	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_sc25519_mul                    ## -- Begin function sc25519_mul
	.p2align	4, 0x90
_sc25519_mul:                           ## @sc25519_mul
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%rbx
	subq	$264, %rsp                      ## imm = 0x108
	.cfi_offset %rbx, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	movq	%rax, -32(%rbp)
	pxor	%xmm0, %xmm0
	movdqa	%xmm0, -48(%rbp)
	movdqa	%xmm0, -64(%rbp)
	movdqa	%xmm0, -80(%rbp)
	movdqa	%xmm0, -96(%rbp)
	movdqa	%xmm0, -112(%rbp)
	movdqa	%xmm0, -128(%rbp)
	movdqa	%xmm0, -144(%rbp)
	movdqa	%xmm0, -160(%rbp)
	movdqa	%xmm0, -176(%rbp)
	movdqa	%xmm0, -192(%rbp)
	movdqa	%xmm0, -208(%rbp)
	movdqa	%xmm0, -224(%rbp)
	movdqa	%xmm0, -240(%rbp)
	movdqa	%xmm0, -256(%rbp)
	movdqa	%xmm0, -272(%rbp)
	movdqa	%xmm0, -288(%rbp)
	movq	(%rsi), %rax
	movq	(%rdx), %r9
	leaq	128(%r9), %r8
	leaq	-284(%rbp), %rsi
	xorl	%edx, %edx
	jmp	LBB0_1
	.p2align	4, 0x90
LBB0_11:                                ##   in Loop: Header=BB0_1 Depth=1
	movd	(%rax,%rdx,4), %xmm0            ## xmm0 = mem[0],zero,zero,zero
	pshufd	$0, %xmm0, %xmm0                ## xmm0 = xmm0[0,0,0,0]
	movdqu	(%r9), %xmm1
	pmulld	%xmm0, %xmm1
	movdqu	-288(%rbp,%rdx,4), %xmm0
	paddd	%xmm1, %xmm0
	movdqu	-272(%rbp,%rdx,4), %xmm1
	movdqu	-256(%rbp,%rdx,4), %xmm2
	movdqu	-240(%rbp,%rdx,4), %xmm3
	movdqu	%xmm0, -288(%rbp,%rdx,4)
	movd	(%rax,%rdx,4), %xmm0            ## xmm0 = mem[0],zero,zero,zero
	pshufd	$0, %xmm0, %xmm0                ## xmm0 = xmm0[0,0,0,0]
	movdqu	16(%r9), %xmm4
	pmulld	%xmm0, %xmm4
	paddd	%xmm1, %xmm4
	movdqu	%xmm4, -272(%rbp,%rdx,4)
	movd	(%rax,%rdx,4), %xmm0            ## xmm0 = mem[0],zero,zero,zero
	pshufd	$0, %xmm0, %xmm0                ## xmm0 = xmm0[0,0,0,0]
	movdqu	32(%r9), %xmm1
	pmulld	%xmm0, %xmm1
	paddd	%xmm2, %xmm1
	movdqu	%xmm1, -256(%rbp,%rdx,4)
	movd	(%rax,%rdx,4), %xmm0            ## xmm0 = mem[0],zero,zero,zero
	pshufd	$0, %xmm0, %xmm0                ## xmm0 = xmm0[0,0,0,0]
	movdqu	48(%r9), %xmm1
	pmulld	%xmm0, %xmm1
	paddd	%xmm3, %xmm1
	movdqu	%xmm1, -240(%rbp,%rdx,4)
	movd	(%rax,%rdx,4), %xmm0            ## xmm0 = mem[0],zero,zero,zero
	pshufd	$0, %xmm0, %xmm0                ## xmm0 = xmm0[0,0,0,0]
	movdqu	64(%r9), %xmm1
	pmulld	%xmm0, %xmm1
	movdqu	-224(%rbp,%rdx,4), %xmm0
	paddd	%xmm1, %xmm0
	movdqu	%xmm0, -224(%rbp,%rdx,4)
	movd	(%rax,%rdx,4), %xmm0            ## xmm0 = mem[0],zero,zero,zero
	pshufd	$0, %xmm0, %xmm0                ## xmm0 = xmm0[0,0,0,0]
	movdqu	80(%r9), %xmm1
	pmulld	%xmm0, %xmm1
	movdqu	-208(%rbp,%rdx,4), %xmm0
	paddd	%xmm1, %xmm0
	movdqu	%xmm0, -208(%rbp,%rdx,4)
	movd	(%rax,%rdx,4), %xmm0            ## xmm0 = mem[0],zero,zero,zero
	pshufd	$0, %xmm0, %xmm0                ## xmm0 = xmm0[0,0,0,0]
	movdqu	96(%r9), %xmm1
	pmulld	%xmm0, %xmm1
	movdqu	-192(%rbp,%rdx,4), %xmm0
	paddd	%xmm1, %xmm0
	movdqu	%xmm0, -192(%rbp,%rdx,4)
	movd	(%rax,%rdx,4), %xmm0            ## xmm0 = mem[0],zero,zero,zero
	pshufd	$0, %xmm0, %xmm0                ## xmm0 = xmm0[0,0,0,0]
	movdqu	112(%r9), %xmm1
	pmulld	%xmm0, %xmm1
	movdqu	-176(%rbp,%rdx,4), %xmm0
	paddd	%xmm1, %xmm0
	movdqu	%xmm0, -176(%rbp,%rdx,4)
LBB0_5:                                 ##   in Loop: Header=BB0_1 Depth=1
	incq	%rdx
	addq	$4, %rsi
	cmpq	$32, %rdx
	je	LBB0_6
LBB0_1:                                 ## =>This Loop Header: Depth=1
                                        ##     Child Loop BB0_4 Depth 2
	leaq	(%rax,%rdx,4), %r11
	addq	$4, %r11
	leaq	(%rax,%rdx,4), %r10
	leaq	-160(,%rdx,4), %rcx
	addq	%rbp, %rcx
	leaq	-288(,%rdx,4), %rbx
	addq	%rbp, %rbx
	cmpq	%r11, %rbx
	setb	%r14b
	cmpq	%rcx, %r10
	setb	%r15b
	cmpq	%r8, %rbx
	setb	%r11b
	cmpq	%rcx, %r9
	setb	%r10b
	testb	%r15b, %r14b
	jne	LBB0_3
## %bb.2:                               ##   in Loop: Header=BB0_1 Depth=1
	andb	%r10b, %r11b
	je	LBB0_11
LBB0_3:                                 ##   in Loop: Header=BB0_1 Depth=1
	xorl	%ecx, %ecx
	.p2align	4, 0x90
LBB0_4:                                 ##   Parent Loop BB0_1 Depth=1
                                        ## =>  This Inner Loop Header: Depth=2
	movl	(%r9,%rcx,4), %ebx
	imull	(%rax,%rdx,4), %ebx
	addl	%ebx, -4(%rsi,%rcx,4)
	movl	4(%r9,%rcx,4), %ebx
	imull	(%rax,%rdx,4), %ebx
	addl	%ebx, (%rsi,%rcx,4)
	addq	$2, %rcx
	cmpq	$32, %rcx
	jne	LBB0_4
	jmp	LBB0_5
LBB0_6:
	movl	$2, %eax
	movl	-288(%rbp), %ecx
	.p2align	4, 0x90
LBB0_7:                                 ## =>This Inner Loop Header: Depth=1
	movl	%ecx, %edx
	sarl	$8, %edx
	addl	-292(%rbp,%rax,4), %edx
	movl	%edx, -292(%rbp,%rax,4)
	movzbl	%cl, %ecx
	movl	%ecx, -296(%rbp,%rax,4)
	cmpq	$64, %rax
	je	LBB0_9
## %bb.8:                               ##   in Loop: Header=BB0_7 Depth=1
	movl	%edx, %ecx
	sarl	$8, %ecx
	addl	-288(%rbp,%rax,4), %ecx
	movl	%ecx, -288(%rbp,%rax,4)
	movzbl	%dl, %edx
	movl	%edx, -292(%rbp,%rax,4)
	addq	$2, %rax
	jmp	LBB0_7
LBB0_9:
	leaq	-288(%rbp), %rsi
	callq	_barrett_reduce
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	cmpq	-32(%rbp), %rax
	jne	LBB0_12
## %bb.10:
	addq	$264, %rsp                      ## imm = 0x108
	popq	%rbx
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
LBB0_12:
	callq	___stack_chk_fail
	.cfi_endproc
                                        ## -- End function
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_sc25519_mul                    ; -- Begin function sc25519_mul
	.p2align	2
_sc25519_mul:                           ; @sc25519_mul
	.cfi_startproc
; %bb.0:
	sub	sp, sp, #304
	.cfi_def_cfa_offset 304
	stp	x28, x27, [sp, #272]            ; 16-byte Folded Spill
	stp	x29, x30, [sp, #288]            ; 16-byte Folded Spill
	add	x29, sp, #288
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w27, -24
	.cfi_offset w28, -32
	mov	x8, #0
Lloh0:
	adrp	x9, ___stack_chk_guard@GOTPAGE
Lloh1:
	ldr	x9, [x9, ___stack_chk_guard@GOTPAGEOFF]
Lloh2:
	ldr	x9, [x9]
	stur	x9, [x29, #-24]
	movi.2d	v0, #0000000000000000
	stp	q0, q0, [sp, #224]
	stp	q0, q0, [sp, #192]
	stp	q0, q0, [sp, #160]
	stp	q0, q0, [sp, #128]
	stp	q0, q0, [sp, #96]
	stp	q0, q0, [sp, #64]
	stp	q0, q0, [sp, #32]
	stp	q0, q0, [sp]
	ldr	x9, [x1]
	ldr	x10, [x2]
	add	x11, x10, #128
	mov	x12, sp
	mov	x13, sp
	b	LBB0_3
LBB0_1:                                 ;   in Loop: Header=BB0_3 Depth=1
	ld1r.4s	{ v0 }, [x15]
	ldr	q1, [x10]
	ldp	q2, q3, [x14]
	mla.4s	v2, v1, v0
	str	q2, [x14]
	ldr	q1, [x10, #16]
	mla.4s	v3, v1, v0
	str	q3, [x14, #16]
	ldr	q1, [x10, #32]
	ldp	q2, q3, [x14, #32]
	mla.4s	v2, v1, v0
	str	q2, [x14, #32]
	ldr	q1, [x10, #48]
	mla.4s	v3, v1, v0
	str	q3, [x14, #48]
	ldr	q1, [x10, #64]
	ldp	q2, q3, [x14, #64]
	mla.4s	v2, v1, v0
	str	q2, [x14, #64]
	ldr	q1, [x10, #80]
	mla.4s	v3, v1, v0
	str	q3, [x14, #80]
	ld1r.4s	{ v0 }, [x15]
	ldr	q1, [x10, #96]
	ldp	q2, q3, [x14, #96]
	mla.4s	v2, v1, v0
	str	q2, [x14, #96]
	ld1r.4s	{ v0 }, [x15]
	ldr	q1, [x10, #112]
	mla.4s	v3, v1, v0
	str	q3, [x14, #112]
LBB0_2:                                 ;   in Loop: Header=BB0_3 Depth=1
	add	x8, x8, #1
	add	x13, x13, #4
	cmp	x8, #32
	b.eq	LBB0_6
LBB0_3:                                 ; =>This Loop Header: Depth=1
                                        ;     Child Loop BB0_5 Depth 2
	lsl	x15, x8, #2
	add	x14, x12, x15
	cmp	x14, x11
	add	x16, x14, #128
	ccmp	x10, x16, #2, lo
	cset	w17, lo
	add	x15, x9, x15
	cmp	x15, x16
	add	x16, x15, #4
	ccmp	x14, x16, #2, lo
	ccmp	w17, #0, #0, hs
	b.eq	LBB0_1
; %bb.4:                                ;   in Loop: Header=BB0_3 Depth=1
	mov	x14, #0
LBB0_5:                                 ;   Parent Loop BB0_3 Depth=1
                                        ; =>  This Inner Loop Header: Depth=2
	ldr	w15, [x9, x8, lsl #2]
	ldr	w16, [x10, x14]
	ldr	w17, [x13, x14]
	madd	w15, w16, w15, w17
	str	w15, [x13, x14]
	add	x14, x14, #4
	cmp	x14, #128
	b.ne	LBB0_5
	b	LBB0_2
LBB0_6:
	mov	x8, #0
	ldr	w10, [sp]
	mov	x9, sp
LBB0_7:                                 ; =>This Inner Loop Header: Depth=1
	add	x11, x9, x8
	ldr	w12, [x11, #4]
	and	w13, w10, #0xff
	add	w10, w12, w10, asr #8
	stp	w13, w10, [x11]
	add	x8, x8, #4
	cmp	x8, #252
	b.ne	LBB0_7
; %bb.8:
	mov	x1, sp
	bl	_barrett_reduce
	ldur	x8, [x29, #-24]
Lloh3:
	adrp	x9, ___stack_chk_guard@GOTPAGE
Lloh4:
	ldr	x9, [x9, ___stack_chk_guard@GOTPAGEOFF]
Lloh5:
	ldr	x9, [x9]
	cmp	x9, x8
	b.ne	LBB0_10
; %bb.9:
	ldp	x29, x30, [sp, #288]            ; 16-byte Folded Reload
	ldp	x28, x27, [sp, #272]            ; 16-byte Folded Reload
	add	sp, sp, #304
	ret
LBB0_10:
	bl	___stack_chk_fail
	.loh AdrpLdrGotLdr	Lloh0, Lloh1, Lloh2
	.loh AdrpLdrGotLdr	Lloh3, Lloh4, Lloh5
	.cfi_endproc
                                        ; -- End function
.subsections_via_symbols
