#define NULL ((void *)0)
typedef unsigned long size_t; // Customize by platform.
typedef long intptr_t;
typedef unsigned long uintptr_t;
typedef long scalar_t__; // Either arithmetic or pointer type.
/* By default, we understand bool (as a convenience). */
typedef int bool;
#define false 0
#define true 1

/* Forward declarations */

/* Type definitions */

/* Variables and functions */
int /*<<< orphan*/ hash_n_n_8x(unsigned char *, unsigned char *);
int /*<<< orphan*/ hash_n_n_mask(unsigned char *, unsigned char *,
                                 unsigned char const *);
int /*<<< orphan*/ memcpy(unsigned char *, unsigned char const *, int);
void wots_verify(unsigned char pk[67 * 32], const unsigned char sig[67 * 32],
                 const unsigned char msg[32],
                 const unsigned char masks[((1 << 4) - 1) * 32]) {
  int basew[67], i, c = 0, j, k, l;
  unsigned char tmp[8 * 32];
  for (i = 0; i < ((256 + 4 - 1) / 4); i += 2) {
    basew[i] = msg[i / 2] & 0xf;
    basew[i + 1] = msg[i / 2] >> 4;
    c += (1 << 4) - 1 - basew[i];
    c += (1 << 4) - 1 - basew[i + 1];
  }
  for (; i < 67; i++) {
    basew[i] = c & 0xf;
    c >>= 4;
  }
  for (i = 0; (i + 8) < 67; i += 8) {
    memcpy(tmp, sig + i * 32, 8 * 32);
    int cnt = (1 << 8) - 1;
    for (k = 0; k < 8; k++)
      if (0 == (1 << 4) - 1 - basew[i + k]) {
        memcpy(pk + (i + k) * 32, tmp + k * 32, 32);
        cnt ^= (1 << k);
      }
    for (j = 0; (j < (1 << 4)) & (cnt > 0);) {
      for (k = 0; k < 8; k++)
        for (l = 0; l < 32; l++)
          tmp[l + k * 32] ^= (masks + (basew[i + k] * 32) + (j * 32))[l];
      hash_n_n_8x(tmp, tmp);
      j++;
      for (k = 0; k < 8; k++)
        if (j == (1 << 4) - 1 - basew[i + k]) {
          memcpy(pk + (i + k) * 32, tmp + k * 32, 32);
          cnt ^= (1 << k);
        }
    }
  }
  for (; (i) < 67; i += 1) {
    memcpy(tmp, sig + i * 32, 32);
    for (j = 0; j < (1 << 4) - 1 - basew[i]; j++)
      hash_n_n_mask(tmp, tmp, masks + (basew[i] * 32) + (j * 32));
    memcpy(pk + i * 32, tmp, 32);
  }
}


x86 assembly (clang, -O0):
<wots_verify>:
push   %rbp
mov    %rsp,%rbp
sub    $0x270,%rsp
mov    %rdi,-0x8(%rbp)
mov    %rsi,-0x10(%rbp)
mov    %rdx,-0x18(%rbp)
mov    %rcx,-0x20(%rbp)
movl   $0x0,-0x138(%rbp)
movl   $0x0,-0x134(%rbp)
cmpl   $0x40,-0x134(%rbp)
jge    123b <wots_verify+0x10b>
mov    -0x18(%rbp),%rax
mov    %rax,-0x268(%rbp)
mov    -0x134(%rbp),%eax
mov    $0x2,%ecx
cltd
idiv   %ecx
mov    %eax,%ecx
mov    -0x268(%rbp),%rax
movslq %ecx,%rcx
movzbl (%rax,%rcx,1),%ecx
and    $0xf,%ecx
movslq -0x134(%rbp),%rax
mov    %ecx,-0x130(%rbp,%rax,4)
mov    -0x18(%rbp),%rax
mov    %rax,-0x260(%rbp)
mov    -0x134(%rbp),%eax
mov    $0x2,%ecx
cltd
idiv   %ecx
mov    %eax,%ecx
mov    -0x260(%rbp),%rax
movslq %ecx,%rcx
movzbl (%rax,%rcx,1),%ecx
sar    $0x4,%ecx
mov    -0x134(%rbp),%eax
add    $0x1,%eax
cltq
mov    %ecx,-0x130(%rbp,%rax,4)
movslq -0x134(%rbp),%rcx
mov    $0xf,%eax
sub    -0x130(%rbp,%rcx,4),%eax
add    -0x138(%rbp),%eax
mov    %eax,-0x138(%rbp)
mov    -0x134(%rbp),%eax
add    $0x1,%eax
movslq %eax,%rcx
mov    $0xf,%eax
sub    -0x130(%rbp,%rcx,4),%eax
add    -0x138(%rbp),%eax
mov    %eax,-0x138(%rbp)
mov    -0x134(%rbp),%eax
add    $0x2,%eax
mov    %eax,-0x134(%rbp)
jmp    115f <wots_verify+0x2f>
jmp    1240 <wots_verify+0x110>
cmpl   $0x43,-0x134(%rbp)
jge    1287 <wots_verify+0x157>
mov    -0x138(%rbp),%ecx
and    $0xf,%ecx
movslq -0x134(%rbp),%rax
mov    %ecx,-0x130(%rbp,%rax,4)
mov    -0x138(%rbp),%eax
sar    $0x4,%eax
mov    %eax,-0x138(%rbp)
mov    -0x134(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x134(%rbp)
jmp    1240 <wots_verify+0x110>
movl   $0x0,-0x134(%rbp)
mov    -0x134(%rbp),%eax
add    $0x8,%eax
cmp    $0x43,%eax
jge    154d <wots_verify+0x41d>
lea    -0x250(%rbp),%rdi
mov    -0x10(%rbp),%rsi
mov    -0x134(%rbp),%eax
shl    $0x5,%eax
cltq
add    %rax,%rsi
mov    $0x100,%edx
call   1050 <memcpy@plt>
movl   $0xff,-0x254(%rbp)
movl   $0x0,-0x140(%rbp)
cmpl   $0x8,-0x140(%rbp)
jge    1374 <wots_verify+0x244>
mov    -0x134(%rbp),%eax
add    -0x140(%rbp),%eax
cltq
mov    $0xf,%ecx
sub    -0x130(%rbp,%rax,4),%ecx
xor    %eax,%eax
cmp    %ecx,%eax
jne    135b <wots_verify+0x22b>
mov    -0x8(%rbp),%rdi
mov    -0x134(%rbp),%eax
add    -0x140(%rbp),%eax
shl    $0x5,%eax
cltq
add    %rax,%rdi
lea    -0x250(%rbp),%rsi
mov    -0x140(%rbp),%eax
shl    $0x5,%eax
cltq
add    %rax,%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
mov    -0x140(%rbp),%ecx
mov    $0x1,%eax
shl    %cl,%eax
xor    -0x254(%rbp),%eax
mov    %eax,-0x254(%rbp)
jmp    1360 <wots_verify+0x230>
mov    -0x140(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x140(%rbp)
jmp    12da <wots_verify+0x1aa>
movl   $0x0,-0x13c(%rbp)
cmpl   $0x10,-0x13c(%rbp)
setl   %al
and    $0x1,%al
movzbl %al,%eax
cmpl   $0x0,-0x254(%rbp)
setg   %cl
and    $0x1,%cl
movzbl %cl,%ecx
and    %ecx,%eax
cmp    $0x0,%eax
je     1534 <wots_verify+0x404>
movl   $0x0,-0x140(%rbp)
cmpl   $0x8,-0x140(%rbp)
jge    1464 <wots_verify+0x334>
movl   $0x0,-0x144(%rbp)
cmpl   $0x20,-0x144(%rbp)
jge    144b <wots_verify+0x31b>
mov    -0x20(%rbp),%rax
mov    -0x134(%rbp),%ecx
add    -0x140(%rbp),%ecx
movslq %ecx,%rcx
mov    -0x130(%rbp,%rcx,4),%ecx
shl    $0x5,%ecx
movslq %ecx,%rcx
add    %rcx,%rax
mov    -0x13c(%rbp),%ecx
shl    $0x5,%ecx
movslq %ecx,%rcx
add    %rcx,%rax
movslq -0x144(%rbp),%rcx
movzbl (%rax,%rcx,1),%edx
mov    -0x144(%rbp),%eax
mov    -0x140(%rbp),%ecx
shl    $0x5,%ecx
add    %ecx,%eax
cltq
movzbl -0x250(%rbp,%rax,1),%ecx
ff
xor    %edx,%ecx
mov    %cl,-0x250(%rbp,%rax,1)
mov    -0x144(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x144(%rbp)
jmp    13c9 <wots_verify+0x299>
jmp    1450 <wots_verify+0x320>
mov    -0x140(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x140(%rbp)
jmp    13b2 <wots_verify+0x282>
lea    -0x250(%rbp),%rdi
lea    -0x250(%rbp),%rsi
call   1040 <hash_n_n_8x@plt>
mov    -0x13c(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x13c(%rbp)
movl   $0x0,-0x140(%rbp)
cmpl   $0x8,-0x140(%rbp)
jge    152f <wots_verify+0x3ff>
mov    -0x13c(%rbp),%eax
mov    -0x134(%rbp),%ecx
add    -0x140(%rbp),%ecx
movslq %ecx,%rdx
mov    $0xf,%ecx
sub    -0x130(%rbp,%rdx,4),%ecx
cmp    %ecx,%eax
jne    1516 <wots_verify+0x3e6>
mov    -0x8(%rbp),%rdi
mov    -0x134(%rbp),%eax
add    -0x140(%rbp),%eax
shl    $0x5,%eax
cltq
add    %rax,%rdi
lea    -0x250(%rbp),%rsi
mov    -0x140(%rbp),%eax
shl    $0x5,%eax
cltq
add    %rax,%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
mov    -0x140(%rbp),%ecx
mov    $0x1,%eax
shl    %cl,%eax
xor    -0x254(%rbp),%eax
mov    %eax,-0x254(%rbp)
jmp    151b <wots_verify+0x3eb>
mov    -0x140(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x140(%rbp)
jmp    1490 <wots_verify+0x360>
jmp    137e <wots_verify+0x24e>
jmp    1539 <wots_verify+0x409>
mov    -0x134(%rbp),%eax
add    $0x8,%eax
mov    %eax,-0x134(%rbp)
jmp    1291 <wots_verify+0x161>
jmp    1552 <wots_verify+0x422>
cmpl   $0x43,-0x134(%rbp)
jge    1633 <wots_verify+0x503>
lea    -0x250(%rbp),%rdi
mov    -0x10(%rbp),%rsi
mov    -0x134(%rbp),%eax
shl    $0x5,%eax
cltq
add    %rax,%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
movl   $0x0,-0x13c(%rbp)
mov    -0x13c(%rbp),%eax
movslq -0x134(%rbp),%rdx
mov    $0xf,%ecx
sub    -0x130(%rbp,%rdx,4),%ecx
cmp    %ecx,%eax
jge    15fc <wots_verify+0x4cc>
lea    -0x250(%rbp),%rdi
lea    -0x250(%rbp),%rsi
mov    -0x20(%rbp),%rdx
movslq -0x134(%rbp),%rax
mov    -0x130(%rbp,%rax,4),%eax
shl    $0x5,%eax
cltq
add    %rax,%rdx
mov    -0x13c(%rbp),%eax
shl    $0x5,%eax
cltq
add    %rax,%rdx
call   1030 <hash_n_n_mask@plt>
mov    -0x13c(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x13c(%rbp)
jmp    158c <wots_verify+0x45c>
mov    -0x8(%rbp),%rdi
mov    -0x134(%rbp),%eax
shl    $0x5,%eax
cltq
add    %rax,%rdi
lea    -0x250(%rbp),%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
mov    -0x134(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x134(%rbp)
jmp    1552 <wots_verify+0x422>
add    $0x270,%rsp
pop    %rbp
ret

x86 assembly (clang, -O2):
<wots_verify>:
push   %rbp
push   %r15
push   %r14
push   %r13
push   %r12
push   %rbx
sub    $0x2e8,%rsp
mov    %rsi,0x10(%rsp)
mov    %rdi,(%rsp)
pxor   %xmm0,%xmm0
xor    %eax,%eax
movdqa 0xea8(%rip),%xmm1
movdqa 0xeb0(%rip),%xmm2
movdqa 0xeb8(%rip),%xmm3
pxor   %xmm4,%xmm4
nopl   0x0(%rax)
movzwl (%rdx,%rax,1),%esi
movd   %esi,%xmm5
movdqa %xmm5,%xmm6
pand   %xmm1,%xmm6
punpcklbw %xmm0,%xmm6
punpcklwd %xmm0,%xmm6
psrlw  $0x4,%xmm5
pand   %xmm2,%xmm5
punpcklbw %xmm0,%xmm5
punpcklwd %xmm0,%xmm5
movdqa %xmm6,%xmm7
punpckldq %xmm5,%xmm7
movdqa %xmm7,0x1d0(%rsp,%rax,8)
pxor   %xmm3,%xmm6
paddd  %xmm4,%xmm6
pxor   %xmm3,%xmm5
movdqa %xmm5,%xmm4
paddd  %xmm6,%xmm4
add    $0x2,%rax
cmp    $0x20,%rax
jne    1170 <wots_verify+0x40>
pshufd $0x55,%xmm4,%xmm0
paddd  %xmm4,%xmm0
movd   %xmm0,%eax
mov    %eax,%edx
and    $0xf,%edx
mov    %edx,0x2d0(%rsp)
mov    %eax,%edx
shr    $0x4,%edx
and    $0xf,%edx
mov    %edx,0x2d4(%rsp)
shr    $0x8,%eax
and    $0xf,%eax
mov    %eax,0x2d8(%rsp)
mov    %rcx,0x70(%rsp)
lea    0x10(%rcx),%rax
mov    %rax,0x60(%rsp)
mov    $0x8,%ebx
xor    %r14d,%r14d
lea    0xd0(%rsp),%rbp
jmp    1244 <wots_verify+0x114>
nopl   (%rax)
mov    0x68(%rsp),%r14
add    $0x8,%r14
mov    0x78(%rsp),%rcx
lea    0x8(%rcx),%rbx
cmp    $0x3b,%rcx
lea    0xd0(%rsp),%rbp
jae    18fd <wots_verify+0x7cd>
mov    %r14,%rcx
shl    $0x5,%rcx
mov    0x10(%rsp),%rax
mov    %rcx,0x28(%rsp)
lea    (%rax,%rcx,1),%rsi
mov    %rbp,%rdi
mov    $0x100,%edx
call   1050 <memcpy@plt>
mov    0x1d0(%rsp,%r14,4),%r13d
mov    $0xff,%r15d
cmp    $0xf,%r13d
jne    129a <wots_verify+0x16a>
mov    (%rsp),%rax
mov    0x28(%rsp),%rcx
lea    (%rax,%rcx,1),%rdi
mov    %rbp,%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
mov    $0xfe,%r15d
mov    %r14,%rdi
or     $0x1,%rdi
mov    0x1d0(%rsp,%rdi,4),%eax
cmp    $0xf,%eax
mov    %rdi,0x58(%rsp)
mov    %eax,0x8(%rsp)
jne    12d4 <wots_verify+0x1a4>
shl    $0x5,%rdi
add    (%rsp),%rdi
lea    0xf0(%rsp),%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
and    $0xfffffffd,%r15d
mov    %r14,%rdi
or     $0x2,%rdi
mov    0x1d0(%rsp,%rdi,4),%ebp
cmp    $0xf,%ebp
mov    %rdi,0x50(%rsp)
mov    %rbx,0x78(%rsp)
jne    130f <wots_verify+0x1df>
shl    $0x5,%rdi
add    (%rsp),%rdi
lea    0x110(%rsp),%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
xor    $0x4,%r15d
mov    %r14,%rdi
or     $0x3,%rdi
mov    0x1d0(%rsp,%rdi,4),%r12d
cmp    $0xf,%r12d
mov    %rdi,0x48(%rsp)
mov    %r13d,0xc(%rsp)
jne    134c <wots_verify+0x21c>
shl    $0x5,%rdi
add    (%rsp),%rdi
lea    0x130(%rsp),%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
xor    $0x8,%r15d
mov    %r14,%rbx
or     $0x4,%rbx
movslq 0x1d0(%rsp,%rbx,4),%r13
cmp    $0xf,%r13
jne    1382 <wots_verify+0x252>
mov    %rbx,%rdi
shl    $0x5,%rdi
add    (%rsp),%rdi
lea    0x150(%rsp),%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
xor    $0x10,%r15d
mov    %r14,%rdi
or     $0x5,%rdi
movslq 0x1d0(%rsp,%rdi,4),%rax
cmp    $0xf,%rax
mov    %rdi,0x30(%rsp)
mov    %r13,0x40(%rsp)
mov    %rax,0x38(%rsp)
jne    13c4 <wots_verify+0x294>
shl    $0x5,%rdi
add    (%rsp),%rdi
lea    0x170(%rsp),%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
xor    $0x20,%r15d
mov    %r14,%rdi
or     $0x6,%rdi
movslq 0x1d0(%rsp,%rdi,4),%r13
cmp    $0xf,%r13
mov    %rdi,0x20(%rsp)
jne    13fc <wots_verify+0x2cc>
shl    $0x5,%rdi
add    (%rsp),%rdi
lea    0x190(%rsp),%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
xor    $0x40,%r15d
mov    %r14,0x68(%rsp)
mov    %r14,%rdi
or     $0x7,%rdi
movslq 0x1d0(%rsp,%rdi,4),%r14
cmp    $0xf,%r14
mov    %rdi,0x18(%rsp)
jne    143c <wots_verify+0x30c>
shl    $0x5,%rdi
add    (%rsp),%rdi
lea    0x1b0(%rsp),%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
xor    $0x80,%r15d
test   %r15d,%r15d
jle    1220 <wots_verify+0xf0>
mov    0x40(%rsp),%rsi
mov    %rsi,%r9
shl    $0x5,%r9
mov    0x38(%rsp),%rdi
mov    %rdi,%r10
shl    $0x5,%r10
mov    %r13,%r11
shl    $0x5,%r11
mov    %r14,%r8
shl    $0x5,%r8
mov    (%rsp),%rax
add    %rax,0x28(%rsp)
mov    0x58(%rsp),%rcx
shl    $0x5,%rcx
add    %rax,%rcx
mov    %rcx,0x90(%rsp)
mov    0x50(%rsp),%rcx
shl    $0x5,%rcx
add    %rax,%rcx
mov    %rcx,0x88(%rsp)
mov    0x48(%rsp),%rcx
shl    $0x5,%rcx
add    %rax,%rcx
mov    %rcx,0x80(%rsp)
mov    $0xf,%edx
sub    %esi,%edx
shl    $0x5,%rbx
add    %rax,%rbx
mov    %rbx,0x98(%rsp)
mov    $0xf,%ebx
sub    %edi,%ebx
mov    0x30(%rsp),%rcx
shl    $0x5,%rcx
add    %rax,%rcx
mov    %rcx,0x30(%rsp)
mov    $0xf,%esi
sub    %r13d,%esi
mov    0x20(%rsp),%rcx
shl    $0x5,%rcx
add    %rax,%rcx
mov    %rcx,0x20(%rsp)
mov    $0xf,%edi
sub    %r14d,%edi
mov    0x18(%rsp),%rcx
shl    $0x5,%rcx
add    %rax,%rcx
mov    %rcx,0x18(%rsp)
shl    $0x5,%rdx
add    $0xffffffffffffffe0,%rdx
mov    %rdx,0xb8(%rsp)
shl    $0x5,%rbx
add    $0xffffffffffffffe0,%rbx
mov    %rbx,0xb0(%rsp)
shl    $0x5,%rsi
add    $0xffffffffffffffe0,%rsi
mov    %rsi,0xa8(%rsp)
mov    0x60(%rsp),%rax
add    %rax,%r9
mov    %r9,0x40(%rsp)
add    %rax,%r10
mov    %r10,0x38(%rsp)
add    %rax,%r11
mov    %r11,0xc8(%rsp)
add    %rax,%r8
mov    %r8,0xc0(%rsp)
shl    $0x5,%rdi
add    $0xffffffffffffffe0,%rdi
mov    %rdi,0xa0(%rsp)
xor    %r13d,%r13d
xor    %ebx,%ebx
movslq 0xc(%rsp),%rax
shl    $0x5,%rax
mov    0x60(%rsp),%rcx
add    %rcx,%rax
movups -0x10(%r13,%rax,1),%xmm0
xorps  0xd0(%rsp),%xmm0
movaps %xmm0,0xd0(%rsp)
movups 0x0(%r13,%rax,1),%xmm0
xorps  0xe0(%rsp),%xmm0
movaps %xmm0,0xe0(%rsp)
movslq 0x8(%rsp),%rax
shl    $0x5,%rax
add    %rcx,%rax
movups -0x10(%r13,%rax,1),%xmm0
xorps  0xf0(%rsp),%xmm0
movaps %xmm0,0xf0(%rsp)
movups 0x0(%r13,%rax,1),%xmm0
xorps  0x100(%rsp),%xmm0
movaps %xmm0,0x100(%rsp)
movslq %ebp,%rax
shl    $0x5,%rax
add    %rcx,%rax
movups -0x10(%r13,%rax,1),%xmm0
xorps  0x110(%rsp),%xmm0
movaps %xmm0,0x110(%rsp)
movups 0x0(%r13,%rax,1),%xmm0
xorps  0x120(%rsp),%xmm0
movaps %xmm0,0x120(%rsp)
movslq %r12d,%rax
shl    $0x5,%rax
add    %rcx,%rax
movups -0x10(%r13,%rax,1),%xmm0
xorps  0x130(%rsp),%xmm0
movaps %xmm0,0x130(%rsp)
movups 0x0(%r13,%rax,1),%xmm0
xorps  0x140(%rsp),%xmm0
movaps %xmm0,0x140(%rsp)
mov    0x40(%rsp),%rax
movups -0x10(%rax,%r13,1),%xmm0
xorps  0x150(%rsp),%xmm0
movaps %xmm0,0x150(%rsp)
movups (%rax,%r13,1),%xmm0
xorps  0x160(%rsp),%xmm0
movaps %xmm0,0x160(%rsp)
mov    0x38(%rsp),%rax
movups -0x10(%rax,%r13,1),%xmm0
xorps  0x170(%rsp),%xmm0
movaps %xmm0,0x170(%rsp)
movups (%rax,%r13,1),%xmm0
xorps  0x180(%rsp),%xmm0
movaps %xmm0,0x180(%rsp)
mov    0xc8(%rsp),%rax
movups -0x10(%rax,%r13,1),%xmm0
xorps  0x190(%rsp),%xmm0
movaps %xmm0,0x190(%rsp)
movups (%rax,%r13,1),%xmm0
xorps  0x1a0(%rsp),%xmm0
movaps %xmm0,0x1a0(%rsp)
mov    0xc0(%rsp),%rax
movups -0x10(%rax,%r13,1),%xmm0
xorps  0x1b0(%rsp),%xmm0
movaps %xmm0,0x1b0(%rsp)
movdqu (%rax,%r13,1),%xmm0
pxor   0x1c0(%rsp),%xmm0
movdqa %xmm0,0x1c0(%rsp)
lea    0xd0(%rsp),%rbp
mov    %rbp,%rdi
mov    %rbp,%rsi
call   1040 <hash_n_n_8x@plt>
lea    0x1(%rbx),%r14
mov    0x68(%rsp),%rax
mov    0x1d0(%rsp,%rax,4),%ecx
mov    $0xf,%eax
mov    %ecx,0xc(%rsp)
sub    %ecx,%eax
cmp    %rax,%r14
jne    1773 <wots_verify+0x643>
mov    0x28(%rsp),%rdi
mov    %rbp,%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
xor    $0x1,%r15d
mov    0x58(%rsp),%rax
mov    0x1d0(%rsp,%rax,4),%ecx
mov    $0xf,%eax
mov    %ecx,0x8(%rsp)
sub    %ecx,%eax
cmp    %rax,%r14
jne    17ad <wots_verify+0x67d>
mov    0x90(%rsp),%rdi
lea    0xf0(%rsp),%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
xor    $0x2,%r15d
mov    0x50(%rsp),%rax
mov    0x1d0(%rsp,%rax,4),%ebp
mov    $0xf,%eax
sub    %ebp,%eax
cmp    %rax,%r14
jne    17e3 <wots_verify+0x6b3>
mov    0x88(%rsp),%rdi
lea    0x110(%rsp),%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
xor    $0x4,%r15d
mov    0x48(%rsp),%rax
mov    0x1d0(%rsp,%rax,4),%r12d
mov    $0xf,%eax
sub    %r12d,%eax
cmp    %rax,%r14
je     18a0 <wots_verify+0x770>
cmp    %r13,0xb8(%rsp)
je     18cc <wots_verify+0x79c>
cmp    %r13,0xb0(%rsp)
jne    1834 <wots_verify+0x704>
mov    0x30(%rsp),%rdi
lea    0x170(%rsp),%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
xor    $0x20,%r15d
mov    0x20(%rsp),%rdi
cmp    %r13,0xa8(%rsp)
jne    1859 <wots_verify+0x729>
lea    0x190(%rsp),%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
xor    $0x40,%r15d
mov    0x18(%rsp),%rdi
cmp    %r13,0xa0(%rsp)
jne    1881 <wots_verify+0x751>
lea    0x1b0(%rsp),%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
xor    $0x80,%r15d
cmp    $0xe,%rbx
ja     1220 <wots_verify+0xf0>
add    $0x20,%r13
mov    %r14,%rbx
test   %r15d,%r15d
jg     1580 <wots_verify+0x450>
jmp    1220 <wots_verify+0xf0>
mov    0x80(%rsp),%rdi
lea    0x130(%rsp),%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
xor    $0x8,%r15d
cmp    %r13,0xb8(%rsp)
jne    180f <wots_verify+0x6df>
mov    0x98(%rsp),%rdi
lea    0x150(%rsp),%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
xor    $0x10,%r15d
cmp    %r13,0xb0(%rsp)
je     1819 <wots_verify+0x6e9>
jmp    1834 <wots_verify+0x704>
mov    0x10(%rsp),%rax
lea    0x800(%rax),%rsi
lea    0xd0(%rsp),%rdi
mov    $0x20,%edx
call   1050 <memcpy@plt>
movslq 0x2d0(%rsp),%rbx
cmp    $0xf,%rbx
mov    0x70(%rsp),%r15
jge    1968 <wots_verify+0x838>
mov    $0xf,%eax
sub    %ebx,%eax
shl    $0x5,%rbx
add    %r15,%rbx
cmp    $0x2,%eax
mov    $0x1,%ebp
cmovge %eax,%ebp
lea    0xd0(%rsp),%r14
nop
mov    %r14,%rdi
mov    %r14,%rsi
mov    %rbx,%rdx
call   1030 <hash_n_n_mask@plt>
add    $0x20,%rbx
add    $0xffffffffffffffff,%rbp
jne    1950 <wots_verify+0x820>
mov    (%rsp),%rax
lea    0x800(%rax),%rdi
lea    0xd0(%rsp),%rbx
mov    %rbx,%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
mov    0x10(%rsp),%rax
lea    0x820(%rax),%rsi
mov    %rbx,%rdi
mov    $0x20,%edx
call   1050 <memcpy@plt>
movslq 0x2d4(%rsp),%rbx
cmp    $0xe,%rbx
jg     19e8 <wots_verify+0x8b8>
mov    $0xf,%eax
sub    %ebx,%eax
shl    $0x5,%rbx
add    %r15,%rbx
cmp    $0x2,%eax
mov    $0x1,%ebp
cmovge %eax,%ebp
lea    0xd0(%rsp),%r14
mov    %r14,%rdi
mov    %r14,%rsi
mov    %rbx,%rdx
call   1030 <hash_n_n_mask@plt>
add    $0x20,%rbx
add    $0xffffffffffffffff,%rbp
jne    19d0 <wots_verify+0x8a0>
mov    (%rsp),%rax
lea    0x820(%rax),%rdi
lea    0xd0(%rsp),%rbx
mov    %rbx,%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
mov    0x10(%rsp),%rsi
add    $0x840,%rsi
mov    %rbx,%rdi
mov    $0x20,%edx
call   1050 <memcpy@plt>
movslq 0x2d8(%rsp),%rax
cmp    $0xe,%rax
jg     1a68 <wots_verify+0x938>
mov    $0xf,%ecx
sub    %eax,%ecx
shl    $0x5,%rax
add    %rax,%r15
cmp    $0x2,%ecx
mov    $0x1,%ebp
cmovge %ecx,%ebp
lea    0xd0(%rsp),%rbx
mov    %rbx,%rdi
mov    %rbx,%rsi
mov    %r15,%rdx
call   1030 <hash_n_n_mask@plt>
add    $0x20,%r15
add    $0xffffffffffffffff,%rbp
jne    1a50 <wots_verify+0x920>
mov    (%rsp),%rdi
add    $0x840,%rdi
lea    0xd0(%rsp),%rsi
mov    $0x20,%edx
call   1050 <memcpy@plt>
add    $0x2e8,%rsp
pop    %rbx
pop    %r12
pop    %r13
pop    %r14
pop    %r15
pop    %rbp
ret

LLVM IR (-O0):
define void @wots_verify(i8* %0, i8* %1, i8* %2, i8* %3) {
%5 = alloca i8*
%6 = alloca i8*
%7 = alloca i8*
%8 = alloca i8*
%9 = alloca [67 x i32]
%10 = alloca i32
%11 = alloca i32
%12 = alloca i32
%13 = alloca i32
%14 = alloca i32
%15 = alloca [256 x i8]
%16 = alloca i32
store i8* %0, i8** %5
store i8* %1, i8** %6
store i8* %2, i8** %7
store i8* %3, i8** %8
store i32 0, i32* %11
store i32 0, i32* %10
br label %17
17: ; preds = %59, %4
%18 = load i32, i32* %10
%19 = icmp slt i32 %18, 64
br i1 %19, label %20, label %62
20: ; preds = %17
%21 = load i8*, i8** %7
%22 = load i32, i32* %10
%23 = sdiv i32 %22, 2
%24 = sext i32 %23 to i64
%25 = getelementptr inbounds i8, i8* %21, i64 %24
%26 = load i8, i8* %25
%27 = zext i8 %26 to i32
%28 = and i32 %27, 15
%29 = load i32, i32* %10
%30 = sext i32 %29 to i64
%31 = getelementptr inbounds [67 x i32], [67 x i32]* %9, i64 0, i64 %30
store i32 %28, i32* %31
%32 = load i8*, i8** %7
%33 = load i32, i32* %10
%34 = sdiv i32 %33, 2
%35 = sext i32 %34 to i64
%36 = getelementptr inbounds i8, i8* %32, i64 %35
%37 = load i8, i8* %36
%38 = zext i8 %37 to i32
%39 = ashr i32 %38, 4
%40 = load i32, i32* %10
%41 = add nsw i32 %40, 1
%42 = sext i32 %41 to i64
%43 = getelementptr inbounds [67 x i32], [67 x i32]* %9, i64 0, i64 %42
store i32 %39, i32* %43
%44 = load i32, i32* %10
%45 = sext i32 %44 to i64
%46 = getelementptr inbounds [67 x i32], [67 x i32]* %9, i64 0, i64 %45
%47 = load i32, i32* %46
%48 = sub nsw i32 15, %47
%49 = load i32, i32* %11
%50 = add nsw i32 %49, %48
store i32 %50, i32* %11
%51 = load i32, i32* %10
%52 = add nsw i32 %51, 1
%53 = sext i32 %52 to i64
%54 = getelementptr inbounds [67 x i32], [67 x i32]* %9, i64 0, i64 %53
%55 = load i32, i32* %54
%56 = sub nsw i32 15, %55
%57 = load i32, i32* %11
%58 = add nsw i32 %57, %56
store i32 %58, i32* %11
br label %59
59: ; preds = %20
%60 = load i32, i32* %10
%61 = add nsw i32 %60, 2
store i32 %61, i32* %10
br label %17
62: ; preds = %17
br label %63
63: ; preds = %74, %62
%64 = load i32, i32* %10
%65 = icmp slt i32 %64, 67
br i1 %65, label %66, label %77
66: ; preds = %63
%67 = load i32, i32* %11
%68 = and i32 %67, 15
%69 = load i32, i32* %10
%70 = sext i32 %69 to i64
%71 = getelementptr inbounds [67 x i32], [67 x i32]* %9, i64 0, i64 %70
store i32 %68, i32* %71
%72 = load i32, i32* %11
%73 = ashr i32 %72, 4
store i32 %73, i32* %11
br label %74
74: ; preds = %66
%75 = load i32, i32* %10
%76 = add nsw i32 %75, 1
store i32 %76, i32* %10
br label %63
77: ; preds = %63
store i32 0, i32* %10
br label %78
78: ; preds = %222, %77
%79 = load i32, i32* %10
%80 = add nsw i32 %79, 8
%81 = icmp slt i32 %80, 67
br i1 %81, label %82, label %225
82: ; preds = %78
%83 = getelementptr inbounds [256 x i8], [256 x i8]* %15, i64 0, i64 0
%84 = load i8*, i8** %6
%85 = load i32, i32* %10
%86 = mul nsw i32 %85, 32
%87 = sext i32 %86 to i64
%88 = getelementptr inbounds i8, i8* %84, i64 %87
%89 = call i32 @memcpy(i8* %83, i8* %88, i32 256)
store i32 255, i32* %16
store i32 0, i32* %13
br label %90
90: ; preds = %121, %82
%91 = load i32, i32* %13
%92 = icmp slt i32 %91, 8
br i1 %92, label %93, label %124
93: ; preds = %90
%94 = load i32, i32* %10
%95 = load i32, i32* %13
%96 = add nsw i32 %94, %95
%97 = sext i32 %96 to i64
%98 = getelementptr inbounds [67 x i32], [67 x i32]* %9, i64 0, i64 %97
%99 = load i32, i32* %98
%100 = sub nsw i32 15, %99
%101 = icmp eq i32 0, %100
br i1 %101, label %102, label %120
102: ; preds = %93
%103 = load i8*, i8** %5
%104 = load i32, i32* %10
%105 = load i32, i32* %13
%106 = add nsw i32 %104, %105
%107 = mul nsw i32 %106, 32
%108 = sext i32 %107 to i64
%109 = getelementptr inbounds i8, i8* %103, i64 %108
%110 = getelementptr inbounds [256 x i8], [256 x i8]* %15, i64 0, i64 0
%111 = load i32, i32* %13
%112 = mul nsw i32 %111, 32
%113 = sext i32 %112 to i64
%114 = getelementptr inbounds i8, i8* %110, i64 %113
%115 = call i32 @memcpy(i8* %109, i8* %114, i32 32)
%116 = load i32, i32* %13
%117 = shl i32 1, %116
%118 = load i32, i32* %16
%119 = xor i32 %118, %117
store i32 %119, i32* %16
br label %120
120: ; preds = %102, %93
br label %121
121: ; preds = %120
%122 = load i32, i32* %13
%123 = add nsw i32 %122, 1
store i32 %123, i32* %13
br label %90
124: ; preds = %90
store i32 0, i32* %12
br label %125
125: ; preds = %220, %124
%126 = load i32, i32* %12
%127 = icmp slt i32 %126, 16
%128 = zext i1 %127 to i32
%129 = load i32, i32* %16
%130 = icmp sgt i32 %129, 0
%131 = zext i1 %130 to i32
%132 = and i32 %128, %131
%133 = icmp ne i32 %132, 0
br i1 %133, label %134, label %221
134: ; preds = %125
store i32 0, i32* %13
br label %135
135: ; preds = %176, %134
%136 = load i32, i32* %13
%137 = icmp slt i32 %136, 8
br i1 %137, label %138, label %179
138: ; preds = %135
store i32 0, i32* %14
br label %139
139: ; preds = %172, %138
%140 = load i32, i32* %14
%141 = icmp slt i32 %140, 32
br i1 %141, label %142, label %175
142: ; preds = %139
%143 = load i8*, i8** %8
%144 = load i32, i32* %10
%145 = load i32, i32* %13
%146 = add nsw i32 %144, %145
%147 = sext i32 %146 to i64
%148 = getelementptr inbounds [67 x i32], [67 x i32]* %9, i64 0, i64 %147
%149 = load i32, i32* %148
%150 = mul nsw i32 %149, 32
%151 = sext i32 %150 to i64
%152 = getelementptr inbounds i8, i8* %143, i64 %151
%153 = load i32, i32* %12
%154 = mul nsw i32 %153, 32
%155 = sext i32 %154 to i64
%156 = getelementptr inbounds i8, i8* %152, i64 %155
%157 = load i32, i32* %14
%158 = sext i32 %157 to i64
%159 = getelementptr inbounds i8, i8* %156, i64 %158
%160 = load i8, i8* %159
%161 = zext i8 %160 to i32
%162 = load i32, i32* %14
%163 = load i32, i32* %13
%164 = mul nsw i32 %163, 32
%165 = add nsw i32 %162, %164
%166 = sext i32 %165 to i64
%167 = getelementptr inbounds [256 x i8], [256 x i8]* %15, i64 0, i64 %166
%168 = load i8, i8* %167
%169 = zext i8 %168 to i32
%170 = xor i32 %169, %161
%171 = trunc i32 %170 to i8
store i8 %171, i8* %167
br label %172
172: ; preds = %142
%173 = load i32, i32* %14
%174 = add nsw i32 %173, 1
store i32 %174, i32* %14
br label %139
175: ; preds = %139
br label %176
176: ; preds = %175
%177 = load i32, i32* %13
%178 = add nsw i32 %177, 1
store i32 %178, i32* %13
br label %135
179: ; preds = %135
%180 = getelementptr inbounds [256 x i8], [256 x i8]* %15, i64 0, i64 0
%181 = getelementptr inbounds [256 x i8], [256 x i8]* %15, i64 0, i64 0
%182 = call i32 @hash_n_n_8x(i8* %180, i8* %181)
%183 = load i32, i32* %12
%184 = add nsw i32 %183, 1
store i32 %184, i32* %12
store i32 0, i32* %13
br label %185
185: ; preds = %217, %179
%186 = load i32, i32* %13
%187 = icmp slt i32 %186, 8
br i1 %187, label %188, label %220
188: ; preds = %185
%189 = load i32, i32* %12
%190 = load i32, i32* %10
%191 = load i32, i32* %13
%192 = add nsw i32 %190, %191
%193 = sext i32 %192 to i64
%194 = getelementptr inbounds [67 x i32], [67 x i32]* %9, i64 0, i64 %193
%195 = load i32, i32* %194
%196 = sub nsw i32 15, %195
%197 = icmp eq i32 %189, %196
br i1 %197, label %198, label %216
198: ; preds = %188
%199 = load i8*, i8** %5
%200 = load i32, i32* %10
%201 = load i32, i32* %13
%202 = add nsw i32 %200, %201
%203 = mul nsw i32 %202, 32
%204 = sext i32 %203 to i64
%205 = getelementptr inbounds i8, i8* %199, i64 %204
%206 = getelementptr inbounds [256 x i8], [256 x i8]* %15, i64 0, i64 0
%207 = load i32, i32* %13
%208 = mul nsw i32 %207, 32
%209 = sext i32 %208 to i64
%210 = getelementptr inbounds i8, i8* %206, i64 %209
%211 = call i32 @memcpy(i8* %205, i8* %210, i32 32)
%212 = load i32, i32* %13
%213 = shl i32 1, %212
%214 = load i32, i32* %16
%215 = xor i32 %214, %213
store i32 %215, i32* %16
br label %216
216: ; preds = %198, %188
br label %217
217: ; preds = %216
%218 = load i32, i32* %13
%219 = add nsw i32 %218, 1
store i32 %219, i32* %13
br label %185
220: ; preds = %185
br label %125
221: ; preds = %125
br label %222
222: ; preds = %221
%223 = load i32, i32* %10
%224 = add nsw i32 %223, 8
store i32 %224, i32* %10
br label %78
225: ; preds = %78
br label %226
226: ; preds = %272, %225
%227 = load i32, i32* %10
%228 = icmp slt i32 %227, 67
br i1 %228, label %229, label %275
229: ; preds = %226
%230 = getelementptr inbounds [256 x i8], [256 x i8]* %15, i64 0, i64 0
%231 = load i8*, i8** %6
%232 = load i32, i32* %10
%233 = mul nsw i32 %232, 32
%234 = sext i32 %233 to i64
%235 = getelementptr inbounds i8, i8* %231, i64 %234
%236 = call i32 @memcpy(i8* %230, i8* %235, i32 32)
store i32 0, i32* %12
br label %237
237: ; preds = %261, %229
%238 = load i32, i32* %12
%239 = load i32, i32* %10
%240 = sext i32 %239 to i64
%241 = getelementptr inbounds [67 x i32], [67 x i32]* %9, i64 0, i64 %240
%242 = load i32, i32* %241
%243 = sub nsw i32 15, %242
%244 = icmp slt i32 %238, %243
br i1 %244, label %245, label %264
245: ; preds = %237
%246 = getelementptr inbounds [256 x i8], [256 x i8]* %15, i64 0, i64 0
%247 = getelementptr inbounds [256 x i8], [256 x i8]* %15, i64 0, i64 0
%248 = load i8*, i8** %8
%249 = load i32, i32* %10
%250 = sext i32 %249 to i64
%251 = getelementptr inbounds [67 x i32], [67 x i32]* %9, i64 0, i64 %250
%252 = load i32, i32* %251
%253 = mul nsw i32 %252, 32
%254 = sext i32 %253 to i64
%255 = getelementptr inbounds i8, i8* %248, i64 %254
%256 = load i32, i32* %12
%257 = mul nsw i32 %256, 32
%258 = sext i32 %257 to i64
%259 = getelementptr inbounds i8, i8* %255, i64 %258
%260 = call i32 @hash_n_n_mask(i8* %246, i8* %247, i8* %259)
br label %261
261: ; preds = %245
%262 = load i32, i32* %12
%263 = add nsw i32 %262, 1
store i32 %263, i32* %12
br label %237
264: ; preds = %237
%265 = load i8*, i8** %5
%266 = load i32, i32* %10
%267 = mul nsw i32 %266, 32
%268 = sext i32 %267 to i64
%269 = getelementptr inbounds i8, i8* %265, i64 %268
%270 = getelementptr inbounds [256 x i8], [256 x i8]* %15, i64 0, i64 0
%271 = call i32 @memcpy(i8* %269, i8* %270, i32 32)
br label %272
272: ; preds = %264
%273 = load i32, i32* %10
%274 = add nsw i32 %273, 1
store i32 %274, i32* %10
br label %226
275: ; preds = %226
ret void
}

LLVM IR (-O2):
define void @wots_verify(i8* %0, i8* %1, i8* nocapture %2, i8* %3) {
%5 = alloca [67 x i32]
%6 = alloca [256 x i8]
%7 = bitcast [67 x i32]* %5 to i8*
%8 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 0
br label %9
9: ; preds = %9, %4
%10 = phi i64 [ 0, %4 ], [ %30, %9 ]
%11 = phi <2 x i32> [ zeroinitializer, %4 ], [ %29, %9 ]
%12 = shl i64 %10, 1
%13 = and i64 %10, 9223372036854775806
%14 = getelementptr inbounds i8, i8* %2, i64 %13
%15 = bitcast i8* %14 to <2 x i8>*
%16 = load <2 x i8>, <2 x i8>* %15
%17 = and <2 x i8> %16, <i8 15, i8 15>
%18 = zext <2 x i8> %17 to <2 x i32>
%19 = lshr <2 x i8> %16, <i8 4, i8 4>
%20 = zext <2 x i8> %19 to <2 x i32>
%21 = or i64 %12, 1
%22 = getelementptr inbounds [67 x i32], [67 x i32]* %5, i64 0, i64 %21
%23 = getelementptr inbounds i32, i32* %22, i64 -1
%24 = bitcast i32* %23 to <4 x i32>*
%25 = shufflevector <2 x i32> %18, <2 x i32> %20, <4 x i32> <i32 0, i32 2, i32 1, i32 3>
store <4 x i32> %25, <4 x i32>* %24
%26 = xor <2 x i32> %18, <i32 15, i32 15>
%27 = add <2 x i32> %26, %11
%28 = xor <2 x i32> %20, <i32 15, i32 15>
%29 = add <2 x i32> %27, %28
%30 = add nuw i64 %10, 2
%31 = icmp eq i64 %30, 32
br i1 %31, label %32, label %9
32: ; preds = %9
%33 = call i32 @llvm.vector.reduce.add.v2i32(<2 x i32> %29)
%34 = and i32 %33, 15
%35 = getelementptr inbounds [67 x i32], [67 x i32]* %5, i64 0, i64 64
store i32 %34, i32* %35
%36 = lshr i32 %33, 4
%37 = and i32 %36, 15
%38 = getelementptr inbounds [67 x i32], [67 x i32]* %5, i64 0, i64 65
store i32 %37, i32* %38
%39 = lshr i32 %33, 8
%40 = and i32 %39, 15
%41 = getelementptr inbounds [67 x i32], [67 x i32]* %5, i64 0, i64 66
store i32 %40, i32* %41
%42 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 32
%43 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 64
%44 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 96
%45 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 128
%46 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 160
%47 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 192
%48 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 224
%49 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 32
%50 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 64
%51 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 96
%52 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 128
%53 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 160
%54 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 192
%55 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 224
%56 = bitcast [256 x i8]* %6 to <16 x i8>*
%57 = bitcast [256 x i8]* %6 to <16 x i8>*
%58 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 16
%59 = bitcast i8* %58 to <16 x i8>*
%60 = bitcast i8* %58 to <16 x i8>*
%61 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 32
%62 = bitcast i8* %61 to <16 x i8>*
%63 = bitcast i8* %61 to <16 x i8>*
%64 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 48
%65 = bitcast i8* %64 to <16 x i8>*
%66 = bitcast i8* %64 to <16 x i8>*
%67 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 64
%68 = bitcast i8* %67 to <16 x i8>*
%69 = bitcast i8* %67 to <16 x i8>*
%70 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 80
%71 = bitcast i8* %70 to <16 x i8>*
%72 = bitcast i8* %70 to <16 x i8>*
%73 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 96
%74 = bitcast i8* %73 to <16 x i8>*
%75 = bitcast i8* %73 to <16 x i8>*
%76 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 112
%77 = bitcast i8* %76 to <16 x i8>*
%78 = bitcast i8* %76 to <16 x i8>*
%79 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 128
%80 = bitcast i8* %79 to <16 x i8>*
%81 = bitcast i8* %79 to <16 x i8>*
%82 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 144
%83 = bitcast i8* %82 to <16 x i8>*
%84 = bitcast i8* %82 to <16 x i8>*
%85 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 160
%86 = bitcast i8* %85 to <16 x i8>*
%87 = bitcast i8* %85 to <16 x i8>*
%88 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 176
%89 = bitcast i8* %88 to <16 x i8>*
%90 = bitcast i8* %88 to <16 x i8>*
%91 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 192
%92 = bitcast i8* %91 to <16 x i8>*
%93 = bitcast i8* %91 to <16 x i8>*
%94 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 208
%95 = bitcast i8* %94 to <16 x i8>*
%96 = bitcast i8* %94 to <16 x i8>*
%97 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 224
%98 = bitcast i8* %97 to <16 x i8>*
%99 = bitcast i8* %97 to <16 x i8>*
%100 = getelementptr inbounds [256 x i8], [256 x i8]* %6, i64 0, i64 240
%101 = bitcast i8* %100 to <16 x i8>*
%102 = bitcast i8* %100 to <16 x i8>*
br label %112
103: ; preds = %401, %238
%104 = add nuw nsw i64 %114, 8
%105 = icmp ult i64 %114, 59
br i1 %105, label %112, label %106
106: ; preds = %103
%107 = getelementptr inbounds i8, i8* %1, i64 2048
%108 = call i32 @memcpy(i8* %8, i8* %107, i32 32)
%109 = getelementptr inbounds [67 x i32], [67 x i32]* %5, i64 0, i64 64
%110 = load i32, i32* %109
%111 = icmp slt i32 %110, 15
br i1 %111, label %406, label %420
112: ; preds = %32, %103
%113 = phi i64 [ 0, %32 ], [ %115, %103 ]
%114 = phi i64 [ 8, %32 ], [ %104, %103 ]
%115 = add nuw nsw i64 %113, 8
%116 = shl nsw i64 %113, 5
%117 = getelementptr inbounds i8, i8* %1, i64 %116
%118 = call i32 @memcpy(i8* %8, i8* %117, i32 256)
%119 = getelementptr inbounds [67 x i32], [67 x i32]* %5, i64 0, i64 %113
%120 = load i32, i32* %119
%121 = icmp eq i32 %120, 15
br i1 %121, label %158, label %161
122: ; preds = %238
%123 = shl nsw i32 %198, 5
%124 = sext i32 %123 to i64
%125 = getelementptr inbounds i8, i8* %3, i64 %124
%126 = shl nsw i32 %209, 5
%127 = sext i32 %126 to i64
%128 = getelementptr inbounds i8, i8* %3, i64 %127
%129 = shl nsw i32 %220, 5
%130 = sext i32 %129 to i64
%131 = getelementptr inbounds i8, i8* %3, i64 %130
%132 = shl nsw i32 %231, 5
%133 = sext i32 %132 to i64
%134 = getelementptr inbounds i8, i8* %3, i64 %133
%135 = getelementptr inbounds i8, i8* %0, i64 %116
%136 = shl nsw i64 %163, 5
%137 = getelementptr inbounds i8, i8* %0, i64 %136
%138 = shl nsw i64 %174, 5
%139 = getelementptr inbounds i8, i8* %0, i64 %138
%140 = shl nsw i64 %185, 5
%141 = getelementptr inbounds i8, i8* %0, i64 %140
%142 = sub nsw i32 15, %198
%143 = zext i32 %142 to i64
%144 = shl nsw i64 %196, 5
%145 = getelementptr inbounds i8, i8* %0, i64 %144
%146 = sub nsw i32 15, %209
%147 = zext i32 %146 to i64
%148 = shl nsw i64 %207, 5
%149 = getelementptr inbounds i8, i8* %0, i64 %148
%150 = sub nsw i32 15, %220
%151 = zext i32 %150 to i64
%152 = shl nsw i64 %218, 5
%153 = getelementptr inbounds i8, i8* %0, i64 %152
%154 = sub nsw i32 15, %231
%155 = zext i32 %154 to i64
%156 = shl nsw i64 %229, 5
%157 = getelementptr inbounds i8, i8* %0, i64 %156
br label %241
158: ; preds = %112
%159 = getelementptr inbounds i8, i8* %0, i64 %116
%160 = call i32 @memcpy(i8* %159, i8* %8, i32 32)
br label %161
161: ; preds = %112, %158
%162 = phi i32 [ 254, %158 ], [ 255, %112 ]
%163 = or i64 %113, 1
%164 = getelementptr inbounds [67 x i32], [67 x i32]* %5, i64 0, i64 %163
%165 = load i32, i32* %164
%166 = icmp eq i32 %165, 15
br i1 %166, label %167, label %172
167: ; preds = %161
%168 = shl nsw i64 %163, 5
%169 = getelementptr inbounds i8, i8* %0, i64 %168
%170 = call i32 @memcpy(i8* %169, i8* %42, i32 32)
%171 = and i32 %162, 253
br label %172
172: ; preds = %167, %161
%173 = phi i32 [ %171, %167 ], [ %162, %161 ]
%174 = or i64 %113, 2
%175 = getelementptr inbounds [67 x i32], [67 x i32]* %5, i64 0, i64 %174
%176 = load i32, i32* %175
%177 = icmp eq i32 %176, 15
br i1 %177, label %178, label %183
178: ; preds = %172
%179 = shl nsw i64 %174, 5
%180 = getelementptr inbounds i8, i8* %0, i64 %179
%181 = call i32 @memcpy(i8* %180, i8* %43, i32 32)
%182 = xor i32 %173, 4
br label %183
183: ; preds = %178, %172
%184 = phi i32 [ %182, %178 ], [ %173, %172 ]
%185 = or i64 %113, 3
%186 = getelementptr inbounds [67 x i32], [67 x i32]* %5, i64 0, i64 %185
%187 = load i32, i32* %186
%188 = icmp eq i32 %187, 15
br i1 %188, label %189, label %194
189: ; preds = %183
%190 = shl nsw i64 %185, 5
%191 = getelementptr inbounds i8, i8* %0, i64 %190
%192 = call i32 @memcpy(i8* %191, i8* %44, i32 32)
%193 = xor i32 %184, 8
br label %194
194: ; preds = %189, %183
%195 = phi i32 [ %193, %189 ], [ %184, %183 ]
%196 = or i64 %113, 4
%197 = getelementptr inbounds [67 x i32], [67 x i32]* %5, i64 0, i64 %196
%198 = load i32, i32* %197
%199 = icmp eq i32 %198, 15
br i1 %199, label %200, label %205
200: ; preds = %194
%201 = shl nsw i64 %196, 5
%202 = getelementptr inbounds i8, i8* %0, i64 %201
%203 = call i32 @memcpy(i8* %202, i8* %45, i32 32)
%204 = xor i32 %195, 16
br label %205
205: ; preds = %200, %194
%206 = phi i32 [ %204, %200 ], [ %195, %194 ]
%207 = or i64 %113, 5
%208 = getelementptr inbounds [67 x i32], [67 x i32]* %5, i64 0, i64 %207
%209 = load i32, i32* %208
%210 = icmp eq i32 %209, 15
br i1 %210, label %211, label %216
211: ; preds = %205
%212 = shl nsw i64 %207, 5
%213 = getelementptr inbounds i8, i8* %0, i64 %212
%214 = call i32 @memcpy(i8* %213, i8* %46, i32 32)
%215 = xor i32 %206, 32
br label %216
216: ; preds = %211, %205
%217 = phi i32 [ %215, %211 ], [ %206, %205 ]
%218 = or i64 %113, 6
%219 = getelementptr inbounds [67 x i32], [67 x i32]* %5, i64 0, i64 %218
%220 = load i32, i32* %219
%221 = icmp eq i32 %220, 15
br i1 %221, label %222, label %227
222: ; preds = %216
%223 = shl nsw i64 %218, 5
%224 = getelementptr inbounds i8, i8* %0, i64 %223
%225 = call i32 @memcpy(i8* %224, i8* %47, i32 32)
%226 = xor i32 %217, 64
br label %227
227: ; preds = %222, %216
%228 = phi i32 [ %226, %222 ], [ %217, %216 ]
%229 = or i64 %113, 7
%230 = getelementptr inbounds [67 x i32], [67 x i32]* %5, i64 0, i64 %229
%231 = load i32, i32* %230
%232 = icmp eq i32 %231, 15
br i1 %232, label %233, label %238
233: ; preds = %227
%234 = shl nsw i64 %229, 5
%235 = getelementptr inbounds i8, i8* %0, i64 %234
%236 = call i32 @memcpy(i8* %235, i8* %48, i32 32)
%237 = xor i32 %228, 128
br label %238
238: ; preds = %233, %227
%239 = phi i32 [ %237, %233 ], [ %228, %227 ]
%240 = icmp sgt i32 %239, 0
br i1 %240, label %122, label %103
241: ; preds = %122, %401
%242 = phi i32 [ %187, %122 ], [ %370, %401 ]
%243 = phi i32 [ %176, %122 ], [ %361, %401 ]
%244 = phi i32 [ %165, %122 ], [ %352, %401 ]
%245 = phi i32 [ %120, %122 ], [ %343, %401 ]
%246 = phi i64 [ 0, %122 ], [ %342, %401 ]
%247 = phi i32 [ %239, %122 ], [ %402, %401 ]
%248 = shl nuw nsw i64 %246, 5
%249 = shl nsw i32 %245, 5
%250 = sext i32 %249 to i64
%251 = getelementptr inbounds i8, i8* %3, i64 %250
%252 = getelementptr inbounds i8, i8* %251, i64 %248
%253 = bitcast i8* %252 to <16 x i8>*
%254 = load <16 x i8>, <16 x i8>* %253
%255 = load <16 x i8>, <16 x i8>* %56
%256 = xor <16 x i8> %255, %254
store <16 x i8> %256, <16 x i8>* %57
%257 = getelementptr inbounds i8, i8* %252, i64 16
%258 = bitcast i8* %257 to <16 x i8>*
%259 = load <16 x i8>, <16 x i8>* %258
%260 = load <16 x i8>, <16 x i8>* %59
%261 = xor <16 x i8> %260, %259
store <16 x i8> %261, <16 x i8>* %60
%262 = shl nsw i32 %244, 5
%263 = sext i32 %262 to i64
%264 = getelementptr inbounds i8, i8* %3, i64 %263
%265 = getelementptr inbounds i8, i8* %264, i64 %248
%266 = bitcast i8* %265 to <16 x i8>*
%267 = load <16 x i8>, <16 x i8>* %266
%268 = load <16 x i8>, <16 x i8>* %62
%269 = xor <16 x i8> %268, %267
store <16 x i8> %269, <16 x i8>* %63
%270 = getelementptr inbounds i8, i8* %265, i64 16
%271 = bitcast i8* %270 to <16 x i8>*
%272 = load <16 x i8>, <16 x i8>* %271
%273 = load <16 x i8>, <16 x i8>* %65
%274 = xor <16 x i8> %273, %272
store <16 x i8> %274, <16 x i8>* %66
%275 = shl nsw i32 %243, 5
%276 = sext i32 %275 to i64
%277 = getelementptr inbounds i8, i8* %3, i64 %276
%278 = getelementptr inbounds i8, i8* %277, i64 %248
%279 = bitcast i8* %278 to <16 x i8>*
%280 = load <16 x i8>, <16 x i8>* %279
%281 = load <16 x i8>, <16 x i8>* %68
%282 = xor <16 x i8> %281, %280
store <16 x i8> %282, <16 x i8>* %69
%283 = getelementptr inbounds i8, i8* %278, i64 16
%284 = bitcast i8* %283 to <16 x i8>*
%285 = load <16 x i8>, <16 x i8>* %284
%286 = load <16 x i8>, <16 x i8>* %71
%287 = xor <16 x i8> %286, %285
store <16 x i8> %287, <16 x i8>* %72
%288 = shl nsw i32 %242, 5
%289 = sext i32 %288 to i64
%290 = getelementptr inbounds i8, i8* %3, i64 %289
%291 = getelementptr inbounds i8, i8* %290, i64 %248
%292 = bitcast i8* %291 to <16 x i8>*
%293 = load <16 x i8>, <16 x i8>* %292
%294 = load <16 x i8>, <16 x i8>* %74
%295 = xor <16 x i8> %294, %293
store <16 x i8> %295, <16 x i8>* %75
%296 = getelementptr inbounds i8, i8* %291, i64 16
%297 = bitcast i8* %296 to <16 x i8>*
%298 = load <16 x i8>, <16 x i8>* %297
%299 = load <16 x i8>, <16 x i8>* %77
%300 = xor <16 x i8> %299, %298
store <16 x i8> %300, <16 x i8>* %78
%301 = getelementptr inbounds i8, i8* %125, i64 %248
%302 = bitcast i8* %301 to <16 x i8>*
%303 = load <16 x i8>, <16 x i8>* %302
%304 = load <16 x i8>, <16 x i8>* %80
%305 = xor <16 x i8> %304, %303
store <16 x i8> %305, <16 x i8>* %81
%306 = getelementptr inbounds i8, i8* %301, i64 16
%307 = bitcast i8* %306 to <16 x i8>*
%308 = load <16 x i8>, <16 x i8>* %307
%309 = load <16 x i8>, <16 x i8>* %83
%310 = xor <16 x i8> %309, %308
store <16 x i8> %310, <16 x i8>* %84
%311 = getelementptr inbounds i8, i8* %128, i64 %248
%312 = bitcast i8* %311 to <16 x i8>*
%313 = load <16 x i8>, <16 x i8>* %312
%314 = load <16 x i8>, <16 x i8>* %86
%315 = xor <16 x i8> %314, %313
store <16 x i8> %315, <16 x i8>* %87
%316 = getelementptr inbounds i8, i8* %311, i64 16
%317 = bitcast i8* %316 to <16 x i8>*
%318 = load <16 x i8>, <16 x i8>* %317
%319 = load <16 x i8>, <16 x i8>* %89
%320 = xor <16 x i8> %319, %318
store <16 x i8> %320, <16 x i8>* %90
%321 = getelementptr inbounds i8, i8* %131, i64 %248
%322 = bitcast i8* %321 to <16 x i8>*
%323 = load <16 x i8>, <16 x i8>* %322
%324 = load <16 x i8>, <16 x i8>* %92
%325 = xor <16 x i8> %324, %323
store <16 x i8> %325, <16 x i8>* %93
%326 = getelementptr inbounds i8, i8* %321, i64 16
%327 = bitcast i8* %326 to <16 x i8>*
%328 = load <16 x i8>, <16 x i8>* %327
%329 = load <16 x i8>, <16 x i8>* %95
%330 = xor <16 x i8> %329, %328
store <16 x i8> %330, <16 x i8>* %96
%331 = getelementptr inbounds i8, i8* %134, i64 %248
%332 = bitcast i8* %331 to <16 x i8>*
%333 = load <16 x i8>, <16 x i8>* %332
%334 = load <16 x i8>, <16 x i8>* %98
%335 = xor <16 x i8> %334, %333
store <16 x i8> %335, <16 x i8>* %99
%336 = getelementptr inbounds i8, i8* %331, i64 16
%337 = bitcast i8* %336 to <16 x i8>*
%338 = load <16 x i8>, <16 x i8>* %337
%339 = load <16 x i8>, <16 x i8>* %101
%340 = xor <16 x i8> %339, %338
store <16 x i8> %340, <16 x i8>* %102
%341 = call i32 @hash_n_n_8x(i8* %8, i8* %8)
%342 = add nuw nsw i64 %246, 1
%343 = load i32, i32* %119
%344 = sub nsw i32 15, %343
%345 = zext i32 %344 to i64
%346 = icmp eq i64 %342, %345
br i1 %346, label %347, label %350
347: ; preds = %241
%348 = call i32 @memcpy(i8* %135, i8* %8, i32 32)
%349 = xor i32 %247, 1
br label %350
350: ; preds = %241, %347
%351 = phi i32 [ %349, %347 ], [ %247, %241 ]
%352 = load i32, i32* %164
%353 = sub nsw i32 15, %352
%354 = zext i32 %353 to i64
%355 = icmp eq i64 %342, %354
br i1 %355, label %356, label %359
356: ; preds = %350
%357 = call i32 @memcpy(i8* %137, i8* %49, i32 32)
%358 = xor i32 %351, 2
br label %359
359: ; preds = %356, %350
%360 = phi i32 [ %358, %356 ], [ %351, %350 ]
%361 = load i32, i32* %175
%362 = sub nsw i32 15, %361
%363 = zext i32 %362 to i64
%364 = icmp eq i64 %342, %363
br i1 %364, label %365, label %368
365: ; preds = %359
%366 = call i32 @memcpy(i8* %139, i8* %50, i32 32)
%367 = xor i32 %360, 4
br label %368
368: ; preds = %365, %359
%369 = phi i32 [ %367, %365 ], [ %360, %359 ]
%370 = load i32, i32* %186
%371 = sub nsw i32 15, %370
%372 = zext i32 %371 to i64
%373 = icmp eq i64 %342, %372
br i1 %373, label %374, label %377
374: ; preds = %368
%375 = call i32 @memcpy(i8* %141, i8* %51, i32 32)
%376 = xor i32 %369, 8
br label %377
377: ; preds = %374, %368
%378 = phi i32 [ %376, %374 ], [ %369, %368 ]
%379 = icmp eq i64 %342, %143
br i1 %379, label %380, label %383
380: ; preds = %377
%381 = call i32 @memcpy(i8* %145, i8* %52, i32 32)
%382 = xor i32 %378, 16
br label %383
383: ; preds = %380, %377
%384 = phi i32 [ %382, %380 ], [ %378, %377 ]
%385 = icmp eq i64 %342, %147
br i1 %385, label %386, label %389
386: ; preds = %383
%387 = call i32 @memcpy(i8* %149, i8* %53, i32 32)
%388 = xor i32 %384, 32
br label %389
389: ; preds = %386, %383
%390 = phi i32 [ %388, %386 ], [ %384, %383 ]
%391 = icmp eq i64 %342, %151
br i1 %391, label %392, label %395
392: ; preds = %389
%393 = call i32 @memcpy(i8* %153, i8* %54, i32 32)
%394 = xor i32 %390, 64
br label %395
395: ; preds = %392, %389
%396 = phi i32 [ %394, %392 ], [ %390, %389 ]
%397 = icmp eq i64 %342, %155
br i1 %397, label %398, label %401
398: ; preds = %395
%399 = call i32 @memcpy(i8* %157, i8* %55, i32 32)
%400 = xor i32 %396, 128
br label %401
401: ; preds = %398, %395
%402 = phi i32 [ %400, %398 ], [ %396, %395 ]
%403 = icmp ult i64 %246, 15
%404 = icmp sgt i32 %402, 0
%405 = and i1 %403, %404
br i1 %405, label %241, label %103
406: ; preds = %106
%407 = sub i32 15, %110
%408 = shl nsw i32 %110, 5
%409 = sext i32 %408 to i64
%410 = getelementptr inbounds i8, i8* %3, i64 %409
%411 = call i32 @llvm.smax.i32(i32 %407, i32 1)
%412 = zext i32 %411 to i64
br label %413
413: ; preds = %406, %413
%414 = phi i64 [ 0, %406 ], [ %418, %413 ]
%415 = shl nsw i64 %414, 5
%416 = getelementptr inbounds i8, i8* %410, i64 %415
%417 = call i32 @hash_n_n_mask(i8* %8, i8* %8, i8* %416)
%418 = add nuw nsw i64 %414, 1
%419 = icmp eq i64 %418, %412
br i1 %419, label %420, label %413
420: ; preds = %413, %106
%421 = getelementptr inbounds i8, i8* %0, i64 2048
%422 = call i32 @memcpy(i8* %421, i8* %8, i32 32)
%423 = getelementptr inbounds i8, i8* %1, i64 2080
%424 = call i32 @memcpy(i8* %8, i8* %423, i32 32)
%425 = getelementptr inbounds [67 x i32], [67 x i32]* %5, i64 0, i64 65
%426 = load i32, i32* %425
%427 = icmp slt i32 %426, 15
br i1 %427, label %428, label %442
428: ; preds = %420
%429 = sub i32 15, %426
%430 = shl nsw i32 %426, 5
%431 = sext i32 %430 to i64
%432 = getelementptr inbounds i8, i8* %3, i64 %431
%433 = call i32 @llvm.smax.i32(i32 %429, i32 1)
%434 = zext i32 %433 to i64
br label %435
435: ; preds = %435, %428
%436 = phi i64 [ 0, %428 ], [ %440, %435 ]
%437 = shl nsw i64 %436, 5
%438 = getelementptr inbounds i8, i8* %432, i64 %437
%439 = call i32 @hash_n_n_mask(i8* %8, i8* %8, i8* %438)
%440 = add nuw nsw i64 %436, 1
%441 = icmp eq i64 %440, %434
br i1 %441, label %442, label %435
442: ; preds = %435, %420
%443 = getelementptr inbounds i8, i8* %0, i64 2080
%444 = call i32 @memcpy(i8* %443, i8* %8, i32 32)
%445 = getelementptr inbounds i8, i8* %1, i64 2112
%446 = call i32 @memcpy(i8* %8, i8* %445, i32 32)
%447 = getelementptr inbounds [67 x i32], [67 x i32]* %5, i64 0, i64 66
%448 = load i32, i32* %447
%449 = icmp slt i32 %448, 15
br i1 %449, label %450, label %464
450: ; preds = %442
%451 = sub i32 15, %448
%452 = shl nsw i32 %448, 5
%453 = sext i32 %452 to i64
%454 = getelementptr inbounds i8, i8* %3, i64 %453
%455 = call i32 @llvm.smax.i32(i32 %451, i32 1)
%456 = zext i32 %455 to i64
br label %457
457: ; preds = %457, %450
%458 = phi i64 [ 0, %450 ], [ %462, %457 ]
%459 = shl nsw i64 %458, 5
%460 = getelementptr inbounds i8, i8* %454, i64 %459
%461 = call i32 @hash_n_n_mask(i8* %8, i8* %8, i8* %460)
%462 = add nuw nsw i64 %458, 1
%463 = icmp eq i64 %462, %456
br i1 %463, label %464, label %457
464: ; preds = %457, %442
%465 = getelementptr inbounds i8, i8* %0, i64 2112
%466 = call i32 @memcpy(i8* %465, i8* %8, i32 32)
ret void
}