	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	4, 0x90                         ## -- Begin function secp256k1_wnaf_const
_secp256k1_wnaf_const:                  ## @secp256k1_wnaf_const
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r13
	pushq	%r12
	pushq	%rbx
	subq	$24, %rsp
	.cfi_offset %rbx, -56
	.cfi_offset %r12, -48
	.cfi_offset %r13, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movl	%ecx, %ebx
	movl	%edx, %r12d
	movq	%rsi, %r14
	movq	%rdi, -64(%rbp)                 ## 8-byte Spill
	xorl	%edi, %edi
	testl	%edx, %edx
	setg	%dil
	callq	_VERIFY_CHECK
	xorl	%edi, %edi
	movl	%ebx, -48(%rbp)                 ## 4-byte Spill
	testl	%ebx, %ebx
	setg	%dil
	callq	_VERIFY_CHECK
	movq	%r14, %rdi
	callq	_secp256k1_scalar_is_high
	movl	%eax, %r13d
	movq	%r14, %rdi
	callq	_secp256k1_scalar_is_even
	xorl	%ebx, %ebx
	testl	%eax, %eax
	sete	%bl
	xorl	%r13d, %ebx
	leaq	-44(%rbp), %r15
	movq	%r15, %rdi
	movq	%r14, %rsi
	callq	_secp256k1_scalar_negate
	movq	%r15, %rdi
	callq	_secp256k1_scalar_is_one
	movl	%eax, -52(%rbp)                 ## 4-byte Spill
	xorl	%edx, %edx
	testl	%eax, %eax
	sete	%dl
	movl	(%r14), %eax
	movl	%eax, -44(%rbp)
	movq	%r15, %rdi
	movl	%ebx, -56(%rbp)                 ## 4-byte Spill
	movl	%ebx, %esi
	callq	_secp256k1_scalar_cadd_bit
	movq	%r15, %rdi
	movl	%r13d, %esi
	callq	_secp256k1_scalar_cond_negate
	movl	%eax, %r14d
	negl	%r14d
	cmpl	$0, -52(%rbp)                   ## 4-byte Folded Reload
	cmovel	%eax, %r14d
	movq	%r15, %rdi
	movl	%r12d, %esi
	callq	_secp256k1_scalar_shr_int
	movl	%eax, %ebx
	xorl	%r15d, %r15d
	xorl	%r13d, %r13d
	jmp	LBB0_1
	.p2align	4, 0x90
LBB0_3:                                 ##   in Loop: Header=BB0_1 Depth=1
	addl	%edx, %eax
	movl	%r12d, %ecx
	shll	%cl, %edx
	subl	%edx, %ebx
	imull	%r14d, %ebx
	movq	-64(%rbp), %rcx                 ## 8-byte Reload
	movl	%ebx, (%rcx,%r13,4)
	incq	%r13
	addl	%r12d, %r15d
	movl	%eax, %ebx
	cmpl	-48(%rbp), %r15d                ## 4-byte Folded Reload
	jge	LBB0_4
LBB0_1:                                 ## =>This Inner Loop Header: Depth=1
	leaq	-44(%rbp), %rdi
	movl	%r12d, %esi
	callq	_secp256k1_scalar_shr_int
	movl	%eax, %edx
	notl	%edx
	andl	$1, %edx
	testl	%ebx, %ebx
	jg	LBB0_3
## %bb.2:                               ##   in Loop: Header=BB0_1 Depth=1
	negl	%edx
	jmp	LBB0_3
LBB0_4:
	movl	$1, %ebx
	movl	-56(%rbp), %ecx                 ## 4-byte Reload
                                        ## kill: def $cl killed $cl killed $ecx
	shll	%cl, %ebx
	imull	%r14d, %eax
	movl	%r13d, %ecx
	movq	-64(%rbp), %rdx                 ## 8-byte Reload
	movl	%eax, (%rdx,%rcx,4)
	leaq	-44(%rbp), %rdi
	callq	_secp256k1_scalar_is_zero
	movl	%eax, %edi
	callq	_VERIFY_CHECK
	movl	-48(%rbp), %edi                 ## 4-byte Reload
	movl	%r12d, %esi
	callq	_WNAF_SIZE_BITS
	xorl	%edi, %edi
	cmpl	%r13d, %eax
	sete	%dil
	callq	_VERIFY_CHECK
	movl	%ebx, %eax
	addq	$24, %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
	.cfi_endproc
                                        ## -- End function
	.no_dead_strip	_secp256k1_wnaf_const
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	2                               ; -- Begin function secp256k1_wnaf_const
_secp256k1_wnaf_const:                  ; @secp256k1_wnaf_const
	.cfi_startproc
; %bb.0:
	sub	sp, sp, #112
	.cfi_def_cfa_offset 112
	stp	x28, x27, [sp, #16]             ; 16-byte Folded Spill
	stp	x26, x25, [sp, #32]             ; 16-byte Folded Spill
	stp	x24, x23, [sp, #48]             ; 16-byte Folded Spill
	stp	x22, x21, [sp, #64]             ; 16-byte Folded Spill
	stp	x20, x19, [sp, #80]             ; 16-byte Folded Spill
	stp	x29, x30, [sp, #96]             ; 16-byte Folded Spill
	add	x29, sp, #96
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	.cfi_offset w25, -72
	.cfi_offset w26, -80
	.cfi_offset w27, -88
	.cfi_offset w28, -96
	mov	x20, x3
	mov	x19, x2
	mov	x23, x1
	mov	x21, x0
	cmp	w2, #0
	cset	w0, gt
	bl	_VERIFY_CHECK
	cmp	w20, #0
	cset	w0, gt
	bl	_VERIFY_CHECK
	mov	x0, x23
	bl	_secp256k1_scalar_is_high
	mov	x24, x0
	mov	x0, x23
	bl	_secp256k1_scalar_is_even
	cmp	w0, #0
	cset	w8, eq
	eor	w22, w24, w8
	add	x0, sp, #12
	mov	x1, x23
	bl	_secp256k1_scalar_negate
	add	x0, sp, #12
	bl	_secp256k1_scalar_is_one
	mov	x25, x0
	cmp	w0, #0
	cset	w2, eq
	ldr	w8, [x23]
	str	w8, [sp, #12]
	add	x0, sp, #12
	mov	x1, x22
	bl	_secp256k1_scalar_cadd_bit
	add	x0, sp, #12
	mov	x1, x24
	bl	_secp256k1_scalar_cond_negate
	cmp	w25, #0
	cneg	w24, w0, ne
	add	x0, sp, #12
	mov	x1, x19
	bl	_secp256k1_scalar_shr_int
	mov	x23, x0
	mov	w26, #0
	mov	x25, #0
LBB0_1:                                 ; =>This Inner Loop Header: Depth=1
	mov	x27, x25
	add	x0, sp, #12
	mov	x1, x19
	bl	_secp256k1_scalar_shr_int
	mvn	w8, w0
	and	w8, w8, #0x1
	cmp	w23, #1
	cneg	w9, w8, lt
	add	w8, w9, w0
	lsl	w9, w9, w19
	sub	w9, w23, w9
	mul	w9, w9, w24
	add	x25, x25, #1
	str	w9, [x21, x27, lsl #2]
	add	w26, w26, w19
	cmp	w26, w20
	mov	x23, x8
	b.lt	LBB0_1
; %bb.2:
	mov	w9, #1
	lsl	w22, w9, w22
	mul	w8, w8, w24
	str	w8, [x21, w25, uxtw #2]
	add	x0, sp, #12
	bl	_secp256k1_scalar_is_zero
	bl	_VERIFY_CHECK
	mov	x0, x20
	mov	x1, x19
	bl	_WNAF_SIZE_BITS
	cmp	w0, w25
	cset	w0, eq
	bl	_VERIFY_CHECK
	mov	x0, x22
	ldp	x29, x30, [sp, #96]             ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #80]             ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #64]             ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #48]             ; 16-byte Folded Reload
	ldp	x26, x25, [sp, #32]             ; 16-byte Folded Reload
	ldp	x28, x27, [sp, #16]             ; 16-byte Folded Reload
	add	sp, sp, #112
	ret
	.cfi_endproc
                                        ; -- End function
	.no_dead_strip	_secp256k1_wnaf_const
.subsections_via_symbols
