	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	4, 0x90                         ## -- Begin function secp256k1_ecmult_const
_secp256k1_ecmult_const:                ## @secp256k1_ecmult_const
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r13
	pushq	%r12
	pushq	%rbx
	subq	$88, %rsp
	.cfi_offset %rbx, -56
	.cfi_offset %r12, -48
	.cfi_offset %r13, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movl	%ecx, %r15d
	movq	%rdx, -56(%rbp)                 ## 8-byte Spill
	movq	%rsi, %r13
	movq	%rdi, %r14
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	movq	%rax, -48(%rbp)
	movq	_WINDOW_A@GOTPCREL(%rip), %r12
	movl	(%r12), %edi
	callq	_ECMULT_TABLE_SIZE
	movl	%eax, %eax
	shlq	$2, %rax
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, %rbx
	movl	(%r12), %edi
	decl	%edi
	callq	_WNAF_SIZE
                                        ## kill: def $eax killed $eax def $rax
	incl	%eax
	shlq	$2, %rax
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, %rdi
	movl	(%r12), %edx
	decl	%edx
	movq	%rdi, -96(%rbp)                 ## 8-byte Spill
	movq	-56(%rbp), %rsi                 ## 8-byte Reload
	movl	%r15d, -76(%rbp)                ## 4-byte Spill
	movl	%r15d, %ecx
	callq	_secp256k1_wnaf_const
	movl	%eax, -80(%rbp)                 ## 4-byte Spill
	movq	%r14, %rdi
	movq	%r13, -104(%rbp)                ## 8-byte Spill
	movq	%r13, %rsi
	callq	_secp256k1_gej_set_ge
	leaq	-84(%rbp), %rsi
	movq	%rbx, -56(%rbp)                 ## 8-byte Spill
	movq	%rbx, %rdi
	movq	%r14, %rdx
	callq	_secp256k1_ecmult_odd_multiples_table_globalz_windowa
	movl	(%r12), %edi
	callq	_ECMULT_TABLE_SIZE
	testl	%eax, %eax
	jle	LBB0_3
## %bb.1:
	xorl	%r15d, %r15d
	movq	-56(%rbp), %rbx                 ## 8-byte Reload
	.p2align	4, 0x90
LBB0_2:                                 ## =>This Inner Loop Header: Depth=1
	movq	%rbx, %rdi
	callq	_secp256k1_fe_normalize_weak
	incq	%r15
	movl	(%r12), %edi
	callq	_ECMULT_TABLE_SIZE
	cltq
	addq	$4, %rbx
	cmpq	%rax, %r15
	jl	LBB0_2
LBB0_3:
	movl	(%r12), %esi
	decl	%esi
	movl	-76(%rbp), %r13d                ## 4-byte Reload
	movl	%r13d, %edi
	callq	_WNAF_SIZE_BITS
	cltq
	movq	-96(%rbp), %rcx                 ## 8-byte Reload
	movl	(%rcx,%rax,4), %ebx
	xorl	%edi, %edi
	testl	%ebx, %ebx
	setne	%dil
	callq	_VERIFY_CHECK
	movl	(%r12), %ecx
	leaq	-64(%rbp), %r15
	movq	%r15, %rdi
	movq	-56(%rbp), %rsi                 ## 8-byte Reload
	movl	%ebx, %edx
	callq	_ECMULT_CONST_TABLE_GET_GE
	movq	%r14, %rdi
	movq	%r15, %rsi
	callq	_secp256k1_gej_set_ge
	movl	(%r12), %esi
	decl	%esi
	movl	%r13d, %edi
	callq	_WNAF_SIZE_BITS
	testl	%eax, %eax
	jle	LBB0_9
## %bb.4:
	movl	%eax, %r13d
	jmp	LBB0_5
	.p2align	4, 0x90
LBB0_8:                                 ##   in Loop: Header=BB0_5 Depth=1
	movq	-96(%rbp), %rax                 ## 8-byte Reload
	movl	(%rax,%r15,4), %ebx
	leaq	-64(%rbp), %rdi
	movq	-56(%rbp), %rsi                 ## 8-byte Reload
	movl	%ebx, %edx
                                        ## kill: def $ecx killed $ecx killed $rcx
	callq	_ECMULT_CONST_TABLE_GET_GE
	xorl	%edi, %edi
	testl	%ebx, %ebx
	setne	%dil
	callq	_VERIFY_CHECK
	movq	%r14, %rdi
	movq	%r14, %rsi
	leaq	-64(%rbp), %rdx
	callq	_secp256k1_gej_add_ge
	cmpq	$1, %r13
	movq	%r15, %r13
	jle	LBB0_9
LBB0_5:                                 ## =>This Loop Header: Depth=1
                                        ##     Child Loop BB0_7 Depth 2
	leaq	-1(%r13), %r15
	movl	(%r12), %ecx
	cmpl	$2, %ecx
	jl	LBB0_8
## %bb.6:                               ##   in Loop: Header=BB0_5 Depth=1
	xorl	%ebx, %ebx
	.p2align	4, 0x90
LBB0_7:                                 ##   Parent Loop BB0_5 Depth=1
                                        ## =>  This Inner Loop Header: Depth=2
	movq	%r14, %rdi
	movq	%r14, %rsi
	xorl	%edx, %edx
	callq	_secp256k1_gej_double_nonzero
	incl	%ebx
	movl	(%r12), %ecx
	leal	-1(%rcx), %eax
	cmpl	%eax, %ebx
	jl	LBB0_7
	jmp	LBB0_8
LBB0_9:
	leaq	-84(%rbp), %rdx
	movq	%r14, %rdi
	movq	%r14, %rsi
	callq	_secp256k1_fe_mul
	movq	-104(%rbp), %r12                ## 8-byte Reload
	movl	(%r12), %eax
	movl	%eax, -72(%rbp)
	leaq	-112(%rbp), %rbx
	leaq	-72(%rbp), %r15
	movq	%rbx, %rdi
	movq	%r15, %rsi
	callq	_secp256k1_gej_set_ge
	movq	%rbx, %rdi
	movq	%rbx, %rsi
	xorl	%edx, %edx
	callq	_secp256k1_gej_double_var
	movq	%r15, %rdi
	movq	%rbx, %rsi
	callq	_secp256k1_ge_set_gej
	leaq	-120(%rbp), %rbx
	movq	%rbx, %rdi
	movq	%r12, %rsi
	callq	_secp256k1_ge_to_storage
	leaq	-116(%rbp), %r12
	movq	%r12, %rdi
	movq	%r15, %rsi
	callq	_secp256k1_ge_to_storage
	xorl	%edx, %edx
	cmpl	$2, -80(%rbp)                   ## 4-byte Folded Reload
	sete	%dl
	movq	%rbx, %rdi
	movq	%r12, %rsi
	callq	_secp256k1_ge_storage_cmov
	movq	%r15, %rdi
	movq	%rbx, %rsi
	callq	_secp256k1_ge_from_storage
	movq	%r15, %rdi
	movq	%r15, %rsi
	callq	_secp256k1_ge_neg
	movq	%r14, %rdi
	movq	%r14, %rsi
	movq	%r15, %rdx
	callq	_secp256k1_gej_add_ge
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	cmpq	-48(%rbp), %rax
	jne	LBB0_11
## %bb.10:
	leaq	-40(%rbp), %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
LBB0_11:
	callq	___stack_chk_fail
	.cfi_endproc
                                        ## -- End function
	.comm	_WINDOW_A,4,2                   ## @WINDOW_A
	.no_dead_strip	_secp256k1_ecmult_const
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	2                               ; -- Begin function secp256k1_ecmult_const
_secp256k1_ecmult_const:                ; @secp256k1_ecmult_const
	.cfi_startproc
; %bb.0:
	stp	x28, x27, [sp, #-96]!           ; 16-byte Folded Spill
	.cfi_def_cfa_offset 96
	stp	x26, x25, [sp, #16]             ; 16-byte Folded Spill
	stp	x24, x23, [sp, #32]             ; 16-byte Folded Spill
	stp	x22, x21, [sp, #48]             ; 16-byte Folded Spill
	stp	x20, x19, [sp, #64]             ; 16-byte Folded Spill
	stp	x29, x30, [sp, #80]             ; 16-byte Folded Spill
	add	x29, sp, #80
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	.cfi_offset w25, -72
	.cfi_offset w26, -80
	.cfi_offset w27, -88
	.cfi_offset w28, -96
	sub	sp, sp, #48
	mov	x24, x3
	mov	x21, x2
	mov	x20, x1
	mov	x19, x0
Lloh0:
	adrp	x8, ___stack_chk_guard@GOTPAGE
Lloh1:
	ldr	x8, [x8, ___stack_chk_guard@GOTPAGEOFF]
Lloh2:
	ldr	x8, [x8]
	stur	x8, [x29, #-88]
Lloh3:
	adrp	x26, _WINDOW_A@GOTPAGE
Lloh4:
	ldr	x26, [x26, _WINDOW_A@GOTPAGEOFF]
	ldr	w0, [x26]
	bl	_ECMULT_TABLE_SIZE
	mov	w8, w0
	lsl	x8, x8, #2
	mov	x9, x8
Lloh5:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh6:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x9, sp
	add	x8, x8, #15
	and	x8, x8, #0x7fffffff0
	sub	x22, x9, x8
	mov	sp, x22
	ldr	w8, [x26]
	sub	w0, w8, #1
	bl	_WNAF_SIZE
	add	w8, w0, #1
	lsl	x8, x8, #2
	mov	x9, x8
Lloh7:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh8:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x9, sp
	add	x8, x8, #15
	and	x8, x8, #0x7fffffff0
	sub	x23, x9, x8
	mov	sp, x23
	ldr	w8, [x26]
	sub	w2, w8, #1
	mov	x0, x23
	mov	x1, x21
	mov	x3, x24
	bl	_secp256k1_wnaf_const
	mov	x21, x0
	mov	x0, x19
	mov	x1, x20
	bl	_secp256k1_gej_set_ge
	sub	x1, x29, #100
	mov	x0, x22
	mov	x2, x19
	bl	_secp256k1_ecmult_odd_multiples_table_globalz_windowa
	ldr	w0, [x26]
	bl	_ECMULT_TABLE_SIZE
	cmp	w0, #1
	b.lt	LBB0_3
; %bb.1:
	mov	x27, #0
	mov	x25, x22
LBB0_2:                                 ; =>This Inner Loop Header: Depth=1
	mov	x0, x25
	bl	_secp256k1_fe_normalize_weak
	add	x27, x27, #1
	ldr	w0, [x26]
	bl	_ECMULT_TABLE_SIZE
	add	x25, x25, #4
	cmp	x27, w0, sxtw
	b.lt	LBB0_2
LBB0_3:
	ldr	w8, [x26]
	sub	w1, w8, #1
	mov	x0, x24
	bl	_WNAF_SIZE_BITS
	ldr	w25, [x23, w0, sxtw #2]
	cmp	w25, #0
	cset	w0, ne
	bl	_VERIFY_CHECK
	ldr	w3, [x26]
	sub	x0, x29, #96
	mov	x1, x22
	mov	x2, x25
	bl	_ECMULT_CONST_TABLE_GET_GE
	sub	x1, x29, #96
	mov	x0, x19
	bl	_secp256k1_gej_set_ge
	ldr	w8, [x26]
	sub	w1, w8, #1
	mov	x0, x24
	bl	_WNAF_SIZE_BITS
	cmp	w0, #1
	b.lt	LBB0_9
; %bb.4:
	mov	w25, w0
	b	LBB0_6
LBB0_5:                                 ;   in Loop: Header=BB0_6 Depth=1
	ldr	w24, [x23, x27, lsl #2]
	sub	x0, x29, #96
	mov	x1, x22
	mov	x2, x24
	bl	_ECMULT_CONST_TABLE_GET_GE
	cmp	w24, #0
	cset	w0, ne
	bl	_VERIFY_CHECK
	sub	x2, x29, #96
	mov	x0, x19
	mov	x1, x19
	bl	_secp256k1_gej_add_ge
	cmp	x25, #1
	mov	x25, x27
	b.le	LBB0_9
LBB0_6:                                 ; =>This Loop Header: Depth=1
                                        ;     Child Loop BB0_8 Depth 2
	sub	x27, x25, #1
	ldr	w3, [x26]
	cmp	w3, #2
	b.lt	LBB0_5
; %bb.7:                                ;   in Loop: Header=BB0_6 Depth=1
	mov	w24, #0
LBB0_8:                                 ;   Parent Loop BB0_6 Depth=1
                                        ; =>  This Inner Loop Header: Depth=2
	mov	x0, x19
	mov	x1, x19
	mov	x2, #0
	bl	_secp256k1_gej_double_nonzero
	add	w24, w24, #1
	ldr	w3, [x26]
	sub	w8, w3, #1
	cmp	w24, w8
	b.lt	LBB0_8
	b	LBB0_5
LBB0_9:
	sub	x2, x29, #100
	mov	x0, x19
	mov	x1, x19
	bl	_secp256k1_fe_mul
	ldr	w8, [x20]
	stur	w8, [x29, #-104]
	sub	x0, x29, #120
	sub	x1, x29, #104
	bl	_secp256k1_gej_set_ge
	sub	x0, x29, #120
	sub	x1, x29, #120
	mov	x2, #0
	bl	_secp256k1_gej_double_var
	sub	x0, x29, #104
	sub	x1, x29, #120
	bl	_secp256k1_ge_set_gej
	sub	x0, x29, #108
	mov	x1, x20
	bl	_secp256k1_ge_to_storage
	sub	x0, x29, #112
	sub	x1, x29, #104
	bl	_secp256k1_ge_to_storage
	cmp	w21, #2
	cset	w2, eq
	sub	x0, x29, #108
	sub	x1, x29, #112
	bl	_secp256k1_ge_storage_cmov
	sub	x0, x29, #104
	sub	x1, x29, #108
	bl	_secp256k1_ge_from_storage
	sub	x0, x29, #104
	sub	x1, x29, #104
	bl	_secp256k1_ge_neg
	sub	x2, x29, #104
	mov	x0, x19
	mov	x1, x19
	bl	_secp256k1_gej_add_ge
	ldur	x8, [x29, #-88]
Lloh9:
	adrp	x9, ___stack_chk_guard@GOTPAGE
Lloh10:
	ldr	x9, [x9, ___stack_chk_guard@GOTPAGEOFF]
Lloh11:
	ldr	x9, [x9]
	cmp	x9, x8
	b.ne	LBB0_11
; %bb.10:
	sub	sp, x29, #80
	ldp	x29, x30, [sp, #80]             ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #64]             ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #48]             ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #32]             ; 16-byte Folded Reload
	ldp	x26, x25, [sp, #16]             ; 16-byte Folded Reload
	ldp	x28, x27, [sp], #96             ; 16-byte Folded Reload
	ret
LBB0_11:
	bl	___stack_chk_fail
	.loh AdrpLdrGot	Lloh7, Lloh8
	.loh AdrpLdrGot	Lloh5, Lloh6
	.loh AdrpLdrGot	Lloh3, Lloh4
	.loh AdrpLdrGotLdr	Lloh0, Lloh1, Lloh2
	.loh AdrpLdrGotLdr	Lloh9, Lloh10, Lloh11
	.cfi_endproc
                                        ; -- End function
	.comm	_WINDOW_A,4,2                   ; @WINDOW_A
	.no_dead_strip	_secp256k1_ecmult_const
.subsections_via_symbols
