	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_RSA_padding_add_PKCS1_OAEP_mgf1 ## -- Begin function RSA_padding_add_PKCS1_OAEP_mgf1
	.p2align	4, 0x90
_RSA_padding_add_PKCS1_OAEP_mgf1:       ## @RSA_padding_add_PKCS1_OAEP_mgf1
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r13
	pushq	%r12
	pushq	%rbx
	subq	$88, %rsp
	.cfi_offset %rbx, -56
	.cfi_offset %r12, -48
	.cfi_offset %r13, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movl	%r9d, -80(%rbp)                 ## 4-byte Spill
	movq	%r8, -72(%rbp)                  ## 8-byte Spill
	movl	%ecx, %r12d
	movq	%rdx, -120(%rbp)                ## 8-byte Spill
	movl	%esi, %r15d
	movq	%rdi, -104(%rbp)                ## 8-byte Spill
	movq	24(%rbp), %rbx
	movq	16(%rbp), %r14
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	movq	%rax, -48(%rbp)
	leal	-1(%r15), %r13d
	movq	_EVP_MAX_MD_SIZE@GOTPCREL(%rip), %rax
	movl	(%rax), %eax
	movq	%rax, -128(%rbp)                ## 8-byte Spill
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, -64(%rbp)                 ## 8-byte Spill
	testq	%r14, %r14
	jne	LBB0_2
## %bb.1:
	xorl	%eax, %eax
	callq	_EVP_sha1
	movq	%rax, %r14
LBB0_2:
	testq	%rbx, %rbx
	cmoveq	%r14, %rbx
	movq	%rbx, -96(%rbp)                 ## 8-byte Spill
	movq	%r14, %rdi
	callq	_EVP_MD_size
	movl	%eax, %edx
	leal	(%rdx,%rdx), %eax
	movl	%eax, %ebx
	notl	%ebx
	leal	(%rbx,%r13), %ecx
	cmpl	%r12d, %ecx
	jge	LBB0_4
## %bb.3:
	movq	_RSA_F_RSA_PADDING_ADD_PKCS1_OAEP_MGF1@GOTPCREL(%rip), %rax
	movl	(%rax), %edi
	movq	_RSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE@GOTPCREL(%rip), %rax
	jmp	LBB0_13
LBB0_4:
	orl	$1, %eax
	cmpl	%r15d, %eax
	jge	LBB0_12
## %bb.5:
	movq	%r13, -112(%rbp)                ## 8-byte Spill
	movq	-104(%rbp), %r15                ## 8-byte Reload
	movb	$0, (%r15)
	movslq	%edx, %rax
	movq	%rax, -88(%rbp)                 ## 8-byte Spill
	leaq	(%r15,%rax), %r13
	incq	%r13
	xorl	%eax, %eax
	movq	%rax, -56(%rbp)                 ## 8-byte Spill
	movq	-72(%rbp), %rdi                 ## 8-byte Reload
	movl	-80(%rbp), %esi                 ## 4-byte Reload
	movq	%rdx, -80(%rbp)                 ## 8-byte Spill
	movq	%r13, %rdx
	xorl	%ecx, %ecx
	movq	%r14, %r8
	xorl	%r9d, %r9d
	callq	_EVP_Digest
	movl	$0, %ecx
	movl	$0, %r14d
	testl	%eax, %eax
	movq	-64(%rbp), %rdi                 ## 8-byte Reload
	je	LBB0_63
## %bb.6:
	leaq	1(%r15), %rax
	movq	%rax, -72(%rbp)                 ## 8-byte Spill
	movq	-88(%rbp), %rax                 ## 8-byte Reload
	leaq	(%rax,%r13), %rdi
	movq	-112(%rbp), %r15                ## 8-byte Reload
	movl	%r15d, %r14d
	subl	%r12d, %r14d
	addl	%r14d, %ebx
	xorl	%esi, %esi
	movl	%ebx, %edx
	callq	_memset
	movq	-80(%rbp), %rax                 ## 8-byte Reload
                                        ## kill: def $eax killed $eax killed $rax
	notl	%eax
	addl	%r14d, %eax
	cltq
	movb	$1, (%r13,%rax)
	movq	%r15, %r14
	movslq	%r15d, %rdi
	movq	%r13, -56(%rbp)                 ## 8-byte Spill
	addq	%r13, %rdi
	movslq	%r12d, %rax
	subq	%rax, %rdi
	movq	-88(%rbp), %rbx                 ## 8-byte Reload
	subq	%rbx, %rdi
	movq	-120(%rbp), %rsi                ## 8-byte Reload
	movl	%r12d, %edx
	movq	-72(%rbp), %r13                 ## 8-byte Reload
	callq	_memcpy
	movq	%r13, %rdi
	movl	%ebx, %esi
	callq	_RAND_bytes
	testq	%rax, %rax
	jle	LBB0_14
## %bb.7:
	movq	%r14, %r15
	subl	-80(%rbp), %r15d                ## 4-byte Folded Reload
	movl	%r15d, %edi
	callq	_OPENSSL_malloc
	testq	%rax, %rax
	je	LBB0_15
## %bb.8:
	movq	%rax, %r14
	movq	%rax, %rdi
	movl	%r15d, %esi
	movq	%r13, %rdx
	movl	%ebx, %ecx
	movq	-96(%rbp), %r8                  ## 8-byte Reload
	callq	_PKCS1_MGF1
	testq	%rax, %rax
	js	LBB0_16
## %bb.9:
	movq	%rbx, %rsi
	testl	%r15d, %r15d
	movq	-64(%rbp), %rdi                 ## 8-byte Reload
	movq	-104(%rbp), %r12                ## 8-byte Reload
	movq	-56(%rbp), %rdx                 ## 8-byte Reload
	jle	LBB0_39
## %bb.10:
	movl	%r15d, %r9d
	cmpl	$8, %r15d
	jb	LBB0_11
## %bb.18:
	leaq	(%r14,%r9), %rcx
	cmpq	%rcx, %rdx
	jae	LBB0_21
## %bb.19:
	leaq	(%rsi,%r9), %rcx
	addq	%r12, %rcx
	incq	%rcx
	cmpq	%rcx, %r14
	jae	LBB0_21
LBB0_11:
	xorl	%ecx, %ecx
LBB0_34:
	movq	%rcx, %r8
	notq	%r8
	addq	%r9, %r8
	movq	%r9, %rax
	andq	$3, %rax
	je	LBB0_36
	.p2align	4, 0x90
LBB0_35:                                ## =>This Inner Loop Header: Depth=1
	movzbl	(%r14,%rcx), %ebx
	xorb	%bl, (%rdx,%rcx)
	incq	%rcx
	decq	%rax
	jne	LBB0_35
LBB0_36:
	cmpq	$3, %r8
	jb	LBB0_39
## %bb.37:
	leaq	(%rsi,%r12), %rax
	addq	$4, %rax
	.p2align	4, 0x90
LBB0_38:                                ## =>This Inner Loop Header: Depth=1
	movzbl	(%r14,%rcx), %ebx
	xorb	%bl, -3(%rax,%rcx)
	movzbl	1(%r14,%rcx), %ebx
	xorb	%bl, -2(%rax,%rcx)
	movzbl	2(%r14,%rcx), %ebx
	xorb	%bl, -1(%rax,%rcx)
	movzbl	3(%r14,%rcx), %ebx
	xorb	%bl, (%rax,%rcx)
	addq	$4, %rcx
	cmpq	%rcx, %r9
	jne	LBB0_38
LBB0_39:
	movq	%r15, %rbx
                                        ## kill: def $esi killed $esi killed $rsi
	movl	%ebx, %ecx
	movq	-96(%rbp), %r8                  ## 8-byte Reload
	callq	_PKCS1_MGF1
	testq	%rax, %rax
	js	LBB0_43
## %bb.40:
	movq	-80(%rbp), %r13                 ## 8-byte Reload
	testl	%r13d, %r13d
	jle	LBB0_44
## %bb.41:
	movl	%r13d, %r9d
	cmpl	$8, %r13d
	movq	%rbx, %r8
	jae	LBB0_46
## %bb.42:
	xorl	%ecx, %ecx
	movq	-64(%rbp), %rdi                 ## 8-byte Reload
	movq	-72(%rbp), %rax                 ## 8-byte Reload
	jmp	LBB0_60
LBB0_12:
	movq	_RSA_F_RSA_PADDING_ADD_PKCS1_OAEP_MGF1@GOTPCREL(%rip), %rax
	movl	(%rax), %edi
	movq	_RSA_R_KEY_SIZE_TOO_SMALL@GOTPCREL(%rip), %rax
LBB0_13:
	movl	(%rax), %esi
	callq	_RSAerr
	xorl	%eax, %eax
	jmp	LBB0_64
LBB0_14:
	xorl	%eax, %eax
	movq	%rax, -56(%rbp)                 ## 8-byte Spill
	xorl	%ecx, %ecx
	xorl	%r14d, %r14d
	movq	-64(%rbp), %rdi                 ## 8-byte Reload
	jmp	LBB0_63
LBB0_15:
	movq	_RSA_F_RSA_PADDING_ADD_PKCS1_OAEP_MGF1@GOTPCREL(%rip), %rax
	movl	(%rax), %edi
	movq	_ERR_R_MALLOC_FAILURE@GOTPCREL(%rip), %rax
	movl	(%rax), %esi
	callq	_RSAerr
	xorl	%eax, %eax
	movq	%rax, -56(%rbp)                 ## 8-byte Spill
	xorl	%ecx, %ecx
	jmp	LBB0_17
LBB0_16:
	xorl	%eax, %eax
	movq	%rax, -56(%rbp)                 ## 8-byte Spill
	movq	%r14, %rcx
LBB0_17:
	movl	%r15d, %r14d
	movq	-64(%rbp), %rdi                 ## 8-byte Reload
	jmp	LBB0_63
LBB0_43:
	xorl	%eax, %eax
	jmp	LBB0_45
LBB0_44:
	movl	$1, %eax
LBB0_45:
	movq	%rax, -56(%rbp)                 ## 8-byte Spill
	movq	%r14, %rcx
	movl	%ebx, %r14d
	movq	-64(%rbp), %rdi                 ## 8-byte Reload
	jmp	LBB0_63
LBB0_46:
	cmpl	$32, %r13d
	jae	LBB0_48
## %bb.47:
	xorl	%ecx, %ecx
	movq	-64(%rbp), %rdi                 ## 8-byte Reload
	movq	-72(%rbp), %rax                 ## 8-byte Reload
	jmp	LBB0_56
LBB0_21:
	cmpl	$32, %r15d
	jae	LBB0_23
## %bb.22:
	xorl	%ecx, %ecx
	jmp	LBB0_31
LBB0_48:
	movl	%r9d, %ecx
	andl	$-32, %ecx
	leaq	-32(%rcx), %rdx
	movq	%rdx, %r8
	shrq	$5, %r8
	incq	%r8
	testq	%rdx, %rdx
	movq	-64(%rbp), %rdi                 ## 8-byte Reload
	je	LBB0_51
## %bb.49:
	movq	%r8, %rsi
	andq	$-2, %rsi
	xorl	%edx, %edx
LBB0_50:                                ## =>This Inner Loop Header: Depth=1
	movups	1(%r12,%rdx), %xmm0
	movups	17(%r12,%rdx), %xmm1
	movups	33(%r12,%rdx), %xmm2
	movups	49(%r12,%rdx), %xmm3
	xorps	(%rdi,%rdx), %xmm0
	xorps	16(%rdi,%rdx), %xmm1
	movups	%xmm0, 1(%r12,%rdx)
	movups	%xmm1, 17(%r12,%rdx)
	xorps	32(%rdi,%rdx), %xmm2
	xorps	48(%rdi,%rdx), %xmm3
	movups	%xmm2, 33(%r12,%rdx)
	movups	%xmm3, 49(%r12,%rdx)
	addq	$64, %rdx
	addq	$-2, %rsi
	jne	LBB0_50
	jmp	LBB0_52
LBB0_23:
	movl	%r9d, %ecx
	andl	$-32, %ecx
	leaq	-32(%rcx), %rax
	movq	%rax, %r8
	shrq	$5, %r8
	incq	%r8
	testq	%rax, %rax
	je	LBB0_26
## %bb.24:
	movq	%r8, %r10
	andq	$-2, %r10
	leaq	(%rsi,%r12), %rbx
	addq	$49, %rbx
	xorl	%eax, %eax
LBB0_25:                                ## =>This Inner Loop Header: Depth=1
	movups	(%r14,%rax), %xmm0
	movups	16(%r14,%rax), %xmm1
	movups	-48(%rbx,%rax), %xmm2
	xorps	%xmm0, %xmm2
	movups	-32(%rbx,%rax), %xmm0
	xorps	%xmm1, %xmm0
	movups	-16(%rbx,%rax), %xmm1
	movups	(%rbx,%rax), %xmm3
	movups	%xmm2, -48(%rbx,%rax)
	movups	%xmm0, -32(%rbx,%rax)
	movups	32(%r14,%rax), %xmm0
	xorps	%xmm1, %xmm0
	movups	48(%r14,%rax), %xmm1
	xorps	%xmm3, %xmm1
	movups	%xmm0, -16(%rbx,%rax)
	movups	%xmm1, (%rbx,%rax)
	addq	$64, %rax
	addq	$-2, %r10
	jne	LBB0_25
	jmp	LBB0_27
LBB0_51:
	xorl	%edx, %edx
LBB0_52:
	testb	$1, %r8b
	movq	-72(%rbp), %rax                 ## 8-byte Reload
	je	LBB0_54
## %bb.53:
	movups	(%rax,%rdx), %xmm0
	movups	16(%rax,%rdx), %xmm1
	xorps	(%rdi,%rdx), %xmm0
	xorps	16(%rdi,%rdx), %xmm1
	movups	%xmm0, (%rax,%rdx)
	movups	%xmm1, 16(%rax,%rdx)
LBB0_54:
	cmpq	%r9, %rcx
	movq	%rbx, %r8
	je	LBB0_59
## %bb.55:
	testb	$24, %r9b
	je	LBB0_60
LBB0_56:
	movq	%rcx, %rdx
	movl	%r9d, %ecx
	andl	$-8, %ecx
LBB0_57:                                ## =>This Inner Loop Header: Depth=1
	movq	(%rdi,%rdx), %rsi
	xorq	%rsi, (%rax,%rdx)
	addq	$8, %rdx
	cmpq	%rdx, %rcx
	jne	LBB0_57
## %bb.58:
	cmpq	%r9, %rcx
	jne	LBB0_60
LBB0_59:
	movl	$1, %eax
	movq	%rax, -56(%rbp)                 ## 8-byte Spill
	movq	%r14, %rcx
	movl	%r8d, %r14d
	jmp	LBB0_63
LBB0_60:
	movq	%r14, %r13
	movl	$1, %edx
	movq	%rdx, -56(%rbp)                 ## 8-byte Spill
	.p2align	4, 0x90
LBB0_61:                                ## =>This Inner Loop Header: Depth=1
	movzbl	(%rdi,%rcx), %edx
	xorb	%dl, (%rax,%rcx)
	incq	%rcx
	cmpq	%rcx, %r9
	jne	LBB0_61
## %bb.62:
	movl	%r8d, %r14d
	movq	%r13, %rcx
LBB0_63:
	movq	-128(%rbp), %rsi                ## 8-byte Reload
                                        ## kill: def $esi killed $esi killed $rsi
	movq	%rcx, %rbx
	callq	_OPENSSL_cleanse
	movq	%rbx, %rdi
	movl	%r14d, %esi
	callq	_OPENSSL_clear_free
	movq	-56(%rbp), %rax                 ## 8-byte Reload
LBB0_64:
	movq	___stack_chk_guard@GOTPCREL(%rip), %rcx
	movq	(%rcx), %rcx
	cmpq	-48(%rbp), %rcx
	jne	LBB0_66
## %bb.65:
                                        ## kill: def $eax killed $eax killed $rax
	leaq	-40(%rbp), %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
LBB0_26:
	xorl	%eax, %eax
LBB0_27:
	testb	$1, %r8b
	je	LBB0_29
## %bb.28:
	movups	(%r14,%rax), %xmm0
	movups	16(%r14,%rax), %xmm1
	movups	(%rdx,%rax), %xmm2
	xorps	%xmm0, %xmm2
	movups	16(%rdx,%rax), %xmm0
	xorps	%xmm1, %xmm0
	movups	%xmm2, (%rdx,%rax)
	movups	%xmm0, 16(%rdx,%rax)
LBB0_29:
	cmpq	%r9, %rcx
	je	LBB0_39
## %bb.30:
	testb	$24, %r9b
	je	LBB0_34
LBB0_31:
	movq	%rcx, %rbx
	movl	%r9d, %ecx
	andl	$-8, %ecx
LBB0_32:                                ## =>This Inner Loop Header: Depth=1
	movq	(%r14,%rbx), %rax
	xorq	%rax, (%rdx,%rbx)
	addq	$8, %rbx
	cmpq	%rbx, %rcx
	jne	LBB0_32
## %bb.33:
	cmpq	%r9, %rcx
	je	LBB0_39
	jmp	LBB0_34
LBB0_66:
	callq	___stack_chk_fail
	.cfi_endproc
                                        ## -- End function
	.comm	_EVP_MAX_MD_SIZE,4,2            ## @EVP_MAX_MD_SIZE
	.comm	_RSA_F_RSA_PADDING_ADD_PKCS1_OAEP_MGF1,4,2 ## @RSA_F_RSA_PADDING_ADD_PKCS1_OAEP_MGF1
	.comm	_RSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE,4,2 ## @RSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE
	.comm	_RSA_R_KEY_SIZE_TOO_SMALL,4,2   ## @RSA_R_KEY_SIZE_TOO_SMALL
	.comm	_ERR_R_MALLOC_FAILURE,4,2       ## @ERR_R_MALLOC_FAILURE
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_RSA_padding_add_PKCS1_OAEP_mgf1 ; -- Begin function RSA_padding_add_PKCS1_OAEP_mgf1
	.p2align	2
_RSA_padding_add_PKCS1_OAEP_mgf1:       ; @RSA_padding_add_PKCS1_OAEP_mgf1
	.cfi_startproc
; %bb.0:
	stp	x28, x27, [sp, #-96]!           ; 16-byte Folded Spill
	.cfi_def_cfa_offset 96
	stp	x26, x25, [sp, #16]             ; 16-byte Folded Spill
	stp	x24, x23, [sp, #32]             ; 16-byte Folded Spill
	stp	x22, x21, [sp, #48]             ; 16-byte Folded Spill
	stp	x20, x19, [sp, #64]             ; 16-byte Folded Spill
	stp	x29, x30, [sp, #80]             ; 16-byte Folded Spill
	add	x29, sp, #80
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	.cfi_offset w25, -72
	.cfi_offset w26, -80
	.cfi_offset w27, -88
	.cfi_offset w28, -96
	sub	sp, sp, #48
	mov	x24, x7
	mov	x21, x6
	mov	x28, x5
	mov	x25, x4
	mov	x22, x3
	mov	x23, x2
	mov	x26, x1
	stur	x0, [x29, #-96]                 ; 8-byte Folded Spill
Lloh0:
	adrp	x8, ___stack_chk_guard@GOTPAGE
Lloh1:
	ldr	x8, [x8, ___stack_chk_guard@GOTPAGEOFF]
Lloh2:
	ldr	x8, [x8]
	stur	x8, [x29, #-88]
	sub	w20, w1, #1
Lloh3:
	adrp	x8, _EVP_MAX_MD_SIZE@GOTPAGE
Lloh4:
	ldr	x8, [x8, _EVP_MAX_MD_SIZE@GOTPAGEOFF]
Lloh5:
	ldr	w27, [x8]
	mov	x9, x27
Lloh6:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh7:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x8, sp
	add	x9, x27, #15
	and	x9, x9, #0x1fffffff0
	sub	x8, x8, x9
	stur	x8, [x29, #-104]                ; 8-byte Folded Spill
	mov	sp, x8
	cbnz	x6, LBB0_2
; %bb.1:
	bl	_EVP_sha1
	mov	x21, x0
LBB0_2:
	cmp	x24, #0
	csel	x8, x21, x24, eq
	stur	x8, [x29, #-112]                ; 8-byte Folded Spill
	mov	x0, x21
	bl	_EVP_MD_size
	lsl	w8, w0, #1
	mvn	w19, w8
	add	w9, w20, w19
	cmp	w9, w22
	b.ge	LBB0_4
; %bb.3:
Lloh8:
	adrp	x8, _RSA_F_RSA_PADDING_ADD_PKCS1_OAEP_MGF1@GOTPAGE
Lloh9:
	ldr	x8, [x8, _RSA_F_RSA_PADDING_ADD_PKCS1_OAEP_MGF1@GOTPAGEOFF]
Lloh10:
	ldr	w0, [x8]
Lloh11:
	adrp	x8, _RSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE@GOTPAGE
Lloh12:
	ldr	x8, [x8, _RSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE@GOTPAGEOFF]
	b	LBB0_21
LBB0_4:
	orr	w8, w8, #0x1
	cmp	w8, w26
	b.ge	LBB0_20
; %bb.5:
	mov	x24, x0
	stur	x27, [x29, #-120]               ; 8-byte Folded Spill
	ldur	x8, [x29, #-96]                 ; 8-byte Folded Reload
	mov	x27, x8
	strb	wzr, [x27], #1
	sxtw	x26, w24
	add	x8, x8, x26
	add	x8, x8, #1
	mov	x0, x25
	mov	x1, x28
	mov	x28, x8
	mov	x2, x8
	mov	x3, #0
	mov	x4, x21
	mov	x5, #0
	bl	_EVP_Digest
	cbz	w0, LBB0_22
; %bb.6:
	add	x0, x28, x26
	sub	w21, w20, w22
	add	w2, w21, w19
	mov	w1, #0
	bl	_memset
	mvn	w8, w24
	add	w8, w21, w8
	mov	w9, #1
	strb	w9, [x28, w8, sxtw]
	add	x8, x28, w20, sxtw
	sub	x8, x8, w22, sxtw
	sub	x0, x8, x26
	mov	x1, x23
	mov	x2, x22
	bl	_memcpy
	mov	x0, x27
	mov	x1, x24
	bl	_RAND_bytes
	cmp	x0, #1
	b.lt	LBB0_22
; %bb.7:
	sub	w22, w20, w24
	mov	x0, x22
	bl	_OPENSSL_malloc
	mov	x23, x0
	cbz	x0, LBB0_27
; %bb.8:
	mov	x0, x23
	mov	x1, x22
	mov	x2, x27
	mov	x3, x24
	ldur	x21, [x29, #-112]               ; 8-byte Folded Reload
	mov	x4, x21
	bl	_PKCS1_MGF1
	ldur	x20, [x29, #-104]               ; 8-byte Folded Reload
	tbnz	x0, #63, LBB0_28
; %bb.9:
	cmp	w22, #1
	ldur	x19, [x29, #-120]               ; 8-byte Folded Reload
	b.lt	LBB0_16
; %bb.10:
	cmp	w22, #8
	b.lo	LBB0_13
; %bb.11:
	add	x8, x23, x22
	cmp	x28, x8
	b.hs	LBB0_32
; %bb.12:
	add	x8, x26, x22
	ldur	x9, [x29, #-96]                 ; 8-byte Folded Reload
	add	x8, x8, x9
	add	x8, x8, #1
	cmp	x23, x8
	b.hs	LBB0_32
LBB0_13:
	mov	x8, #0
LBB0_14:
	add	x9, x8, x26
	ldur	x10, [x29, #-96]                ; 8-byte Folded Reload
	add	x9, x9, x10
	add	x9, x9, #1
	add	x10, x23, x8
	sub	x8, x22, x8
LBB0_15:                                ; =>This Inner Loop Header: Depth=1
	ldrb	w11, [x10], #1
	ldrb	w12, [x9]
	eor	w11, w12, w11
	strb	w11, [x9], #1
	subs	x8, x8, #1
	b.ne	LBB0_15
LBB0_16:
	mov	x0, x20
	mov	x1, x24
	mov	x2, x28
	mov	x3, x22
	mov	x4, x21
	bl	_PKCS1_MGF1
	tbnz	x0, #63, LBB0_29
; %bb.17:
	cmp	w24, #1
	b.lt	LBB0_43
; %bb.18:
	mov	w8, w24
	cmp	w24, #8
	b.hs	LBB0_30
; %bb.19:
	mov	x9, #0
	b	LBB0_41
LBB0_20:
Lloh13:
	adrp	x8, _RSA_F_RSA_PADDING_ADD_PKCS1_OAEP_MGF1@GOTPAGE
Lloh14:
	ldr	x8, [x8, _RSA_F_RSA_PADDING_ADD_PKCS1_OAEP_MGF1@GOTPAGEOFF]
Lloh15:
	ldr	w0, [x8]
Lloh16:
	adrp	x8, _RSA_R_KEY_SIZE_TOO_SMALL@GOTPAGE
Lloh17:
	ldr	x8, [x8, _RSA_R_KEY_SIZE_TOO_SMALL@GOTPAGEOFF]
LBB0_21:
	ldr	w1, [x8]
	bl	_RSAerr
	mov	w21, #0
	b	LBB0_25
LBB0_22:
	mov	w21, #0
	mov	x23, #0
	mov	w22, #0
LBB0_23:
	ldur	x19, [x29, #-120]               ; 8-byte Folded Reload
	ldur	x20, [x29, #-104]               ; 8-byte Folded Reload
LBB0_24:
	mov	x0, x20
	mov	x1, x19
	bl	_OPENSSL_cleanse
	mov	x0, x23
	mov	x1, x22
	bl	_OPENSSL_clear_free
LBB0_25:
	ldur	x8, [x29, #-88]
Lloh18:
	adrp	x9, ___stack_chk_guard@GOTPAGE
Lloh19:
	ldr	x9, [x9, ___stack_chk_guard@GOTPAGEOFF]
Lloh20:
	ldr	x9, [x9]
	cmp	x9, x8
	b.ne	LBB0_51
; %bb.26:
	mov	x0, x21
	sub	sp, x29, #80
	ldp	x29, x30, [sp, #80]             ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #64]             ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #48]             ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #32]             ; 16-byte Folded Reload
	ldp	x26, x25, [sp, #16]             ; 16-byte Folded Reload
	ldp	x28, x27, [sp], #96             ; 16-byte Folded Reload
	ret
LBB0_27:
Lloh21:
	adrp	x8, _RSA_F_RSA_PADDING_ADD_PKCS1_OAEP_MGF1@GOTPAGE
Lloh22:
	ldr	x8, [x8, _RSA_F_RSA_PADDING_ADD_PKCS1_OAEP_MGF1@GOTPAGEOFF]
Lloh23:
	ldr	w0, [x8]
Lloh24:
	adrp	x8, _ERR_R_MALLOC_FAILURE@GOTPAGE
Lloh25:
	ldr	x8, [x8, _ERR_R_MALLOC_FAILURE@GOTPAGEOFF]
Lloh26:
	ldr	w1, [x8]
	bl	_RSAerr
	mov	w21, #0
	b	LBB0_23
LBB0_28:
	mov	w21, #0
	ldur	x19, [x29, #-120]               ; 8-byte Folded Reload
	b	LBB0_24
LBB0_29:
	mov	w21, #0
	b	LBB0_24
LBB0_30:
	cmp	w24, #64
	b.hs	LBB0_34
; %bb.31:
	mov	x9, #0
	b	LBB0_38
LBB0_32:
	cmp	w22, #64
	b.hs	LBB0_44
; %bb.33:
	mov	x8, #0
	b	LBB0_48
LBB0_34:
	and	x9, x8, #0xffffffc0
	ldur	x10, [x29, #-96]                ; 8-byte Folded Reload
	add	x10, x10, #33
	add	x11, x20, #32
	mov	x12, x9
LBB0_35:                                ; =>This Inner Loop Header: Depth=1
	ldp	q0, q1, [x11, #-32]
	ldp	q2, q3, [x11], #64
	ldp	q4, q5, [x10, #-32]
	ldp	q6, q7, [x10]
	eor.16b	v0, v4, v0
	eor.16b	v1, v5, v1
	eor.16b	v2, v6, v2
	eor.16b	v3, v7, v3
	stp	q0, q1, [x10, #-32]
	stp	q2, q3, [x10], #64
	subs	x12, x12, #64
	b.ne	LBB0_35
; %bb.36:
	cmp	x9, x8
	b.eq	LBB0_43
; %bb.37:
	tst	x8, #0x38
	b.eq	LBB0_41
LBB0_38:
	mov	x12, x9
	and	x9, x8, #0xfffffff8
	add	x10, x20, x12
	ldur	x11, [x29, #-96]                ; 8-byte Folded Reload
	add	x11, x12, x11
	add	x11, x11, #1
	sub	x12, x12, x9
LBB0_39:                                ; =>This Inner Loop Header: Depth=1
	ldr	d0, [x10], #8
	ldr	d1, [x11]
	eor.8b	v0, v1, v0
	str	d0, [x11], #8
	adds	x12, x12, #8
	b.ne	LBB0_39
; %bb.40:
	cmp	x9, x8
	b.eq	LBB0_43
LBB0_41:
	ldur	x10, [x29, #-96]                ; 8-byte Folded Reload
	add	x10, x9, x10
	add	x10, x10, #1
	add	x11, x20, x9
	sub	x8, x8, x9
LBB0_42:                                ; =>This Inner Loop Header: Depth=1
	ldrb	w9, [x11], #1
	ldrb	w12, [x10]
	eor	w9, w12, w9
	strb	w9, [x10], #1
	subs	x8, x8, #1
	b.ne	LBB0_42
LBB0_43:
	mov	w21, #1
	b	LBB0_24
LBB0_44:
	and	x8, x22, #0xffffffc0
	ldur	x9, [x29, #-96]                 ; 8-byte Folded Reload
	add	x9, x26, x9
	add	x9, x9, #33
	add	x10, x23, #32
	mov	x11, x8
LBB0_45:                                ; =>This Inner Loop Header: Depth=1
	ldp	q0, q1, [x10, #-32]
	ldp	q2, q3, [x10], #64
	ldp	q4, q5, [x9, #-32]
	ldp	q6, q7, [x9]
	eor.16b	v0, v4, v0
	eor.16b	v1, v5, v1
	eor.16b	v2, v6, v2
	eor.16b	v3, v7, v3
	stp	q0, q1, [x9, #-32]
	stp	q2, q3, [x9], #64
	subs	x11, x11, #64
	b.ne	LBB0_45
; %bb.46:
	cmp	x8, x22
	b.eq	LBB0_16
; %bb.47:
	tst	x22, #0x38
	b.eq	LBB0_14
LBB0_48:
	mov	x11, x8
	and	x8, x22, #0xfffffff8
	add	x9, x23, x11
	add	x10, x11, x26
	ldur	x12, [x29, #-96]                ; 8-byte Folded Reload
	add	x10, x10, x12
	add	x10, x10, #1
	sub	x11, x11, x8
LBB0_49:                                ; =>This Inner Loop Header: Depth=1
	ldr	d0, [x9], #8
	ldr	d1, [x10]
	eor.8b	v0, v1, v0
	str	d0, [x10], #8
	adds	x11, x11, #8
	b.ne	LBB0_49
; %bb.50:
	cmp	x8, x22
	b.eq	LBB0_16
	b	LBB0_14
LBB0_51:
	bl	___stack_chk_fail
	.loh AdrpLdrGot	Lloh6, Lloh7
	.loh AdrpLdrGotLdr	Lloh3, Lloh4, Lloh5
	.loh AdrpLdrGotLdr	Lloh0, Lloh1, Lloh2
	.loh AdrpLdrGot	Lloh11, Lloh12
	.loh AdrpLdrGotLdr	Lloh8, Lloh9, Lloh10
	.loh AdrpLdrGot	Lloh16, Lloh17
	.loh AdrpLdrGotLdr	Lloh13, Lloh14, Lloh15
	.loh AdrpLdrGotLdr	Lloh18, Lloh19, Lloh20
	.loh AdrpLdrGotLdr	Lloh24, Lloh25, Lloh26
	.loh AdrpLdrGotLdr	Lloh21, Lloh22, Lloh23
	.cfi_endproc
                                        ; -- End function
	.comm	_EVP_MAX_MD_SIZE,4,2            ; @EVP_MAX_MD_SIZE
	.comm	_RSA_F_RSA_PADDING_ADD_PKCS1_OAEP_MGF1,4,2 ; @RSA_F_RSA_PADDING_ADD_PKCS1_OAEP_MGF1
	.comm	_RSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE,4,2 ; @RSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE
	.comm	_RSA_R_KEY_SIZE_TOO_SMALL,4,2   ; @RSA_R_KEY_SIZE_TOO_SMALL
	.comm	_ERR_R_MALLOC_FAILURE,4,2       ; @ERR_R_MALLOC_FAILURE
.subsections_via_symbols
