	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_mbedtls_gcm_auth_decrypt       ## -- Begin function mbedtls_gcm_auth_decrypt
	.p2align	4, 0x90
_mbedtls_gcm_auth_decrypt:              ## @mbedtls_gcm_auth_decrypt
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r12
	pushq	%rbx
	subq	$32, %rsp
	.cfi_offset %rbx, -48
	.cfi_offset %r12, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movq	%r9, %rax
	movq	%r8, %r9
	movq	%rcx, %r8
	movq	%rdx, %rcx
	movq	%rsi, %r15
	movq	40(%rbp), %r14
	movq	24(%rbp), %r12
	movq	32(%rbp), %r10
	movq	___stack_chk_guard@GOTPCREL(%rip), %rdx
	movq	(%rdx), %rdx
	movq	%rdx, -40(%rbp)
	movq	_MBEDTLS_GCM_DECRYPT@GOTPCREL(%rip), %rdx
	movl	(%rdx), %esi
	subq	$8, %rsp
	leaq	-64(%rbp), %rbx
	movq	%r15, %rdx
	pushq	%rbx
	pushq	%r12
	pushq	%r14
	pushq	%r10
	pushq	%rax
	callq	_mbedtls_gcm_crypt_and_tag
	addq	$48, %rsp
	testl	%eax, %eax
	jne	LBB0_1
## %bb.3:
	testq	%r12, %r12
	je	LBB0_6
## %bb.4:
	movq	16(%rbp), %rax
	cmpq	$8, %r12
	jae	LBB0_7
## %bb.5:
	xorl	%edx, %edx
	xorl	%ecx, %ecx
	jmp	LBB0_13
LBB0_7:
	movq	%r12, %rcx
	andq	$-8, %rcx
	leaq	-8(%rcx), %rsi
	movq	%rsi, %r8
	shrq	$3, %r8
	incq	%r8
	testq	%rsi, %rsi
	je	LBB0_17
## %bb.8:
	movq	%r8, %rdi
	andq	$-2, %rdi
	pxor	%xmm0, %xmm0
	xorl	%esi, %esi
	pxor	%xmm1, %xmm1
	.p2align	4, 0x90
LBB0_9:                                 ## =>This Inner Loop Header: Depth=1
	movd	(%rax,%rsi), %xmm2              ## xmm2 = mem[0],zero,zero,zero
	pxor	-64(%rbp,%rsi), %xmm2
	movl	-60(%rbp,%rsi), %ebx
	movl	-52(%rbp,%rsi), %edx
	xorl	4(%rax,%rsi), %ebx
	movd	%ebx, %xmm3
	pmovzxbd	%xmm2, %xmm2                    ## xmm2 = xmm2[0],zero,zero,zero,xmm2[1],zero,zero,zero,xmm2[2],zero,zero,zero,xmm2[3],zero,zero,zero
	por	%xmm0, %xmm2
	pmovzxbd	%xmm3, %xmm3                    ## xmm3 = xmm3[0],zero,zero,zero,xmm3[1],zero,zero,zero,xmm3[2],zero,zero,zero,xmm3[3],zero,zero,zero
	por	%xmm1, %xmm3
	movd	8(%rax,%rsi), %xmm0             ## xmm0 = mem[0],zero,zero,zero
	movq	-56(%rbp,%rsi), %xmm1           ## xmm1 = mem[0],zero
	xorl	12(%rax,%rsi), %edx
	pxor	%xmm0, %xmm1
	movd	%edx, %xmm4
	pmovzxbd	%xmm1, %xmm0                    ## xmm0 = xmm1[0],zero,zero,zero,xmm1[1],zero,zero,zero,xmm1[2],zero,zero,zero,xmm1[3],zero,zero,zero
	por	%xmm2, %xmm0
	pmovzxbd	%xmm4, %xmm1                    ## xmm1 = xmm4[0],zero,zero,zero,xmm4[1],zero,zero,zero,xmm4[2],zero,zero,zero,xmm4[3],zero,zero,zero
	por	%xmm3, %xmm1
	addq	$16, %rsi
	addq	$-2, %rdi
	jne	LBB0_9
## %bb.10:
	testb	$1, %r8b
	je	LBB0_12
LBB0_11:
	movd	(%rax,%rsi), %xmm2              ## xmm2 = mem[0],zero,zero,zero
	movq	-64(%rbp,%rsi), %xmm3           ## xmm3 = mem[0],zero
	pxor	%xmm2, %xmm3
	movl	-60(%rbp,%rsi), %edx
	xorl	4(%rax,%rsi), %edx
	movd	%edx, %xmm2
	pmovzxbd	%xmm3, %xmm3                    ## xmm3 = xmm3[0],zero,zero,zero,xmm3[1],zero,zero,zero,xmm3[2],zero,zero,zero,xmm3[3],zero,zero,zero
	por	%xmm3, %xmm0
	pmovzxbd	%xmm2, %xmm2                    ## xmm2 = xmm2[0],zero,zero,zero,xmm2[1],zero,zero,zero,xmm2[2],zero,zero,zero,xmm2[3],zero,zero,zero
	por	%xmm2, %xmm1
LBB0_12:
	por	%xmm1, %xmm0
	pshufd	$238, %xmm0, %xmm1              ## xmm1 = xmm0[2,3,2,3]
	por	%xmm0, %xmm1
	pshufd	$85, %xmm1, %xmm0               ## xmm0 = xmm1[1,1,1,1]
	por	%xmm1, %xmm0
	movd	%xmm0, %edx
	cmpq	%r12, %rcx
	je	LBB0_14
	.p2align	4, 0x90
LBB0_13:                                ## =>This Inner Loop Header: Depth=1
	movzbl	-64(%rbp,%rcx), %ebx
	xorb	(%rax,%rcx), %bl
	movzbl	%bl, %esi
	orl	%esi, %edx
	incq	%rcx
	cmpq	%rcx, %r12
	jne	LBB0_13
LBB0_14:
	testl	%edx, %edx
	je	LBB0_6
## %bb.15:
	movq	%r14, %rdi
	movq	%r15, %rsi
	callq	_mbedtls_zeroize
	movq	_MBEDTLS_ERR_GCM_AUTH_FAILED@GOTPCREL(%rip), %rax
	movl	(%rax), %eax
	jmp	LBB0_1
LBB0_6:
	xorl	%eax, %eax
LBB0_1:
	movq	___stack_chk_guard@GOTPCREL(%rip), %rcx
	movq	(%rcx), %rcx
	cmpq	-40(%rbp), %rcx
	jne	LBB0_18
## %bb.2:
	addq	$32, %rsp
	popq	%rbx
	popq	%r12
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
LBB0_17:
	pxor	%xmm0, %xmm0
	xorl	%esi, %esi
	pxor	%xmm1, %xmm1
	testb	$1, %r8b
	jne	LBB0_11
	jmp	LBB0_12
LBB0_18:
	callq	___stack_chk_fail
	.cfi_endproc
                                        ## -- End function
	.comm	_MBEDTLS_GCM_DECRYPT,4,2        ## @MBEDTLS_GCM_DECRYPT
	.comm	_MBEDTLS_ERR_GCM_AUTH_FAILED,4,2 ## @MBEDTLS_ERR_GCM_AUTH_FAILED
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.section	__TEXT,__literal16,16byte_literals
	.p2align	4                               ; -- Begin function mbedtls_gcm_auth_decrypt
lCPI0_0:
	.byte	0                               ; 0x0
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	1                               ; 0x1
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	2                               ; 0x2
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	3                               ; 0x3
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
lCPI0_1:
	.byte	4                               ; 0x4
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	5                               ; 0x5
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	6                               ; 0x6
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	7                               ; 0x7
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
lCPI0_2:
	.byte	8                               ; 0x8
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	9                               ; 0x9
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	10                              ; 0xa
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	11                              ; 0xb
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
lCPI0_3:
	.byte	12                              ; 0xc
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	13                              ; 0xd
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	14                              ; 0xe
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	15                              ; 0xf
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.section	__TEXT,__text,regular,pure_instructions
	.globl	_mbedtls_gcm_auth_decrypt
	.p2align	2
_mbedtls_gcm_auth_decrypt:              ; @mbedtls_gcm_auth_decrypt
	.cfi_startproc
; %bb.0:
	sub	sp, sp, #96
	.cfi_def_cfa_offset 96
	stp	x22, x21, [sp, #48]             ; 16-byte Folded Spill
	stp	x20, x19, [sp, #64]             ; 16-byte Folded Spill
	stp	x29, x30, [sp, #80]             ; 16-byte Folded Spill
	add	x29, sp, #80
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	mov	x22, x7
	mov	x21, x6
	mov	x6, x5
	mov	x5, x4
	mov	x4, x3
	mov	x3, x2
	mov	x19, x1
	ldp	x7, x20, [x29, #16]
Lloh0:
	adrp	x8, ___stack_chk_guard@GOTPAGE
Lloh1:
	ldr	x8, [x8, ___stack_chk_guard@GOTPAGEOFF]
Lloh2:
	ldr	x8, [x8]
	str	x8, [sp, #40]
Lloh3:
	adrp	x8, _MBEDTLS_GCM_DECRYPT@GOTPAGE
Lloh4:
	ldr	x8, [x8, _MBEDTLS_GCM_DECRYPT@GOTPAGEOFF]
Lloh5:
	ldr	w1, [x8]
	add	x8, sp, #24
	stp	x22, x8, [sp, #8]
	str	x20, [sp]
	mov	x2, x19
	bl	_mbedtls_gcm_crypt_and_tag
	cbnz	w0, LBB0_18
; %bb.1:
	cbz	x22, LBB0_17
; %bb.2:
	cmp	x22, #8
	b.hs	LBB0_4
; %bb.3:
	mov	w11, #0
	mov	x8, #0
	b	LBB0_13
LBB0_4:
	adrp	x9, lCPI0_0@PAGE
	adrp	x10, lCPI0_1@PAGE
	cmp	x22, #32
	b.hs	LBB0_6
; %bb.5:
	mov	w11, #0
	mov	x8, #0
	b	LBB0_10
LBB0_6:
	and	x8, x22, #0xffffffffffffffe0
	add	x11, x21, #16
	add	x12, sp, #24
	add	x12, x12, #16
	movi.2d	v0, #0000000000000000
	ldr	q1, [x9, lCPI0_0@PAGEOFF]
	ldr	q2, [x10, lCPI0_1@PAGEOFF]
Lloh6:
	adrp	x13, lCPI0_2@PAGE
Lloh7:
	ldr	q3, [x13, lCPI0_2@PAGEOFF]
	movi.2d	v5, #0000000000000000
Lloh8:
	adrp	x13, lCPI0_3@PAGE
Lloh9:
	ldr	q17, [x13, lCPI0_3@PAGEOFF]
	mov	x13, x8
	movi.2d	v4, #0000000000000000
	movi.2d	v7, #0000000000000000
	movi.2d	v6, #0000000000000000
	movi.2d	v18, #0000000000000000
	movi.2d	v16, #0000000000000000
	movi.2d	v19, #0000000000000000
LBB0_7:                                 ; =>This Inner Loop Header: Depth=1
	ldp	q20, q21, [x11, #-16]
	ldp	q22, q23, [x12, #-16]
	eor.16b	v20, v22, v20
	eor.16b	v21, v23, v21
	tbl.16b	v22, { v20 }, v1
	tbl.16b	v23, { v20 }, v2
	tbl.16b	v24, { v20 }, v3
	tbl.16b	v20, { v20 }, v17
	tbl.16b	v25, { v21 }, v1
	tbl.16b	v26, { v21 }, v2
	tbl.16b	v27, { v21 }, v3
	tbl.16b	v21, { v21 }, v17
	orr.16b	v7, v7, v20
	orr.16b	v4, v4, v24
	orr.16b	v5, v5, v23
	orr.16b	v0, v0, v22
	orr.16b	v19, v19, v21
	orr.16b	v16, v16, v27
	orr.16b	v18, v18, v26
	orr.16b	v6, v6, v25
	add	x11, x11, #32
	add	x12, x12, #32
	subs	x13, x13, #32
	b.ne	LBB0_7
; %bb.8:
	orr.16b	v1, v18, v5
	orr.16b	v2, v19, v7
	orr.16b	v0, v6, v0
	orr.16b	v3, v16, v4
	orr.16b	v0, v0, v3
	orr.16b	v1, v1, v2
	orr.16b	v0, v0, v1
	ext.16b	v1, v0, v0, #8
	orr.8b	v0, v0, v1
	mov.s	w11, v0[1]
	fmov	w12, s0
	orr	w11, w12, w11
	cmp	x8, x22
	b.eq	LBB0_15
; %bb.9:
	tst	x22, #0x18
	b.eq	LBB0_13
LBB0_10:
	mov	x13, x8
	and	x8, x22, #0xfffffffffffffff8
	movi.2d	v0, #0000000000000000
	movi.2d	v1, #0000000000000000
	mov.s	v1[0], w11
	add	x11, x21, x13
	add	x12, sp, #24
	add	x12, x12, x13
	sub	x13, x13, x8
	ldr	q2, [x9, lCPI0_0@PAGEOFF]
	ldr	q3, [x10, lCPI0_1@PAGEOFF]
LBB0_11:                                ; =>This Inner Loop Header: Depth=1
	ldr	d4, [x11], #8
	ldr	d5, [x12], #8
	eor.8b	v4, v5, v4
	tbl.16b	v5, { v4 }, v2
	tbl.16b	v4, { v4 }, v3
	orr.16b	v0, v0, v4
	orr.16b	v1, v1, v5
	adds	x13, x13, #8
	b.ne	LBB0_11
; %bb.12:
	orr.16b	v0, v1, v0
	ext.16b	v1, v0, v0, #8
	orr.8b	v0, v0, v1
	mov.s	w9, v0[1]
	fmov	w10, s0
	orr	w11, w10, w9
	cmp	x8, x22
	b.eq	LBB0_15
LBB0_13:
	sub	x9, x22, x8
	add	x10, sp, #24
	add	x10, x10, x8
	add	x8, x21, x8
LBB0_14:                                ; =>This Inner Loop Header: Depth=1
	ldrb	w12, [x8], #1
	ldrb	w13, [x10], #1
	eor	w12, w13, w12
	orr	w11, w11, w12
	subs	x9, x9, #1
	b.ne	LBB0_14
LBB0_15:
	cbz	w11, LBB0_17
; %bb.16:
	mov	x0, x20
	mov	x1, x19
	bl	_mbedtls_zeroize
Lloh10:
	adrp	x8, _MBEDTLS_ERR_GCM_AUTH_FAILED@GOTPAGE
Lloh11:
	ldr	x8, [x8, _MBEDTLS_ERR_GCM_AUTH_FAILED@GOTPAGEOFF]
Lloh12:
	ldr	w0, [x8]
	b	LBB0_18
LBB0_17:
	mov	w0, #0
LBB0_18:
	ldr	x8, [sp, #40]
Lloh13:
	adrp	x9, ___stack_chk_guard@GOTPAGE
Lloh14:
	ldr	x9, [x9, ___stack_chk_guard@GOTPAGEOFF]
Lloh15:
	ldr	x9, [x9]
	cmp	x9, x8
	b.ne	LBB0_20
; %bb.19:
	ldp	x29, x30, [sp, #80]             ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #64]             ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #48]             ; 16-byte Folded Reload
	add	sp, sp, #96
	ret
LBB0_20:
	bl	___stack_chk_fail
	.loh AdrpLdrGotLdr	Lloh3, Lloh4, Lloh5
	.loh AdrpLdrGotLdr	Lloh0, Lloh1, Lloh2
	.loh AdrpLdr	Lloh8, Lloh9
	.loh AdrpAdrp	Lloh6, Lloh8
	.loh AdrpLdr	Lloh6, Lloh7
	.loh AdrpLdrGotLdr	Lloh10, Lloh11, Lloh12
	.loh AdrpLdrGotLdr	Lloh13, Lloh14, Lloh15
	.cfi_endproc
                                        ; -- End function
	.comm	_MBEDTLS_GCM_DECRYPT,4,2        ; @MBEDTLS_GCM_DECRYPT
	.comm	_MBEDTLS_ERR_GCM_AUTH_FAILED,4,2 ; @MBEDTLS_ERR_GCM_AUTH_FAILED
.subsections_via_symbols
