	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	4, 0x90                         ## -- Begin function sae_test_pwd_seed_ffc
_sae_test_pwd_seed_ffc:                 ## @sae_test_pwd_seed_ffc
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r13
	pushq	%r12
	pushq	%rbx
	subq	$24, %rsp
	.cfi_offset %rbx, -56
	.cfi_offset %r12, -48
	.cfi_offset %r13, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movq	%rdx, -64(%rbp)                 ## 8-byte Spill
	movq	%rsi, %r15
	movq	%rdi, %r14
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	movq	%rax, -48(%rbp)
	movq	_SAE_MAX_PRIME_LEN@GOTPCREL(%rip), %rax
	movl	(%rax), %eax
	shlq	$2, %rax
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, %r13
	movq	(%r14), %rax
	movslq	(%rax), %rbx
	shlq	$3, %rbx
	movq	_MSG_DEBUG@GOTPCREL(%rip), %rax
	movl	(%rax), %edi
	movq	_SHA256_MAC_LEN@GOTPCREL(%rip), %r12
	movl	(%r12), %ecx
	leaq	L_.str(%rip), %rsi
	movq	%r15, %rdx
	callq	_wpa_hexdump_key
	movl	(%r12), %esi
	movq	(%r14), %rax
	movq	16(%rax), %rcx
	movl	8(%rcx), %ecx
	movl	(%rax), %r8d
	subq	$8, %rsp
	leaq	L_.str.1(%rip), %rdx
	movq	%r15, %rdi
	movq	%r13, %r9
	pushq	%rbx
	callq	_sha256_prf_bits
	addq	$16, %rsp
	testq	%rax, %rax
	js	LBB0_7
## %bb.1:
	movq	_MSG_DEBUG@GOTPCREL(%rip), %rax
	movl	(%rax), %edi
	movq	(%r14), %rax
	movl	(%rax), %ecx
	leaq	L_.str.2(%rip), %rsi
	movq	%r13, %rdx
	callq	_wpa_hexdump_key
	movq	(%r14), %rax
	movq	16(%rax), %rcx
	movl	8(%rcx), %esi
	movl	(%rax), %edx
	movq	%r13, %rdi
	callq	_const_time_memcmp
	movl	%eax, %edi
	callq	_const_time_fill_msb
	movl	%eax, %ebx
	movl	(%r13), %esi
	xorl	%r12d, %r12d
	movl	%eax, %edi
	xorl	%edx, %edx
	callq	_const_time_select_u8
	movl	%eax, (%r13)
	movq	(%r14), %rax
	movl	(%rax), %esi
	movq	%r13, %rdi
	callq	_crypto_bignum_init_set
	movq	%rax, %r15
	movl	$-1, %r13d
	testq	%rax, %rax
	je	LBB0_13
## %bb.2:
	movq	(%r14), %rax
	movq	16(%rax), %rax
	cmpq	$0, (%rax)
	je	LBB0_8
## %bb.3:
	movl	$2, -52(%rbp)
	leaq	-52(%rbp), %rdi
	movl	$4, %esi
	callq	_crypto_bignum_init_set
	movq	%rax, %r12
	testq	%rax, %rax
	je	LBB0_12
LBB0_4:
	movl	%ebx, -56(%rbp)                 ## 4-byte Spill
	movq	(%r14), %rax
	movl	4(%rax), %edx
	movq	%r15, %rdi
	movq	%r12, %rsi
	movq	-64(%rbp), %rbx                 ## 8-byte Reload
	movq	%rbx, %rcx
	callq	_crypto_bignum_exptmod
	testl	%eax, %eax
	js	LBB0_6
## %bb.5:
	movl	-56(%rbp), %edi                 ## 4-byte Reload
	movl	$1, %esi
	xorl	%edx, %edx
	callq	_const_time_select_u8
	movl	%eax, %r14d
	movq	%rbx, %rdi
	callq	_crypto_bignum_is_zero
	movl	%eax, %edi
	callq	_const_time_is_zero
	movl	%eax, %edi
	movl	%r14d, %esi
	xorl	%edx, %edx
	callq	_const_time_select_u8
	movl	%eax, %r14d
	movq	%rbx, %rdi
	callq	_crypto_bignum_is_one
	movl	%eax, %edi
	callq	_const_time_is_zero
	movl	%eax, %edi
	movl	%r14d, %esi
	xorl	%edx, %edx
	callq	_const_time_select_u8
LBB0_6:
	movl	%eax, %r13d
	jmp	LBB0_13
LBB0_7:
	movl	$-1, %r13d
	jmp	LBB0_14
LBB0_8:
	movl	$1, -52(%rbp)
	leaq	-52(%rbp), %rdi
	movl	$4, %esi
	callq	_crypto_bignum_init_set
	testq	%rax, %rax
	je	LBB0_12
## %bb.9:
	movq	%rax, %r12
	movq	(%r14), %rax
	movl	4(%rax), %edi
	movq	%r12, %rsi
	movq	%r12, %rdx
	callq	_crypto_bignum_sub
	testq	%rax, %rax
	js	LBB0_13
## %bb.10:
	movq	(%r14), %rax
	movl	8(%rax), %esi
	movq	%r12, %rdi
	movq	%r12, %rdx
	callq	_crypto_bignum_div
	testq	%rax, %rax
	jns	LBB0_4
	jmp	LBB0_13
LBB0_12:
	xorl	%r12d, %r12d
LBB0_13:
	movq	%r15, %rdi
	movl	$1, %esi
	callq	_crypto_bignum_deinit
	movq	%r12, %rdi
	movl	$1, %esi
	callq	_crypto_bignum_deinit
LBB0_14:
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	cmpq	-48(%rbp), %rax
	jne	LBB0_16
## %bb.15:
	movl	%r13d, %eax
	leaq	-40(%rbp), %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
LBB0_16:
	callq	___stack_chk_fail
	.cfi_endproc
                                        ## -- End function
	.comm	_SAE_MAX_PRIME_LEN,4,2          ## @SAE_MAX_PRIME_LEN
	.comm	_MSG_DEBUG,4,2                  ## @MSG_DEBUG
	.section	__TEXT,__cstring,cstring_literals
L_.str:                                 ## @.str
	.asciz	"SAE: pwd-seed"

	.comm	_SHA256_MAC_LEN,4,2             ## @SHA256_MAC_LEN
L_.str.1:                               ## @.str.1
	.asciz	"SAE Hunting and Pecking"

L_.str.2:                               ## @.str.2
	.asciz	"SAE: pwd-value"

	.no_dead_strip	_sae_test_pwd_seed_ffc
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	2                               ; -- Begin function sae_test_pwd_seed_ffc
_sae_test_pwd_seed_ffc:                 ; @sae_test_pwd_seed_ffc
	.cfi_startproc
; %bb.0:
	stp	x26, x25, [sp, #-80]!           ; 16-byte Folded Spill
	.cfi_def_cfa_offset 80
	stp	x24, x23, [sp, #16]             ; 16-byte Folded Spill
	stp	x22, x21, [sp, #32]             ; 16-byte Folded Spill
	stp	x20, x19, [sp, #48]             ; 16-byte Folded Spill
	stp	x29, x30, [sp, #64]             ; 16-byte Folded Spill
	add	x29, sp, #64
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	.cfi_offset w25, -72
	.cfi_offset w26, -80
	sub	sp, sp, #16
	mov	x19, x2
	mov	x22, x1
	mov	x21, x0
Lloh0:
	adrp	x8, ___stack_chk_guard@GOTPAGE
Lloh1:
	ldr	x8, [x8, ___stack_chk_guard@GOTPAGEOFF]
Lloh2:
	ldr	x8, [x8]
	stur	x8, [x29, #-72]
Lloh3:
	adrp	x8, _SAE_MAX_PRIME_LEN@GOTPAGE
Lloh4:
	ldr	x8, [x8, _SAE_MAX_PRIME_LEN@GOTPAGEOFF]
Lloh5:
	ldr	w8, [x8]
	lsl	x8, x8, #2
	mov	x9, x8
Lloh6:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh7:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x9, sp
	add	x8, x8, #15
	and	x8, x8, #0x7fffffff0
	sub	x20, x9, x8
	mov	sp, x20
	ldr	x8, [x0]
	ldrsw	x8, [x8]
	lsl	x23, x8, #3
Lloh8:
	adrp	x24, _MSG_DEBUG@GOTPAGE
Lloh9:
	ldr	x24, [x24, _MSG_DEBUG@GOTPAGEOFF]
	ldr	w0, [x24]
Lloh10:
	adrp	x25, _SHA256_MAC_LEN@GOTPAGE
Lloh11:
	ldr	x25, [x25, _SHA256_MAC_LEN@GOTPAGEOFF]
	ldr	w3, [x25]
Lloh12:
	adrp	x1, l_.str@PAGE
Lloh13:
	add	x1, x1, l_.str@PAGEOFF
	mov	x2, x22
	bl	_wpa_hexdump_key
	ldr	w1, [x25]
	ldr	x8, [x21]
	ldr	x9, [x8, #16]
	ldr	w3, [x9, #8]
	ldr	w4, [x8]
Lloh14:
	adrp	x2, l_.str.1@PAGE
Lloh15:
	add	x2, x2, l_.str.1@PAGEOFF
	mov	x0, x22
	mov	x5, x20
	mov	x6, x23
	bl	_sha256_prf_bits
	tbnz	x0, #63, LBB0_7
; %bb.1:
	ldr	w0, [x24]
	ldr	x8, [x21]
	ldr	w3, [x8]
Lloh16:
	adrp	x1, l_.str.2@PAGE
Lloh17:
	add	x1, x1, l_.str.2@PAGEOFF
	mov	x2, x20
	bl	_wpa_hexdump_key
	ldr	x8, [x21]
	ldr	x9, [x8, #16]
	ldr	w1, [x9, #8]
	ldr	w2, [x8]
	mov	x0, x20
	bl	_const_time_memcmp
	bl	_const_time_fill_msb
	mov	x23, x0
	ldr	w1, [x20]
	mov	w2, #0
	bl	_const_time_select_u8
	str	w0, [x20]
	ldr	x8, [x21]
	ldr	w1, [x8]
	mov	x0, x20
	bl	_crypto_bignum_init_set
	mov	x20, x0
	cbz	x0, LBB0_8
; %bb.2:
	ldr	x8, [x21]
	ldr	x8, [x8, #16]
	ldr	x8, [x8]
	cbz	x8, LBB0_13
; %bb.3:
	mov	w8, #2
	stur	w8, [x29, #-76]
	sub	x0, x29, #76
	mov	w1, #4
	bl	_crypto_bignum_init_set
	mov	x22, x0
	cbz	x0, LBB0_9
LBB0_4:
	ldr	x8, [x21]
	ldr	w2, [x8, #4]
	mov	x0, x20
	mov	x1, x22
	mov	x3, x19
	bl	_crypto_bignum_exptmod
	tbnz	w0, #31, LBB0_6
; %bb.5:
	mov	x0, x23
	mov	w1, #1
	mov	w2, #0
	bl	_const_time_select_u8
	mov	x21, x0
	mov	x0, x19
	bl	_crypto_bignum_is_zero
	bl	_const_time_is_zero
	mov	x1, x21
	mov	w2, #0
	bl	_const_time_select_u8
	mov	x21, x0
	mov	x0, x19
	bl	_crypto_bignum_is_one
	bl	_const_time_is_zero
	mov	x1, x21
	mov	w2, #0
	bl	_const_time_select_u8
LBB0_6:
	mov	x21, x0
	b	LBB0_10
LBB0_7:
	mov	w21, #-1
	b	LBB0_11
LBB0_8:
	mov	x22, #0
LBB0_9:
	mov	w21, #-1
LBB0_10:
	mov	x0, x20
	mov	w1, #1
	bl	_crypto_bignum_deinit
	mov	x0, x22
	mov	w1, #1
	bl	_crypto_bignum_deinit
LBB0_11:
	ldur	x8, [x29, #-72]
Lloh18:
	adrp	x9, ___stack_chk_guard@GOTPAGE
Lloh19:
	ldr	x9, [x9, ___stack_chk_guard@GOTPAGEOFF]
Lloh20:
	ldr	x9, [x9]
	cmp	x9, x8
	b.ne	LBB0_16
; %bb.12:
	mov	x0, x21
	sub	sp, x29, #64
	ldp	x29, x30, [sp, #64]             ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #48]             ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #32]             ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #16]             ; 16-byte Folded Reload
	ldp	x26, x25, [sp], #80             ; 16-byte Folded Reload
	ret
LBB0_13:
	mov	w8, #1
	stur	w8, [x29, #-76]
	sub	x0, x29, #76
	mov	w1, #4
	bl	_crypto_bignum_init_set
	mov	x22, x0
	cbz	x0, LBB0_9
; %bb.14:
	ldr	x8, [x21]
	ldr	w0, [x8, #4]
	mov	x1, x22
	mov	x2, x22
	bl	_crypto_bignum_sub
	tbnz	x0, #63, LBB0_9
; %bb.15:
	ldr	x8, [x21]
	ldr	w1, [x8, #8]
	mov	x0, x22
	mov	x2, x22
	bl	_crypto_bignum_div
	tbz	x0, #63, LBB0_4
	b	LBB0_9
LBB0_16:
	bl	___stack_chk_fail
	.loh AdrpAdd	Lloh14, Lloh15
	.loh AdrpAdd	Lloh12, Lloh13
	.loh AdrpLdrGot	Lloh10, Lloh11
	.loh AdrpLdrGot	Lloh8, Lloh9
	.loh AdrpLdrGot	Lloh6, Lloh7
	.loh AdrpLdrGotLdr	Lloh3, Lloh4, Lloh5
	.loh AdrpLdrGotLdr	Lloh0, Lloh1, Lloh2
	.loh AdrpAdd	Lloh16, Lloh17
	.loh AdrpLdrGotLdr	Lloh18, Lloh19, Lloh20
	.cfi_endproc
                                        ; -- End function
	.comm	_SAE_MAX_PRIME_LEN,4,2          ; @SAE_MAX_PRIME_LEN
	.comm	_MSG_DEBUG,4,2                  ; @MSG_DEBUG
	.section	__TEXT,__cstring,cstring_literals
l_.str:                                 ; @.str
	.asciz	"SAE: pwd-seed"

	.comm	_SHA256_MAC_LEN,4,2             ; @SHA256_MAC_LEN
l_.str.1:                               ; @.str.1
	.asciz	"SAE Hunting and Pecking"

l_.str.2:                               ; @.str.2
	.asciz	"SAE: pwd-value"

	.no_dead_strip	_sae_test_pwd_seed_ffc
.subsections_via_symbols
