	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.section	__TEXT,__literal16,16byte_literals
	.p2align	4                               ## -- Begin function br_aes_ct_keysched
LCPI0_0:
	.space	16,170
LCPI0_1:
	.space	16,85
	.section	__TEXT,__text,regular,pure_instructions
	.globl	_br_aes_ct_keysched
	.p2align	4, 0x90
_br_aes_ct_keysched:                    ## @br_aes_ct_keysched
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r13
	pushq	%r12
	pushq	%rbx
	subq	$536, %rsp                      ## imm = 0x218
	.cfi_offset %rbx, -56
	.cfi_offset %r12, -48
	.cfi_offset %r13, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movq	%rsi, %r15
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	movq	%rax, -48(%rbp)
	cmpq	$16, %rdx
	je	LBB0_1
## %bb.2:
	cmpq	$32, %rdx
	je	LBB0_5
## %bb.3:
	xorl	%eax, %eax
	cmpq	$24, %rdx
	jne	LBB0_22
## %bb.4:
	movq	%rdi, -544(%rbp)                ## 8-byte Spill
	movl	$12, %eax
	jmp	LBB0_6
LBB0_1:
	movq	%rdi, -544(%rbp)                ## 8-byte Spill
	movl	$10, %eax
	jmp	LBB0_6
LBB0_5:
	movq	%rdi, -544(%rbp)                ## 8-byte Spill
	movl	$14, %eax
LBB0_6:
	shrq	$2, %rdx
	movq	%rax, -568(%rbp)                ## 8-byte Spill
	leal	(,%rax,4), %eax
	movq	%rax, -560(%rbp)                ## 8-byte Spill
                                        ## kill: def $eax killed $eax killed $rax
	orl	$4, %eax
	movl	%eax, -532(%rbp)                ## 4-byte Spill
	movl	$1, %r12d
	xorl	%ebx, %ebx
	movq	%rdx, -552(%rbp)                ## 8-byte Spill
	movq	%rdx, %r14
	xorl	%r13d, %r13d
	.p2align	4, 0x90
LBB0_7:                                 ## =>This Inner Loop Header: Depth=1
	movslq	%ebx, %rbx
	leaq	(%r15,%rbx), %rdi
	callq	_br_dec32le
	movq	%r13, %rcx
	sarq	$30, %rcx
	movl	%eax, -528(%rbp,%rcx)
	movslq	%r12d, %r12
	movl	%eax, -528(%rbp,%r12,4)
	movabsq	$8589934592, %rcx               ## imm = 0x200000000
	addq	%rcx, %r13
	addl	$2, %r12d
	addl	$4, %ebx
	decq	%r14
	jne	LBB0_7
## %bb.8:
	movq	-552(%rbp), %rdx                ## 8-byte Reload
	cmpl	%edx, -532(%rbp)                ## 4-byte Folded Reload
	jle	LBB0_17
## %bb.9:
	leal	(%rdx,%rdx), %ebx
	movq	-560(%rbp), %rcx                ## 8-byte Reload
	negl	%ecx
	leal	(%rdx,%rcx), %r14d
	addl	$-4, %r14d
	xorl	%r13d, %r13d
	xorl	%r15d, %r15d
	xorl	%r12d, %r12d
	jmp	LBB0_10
	.p2align	4, 0x90
LBB0_11:                                ##   in Loop: Header=BB0_10 Depth=1
	movl	%eax, %ecx
	shll	$24, %ecx
	sarl	$8, %eax
	orl	%ecx, %eax
	movl	%eax, %edi
	callq	_sub_word
	movq	_Rcon@GOTPCREL(%rip), %rcx
	movq	(%rcx), %rcx
	movl	%r15d, %edx
	xorl	(%rcx,%rdx,4), %eax
LBB0_15:                                ##   in Loop: Header=BB0_10 Depth=1
	movq	-552(%rbp), %rdx                ## 8-byte Reload
LBB0_16:                                ##   in Loop: Header=BB0_10 Depth=1
	movslq	%r13d, %r13
	xorl	-528(%rbp,%r13,4), %eax
	movslq	%ebx, %rbx
	movl	%eax, -528(%rbp,%rbx,4)
	leal	1(%rbx), %ecx
	movslq	%ecx, %rcx
	movl	%eax, -528(%rbp,%rcx,4)
	incl	%r12d
	xorl	%ecx, %ecx
	cmpl	%edx, %r12d
	sete	%cl
	movl	$0, %esi
	cmovel	%esi, %r12d
	addl	%ecx, %r15d
	addl	$2, %ebx
	addl	$2, %r13d
	incl	%r14d
	je	LBB0_17
LBB0_10:                                ## =>This Inner Loop Header: Depth=1
	testl	%r12d, %r12d
	je	LBB0_11
## %bb.12:                              ##   in Loop: Header=BB0_10 Depth=1
	cmpl	$7, %edx
	jl	LBB0_16
## %bb.13:                              ##   in Loop: Header=BB0_10 Depth=1
	cmpl	$4, %r12d
	jne	LBB0_16
## %bb.14:                              ##   in Loop: Header=BB0_10 Depth=1
	movl	%eax, %edi
	callq	_sub_word
	jmp	LBB0_15
LBB0_17:
	movl	-532(%rbp), %r14d               ## 4-byte Reload
	leaq	-528(%rbp), %r15
	xorl	%ebx, %ebx
	.p2align	4, 0x90
LBB0_18:                                ## =>This Inner Loop Header: Depth=1
	movq	%r15, %rdi
	callq	_br_aes_ct_ortho
	addq	$4, %rbx
	addq	$32, %r15
	cmpq	%r14, %rbx
	jb	LBB0_18
## %bb.19:
	movq	-568(%rbp), %rax                ## 8-byte Reload
	movl	%eax, %ecx
	shlq	$4, %rcx
	xorl	%esi, %esi
	movaps	LCPI0_0(%rip), %xmm0            ## xmm0 = [2863311530,2863311530,2863311530,2863311530]
	movq	-544(%rbp), %rdx                ## 8-byte Reload
	.p2align	4, 0x90
LBB0_20:                                ## =>This Inner Loop Header: Depth=1
	movaps	-528(%rbp,%rsi,2), %xmm1
	movaps	-512(%rbp,%rsi,2), %xmm2
	movaps	%xmm1, %xmm3
	shufps	$136, %xmm2, %xmm3              ## xmm3 = xmm3[0,2],xmm2[0,2]
	shufps	$221, %xmm2, %xmm1              ## xmm1 = xmm1[1,3],xmm2[1,3]
	andps	%xmm0, %xmm1
	movaps	%xmm0, %xmm2
	andnps	%xmm3, %xmm2
	orps	%xmm1, %xmm2
	movups	%xmm2, (%rdx,%rsi)
	movaps	-496(%rbp,%rsi,2), %xmm1
	movaps	-480(%rbp,%rsi,2), %xmm2
	movaps	%xmm1, %xmm3
	shufps	$136, %xmm2, %xmm3              ## xmm3 = xmm3[0,2],xmm2[0,2]
	shufps	$221, %xmm2, %xmm1              ## xmm1 = xmm1[1,3],xmm2[1,3]
	andps	%xmm0, %xmm1
	movaps	%xmm0, %xmm2
	andnps	%xmm3, %xmm2
	orps	%xmm1, %xmm2
	movups	%xmm2, 16(%rdx,%rsi)
	addq	$32, %rsi
	cmpq	%rsi, %rcx
	jne	LBB0_20
## %bb.21:
	movaps	-528(%rbp,%rsi,2), %xmm0
	movaps	-512(%rbp,%rsi,2), %xmm1
	movaps	%xmm0, %xmm2
	shufps	$136, %xmm1, %xmm2              ## xmm2 = xmm2[0,2],xmm1[0,2]
	shufps	$221, %xmm1, %xmm0              ## xmm0 = xmm0[1,3],xmm1[1,3]
	andps	LCPI0_1(%rip), %xmm2
	andps	LCPI0_0(%rip), %xmm0
	orps	%xmm2, %xmm0
	movups	%xmm0, (%rdx,%rsi)
LBB0_22:
	movq	___stack_chk_guard@GOTPCREL(%rip), %rcx
	movq	(%rcx), %rcx
	cmpq	-48(%rbp), %rcx
	jne	LBB0_24
## %bb.23:
                                        ## kill: def $eax killed $eax killed $rax
	addq	$536, %rsp                      ## imm = 0x218
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
LBB0_24:
	callq	___stack_chk_fail
	.cfi_endproc
                                        ## -- End function
	.comm	_Rcon,8,3                       ## @Rcon
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_br_aes_ct_keysched             ; -- Begin function br_aes_ct_keysched
	.p2align	2
_br_aes_ct_keysched:                    ; @br_aes_ct_keysched
	.cfi_startproc
; %bb.0:
	stp	x28, x27, [sp, #-96]!           ; 16-byte Folded Spill
	.cfi_def_cfa_offset 96
	stp	x26, x25, [sp, #16]             ; 16-byte Folded Spill
	stp	x24, x23, [sp, #32]             ; 16-byte Folded Spill
	stp	x22, x21, [sp, #48]             ; 16-byte Folded Spill
	stp	x20, x19, [sp, #64]             ; 16-byte Folded Spill
	stp	x29, x30, [sp, #80]             ; 16-byte Folded Spill
	add	x29, sp, #80
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	.cfi_offset w25, -72
	.cfi_offset w26, -80
	.cfi_offset w27, -88
	.cfi_offset w28, -96
	sub	sp, sp, #512
	mov	x21, x1
	mov	x19, x0
Lloh0:
	adrp	x8, ___stack_chk_guard@GOTPAGE
Lloh1:
	ldr	x8, [x8, ___stack_chk_guard@GOTPAGEOFF]
Lloh2:
	ldr	x8, [x8]
	stur	x8, [x29, #-96]
	cmp	x2, #16
	b.eq	LBB0_4
; %bb.1:
	cmp	x2, #32
	b.eq	LBB0_5
; %bb.2:
	cmp	x2, #24
	b.ne	LBB0_21
; %bb.3:
	mov	w8, #12
	b	LBB0_6
LBB0_4:
	mov	w8, #10
	b	LBB0_6
LBB0_5:
	mov	w8, #14
LBB0_6:
	mov	w24, #0
	mov	x25, #0
	lsr	x23, x2, #2
	str	w8, [sp, #12]                   ; 4-byte Folded Spill
	lsl	w8, w8, #2
	str	w8, [sp, #8]                    ; 4-byte Folded Spill
	orr	w22, w8, #0x4
	mov	w26, #1
	add	x27, sp, #16
	mov	x28, #8589934592
	mov	x20, x23
LBB0_7:                                 ; =>This Inner Loop Header: Depth=1
	add	x0, x21, w24, sxtw
	bl	_br_dec32le
	asr	x8, x25, #30
	str	w0, [x27, x8]
	str	w0, [x27, w26, sxtw #2]
	add	x25, x25, x28
	add	w26, w26, #2
	add	w24, w24, #4
	subs	x23, x23, #1
	b.ne	LBB0_7
; %bb.8:
	mov	x23, x20
	cmp	w22, w23
	b.le	LBB0_16
; %bb.9:
	mov	w21, #0
	mov	w24, #0
	mov	w25, #0
	lsl	w26, w23, #1
	ldr	w8, [sp, #8]                    ; 4-byte Folded Reload
	sub	w8, w23, w8
	sub	w27, w8, #4
Lloh3:
	adrp	x28, _Rcon@GOTPAGE
Lloh4:
	ldr	x28, [x28, _Rcon@GOTPAGEOFF]
	add	x20, sp, #16
	b	LBB0_12
LBB0_10:                                ;   in Loop: Header=BB0_12 Depth=1
	lsl	w8, w0, #24
	orr	w0, w8, w0, asr #8
	bl	_sub_word
	ldr	x8, [x28]
	ldr	w8, [x8, w24, uxtw #2]
	eor	w0, w8, w0
LBB0_11:                                ;   in Loop: Header=BB0_12 Depth=1
	ldr	w8, [x20, w21, sxtw #2]
	eor	w0, w8, w0
	add	w8, w26, w21
	str	w0, [x20, w8, sxtw #2]
	add	w8, w8, #1
	str	w0, [x20, w8, sxtw #2]
	add	w8, w25, #1
	cmp	w8, w23
	csinc	w25, wzr, w25, eq
	cinc	w24, w24, eq
	add	w21, w21, #2
	adds	w27, w27, #1
	b.hs	LBB0_16
LBB0_12:                                ; =>This Inner Loop Header: Depth=1
	cbz	w25, LBB0_10
; %bb.13:                               ;   in Loop: Header=BB0_12 Depth=1
	cmp	w23, #7
	b.lt	LBB0_11
; %bb.14:                               ;   in Loop: Header=BB0_12 Depth=1
	cmp	w25, #4
	b.ne	LBB0_11
; %bb.15:                               ;   in Loop: Header=BB0_12 Depth=1
	bl	_sub_word
	b	LBB0_11
LBB0_16:
	mov	x20, #0
	add	x21, sp, #16
LBB0_17:                                ; =>This Inner Loop Header: Depth=1
	mov	x0, x21
	bl	_br_aes_ct_ortho
	add	x20, x20, #4
	add	x21, x21, #32
	cmp	x20, x22
	b.lo	LBB0_17
; %bb.18:
	add	x8, sp, #16
	movi.16b	v0, #170
LBB0_19:                                ; =>This Inner Loop Header: Depth=1
	ld2.4s	{ v1, v2 }, [x8], #32
	bit.16b	v1, v2, v0
	str	q1, [x19], #16
	subs	x22, x22, #4
	b.ne	LBB0_19
; %bb.20:
	ldr	w0, [sp, #12]                   ; 4-byte Folded Reload
	b	LBB0_22
LBB0_21:
	mov	w0, #0
LBB0_22:
	ldur	x8, [x29, #-96]
Lloh5:
	adrp	x9, ___stack_chk_guard@GOTPAGE
Lloh6:
	ldr	x9, [x9, ___stack_chk_guard@GOTPAGEOFF]
Lloh7:
	ldr	x9, [x9]
	cmp	x9, x8
	b.ne	LBB0_24
; %bb.23:
	add	sp, sp, #512
	ldp	x29, x30, [sp, #80]             ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #64]             ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #48]             ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #32]             ; 16-byte Folded Reload
	ldp	x26, x25, [sp, #16]             ; 16-byte Folded Reload
	ldp	x28, x27, [sp], #96             ; 16-byte Folded Reload
	ret
LBB0_24:
	bl	___stack_chk_fail
	.loh AdrpLdrGotLdr	Lloh0, Lloh1, Lloh2
	.loh AdrpLdrGot	Lloh3, Lloh4
	.loh AdrpLdrGotLdr	Lloh5, Lloh6, Lloh7
	.cfi_endproc
                                        ; -- End function
	.comm	_Rcon,8,3                       ; @Rcon
.subsections_via_symbols
