	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_br_rsa_oaep_unpad              ## -- Begin function br_rsa_oaep_unpad
	.p2align	4, 0x90
_br_rsa_oaep_unpad:                     ## @br_rsa_oaep_unpad
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r13
	pushq	%r12
	pushq	%rbx
	subq	$40, %rsp
	.cfi_offset %rbx, -56
	.cfi_offset %r12, -48
	.cfi_offset %r13, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movq	%r8, %rbx
	movq	%rcx, %r15
	movq	%rdx, %r12
	movq	%rsi, -48(%rbp)                 ## 8-byte Spill
	movq	%rdi, %r14
	callq	_br_digest_size
	movq	(%rbx), %r13
	leaq	(%rax,%rax), %rcx
	addq	$2, %rcx
	xorl	%esi, %esi
	cmpq	%rcx, %r13
	jb	LBB0_6
## %bb.1:
	movq	%rbx, -80(%rbp)                 ## 8-byte Spill
	leaq	1(%r15), %rdi
	movq	%rdi, -72(%rbp)                 ## 8-byte Spill
	leaq	(%r15,%rax), %rcx
	incq	%rcx
	movq	%r15, -64(%rbp)                 ## 8-byte Spill
	movq	%r12, -56(%rbp)                 ## 8-byte Spill
	movq	%rax, %r12
	notq	%r12
	addq	%r13, %r12
	movq	%rax, %rbx
	movq	%rax, %rsi
	movq	%r14, %rdx
	movq	%rcx, %r15
	movq	%r12, %r8
	callq	_br_mgf1_xor
	movq	%r15, %rdi
	movq	%r12, %rsi
	movq	%r14, %rdx
	movq	-72(%rbp), %rcx                 ## 8-byte Reload
	movq	%rbx, %r8
	callq	_br_mgf1_xor
	movq	%r14, %rdi
	movq	%r15, %rsi
	movq	-48(%rbp), %rdx                 ## 8-byte Reload
	movq	-56(%rbp), %rcx                 ## 8-byte Reload
	callq	_xor_hash_data
	movq	%rbx, -56(%rbp)                 ## 8-byte Spill
	leaq	1(%rbx), %r12
	movl	$0, %r15d
	movl	$0, %r14d
	cmpq	%r13, %r12
	movq	%r13, -48(%rbp)                 ## 8-byte Spill
	jae	LBB0_4
## %bb.2:
	movq	-64(%rbp), %rax                 ## 8-byte Reload
	movzbl	(%rax), %r13d
	addl	$255, %r13d
	shrl	$8, %r13d
	xorl	$1, %r13d
	xorl	%r14d, %r14d
	xorl	%r15d, %r15d
	.p2align	4, 0x90
LBB0_3:                                 ## =>This Inner Loop Header: Depth=1
	movq	-64(%rbp), %rax                 ## 8-byte Reload
	movzbl	(%rax,%r12), %edi
	leal	255(%rdi), %ebx
	shrl	$8, %ebx
	andl	%r13d, %ebx
                                        ## kill: def $edi killed $edi killed $rdi
	movl	$1, %esi
	callq	_EQ
	andl	%ebx, %eax
	orl	%eax, %r15d
	movl	%ebx, %edi
	callq	_NOT
	andl	%eax, %r13d
	addl	%r13d, %r14d
	incq	%r12
	cmpq	%r12, -48(%rbp)                 ## 8-byte Folded Reload
	jne	LBB0_3
LBB0_4:
	movl	%r14d, %edi
	movq	-56(%rbp), %rbx                 ## 8-byte Reload
	movl	%ebx, %esi
	callq	_GE
	movq	%rbx, %rdx
	movl	%eax, %r12d
	andl	%r15d, %r12d
	movq	-80(%rbp), %r15                 ## 8-byte Reload
	movq	-64(%rbp), %rdi                 ## 8-byte Reload
	movq	-48(%rbp), %rbx                 ## 8-byte Reload
	movl	$0, %esi
	je	LBB0_6
## %bb.5:
	movslq	%r14d, %rax
	leaq	(%rdx,%rax), %rcx
	addq	%rdx, %rax
	addq	$2, %rax
	subq	%rax, %rbx
	leaq	(%rdi,%rcx), %rsi
	addq	$2, %rsi
	movq	%rbx, %rdx
	callq	_memmove
	movq	%rbx, (%r15)
	movl	%r12d, %esi
LBB0_6:
	movl	%esi, %eax
	addq	$40, %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
	.cfi_endproc
                                        ## -- End function
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_br_rsa_oaep_unpad              ; -- Begin function br_rsa_oaep_unpad
	.p2align	2
_br_rsa_oaep_unpad:                     ; @br_rsa_oaep_unpad
	.cfi_startproc
; %bb.0:
	sub	sp, sp, #112
	.cfi_def_cfa_offset 112
	stp	x28, x27, [sp, #16]             ; 16-byte Folded Spill
	stp	x26, x25, [sp, #32]             ; 16-byte Folded Spill
	stp	x24, x23, [sp, #48]             ; 16-byte Folded Spill
	stp	x22, x21, [sp, #64]             ; 16-byte Folded Spill
	stp	x20, x19, [sp, #80]             ; 16-byte Folded Spill
	stp	x29, x30, [sp, #96]             ; 16-byte Folded Spill
	add	x29, sp, #96
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	.cfi_offset w25, -72
	.cfi_offset w26, -80
	.cfi_offset w27, -88
	.cfi_offset w28, -96
	mov	x19, x4
	mov	x20, x3
	mov	x22, x2
	mov	x23, x1
	mov	x24, x0
	bl	_br_digest_size
	ldr	x28, [x19]
	lsl	x8, x0, #1
	add	x8, x8, #2
	cmp	x28, x8
	b.hs	LBB0_2
; %bb.1:
	mov	w23, #0
	b	LBB0_8
LBB0_2:
	mov	x21, x0
	str	x19, [sp, #8]                   ; 8-byte Folded Spill
	add	x25, x20, #1
	add	x26, x25, x0
	mvn	x19, x0
	add	x27, x28, x19
	mov	x0, x25
	mov	x1, x21
	mov	x2, x24
	mov	x3, x26
	mov	x4, x27
	bl	_br_mgf1_xor
	mov	x0, x26
	mov	x1, x27
	mov	x2, x24
	mov	x3, x25
	mov	x4, x21
	bl	_br_mgf1_xor
	mov	x0, x24
	mov	x1, x26
	mov	x2, x23
	mov	x3, x22
	bl	_xor_hash_data
	add	x8, x21, #1
	cmp	x8, x28
	b.hs	LBB0_5
; %bb.3:
	mov	w22, #0
	mov	w24, #0
	ldrb	w9, [x20]
	add	w9, w9, #255
	lsr	w9, w9, #8
	eor	w25, w9, #0x1
	add	x26, x19, x28
	add	x27, x20, x8
LBB0_4:                                 ; =>This Inner Loop Header: Depth=1
	ldrb	w0, [x27], #1
	add	w8, w0, #255
	and	w23, w25, w8, lsr #8
	mov	w1, #1
	bl	_EQ
	and	w8, w23, w0
	orr	w24, w8, w24
	mov	x0, x23
	bl	_NOT
	and	w25, w0, w25
	add	w22, w25, w22
	subs	x26, x26, #1
	b.ne	LBB0_4
	b	LBB0_6
LBB0_5:
	mov	w24, #0
	mov	w22, #0
LBB0_6:
	mov	x0, x22
	mov	x1, x21
	bl	_GE
	ands	w23, w0, w24
	b.eq	LBB0_8
; %bb.7:
	add	x8, x21, w22, sxtw
	add	x8, x8, #2
	sub	x21, x28, x8
	add	x1, x20, x8
	mov	x0, x20
	mov	x2, x21
	bl	_memmove
	ldr	x8, [sp, #8]                    ; 8-byte Folded Reload
	str	x21, [x8]
LBB0_8:
	mov	x0, x23
	ldp	x29, x30, [sp, #96]             ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #80]             ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #64]             ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #48]             ; 16-byte Folded Reload
	ldp	x26, x25, [sp, #32]             ; 16-byte Folded Reload
	ldp	x28, x27, [sp, #16]             ; 16-byte Folded Reload
	add	sp, sp, #112
	ret
	.cfi_endproc
                                        ; -- End function
.subsections_via_symbols
