	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_br_mgf1_xor                    ## -- Begin function br_mgf1_xor
	.p2align	4, 0x90
_br_mgf1_xor:                           ## @br_mgf1_xor
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r13
	pushq	%r12
	pushq	%rbx
	subq	$152, %rsp
	.cfi_offset %rbx, -56
	.cfi_offset %r12, -48
	.cfi_offset %r13, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movq	%r8, -176(%rbp)                 ## 8-byte Spill
	movq	%rcx, -168(%rbp)                ## 8-byte Spill
	movq	%rsi, %r14
	movq	%rdi, %rbx
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	movq	%rax, -48(%rbp)
	movq	%rdx, -160(%rbp)                ## 8-byte Spill
	movq	%rdx, %rdi
	callq	_br_digest_size
	testq	%r14, %r14
	je	LBB0_10
## %bb.1:
	leaq	-1(%rax), %rcx
	movq	%rcx, -136(%rbp)                ## 8-byte Spill
	xorl	%ecx, %ecx
	xorl	%edx, %edx
	xorl	%r15d, %r15d
	movq	%r14, -152(%rbp)                ## 8-byte Spill
	movq	%rax, -144(%rbp)                ## 8-byte Spill
	jmp	LBB0_2
	.p2align	4, 0x90
LBB0_9:                                 ##   in Loop: Header=BB0_2 Depth=1
	addq	%rax, %r15
	movq	-128(%rbp), %rdx                ## 8-byte Reload
	incq	%rdx
	movq	-184(%rbp), %rcx                ## 8-byte Reload
	subq	%rax, %rcx
	addq	%rax, %rbx
	cmpq	%r14, %r15
	jae	LBB0_10
LBB0_2:                                 ## =>This Loop Header: Depth=1
                                        ##     Child Loop BB0_6 Depth 2
                                        ##     Child Loop BB0_7 Depth 2
	movq	%rdx, -128(%rbp)                ## 8-byte Spill
	cmpq	%r15, %r14
	movq	%r15, %r12
	cmovaq	%r14, %r12
	movq	%rcx, -184(%rbp)                ## 8-byte Spill
	leaq	(%r12,%rcx), %r13
	movq	-136(%rbp), %rcx                ## 8-byte Reload
	cmpq	%rcx, %r13
	cmovaeq	%rcx, %r13
	imulq	%rdx, %rax
	subq	%rax, %r12
	cmpq	%rcx, %r12
	cmovaeq	%rcx, %r12
	movq	-160(%rbp), %r14                ## 8-byte Reload
	movq	%r14, -120(%rbp)
	leaq	-120(%rbp), %rdi
	callq	*16(%r14)
	leaq	-120(%rbp), %rdi
	movq	-168(%rbp), %rsi                ## 8-byte Reload
	movq	-176(%rbp), %rdx                ## 8-byte Reload
                                        ## kill: def $edx killed $edx killed $rdx
	callq	*8(%r14)
	leaq	-112(%rbp), %rdi
	movq	-128(%rbp), %rsi                ## 8-byte Reload
	callq	_br_enc32be
	leaq	-120(%rbp), %rdi
	leaq	-112(%rbp), %rsi
	movl	$4, %edx
	callq	*8(%r14)
	leaq	-120(%rbp), %rdi
	leaq	-112(%rbp), %rsi
	callq	*(%r14)
	movq	-144(%rbp), %rax                ## 8-byte Reload
	movq	-152(%rbp), %r14                ## 8-byte Reload
	testq	%rax, %rax
	je	LBB0_9
## %bb.3:                               ##   in Loop: Header=BB0_2 Depth=1
	incq	%r12
	cmpq	$17, %r12
	jae	LBB0_5
## %bb.4:                               ##   in Loop: Header=BB0_2 Depth=1
	xorl	%r12d, %r12d
	jmp	LBB0_7
	.p2align	4, 0x90
LBB0_5:                                 ##   in Loop: Header=BB0_2 Depth=1
	movl	%r12d, %ecx
	andl	$15, %ecx
	testq	%rcx, %rcx
	movl	$16, %edx
	cmoveq	%rdx, %rcx
	subq	%rcx, %r12
	subq	%rcx, %r13
	incq	%r13
	xorl	%ecx, %ecx
	.p2align	4, 0x90
LBB0_6:                                 ##   Parent Loop BB0_2 Depth=1
                                        ## =>  This Inner Loop Header: Depth=2
	movups	(%rbx,%rcx), %xmm0
	xorps	-112(%rbp,%rcx), %xmm0
	movups	%xmm0, (%rbx,%rcx)
	addq	$16, %rcx
	cmpq	%rcx, %r13
	jne	LBB0_6
	.p2align	4, 0x90
LBB0_7:                                 ##   Parent Loop BB0_2 Depth=1
                                        ## =>  This Inner Loop Header: Depth=2
	leaq	(%r15,%r12), %rcx
	cmpq	%r14, %rcx
	jae	LBB0_9
## %bb.8:                               ##   in Loop: Header=BB0_7 Depth=2
	movzbl	-112(%rbp,%r12), %ecx
	xorb	%cl, (%rbx,%r12)
	incq	%r12
	cmpq	%r12, %rax
	jne	LBB0_7
	jmp	LBB0_9
LBB0_10:
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	cmpq	-48(%rbp), %rax
	jne	LBB0_12
## %bb.11:
	addq	$152, %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
LBB0_12:
	callq	___stack_chk_fail
	.cfi_endproc
                                        ## -- End function
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_br_mgf1_xor                    ; -- Begin function br_mgf1_xor
	.p2align	2
_br_mgf1_xor:                           ; @br_mgf1_xor
	.cfi_startproc
; %bb.0:
	sub	sp, sp, #208
	.cfi_def_cfa_offset 208
	stp	x28, x27, [sp, #112]            ; 16-byte Folded Spill
	stp	x26, x25, [sp, #128]            ; 16-byte Folded Spill
	stp	x24, x23, [sp, #144]            ; 16-byte Folded Spill
	stp	x22, x21, [sp, #160]            ; 16-byte Folded Spill
	stp	x20, x19, [sp, #176]            ; 16-byte Folded Spill
	stp	x29, x30, [sp, #192]            ; 16-byte Folded Spill
	add	x29, sp, #192
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	.cfi_offset w25, -72
	.cfi_offset w26, -80
	.cfi_offset w27, -88
	.cfi_offset w28, -96
	stp	x3, x4, [sp, #8]                ; 16-byte Folded Spill
	mov	x21, x2
	mov	x22, x1
	mov	x23, x0
Lloh0:
	adrp	x8, ___stack_chk_guard@GOTPAGE
Lloh1:
	ldr	x8, [x8, ___stack_chk_guard@GOTPAGEOFF]
Lloh2:
	ldr	x8, [x8]
	stur	x8, [x29, #-88]
	mov	x0, x2
	bl	_br_digest_size
	cbz	x22, LBB0_10
; %bb.1:
	mov	x24, x0
	mov	x26, #0
	mov	x25, #0
	mov	x27, #0
	sub	x28, x0, #1
	add	x19, sp, #40
	b	LBB0_3
LBB0_2:                                 ;   in Loop: Header=BB0_3 Depth=1
	add	x25, x25, #1
	sub	x26, x26, x24
	add	x23, x23, x24
	add	x27, x27, x24
	cmp	x27, x22
	b.hs	LBB0_10
LBB0_3:                                 ; =>This Loop Header: Depth=1
                                        ;     Child Loop BB0_7 Depth 2
                                        ;     Child Loop BB0_8 Depth 2
	cmp	x22, x27
	csel	x8, x22, x27, hi
	add	x9, x8, x26
	cmp	x9, x28
	csel	x9, x9, x28, lo
	stp	x9, x21, [sp, #24]              ; 8-byte Folded Spill
	msub	x8, x24, x25, x8
	cmp	x8, x28
	csel	x20, x8, x28, lo
	ldr	x8, [x21, #16]
	add	x0, sp, #32
	blr	x8
	ldr	x8, [x21, #8]
	add	x0, sp, #32
	ldp	x1, x2, [sp, #8]                ; 16-byte Folded Reload
                                        ; kill: def $w2 killed $w2 killed $x2
	blr	x8
	add	x0, sp, #40
	mov	x1, x25
	bl	_br_enc32be
	ldr	x8, [x21, #8]
	add	x0, sp, #32
	add	x1, sp, #40
	mov	w2, #4
	blr	x8
	ldr	x8, [x21]
	add	x0, sp, #32
	add	x1, sp, #40
	blr	x8
	cbz	x24, LBB0_2
; %bb.4:                                ;   in Loop: Header=BB0_3 Depth=1
	add	x8, x20, #1
	cmp	x8, #17
	b.hs	LBB0_6
; %bb.5:                                ;   in Loop: Header=BB0_3 Depth=1
	mov	x8, #0
	b	LBB0_8
LBB0_6:                                 ;   in Loop: Header=BB0_3 Depth=1
	ands	x9, x8, #0xf
	mov	w10, #16
	csel	x9, x10, x9, eq
	sub	x8, x8, x9
	ldr	x10, [sp, #24]                  ; 8-byte Folded Reload
	sub	x9, x10, x9
	add	x9, x9, #1
	add	x10, sp, #40
	mov	x11, x23
LBB0_7:                                 ;   Parent Loop BB0_3 Depth=1
                                        ; =>  This Inner Loop Header: Depth=2
	ldr	q0, [x10], #16
	ldr	q1, [x11]
	eor.16b	v0, v1, v0
	str	q0, [x11], #16
	subs	x9, x9, #16
	b.ne	LBB0_7
LBB0_8:                                 ;   Parent Loop BB0_3 Depth=1
                                        ; =>  This Inner Loop Header: Depth=2
	add	x9, x27, x8
	cmp	x9, x22
	b.hs	LBB0_2
; %bb.9:                                ;   in Loop: Header=BB0_8 Depth=2
	ldrb	w9, [x19, x8]
	ldrb	w10, [x23, x8]
	eor	w9, w10, w9
	strb	w9, [x23, x8]
	add	x8, x8, #1
	cmp	x24, x8
	b.ne	LBB0_8
	b	LBB0_2
LBB0_10:
	ldur	x8, [x29, #-88]
Lloh3:
	adrp	x9, ___stack_chk_guard@GOTPAGE
Lloh4:
	ldr	x9, [x9, ___stack_chk_guard@GOTPAGEOFF]
Lloh5:
	ldr	x9, [x9]
	cmp	x9, x8
	b.ne	LBB0_12
; %bb.11:
	ldp	x29, x30, [sp, #192]            ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #176]            ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #160]            ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #144]            ; 16-byte Folded Reload
	ldp	x26, x25, [sp, #128]            ; 16-byte Folded Reload
	ldp	x28, x27, [sp, #112]            ; 16-byte Folded Reload
	add	sp, sp, #208
	ret
LBB0_12:
	bl	___stack_chk_fail
	.loh AdrpLdrGotLdr	Lloh0, Lloh1, Lloh2
	.loh AdrpLdrGotLdr	Lloh3, Lloh4, Lloh5
	.cfi_endproc
                                        ; -- End function
.subsections_via_symbols
