	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	4, 0x90                         ## -- Begin function eap_leap_getKey
_eap_leap_getKey:                       ## @eap_leap_getKey
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r13
	pushq	%r12
	pushq	%rbx
	subq	$248, %rsp
	.cfi_offset %rbx, -56
	.cfi_offset %r12, -48
	.cfi_offset %r13, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	movq	%rax, -48(%rbp)
	movq	(%rsi), %rax
	movq	_LEAP_DONE@GOTPCREL(%rip), %rcx
	cmpq	(%rcx), %rax
	jne	LBB0_12
## %bb.1:
	movq	%rdx, %r14
	movq	%rsi, %r13
	leaq	-288(%rbp), %rsi
	leaq	-276(%rbp), %rdx
	callq	_eap_get_config_password2
	testq	%rax, %rax
	je	LBB0_12
## %bb.2:
	movq	%rax, %rbx
	movq	_LEAP_KEY_LEN@GOTPCREL(%rip), %r12
	movl	(%r12), %edi
	callq	_os_malloc
	testq	%rax, %rax
	je	LBB0_12
## %bb.3:
	movq	%rax, %r15
	cmpl	$0, -276(%rbp)
	je	LBB0_10
## %bb.4:
	leaq	-112(%rbp), %rsi
	movq	%rbx, %rdi
LBB0_5:
	callq	_hash_nt_password_hash
	testq	%rax, %rax
	jne	LBB0_11
## %bb.6:
	movq	_MSG_DEBUG@GOTPCREL(%rip), %rbx
	movl	(%rbx), %edi
	leaq	L_.str(%rip), %rsi
	leaq	-112(%rbp), %rdx
	movl	$16, %ecx
	callq	_wpa_hexdump_key
	movl	(%rbx), %edi
	movq	16(%r13), %rdx
	movq	_LEAP_CHALLENGE_LEN@GOTPCREL(%rip), %rax
	movq	(%rax), %rcx
	leaq	L_.str.1(%rip), %rsi
	callq	_wpa_hexdump
	movl	(%rbx), %edi
	movq	8(%r13), %rdx
	movq	_LEAP_RESPONSE_LEN@GOTPCREL(%rip), %rax
	movq	(%rax), %rcx
	leaq	L_.str.2(%rip), %rsi
	callq	_wpa_hexdump
	movl	(%rbx), %edi
	movq	32(%r13), %rdx
	movq	_LEAP_CHALLENGE_LEN@GOTPCREL(%rip), %rax
	movq	(%rax), %rcx
	leaq	L_.str.3(%rip), %rsi
	callq	_wpa_hexdump
	movl	(%rbx), %edi
	movq	24(%r13), %rdx
	movq	_LEAP_RESPONSE_LEN@GOTPCREL(%rip), %rax
	movq	(%rax), %rcx
	leaq	L_.str.4(%rip), %rsi
	callq	_wpa_hexdump
	leaq	-112(%rbp), %rax
	movq	%rax, -224(%rbp)
	movq	$16, -272(%rbp)
	movq	_LEAP_CHALLENGE_LEN@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	movq	%rax, -264(%rbp)
	movdqu	24(%r13), %xmm0
	pshufd	$78, %xmm0, %xmm0               ## xmm0 = xmm0[2,3,0,1]
	movdqu	%xmm0, -216(%rbp)
	movq	_LEAP_RESPONSE_LEN@GOTPCREL(%rip), %rcx
	movq	(%rcx), %rcx
	movq	%rcx, -256(%rbp)
	movq	%rax, -248(%rbp)
	movdqu	8(%r13), %xmm0
	pshufd	$78, %xmm0, %xmm0               ## xmm0 = xmm0[2,3,0,1]
	movdqu	%xmm0, -200(%rbp)
	movq	%rcx, -240(%rbp)
	leaq	-224(%rbp), %rsi
	leaq	-272(%rbp), %rdx
	movl	$5, %edi
	movq	%r15, %rcx
	callq	_md5_vector
	movl	(%rbx), %edi
	movl	(%r12), %ecx
	leaq	L_.str.5(%rip), %rsi
	movq	%r15, %rdx
	callq	_wpa_hexdump_key
	movslq	(%r12), %rax
	movq	%rax, (%r14)
	leaq	-176(%rbp), %rdi
	movl	$64, %esi
	callq	_forced_memzero
	leaq	-112(%rbp), %rdi
	movl	$64, %esi
	callq	_forced_memzero
	jmp	LBB0_13
LBB0_10:
	movq	-288(%rbp), %rsi
	leaq	-176(%rbp), %rdx
	movq	%rbx, %rdi
	callq	_nt_password_hash
	testq	%rax, %rax
	je	LBB0_15
LBB0_11:
	movq	%r15, %rdi
	callq	_os_free
LBB0_12:
	xorl	%r15d, %r15d
LBB0_13:
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	cmpq	-48(%rbp), %rax
	jne	LBB0_16
## %bb.14:
	movq	%r15, %rax
	addq	$248, %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
LBB0_15:
	leaq	-176(%rbp), %rdi
	leaq	-112(%rbp), %rsi
	jmp	LBB0_5
LBB0_16:
	callq	___stack_chk_fail
	.cfi_endproc
                                        ## -- End function
	.comm	_LEAP_DONE,8,3                  ## @LEAP_DONE
	.comm	_LEAP_KEY_LEN,4,2               ## @LEAP_KEY_LEN
	.comm	_MSG_DEBUG,4,2                  ## @MSG_DEBUG
	.section	__TEXT,__cstring,cstring_literals
L_.str:                                 ## @.str
	.asciz	"EAP-LEAP: pw_hash_hash"

L_.str.1:                               ## @.str.1
	.asciz	"EAP-LEAP: peer_challenge"

	.comm	_LEAP_CHALLENGE_LEN,8,3         ## @LEAP_CHALLENGE_LEN
L_.str.2:                               ## @.str.2
	.asciz	"EAP-LEAP: peer_response"

	.comm	_LEAP_RESPONSE_LEN,8,3          ## @LEAP_RESPONSE_LEN
L_.str.3:                               ## @.str.3
	.asciz	"EAP-LEAP: ap_challenge"

L_.str.4:                               ## @.str.4
	.asciz	"EAP-LEAP: ap_response"

L_.str.5:                               ## @.str.5
	.asciz	"EAP-LEAP: master key"

	.no_dead_strip	_eap_leap_getKey
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	2                               ; -- Begin function eap_leap_getKey
_eap_leap_getKey:                       ; @eap_leap_getKey
	.cfi_startproc
; %bb.0:
	sub	sp, sp, #336
	.cfi_def_cfa_offset 336
	stp	x28, x27, [sp, #240]            ; 16-byte Folded Spill
	stp	x26, x25, [sp, #256]            ; 16-byte Folded Spill
	stp	x24, x23, [sp, #272]            ; 16-byte Folded Spill
	stp	x22, x21, [sp, #288]            ; 16-byte Folded Spill
	stp	x20, x19, [sp, #304]            ; 16-byte Folded Spill
	stp	x29, x30, [sp, #320]            ; 16-byte Folded Spill
	add	x29, sp, #320
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	.cfi_offset w25, -72
	.cfi_offset w26, -80
	.cfi_offset w27, -88
	.cfi_offset w28, -96
Lloh0:
	adrp	x8, ___stack_chk_guard@GOTPAGE
Lloh1:
	ldr	x8, [x8, ___stack_chk_guard@GOTPAGEOFF]
Lloh2:
	ldr	x8, [x8]
	stur	x8, [x29, #-88]
	ldr	x8, [x1]
Lloh3:
	adrp	x9, _LEAP_DONE@GOTPAGE
Lloh4:
	ldr	x9, [x9, _LEAP_DONE@GOTPAGEOFF]
Lloh5:
	ldr	x9, [x9]
	cmp	x8, x9
	b.ne	LBB0_9
; %bb.1:
	mov	x20, x2
	mov	x21, x1
	add	x1, sp, #16
	add	x2, sp, #12
	bl	_eap_get_config_password2
	cbz	x0, LBB0_9
; %bb.2:
	mov	x22, x0
Lloh6:
	adrp	x23, _LEAP_KEY_LEN@GOTPAGE
Lloh7:
	ldr	x23, [x23, _LEAP_KEY_LEN@GOTPAGEOFF]
	ldr	w0, [x23]
	bl	_os_malloc
	mov	x19, x0
	cbz	x0, LBB0_10
; %bb.3:
	ldr	w8, [sp, #12]
	cbz	w8, LBB0_6
; %bb.4:
	sub	x1, x29, #152
	mov	x0, x22
	bl	_hash_nt_password_hash
	cbnz	x0, LBB0_8
LBB0_5:
Lloh8:
	adrp	x22, _MSG_DEBUG@GOTPAGE
Lloh9:
	ldr	x22, [x22, _MSG_DEBUG@GOTPAGEOFF]
	ldr	w0, [x22]
Lloh10:
	adrp	x1, l_.str@PAGE
Lloh11:
	add	x1, x1, l_.str@PAGEOFF
	sub	x25, x29, #152
	mov	w24, #16
	sub	x2, x29, #152
	mov	w3, #16
	bl	_wpa_hexdump_key
	ldr	w0, [x22]
	ldr	x2, [x21, #16]
Lloh12:
	adrp	x26, _LEAP_CHALLENGE_LEN@GOTPAGE
Lloh13:
	ldr	x26, [x26, _LEAP_CHALLENGE_LEN@GOTPAGEOFF]
	ldr	x3, [x26]
Lloh14:
	adrp	x1, l_.str.1@PAGE
Lloh15:
	add	x1, x1, l_.str.1@PAGEOFF
	bl	_wpa_hexdump
	ldr	w0, [x22]
	ldr	x2, [x21, #8]
Lloh16:
	adrp	x27, _LEAP_RESPONSE_LEN@GOTPAGE
Lloh17:
	ldr	x27, [x27, _LEAP_RESPONSE_LEN@GOTPAGEOFF]
	ldr	x3, [x27]
Lloh18:
	adrp	x1, l_.str.2@PAGE
Lloh19:
	add	x1, x1, l_.str.2@PAGEOFF
	bl	_wpa_hexdump
	ldr	w0, [x22]
	ldr	x2, [x21, #32]
	ldr	x3, [x26]
Lloh20:
	adrp	x1, l_.str.3@PAGE
Lloh21:
	add	x1, x1, l_.str.3@PAGEOFF
	bl	_wpa_hexdump
	ldr	w0, [x22]
	ldr	x2, [x21, #24]
	ldr	x3, [x27]
Lloh22:
	adrp	x1, l_.str.4@PAGE
Lloh23:
	add	x1, x1, l_.str.4@PAGEOFF
	bl	_wpa_hexdump
	ldp	x9, x8, [x21, #24]
	stp	x25, x8, [sp, #64]
	ldr	x8, [x26]
	stp	x24, x8, [sp, #24]
	ldr	x10, [x27]
	ldp	x12, x11, [x21, #8]
	stp	x9, x11, [sp, #80]
	stp	x10, x8, [sp, #40]
	str	x12, [sp, #96]
	str	x10, [sp, #56]
	add	x1, sp, #64
	add	x2, sp, #24
	mov	w0, #5
	mov	x3, x19
	bl	_md5_vector
	ldr	w0, [x22]
	ldr	w3, [x23]
Lloh24:
	adrp	x1, l_.str.5@PAGE
Lloh25:
	add	x1, x1, l_.str.5@PAGEOFF
	mov	x2, x19
	bl	_wpa_hexdump_key
	ldrsw	x8, [x23]
	str	x8, [x20]
	add	x0, sp, #104
	mov	w1, #64
	bl	_forced_memzero
	sub	x0, x29, #152
	mov	w1, #64
	bl	_forced_memzero
	b	LBB0_10
LBB0_6:
	ldr	x1, [sp, #16]
	add	x2, sp, #104
	mov	x0, x22
	bl	_nt_password_hash
	cbnz	x0, LBB0_8
; %bb.7:
	add	x0, sp, #104
	sub	x1, x29, #152
	bl	_hash_nt_password_hash
	cbz	x0, LBB0_5
LBB0_8:
	mov	x0, x19
	bl	_os_free
LBB0_9:
	mov	x19, #0
LBB0_10:
	ldur	x8, [x29, #-88]
Lloh26:
	adrp	x9, ___stack_chk_guard@GOTPAGE
Lloh27:
	ldr	x9, [x9, ___stack_chk_guard@GOTPAGEOFF]
Lloh28:
	ldr	x9, [x9]
	cmp	x9, x8
	b.ne	LBB0_12
; %bb.11:
	mov	x0, x19
	ldp	x29, x30, [sp, #320]            ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #304]            ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #288]            ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #272]            ; 16-byte Folded Reload
	ldp	x26, x25, [sp, #256]            ; 16-byte Folded Reload
	ldp	x28, x27, [sp, #240]            ; 16-byte Folded Reload
	add	sp, sp, #336
	ret
LBB0_12:
	bl	___stack_chk_fail
	.loh AdrpLdrGotLdr	Lloh3, Lloh4, Lloh5
	.loh AdrpLdrGotLdr	Lloh0, Lloh1, Lloh2
	.loh AdrpLdrGot	Lloh6, Lloh7
	.loh AdrpAdd	Lloh24, Lloh25
	.loh AdrpAdd	Lloh22, Lloh23
	.loh AdrpAdd	Lloh20, Lloh21
	.loh AdrpAdd	Lloh18, Lloh19
	.loh AdrpLdrGot	Lloh16, Lloh17
	.loh AdrpAdd	Lloh14, Lloh15
	.loh AdrpLdrGot	Lloh12, Lloh13
	.loh AdrpAdd	Lloh10, Lloh11
	.loh AdrpLdrGot	Lloh8, Lloh9
	.loh AdrpLdrGotLdr	Lloh26, Lloh27, Lloh28
	.cfi_endproc
                                        ; -- End function
	.comm	_LEAP_DONE,8,3                  ; @LEAP_DONE
	.comm	_LEAP_KEY_LEN,4,2               ; @LEAP_KEY_LEN
	.comm	_MSG_DEBUG,4,2                  ; @MSG_DEBUG
	.section	__TEXT,__cstring,cstring_literals
l_.str:                                 ; @.str
	.asciz	"EAP-LEAP: pw_hash_hash"

l_.str.1:                               ; @.str.1
	.asciz	"EAP-LEAP: peer_challenge"

	.comm	_LEAP_CHALLENGE_LEN,8,3         ; @LEAP_CHALLENGE_LEN
l_.str.2:                               ; @.str.2
	.asciz	"EAP-LEAP: peer_response"

	.comm	_LEAP_RESPONSE_LEN,8,3          ; @LEAP_RESPONSE_LEN
l_.str.3:                               ; @.str.3
	.asciz	"EAP-LEAP: ap_challenge"

l_.str.4:                               ; @.str.4
	.asciz	"EAP-LEAP: ap_response"

l_.str.5:                               ; @.str.5
	.asciz	"EAP-LEAP: master key"

	.no_dead_strip	_eap_leap_getKey
.subsections_via_symbols
