#define NULL ((void *)0)
typedef unsigned long size_t; // Customize by platform.
typedef long intptr_t;
typedef unsigned long uintptr_t;
typedef long scalar_t__; // Either arithmetic or pointer type.
/* By default, we understand bool (as a convenience). */
typedef int bool;
#define false 0
#define true 1

/* Forward declarations */

/* Type definitions */

/* Variables and functions */
int /*<<< orphan*/ add(unsigned int *, unsigned int *, unsigned int *);
int /*<<< orphan*/ curve25519_select(unsigned int *, unsigned int *,
                                     unsigned int *, unsigned int *,
                                     unsigned int);
int /*<<< orphan*/ mult(unsigned int *, unsigned int *, unsigned int *);
int /*<<< orphan*/ mult121665(unsigned int *, unsigned int *);
int /*<<< orphan*/ square(unsigned int *, unsigned int *);
int /*<<< orphan*/ sub(unsigned int *, unsigned int *, unsigned int *);
void mainloop(unsigned int work[64], const unsigned char e[32]) {
  unsigned int xzm1[64];
  unsigned int xzm[64];
  unsigned int xzmb[64];
  unsigned int xzm1b[64];
  unsigned int xznb[64];
  unsigned int xzn1b[64];
  unsigned int a0[64];
  unsigned int a1[64];
  unsigned int b0[64];
  unsigned int b1[64];
  unsigned int c1[64];
  unsigned int r[32];
  unsigned int s[32];
  unsigned int t[32];
  unsigned int u[32];
  unsigned int i;
  unsigned int j;
  unsigned int b;
  int pos;
  for (j = 0; j < 32; ++j)
    xzm1[j] = work[j];
  xzm1[32] = 1;
  for (j = 33; j < 64; ++j)
    xzm1[j] = 0;
  xzm[0] = 1;
  for (j = 1; j < 64; ++j)
    xzm[j] = 0;
  for (pos = 254; pos >= 0; --pos) {
    b = e[pos / 8] >> (pos & 7);
    b &= 1;
    curve25519_select(xzmb, xzm1b, xzm, xzm1, b);
    add(a0, xzmb, xzmb + 32);
    sub(a0 + 32, xzmb, xzmb + 32);
    add(a1, xzm1b, xzm1b + 32);
    sub(a1 + 32, xzm1b, xzm1b + 32);
    square(b0, a0);
    square(b0 + 32, a0 + 32);
    mult(b1, a1, a0 + 32);
    mult(b1 + 32, a1 + 32, a0);
    add(c1, b1, b1 + 32);
    sub(c1 + 32, b1, b1 + 32);
    square(r, c1 + 32);
    sub(s, b0, b0 + 32);
    mult121665(t, s);
    add(u, t, b0);
    mult(xznb, b0, b0 + 32);
    mult(xznb + 32, s, u);
    square(xzn1b, c1);
    mult(xzn1b + 32, r, work);
    curve25519_select(xzm, xzm1, xznb, xzn1b, b);
  }
  for (j = 0; j < 64; ++j)
    work[j] = xzm[j];
}


x86 assembly (clang, -O0):
<mainloop>:
push   %rbp
mov    %rsp,%rbp
sub    $0xd30,%rsp
mov    %rdi,-0x8(%rbp)
mov    %rsi,-0x10(%rbp)
movl   $0x0,-0xd18(%rbp)
cmpl   $0x20,-0xd18(%rbp)
jae    11b8 <mainloop+0x58>
mov    -0x8(%rbp),%rax
mov    -0xd18(%rbp),%ecx
mov    (%rax,%rcx,4),%ecx
mov    -0xd18(%rbp),%eax
mov    %ecx,-0x110(%rbp,%rax,4)
mov    -0xd18(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0xd18(%rbp)
jmp    117d <mainloop+0x1d>
movl   $0x1,-0x90(%rbp)
movl   $0x21,-0xd18(%rbp)
cmpl   $0x40,-0xd18(%rbp)
jae    11fe <mainloop+0x9e>
mov    -0xd18(%rbp),%eax
movl   $0x0,-0x110(%rbp,%rax,4)
mov    -0xd18(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0xd18(%rbp)
jmp    11cc <mainloop+0x6c>
movl   $0x1,-0x210(%rbp)
movl   $0x1,-0xd18(%rbp)
cmpl   $0x40,-0xd18(%rbp)
jae    1244 <mainloop+0xe4>
mov    -0xd18(%rbp),%eax
movl   $0x0,-0x210(%rbp,%rax,4)
mov    -0xd18(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0xd18(%rbp)
jmp    1212 <mainloop+0xb2>
movl   $0xfe,-0xd20(%rbp)
cmpl   $0x0,-0xd20(%rbp)
jl     153b <mainloop+0x3db>
mov    -0x10(%rbp),%rax
mov    %rax,-0xd28(%rbp)
mov    -0xd20(%rbp),%eax
mov    $0x8,%ecx
cltd
idiv   %ecx
mov    %eax,%ecx
mov    -0xd28(%rbp),%rax
movslq %ecx,%rcx
movzbl (%rax,%rcx,1),%eax
mov    -0xd20(%rbp),%ecx
and    $0x7,%ecx
sar    %cl,%eax
mov    %eax,-0xd1c(%rbp)
mov    -0xd1c(%rbp),%eax
and    $0x1,%eax
mov    %eax,-0xd1c(%rbp)
lea    -0x310(%rbp),%rdi
lea    -0x410(%rbp),%rsi
lea    -0x210(%rbp),%rdx
lea    -0x110(%rbp),%rcx
mov    -0xd1c(%rbp),%r8d
call   1070 <curve25519_select@plt>
lea    -0x710(%rbp),%rdi
lea    -0x310(%rbp),%rsi
lea    -0x310(%rbp),%rdx
add    $0x80,%rdx
call   1030 <add@plt>
lea    -0x710(%rbp),%rdi
add    $0x80,%rdi
lea    -0x310(%rbp),%rsi
lea    -0x310(%rbp),%rdx
add    $0x80,%rdx
call   1080 <sub@plt>
lea    -0x810(%rbp),%rdi
lea    -0x410(%rbp),%rsi
lea    -0x410(%rbp),%rdx
add    $0x80,%rdx
call   1030 <add@plt>
lea    -0x810(%rbp),%rdi
add    $0x80,%rdi
lea    -0x410(%rbp),%rsi
lea    -0x410(%rbp),%rdx
add    $0x80,%rdx
call   1080 <sub@plt>
lea    -0x910(%rbp),%rdi
lea    -0x710(%rbp),%rsi
call   1050 <square@plt>
lea    -0x910(%rbp),%rdi
add    $0x80,%rdi
lea    -0x710(%rbp),%rsi
add    $0x80,%rsi
call   1050 <square@plt>
lea    -0xa10(%rbp),%rdi
lea    -0x810(%rbp),%rsi
lea    -0x710(%rbp),%rdx
add    $0x80,%rdx
call   1060 <mult@plt>
lea    -0xa10(%rbp),%rdi
add    $0x80,%rdi
lea    -0x810(%rbp),%rsi
add    $0x80,%rsi
lea    -0x710(%rbp),%rdx
call   1060 <mult@plt>
lea    -0xb10(%rbp),%rdi
lea    -0xa10(%rbp),%rsi
lea    -0xa10(%rbp),%rdx
add    $0x80,%rdx
call   1030 <add@plt>
lea    -0xb10(%rbp),%rdi
add    $0x80,%rdi
lea    -0xa10(%rbp),%rsi
lea    -0xa10(%rbp),%rdx
add    $0x80,%rdx
call   1080 <sub@plt>
lea    -0xb90(%rbp),%rdi
lea    -0xb10(%rbp),%rsi
add    $0x80,%rsi
call   1050 <square@plt>
lea    -0xc10(%rbp),%rdi
lea    -0x910(%rbp),%rsi
lea    -0x910(%rbp),%rdx
add    $0x80,%rdx
call   1080 <sub@plt>
lea    -0xc90(%rbp),%rdi
lea    -0xc10(%rbp),%rsi
call   1040 <mult121665@plt>
lea    -0xd10(%rbp),%rdi
lea    -0xc90(%rbp),%rsi
lea    -0x910(%rbp),%rdx
call   1030 <add@plt>
lea    -0x510(%rbp),%rdi
lea    -0x910(%rbp),%rsi
lea    -0x910(%rbp),%rdx
add    $0x80,%rdx
call   1060 <mult@plt>
lea    -0x510(%rbp),%rdi
add    $0x80,%rdi
lea    -0xc10(%rbp),%rsi
lea    -0xd10(%rbp),%rdx
call   1060 <mult@plt>
lea    -0x610(%rbp),%rdi
lea    -0xb10(%rbp),%rsi
call   1050 <square@plt>
lea    -0x610(%rbp),%rdi
add    $0x80,%rdi
lea    -0xb90(%rbp),%rsi
mov    -0x8(%rbp),%rdx
call   1060 <mult@plt>
lea    -0x210(%rbp),%rdi
lea    -0x110(%rbp),%rsi
lea    -0x510(%rbp),%rdx
lea    -0x610(%rbp),%rcx
mov    -0xd1c(%rbp),%r8d
call   1070 <curve25519_select@plt>
mov    -0xd20(%rbp),%eax
add    $0xffffffff,%eax
mov    %eax,-0xd20(%rbp)
jmp    124e <mainloop+0xee>
movl   $0x0,-0xd18(%rbp)
cmpl   $0x40,-0xd18(%rbp)
jae    1580 <mainloop+0x420>
mov    -0xd18(%rbp),%eax
mov    -0x210(%rbp,%rax,4),%edx
mov    -0x8(%rbp),%rax
mov    -0xd18(%rbp),%ecx
mov    %edx,(%rax,%rcx,4)
mov    -0xd18(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0xd18(%rbp)
jmp    1545 <mainloop+0x3e5>
add    $0xd30,%rsp
pop    %rbp
ret

x86 assembly (clang, -O2):
<mainloop>:
push   %rbp
push   %r15
push   %r14
push   %r13
push   %r12
push   %rbx
sub    $0xd28,%rsp
mov    %rsi,0x18(%rsp)
movups (%rdi),%xmm0
movups 0x10(%rdi),%xmm1
movups 0x20(%rdi),%xmm2
movups 0x30(%rdi),%xmm3
movaps %xmm0,0x120(%rsp)
movaps %xmm1,0x130(%rsp)
movaps %xmm2,0x140(%rsp)
movaps %xmm3,0x150(%rsp)
movups 0x40(%rdi),%xmm0
movaps %xmm0,0x160(%rsp)
movups 0x50(%rdi),%xmm0
movaps %xmm0,0x170(%rsp)
movups 0x60(%rdi),%xmm0
movaps %xmm0,0x180(%rsp)
mov    %rdi,0x10(%rsp)
movups 0x70(%rdi),%xmm0
movaps %xmm0,0x190(%rsp)
movl   $0x1,0x1a0(%rsp)
xorps  %xmm0,%xmm0
movups %xmm0,0x210(%rsp)
movups %xmm0,0x204(%rsp)
movups %xmm0,0x1f4(%rsp)
movups %xmm0,0x1e4(%rsp)
movups %xmm0,0x1d4(%rsp)
movups %xmm0,0x1c4(%rsp)
movups %xmm0,0x1b4(%rsp)
movups %xmm0,0x1a4(%rsp)
movl   $0x1,0x20(%rsp)
movups %xmm0,0x110(%rsp)
movups %xmm0,0x104(%rsp)
movups %xmm0,0xf4(%rsp)
movups %xmm0,0xe4(%rsp)
movups %xmm0,0xd4(%rsp)
movups %xmm0,0xc4(%rsp)
movups %xmm0,0xb4(%rsp)
movups %xmm0,0xa4(%rsp)
movups %xmm0,0x94(%rsp)
movups %xmm0,0x84(%rsp)
movups %xmm0,0x74(%rsp)
movups %xmm0,0x64(%rsp)
movups %xmm0,0x54(%rsp)
movups %xmm0,0x44(%rsp)
movups %xmm0,0x34(%rsp)
movups %xmm0,0x24(%rsp)
mov    $0xfe,%eax
cs nopw 0x0(%rax,%rax,1)
nopl   (%rax)
mov    %eax,0xc(%rsp)
mov    0xc(%rsp),%eax
shr    $0x3,%rax
mov    0x18(%rsp),%rcx
movzbl (%rcx,%rax,1),%r12d
mov    0xc(%rsp),%eax
mov    %eax,%ecx
and    $0x7,%cl
shr    %cl,%r12d
and    $0x1,%r12d
lea    0xc20(%rsp),%rbx
mov    %rbx,%rdi
lea    0xb20(%rsp),%r15
mov    %r15,%rsi
lea    0x20(%rsp),%rdx
lea    0x120(%rsp),%rcx
mov    %r12d,%r8d
call   1080 <curve25519_select@plt>
lea    0x920(%rsp),%rbp
mov    %rbp,%rdi
mov    %rbx,%rsi
lea    0xca0(%rsp),%r13
mov    %r13,%rdx
call   1030 <add@plt>
lea    0x9a0(%rsp),%r14
mov    %r14,%rdi
mov    %rbx,%rsi
mov    %r13,%rdx
call   1090 <sub@plt>
lea    0x4a0(%rsp),%rdi
mov    %r15,%rsi
lea    0xba0(%rsp),%rbx
mov    %rbx,%rdx
call   1030 <add@plt>
lea    0x520(%rsp),%r13
mov    %r13,%rdi
mov    %r15,%rsi
mov    %rbx,%rdx
call   1090 <sub@plt>
lea    0x2a0(%rsp),%rdi
mov    %rbp,%rsi
call   1050 <square@plt>
lea    0x320(%rsp),%rdi
mov    %r14,%rsi
call   1050 <square@plt>
lea    0x820(%rsp),%r15
mov    %r15,%rdi
lea    0x4a0(%rsp),%rsi
mov    %r14,%rdx
call   1070 <mult@plt>
lea    0x8a0(%rsp),%rbx
mov    %rbx,%rdi
mov    %r13,%rsi
mov    %rbp,%rdx
call   1070 <mult@plt>
lea    0x3a0(%rsp),%rdi
mov    %r15,%rsi
mov    %rbx,%rdx
call   1030 <add@plt>
lea    0x420(%rsp),%r14
mov    %r14,%rdi
mov    %r15,%rsi
mov    %rbx,%rdx
call   1090 <sub@plt>
lea    0x220(%rsp),%rdi
mov    %r14,%rsi
call   1050 <square@plt>
lea    0x7a0(%rsp),%r14
mov    %r14,%rdi
lea    0x2a0(%rsp),%rbp
mov    %rbp,%rsi
lea    0x320(%rsp),%r15
mov    %r15,%rdx
call   1090 <sub@plt>
lea    0x720(%rsp),%rbx
mov    %rbx,%rdi
mov    %r14,%rsi
call   1040 <mult121665@plt>
lea    0x6a0(%rsp),%r13
mov    %r13,%rdi
mov    %rbx,%rsi
mov    %rbp,%rdx
call   1030 <add@plt>
lea    0x5a0(%rsp),%rdi
mov    %rbp,%rsi
mov    %r15,%rdx
call   1070 <mult@plt>
lea    0x620(%rsp),%rdi
mov    %r14,%rsi
mov    %r13,%rdx
call   1070 <mult@plt>
lea    0xa20(%rsp),%rbx
mov    %rbx,%rdi
lea    0x3a0(%rsp),%rsi
call   1050 <square@plt>
lea    0xaa0(%rsp),%rdi
lea    0x220(%rsp),%rsi
mov    0x10(%rsp),%rdx
call   1070 <mult@plt>
lea    0x20(%rsp),%rdi
lea    0x120(%rsp),%rsi
lea    0x5a0(%rsp),%rdx
mov    %rbx,%rcx
mov    %r12d,%r8d
call   1080 <curve25519_select@plt>
mov    0xc(%rsp),%eax
add    $0xffffffff,%eax
jb     12c0 <mainloop+0x150>
lea    0x20(%rsp),%rsi
mov    $0x100,%edx
mov    0x10(%rsp),%rdi
call   1060 <memcpy@plt>
add    $0xd28,%rsp
pop    %rbx
pop    %r12
pop    %r13
pop    %r14
pop    %r15
pop    %rbp
ret

LLVM IR (-O0):
define void @mainloop(i32* %0, i8* %1) {
%3 = alloca i32*
%4 = alloca i8*
%5 = alloca [64 x i32]
%6 = alloca [64 x i32]
%7 = alloca [64 x i32]
%8 = alloca [64 x i32]
%9 = alloca [64 x i32]
%10 = alloca [64 x i32]
%11 = alloca [64 x i32]
%12 = alloca [64 x i32]
%13 = alloca [64 x i32]
%14 = alloca [64 x i32]
%15 = alloca [64 x i32]
%16 = alloca [32 x i32]
%17 = alloca [32 x i32]
%18 = alloca [32 x i32]
%19 = alloca [32 x i32]
%20 = alloca i32
%21 = alloca i32
%22 = alloca i32
%23 = alloca i32
store i32* %0, i32** %3
store i8* %1, i8** %4
store i32 0, i32* %21
br label %24
24: ; preds = %36, %2
%25 = load i32, i32* %21
%26 = icmp ult i32 %25, 32
br i1 %26, label %27, label %39
27: ; preds = %24
%28 = load i32*, i32** %3
%29 = load i32, i32* %21
%30 = zext i32 %29 to i64
%31 = getelementptr inbounds i32, i32* %28, i64 %30
%32 = load i32, i32* %31
%33 = load i32, i32* %21
%34 = zext i32 %33 to i64
%35 = getelementptr inbounds [64 x i32], [64 x i32]* %5, i64 0, i64 %34
store i32 %32, i32* %35
br label %36
36: ; preds = %27
%37 = load i32, i32* %21
%38 = add i32 %37, 1
store i32 %38, i32* %21
br label %24
39: ; preds = %24
%40 = getelementptr inbounds [64 x i32], [64 x i32]* %5, i64 0, i64 32
store i32 1, i32* %40
store i32 33, i32* %21
br label %41
41: ; preds = %48, %39
%42 = load i32, i32* %21
%43 = icmp ult i32 %42, 64
br i1 %43, label %44, label %51
44: ; preds = %41
%45 = load i32, i32* %21
%46 = zext i32 %45 to i64
%47 = getelementptr inbounds [64 x i32], [64 x i32]* %5, i64 0, i64 %46
store i32 0, i32* %47
br label %48
48: ; preds = %44
%49 = load i32, i32* %21
%50 = add i32 %49, 1
store i32 %50, i32* %21
br label %41
51: ; preds = %41
%52 = getelementptr inbounds [64 x i32], [64 x i32]* %6, i64 0, i64 0
store i32 1, i32* %52
store i32 1, i32* %21
br label %53
53: ; preds = %60, %51
%54 = load i32, i32* %21
%55 = icmp ult i32 %54, 64
br i1 %55, label %56, label %63
56: ; preds = %53
%57 = load i32, i32* %21
%58 = zext i32 %57 to i64
%59 = getelementptr inbounds [64 x i32], [64 x i32]* %6, i64 0, i64 %58
store i32 0, i32* %59
br label %60
60: ; preds = %56
%61 = load i32, i32* %21
%62 = add i32 %61, 1
store i32 %62, i32* %21
br label %53
63: ; preds = %53
store i32 254, i32* %23
br label %64
64: ; preds = %178, %63
%65 = load i32, i32* %23
%66 = icmp sge i32 %65, 0
br i1 %66, label %67, label %181
67: ; preds = %64
%68 = load i8*, i8** %4
%69 = load i32, i32* %23
%70 = sdiv i32 %69, 8
%71 = sext i32 %70 to i64
%72 = getelementptr inbounds i8, i8* %68, i64 %71
%73 = load i8, i8* %72
%74 = zext i8 %73 to i32
%75 = load i32, i32* %23
%76 = and i32 %75, 7
%77 = ashr i32 %74, %76
store i32 %77, i32* %22
%78 = load i32, i32* %22
%79 = and i32 %78, 1
store i32 %79, i32* %22
%80 = getelementptr inbounds [64 x i32], [64 x i32]* %7, i64 0, i64 0
%81 = getelementptr inbounds [64 x i32], [64 x i32]* %8, i64 0, i64 0
%82 = getelementptr inbounds [64 x i32], [64 x i32]* %6, i64 0, i64 0
%83 = getelementptr inbounds [64 x i32], [64 x i32]* %5, i64 0, i64 0
%84 = load i32, i32* %22
%85 = call i32 @curve25519_select(i32* %80, i32* %81, i32* %82, i32* %83, i32 %84)
%86 = getelementptr inbounds [64 x i32], [64 x i32]* %11, i64 0, i64 0
%87 = getelementptr inbounds [64 x i32], [64 x i32]* %7, i64 0, i64 0
%88 = getelementptr inbounds [64 x i32], [64 x i32]* %7, i64 0, i64 0
%89 = getelementptr inbounds i32, i32* %88, i64 32
%90 = call i32 @add(i32* %86, i32* %87, i32* %89)
%91 = getelementptr inbounds [64 x i32], [64 x i32]* %11, i64 0, i64 0
%92 = getelementptr inbounds i32, i32* %91, i64 32
%93 = getelementptr inbounds [64 x i32], [64 x i32]* %7, i64 0, i64 0
%94 = getelementptr inbounds [64 x i32], [64 x i32]* %7, i64 0, i64 0
%95 = getelementptr inbounds i32, i32* %94, i64 32
%96 = call i32 @sub(i32* %92, i32* %93, i32* %95)
%97 = getelementptr inbounds [64 x i32], [64 x i32]* %12, i64 0, i64 0
%98 = getelementptr inbounds [64 x i32], [64 x i32]* %8, i64 0, i64 0
%99 = getelementptr inbounds [64 x i32], [64 x i32]* %8, i64 0, i64 0
%100 = getelementptr inbounds i32, i32* %99, i64 32
%101 = call i32 @add(i32* %97, i32* %98, i32* %100)
%102 = getelementptr inbounds [64 x i32], [64 x i32]* %12, i64 0, i64 0
%103 = getelementptr inbounds i32, i32* %102, i64 32
%104 = getelementptr inbounds [64 x i32], [64 x i32]* %8, i64 0, i64 0
%105 = getelementptr inbounds [64 x i32], [64 x i32]* %8, i64 0, i64 0
%106 = getelementptr inbounds i32, i32* %105, i64 32
%107 = call i32 @sub(i32* %103, i32* %104, i32* %106)
%108 = getelementptr inbounds [64 x i32], [64 x i32]* %13, i64 0, i64 0
%109 = getelementptr inbounds [64 x i32], [64 x i32]* %11, i64 0, i64 0
%110 = call i32 @square(i32* %108, i32* %109)
%111 = getelementptr inbounds [64 x i32], [64 x i32]* %13, i64 0, i64 0
%112 = getelementptr inbounds i32, i32* %111, i64 32
%113 = getelementptr inbounds [64 x i32], [64 x i32]* %11, i64 0, i64 0
%114 = getelementptr inbounds i32, i32* %113, i64 32
%115 = call i32 @square(i32* %112, i32* %114)
%116 = getelementptr inbounds [64 x i32], [64 x i32]* %14, i64 0, i64 0
%117 = getelementptr inbounds [64 x i32], [64 x i32]* %12, i64 0, i64 0
%118 = getelementptr inbounds [64 x i32], [64 x i32]* %11, i64 0, i64 0
%119 = getelementptr inbounds i32, i32* %118, i64 32
%120 = call i32 @mult(i32* %116, i32* %117, i32* %119)
%121 = getelementptr inbounds [64 x i32], [64 x i32]* %14, i64 0, i64 0
%122 = getelementptr inbounds i32, i32* %121, i64 32
%123 = getelementptr inbounds [64 x i32], [64 x i32]* %12, i64 0, i64 0
%124 = getelementptr inbounds i32, i32* %123, i64 32
%125 = getelementptr inbounds [64 x i32], [64 x i32]* %11, i64 0, i64 0
%126 = call i32 @mult(i32* %122, i32* %124, i32* %125)
%127 = getelementptr inbounds [64 x i32], [64 x i32]* %15, i64 0, i64 0
%128 = getelementptr inbounds [64 x i32], [64 x i32]* %14, i64 0, i64 0
%129 = getelementptr inbounds [64 x i32], [64 x i32]* %14, i64 0, i64 0
%130 = getelementptr inbounds i32, i32* %129, i64 32
%131 = call i32 @add(i32* %127, i32* %128, i32* %130)
%132 = getelementptr inbounds [64 x i32], [64 x i32]* %15, i64 0, i64 0
%133 = getelementptr inbounds i32, i32* %132, i64 32
%134 = getelementptr inbounds [64 x i32], [64 x i32]* %14, i64 0, i64 0
%135 = getelementptr inbounds [64 x i32], [64 x i32]* %14, i64 0, i64 0
%136 = getelementptr inbounds i32, i32* %135, i64 32
%137 = call i32 @sub(i32* %133, i32* %134, i32* %136)
%138 = getelementptr inbounds [32 x i32], [32 x i32]* %16, i64 0, i64 0
%139 = getelementptr inbounds [64 x i32], [64 x i32]* %15, i64 0, i64 0
%140 = getelementptr inbounds i32, i32* %139, i64 32
%141 = call i32 @square(i32* %138, i32* %140)
%142 = getelementptr inbounds [32 x i32], [32 x i32]* %17, i64 0, i64 0
%143 = getelementptr inbounds [64 x i32], [64 x i32]* %13, i64 0, i64 0
%144 = getelementptr inbounds [64 x i32], [64 x i32]* %13, i64 0, i64 0
%145 = getelementptr inbounds i32, i32* %144, i64 32
%146 = call i32 @sub(i32* %142, i32* %143, i32* %145)
%147 = getelementptr inbounds [32 x i32], [32 x i32]* %18, i64 0, i64 0
%148 = getelementptr inbounds [32 x i32], [32 x i32]* %17, i64 0, i64 0
%149 = call i32 @mult121665(i32* %147, i32* %148)
%150 = getelementptr inbounds [32 x i32], [32 x i32]* %19, i64 0, i64 0
%151 = getelementptr inbounds [32 x i32], [32 x i32]* %18, i64 0, i64 0
%152 = getelementptr inbounds [64 x i32], [64 x i32]* %13, i64 0, i64 0
%153 = call i32 @add(i32* %150, i32* %151, i32* %152)
%154 = getelementptr inbounds [64 x i32], [64 x i32]* %9, i64 0, i64 0
%155 = getelementptr inbounds [64 x i32], [64 x i32]* %13, i64 0, i64 0
%156 = getelementptr inbounds [64 x i32], [64 x i32]* %13, i64 0, i64 0
%157 = getelementptr inbounds i32, i32* %156, i64 32
%158 = call i32 @mult(i32* %154, i32* %155, i32* %157)
%159 = getelementptr inbounds [64 x i32], [64 x i32]* %9, i64 0, i64 0
%160 = getelementptr inbounds i32, i32* %159, i64 32
%161 = getelementptr inbounds [32 x i32], [32 x i32]* %17, i64 0, i64 0
%162 = getelementptr inbounds [32 x i32], [32 x i32]* %19, i64 0, i64 0
%163 = call i32 @mult(i32* %160, i32* %161, i32* %162)
%164 = getelementptr inbounds [64 x i32], [64 x i32]* %10, i64 0, i64 0
%165 = getelementptr inbounds [64 x i32], [64 x i32]* %15, i64 0, i64 0
%166 = call i32 @square(i32* %164, i32* %165)
%167 = getelementptr inbounds [64 x i32], [64 x i32]* %10, i64 0, i64 0
%168 = getelementptr inbounds i32, i32* %167, i64 32
%169 = getelementptr inbounds [32 x i32], [32 x i32]* %16, i64 0, i64 0
%170 = load i32*, i32** %3
%171 = call i32 @mult(i32* %168, i32* %169, i32* %170)
%172 = getelementptr inbounds [64 x i32], [64 x i32]* %6, i64 0, i64 0
%173 = getelementptr inbounds [64 x i32], [64 x i32]* %5, i64 0, i64 0
%174 = getelementptr inbounds [64 x i32], [64 x i32]* %9, i64 0, i64 0
%175 = getelementptr inbounds [64 x i32], [64 x i32]* %10, i64 0, i64 0
%176 = load i32, i32* %22
%177 = call i32 @curve25519_select(i32* %172, i32* %173, i32* %174, i32* %175, i32 %176)
br label %178
178: ; preds = %67
%179 = load i32, i32* %23
%180 = add nsw i32 %179, -1
store i32 %180, i32* %23
br label %64
181: ; preds = %64
store i32 0, i32* %21
br label %182
182: ; preds = %194, %181
%183 = load i32, i32* %21
%184 = icmp ult i32 %183, 64
br i1 %184, label %185, label %197
185: ; preds = %182
%186 = load i32, i32* %21
%187 = zext i32 %186 to i64
%188 = getelementptr inbounds [64 x i32], [64 x i32]* %6, i64 0, i64 %187
%189 = load i32, i32* %188
%190 = load i32*, i32** %3
%191 = load i32, i32* %21
%192 = zext i32 %191 to i64
%193 = getelementptr inbounds i32, i32* %190, i64 %192
store i32 %189, i32* %193
br label %194
194: ; preds = %185
%195 = load i32, i32* %21
%196 = add i32 %195, 1
store i32 %196, i32* %21
br label %182
197: ; preds = %182
ret void
}

LLVM IR (-O2):
define void @mainloop(i32* %0, i8* nocapture %1) {
%3 = bitcast i32* %0 to i8*
%4 = alloca [64 x i32]
%5 = bitcast [64 x i32]* %4 to i8*
%6 = alloca [64 x i32]
%7 = bitcast [64 x i32]* %6 to i8*
%8 = alloca [64 x i32]
%9 = alloca [64 x i32]
%10 = alloca [64 x i32]
%11 = alloca [64 x i32]
%12 = alloca [64 x i32]
%13 = alloca [64 x i32]
%14 = alloca [64 x i32]
%15 = alloca [64 x i32]
%16 = alloca [64 x i32]
%17 = alloca [32 x i32]
%18 = alloca [32 x i32]
%19 = alloca [32 x i32]
%20 = alloca [32 x i32]
%21 = bitcast [64 x i32]* %8 to i8*
%22 = bitcast [64 x i32]* %9 to i8*
%23 = bitcast [64 x i32]* %10 to i8*
%24 = bitcast [64 x i32]* %11 to i8*
%25 = bitcast [64 x i32]* %12 to i8*
%26 = bitcast [64 x i32]* %13 to i8*
%27 = bitcast [64 x i32]* %14 to i8*
%28 = bitcast [64 x i32]* %15 to i8*
%29 = bitcast [64 x i32]* %16 to i8*
%30 = bitcast [32 x i32]* %17 to i8*
%31 = bitcast [32 x i32]* %18 to i8*
%32 = bitcast [32 x i32]* %19 to i8*
%33 = bitcast [32 x i32]* %20 to i8*
%34 = getelementptr inbounds [64 x i32], [64 x i32]* %4, i64 0, i64 32
store i32 1, i32* %34
%35 = getelementptr inbounds [64 x i32], [64 x i32]* %4, i64 0, i64 33
%36 = bitcast i32* %35 to i8*
%37 = getelementptr inbounds [64 x i32], [64 x i32]* %6, i64 0, i64 0
store i32 1, i32* %37
%38 = getelementptr inbounds [64 x i32], [64 x i32]* %6, i64 0, i64 1
%39 = bitcast i32* %38 to i8*
%40 = getelementptr inbounds [64 x i32], [64 x i32]* %8, i64 0, i64 0
%41 = getelementptr inbounds [64 x i32], [64 x i32]* %9, i64 0, i64 0
%42 = getelementptr inbounds [64 x i32], [64 x i32]* %4, i64 0, i64 0
%43 = getelementptr inbounds [64 x i32], [64 x i32]* %12, i64 0, i64 0
%44 = getelementptr inbounds [64 x i32], [64 x i32]* %8, i64 0, i64 32
%45 = getelementptr inbounds [64 x i32], [64 x i32]* %12, i64 0, i64 32
%46 = getelementptr inbounds [64 x i32], [64 x i32]* %13, i64 0, i64 0
%47 = getelementptr inbounds [64 x i32], [64 x i32]* %9, i64 0, i64 32
%48 = getelementptr inbounds [64 x i32], [64 x i32]* %13, i64 0, i64 32
%49 = getelementptr inbounds [64 x i32], [64 x i32]* %14, i64 0, i64 0
%50 = getelementptr inbounds [64 x i32], [64 x i32]* %14, i64 0, i64 32
%51 = getelementptr inbounds [64 x i32], [64 x i32]* %15, i64 0, i64 0
%52 = getelementptr inbounds [64 x i32], [64 x i32]* %15, i64 0, i64 32
%53 = getelementptr inbounds [64 x i32], [64 x i32]* %16, i64 0, i64 0
%54 = getelementptr inbounds [64 x i32], [64 x i32]* %16, i64 0, i64 32
%55 = getelementptr inbounds [32 x i32], [32 x i32]* %17, i64 0, i64 0
%56 = getelementptr inbounds [32 x i32], [32 x i32]* %18, i64 0, i64 0
%57 = getelementptr inbounds [32 x i32], [32 x i32]* %19, i64 0, i64 0
%58 = getelementptr inbounds [32 x i32], [32 x i32]* %20, i64 0, i64 0
%59 = getelementptr inbounds [64 x i32], [64 x i32]* %10, i64 0, i64 0
%60 = getelementptr inbounds [64 x i32], [64 x i32]* %10, i64 0, i64 32
%61 = getelementptr inbounds [64 x i32], [64 x i32]* %11, i64 0, i64 0
%62 = getelementptr inbounds [64 x i32], [64 x i32]* %11, i64 0, i64 32
br label %63
63: ; preds = %2, %63
%64 = phi i32 [ 254, %2 ], [ %93, %63 ]
%65 = lshr i32 %64, 3
%66 = zext i32 %65 to i64
%67 = getelementptr inbounds i8, i8* %1, i64 %66
%68 = load i8, i8* %67
%69 = zext i8 %68 to i32
%70 = and i32 %64, 7
%71 = lshr i32 %69, %70
%72 = and i32 %71, 1
%73 = call i32 @curve25519_select(i32* %40, i32* %41, i32* %37, i32* %42, i32 %72)
%74 = call i32 @add(i32* %43, i32* %40, i32* %44)
%75 = call i32 @sub(i32* %45, i32* %40, i32* %44)
%76 = call i32 @add(i32* %46, i32* %41, i32* %47)
%77 = call i32 @sub(i32* %48, i32* %41, i32* %47)
%78 = call i32 @square(i32* %49, i32* %43)
%79 = call i32 @square(i32* %50, i32* %45)
%80 = call i32 @mult(i32* %51, i32* %46, i32* %45)
%81 = call i32 @mult(i32* %52, i32* %48, i32* %43)
%82 = call i32 @add(i32* %53, i32* %51, i32* %52)
%83 = call i32 @sub(i32* %54, i32* %51, i32* %52)
%84 = call i32 @square(i32* %55, i32* %54)
%85 = call i32 @sub(i32* %56, i32* %49, i32* %50)
%86 = call i32 @mult121665(i32* %57, i32* %56)
%87 = call i32 @add(i32* %58, i32* %57, i32* %49)
%88 = call i32 @mult(i32* %59, i32* %49, i32* %50)
%89 = call i32 @mult(i32* %60, i32* %56, i32* %58)
%90 = call i32 @square(i32* %61, i32* %53)
%91 = call i32 @mult(i32* %62, i32* %55, i32* %0)
%92 = call i32 @curve25519_select(i32* %37, i32* %42, i32* %59, i32* %61, i32 %72)
%93 = add nsw i32 %64, -1
%94 = icmp eq i32 %64, 0
br i1 %94, label %95, label %63
95: ; preds = %63
ret void
}