	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_verify_user_pass               ## -- Begin function verify_user_pass
	.p2align	4, 0x90
_verify_user_pass:                      ## @verify_user_pass
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r13
	pushq	%r12
	pushq	%rbx
	subq	$24, %rsp
	.cfi_offset %rbx, -56
	.cfi_offset %r12, -48
	.cfi_offset %r13, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movq	%rdx, %rbx
	movq	%rsi, %r15
	movq	%rdi, %r14
	movq	_OPENVPN_PLUGIN_FUNC_SUCCESS@GOTPCREL(%rip), %rax
	movl	(%rax), %r12d
	movq	8(%rdx), %r13
	movq	_KS_PRIMARY@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	movq	%rax, -48(%rbp)                 ## 8-byte Spill
	movl	(%rdi), %edi
	callq	_string_mod_remap_name
	movl	4(%r14), %edi
	movq	_CC_PRINT@GOTPCREL(%rip), %rax
	movl	(%rax), %esi
	movq	_CC_CRLF@GOTPCREL(%rip), %rax
	movl	(%rax), %edx
	movl	$95, %ecx
	callq	_string_mod
	movq	(%rbx), %rcx
	cmpq	$0, 8(%rcx)
	movq	%r13, -56(%rbp)                 ## 8-byte Spill
	je	LBB0_6
## %bb.1:
	movl	4(%r14), %edi
	callq	_is_auth_token
	testq	%rax, %rax
	je	LBB0_5
## %bb.2:
	movq	%r14, %rdi
	movq	%r15, %rsi
	movq	%rbx, %rdx
	callq	_verify_auth_token
	movl	%eax, (%r15)
	movq	(%rbx), %rcx
	cmpq	$0, 32(%rcx)
	jne	LBB0_6
## %bb.3:
	movq	_AUTH_TOKEN_HMAC_OK@GOTPCREL(%rip), %rcx
	cmpl	(%rcx), %eax
	jne	LBB0_22
## %bb.4:
	movq	_M_WARN@GOTPCREL(%rip), %rax
	movl	(%rax), %edi
	movl	(%r14), %edx
	leaq	L_.str(%rip), %rsi
	xorl	%eax, %eax
	callq	_msg
	jmp	LBB0_10
LBB0_5:
	movq	(%rbx), %rcx
LBB0_6:
	movl	24(%rcx), %edi
	movq	_OPENVPN_PLUGIN_AUTH_USER_PASS_VERIFY@GOTPCREL(%rip), %rax
	movl	(%rax), %esi
	callq	_plugin_defined
	testq	%rax, %rax
	je	LBB0_8
## %bb.7:
	movq	%rbx, %rdi
	movq	%r15, %rsi
	movq	%r14, %rdx
	callq	_verify_user_pass_plugin
	movl	%eax, %r12d
LBB0_8:
	movq	(%rbx), %rax
	cmpq	$0, 16(%rax)
	je	LBB0_10
## %bb.9:
	movq	%rbx, %rdi
	movq	%r15, %rsi
	movq	%r14, %rdx
	callq	_verify_user_pass_script
	movl	%eax, %r13d
	jmp	LBB0_11
LBB0_10:
	movl	$1, %r13d
LBB0_11:
	movq	(%rbx), %rax
	movq	_SSLF_USERNAME_AS_COMMON_NAME@GOTPCREL(%rip), %rcx
	movl	(%rcx), %ecx
	testl	%ecx, (%rax)
	je	LBB0_14
## %bb.12:
	movl	(%r14), %edi
	callq	_strlen
	movq	_TLS_USERNAME_LEN@GOTPCREL(%rip), %rcx
	movq	(%rcx), %rdx
	cmpq	%rdx, %rax
	jle	LBB0_14
## %bb.13:
	movq	_D_TLS_ERRORS@GOTPCREL(%rip), %rax
	movl	(%rax), %edi
	leaq	L_.str.2(%rip), %rsi
	xorl	%eax, %eax
	callq	_msg
	movq	_OPENVPN_PLUGIN_FUNC_ERROR@GOTPCREL(%rip), %rax
	movl	(%rax), %r12d
LBB0_14:
	movq	_OPENVPN_PLUGIN_FUNC_SUCCESS@GOTPCREL(%rip), %rax
	cmpl	(%rax), %r12d
	jne	LBB0_19
## %bb.15:
	testl	%r13d, %r13d
	je	LBB0_19
## %bb.16:
	movl	(%r14), %esi
	movq	%r15, %rdi
	callq	_tls_lock_username
	testq	%rax, %rax
	je	LBB0_19
## %bb.17:
	movq	-56(%rbp), %rax                 ## 8-byte Reload
	movq	-48(%rbp), %rcx                 ## 8-byte Reload
	movl	$1, (%rax,%rcx,8)
	movq	(%rbx), %rax
	movq	_SSLF_USERNAME_AS_COMMON_NAME@GOTPCREL(%rip), %r15
	movl	(%r15), %ecx
	testl	%ecx, (%rax)
	je	LBB0_20
## %bb.18:
	movl	(%r14), %esi
	movq	%rbx, %rdi
	callq	_set_common_name
	movq	(%rbx), %rax
	movl	(%r15), %ecx
	testl	%ecx, (%rax)
	leaq	L_.str.6(%rip), %rax
	leaq	L_.str.5(%rip), %r8
	cmoveq	%rax, %r8
	jmp	LBB0_21
LBB0_19:
	movq	_D_TLS_ERRORS@GOTPCREL(%rip), %rax
	movl	(%rax), %edi
	leaq	L_.str.7(%rip), %rsi
	xorl	%eax, %eax
	addq	$24, %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	jmp	_msg                            ## TAILCALL
LBB0_20:
	leaq	L_.str.6(%rip), %r8
LBB0_21:
	movq	_D_HANDSHAKE@GOTPCREL(%rip), %rax
	movl	(%rax), %edi
	movl	(%r14), %ecx
	leaq	L_.str.3(%rip), %rsi
	leaq	L_.str.4(%rip), %rdx
	xorl	%eax, %eax
	addq	$24, %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	jmp	_msg                            ## TAILCALL
LBB0_22:
	movq	%r15, %rdi
	callq	_wipe_auth_token
	movq	-48(%rbp), %rax                 ## 8-byte Reload
	movl	$0, (%r13,%rax,8)
	movq	_M_WARN@GOTPCREL(%rip), %rax
	movl	(%rax), %edi
	movl	(%r14), %edx
	leaq	L_.str.1(%rip), %rsi
	xorl	%eax, %eax
	addq	$24, %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	jmp	_msg                            ## TAILCALL
	.cfi_endproc
                                        ## -- End function
	.comm	_OPENVPN_PLUGIN_FUNC_SUCCESS,4,2 ## @OPENVPN_PLUGIN_FUNC_SUCCESS
	.comm	_KS_PRIMARY,8,3                 ## @KS_PRIMARY
	.comm	_CC_PRINT,4,2                   ## @CC_PRINT
	.comm	_CC_CRLF,4,2                    ## @CC_CRLF
	.comm	_AUTH_TOKEN_HMAC_OK,4,2         ## @AUTH_TOKEN_HMAC_OK
	.comm	_M_WARN,4,2                     ## @M_WARN
	.section	__TEXT,__cstring,cstring_literals
L_.str:                                 ## @.str
	.asciz	"TLS: Username/auth-token authentication succeeded for username '%s'"

L_.str.1:                               ## @.str.1
	.asciz	"TLS: Username/auth-token authentication failed for username '%s'"

	.comm	_OPENVPN_PLUGIN_AUTH_USER_PASS_VERIFY,4,2 ## @OPENVPN_PLUGIN_AUTH_USER_PASS_VERIFY
	.comm	_SSLF_USERNAME_AS_COMMON_NAME,4,2 ## @SSLF_USERNAME_AS_COMMON_NAME
	.comm	_TLS_USERNAME_LEN,8,3           ## @TLS_USERNAME_LEN
	.comm	_D_TLS_ERRORS,4,2               ## @D_TLS_ERRORS
L_.str.2:                               ## @.str.2
	.asciz	"TLS Auth Error: --username-as-common name specified and username is longer than the maximum permitted Common Name length of %d characters"

	.comm	_OPENVPN_PLUGIN_FUNC_ERROR,4,2  ## @OPENVPN_PLUGIN_FUNC_ERROR
	.comm	_D_HANDSHAKE,4,2                ## @D_HANDSHAKE
L_.str.3:                               ## @.str.3
	.asciz	"TLS: Username/Password authentication %s for username '%s' %s"

L_.str.4:                               ## @.str.4
	.asciz	"succeeded"

L_.str.5:                               ## @.str.5
	.asciz	"[CN SET]"

L_.str.6:                               ## @.str.6
	.space	1

L_.str.7:                               ## @.str.7
	.asciz	"TLS Auth Error: Auth Username/Password verification failed for peer"

	.comm	_AUTH_TOKEN_EXPIRED,4,2         ## @AUTH_TOKEN_EXPIRED
	.comm	_KMDA_DEF,4,2                   ## @KMDA_DEF
	.comm	_KMDA_ERROR,4,2                 ## @KMDA_ERROR
	.comm	_KMDA_UNDEF,4,2                 ## @KMDA_UNDEF
	.comm	_OPENVPN_PLUGIN_FUNC_DEFERRED,4,2 ## @OPENVPN_PLUGIN_FUNC_DEFERRED
	.comm	_management,4,2                 ## @management
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_verify_user_pass               ; -- Begin function verify_user_pass
	.p2align	2
_verify_user_pass:                      ; @verify_user_pass
	.cfi_startproc
; %bb.0:
	sub	sp, sp, #112
	.cfi_def_cfa_offset 112
	stp	x26, x25, [sp, #32]             ; 16-byte Folded Spill
	stp	x24, x23, [sp, #48]             ; 16-byte Folded Spill
	stp	x22, x21, [sp, #64]             ; 16-byte Folded Spill
	stp	x20, x19, [sp, #80]             ; 16-byte Folded Spill
	stp	x29, x30, [sp, #96]             ; 16-byte Folded Spill
	add	x29, sp, #96
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	.cfi_offset w25, -72
	.cfi_offset w26, -80
	mov	x20, x2
	mov	x21, x1
	mov	x19, x0
Lloh0:
	adrp	x25, _OPENVPN_PLUGIN_FUNC_SUCCESS@GOTPAGE
Lloh1:
	ldr	x25, [x25, _OPENVPN_PLUGIN_FUNC_SUCCESS@GOTPAGEOFF]
	ldr	w22, [x25]
	ldr	x8, [x2, #8]
Lloh2:
	adrp	x9, _KS_PRIMARY@GOTPAGE
Lloh3:
	ldr	x9, [x9, _KS_PRIMARY@GOTPAGEOFF]
Lloh4:
	ldr	x9, [x9]
	add	x24, x8, x9, lsl #3
	ldr	w0, [x0]
	bl	_string_mod_remap_name
	ldr	w0, [x19, #4]
Lloh5:
	adrp	x8, _CC_PRINT@GOTPAGE
Lloh6:
	ldr	x8, [x8, _CC_PRINT@GOTPAGEOFF]
Lloh7:
	ldr	w1, [x8]
Lloh8:
	adrp	x8, _CC_CRLF@GOTPAGE
Lloh9:
	ldr	x8, [x8, _CC_CRLF@GOTPAGEOFF]
Lloh10:
	ldr	w2, [x8]
	mov	w3, #95
	bl	_string_mod
	ldr	x8, [x20]
	ldr	x9, [x8, #8]
	cbz	x9, LBB0_6
; %bb.1:
	ldr	w0, [x19, #4]
	bl	_is_auth_token
	cbz	x0, LBB0_5
; %bb.2:
	mov	x0, x19
	mov	x1, x21
	mov	x2, x20
	bl	_verify_auth_token
	str	w0, [x21]
	ldr	x8, [x20]
	ldr	x9, [x8, #32]
	cbnz	x9, LBB0_6
; %bb.3:
Lloh11:
	adrp	x8, _AUTH_TOKEN_HMAC_OK@GOTPAGE
Lloh12:
	ldr	x8, [x8, _AUTH_TOKEN_HMAC_OK@GOTPAGEOFF]
Lloh13:
	ldr	w8, [x8]
	cmp	w0, w8
	b.ne	LBB0_21
; %bb.4:
Lloh14:
	adrp	x8, _M_WARN@GOTPAGE
Lloh15:
	ldr	x8, [x8, _M_WARN@GOTPAGEOFF]
Lloh16:
	ldr	w0, [x8]
	ldr	w8, [x19]
	str	x8, [sp]
Lloh17:
	adrp	x1, l_.str@PAGE
Lloh18:
	add	x1, x1, l_.str@PAGEOFF
	bl	_msg
	b	LBB0_10
LBB0_5:
	ldr	x8, [x20]
LBB0_6:
	ldr	w0, [x8, #24]
Lloh19:
	adrp	x8, _OPENVPN_PLUGIN_AUTH_USER_PASS_VERIFY@GOTPAGE
Lloh20:
	ldr	x8, [x8, _OPENVPN_PLUGIN_AUTH_USER_PASS_VERIFY@GOTPAGEOFF]
Lloh21:
	ldr	w1, [x8]
	bl	_plugin_defined
	cbz	x0, LBB0_8
; %bb.7:
	mov	x0, x20
	mov	x1, x21
	mov	x2, x19
	bl	_verify_user_pass_plugin
	mov	x22, x0
LBB0_8:
	ldr	x8, [x20]
	ldr	x8, [x8, #16]
	cbz	x8, LBB0_10
; %bb.9:
	mov	x0, x20
	mov	x1, x21
	mov	x2, x19
	bl	_verify_user_pass_script
	mov	x23, x0
	b	LBB0_11
LBB0_10:
	mov	w23, #1
LBB0_11:
	ldr	x8, [x20]
	ldr	w8, [x8]
Lloh22:
	adrp	x26, _SSLF_USERNAME_AS_COMMON_NAME@GOTPAGE
Lloh23:
	ldr	x26, [x26, _SSLF_USERNAME_AS_COMMON_NAME@GOTPAGEOFF]
	ldr	w9, [x26]
	tst	w9, w8
	b.eq	LBB0_14
; %bb.12:
	ldr	w0, [x19]
	bl	_strlen
Lloh24:
	adrp	x8, _TLS_USERNAME_LEN@GOTPAGE
Lloh25:
	ldr	x8, [x8, _TLS_USERNAME_LEN@GOTPAGEOFF]
Lloh26:
	ldr	x8, [x8]
	cmp	x0, x8
	b.le	LBB0_14
; %bb.13:
Lloh27:
	adrp	x9, _D_TLS_ERRORS@GOTPAGE
Lloh28:
	ldr	x9, [x9, _D_TLS_ERRORS@GOTPAGEOFF]
Lloh29:
	ldr	w0, [x9]
	str	x8, [sp]
Lloh30:
	adrp	x1, l_.str.2@PAGE
Lloh31:
	add	x1, x1, l_.str.2@PAGEOFF
	bl	_msg
Lloh32:
	adrp	x8, _OPENVPN_PLUGIN_FUNC_ERROR@GOTPAGE
Lloh33:
	ldr	x8, [x8, _OPENVPN_PLUGIN_FUNC_ERROR@GOTPAGEOFF]
Lloh34:
	ldr	w22, [x8]
LBB0_14:
	ldr	w8, [x25]
	cmp	w22, w8
	b.ne	LBB0_20
; %bb.15:
	cbz	w23, LBB0_20
; %bb.16:
	ldr	w1, [x19]
	mov	x0, x21
	bl	_tls_lock_username
	cbz	x0, LBB0_20
; %bb.17:
	mov	w8, #1
	str	w8, [x24]
	ldr	x8, [x20]
	ldr	w8, [x8]
	ldr	w9, [x26]
Lloh35:
	adrp	x21, l_.str.6@PAGE
Lloh36:
	add	x21, x21, l_.str.6@PAGEOFF
	tst	w9, w8
	b.eq	LBB0_19
; %bb.18:
	ldr	w1, [x19]
	mov	x0, x20
	bl	_set_common_name
	ldr	x8, [x20]
	ldr	w8, [x8]
	ldr	w9, [x26]
Lloh37:
	adrp	x10, l_.str.5@PAGE
Lloh38:
	add	x10, x10, l_.str.5@PAGEOFF
	tst	w9, w8
	csel	x21, x21, x10, eq
LBB0_19:
Lloh39:
	adrp	x8, _D_HANDSHAKE@GOTPAGE
Lloh40:
	ldr	x8, [x8, _D_HANDSHAKE@GOTPAGEOFF]
Lloh41:
	ldr	w0, [x8]
	ldr	w8, [x19]
	stp	x8, x21, [sp, #8]
Lloh42:
	adrp	x9, l_.str.4@PAGE
Lloh43:
	add	x9, x9, l_.str.4@PAGEOFF
	str	x9, [sp]
Lloh44:
	adrp	x1, l_.str.3@PAGE
Lloh45:
	add	x1, x1, l_.str.3@PAGEOFF
	b	LBB0_22
LBB0_20:
Lloh46:
	adrp	x8, _D_TLS_ERRORS@GOTPAGE
Lloh47:
	ldr	x8, [x8, _D_TLS_ERRORS@GOTPAGEOFF]
Lloh48:
	ldr	w0, [x8]
Lloh49:
	adrp	x1, l_.str.7@PAGE
Lloh50:
	add	x1, x1, l_.str.7@PAGEOFF
	ldp	x29, x30, [sp, #96]             ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #80]             ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #64]             ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #48]             ; 16-byte Folded Reload
	ldp	x26, x25, [sp, #32]             ; 16-byte Folded Reload
	add	sp, sp, #112
	b	_msg
LBB0_21:
	mov	x0, x21
	bl	_wipe_auth_token
	str	wzr, [x24]
Lloh51:
	adrp	x8, _M_WARN@GOTPAGE
Lloh52:
	ldr	x8, [x8, _M_WARN@GOTPAGEOFF]
Lloh53:
	ldr	w0, [x8]
	ldr	w8, [x19]
	str	x8, [sp]
Lloh54:
	adrp	x1, l_.str.1@PAGE
Lloh55:
	add	x1, x1, l_.str.1@PAGEOFF
LBB0_22:
	bl	_msg
	ldp	x29, x30, [sp, #96]             ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #80]             ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #64]             ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #48]             ; 16-byte Folded Reload
	ldp	x26, x25, [sp, #32]             ; 16-byte Folded Reload
	add	sp, sp, #112
	ret
	.loh AdrpLdrGotLdr	Lloh8, Lloh9, Lloh10
	.loh AdrpLdrGotLdr	Lloh5, Lloh6, Lloh7
	.loh AdrpLdrGotLdr	Lloh2, Lloh3, Lloh4
	.loh AdrpLdrGot	Lloh0, Lloh1
	.loh AdrpLdrGotLdr	Lloh11, Lloh12, Lloh13
	.loh AdrpAdd	Lloh17, Lloh18
	.loh AdrpLdrGotLdr	Lloh14, Lloh15, Lloh16
	.loh AdrpLdrGotLdr	Lloh19, Lloh20, Lloh21
	.loh AdrpLdrGot	Lloh22, Lloh23
	.loh AdrpLdrGotLdr	Lloh24, Lloh25, Lloh26
	.loh AdrpLdrGotLdr	Lloh32, Lloh33, Lloh34
	.loh AdrpAdd	Lloh30, Lloh31
	.loh AdrpLdrGotLdr	Lloh27, Lloh28, Lloh29
	.loh AdrpAdd	Lloh35, Lloh36
	.loh AdrpAdd	Lloh37, Lloh38
	.loh AdrpAdd	Lloh44, Lloh45
	.loh AdrpAdd	Lloh42, Lloh43
	.loh AdrpLdrGotLdr	Lloh39, Lloh40, Lloh41
	.loh AdrpAdd	Lloh49, Lloh50
	.loh AdrpLdrGotLdr	Lloh46, Lloh47, Lloh48
	.loh AdrpAdd	Lloh54, Lloh55
	.loh AdrpLdrGotLdr	Lloh51, Lloh52, Lloh53
	.cfi_endproc
                                        ; -- End function
	.comm	_OPENVPN_PLUGIN_FUNC_SUCCESS,4,2 ; @OPENVPN_PLUGIN_FUNC_SUCCESS
	.comm	_KS_PRIMARY,8,3                 ; @KS_PRIMARY
	.comm	_CC_PRINT,4,2                   ; @CC_PRINT
	.comm	_CC_CRLF,4,2                    ; @CC_CRLF
	.comm	_AUTH_TOKEN_HMAC_OK,4,2         ; @AUTH_TOKEN_HMAC_OK
	.comm	_M_WARN,4,2                     ; @M_WARN
	.section	__TEXT,__cstring,cstring_literals
l_.str:                                 ; @.str
	.asciz	"TLS: Username/auth-token authentication succeeded for username '%s'"

l_.str.1:                               ; @.str.1
	.asciz	"TLS: Username/auth-token authentication failed for username '%s'"

	.comm	_OPENVPN_PLUGIN_AUTH_USER_PASS_VERIFY,4,2 ; @OPENVPN_PLUGIN_AUTH_USER_PASS_VERIFY
	.comm	_SSLF_USERNAME_AS_COMMON_NAME,4,2 ; @SSLF_USERNAME_AS_COMMON_NAME
	.comm	_TLS_USERNAME_LEN,8,3           ; @TLS_USERNAME_LEN
	.comm	_D_TLS_ERRORS,4,2               ; @D_TLS_ERRORS
l_.str.2:                               ; @.str.2
	.asciz	"TLS Auth Error: --username-as-common name specified and username is longer than the maximum permitted Common Name length of %d characters"

	.comm	_OPENVPN_PLUGIN_FUNC_ERROR,4,2  ; @OPENVPN_PLUGIN_FUNC_ERROR
	.comm	_D_HANDSHAKE,4,2                ; @D_HANDSHAKE
l_.str.3:                               ; @.str.3
	.asciz	"TLS: Username/Password authentication %s for username '%s' %s"

l_.str.4:                               ; @.str.4
	.asciz	"succeeded"

l_.str.5:                               ; @.str.5
	.asciz	"[CN SET]"

l_.str.6:                               ; @.str.6
	.space	1

l_.str.7:                               ; @.str.7
	.asciz	"TLS Auth Error: Auth Username/Password verification failed for peer"

	.comm	_AUTH_TOKEN_EXPIRED,4,2         ; @AUTH_TOKEN_EXPIRED
	.comm	_KMDA_DEF,4,2                   ; @KMDA_DEF
	.comm	_KMDA_ERROR,4,2                 ; @KMDA_ERROR
	.comm	_KMDA_UNDEF,4,2                 ; @KMDA_UNDEF
	.comm	_OPENVPN_PLUGIN_FUNC_DEFERRED,4,2 ; @OPENVPN_PLUGIN_FUNC_DEFERRED
	.comm	_management,4,2                 ; @management
.subsections_via_symbols
