	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	4, 0x90                         ## -- Begin function sae_derive_pwe_ffc
_sae_derive_pwe_ffc:                    ## @sae_derive_pwe_ffc
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r13
	pushq	%r12
	pushq	%rbx
	subq	$168, %rsp
	.cfi_offset %rbx, -56
	.cfi_offset %r12, -48
	.cfi_offset %r13, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movq	%r9, %r14
	movq	%r8, %r15
	movq	%rcx, %r13
	movq	%rdx, -160(%rbp)                ## 8-byte Spill
	movq	%rsi, -152(%rbp)                ## 8-byte Spill
	movq	%rdi, %r12
	movq	%rsp, -208(%rbp)                ## 8-byte Spill
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	movq	%rax, -48(%rbp)
	movq	_ETH_ALEN@GOTPCREL(%rip), %rax
	movl	(%rax), %eax
	movq	%rax, -176(%rbp)                ## 8-byte Spill
	addl	%eax, %eax
	shlq	$2, %rax
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, -192(%rbp)                ## 8-byte Spill
	movq	(%r12), %rax
	movslq	(%rax), %rbx
	movq	8(%rax), %rdi
	movl	$1, %esi
	callq	_crypto_bignum_deinit
	movq	%r12, -144(%rbp)                ## 8-byte Spill
	movq	(%r12), %rax
	movq	$0, 8(%rax)
	movq	%rbx, -128(%rbp)                ## 8-byte Spill
	movq	%rbx, %rdi
	shlq	$4, %rdi
	movq	%rdi, -200(%rbp)                ## 8-byte Spill
	callq	_os_zalloc
	movq	%rax, %rbx
	xorl	%eax, %eax
	callq	_crypto_bignum_init
	movq	%rax, -168(%rbp)                ## 8-byte Spill
	movq	%rbx, -136(%rbp)                ## 8-byte Spill
	testq	%rbx, %rbx
	je	LBB0_15
## %bb.1:
	cmpq	$0, -168(%rbp)                  ## 8-byte Folded Reload
	je	LBB0_15
## %bb.2:
	shlq	$3, -128(%rbp)                  ## 8-byte Folded Spill
	movq	_MSG_DEBUG@GOTPCREL(%rip), %rax
	movl	(%rax), %edi
	leaq	L_.str(%rip), %rsi
	movq	%r13, %rdx
	movq	%r15, %rcx
	callq	_wpa_hexdump_ascii_key
	movq	-152(%rbp), %rdi                ## 8-byte Reload
	movq	-160(%rbp), %rsi                ## 8-byte Reload
	movq	-192(%rbp), %rdx                ## 8-byte Reload
	callq	_sae_pwd_seed_key
	movq	%r13, -80(%rbp)
	movq	%r15, -112(%rbp)
	testq	%r14, %r14
	je	LBB0_3
## %bb.4:
	movq	%r14, -72(%rbp)
	movq	%r14, %rdi
	callq	_os_strlen
	movq	%rax, -104(%rbp)
	movl	$2, %r13d
	jmp	LBB0_5
LBB0_3:
	movl	$1, %r13d
LBB0_5:
	leaq	-116(%rbp), %rax
	movq	%rax, -80(%rbp,%r13,8)
	movq	$4, -112(%rbp,%r13,8)
	incq	%r13
	movq	-144(%rbp), %rax                ## 8-byte Reload
	movl	8(%rax), %edi
	callq	_dragonfly_min_pwe_loop_iter
	movl	%eax, -180(%rbp)                ## 4-byte Spill
	movl	$1, -116(%rbp)
	movq	-176(%rbp), %rax                ## 8-byte Reload
	shll	$3, %eax
	movq	%rax, -176(%rbp)                ## 8-byte Spill
	movq	-136(%rbp), %rax                ## 8-byte Reload
	movq	-128(%rbp), %rcx                ## 8-byte Reload
	leaq	(%rax,%rcx,4), %rax
	movq	%rax, -152(%rbp)                ## 8-byte Spill
	xorl	%r14d, %r14d
	xorl	%r15d, %r15d
	.p2align	4, 0x90
LBB0_6:                                 ## =>This Inner Loop Header: Depth=1
	movq	%rsp, -160(%rbp)                ## 8-byte Spill
	movq	_SHA256_MAC_LEN@GOTPCREL(%rip), %rax
	movl	(%rax), %eax
	shlq	$2, %rax
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, %rbx
	movl	-116(%rbp), %edx
	movq	_MSG_DEBUG@GOTPCREL(%rip), %rax
	movl	(%rax), %edi
	cmpl	$201, %edx
	jge	LBB0_7
## %bb.9:                               ##   in Loop: Header=BB0_6 Depth=1
	leaq	L_.str.2(%rip), %rsi
	xorl	%eax, %eax
	callq	_wpa_printf
	movq	-192(%rbp), %rdi                ## 8-byte Reload
	movq	-176(%rbp), %rsi                ## 8-byte Reload
                                        ## kill: def $esi killed $esi killed $rsi
	movq	%r13, %r12
	movq	%r13, %rdx
	leaq	-80(%rbp), %rcx
	leaq	-112(%rbp), %r8
	movq	%rbx, %r9
	callq	_hmac_sha256_vector
	testq	%rax, %rax
	js	LBB0_8
## %bb.10:                              ##   in Loop: Header=BB0_6 Depth=1
	movq	-144(%rbp), %rdi                ## 8-byte Reload
	movq	%rbx, %rsi
	movq	-168(%rbp), %rdx                ## 8-byte Reload
	callq	_sae_test_pwd_seed_ffc
	testl	%eax, %eax
	js	LBB0_8
## %bb.11:                              ##   in Loop: Header=BB0_6 Depth=1
	movl	%eax, %r13d
	movq	-168(%rbp), %rdi                ## 8-byte Reload
	movq	-152(%rbp), %rsi                ## 8-byte Reload
	movq	-128(%rbp), %rcx                ## 8-byte Reload
	movq	%rcx, %rdx
	callq	_crypto_bignum_to_bin
	testq	%rax, %rax
	js	LBB0_8
## %bb.12:                              ##   in Loop: Header=BB0_6 Depth=1
	movl	%r15d, %edi
	movq	-136(%rbp), %rsi                ## 8-byte Reload
	movq	-152(%rbp), %rdx                ## 8-byte Reload
	movq	-128(%rbp), %rcx                ## 8-byte Reload
	movq	%rsi, %r8
	callq	_const_time_select_bin
	movl	-116(%rbp), %edx
	movl	%r15d, %edi
	movl	%r14d, %esi
	callq	_const_time_select_u8
	movl	%eax, %r14d
	movl	%r13d, %edi
	movl	$1, %esi
	callq	_const_time_eq_u8
	movl	%r15d, %edi
	movl	%r15d, %esi
	movl	%eax, %edx
	callq	_const_time_select_u8
	movl	%eax, %r15d
	movq	-160(%rbp), %rsp                ## 8-byte Reload
	movl	-116(%rbp), %eax
	leal	1(%rax), %ecx
	movl	%ecx, -116(%rbp)
	cmpl	-180(%rbp), %eax                ## 4-byte Folded Reload
	movq	%r12, %r13
	jl	LBB0_6
## %bb.13:                              ##   in Loop: Header=BB0_6 Depth=1
	testl	%r15d, %r15d
	je	LBB0_6
	jmp	LBB0_14
LBB0_7:
	leaq	L_.str.1(%rip), %rsi
	xorl	%eax, %eax
	callq	_wpa_printf
LBB0_8:
	movq	-160(%rbp), %rsp                ## 8-byte Reload
	testl	%r15d, %r15d
	je	LBB0_15
LBB0_14:
	movq	_MSG_DEBUG@GOTPCREL(%rip), %rax
	movl	(%rax), %edi
	leaq	L_.str.3(%rip), %rsi
	movl	%r14d, %edx
	xorl	%eax, %eax
	callq	_wpa_printf
	movq	-136(%rbp), %rdi                ## 8-byte Reload
	movq	-128(%rbp), %rsi                ## 8-byte Reload
	callq	_crypto_bignum_init_set
	movq	-144(%rbp), %rcx                ## 8-byte Reload
	movq	(%rcx), %rcx
	movq	%rax, 8(%rcx)
LBB0_15:
	movq	-168(%rbp), %rdi                ## 8-byte Reload
	movl	$1, %esi
	callq	_crypto_bignum_deinit
	movq	-136(%rbp), %rdi                ## 8-byte Reload
	movq	-200(%rbp), %rsi                ## 8-byte Reload
	callq	_bin_clear_free
	movq	-144(%rbp), %rax                ## 8-byte Reload
	movq	(%rax), %rax
	cmpq	$1, 8(%rax)
	movl	$0, %eax
	sbbl	%eax, %eax
	movq	-208(%rbp), %rsp                ## 8-byte Reload
	movq	___stack_chk_guard@GOTPCREL(%rip), %rcx
	movq	(%rcx), %rcx
	cmpq	-48(%rbp), %rcx
	jne	LBB0_17
## %bb.16:
	leaq	-40(%rbp), %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
LBB0_17:
	callq	___stack_chk_fail
	.cfi_endproc
                                        ## -- End function
	.comm	_ETH_ALEN,4,2                   ## @ETH_ALEN
	.comm	_MSG_DEBUG,4,2                  ## @MSG_DEBUG
	.section	__TEXT,__cstring,cstring_literals
L_.str:                                 ## @.str
	.asciz	"SAE: password"

	.comm	_SHA256_MAC_LEN,4,2             ## @SHA256_MAC_LEN
L_.str.1:                               ## @.str.1
	.asciz	"SAE: Failed to derive PWE"

L_.str.2:                               ## @.str.2
	.asciz	"SAE: counter = %02u"

L_.str.3:                               ## @.str.3
	.asciz	"SAE: Use PWE from counter = %02u"

	.no_dead_strip	_sae_derive_pwe_ffc
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	2                               ; -- Begin function sae_derive_pwe_ffc
_sae_derive_pwe_ffc:                    ; @sae_derive_pwe_ffc
	.cfi_startproc
; %bb.0:
	stp	x28, x27, [sp, #-96]!           ; 16-byte Folded Spill
	.cfi_def_cfa_offset 96
	stp	x26, x25, [sp, #16]             ; 16-byte Folded Spill
	stp	x24, x23, [sp, #32]             ; 16-byte Folded Spill
	stp	x22, x21, [sp, #48]             ; 16-byte Folded Spill
	stp	x20, x19, [sp, #64]             ; 16-byte Folded Spill
	stp	x29, x30, [sp, #80]             ; 16-byte Folded Spill
	add	x29, sp, #80
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	.cfi_offset w25, -72
	.cfi_offset w26, -80
	.cfi_offset w27, -88
	.cfi_offset w28, -96
	sub	sp, sp, #112
	mov	x20, x5
	mov	x25, x4
	mov	x26, x3
	mov	x27, x2
	mov	x28, x1
	mov	x19, x0
	mov	x8, sp
	stur	x8, [x29, #-176]                ; 8-byte Folded Spill
Lloh0:
	adrp	x8, ___stack_chk_guard@GOTPAGE
Lloh1:
	ldr	x8, [x8, ___stack_chk_guard@GOTPAGEOFF]
Lloh2:
	ldr	x8, [x8]
	stur	x8, [x29, #-88]
Lloh3:
	adrp	x8, _ETH_ALEN@GOTPAGE
Lloh4:
	ldr	x8, [x8, _ETH_ALEN@GOTPAGEOFF]
Lloh5:
	ldr	w23, [x8]
	lsl	w8, w23, #1
	lsl	x8, x8, #2
	mov	x9, x8
Lloh6:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh7:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x9, sp
	add	x8, x8, #15
	and	x8, x8, #0x7fffffff0
	sub	x8, x9, x8
	stur	x8, [x29, #-152]                ; 8-byte Folded Spill
	mov	sp, x8
	ldr	x8, [x0]
	ldrsw	x24, [x8]
	ldr	x0, [x8, #8]
	mov	w1, #1
	bl	_crypto_bignum_deinit
	ldr	x8, [x19]
	str	xzr, [x8, #8]
	lsl	x0, x24, #4
	stur	x0, [x29, #-184]                ; 8-byte Folded Spill
	bl	_os_zalloc
	mov	x21, x0
	bl	_crypto_bignum_init
	mov	x22, x0
	cmp	x21, #0
	ccmp	x0, #0, #4, ne
	b.eq	LBB0_14
; %bb.1:
	lsl	x24, x24, #3
Lloh8:
	adrp	x8, _MSG_DEBUG@GOTPAGE
Lloh9:
	ldr	x8, [x8, _MSG_DEBUG@GOTPAGEOFF]
Lloh10:
	ldr	w0, [x8]
Lloh11:
	adrp	x1, l_.str@PAGE
Lloh12:
	add	x1, x1, l_.str@PAGEOFF
	mov	x2, x26
	mov	x3, x25
	bl	_wpa_hexdump_ascii_key
	mov	x0, x28
	mov	x1, x27
	ldur	x2, [x29, #-152]                ; 8-byte Folded Reload
	bl	_sae_pwd_seed_key
	stur	x26, [x29, #-112]
	stur	x25, [x29, #-136]
	mov	w26, #1
	cbz	x20, LBB0_3
; %bb.2:
	stur	x20, [x29, #-104]
	mov	x0, x20
	bl	_os_strlen
	stur	x0, [x29, #-128]
	mov	w8, #2
	b	LBB0_4
LBB0_3:
	mov	w8, #1
LBB0_4:
	lsl	x9, x8, #3
	sub	x10, x29, #112
	sub	x11, x29, #140
	str	x11, [x10, x9]
	mov	w10, #4
	sub	x11, x29, #136
	str	x10, [x11, x9]
	add	x8, x8, #1
	stur	x8, [x29, #-160]                ; 8-byte Folded Spill
	ldr	w0, [x19, #8]
	bl	_dragonfly_min_pwe_loop_iter
	stur	w0, [x29, #-164]                ; 4-byte Folded Spill
	mov	w25, #0
	mov	w27, #0
	stur	w26, [x29, #-140]
	lsl	w20, w23, #3
	add	x28, x21, x24, lsl #2
LBB0_5:                                 ; =>This Inner Loop Header: Depth=1
	mov	x23, sp
Lloh13:
	adrp	x8, _SHA256_MAC_LEN@GOTPAGE
Lloh14:
	ldr	x8, [x8, _SHA256_MAC_LEN@GOTPAGEOFF]
Lloh15:
	ldr	w8, [x8]
	lsl	x8, x8, #2
	mov	x9, x8
Lloh16:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh17:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x9, sp
	add	x8, x8, #15
	and	x8, x8, #0x7fffffff0
	sub	x26, x9, x8
	mov	sp, x26
	ldur	w8, [x29, #-140]
Lloh18:
	adrp	x9, _MSG_DEBUG@GOTPAGE
Lloh19:
	ldr	x9, [x9, _MSG_DEBUG@GOTPAGEOFF]
Lloh20:
	ldr	w0, [x9]
	cmp	w8, #201
	b.ge	LBB0_11
; %bb.6:                                ;   in Loop: Header=BB0_5 Depth=1
	str	x8, [sp, #-16]!
Lloh21:
	adrp	x1, l_.str.2@PAGE
Lloh22:
	add	x1, x1, l_.str.2@PAGEOFF
	bl	_wpa_printf
	add	sp, sp, #16
	sub	x3, x29, #112
	sub	x4, x29, #136
	ldp	x2, x0, [x29, #-160]            ; 16-byte Folded Reload
	mov	x1, x20
	mov	x5, x26
	bl	_hmac_sha256_vector
	tbnz	x0, #63, LBB0_12
; %bb.7:                                ;   in Loop: Header=BB0_5 Depth=1
	mov	x0, x19
	mov	x1, x26
	mov	x2, x22
	bl	_sae_test_pwd_seed_ffc
	tbnz	w0, #31, LBB0_12
; %bb.8:                                ;   in Loop: Header=BB0_5 Depth=1
	mov	x26, x0
	mov	x0, x22
	mov	x1, x28
	mov	x2, x24
	mov	x3, x24
	bl	_crypto_bignum_to_bin
	tbnz	x0, #63, LBB0_12
; %bb.9:                                ;   in Loop: Header=BB0_5 Depth=1
	mov	x0, x27
	mov	x1, x21
	mov	x2, x28
	mov	x3, x24
	mov	x4, x21
	bl	_const_time_select_bin
	ldur	w2, [x29, #-140]
	mov	x0, x27
	mov	x1, x25
	bl	_const_time_select_u8
	mov	x25, x0
	mov	x0, x26
	mov	w1, #1
	bl	_const_time_eq_u8
	mov	x2, x0
	mov	x0, x27
	mov	x1, x27
	bl	_const_time_select_u8
	mov	x27, x0
	mov	sp, x23
	ldur	w8, [x29, #-140]
	add	w9, w8, #1
	stur	w9, [x29, #-140]
	ldur	w9, [x29, #-164]                ; 4-byte Folded Reload
	cmp	w8, w9
	b.lt	LBB0_5
; %bb.10:                               ;   in Loop: Header=BB0_5 Depth=1
	cbz	w27, LBB0_5
	b	LBB0_13
LBB0_11:
Lloh23:
	adrp	x1, l_.str.1@PAGE
Lloh24:
	add	x1, x1, l_.str.1@PAGEOFF
	bl	_wpa_printf
LBB0_12:
	mov	sp, x23
	cbz	w27, LBB0_14
LBB0_13:
Lloh25:
	adrp	x8, _MSG_DEBUG@GOTPAGE
Lloh26:
	ldr	x8, [x8, _MSG_DEBUG@GOTPAGEOFF]
Lloh27:
	ldr	w0, [x8]
	str	x25, [sp, #-16]!
Lloh28:
	adrp	x1, l_.str.3@PAGE
Lloh29:
	add	x1, x1, l_.str.3@PAGEOFF
	bl	_wpa_printf
	add	sp, sp, #16
	mov	x0, x21
	mov	x1, x24
	bl	_crypto_bignum_init_set
	ldr	x8, [x19]
	str	x0, [x8, #8]
LBB0_14:
	mov	x0, x22
	mov	w1, #1
	bl	_crypto_bignum_deinit
	mov	x0, x21
	ldur	x1, [x29, #-184]                ; 8-byte Folded Reload
	bl	_bin_clear_free
	ldr	x8, [x19]
	ldr	x8, [x8, #8]
	cmp	x8, #0
	csetm	w0, eq
	ldur	x8, [x29, #-176]                ; 8-byte Folded Reload
	mov	sp, x8
	ldur	x8, [x29, #-88]
Lloh30:
	adrp	x9, ___stack_chk_guard@GOTPAGE
Lloh31:
	ldr	x9, [x9, ___stack_chk_guard@GOTPAGEOFF]
Lloh32:
	ldr	x9, [x9]
	cmp	x9, x8
	b.ne	LBB0_16
; %bb.15:
	sub	sp, x29, #80
	ldp	x29, x30, [sp, #80]             ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #64]             ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #48]             ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #32]             ; 16-byte Folded Reload
	ldp	x26, x25, [sp, #16]             ; 16-byte Folded Reload
	ldp	x28, x27, [sp], #96             ; 16-byte Folded Reload
	ret
LBB0_16:
	bl	___stack_chk_fail
	.loh AdrpLdrGot	Lloh6, Lloh7
	.loh AdrpLdrGotLdr	Lloh3, Lloh4, Lloh5
	.loh AdrpLdrGotLdr	Lloh0, Lloh1, Lloh2
	.loh AdrpAdd	Lloh11, Lloh12
	.loh AdrpLdrGotLdr	Lloh8, Lloh9, Lloh10
	.loh AdrpLdrGotLdr	Lloh18, Lloh19, Lloh20
	.loh AdrpLdrGot	Lloh16, Lloh17
	.loh AdrpLdrGotLdr	Lloh13, Lloh14, Lloh15
	.loh AdrpAdd	Lloh21, Lloh22
	.loh AdrpAdd	Lloh23, Lloh24
	.loh AdrpAdd	Lloh28, Lloh29
	.loh AdrpLdrGotLdr	Lloh25, Lloh26, Lloh27
	.loh AdrpLdrGotLdr	Lloh30, Lloh31, Lloh32
	.cfi_endproc
                                        ; -- End function
	.comm	_ETH_ALEN,4,2                   ; @ETH_ALEN
	.comm	_MSG_DEBUG,4,2                  ; @MSG_DEBUG
	.section	__TEXT,__cstring,cstring_literals
l_.str:                                 ; @.str
	.asciz	"SAE: password"

	.comm	_SHA256_MAC_LEN,4,2             ; @SHA256_MAC_LEN
l_.str.1:                               ; @.str.1
	.asciz	"SAE: Failed to derive PWE"

l_.str.2:                               ; @.str.2
	.asciz	"SAE: counter = %02u"

l_.str.3:                               ; @.str.3
	.asciz	"SAE: Use PWE from counter = %02u"

	.no_dead_strip	_sae_derive_pwe_ffc
.subsections_via_symbols
