	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	4, 0x90                         ## -- Begin function verify_ocsp
_verify_ocsp:                           ## @verify_ocsp
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r13
	pushq	%r12
	pushq	%rbx
	subq	$40, %rsp
	.cfi_offset %rbx, -56
	.cfi_offset %r12, -48
	.cfi_offset %r13, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movq	%r8, %r15
	movq	%rcx, %rbx
	movq	%rsi, %r12
	movl	%edi, %r14d
	movq	$0, -48(%rbp)
	leaq	-80(%rbp), %rdi
	callq	__hx509_query_clear
	movq	_HX509_QUERY_MATCH_ISSUER_NAME@GOTPCREL(%rip), %rax
	movl	(%rax), %eax
	movl	%eax, -72(%rbp)
	movq	%r15, %rdi
	callq	__hx509_get_cert
	addq	$8, %rax
	movq	%rax, -56(%rbp)
	movl	16(%r12), %eax
	cmpl	$129, %eax
	je	LBB0_3
## %bb.1:
	cmpl	$128, %eax
	jne	LBB0_4
## %bb.2:
	movq	_HX509_QUERY_MATCH_SUBJECT_NAME@GOTPCREL(%rip), %rax
	movl	(%rax), %eax
	orl	%eax, -72(%rbp)
	leaq	24(%r12), %rax
	movq	%rax, -64(%rbp)
	jmp	LBB0_4
LBB0_3:
	movq	_HX509_QUERY_MATCH_KEY_HASH_SHA1@GOTPCREL(%rip), %rax
	movl	(%rax), %eax
	orl	%eax, -72(%rbp)
	leaq	20(%r12), %rax
	movq	%rax, -80(%rbp)
LBB0_4:
	leaq	-80(%rbp), %rdx
	leaq	-48(%rbp), %rcx
	movl	%r14d, %edi
	movq	%rbx, %rsi
	callq	_hx509_certs_find
	testl	%eax, %eax
	je	LBB0_10
## %bb.5:
	movq	32(%r12), %rsi
	testq	%rsi, %rsi
	je	LBB0_6
## %bb.9:
	leaq	-80(%rbp), %rdx
	leaq	-48(%rbp), %rcx
	movl	%r14d, %edi
	callq	_hx509_certs_find
	movl	%eax, %ebx
	testl	%eax, %eax
	jne	LBB0_7
LBB0_10:
	movq	-48(%rbp), %rdi
	movq	%r15, %rsi
	callq	_hx509_cert_cmp
	testq	%rax, %rax
	je	LBB0_18
## %bb.11:
	movq	%r15, %rdi
	callq	__hx509_get_cert
	movq	%rax, %r13
	movq	-48(%rbp), %rdi
	callq	__hx509_get_cert
	movq	%rax, %rbx
	movq	%rax, %rdi
	movq	%r13, %rsi
	xorl	%edx, %edx
	callq	__hx509_cert_is_parent_cmp
	testl	%eax, %eax
	je	LBB0_13
## %bb.12:
	movq	_HX509_PARENT_NOT_CA@GOTPCREL(%rip), %rax
	movl	(%rax), %ebx
	leaq	L_.str(%rip), %rcx
	movl	%r14d, %edi
	xorl	%esi, %esi
	jmp	LBB0_16
LBB0_6:
	movl	%eax, %ebx
	jmp	LBB0_7
LBB0_13:
	leaq	12(%rbx), %rdx
	movq	%rbx, %rcx
	addq	$4, %rcx
	movl	%r14d, %edi
	movq	%r15, %rsi
	movq	%rbx, %r8
	callq	__hx509_verify_signature_bitstring
	testl	%eax, %eax
	je	LBB0_17
## %bb.14:
	movl	%eax, %ebx
	movq	_HX509_ERROR_APPEND@GOTPCREL(%rip), %rax
	movl	(%rax), %esi
	leaq	L_.str.1(%rip), %rcx
	jmp	LBB0_15
LBB0_17:
	movq	-48(%rbp), %rsi
	movq	_asn1_oid_id_pkix_kp_OCSPSigning@GOTPCREL(%rip), %rdx
	movl	%r14d, %edi
	xorl	%ecx, %ecx
	callq	_hx509_cert_check_eku
	movl	%eax, %ebx
	testl	%eax, %eax
	jne	LBB0_7
LBB0_18:
	movq	-48(%rbp), %rsi
	leaq	28(%r12), %rdx
	leaq	8(%r12), %r8
	leaq	12(%r12), %rcx
	movl	%r14d, %edi
	callq	__hx509_verify_signature_bitstring
	testl	%eax, %eax
	je	LBB0_20
## %bb.19:
	movl	%eax, %ebx
	movq	_HX509_ERROR_APPEND@GOTPCREL(%rip), %rax
	movl	(%rax), %esi
	leaq	L_.str.2(%rip), %rcx
LBB0_15:
	movl	%r14d, %edi
LBB0_16:
	movl	%ebx, %edx
	callq	_hx509_set_error_string
LBB0_7:
	movq	-48(%rbp), %rdi
	testq	%rdi, %rdi
	je	LBB0_21
## %bb.8:
	callq	_hx509_cert_free
LBB0_21:
	movl	%ebx, %eax
	addq	$40, %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
LBB0_20:
	movq	-48(%rbp), %rax
	movq	%rax, (%r12)
	xorl	%ebx, %ebx
	jmp	LBB0_21
	.cfi_endproc
                                        ## -- End function
	.comm	_HX509_QUERY_MATCH_ISSUER_NAME,4,2 ## @HX509_QUERY_MATCH_ISSUER_NAME
	.comm	_HX509_QUERY_MATCH_SUBJECT_NAME,4,2 ## @HX509_QUERY_MATCH_SUBJECT_NAME
	.comm	_HX509_QUERY_MATCH_KEY_HASH_SHA1,4,2 ## @HX509_QUERY_MATCH_KEY_HASH_SHA1
	.comm	_HX509_PARENT_NOT_CA,4,2        ## @HX509_PARENT_NOT_CA
	.section	__TEXT,__cstring,cstring_literals
L_.str:                                 ## @.str
	.asciz	"Revoke OCSP signer is doesn't have CA as signer certificate"

	.comm	_HX509_ERROR_APPEND,4,2         ## @HX509_ERROR_APPEND
L_.str.1:                               ## @.str.1
	.asciz	"OCSP signer signature invalid"

	.comm	_asn1_oid_id_pkix_kp_OCSPSigning,4,2 ## @asn1_oid_id_pkix_kp_OCSPSigning
L_.str.2:                               ## @.str.2
	.asciz	"OCSP signature invalid"

	.no_dead_strip	_verify_ocsp
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	2                               ; -- Begin function verify_ocsp
_verify_ocsp:                           ; @verify_ocsp
	.cfi_startproc
; %bb.0:
	sub	sp, sp, #112
	.cfi_def_cfa_offset 112
	stp	x24, x23, [sp, #48]             ; 16-byte Folded Spill
	stp	x22, x21, [sp, #64]             ; 16-byte Folded Spill
	stp	x20, x19, [sp, #80]             ; 16-byte Folded Spill
	stp	x29, x30, [sp, #96]             ; 16-byte Folded Spill
	add	x29, sp, #96
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	mov	x21, x4
	mov	x22, x3
	mov	x20, x1
	mov	x19, x0
	str	xzr, [sp, #40]
	add	x0, sp, #8
	bl	__hx509_query_clear
Lloh0:
	adrp	x8, _HX509_QUERY_MATCH_ISSUER_NAME@GOTPAGE
Lloh1:
	ldr	x8, [x8, _HX509_QUERY_MATCH_ISSUER_NAME@GOTPAGEOFF]
Lloh2:
	ldr	w8, [x8]
	str	w8, [sp, #16]
	mov	x0, x21
	bl	__hx509_get_cert
	add	x8, x0, #8
	str	x8, [sp, #32]
	ldr	w8, [x20, #16]
	cmp	w8, #129
	b.eq	LBB0_3
; %bb.1:
	cmp	w8, #128
	b.ne	LBB0_4
; %bb.2:
Lloh3:
	adrp	x8, _HX509_QUERY_MATCH_SUBJECT_NAME@GOTPAGE
Lloh4:
	ldr	x8, [x8, _HX509_QUERY_MATCH_SUBJECT_NAME@GOTPAGEOFF]
Lloh5:
	ldr	w8, [x8]
	ldr	w9, [sp, #16]
	orr	w8, w9, w8
	str	w8, [sp, #16]
	add	x8, x20, #24
	str	x8, [sp, #24]
	b	LBB0_4
LBB0_3:
Lloh6:
	adrp	x8, _HX509_QUERY_MATCH_KEY_HASH_SHA1@GOTPAGE
Lloh7:
	ldr	x8, [x8, _HX509_QUERY_MATCH_KEY_HASH_SHA1@GOTPAGEOFF]
Lloh8:
	ldr	w8, [x8]
	ldr	w9, [sp, #16]
	orr	w8, w9, w8
	str	w8, [sp, #16]
	add	x8, x20, #20
	str	x8, [sp, #8]
LBB0_4:
	add	x2, sp, #8
	add	x3, sp, #40
	mov	x0, x19
	mov	x1, x22
	bl	_hx509_certs_find
	cbz	w0, LBB0_7
; %bb.5:
	ldr	x1, [x20, #32]
	cbz	x1, LBB0_10
; %bb.6:
	add	x2, sp, #8
	add	x3, sp, #40
	mov	x0, x19
	bl	_hx509_certs_find
	mov	x22, x0
	cbnz	w0, LBB0_18
LBB0_7:
	ldr	x0, [sp, #40]
	mov	x1, x21
	bl	_hx509_cert_cmp
	cbz	x0, LBB0_14
; %bb.8:
	mov	x0, x21
	bl	__hx509_get_cert
	mov	x23, x0
	ldr	x0, [sp, #40]
	bl	__hx509_get_cert
	mov	x22, x0
	mov	x1, x23
	mov	w2, #0
	bl	__hx509_cert_is_parent_cmp
	cbz	w0, LBB0_11
; %bb.9:
Lloh9:
	adrp	x8, _HX509_PARENT_NOT_CA@GOTPAGE
Lloh10:
	ldr	x8, [x8, _HX509_PARENT_NOT_CA@GOTPAGEOFF]
Lloh11:
	ldr	w22, [x8]
Lloh12:
	adrp	x3, l_.str@PAGE
Lloh13:
	add	x3, x3, l_.str@PAGEOFF
	mov	x0, x19
	mov	w1, #0
	b	LBB0_17
LBB0_10:
	mov	x22, x0
	b	LBB0_18
LBB0_11:
	add	x2, x22, #12
	add	x3, x22, #4
	mov	x0, x19
	mov	x1, x21
	mov	x4, x22
	bl	__hx509_verify_signature_bitstring
	cbz	w0, LBB0_13
; %bb.12:
	mov	x22, x0
Lloh14:
	adrp	x8, _HX509_ERROR_APPEND@GOTPAGE
Lloh15:
	ldr	x8, [x8, _HX509_ERROR_APPEND@GOTPAGEOFF]
Lloh16:
	ldr	w1, [x8]
Lloh17:
	adrp	x3, l_.str.1@PAGE
Lloh18:
	add	x3, x3, l_.str.1@PAGEOFF
	b	LBB0_16
LBB0_13:
	ldr	x1, [sp, #40]
Lloh19:
	adrp	x2, _asn1_oid_id_pkix_kp_OCSPSigning@GOTPAGE
Lloh20:
	ldr	x2, [x2, _asn1_oid_id_pkix_kp_OCSPSigning@GOTPAGEOFF]
	mov	x0, x19
	mov	w3, #0
	bl	_hx509_cert_check_eku
	mov	x22, x0
	cbnz	w0, LBB0_18
LBB0_14:
	ldr	x1, [sp, #40]
	add	x2, x20, #28
	add	x4, x20, #8
	add	x3, x20, #12
	mov	x0, x19
	bl	__hx509_verify_signature_bitstring
	mov	x22, x0
	cbz	w0, LBB0_21
; %bb.15:
Lloh21:
	adrp	x8, _HX509_ERROR_APPEND@GOTPAGE
Lloh22:
	ldr	x8, [x8, _HX509_ERROR_APPEND@GOTPAGEOFF]
Lloh23:
	ldr	w1, [x8]
Lloh24:
	adrp	x3, l_.str.2@PAGE
Lloh25:
	add	x3, x3, l_.str.2@PAGEOFF
LBB0_16:
	mov	x0, x19
LBB0_17:
	mov	x2, x22
	bl	_hx509_set_error_string
LBB0_18:
	ldr	x0, [sp, #40]
	cbz	x0, LBB0_20
; %bb.19:
	bl	_hx509_cert_free
LBB0_20:
	mov	x0, x22
	ldp	x29, x30, [sp, #96]             ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #80]             ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #64]             ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #48]             ; 16-byte Folded Reload
	add	sp, sp, #112
	ret
LBB0_21:
	ldr	x8, [sp, #40]
	str	x8, [x20]
	b	LBB0_20
	.loh AdrpLdrGotLdr	Lloh0, Lloh1, Lloh2
	.loh AdrpLdrGotLdr	Lloh3, Lloh4, Lloh5
	.loh AdrpLdrGotLdr	Lloh6, Lloh7, Lloh8
	.loh AdrpAdd	Lloh12, Lloh13
	.loh AdrpLdrGotLdr	Lloh9, Lloh10, Lloh11
	.loh AdrpAdd	Lloh17, Lloh18
	.loh AdrpLdrGotLdr	Lloh14, Lloh15, Lloh16
	.loh AdrpLdrGot	Lloh19, Lloh20
	.loh AdrpAdd	Lloh24, Lloh25
	.loh AdrpLdrGotLdr	Lloh21, Lloh22, Lloh23
	.cfi_endproc
                                        ; -- End function
	.comm	_HX509_QUERY_MATCH_ISSUER_NAME,4,2 ; @HX509_QUERY_MATCH_ISSUER_NAME
	.comm	_HX509_QUERY_MATCH_SUBJECT_NAME,4,2 ; @HX509_QUERY_MATCH_SUBJECT_NAME
	.comm	_HX509_QUERY_MATCH_KEY_HASH_SHA1,4,2 ; @HX509_QUERY_MATCH_KEY_HASH_SHA1
	.comm	_HX509_PARENT_NOT_CA,4,2        ; @HX509_PARENT_NOT_CA
	.section	__TEXT,__cstring,cstring_literals
l_.str:                                 ; @.str
	.asciz	"Revoke OCSP signer is doesn't have CA as signer certificate"

	.comm	_HX509_ERROR_APPEND,4,2         ; @HX509_ERROR_APPEND
l_.str.1:                               ; @.str.1
	.asciz	"OCSP signer signature invalid"

	.comm	_asn1_oid_id_pkix_kp_OCSPSigning,4,2 ; @asn1_oid_id_pkix_kp_OCSPSigning
l_.str.2:                               ; @.str.2
	.asciz	"OCSP signature invalid"

	.no_dead_strip	_verify_ocsp
.subsections_via_symbols
