	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	4, 0x90                         ## -- Begin function sae_derive_pwe_ecc
_sae_derive_pwe_ecc:                    ## @sae_derive_pwe_ecc
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r13
	pushq	%r12
	pushq	%rbx
	subq	$264, %rsp                      ## imm = 0x108
	.cfi_offset %rbx, -56
	.cfi_offset %r12, -48
	.cfi_offset %r13, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movq	%r9, -152(%rbp)                 ## 8-byte Spill
	movq	%r8, %r12
	movq	%rcx, -256(%rbp)                ## 8-byte Spill
	movq	%rdx, -136(%rbp)                ## 8-byte Spill
	movq	%rsi, -176(%rbp)                ## 8-byte Spill
	movq	%rdi, -208(%rbp)                ## 8-byte Spill
	movq	%rsp, %r13
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	movq	%rax, -48(%rbp)
	movq	_ETH_ALEN@GOTPCREL(%rip), %rax
	movl	(%rax), %eax
	movq	%rax, -200(%rbp)                ## 8-byte Spill
	addl	%eax, %eax
	shlq	$2, %rax
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, -192(%rbp)                ## 8-byte Spill
	movq	_SAE_MAX_ECC_PRIME_LEN@GOTPCREL(%rip), %rax
	movl	(%rax), %r14d
	movq	%r14, %rbx
	shlq	$2, %rbx
	movq	%rbx, %rax
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, -280(%rbp)                ## 8-byte Spill
	movq	$0, -232(%rbp)
	movq	$0, -224(%rbp)
	movq	%rbx, %rax
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, %r15
	movq	%rbx, %rax
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, -288(%rbp)                ## 8-byte Spill
	movq	%rbx, %rax
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, -272(%rbp)                ## 8-byte Spill
	movq	%rbx, %rax
	movq	%r15, %rbx
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, -264(%rbp)                ## 8-byte Spill
	leal	(,%r14,4), %edx
	xorl	%r14d, %r14d
	movq	%rbx, %rdi
	xorl	%esi, %esi
	movl	%edx, -120(%rbp)                ## 4-byte Spill
	callq	_os_memset
	movq	%r12, %rdi
	callq	_os_malloc
	movq	%rax, %r15
	movq	%r12, -144(%rbp)                ## 8-byte Spill
	movq	%r12, %rdi
	callq	_os_malloc
	movl	$-1, -116(%rbp)                 ## 4-byte Folded Spill
	movq	%r15, -216(%rbp)                ## 8-byte Spill
	testq	%r15, %r15
	movq	%rax, -184(%rbp)                ## 8-byte Spill
	je	LBB0_10
## %bb.1:
	testq	%rax, %rax
	je	LBB0_10
## %bb.2:
	movq	-216(%rbp), %rdi                ## 8-byte Reload
	movq	-144(%rbp), %rsi                ## 8-byte Reload
	callq	_random_get_bytes
	testq	%rax, %rax
	movq	%r13, %r15
	js	LBB0_11
## %bb.3:
	movq	-208(%rbp), %r14                ## 8-byte Reload
	movq	(%r14), %rax
	movq	(%rax), %r13
	movq	24(%rax), %rdi
	movq	-280(%rbp), %rsi                ## 8-byte Reload
	movl	-120(%rbp), %edx                ## 4-byte Reload
	movq	%r13, %rcx
	callq	_crypto_bignum_to_bin
	testq	%rax, %rax
	js	LBB0_11
## %bb.4:
	movq	(%r14), %rax
	movq	24(%rax), %rdi
	leaq	-232(%rbp), %rsi
	leaq	-224(%rbp), %rdx
	callq	_dragonfly_get_random_qr_qnr
	testq	%rax, %rax
	js	LBB0_11
## %bb.5:
	movq	-232(%rbp), %rdi
	movq	-272(%rbp), %rsi                ## 8-byte Reload
	movl	-120(%rbp), %edx                ## 4-byte Reload
	movq	%r13, %rcx
	callq	_crypto_bignum_to_bin
	testq	%rax, %rax
	js	LBB0_11
## %bb.6:
	movq	-224(%rbp), %rdi
	movq	-264(%rbp), %rsi                ## 8-byte Reload
	movl	-120(%rbp), %edx                ## 4-byte Reload
	movq	%r13, %rcx
	callq	_crypto_bignum_to_bin
	testq	%rax, %rax
	js	LBB0_11
## %bb.7:
	movq	%rbx, -168(%rbp)                ## 8-byte Spill
	movq	_MSG_DEBUG@GOTPCREL(%rip), %r12
	movl	(%r12), %edi
	leaq	L_.str(%rip), %rsi
	movq	-256(%rbp), %rdx                ## 8-byte Reload
	movq	-144(%rbp), %rcx                ## 8-byte Reload
	callq	_wpa_hexdump_ascii_key
	movq	-152(%rbp), %rbx                ## 8-byte Reload
	testq	%rbx, %rbx
	movq	%r15, -160(%rbp)                ## 8-byte Spill
	movq	%r13, -248(%rbp)                ## 8-byte Spill
	je	LBB0_16
## %bb.8:
	movl	(%r12), %edi
	leaq	L_.str.1(%rip), %rsi
	movq	%rbx, %rdx
	xorl	%eax, %eax
	callq	_wpa_printf
	movq	-176(%rbp), %rdi                ## 8-byte Reload
	movq	-136(%rbp), %rsi                ## 8-byte Reload
	movq	-192(%rbp), %rdx                ## 8-byte Reload
	callq	_sae_pwd_seed_key
	movq	-184(%rbp), %rax                ## 8-byte Reload
	movq	%rax, -80(%rbp)
	movq	-144(%rbp), %rax                ## 8-byte Reload
	movq	%rax, -112(%rbp)
	movq	%rbx, -72(%rbp)
	movq	%rbx, %rdi
	callq	_os_strlen
	movq	%rax, -104(%rbp)
	movl	$2, %ebx
	jmp	LBB0_17
LBB0_10:
	movq	%r13, %r15
	jmp	LBB0_35
LBB0_11:
	xorl	%r14d, %r14d
LBB0_35:
	movq	-232(%rbp), %rdi
	xorl	%esi, %esi
	callq	_crypto_bignum_deinit
	movq	-224(%rbp), %rdi
	xorl	%esi, %esi
	callq	_crypto_bignum_deinit
	movq	-216(%rbp), %rdi                ## 8-byte Reload
	callq	_os_free
	movq	-184(%rbp), %rdi                ## 8-byte Reload
	movq	-144(%rbp), %rsi                ## 8-byte Reload
	callq	_bin_clear_free
	movq	%r14, %rdi
	movl	$1, %esi
	callq	_crypto_bignum_deinit
	movq	%rbx, %rdi
	xorl	%esi, %esi
	movl	-120(%rbp), %ebx                ## 4-byte Reload
	movl	%ebx, %edx
	callq	_os_memset
	movq	-288(%rbp), %rdi                ## 8-byte Reload
	xorl	%esi, %esi
	movl	%ebx, %edx
	callq	_os_memset
	movq	%r15, %rsp
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	cmpq	-48(%rbp), %rax
	jne	LBB0_37
## %bb.36:
	movl	-116(%rbp), %eax                ## 4-byte Reload
	leaq	-40(%rbp), %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
LBB0_16:
	movq	-176(%rbp), %rdi                ## 8-byte Reload
	movq	-136(%rbp), %rsi                ## 8-byte Reload
	movq	-192(%rbp), %rdx                ## 8-byte Reload
	callq	_sae_pwd_seed_key
	movq	-184(%rbp), %rax                ## 8-byte Reload
	movq	%rax, -80(%rbp)
	movq	-144(%rbp), %rax                ## 8-byte Reload
	movq	%rax, -112(%rbp)
	movl	$1, %ebx
LBB0_17:
	movq	%r12, %r15
	leaq	-124(%rbp), %rax
	movq	%rax, -80(%rbp,%rbx,8)
	movq	$4, -112(%rbp,%rbx,8)
	incq	%rbx
	movl	8(%r14), %edi
	callq	_dragonfly_min_pwe_loop_iter
	movl	%eax, -236(%rbp)                ## 4-byte Spill
	movl	$1, -124(%rbp)
	movq	-200(%rbp), %rax                ## 8-byte Reload
	shll	$3, %eax
	movq	%rax, -200(%rbp)                ## 8-byte Spill
	xorl	%r12d, %r12d
	movl	$0, -152(%rbp)                  ## 4-byte Folded Spill
	movq	%rbx, -296(%rbp)                ## 8-byte Spill
	.p2align	4, 0x90
LBB0_18:                                ## =>This Inner Loop Header: Depth=1
	movq	%rsp, -136(%rbp)                ## 8-byte Spill
	movq	_SHA256_MAC_LEN@GOTPCREL(%rip), %rax
	movl	(%rax), %eax
	movq	%rax, -176(%rbp)                ## 8-byte Spill
	leaq	(,%rax,4), %rax
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, %r13
	movl	-124(%rbp), %edx
	movl	(%r15), %edi
	cmpl	$201, %edx
	jge	LBB0_23
## %bb.19:                              ##   in Loop: Header=BB0_18 Depth=1
	leaq	L_.str.3(%rip), %rsi
	xorl	%eax, %eax
	callq	_wpa_printf
	movl	%r12d, %r15d
	movl	%r12d, %edi
	movq	-216(%rbp), %rsi                ## 8-byte Reload
	movq	-256(%rbp), %rdx                ## 8-byte Reload
	movq	-144(%rbp), %rcx                ## 8-byte Reload
	movq	-184(%rbp), %r8                 ## 8-byte Reload
	callq	_const_time_select_bin
	movq	-192(%rbp), %rdi                ## 8-byte Reload
	movq	-200(%rbp), %rsi                ## 8-byte Reload
                                        ## kill: def $esi killed $esi killed $rsi
	movq	%rbx, %rdx
	leaq	-80(%rbp), %rcx
	leaq	-112(%rbp), %r8
	movq	%r13, %r9
	callq	_hmac_sha256_vector
	testq	%rax, %rax
	js	LBB0_24
## %bb.20:                              ##   in Loop: Header=BB0_18 Depth=1
	movq	%r14, %rdi
	movq	%r13, %rsi
	movq	-280(%rbp), %rdx                ## 8-byte Reload
	movq	-272(%rbp), %rcx                ## 8-byte Reload
	movq	-264(%rbp), %r8                 ## 8-byte Reload
	movq	-288(%rbp), %r14                ## 8-byte Reload
	movq	%r14, %r9
	callq	_sae_test_pwd_seed_ecc
	movl	%eax, %r12d
	movl	%r15d, %edi
	movq	-168(%rbp), %rsi                ## 8-byte Reload
	movq	%r14, %rdx
	movq	-248(%rbp), %rcx                ## 8-byte Reload
	movq	%rsi, %r8
	callq	_const_time_select_bin
	movq	_SHA256_MAC_LEN@GOTPCREL(%rip), %rax
	movslq	(%rax), %rax
	movl	-4(%r13,%rax,4), %edx
	andl	$1, %edx
	movl	%r15d, %edi
	movl	-152(%rbp), %esi                ## 4-byte Reload
	callq	_const_time_select_u8
	movl	%eax, %ebx
	movq	-176(%rbp), %rdx                ## 8-byte Reload
	shll	$2, %edx
	movq	%r13, %rdi
	xorl	%esi, %esi
                                        ## kill: def $edx killed $edx killed $rdx
	callq	_os_memset
	testl	%r12d, %r12d
	js	LBB0_29
## %bb.21:                              ##   in Loop: Header=BB0_18 Depth=1
	movl	%ebx, -152(%rbp)                ## 4-byte Spill
	movl	%r12d, %eax
	shll	$8, %eax
	subl	%r12d, %eax
	orl	%eax, %r15d
	movl	%r15d, %ecx
	movq	_MSG_DEBUG@GOTPCREL(%rip), %r15
	movl	(%r15), %edi
	leaq	L_.str.4(%rip), %rsi
	movl	%r12d, %edx
	movl	%ecx, %r12d
	xorl	%eax, %eax
	callq	_wpa_printf
	movq	-136(%rbp), %rsp                ## 8-byte Reload
	movl	-124(%rbp), %eax
	leal	1(%rax), %ecx
	movl	%ecx, -124(%rbp)
	cmpl	-236(%rbp), %eax                ## 4-byte Folded Reload
	movq	-208(%rbp), %r14                ## 8-byte Reload
	movq	-296(%rbp), %rbx                ## 8-byte Reload
	jl	LBB0_18
## %bb.22:                              ##   in Loop: Header=BB0_18 Depth=1
	testl	%r12d, %r12d
	je	LBB0_18
	jmp	LBB0_25
LBB0_23:
	leaq	L_.str.2(%rip), %rsi
	xorl	%eax, %eax
	callq	_wpa_printf
	movl	%r12d, %r15d
LBB0_24:
	movq	-136(%rbp), %rsp                ## 8-byte Reload
	testl	%r15d, %r15d
	movq	_MSG_DEBUG@GOTPCREL(%rip), %rax
	je	LBB0_31
LBB0_25:
	movq	-168(%rbp), %rbx                ## 8-byte Reload
	movq	%rbx, %rdi
	movq	-248(%rbp), %rsi                ## 8-byte Reload
	callq	_crypto_bignum_init_set
	testq	%rax, %rax
	je	LBB0_30
## %bb.26:
	movq	%rax, %r14
	movq	-208(%rbp), %r15                ## 8-byte Reload
	movq	(%r15), %rax
	movq	8(%rax), %rsi
	testq	%rsi, %rsi
	movq	-160(%rbp), %r13                ## 8-byte Reload
	jne	LBB0_28
## %bb.27:
	movl	16(%rax), %edi
	callq	_crypto_ec_point_init
	movq	%rax, %rsi
	movq	(%r15), %rax
	movq	%rsi, 8(%rax)
	testq	%rsi, %rsi
	je	LBB0_33
LBB0_28:
	movl	16(%rax), %edi
	movq	%r14, %rdx
	movl	-152(%rbp), %ecx                ## 4-byte Reload
	callq	_crypto_ec_point_solve_y_coord
	movl	%eax, -116(%rbp)                ## 4-byte Spill
	testl	%eax, %eax
	movq	%r13, %r15
	jns	LBB0_35
	jmp	LBB0_34
LBB0_29:
	movq	-136(%rbp), %rsp                ## 8-byte Reload
	xorl	%r14d, %r14d
	movl	%r12d, -116(%rbp)               ## 4-byte Spill
	jmp	LBB0_32
LBB0_30:
	xorl	%r14d, %r14d
	movq	-160(%rbp), %r15                ## 8-byte Reload
	jmp	LBB0_35
LBB0_31:
	movl	(%rax), %edi
	leaq	L_.str.5(%rip), %rsi
	xorl	%r14d, %r14d
	xorl	%eax, %eax
	callq	_wpa_printf
LBB0_32:
	movq	-160(%rbp), %r15                ## 8-byte Reload
	movq	-168(%rbp), %rbx                ## 8-byte Reload
	jmp	LBB0_35
LBB0_33:
	movl	$-1, -116(%rbp)                 ## 4-byte Folded Spill
	movq	%r13, %r15
LBB0_34:
	movq	_MSG_DEBUG@GOTPCREL(%rip), %rax
	movl	(%rax), %edi
	leaq	L_.str.6(%rip), %rsi
	xorl	%eax, %eax
	callq	_wpa_printf
	jmp	LBB0_35
LBB0_37:
	callq	___stack_chk_fail
	.cfi_endproc
                                        ## -- End function
	.comm	_ETH_ALEN,4,2                   ## @ETH_ALEN
	.comm	_SAE_MAX_ECC_PRIME_LEN,4,2      ## @SAE_MAX_ECC_PRIME_LEN
	.comm	_MSG_DEBUG,4,2                  ## @MSG_DEBUG
	.section	__TEXT,__cstring,cstring_literals
L_.str:                                 ## @.str
	.asciz	"SAE: password"

L_.str.1:                               ## @.str.1
	.asciz	"SAE: password identifier: %s"

	.comm	_SHA256_MAC_LEN,4,2             ## @SHA256_MAC_LEN
L_.str.2:                               ## @.str.2
	.asciz	"SAE: Failed to derive PWE"

L_.str.3:                               ## @.str.3
	.asciz	"SAE: counter = %03u"

L_.str.4:                               ## @.str.4
	.asciz	"SAE: pwd-seed result %d found=0x%02x"

L_.str.5:                               ## @.str.5
	.asciz	"SAE: Could not generate PWE"

L_.str.6:                               ## @.str.6
	.asciz	"SAE: Could not solve y"

	.no_dead_strip	_sae_derive_pwe_ecc
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	2                               ; -- Begin function sae_derive_pwe_ecc
_sae_derive_pwe_ecc:                    ; @sae_derive_pwe_ecc
	.cfi_startproc
; %bb.0:
	stp	x28, x27, [sp, #-96]!           ; 16-byte Folded Spill
	.cfi_def_cfa_offset 96
	stp	x26, x25, [sp, #16]             ; 16-byte Folded Spill
	stp	x24, x23, [sp, #32]             ; 16-byte Folded Spill
	stp	x22, x21, [sp, #48]             ; 16-byte Folded Spill
	stp	x20, x19, [sp, #64]             ; 16-byte Folded Spill
	stp	x29, x30, [sp, #80]             ; 16-byte Folded Spill
	add	x29, sp, #80
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	.cfi_offset w25, -72
	.cfi_offset w26, -80
	.cfi_offset w27, -88
	.cfi_offset w28, -96
	sub	sp, sp, #208
	stp	x2, x5, [x29, #-240]            ; 16-byte Folded Spill
	mov	x19, x4
	stur	x3, [x29, #-216]                ; 8-byte Folded Spill
	stur	x1, [x29, #-248]                ; 8-byte Folded Spill
	stur	x0, [x29, #-192]                ; 8-byte Folded Spill
	mov	x28, sp
Lloh0:
	adrp	x8, ___stack_chk_guard@GOTPAGE
Lloh1:
	ldr	x8, [x8, ___stack_chk_guard@GOTPAGEOFF]
Lloh2:
	ldr	x8, [x8]
	stur	x8, [x29, #-96]
Lloh3:
	adrp	x8, _ETH_ALEN@GOTPAGE
Lloh4:
	ldr	x8, [x8, _ETH_ALEN@GOTPAGEOFF]
Lloh5:
	ldr	w27, [x8]
	lsl	w8, w27, #1
	lsl	x8, x8, #2
	mov	x9, x8
Lloh6:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh7:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x9, sp
	add	x8, x8, #15
	and	x8, x8, #0x7fffffff0
	sub	x8, x9, x8
	stur	x8, [x29, #-224]                ; 8-byte Folded Spill
	mov	sp, x8
Lloh8:
	adrp	x8, _SAE_MAX_ECC_PRIME_LEN@GOTPAGE
Lloh9:
	ldr	x8, [x8, _SAE_MAX_ECC_PRIME_LEN@GOTPAGEOFF]
Lloh10:
	ldr	w12, [x8]
	lsl	x8, x12, #2
	mov	x9, x8
Lloh11:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh12:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x9, sp
	add	x10, x8, #15
	and	x13, x10, #0x7fffffff0
	sub	x9, x9, x13
	stur	x9, [x29, #-200]                ; 8-byte Folded Spill
	mov	sp, x9
	stp	xzr, xzr, [x29, #-168]
	mov	x9, x8
Lloh13:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh14:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x9, sp
	sub	x20, x9, x13
	mov	sp, x20
	mov	x9, x8
Lloh15:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh16:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x9, sp
	sub	x26, x9, x13
	mov	sp, x26
	mov	x9, x8
Lloh17:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh18:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x9, sp
	sub	x9, x9, x13
	mov	x25, x9
	mov	sp, x9
	mov	x9, x8
Lloh19:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh20:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x8, sp
	sub	x8, x8, x13
	stur	x8, [x29, #-208]                ; 8-byte Folded Spill
	mov	sp, x8
	lsl	w22, w12, #2
	mov	x0, x20
	mov	w1, #0
	mov	x2, x22
	bl	_os_memset
	mov	x0, x19
	bl	_os_malloc
	mov	x23, x0
	mov	x0, x19
	bl	_os_malloc
	stp	x23, x0, [x29, #-184]           ; 16-byte Folded Spill
	mov	x21, #0
	mov	w24, #-1
	cbz	x23, LBB0_10
; %bb.1:
	ldur	x8, [x29, #-176]                ; 8-byte Folded Reload
	cbz	x8, LBB0_10
; %bb.2:
	ldur	x0, [x29, #-184]                ; 8-byte Folded Reload
	mov	x1, x19
	bl	_random_get_bytes
	tbnz	x0, #63, LBB0_9
; %bb.3:
	ldp	x1, x8, [x29, #-200]            ; 16-byte Folded Reload
	ldr	x8, [x8]
	ldr	x21, [x8]
	ldr	x0, [x8, #24]
	mov	x2, x22
	mov	x3, x21
	bl	_crypto_bignum_to_bin
	tbnz	x0, #63, LBB0_9
; %bb.4:
	ldur	x8, [x29, #-192]                ; 8-byte Folded Reload
	ldr	x8, [x8]
	ldr	x0, [x8, #24]
	sub	x1, x29, #160
	sub	x2, x29, #168
	bl	_dragonfly_get_random_qr_qnr
	tbnz	x0, #63, LBB0_9
; %bb.5:
	ldur	x0, [x29, #-160]
	stur	x25, [x29, #-256]               ; 8-byte Folded Spill
	mov	x1, x25
	mov	x2, x22
	mov	x3, x21
	bl	_crypto_bignum_to_bin
	tbnz	x0, #63, LBB0_9
; %bb.6:
	ldur	x0, [x29, #-168]
	ldur	x1, [x29, #-208]                ; 8-byte Folded Reload
	mov	x2, x22
	mov	x3, x21
	bl	_crypto_bignum_to_bin
	tbnz	x0, #63, LBB0_9
; %bb.7:
Lloh21:
	adrp	x25, _MSG_DEBUG@GOTPAGE
Lloh22:
	ldr	x25, [x25, _MSG_DEBUG@GOTPAGEOFF]
	ldr	w0, [x25]
Lloh23:
	adrp	x1, l_.str@PAGE
Lloh24:
	add	x1, x1, l_.str@PAGEOFF
	ldur	x2, [x29, #-216]                ; 8-byte Folded Reload
	mov	x3, x19
	bl	_wpa_hexdump_ascii_key
	ldur	x24, [x29, #-232]               ; 8-byte Folded Reload
	sub	x8, x29, #32
	stur	x28, [x8, #-256]                ; 8-byte Folded Spill
	sub	x8, x29, #8
	stur	x26, [x8, #-256]                ; 8-byte Folded Spill
	sub	x8, x29, #16
	stur	x21, [x8, #-256]                ; 8-byte Folded Spill
	cbz	x24, LBB0_12
; %bb.8:
	ldr	w0, [x25]
	str	x24, [sp, #-16]!
Lloh25:
	adrp	x1, l_.str.1@PAGE
Lloh26:
	add	x1, x1, l_.str.1@PAGEOFF
	bl	_wpa_printf
	add	sp, sp, #16
	ldp	x0, x1, [x29, #-248]            ; 16-byte Folded Reload
	ldur	x2, [x29, #-224]                ; 8-byte Folded Reload
	bl	_sae_pwd_seed_key
	stur	x19, [x29, #-144]
	ldur	x8, [x29, #-176]                ; 8-byte Folded Reload
	stp	x8, x24, [x29, #-120]
	mov	x0, x24
	bl	_os_strlen
	stur	x0, [x29, #-136]
	mov	w8, #2
	b	LBB0_13
LBB0_9:
	mov	x21, #0
	mov	w24, #-1
LBB0_10:
	ldur	x0, [x29, #-160]
	mov	w1, #0
	bl	_crypto_bignum_deinit
	ldur	x0, [x29, #-168]
	mov	w1, #0
	bl	_crypto_bignum_deinit
	ldur	x0, [x29, #-184]                ; 8-byte Folded Reload
	bl	_os_free
	ldur	x0, [x29, #-176]                ; 8-byte Folded Reload
	mov	x1, x19
	bl	_bin_clear_free
	mov	x0, x21
	mov	w1, #1
	bl	_crypto_bignum_deinit
	mov	x0, x20
	mov	w1, #0
	mov	x2, x22
	bl	_os_memset
	mov	x0, x26
	mov	w1, #0
	mov	x2, x22
	bl	_os_memset
	mov	sp, x28
	ldur	x8, [x29, #-96]
Lloh27:
	adrp	x9, ___stack_chk_guard@GOTPAGE
Lloh28:
	ldr	x9, [x9, ___stack_chk_guard@GOTPAGEOFF]
Lloh29:
	ldr	x9, [x9]
	cmp	x9, x8
	b.ne	LBB0_31
; %bb.11:
	mov	x0, x24
	sub	sp, x29, #80
	ldp	x29, x30, [sp, #80]             ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #64]             ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #48]             ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #32]             ; 16-byte Folded Reload
	ldp	x26, x25, [sp, #16]             ; 16-byte Folded Reload
	ldp	x28, x27, [sp], #96             ; 16-byte Folded Reload
	ret
LBB0_12:
	ldp	x0, x1, [x29, #-248]            ; 16-byte Folded Reload
	ldur	x2, [x29, #-224]                ; 8-byte Folded Reload
	bl	_sae_pwd_seed_key
	ldur	x8, [x29, #-176]                ; 8-byte Folded Reload
	stur	x8, [x29, #-120]
	stur	x19, [x29, #-144]
	mov	w8, #1
LBB0_13:
	lsl	x9, x8, #3
	sub	x10, x29, #120
	sub	x11, x29, #148
	str	x11, [x10, x9]
	mov	w10, #4
	sub	x11, x29, #144
	str	x10, [x11, x9]
	add	x8, x8, #1
	stur	x8, [x29, #-240]                ; 8-byte Folded Spill
	ldur	x8, [x29, #-192]                ; 8-byte Folded Reload
	ldr	w0, [x8, #8]
	bl	_dragonfly_min_pwe_loop_iter
	sub	x8, x29, #20
	stur	w0, [x8, #-256]                 ; 4-byte Folded Spill
	mov	w21, #0
	stur	wzr, [x29, #-232]               ; 4-byte Folded Spill
	mov	w8, #1
	stur	w8, [x29, #-148]
	lsl	w8, w27, #3
	stur	w8, [x29, #-248]                ; 4-byte Folded Spill
LBB0_14:                                ; =>This Inner Loop Header: Depth=1
	mov	x23, sp
Lloh30:
	adrp	x8, _SHA256_MAC_LEN@GOTPAGE
Lloh31:
	ldr	x8, [x8, _SHA256_MAC_LEN@GOTPAGEOFF]
Lloh32:
	ldr	w26, [x8]
	lsl	x8, x26, #2
	mov	x9, x8
Lloh33:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh34:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x9, sp
	add	x8, x8, #15
	and	x8, x8, #0x7fffffff0
	sub	x27, x9, x8
	mov	sp, x27
	ldur	w8, [x29, #-148]
	ldr	w0, [x25]
	cmp	w8, #201
	b.ge	LBB0_19
; %bb.15:                               ;   in Loop: Header=BB0_14 Depth=1
	str	x8, [sp, #-16]!
Lloh35:
	adrp	x1, l_.str.3@PAGE
Lloh36:
	add	x1, x1, l_.str.3@PAGEOFF
	bl	_wpa_printf
	add	sp, sp, #16
	mov	x0, x21
	ldp	x1, x4, [x29, #-184]            ; 16-byte Folded Reload
	ldur	x2, [x29, #-216]                ; 8-byte Folded Reload
	mov	x3, x19
	bl	_const_time_select_bin
	sub	x3, x29, #120
	sub	x4, x29, #144
	ldur	x0, [x29, #-224]                ; 8-byte Folded Reload
	ldur	w1, [x29, #-248]                ; 4-byte Folded Reload
	ldur	x2, [x29, #-240]                ; 8-byte Folded Reload
	mov	x5, x27
	bl	_hmac_sha256_vector
	tbnz	x0, #63, LBB0_20
; %bb.16:                               ;   in Loop: Header=BB0_14 Depth=1
	mov	x28, x25
	ldp	x2, x0, [x29, #-200]            ; 16-byte Folded Reload
	mov	x1, x27
	ldur	x3, [x29, #-256]                ; 8-byte Folded Reload
	ldur	x4, [x29, #-208]                ; 8-byte Folded Reload
	sub	x8, x29, #8
	ldur	x25, [x8, #-256]                ; 8-byte Folded Reload
	mov	x5, x25
	bl	_sae_test_pwd_seed_ecc
	mov	x24, x0
	mov	x0, x21
	mov	x1, x20
	mov	x2, x25
	sub	x8, x29, #16
	ldur	x3, [x8, #-256]                 ; 8-byte Folded Reload
	mov	x25, x20
	mov	x4, x20
	bl	_const_time_select_bin
Lloh37:
	adrp	x8, _SHA256_MAC_LEN@GOTPAGE
Lloh38:
	ldr	x8, [x8, _SHA256_MAC_LEN@GOTPAGEOFF]
Lloh39:
	ldrsw	x8, [x8]
	add	x8, x27, x8, lsl #2
	ldur	w8, [x8, #-4]
	and	w2, w8, #0x1
	mov	x0, x21
	ldur	w1, [x29, #-232]                ; 4-byte Folded Reload
	bl	_const_time_select_u8
	mov	x20, x0
	lsl	w2, w26, #2
	mov	x0, x27
	mov	w1, #0
	bl	_os_memset
	tbnz	w24, #31, LBB0_26
; %bb.17:                               ;   in Loop: Header=BB0_14 Depth=1
	stur	w20, [x29, #-232]               ; 4-byte Folded Spill
	lsl	w8, w24, #8
	sub	w8, w8, w24
	orr	w21, w8, w21
	ldr	w0, [x28]
	stp	x24, x21, [sp, #-16]!
Lloh40:
	adrp	x1, l_.str.4@PAGE
Lloh41:
	add	x1, x1, l_.str.4@PAGEOFF
	bl	_wpa_printf
	add	sp, sp, #16
	mov	sp, x23
	ldur	w8, [x29, #-148]
	add	w9, w8, #1
	stur	w9, [x29, #-148]
	sub	x9, x29, #20
	ldur	w9, [x9, #-256]                 ; 4-byte Folded Reload
	cmp	w8, w9
	mov	x20, x25
	mov	x25, x28
	b.lt	LBB0_14
; %bb.18:                               ;   in Loop: Header=BB0_14 Depth=1
	cbz	w21, LBB0_14
	b	LBB0_21
LBB0_19:
Lloh42:
	adrp	x1, l_.str.2@PAGE
Lloh43:
	add	x1, x1, l_.str.2@PAGEOFF
	bl	_wpa_printf
LBB0_20:
	mov	sp, x23
	cbz	w21, LBB0_27
LBB0_21:
	mov	x0, x20
	sub	x8, x29, #16
	ldur	x1, [x8, #-256]                 ; 8-byte Folded Reload
	bl	_crypto_bignum_init_set
	mov	x21, x0
	cbz	x0, LBB0_28
; %bb.22:
	ldur	x8, [x29, #-192]                ; 8-byte Folded Reload
	ldr	x8, [x8]
	ldr	x1, [x8, #8]
	sub	x9, x29, #32
	ldur	x28, [x9, #-256]                ; 8-byte Folded Reload
	sub	x9, x29, #8
	ldur	x26, [x9, #-256]                ; 8-byte Folded Reload
	cbnz	x1, LBB0_25
; %bb.23:
	ldr	w0, [x8, #16]
	bl	_crypto_ec_point_init
	ldur	x8, [x29, #-192]                ; 8-byte Folded Reload
	ldr	x8, [x8]
	str	x0, [x8, #8]
	cbz	x0, LBB0_29
; %bb.24:
	mov	x1, x0
LBB0_25:
	ldr	w0, [x8, #16]
	mov	x2, x21
	ldur	w3, [x29, #-232]                ; 4-byte Folded Reload
	bl	_crypto_ec_point_solve_y_coord
	mov	x24, x0
	tbz	w0, #31, LBB0_10
	b	LBB0_30
LBB0_26:
	mov	sp, x23
	mov	x21, #0
	sub	x8, x29, #32
	ldur	x28, [x8, #-256]                ; 8-byte Folded Reload
	sub	x8, x29, #8
	ldur	x26, [x8, #-256]                ; 8-byte Folded Reload
	mov	x20, x25
	b	LBB0_10
LBB0_27:
	ldr	w0, [x25]
Lloh44:
	adrp	x1, l_.str.5@PAGE
Lloh45:
	add	x1, x1, l_.str.5@PAGEOFF
	bl	_wpa_printf
	mov	x21, #0
LBB0_28:
	mov	w24, #-1
	sub	x8, x29, #32
	ldur	x28, [x8, #-256]                ; 8-byte Folded Reload
	sub	x8, x29, #8
	ldur	x26, [x8, #-256]                ; 8-byte Folded Reload
	b	LBB0_10
LBB0_29:
	mov	w24, #-1
LBB0_30:
	ldr	w0, [x25]
Lloh46:
	adrp	x1, l_.str.6@PAGE
Lloh47:
	add	x1, x1, l_.str.6@PAGEOFF
	bl	_wpa_printf
	b	LBB0_10
LBB0_31:
	bl	___stack_chk_fail
	.loh AdrpLdrGot	Lloh19, Lloh20
	.loh AdrpLdrGot	Lloh17, Lloh18
	.loh AdrpLdrGot	Lloh15, Lloh16
	.loh AdrpLdrGot	Lloh13, Lloh14
	.loh AdrpLdrGot	Lloh11, Lloh12
	.loh AdrpLdrGotLdr	Lloh8, Lloh9, Lloh10
	.loh AdrpLdrGot	Lloh6, Lloh7
	.loh AdrpLdrGotLdr	Lloh3, Lloh4, Lloh5
	.loh AdrpLdrGotLdr	Lloh0, Lloh1, Lloh2
	.loh AdrpAdd	Lloh23, Lloh24
	.loh AdrpLdrGot	Lloh21, Lloh22
	.loh AdrpAdd	Lloh25, Lloh26
	.loh AdrpLdrGotLdr	Lloh27, Lloh28, Lloh29
	.loh AdrpLdrGot	Lloh33, Lloh34
	.loh AdrpLdrGotLdr	Lloh30, Lloh31, Lloh32
	.loh AdrpAdd	Lloh35, Lloh36
	.loh AdrpLdrGotLdr	Lloh37, Lloh38, Lloh39
	.loh AdrpAdd	Lloh40, Lloh41
	.loh AdrpAdd	Lloh42, Lloh43
	.loh AdrpAdd	Lloh44, Lloh45
	.loh AdrpAdd	Lloh46, Lloh47
	.cfi_endproc
                                        ; -- End function
	.comm	_ETH_ALEN,4,2                   ; @ETH_ALEN
	.comm	_SAE_MAX_ECC_PRIME_LEN,4,2      ; @SAE_MAX_ECC_PRIME_LEN
	.comm	_MSG_DEBUG,4,2                  ; @MSG_DEBUG
	.section	__TEXT,__cstring,cstring_literals
l_.str:                                 ; @.str
	.asciz	"SAE: password"

l_.str.1:                               ; @.str.1
	.asciz	"SAE: password identifier: %s"

	.comm	_SHA256_MAC_LEN,4,2             ; @SHA256_MAC_LEN
l_.str.2:                               ; @.str.2
	.asciz	"SAE: Failed to derive PWE"

l_.str.3:                               ; @.str.3
	.asciz	"SAE: counter = %03u"

l_.str.4:                               ; @.str.4
	.asciz	"SAE: pwd-seed result %d found=0x%02x"

l_.str.5:                               ; @.str.5
	.asciz	"SAE: Could not generate PWE"

l_.str.6:                               ; @.str.6
	.asciz	"SAE: Could not solve y"

	.no_dead_strip	_sae_derive_pwe_ecc
.subsections_via_symbols
