	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_aes_siv_decrypt                ## -- Begin function aes_siv_decrypt
	.p2align	4, 0x90
_aes_siv_decrypt:                       ## @aes_siv_decrypt
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r13
	pushq	%r12
	pushq	%rbx
	subq	$168, %rsp
	.cfi_offset %rbx, -56
	.cfi_offset %r12, -48
	.cfi_offset %r13, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movq	%r9, -184(%rbp)                 ## 8-byte Spill
	movq	%r8, %r13
	movq	%rcx, %r14
	movq	%rdx, -168(%rbp)                ## 8-byte Spill
	movq	%rsi, -152(%rbp)                ## 8-byte Spill
	movq	%rdi, -176(%rbp)                ## 8-byte Spill
	movq	%rsp, -200(%rbp)                ## 8-byte Spill
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	movq	%rax, -48(%rbp)
	movq	_AES_BLOCK_SIZE@GOTPCREL(%rip), %rbx
	movl	(%rbx), %eax
	shlq	$2, %rax
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, -192(%rbp)                ## 8-byte Spill
	movslq	(%rbx), %r15
	movl	%r15d, %eax
	shlq	$2, %rax
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, %rbx
	movl	$-1, %r12d
	cmpq	%r14, %r15
	ja	LBB0_9
## %bb.1:
	leaq	-96(%rbp), %rdi
	callq	_ARRAY_SIZE
	decl	%eax
	cltq
	cmpq	%r13, %rax
	jb	LBB0_9
## %bb.2:
	movq	%rbx, -160(%rbp)                ## 8-byte Spill
	movq	-152(%rbp), %rbx                ## 8-byte Reload
	leaq	-32(%rbx), %rax
	cmpq	$32, %rax
	ja	LBB0_9
## %bb.3:
	movabsq	$4295032833, %rcx               ## imm = 0x100010001
	btq	%rax, %rcx
	jae	LBB0_9
## %bb.4:
	movq	_AES_BLOCK_SIZE@GOTPCREL(%rip), %rax
	movslq	(%rax), %rdx
	subq	%rdx, %r14
	shrq	%rbx
	movq	-176(%rbp), %rax                ## 8-byte Reload
	leaq	(%rax,%rbx,4), %rax
	movq	%rax, -152(%rbp)                ## 8-byte Spill
	testq	%r13, %r13
	je	LBB0_6
## %bb.5:
	leaq	(,%r13,8), %r15
	leaq	-96(%rbp), %rdi
	movq	-184(%rbp), %rsi                ## 8-byte Reload
	movq	%rdx, %r12
	movq	%r15, %rdx
	callq	_memcpy
	leaq	-144(%rbp), %rdi
	movq	16(%rbp), %rsi
	movq	%r15, %rdx
	callq	_memcpy
	movq	%r12, %rdx
LBB0_6:
	movq	24(%rbp), %rax
	movq	%rax, -96(%rbp,%r13,8)
	movq	%r14, -144(%rbp,%r13,8)
	movq	-192(%rbp), %r12                ## 8-byte Reload
	movq	%r12, %rdi
	movq	-168(%rbp), %r15                ## 8-byte Reload
	movq	%r15, %rsi
	callq	_os_memcpy
	movq	_AES_BLOCK_SIZE@GOTPCREL(%rip), %rax
	movslq	(%rax), %rax
	leaq	(%r15,%rax,4), %rsi
	movq	%r13, %r15
	movq	24(%rbp), %r13
	movq	%r13, %rdi
	movq	%r14, %rdx
	callq	_os_memcpy
	andl	$127, 32(%r12)
	andl	$127, 48(%r12)
	movq	-152(%rbp), %rdi                ## 8-byte Reload
	movq	%rbx, %rsi
	movq	%r12, %rdx
	movq	%r13, %rcx
	movq	%r14, %r8
	callq	_aes_ctr_encrypt
	movl	%eax, %r12d
	testl	%eax, %eax
	jne	LBB0_9
## %bb.7:
	incq	%r15
	leaq	-96(%rbp), %rcx
	leaq	-144(%rbp), %r8
	movq	-176(%rbp), %rdi                ## 8-byte Reload
	movq	%rbx, %rsi
	movq	%r15, %rdx
	movq	-160(%rbp), %r9                 ## 8-byte Reload
	callq	_aes_s2v
	movl	%eax, %r12d
	testl	%eax, %eax
	jne	LBB0_9
## %bb.8:
	movq	_AES_BLOCK_SIZE@GOTPCREL(%rip), %rax
	movl	(%rax), %edx
	movq	-160(%rbp), %rdi                ## 8-byte Reload
	movq	-168(%rbp), %rsi                ## 8-byte Reload
	callq	_os_memcmp
	xorl	%r12d, %r12d
	negq	%rax
	sbbl	%r12d, %r12d
LBB0_9:
	movq	-200(%rbp), %rsp                ## 8-byte Reload
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	cmpq	-48(%rbp), %rax
	jne	LBB0_11
## %bb.10:
	movl	%r12d, %eax
	leaq	-40(%rbp), %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
LBB0_11:
	callq	___stack_chk_fail
	.cfi_endproc
                                        ## -- End function
	.comm	_AES_BLOCK_SIZE,4,2             ## @AES_BLOCK_SIZE
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_aes_siv_decrypt                ; -- Begin function aes_siv_decrypt
	.p2align	2
_aes_siv_decrypt:                       ; @aes_siv_decrypt
	.cfi_startproc
; %bb.0:
	stp	x28, x27, [sp, #-96]!           ; 16-byte Folded Spill
	.cfi_def_cfa_offset 96
	stp	x26, x25, [sp, #16]             ; 16-byte Folded Spill
	stp	x24, x23, [sp, #32]             ; 16-byte Folded Spill
	stp	x22, x21, [sp, #48]             ; 16-byte Folded Spill
	stp	x20, x19, [sp, #64]             ; 16-byte Folded Spill
	stp	x29, x30, [sp, #80]             ; 16-byte Folded Spill
	add	x29, sp, #80
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	.cfi_offset w25, -72
	.cfi_offset w26, -80
	.cfi_offset w27, -88
	.cfi_offset w28, -96
	sub	sp, sp, #144
	mov	x22, x7
	mov	x25, x6
	mov	x26, x5
	mov	x21, x4
	mov	x27, x3
	mov	x28, x1
	mov	x19, sp
Lloh0:
	adrp	x8, ___stack_chk_guard@GOTPAGE
Lloh1:
	ldr	x8, [x8, ___stack_chk_guard@GOTPAGEOFF]
Lloh2:
	ldr	x8, [x8]
	stur	x8, [x29, #-88]
Lloh3:
	adrp	x20, _AES_BLOCK_SIZE@GOTPAGE
Lloh4:
	ldr	x20, [x20, _AES_BLOCK_SIZE@GOTPAGEOFF]
	ldr	w8, [x20]
	lsl	x8, x8, #2
	mov	x9, x8
Lloh5:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh6:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x9, sp
	add	x8, x8, #15
	and	x8, x8, #0x7fffffff0
	sub	x24, x9, x8
	mov	sp, x24
	ldrsw	x12, [x20]
	and	x8, x12, #0xffffffff
	lsl	x8, x8, #2
	mov	x9, x8
Lloh7:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh8:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x9, sp
	add	x8, x8, #15
	and	x8, x8, #0x7fffffff0
	sub	x23, x9, x8
	mov	sp, x23
	cmp	x12, x3
	b.ls	LBB0_2
; %bb.1:
	mov	w0, #-1
	b	LBB0_10
LBB0_2:
	stp	x2, x0, [x29, #-200]            ; 16-byte Folded Spill
	sub	x0, x29, #136
	bl	_ARRAY_SIZE
	sub	w8, w0, #1
	sxtw	x8, w8
	mov	w0, #-1
	cmp	x8, x21
	b.lo	LBB0_10
; %bb.3:
	sub	x8, x28, #32
	cmp	x8, #32
	b.hi	LBB0_10
; %bb.4:
	mov	w9, #1
	lsl	x8, x9, x8
	mov	x9, #4294967297
	movk	x9, #1, lsl #16
	tst	x8, x9
	b.eq	LBB0_10
; %bb.5:
	ldrsw	x2, [x20]
	sub	x27, x27, x2
	lsr	x9, x28, #1
	ldur	x8, [x29, #-192]                ; 8-byte Folded Reload
	add	x8, x8, x9, lsl #2
	stp	x8, x9, [x29, #-216]            ; 16-byte Folded Spill
	lsl	x28, x21, #3
	cbz	x21, LBB0_7
; %bb.6:
	sub	x0, x29, #136
	mov	x1, x26
	mov	x26, x2
	mov	x2, x28
	bl	_memcpy
	sub	x0, x29, #184
	mov	x1, x25
	mov	x2, x28
	bl	_memcpy
	mov	x2, x26
LBB0_7:
	sub	x8, x29, #136
	str	x22, [x8, x28]
	sub	x8, x29, #184
	str	x27, [x8, x28]
	mov	x0, x24
	ldur	x25, [x29, #-200]               ; 8-byte Folded Reload
	mov	x1, x25
	bl	_os_memcpy
	ldrsw	x8, [x20]
	add	x1, x25, x8, lsl #2
	mov	x0, x22
	mov	x2, x27
	bl	_os_memcpy
	ldr	w8, [x24, #32]
	and	w8, w8, #0x7f
	str	w8, [x24, #32]
	ldr	w8, [x24, #48]
	and	w8, w8, #0x7f
	str	w8, [x24, #48]
	ldp	x0, x25, [x29, #-216]           ; 16-byte Folded Reload
	mov	x1, x25
	mov	x2, x24
	mov	x3, x22
	mov	x4, x27
	bl	_aes_ctr_encrypt
	cbnz	w0, LBB0_10
; %bb.8:
	add	x2, x21, #1
	sub	x3, x29, #136
	sub	x4, x29, #184
	ldur	x0, [x29, #-192]                ; 8-byte Folded Reload
	mov	x1, x25
	mov	x5, x23
	bl	_aes_s2v
	cbnz	w0, LBB0_10
; %bb.9:
	ldr	w2, [x20]
	mov	x0, x23
	ldur	x1, [x29, #-200]                ; 8-byte Folded Reload
	bl	_os_memcmp
	cmp	x0, #0
	csetm	w0, ne
LBB0_10:
	mov	sp, x19
	ldur	x8, [x29, #-88]
Lloh9:
	adrp	x9, ___stack_chk_guard@GOTPAGE
Lloh10:
	ldr	x9, [x9, ___stack_chk_guard@GOTPAGEOFF]
Lloh11:
	ldr	x9, [x9]
	cmp	x9, x8
	b.ne	LBB0_12
; %bb.11:
	sub	sp, x29, #80
	ldp	x29, x30, [sp, #80]             ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #64]             ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #48]             ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #32]             ; 16-byte Folded Reload
	ldp	x26, x25, [sp, #16]             ; 16-byte Folded Reload
	ldp	x28, x27, [sp], #96             ; 16-byte Folded Reload
	ret
LBB0_12:
	bl	___stack_chk_fail
	.loh AdrpLdrGot	Lloh7, Lloh8
	.loh AdrpLdrGot	Lloh5, Lloh6
	.loh AdrpLdrGot	Lloh3, Lloh4
	.loh AdrpLdrGotLdr	Lloh0, Lloh1, Lloh2
	.loh AdrpLdrGotLdr	Lloh9, Lloh10, Lloh11
	.cfi_endproc
                                        ; -- End function
	.comm	_AES_BLOCK_SIZE,4,2             ; @AES_BLOCK_SIZE
.subsections_via_symbols
