i8* %2, i8** %6
%12 = bitcast [32 x i8]* %8 to i8*
%13 = getelementptr inbounds [16 x i8], [16 x i8]* %10, i64 0, i64 0
%14 = load i8*, i8** %4
%15 = call i32 @memcpy(i8* %13, i8* %14, i32 16)
%16 = getelementptr inbounds [16 x i8], [16 x i8]* %11, i64 0, i64 0
%17 = load i8*, i8** %5
%18 = call i32 @memcpy(i8* %16, i8* %17, i32 16)
%19 = load i8*, i8** %6
%20 = getelementptr inbounds [16 x i8], [16 x i8]* %11, i64 0, i64 0
%21 = call i32 @memcpy(i8* %19, i8* %20, i32 16)
%22 = load i8*, i8** %6
%23 = getelementptr inbounds i8, i8* %22, i64 16
%24 = getelementptr inbounds [32 x i8], [32 x i8]* %8, i64 0, i64 0
%25 = getelementptr inbounds i8, i8* %24, i64 16
%26 = call i32 @memcpy(i8* %23, i8* %25, i32 16)
%27 = load i8*, i8** %6
%28 = getelementptr inbounds i8, i8* %27, i64 32
%29 = getelementptr inbounds [32 x i8], [32 x i8]* %8, i64 0, i64 0
%30 = getelementptr inbounds i8, i8* %29, i64 0
%31 = call i32 @memcpy(i8* %28, i8* %30, i32 16)
%32 = getelementptr inbounds [16 x i8], [16 x i8]* %10, i64 0, i64 0
%33 = bitcast i8* %32 to i64*
%34 = getelementptr inbounds i64, i64* %33, i64 0
%35 = load i64, i64* %34
%36 = getelementptr inbounds [32 x i8], [32 x i8]* %8, i64 0, i64 0
%37 = bitcast i8* %36 to i64*
%38 = getelementptr inbounds i64, i64* %37, i64 0
%39 = load i64, i64* %38
%40 = xor i64 %35, %39
%41 = load i8*, i8** %6
%42 = getelementptr inbounds i8, i8* %41, i64 48
%43 = bitcast i8* %42 to i64*
%44 = getelementptr inbounds i64, i64* %43, i64 0
store i64 %40, i64* %44
%45 = getelementptr inbounds [16 x i8], [16 x i8]* %10, i64 0, i64 0
%46 = bitcast i8* %45 to i64*
%47 = getelementptr inbounds i64, i64* %46, i64 1
%48 = load i64, i64* %47
%49 = getelementptr inbounds [32 x i8], [32 x i8]* %8, i64 0, i64 0
%50 = bitcast i8* %49 to i64*
%51 = getelementptr inbounds i64, i64* %50, i64 1
%52 = load i64, i64* %51
%53 = xor i64 %48, %52
%54 = load i8*, i8** %6
%55 = getelementptr inbounds i8, i8* %54, i64 48
%56 = bitcast i8* %55 to i64*
%57 = getelementptr inbounds i64, i64* %56, i64 1
store i64 %53, i64* %57
%58 = getelementptr inbounds [16 x i8], [16 x i8]* %10, i64 0, i64 0
%59 = bitcast i8* %58 to i64*
%60 = getelementptr inbounds i64, i64* %59, i64 0
%61 = load i64, i64* %60
%62 = getelementptr inbounds [32 x i8], [32 x i8]* %8, i64 0, i64 0
%63 = getelementptr inbounds i8, i8* %62, i64 16
%64 = bitcast i8* %63 to i64*
%65 = getelementptr inbounds i64, i64* %64, i64 0
%66 = load i64, i64* %65
%67 = xor i64 %61, %66
%68 = load i8*, i8** %6
%69 = getelementptr inbounds i8, i8* %68, i64 64
%70 = bitcast i8* %69 to i64*
%71 = getelementptr inbounds i64, i64* %70, i64 0
store i64 %67, i64* %71
%72 = getelementptr inbounds [16 x i8], [16 x i8]* %10, i64 0, i64 0
%73 = bitcast i8* %72 to i64*
%74 = getelementptr inbounds i64, i64* %73, i64 1
%75 = load i64, i64* %74
%76 = getelementptr inbounds [32 x i8], [32 x i8]* %8, i64 0, i64 0
%77 = getelementptr inbounds i8, i8* %76, i64 16
%78 = bitcast i8* %77 to i64*
%79 = getelementptr inbounds i64, i64* %78, i64 1
%80 = load i64, i64* %79
%81 = xor i64 %75, %80
%82 = load i8*, i8** %6
%83 = getelementptr inbounds i8, i8* %82, i64 64
%84 = bitcast i8* %83 to i64*
%85 = getelementptr inbounds i64, i64* %84, i64 1
store i64 %81, i64* %85
%86 = load i8*, i8** %6
%87 = bitcast i8* %86 to i64*
%88 = getelementptr inbounds i64, i64* %87, i64 0
%89 = load i64, i64* %88
%90 = getelementptr inbounds [16 x i8], [16 x i8]* %10, i64 0, i64 0
%91 = bitcast i8* %90 to i64*
%92 = getelementptr inbounds i64, i64* %91, i64 0
%93 = load i64, i64* %92
%94 = xor i64 %89, %93
%95 = load i8*, i8** %6
%96 = bitcast i8* %95 to i64*
%97 = getelementptr inbounds i64, i64* %96, i64 0
store i64 %94, i64* %97
%98 = load i8*, i8** %6
%99 = bitcast i8* %98 to i64*
%100 = getelementptr inbounds i64, i64* %99, i64 1
%101 = load i64, i64* %100
%102 = getelementptr inbounds [16 x i8], [16 x i8]* %10, i64 0, i64 0
%103 = bitcast i8* %102 to i64*
%104 = getelementptr inbounds i64, i64* %103, i64 1
%105 = load i64, i64* %104
%106 = xor i64 %101, %105
%107 = load i8*, i8** %6
%108 = bitcast i8* %107 to i64*
%109 = getelementptr inbounds i64, i64* %108, i64 1
store i64 %106, i64* %109
%110 = getelementptr inbounds [16 x i8], [16 x i8]* %10, i64 0, i64 0
%111 = bitcast i8* %110 to i64*
%112 = getelementptr inbounds i64, i64* %111, i64 0
%113 = load i64, i64* %112
%114 = getelementptr inbounds [16 x i8], [16 x i8]* %11, i64 0, i64 0
%115 = bitcast i8* %114 to i64*
%116 = getelementptr inbounds i64, i64* %115, i64 0
%117 = load i64, i64* %116
%118 = xor i64 %113, %117
%119 = getelementptr inbounds [16 x i8], [16 x i8]* %10, i64 0, i64 0
%120 = bitcast i8* %119 to i64*
%121 = getelementptr inbounds i64, i64* %120, i64 0
store i64 %118, i64* %121
%122 = getelementptr inbounds [16 x i8], [16 x i8]* %10, i64 0, i64 0
%123 = bitcast i8* %122 to i64*
%124 = getelementptr inbounds i64, i64* %123, i64 1
%125 = load i64, i64* %124
%126 = getelementptr inbounds [16 x i8], [16 x i8]* %11, i64 0, i64 0
%127 = bitcast i8* %126 to i64*
%128 = getelementptr inbounds i64, i64* %127, i64 1
%129 = load i64, i64* %128
%130 = xor i64 %125, %129
%131 = getelementptr inbounds [16 x i8], [16 x i8]* %10, i64 0, i64 0
%132 = bitcast i8* %131 to i64*
%133 = getelementptr inbounds i64, i64* %132, i64 1
store i64 %130, i64* %133
store i32 0, i32* %7
br label %134
134: ; preds = %224, %3
%135 = load i32, i32* %7
%136 = icmp slt i32 %135, 10
br i1 %136, label %137, label %227
137: ; preds = %134
%138 = getelementptr inbounds [16 x i8], [16 x i8]* %9, i64 0, i64 0
%139 = load i8*, i8** %6
%140 = getelementptr inbounds i8, i8* %139, i64 64
%141 = call i32 @memcpy(i8* %138, i8* %140, i32 16)
%142 = load i8*, i8** %6
%143 = getelementptr inbounds i8, i8* %142, i64 64
%144 = load i8*, i8** %6
%145 = getelementptr inbounds i8, i8* %144, i64 48
%146 = load i8*, i8** %6
%147 = getelementptr inbounds i8, i8* %146, i64 64
%148 = call i32 @AESROUND(i8* %143, i8* %145, i8* %147)
%149 = load i8*, i8** %6
%150 = getelementptr inbounds i8, i8* %149, i64 48
%151 = load i8*, i8** %6
%152 = getelementptr inbounds i8, i8* %151, i64 32
%153 = load i8*, i8** %6
%154 = getelementptr inbounds i8, i8* %153, i64 48
%155 = call i32 @AESROUND(i8* %150, i8* %152, i8* %154)
%156 = load i8*, i8** %6
%157 = getelementptr inbounds i8, i8* %156, i64 32
%158 = load i8*, i8** %6
%159 = getelementptr inbounds i8, i8* %158, i64 16
%160 = load i8*, i8** %6
%161 = getelementptr inbounds i8, i8* %160, i64 32
%162 = call i32 @AESROUND(i8* %157, i8* %159, i8* %161)
%163 = load i8*, i8** %6
%164 = getelementptr inbounds i8, i8* %163, i64 16
%165 = load i8*, i8** %6
%166 = getelementptr inbounds i8, i8* %165, i64 0
%167 = load i8*, i8** %6
%168 = getelementptr inbounds i8, i8* %167, i64 16
%169 = call i32 @AESROUND(i8* %164, i8* %166, i8* %168)
%170 = load i8*, i8** %6
%171 = getelementptr inbounds i8, i8* %170, i64 0
%172 = getelementptr inbounds [16 x i8], [16 x i8]* %9, i64 0, i64 0
%173 = load i8*, i8** %6
%174 = getelementptr inbounds i8, i8* %173, i64 0
%175 = call i32 @AESROUND(i8* %171, i8* %172, i8* %174)
%176 = getelementptr inbounds [16 x i8], [16 x i8]* %10, i64 0, i64 0
%177 = bitcast i8* %176 to i64*
%178 = getelementptr inbounds i64, i64* %177, i64 0
%179 = load i64, i64* %178
%180 = getelementptr inbounds [16 x i8], [16 x i8]* %11, i64 0, i64 0
%181 = bitcast i8* %180 to i64*
%182 = getelementptr inbounds i64, i64* %181, i64 0
%183 = load i64, i64* %182
%184 = xor i64 %179, %183
%185 = getelementptr inbounds [16 x i8], [16 x i8]* %10, i64 0, i64 0
%186 = bitcast i8* %185 to i64*
%187 = getelementptr inbounds i64, i64* %186, i64 0
store i64 %184, i64* %187
%188 = getelementptr inbounds [16 x i8], [16 x i8]* %10, i64 0, i64 0
%189 = bitcast i8* %188 to i64*
%190 = getelementptr inbounds i64, i64* %189, i64 1
%191 = load i64, i64* %190
%192 = getelementptr inbounds [16 x i8], [16 x i8]* %11, i64 0, i64 0
%193 = bitcast i8* %192 to i64*
%194 = getelementptr inbounds i64, i64* %193, i64 1
%195 = load i64, i64* %194
%196 = xor i64 %191, %195
%197 = getelementptr inbounds [16 x i8], [16 x i8]* %10, i64 0, i64 0
%198 = bitcast i8* %197 to i64*
%199 = getelementptr inbounds i64, i64* %198, i64 1
store i64 %196, i64* %199
%200 = load i8*, i8** %6
%201 = bitcast i8* %200 to i64*
%202 = getelementptr inbounds i64, i64* %201, i64 0
%203 = load i64, i64* %202
%204 = getelementptr inbounds [16 x i8], [16 x i8]* %10, i64 0, i64 0
%205 = bitcast i8* %204 to i64*
%206 = getelementptr inbounds i64, i64* %205, i64 0
%207 = load i64, i64* %206
%208 = xor i64 %203, %207
%209 = load i8*, i8** %6
%210 = bitcast i8* %209 to i64*
%211 = getelementptr inbounds i64, i64* %210, i64 0
store i64 %208, i64* %211
%212 = load i8*, i8** %6
%213 = bitcast i8* %212 to i64*
%214 = getelementptr inbounds i64, i64* %213, i64 1
%215 = load i64, i64* %214
%216 = getelementptr inbounds [16 x i8], [16 x i8]* %10, i64 0, i64 0
%217 = bitcast i8* %216 to i64*
%218 = getelementptr inbounds i64, i64* %217, i64 1
%219 = load i64, i64* %218
%220 = xor i64 %215, %219
%221 = load i8*, i8** %6
%222 = bitcast i8* %221 to i64*
%223 = getelementptr inbounds i64, i64* %222, i64 1
store i64 %220, i64* %223
br label %224
224: ; preds = %137
%225 = load i32, i32* %7
%226 = add nsw i32 %225, 1
store i32 %226, i32* %7
br label %134
227: ; preds = %134
ret void
}

LLVM IR (-O2):
@__const.aegis128_initialization.constant = [32 x i8] c"\00\01\01\02\03\05\08\0D\15\227Y\90\E9yb\DB=\18Um\C2/\F1 \111Bs\B5(\DD"
define void @aegis128_initialization(i8* %0, i8* %1, i8* %2) {
%4 = alloca [32 x i8]
%5 = alloca [16 x i8]
%6 = alloca <2 x i64>
%7 = alloca <2 x i64>
%8 = getelementptr inbounds [32 x i8], [32 x i8]* %4, i64 0, i64 0
%9 = getelementptr inbounds [16 x i8], [16 x i8]* %5, i64 0, i64 0
%10 = bitcast <2 x i64>* %6 to i8*
%11 = bitcast <2 x i64>* %7 to i8*
%12 = call i32 @memcpy(i8* %10, i8* %0, i32 16)
%13 = call i32 @memcpy(i8* %11, i8* %1, i32 16)
%14 = call i32 @memcpy(i8* %2, i8* %11, i32 16)
%15 = getelementptr inbounds i8, i8* %2, i64 16
%16 = getelementptr inbounds [32 x i8], [32 x i8]* %4, i64 0, i64 16
%17 = call i32 @memcpy(i8* %15, i8* %16, i32 16)
%18 = getelementptr inbounds i8, i8* %2, i64 32
%19 = call i32 @memcpy(i8* %18, i8* %8, i32 16)
%20 = load <2 x i64>, <2 x i64>* %6
%21 = getelementptr inbounds i8, i8* %2, i64 48
%22 = bitcast [32 x i8]* %4 to <2 x i64>*
%23 = load <2 x i64>, <2 x i64>* %22
%24 = xor <2 x i64> %23, %20
%25 = bitcast i8* %21 to <2 x i64>*
store <2 x i64> %24, <2 x i64>* %25
%26 = getelementptr inbounds i8, i8* %2, i64 64
%27 = bitcast i8* %16 to <2 x i64>*
%28 = load <2 x i64>, <2 x i64>* %27
%29 = xor <2 x i64> %28, %20
%30 = bitcast i8* %26 to <2 x i64>*
store <2 x i64> %29, <2 x i64>* %30
%31 = bitcast i8* %2 to <2 x i64>*
%32 = load <2 x i64>, <2 x i64>* %31
%33 = xor <2 x i64> %32, %20
%34 = bitcast i8* %2 to <2 x i64>*
store <2 x i64> %33, <2 x i64>* %34
%35 = load <2 x i64>, <2 x i64>* %7
%36 = xor <2 x i64> %35, %20
store <2 x i64> %36, <2 x i64>* %6
%37 = bitcast i8* %2 to <2 x i64>*
%38 = bitcast i8* %2 to <2 x i64>*
br label %39
39: ; preds = %3, %39
%40 = phi i32 [ 0, %3 ], [ %52, %39 ]
%41 = call i32 @memcpy(i8* %9, i8* %26, i32 16)
%42 = call i32 @AESROUND(i8* %26, i8* %21, i8* %26)
%43 = call i32 @AESROUND(i8* %21, i8* %18, i8* %21)
%44 = call i32 @AESROUND(i8* %18, i8* %15, i8* %18)
%45 = call i32 @AESROUND(i8* %15, i8* %2, i8* %15)
%46 = call i32 @AESROUND(i8* %2, i8* %9, i8* %2)
%47 = load <2 x i64>, <2 x i64>* %6
%48 = load <2 x i64>, <2 x i64>* %7
%49 = xor <2 x i64> %48, %47
store <2 x i64> %49, <2 x i64>* %6
%50 = load <2 x i64>, <2 x i64>* %37
%51 = xor <2 x i64> %50, %49
store <2 x i64> %51, <2 x i64>* %38
%52 = add nuw nsw i32 %40, 1
%53 = icmp eq i32 %52, 10
br i1 %53, label %54, label %39
54: ; preds = %39
ret void
}