	.file	"extr_x25519_ref10.c_crypto_scalarmult_curve25519_ref10_base.c"
	.intel_syntax noprefix
	.text
	.p2align 4
	.type	crypto_scalarmult_curve25519_ref10_base, @function
crypto_scalarmult_curve25519_ref10_base:
.LFB0:
	.cfi_startproc
	endbr64
	push	r12
	.cfi_def_cfa_offset 16
	.cfi_offset 12, -16
	push	rbp
	.cfi_def_cfa_offset 24
	.cfi_offset 6, -24
	mov	rbp, rdi
	sub	rsp, 24
	.cfi_def_cfa_offset 48
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR 8[rsp], rax
	xor	eax, eax
	.p2align 4,,10
	.p2align 3
.L2:
	movzx	edx, BYTE PTR [rsi+rax]
	mov	BYTE PTR 0[rbp+rax], dl
	add	rax, 1
	cmp	rax, 32
	jne	.L2
	movzx	eax, BYTE PTR 31[rbp]
	and	BYTE PTR 0[rbp], -8
	mov	rdi, rsp
	mov	rsi, rbp
	xor	r12d, r12d
	and	eax, 127
	or	eax, 64
	mov	BYTE PTR 31[rbp], al
	call	ge25519_scalarmult_base@PLT
	mov	edx, DWORD PTR [rsp]
	mov	esi, DWORD PTR 4[rsp]
	mov	edi, r12d
	call	edwards_to_montgomery@PLT
	mov	esi, r12d
	mov	rdi, rbp
	call	fe25519_tobytes@PLT
	mov	rax, QWORD PTR 8[rsp]
	xor	rax, QWORD PTR fs:40
	jne	.L7
	add	rsp, 24
	.cfi_remember_state
	.cfi_def_cfa_offset 24
	xor	eax, eax
	pop	rbp
	.cfi_def_cfa_offset 16
	pop	r12
	.cfi_def_cfa_offset 8
	ret
.L7:
	.cfi_restore_state
	call	__stack_chk_fail@PLT
	.cfi_endproc
.LFE0:
	.size	crypto_scalarmult_curve25519_ref10_base, .-crypto_scalarmult_curve25519_ref10_base
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 2
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"extr_x25519_ref10.c_crypto_scalarmult_curve25519_ref10_base.c"
	.text
	.section	.rodata.cst4,"aM",%progbits,4
	.align	2
.LC0:
	.word	__stack_chk_guard
	.text
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	crypto_scalarmult_curve25519_ref10_base, %function
crypto_scalarmult_curve25519_ref10_base:
	@ args = 0, pretend = 0, frame = 16
	@ frame_needed = 0, uses_anonymous_args = 0
	push	{r4, r5, lr}
	mov	r4, r0
	ldr	r3, .L8
	sub	sp, sp, #20
	ldr	r3, [r3]
	str	r3, [sp, #12]
	mov	r3,#0
	add	ip, r1, #31
	sub	r3, r1, #1
	sub	r2, r0, #1
.L2:
	ldrb	r1, [r3, #1]!	@ zero_extendqisi2
	cmp	r3, ip
	strb	r1, [r2, #1]!
	bne	.L2
	mov	r5, #0
	ldrb	r3, [r4, #31]	@ zero_extendqisi2
	ldrb	r2, [r4]	@ zero_extendqisi2
	and	r3, r3, #127
	orr	r3, r3, #64
	bic	r2, r2, #7
	strb	r3, [r4, #31]
	mov	r1, r4
	strb	r2, [r4]
	add	r0, sp, #4
	bl	ge25519_scalarmult_base
	ldr	r2, [sp, #4]
	ldr	r1, [sp, #8]
	mov	r0, r5
	bl	edwards_to_montgomery
	mov	r1, r5
	mov	r0, r4
	bl	fe25519_tobytes
	ldr	r3, .L8
	ldr	r2, [r3]
	ldr	r3, [sp, #12]
	eors	r2, r3, r2
	mov	r3, #0
	bne	.L7
	mov	r0, #0
	add	sp, sp, #20
	@ sp needed
	pop	{r4, r5, pc}
.L7:
	bl	__stack_chk_fail
.L9:
	.align	2
.L8:
	.word	.LC0
	.size	crypto_scalarmult_curve25519_ref10_base, .-crypto_scalarmult_curve25519_ref10_base
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
