#define NULL ((void *)0)
typedef unsigned long size_t; // Customize by platform.
typedef long intptr_t;
typedef unsigned long uintptr_t;
typedef long scalar_t__; // Either arithmetic or pointer type.
/* By default, we understand bool (as a convenience). */
typedef int bool;
#define false 0
#define true 1

/* Forward declarations */

/* Type definitions */

/* Variables and functions */
int /*<<< orphan*/ AESROUND(unsigned char *, unsigned char *, unsigned char *);
int /*<<< orphan*/ memcpy(unsigned char *, unsigned char *, int);
void aegis128L_dec_aut_step(unsigned char *plaintextblk,
                            const unsigned char *ciphertextblk,
                            unsigned char *state) {
  unsigned char tmp[16];
  {
    ((unsigned long long *)(plaintextblk))[0] =
        ((unsigned long long *)(state + 32))[0] &
        ((unsigned long long *)(state + 48))[0];
    ((unsigned long long *)(plaintextblk))[1] =
        ((unsigned long long *)(state + 32))[1] &
        ((unsigned long long *)(state + 48))[1];
  };
  {
    ((unsigned long long *)(plaintextblk))[0] =
        ((unsigned long long *)(plaintextblk))[0] ^
        ((unsigned long long *)(state + 16))[0];
    ((unsigned long long *)(plaintextblk))[1] =
        ((unsigned long long *)(plaintextblk))[1] ^
        ((unsigned long long *)(state + 16))[1];
  };
  {
    ((unsigned long long *)(plaintextblk))[0] =
        ((unsigned long long *)(plaintextblk))[0] ^
        ((unsigned long long *)(state + 96))[0];
    ((unsigned long long *)(plaintextblk))[1] =
        ((unsigned long long *)(plaintextblk))[1] ^
        ((unsigned long long *)(state + 96))[1];
  };
  {
    ((unsigned long long *)(plaintextblk))[0] =
        ((unsigned long long *)(plaintextblk))[0] ^
        ((unsigned long long *)(ciphertextblk))[0];
    ((unsigned long long *)(plaintextblk))[1] =
        ((unsigned long long *)(plaintextblk))[1] ^
        ((unsigned long long *)(ciphertextblk))[1];
  };
  {
    ((unsigned long long *)(plaintextblk + 16))[0] =
        ((unsigned long long *)(state + 96))[0] &
        ((unsigned long long *)(state + 112))[0];
    ((unsigned long long *)(plaintextblk + 16))[1] =
        ((unsigned long long *)(state + 96))[1] &
        ((unsigned long long *)(state + 112))[1];
  };
  {
    ((unsigned long long *)(plaintextblk + 16))[0] =
        ((unsigned long long *)(plaintextblk + 16))[0] ^
        ((unsigned long long *)(state + 32))[0];
    ((unsigned long long *)(plaintextblk + 16))[1] =
        ((unsigned long long *)(plaintextblk + 16))[1] ^
        ((unsigned long long *)(state + 32))[1];
  };
  {
    ((unsigned long long *)(plaintextblk + 16))[0] =
        ((unsigned long long *)(plaintextblk + 16))[0] ^
        ((unsigned long long *)(state + 80))[0];
    ((unsigned long long *)(plaintextblk + 16))[1] =
        ((unsigned long long *)(plaintextblk + 16))[1] ^
        ((unsigned long long *)(state + 80))[1];
  };
  {
    ((unsigned long long *)(plaintextblk + 16))[0] =
        ((unsigned long long *)(plaintextblk + 16))[0] ^
        ((unsigned long long *)(ciphertextblk + 16))[0];
    ((unsigned long long *)(plaintextblk + 16))[1] =
        ((unsigned long long *)(plaintextblk + 16))[1] ^
        ((unsigned long long *)(ciphertextblk + 16))[1];
  };
  memcpy(tmp, state + 112, 16);
  AESROUND(state + 112, state + 96, state + 112);
  AESROUND(state + 96, state + 80, state + 96);
  AESROUND(state + 80, state + 64, state + 80);
  AESROUND(state + 64, state + 48, state + 64);
  AESROUND(state + 48, state + 32, state + 48);
  AESROUND(state + 32, state + 16, state + 32);
  AESROUND(state + 16, state + 0, state + 16);
  AESROUND(state + 0, tmp, state + 0);
  {
    ((unsigned long long *)(state))[0] =
        ((unsigned long long *)(state))[0] ^
        ((unsigned long long *)(plaintextblk))[0];
    ((unsigned long long *)(state))[1] =
        ((unsigned long long *)(state))[1] ^
        ((unsigned long long *)(plaintextblk))[1];
  };
  {
    ((unsigned long long *)(state + 64))[0] =
        ((unsigned long long *)(state + 64))[0] ^
        ((unsigned long long *)(plaintextblk + 16))[0];
    ((unsigned long long *)(state + 64))[1] =
        ((unsigned long long *)(state + 64))[1] ^
        ((unsigned long long *)(plaintextblk + 16))[1];
  };
}


x86 assembly (clang, -O0):
<aegis128L_dec_aut_step>:
push   %rbp
mov    %rsp,%rbp
sub    $0x30,%rsp
mov    %rdi,-0x8(%rbp)
mov    %rsi,-0x10(%rbp)
mov    %rdx,-0x18(%rbp)
mov    -0x18(%rbp),%rax
mov    0x20(%rax),%rcx
mov    -0x18(%rbp),%rax
and    0x30(%rax),%rcx
mov    -0x8(%rbp),%rax
mov    %rcx,(%rax)
mov    -0x18(%rbp),%rax
mov    0x28(%rax),%rcx
mov    -0x18(%rbp),%rax
and    0x38(%rax),%rcx
mov    -0x8(%rbp),%rax
mov    %rcx,0x8(%rax)
mov    -0x8(%rbp),%rax
mov    (%rax),%rcx
mov    -0x18(%rbp),%rax
xor    0x10(%rax),%rcx
mov    -0x8(%rbp),%rax
mov    %rcx,(%rax)
mov    -0x8(%rbp),%rax
mov    0x8(%rax),%rcx
mov    -0x18(%rbp),%rax
xor    0x18(%rax),%rcx
mov    -0x8(%rbp),%rax
mov    %rcx,0x8(%rax)
mov    -0x8(%rbp),%rax
mov    (%rax),%rcx
mov    -0x18(%rbp),%rax
xor    0x60(%rax),%rcx
mov    -0x8(%rbp),%rax
mov    %rcx,(%rax)
mov    -0x8(%rbp),%rax
mov    0x8(%rax),%rcx
mov    -0x18(%rbp),%rax
xor    0x68(%rax),%rcx
mov    -0x8(%rbp),%rax
mov    %rcx,0x8(%rax)
mov    -0x8(%rbp),%rax
mov    (%rax),%rcx
mov    -0x10(%rbp),%rax
xor    (%rax),%rcx
mov    -0x8(%rbp),%rax
mov    %rcx,(%rax)
mov    -0x8(%rbp),%rax
mov    0x8(%rax),%rcx
mov    -0x10(%rbp),%rax
xor    0x8(%rax),%rcx
mov    -0x8(%rbp),%rax
mov    %rcx,0x8(%rax)
mov    -0x18(%rbp),%rax
mov    0x60(%rax),%rcx
mov    -0x18(%rbp),%rax
and    0x70(%rax),%rcx
mov    -0x8(%rbp),%rax
mov    %rcx,0x10(%rax)
mov    -0x18(%rbp),%rax
mov    0x68(%rax),%rcx
mov    -0x18(%rbp),%rax
and    0x78(%rax),%rcx
mov    -0x8(%rbp),%rax
mov    %rcx,0x18(%rax)
mov    -0x8(%rbp),%rax
mov    0x10(%rax),%rcx
mov    -0x18(%rbp),%rax
xor    0x20(%rax),%rcx
mov    -0x8(%rbp),%rax
mov    %rcx,0x10(%rax)
mov    -0x8(%rbp),%rax
mov    0x18(%rax),%rcx
mov    -0x18(%rbp),%rax
xor    0x28(%rax),%rcx
mov    -0x8(%rbp),%rax
mov    %rcx,0x18(%rax)
mov    -0x8(%rbp),%rax
mov    0x10(%rax),%rcx
mov    -0x18(%rbp),%rax
xor    0x50(%rax),%rcx
mov    -0x8(%rbp),%rax
mov    %rcx,0x10(%rax)
mov    -0x8(%rbp),%rax
mov    0x18(%rax),%rcx
mov    -0x18(%rbp),%rax
xor    0x58(%rax),%rcx
mov    -0x8(%rbp),%rax
mov    %rcx,0x18(%rax)
mov    -0x8(%rbp),%rax
mov    0x10(%rax),%rcx
mov    -0x10(%rbp),%rax
xor    0x10(%rax),%rcx
mov    -0x8(%rbp),%rax
mov    %rcx,0x10(%rax)
mov    -0x8(%rbp),%rax
mov    0x18(%rax),%rcx
mov    -0x10(%rbp),%rax
xor    0x18(%rax),%rcx
mov    -0x8(%rbp),%rax
mov    %rcx,0x18(%rax)
lea    -0x30(%rbp),%rdi
mov    -0x18(%rbp),%rsi
add    $0x70,%rsi
mov    $0x10,%edx
call   1030 <memcpy@plt>
mov    -0x18(%rbp),%rdi
add    $0x70,%rdi
mov    -0x18(%rbp),%rsi
add    $0x60,%rsi
mov    -0x18(%rbp),%rdx
add    $0x70,%rdx
call   1040 <AESROUND@plt>
mov    -0x18(%rbp),%rdi
add    $0x60,%rdi
mov    -0x18(%rbp),%rsi
add    $0x50,%rsi
mov    -0x18(%rbp),%rdx
add    $0x60,%rdx
call   1040 <AESROUND@plt>
mov    -0x18(%rbp),%rdi
add    $0x50,%rdi
mov    -0x18(%rbp),%rsi
add    $0x40,%rsi
mov    -0x18(%rbp),%rdx
add    $0x50,%rdx
call   1040 <AESROUND@plt>
mov    -0x18(%rbp),%rdi
add    $0x40,%rdi
mov    -0x18(%rbp),%rsi
add    $0x30,%rsi
mov    -0x18(%rbp),%rdx
add    $0x40,%rdx
call   1040 <AESROUND@plt>
mov    -0x18(%rbp),%rdi
add    $0x30,%rdi
mov    -0x18(%rbp),%rsi
add    $0x20,%rsi
mov    -0x18(%rbp),%rdx
add    $0x30,%rdx
call   1040 <AESROUND@plt>
mov    -0x18(%rbp),%rdi
add    $0x20,%rdi
mov    -0x18(%rbp),%rsi
add    $0x10,%rsi
mov    -0x18(%rbp),%rdx
add    $0x20,%rdx
call   1040 <AESROUND@plt>
mov    -0x18(%rbp),%rdi
add    $0x10,%rdi
mov    -0x18(%rbp),%rsi
mov    -0x18(%rbp),%rdx
add    $0x10,%rdx
call   1040 <AESROUND@plt>
mov    -0x18(%rbp),%rdi
lea    -0x30(%rbp),%rsi
mov    -0x18(%rbp),%rdx
call   1040 <AESROUND@plt>
mov    -0x18(%rbp),%rax
mov    (%rax),%rcx
mov    -0x8(%rbp),%rax
xor    (%rax),%rcx
mov    -0x18(%rbp),%rax
mov    %rcx,(%rax)
mov    -0x18(%rbp),%rax
mov    0x8(%rax),%rcx
mov    -0x8(%rbp),%rax
xor    0x8(%rax),%rcx
mov    -0x18(%rbp),%rax
mov    %rcx,0x8(%rax)
mov    -0x18(%rbp),%rax
mov    0x40(%rax),%rcx
mov    -0x8(%rbp),%rax
xor    0x10(%rax),%rcx
mov    -0x18(%rbp),%rax
mov    %rcx,0x40(%rax)
mov    -0x18(%rbp),%rax
mov    0x48(%rax),%rcx
mov    -0x8(%rbp),%rax
xor    0x18(%rax),%rcx
mov    -0x18(%rbp),%rax
mov    %rcx,0x48(%rax)
add    $0x30,%rsp
pop    %rbp
ret

x86 assembly (clang, -O2):
<aegis128L_dec_aut_step>:
push   %rbp
push   %r15
push   %r14
push   %r13
push   %r12
push   %rbx
sub    $0x28,%rsp
mov    %rdx,%rbx
mov    %rdi,%r14
mov    0x30(%rdx),%rax
and    0x20(%rdx),%rax
mov    %rax,(%rdi)
mov    0x38(%rdx),%rcx
and    0x28(%rdx),%rcx
mov    %rcx,0x8(%rdi)
xor    0x10(%rdx),%rax
mov    %rax,(%rdi)
xor    0x18(%rdx),%rcx
mov    %rcx,0x8(%rdi)
xor    0x60(%rdx),%rax
mov    %rax,(%rdi)
xor    0x68(%rdx),%rcx
mov    %rcx,0x8(%rdi)
xor    (%rsi),%rax
add    $0x20,%rdx
mov    %rdx,0x8(%rsp)
mov    %rax,(%rdi)
xor    0x8(%rsi),%rcx
mov    %rcx,0x8(%rdi)
mov    0x70(%rbx),%rax
and    0x60(%rbx),%rax
mov    %rax,0x10(%rdi)
mov    0x78(%rbx),%rcx
and    0x68(%rbx),%rcx
lea    0x30(%rbx),%r13
mov    %rcx,0x18(%rdi)
xor    0x20(%rbx),%rax
lea    0x10(%rbx),%rdx
mov    %rdx,(%rsp)
mov    %rax,0x10(%rdi)
xor    0x28(%rbx),%rcx
lea    0x60(%rbx),%rbp
mov    %rcx,0x18(%rdi)
xor    0x50(%rbx),%rax
lea    0x70(%rbx),%r12
mov    %rax,0x10(%rdi)
xor    0x58(%rbx),%rcx
lea    0x50(%rbx),%r15
mov    %rcx,0x18(%rdi)
xor    0x10(%rsi),%rax
mov    %rax,0x10(%rdi)
xor    0x18(%rsi),%rcx
mov    %rcx,0x18(%rdi)
lea    0x10(%rsp),%rdi
mov    %r12,%rsi
mov    $0x10,%edx
call   1030 <memcpy@plt>
mov    %r12,%rdi
mov    %rbp,%rsi
mov    %r12,%rdx
call   1040 <AESROUND@plt>
mov    %rbp,%rdi
mov    %r15,%rsi
mov    %rbp,%rdx
call   1040 <AESROUND@plt>
lea    0x40(%rbx),%rbp
mov    %r15,%rdi
mov    %rbp,%rsi
mov    %r15,%rdx
call   1040 <AESROUND@plt>
mov    %rbp,%rdi
mov    %r13,%rsi
mov    %rbp,%rdx
call   1040 <AESROUND@plt>
mov    %r13,%rdi
mov    0x8(%rsp),%rbp
mov    %rbp,%rsi
mov    %r13,%rdx
call   1040 <AESROUND@plt>
mov    %rbp,%rdi
mov    %rbp,%rdx
mov    (%rsp),%rbp
mov    %rbp,%rsi
call   1040 <AESROUND@plt>
mov    %rbp,%rdi
mov    %rbx,%rsi
mov    %rbp,%rdx
call   1040 <AESROUND@plt>
mov    %rbx,%rdi
lea    0x10(%rsp),%rsi
mov    %rbx,%rdx
call   1040 <AESROUND@plt>
mov    (%r14),%rax
xor    %rax,(%rbx)
mov    0x8(%r14),%rax
xor    %rax,0x8(%rbx)
mov    0x10(%r14),%rax
xor    %rax,0x40(%rbx)
mov    0x18(%r14),%rax
xor    %rax,0x48(%rbx)
add    $0x28,%rsp
pop    %rbx
pop    %r12
pop    %r13
pop    %r14
pop    %r15
pop    %rbp
ret

LLVM IR (-O0):
define void @aegis128L_dec_aut_step(i8* %0, i8* %1, i8* %2) {
%4 = alloca i8*
%5 = alloca i8*
%6 = alloca i8*
%7 = alloca [16 x i8]
store i8* %0, i8** %4
store i8* %1, i8** %5
store i8* %2, i8** %6
%8 = load i8*, i8** %6
%9 = getelementptr inbounds i8, i8* %8, i64 32
%10 = bitcast i8* %9 to i64*
%11 = getelementptr inbounds i64, i64* %10, i64 0
%12 = load i64, i64* %11
%13 = load i8*, i8** %6
%14 = getelementptr inbounds i8, i8* %13, i64 48
%15 = bitcast i8* %14 to i64*
%16 = getelementptr inbounds i64, i64* %15, i64 0
%17 = load i64, i64* %16
%18 = and i64 %12, %17
%19 = load i8*, i8** %4
%20 = bitcast i8* %19 to i64*
%21 = getelementptr inbounds i64, i64* %20, i64 0
store i64 %18, i64* %21
%22 = load i8*, i8** %6
%23 = getelementptr inbounds i8, i8* %22, i64 32
%24 = bitcast i8* %23 to i64*
%25 = getelementptr inbounds i64, i64* %24, i64 1
%26 = load i64, i64* %25
%27 = load i8*, i8** %6
%28 = getelementptr inbounds i8, i8* %27, i64 48
%29 = bitcast i8* %28 to i64*
%30 = getelementptr inbounds i64, i64* %29, i64 1
%31 = load i64, i64* %30
%32 = and i64 %26, %31
%33 = load i8*, i8** %4
%34 = bitcast i8* %33 to i64*
%35 = getelementptr inbounds i64, i64* %34, i64 1
store i64 %32, i64* %35
%36 = load i8*, i8** %4
%37 = bitcast i8* %36 to i64*
%38 = getelementptr inbounds i64, i64* %37, i64 0
%39 = load i64, i64* %38
%40 = load i8*, i8** %6
%41 = getelementptr inbounds i8, i8* %40, i64 16
%42 = bitcast i8* %41 to i64*
%43 = getelementptr inbounds i64, i64* %42, i64 0
%44 = load i64, i64* %43
%45 = xor i64 %39, %44
%46 = load i8*, i8** %4
%47 = bitcast i8* %46 to i64*
%48 = getelementptr inbounds i64, i64* %47, i64 0
store i64 %45, i64* %48
%49 = load i8*, i8** %4
%50 = bitcast i8* %49 to i64*
%51 = getelementptr inbounds i64, i64* %50, i64 1
%52 = load i64, i64* %51
%53 = load i8*, i8** %6
%54 = getelementptr inbounds i8, i8* %53, i64 16
%55 = bitcast i8* %54 to i64*
%56 = getelementptr inbounds i64, i64* %55, i64 1
%57 = load i64, i64* %56
%58 = xor i64 %52, %57
%59 = load i8*, i8** %4
%60 = bitcast i8* %59 to i64*
%61 = getelementptr inbounds i64, i64* %60, i64 1
store i64 %58, i64* %61
%62 = load i8*, i8** %4
%63 = bitcast i8* %62 to i64*
%64 = getelementptr inbounds i64, i64* %63, i64 0
%65 = load i64, i64* %64
%66 = load i8*, i8** %6
%67 = getelementptr inbounds i8, i8* %66, i64 96
%68 = bitcast i8* %67 to i64*
%69 = getelementptr inbounds i64, i64* %68, i64 0
%70 = load i64, i64* %69
%71 = xor i64 %65, %70
%72 = load i8*, i8** %4
%73 = bitcast i8* %72 to i64*
%74 = getelementptr inbounds i64, i64* %73, i64 0
store i64 %71, i64* %74
%75 = load i8*, i8** %4
%76 = bitcast i8* %75 to i64*
%77 = getelementptr inbounds i64, i64* %76, i64 1
%78 = load i64, i64* %77
%79 = load i8*, i8** %6
%80 = getelementptr inbounds i8, i8* %79, i64 96
%81 = bitcast i8* %80 to i64*
%82 = getelementptr inbounds i64, i64* %81, i64 1
%83 = load i64, i64* %82
%84 = xor i64 %78, %83
%85 = load i8*, i8** %4
%86 = bitcast i8* %85 to i64*
%87 = getelementptr inbounds i64, i64* %86, i64 1
store i64 %84, i64* %87
%88 = load i8*, i8** %4
%89 = bitcast i8* %88 to i64*
%90 = getelementptr inbounds i64, i64* %89, i64 0
%91 = load i64, i64* %90
%92 = load i8*, i8** %5
%93 = bitcast i8* %92 to i64*
%94 = getelementptr inbounds i64, i64* %93, i64 0
%95 = load i64, i64* %94
%96 = xor i64 %91, %95
%97 = load i8*, i8** %4
%98 = bitcast i8* %97 to i64*
%99 = getelementptr inbounds i64, i64* %98, i64 0
store i64 %96, i64* %99
%100 = load i8*, i8** %4
%101 = bitcast i8* %100 to i64*
%102 = getelementptr inbounds i64, i64* %101, i64 1
%103 = load i64, i64* %102
%104 = load i8*, i8** %5
%105 = bitcast i8* %104 to i64*
%106 = getelementptr inbounds i64, i64* %105, i64 1
%107 = load i64, i64* %106
%108 = xor i64 %103, %107
%109 = load i8*, i8** %4
%110 = bitcast i8* %109 to i64*
%111 = getelementptr inbounds i64, i64* %110, i64 1
store i64 %108, i64* %111
%112 = load i8*, i8** %6
%113 = getelementptr inbounds i8, i8* %112, i64 96
%114 = bitcast i8* %113 to i64*
%115 = getelementptr inbounds i64, i64* %114, i64 0
%116 = load i64, i64* %115
%117 = load i8*, i8** %6
%118 = getelementptr inbounds i8, i8* %117, i64 112
%119 = bitcast i8* %118 to i64*
%120 = getelementptr inbounds i64, i64* %119, i64 0
%121 = load i64, i64* %120
%122 = and i64 %116, %121
%123 = load i8*, i8** %4
%124 = getelementptr inbounds i8, i8* %123, i64 16
%125 = bitcast i8* %124 to i64*
%126 = getelementptr inbounds i64, i64* %125, i64 0
store i64 %122, i64* %126
%127 = load i8*, i8** %6
%128 = getelementptr inbounds i8, i8* %127, i64 96
%129 = bitcast i8* %128 to i64*
%130 = getelementptr inbounds i64, i64* %129, i64 1
%131 = load i64, i64* %130
%132 = load i8*, i8** %6
%133 = getelementptr inbounds i8, i8* %132, i64 112
%134 = bitcast i8* %133 to i64*
%135 = getelementptr inbounds i64, i64* %134, i64 1
%136 = load i64, i64* %135
%137 = and i64 %131, %136
%138 = load i8*, i8** %4
%139 = getelementptr inbounds i8, i8* %138, i64 16
%140 = bitcast i8* %139 to i64*
%141 = getelementptr inbounds i64, i64* %140, i64 1
store i64 %137, i64* %141
%142 = load i8*, i8** %4
%143 = getelementptr inbounds i8, i8* %142, i64 16
%144 = bitcast i8* %143 to i64*
%145 = getelementptr inbounds i64, i64* %144, i64 0
%146 = load i64, i64* %145
%147 = load i8*, i8** %6
%148 = getelementptr inbounds i8, i8* %147, i64 32
%149 = bitcast i8* %148 to i64*
%150 = getelementptr inbounds i64, i64* %149, i64 0
%151 = load i64, i64* %150
%152 = xor i64 %146, %151
%153 = load i8*, i8** %4
%154 = getelementptr inbounds i8, i8* %153, i64 16
%155 = bitcast i8* %154 to i64*
%156 = getelementptr inbounds i64, i64* %155, i64 0
store i64 %152, i64* %156
%157 = load i8*, i8** %4
%158 = getelementptr inbounds i8, i8* %157, i64 16
%159 = bitcast i8* %158 to i64*
%160 = getelementptr inbounds i64, i64* %159, i64 1
%161 = load i64, i64* %160
%162 = load i8*, i8** %6
%163 = getelementptr inbounds i8, i8* %162, i64 32
%164 = bitcast i8* %163 to i64*
%165 = getelementptr inbounds i64, i64* %164, i64 1
%166 = load i64, i64* %165
%167 = xor i64 %161, %166
%168 = load i8*, i8** %4
%169 = getelementptr inbounds i8, i8* %168, i64 16
%170 = bitcast i8* %169 to i64*
%171 = getelementptr inbounds i64, i64* %170, i64 1
store i64 %167, i64* %171
%172 = load i8*, i8** %4
%173 = getelementptr inbounds i8, i8* %172, i64 16
%174 = bitcast i8* %173 to i64*
%175 = getelementptr inbounds i64, i64* %174, i64 0
%176 = load i64, i64* %175
%177 = load i8*, i8** %6
%178 = getelementptr inbounds i8, i8* %177, i64 80
%179 = bitcast i8* %178 to i64*
%180 = getelementptr inbounds i64, i64* %179, i64 0
%181 = load i64, i64* %180
%182 = xor i64 %176, %181
%183 = load i8*, i8** %4
%184 = getelementptr inbounds i8, i8* %183, i64 16
%185 = bitcast i8* %184 to i64*
%186 = getelementptr inbounds i64, i64* %185, i64 0
store i64 %182, i64* %186
%187 = load i8*, i8** %4
%188 = getelementptr inbounds i8, i8* %187, i64 16
%189 = bitcast i8* %188 to i64*
%190 = getelementptr inbounds i64, i64* %189, i64 1
%191 = load i64, i64* %190
%192 = load i8*, i8** %6
%193 = getelementptr inbounds i8, i8* %192, i64 80
%194 = bitcast i8* %193 to i64*
%195 = getelementptr inbounds i64, i64* %194, i64 1
%196 = load i64, i64* %195
%197 = xor i64 %191, %196
%198 = load i8*, i8** %4
%199 = getelementptr inbounds i8, i8* %198, i64 16
%200 = bitcast i8* %199 to i64*
%201 = getelementptr inbounds i64, i64* %200, i64 1
store i64 %197, i64* %201
%202 = load i8*, i8** %4
%203 = getelementptr inbounds i8, i8* %202, i64 16
%204 = bitcast i8* %203 to i64*
%205 = getelementptr inbounds i64, i64* %204, i64 0
%206 = load i64, i64* %205
%207 = load i8*, i8** %5
%208 = getelementptr inbounds i8, i8* %207, i64 16
%209 = bitcast i8* %208 to i64*
%210 = getelementptr inbounds i64, i64* %209, i64 0
%211 = load i64, i64* %210
%212 = xor i64 %206, %211
%213 = load i8*, i8** %4
%214 = getelementptr inbounds i8, i8* %213, i64 16
%215 = bitcast i8* %214 to i64*
%216 = getelementptr inbounds i64, i64* %215, i64 0
store i64 %212, i64* %216
%217 = load i8*, i8** %4
%218 = getelementptr inbounds i8, i8* %217, i64 16
%219 = bitcast i8* %218 to i64*
%220 = getelementptr inbounds i64, i64* %219, i64 1
%221 = load i64, i64* %220
%222 = load i8*, i8** %5
%223 = getelementptr inbounds i8, i8* %222, i64 16
%224 = bitcast i8* %223 to i64*
%225 = getelementptr inbounds i64, i64* %224, i64 1
%226 = load i64, i64* %225
%227 = xor i64 %221, %226
%228 = load i8*, i8** %4
%229 = getelementptr inbounds i8, i8* %228, i64 16
%230 = bitcast i8* %229 to i64*
%231 = getelementptr inbounds i64, i64* %230, i64 1
store i64 %227, i64* %231
%232 = getelementptr inbounds [16 x i8], [16 x i8]* %7, i64 0, i64 0
%233 = load i8*, i8** %6
%234 = getelementptr inbounds i8, i8* %233, i64 112
%235 = call i32 @memcpy(i8* %232, i8* %234, i32 16)
%236 = load i8*, i8** %6
%237 = getelementptr inbounds i8, i8* %236, i64 112
%238 = load i8*, i8** %6
%239 = getelementptr inbounds i8, i8* %238, i64 96
%240 = load i8*, i8** %6
%241 = getelementptr inbounds i8, i8* %240, i64 112
%242 = call i32 @AESROUND(i8* %237, i8* %239, i8* %241)
%243 = load i8*, i8** %6
%244 = getelementptr inbounds i8, i8* %243, i64 96
%245 = load i8*, i8** %6
%246 = getelementptr inbounds i8, i8* %245, i64 80
%247 = load i8*, i8** %6
%248 = getelementptr inbounds i8, i8* %247, i64 96
%249 = call i32 @AESROUND(i8* %244, i8* %246, i8* %248)
%250 = load i8*, i8** %6
%251 = getelementptr inbounds i8, i8* %250, i64 80
%252 = load i8*, i8** %6
%253 = getelementptr inbounds i8, i8* %252, i64 64
%254 = load i8*, i8** %6
%255 = getelementptr inbounds i8, i8* %254, i64 80
%256 = call i32 @AESROUND(i8* %251, i8* %253, i8* %255)
%257 = load i8*, i8** %6
%258 = getelementptr inbounds i8, i8* %257, i64 64
%259 = load i8*, i8** %6
%260 = getelementptr inbounds i8, i8* %259, i64 48
%261 = load i8*, i8** %6
%262 = getelementptr inbounds i8, i8* %261, i64 64
%263 = call i32 @AESROUND(i8* %258, i8* %260, i8* %262)
%264 = load i8*, i8** %6
%265 = getelementptr inbounds i8, i8* %264, i64 48
%266 = load i8*, i8** %6
%267 = getelementptr inbounds i8, i8* %266, i64 32
%268 = load i8*, i8** %6
%269 = getelementptr inbounds i8, i8* %268, i64 48
%270 = call i32 @AESROUND(i8* %265, i8* %267, i8* %269)
%271 = load i8*, i8** %6
%272 = getelementptr inbounds i8, i8* %271, i64 32
%273 = load i8*, i8** %6
%274 = getelementptr inbounds i8, i8* %273, i64 16
%275 = load i8*, i8** %6
%276 = getelementptr inbounds i8, i8* %275, i64 32
%277 = call i32 @AESROUND(i8* %272, i8* %274, i8* %276)
%278 = load i8*, i8** %6
%279 = getelementptr inbounds i8, i8* %278, i64 16
%280 = load i8*, i8** %6
%281 = getelementptr inbounds i8, i8* %280, i64 0
%282 = load i8*, i8** %6
%283 = getelementptr inbounds i8, i8* %282, i64 16
%284 = call i32 @AESROUND(i8* %279, i8* %281, i8* %283)
%285 = load i8*, i8** %6
%286 = getelementptr inbounds i8, i8* %285, i64 0
%287 = getelementptr inbounds [16 x i8], [16 x i8]* %7, i64 0, i64 0
%288 = load i8*, i8** %6
%289 = getelementptr inbounds i8, i8* %288, i64 0
%290 = call i32 @AESROUND(i8* %286, i8* %287, i8* %289)
%291 = load i8*, i8** %6
%292 = bitcast i8* %291 to i64*
%293 = getelementptr inbounds i64, i64* %292, i64 0
%294 = load i64, i64* %293
%295 = load i8*, i8** %4
%296 = bitcast i8* %295 to i64*
%297 = getelementptr inbounds i64, i64* %296, i64 0
%298 = load i64, i64* %297
%299 = xor i64 %294, %298
%300 = load i8*, i8** %6
%301 = bitcast i8* %300 to i64*
%302 = getelementptr inbounds i64, i64* %301, i64 0
store i64 %299, i64* %302
%303 = load i8*, i8** %6
%304 = bitcast i8* %303 to i64*
%305 = getelementptr inbounds i64, i64* %304, i64 1
%306 = load i64, i64* %305
%307 = load i8*, i8** %4
%308 = bitcast i8* %307 to i64*
%309 = getelementptr inbounds i64, i64* %308, i64 1
%310 = load i64, i64* %309
%311 = xor i64 %306, %310
%312 = load i8*, i8** %6
%313 = bitcast i8* %312 to i64*
%314 = getelementptr inbounds i64, i64* %313, i64 1
store i64 %311, i64* %314
%315 = load i8*, i8** %6
%316 = getelementptr inbounds i8, i8* %315, i64 64
%317 = bitcast i8* %316 to i64*
%318 = getelementptr inbounds i64, i64* %317, i64 0
%319 = load i64, i64* %318
%320 = load i8*, i8** %4
%321 = getelementptr inbounds i8, i8* %320, i64 16
%322 = bitcast i8* %321 to i64*
%323 = getelementptr inbounds i64, i64* %322, i64 0
%324 = load i64, i64* %323
%325 = xor i64 %319, %324
%326 = load i8*, i8** %6
%327 = getelementptr inbounds i8, i8* %326, i64 64
%328 = bitcast i8* %327 to i64*
%329 = getelementptr inbounds i64, i64* %328, i64 0
store i64 %325, i64* %329
%330 = load i8*, i8** %6
%331 = getelementptr inbounds i8, i8* %330, i64 64
%332 = bitcast i8* %331 to i64*
%333 = getelementptr inbounds i64, i64* %332, i64 1
%334 = load i64, i64* %333
%335 = load i8*, i8** %4
%336 = getelementptr inbounds i8, i8* %335, i64 16
%337 = bitcast i8* %336 to i64*
%338 = getelementptr inbounds i64, i64* %337, i64 1
%339 = load i64, i64* %338
%340 = xor i64 %334, %339
%341 = load i8*, i8** %6
%342 = getelementptr inbounds i8, i8* %341, i64 64
%343 = bitcast i8* %342 to i64*
%344 = getelementptr inbounds i64, i64* %343, i64 1
store i64 %340, i64* %344
ret void
}

LLVM IR (-O2):
define void @aegis128L_dec_aut_step(i8* nocapture %0, i8* nocapture %1, i8* %2) {
%4 = alloca [16 x i8]
%5 = getelementptr inbounds [16 x i8], [16 x i8]* %4, i64 0, i64 0
%6 = getelementptr inbounds i8, i8* %2, i64 32
%7 = bitcast i8* %6 to i64*
%8 = load i64, i64* %7
%9 = getelementptr inbounds i8, i8* %2, i64 48
%10 = bitcast i8* %9 to i64*
%11 = load i64, i64* %10
%12 = and i64 %11, %8
%13 = bitcast i8* %0 to i64*
store i64 %12, i64* %13
%14 = getelementptr inbounds i8, i8* %2, i64 40
%15 = bitcast i8* %14 to i64*
%16 = load i64, i64* %15
%17 = getelementptr inbounds i8, i8* %2, i64 56
%18 = bitcast i8* %17 to i64*
%19 = load i64, i64* %18
%20 = and i64 %19, %16
%21 = getelementptr inbounds i8, i8* %0, i64 8
%22 = bitcast i8* %21 to i64*
store i64 %20, i64* %22
%23 = getelementptr inbounds i8, i8* %2, i64 16
%24 = bitcast i8* %23 to i64*
%25 = load i64, i64* %24
%26 = xor i64 %25, %12
store i64 %26, i64* %13
%27 = getelementptr inbounds i8, i8* %2, i64 24
%28 = bitcast i8* %27 to i64*
%29 = load i64, i64* %28
%30 = xor i64 %29, %20
store i64 %30, i64* %22
%31 = getelementptr inbounds i8, i8* %2, i64 96
%32 = bitcast i8* %31 to i64*
%33 = load i64, i64* %32
%34 = xor i64 %33, %26
store i64 %34, i64* %13
%35 = getelementptr inbounds i8, i8* %2, i64 104
%36 = bitcast i8* %35 to i64*
%37 = load i64, i64* %36
%38 = xor i64 %37, %30
store i64 %38, i64* %22
%39 = bitcast i8* %1 to i64*
%40 = load i64, i64* %39
%41 = xor i64 %40, %34
store i64 %41, i64* %13
%42 = getelementptr inbounds i8, i8* %1, i64 8
%43 = bitcast i8* %42 to i64*
%44 = load i64, i64* %43
%45 = xor i64 %44, %38
store i64 %45, i64* %22
%46 = load i64, i64* %32
%47 = getelementptr inbounds i8, i8* %2, i64 112
%48 = bitcast i8* %47 to i64*
%49 = load i64, i64* %48
%50 = and i64 %49, %46
%51 = getelementptr inbounds i8, i8* %0, i64 16
%52 = bitcast i8* %51 to i64*
store i64 %50, i64* %52
%53 = load i64, i64* %36
%54 = getelementptr inbounds i8, i8* %2, i64 120
%55 = bitcast i8* %54 to i64*
%56 = load i64, i64* %55
%57 = and i64 %56, %53
%58 = getelementptr inbounds i8, i8* %0, i64 24
%59 = bitcast i8* %58 to i64*
store i64 %57, i64* %59
%60 = load i64, i64* %7
%61 = xor i64 %60, %50
store i64 %61, i64* %52
%62 = load i64, i64* %15
%63 = xor i64 %62, %57
store i64 %63, i64* %59
%64 = getelementptr inbounds i8, i8* %2, i64 80
%65 = bitcast i8* %64 to i64*
%66 = load i64, i64* %65
%67 = xor i64 %66, %61
store i64 %67, i64* %52
%68 = getelementptr inbounds i8, i8* %2, i64 88
%69 = bitcast i8* %68 to i64*
%70 = load i64, i64* %69
%71 = xor i64 %70, %63
store i64 %71, i64* %59
%72 = getelementptr inbounds i8, i8* %1, i64 16
%73 = bitcast i8* %72 to i64*
%74 = load i64, i64* %73
%75 = xor i64 %74, %67
store i64 %75, i64* %52
%76 = getelementptr inbounds i8, i8* %1, i64 24
%77 = bitcast i8* %76 to i64*
%78 = load i64, i64* %77
%79 = xor i64 %78, %71
store i64 %79, i64* %59
%80 = call i32 @memcpy(i8* %5, i8* %47, i32 16)
%81 = call i32 @AESROUND(i8* %47, i8* %31, i8* %47)
%82 = call i32 @AESROUND(i8* %31, i8* %64, i8* %31)
%83 = getelementptr inbounds i8, i8* %2, i64 64
%84 = call i32 @AESROUND(i8* %64, i8* %83, i8* %64)
%85 = call i32 @AESROUND(i8* %83, i8* %9, i8* %83)
%86 = call i32 @AESROUND(i8* %9, i8* %6, i8* %9)
%87 = call i32 @AESROUND(i8* %6, i8* %23, i8* %6)
%88 = call i32 @AESROUND(i8* %23, i8* %2, i8* %23)
%89 = call i32 @AESROUND(i8* %2, i8* %5, i8* %2)
%90 = bitcast i8* %2 to i64*
%91 = load i64, i64* %90
%92 = load i64, i64* %13
%93 = xor i64 %92, %91
store i64 %93, i64* %90
%94 = getelementptr inbounds i8, i8* %2, i64 8
%95 = bitcast i8* %94 to i64*
%96 = load i64, i64* %95
%97 = load i64, i64* %22
%98 = xor i64 %97, %96
store i64 %98, i64* %95
%99 = bitcast i8* %83 to i64*
%100 = load i64, i64* %99
%101 = load i64, i64* %52
%102 = xor i64 %101, %100
store i64 %102, i64* %99
%103 = getelementptr inbounds i8, i8* %2, i64 72
%104 = bitcast i8* %103 to i64*
%105 = load i64, i64* %104
%106 = load i64, i64* %59
%107 = xor i64 %106, %105
store i64 %107, i64* %104
ret void
}