	.file	"extr_curve448.c_curve448_base_double_scalarmul_non_secret.c"
	.intel_syntax noprefix
	.text
	.p2align 4
	.globl	curve448_base_double_scalarmul_non_secret
	.type	curve448_base_double_scalarmul_non_secret, @function
curve448_base_double_scalarmul_non_secret:
.LFB0:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	push	r15
	push	r14
	.cfi_offset 15, -24
	.cfi_offset 14, -32
	mov	r14d, edi
	push	r13
	push	r12
	.cfi_offset 13, -40
	.cfi_offset 12, -48
	mov	r12d, edx
	push	rbx
	sub	rsp, 104
	.cfi_offset 3, -56
	mov	r10d, DWORD PTR C448_SCALAR_BITS[rip]
	mov	r13d, DWORD PTR C448_WNAF_VAR_TABLE_BITS[rip]
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -56[rbp], rax
	xor	eax, eax
	mov	r9d, DWORD PTR C448_WNAF_FIXED_TABLE_BITS[rip]
	mov	QWORD PTR -120[rbp], rsp
	mov	eax, r10d
	lea	edi, 1[r13]
	cdq
	idiv	edi
	mov	rdx, rsp
	add	eax, 3
	mov	DWORD PTR -88[rbp], eax
	cdqe
	lea	rdi, 15[0+rax*8]
	mov	rax, rdi
	and	rdi, -4096
	sub	rdx, rdi
	and	rax, -16
	cmp	rsp, rdx
	je	.L3
.L40:
	sub	rsp, 4096
	or	QWORD PTR 4088[rsp], 0
	cmp	rsp, rdx
	jne	.L40
.L3:
	and	eax, 4095
	sub	rsp, rax
	test	rax, rax
	jne	.L41
.L4:
	mov	eax, r10d
	lea	edi, 1[r9]
	lea	r15, 3[rsp]
	mov	rbx, rsp
	cdq
	mov	r8, r15
	and	r15, -4
	idiv	edi
	mov	QWORD PTR -96[rbp], r15
	shr	r8, 2
	add	eax, 3
	mov	DWORD PTR -124[rbp], eax
	cdqe
	lea	rax, 15[0+rax*8]
	mov	rdx, rax
	and	rax, -4096
	sub	rbx, rax
	and	rdx, -16
	mov	rax, rbx
	cmp	rsp, rax
	je	.L6
.L42:
	sub	rsp, 4096
	or	QWORD PTR 4088[rsp], 0
	cmp	rsp, rax
	jne	.L42
.L6:
	and	edx, 4095
	sub	rsp, rdx
	test	rdx, rdx
	jne	.L43
.L7:
	lea	rax, 3[rsp]
	mov	edx, r9d
	mov	QWORD PTR -80[rbp], r8
	mov	rbx, rax
	and	rax, -4
	mov	DWORD PTR -72[rbp], ecx
	mov	rdi, rax
	mov	QWORD PTR -104[rbp], rax
	shr	rbx, 2
	call	recode_wnaf@PLT
	mov	ecx, DWORD PTR -72[rbp]
	mov	rdi, QWORD PTR -96[rbp]
	mov	edx, r13d
	mov	DWORD PTR -128[rbp], eax
	mov	esi, ecx
	call	recode_wnaf@PLT
	mov	ecx, DWORD PTR C448_WNAF_VAR_TABLE_BITS[rip]
	mov	esi, 1
	mov	r8, QWORD PTR -80[rbp]
	mov	DWORD PTR -132[rbp], eax
	sal	esi, cl
	mov	rcx, rsp
	movsx	rax, esi
	mov	DWORD PTR -136[rbp], esi
	lea	rax, 15[0+rax*8]
	mov	rdx, rax
	and	rax, -4096
	sub	rcx, rax
	and	rdx, -16
	mov	rax, rcx
	cmp	rsp, rax
	je	.L9
.L44:
	sub	rsp, 4096
	or	QWORD PTR 4088[rsp], 0
	cmp	rsp, rax
	jne	.L44
.L9:
	and	edx, 4095
	sub	rsp, rdx
	test	rdx, rdx
	je	.L10
	or	QWORD PTR -8[rsp+rdx], 0
.L10:
	mov	rdi, rsp
	mov	esi, r12d
	mov	edx, r13d
	mov	QWORD PTR -72[rbp], r8
	mov	QWORD PTR -112[rbp], rdi
	call	prepare_wnaf_table@PLT
	mov	r8, QWORD PTR -72[rbp]
	mov	r12d, DWORD PTR 0[0+r8*4]
	test	r12d, r12d
	js	.L45
	mov	r13d, DWORD PTR 0[0+rbx*4]
	cmp	r13d, r12d
	jl	.L46
	je	.L47
	mov	eax, DWORD PTR 4[0+rbx*4]
	mov	rdx, QWORD PTR curve448_wnaf_base[rip]
	mov	edi, r14d
	mov	r12d, r13d
	sar	eax
	cdqe
	mov	esi, DWORD PTR [rdx+rax*4]
	call	niels_to_pt@PLT
	mov	DWORD PTR -80[rbp], 0
	mov	DWORD PTR -84[rbp], 1
.L14:
	mov	r15d, r12d
	sub	r15d, 1
	js	.L16
	mov	r13d, r14d
	jmp	.L24
	.p2align 4,,10
	.p2align 3
.L18:
	cmp	ebx, r15d
	je	.L48
.L21:
	sub	r15d, 1
	cmp	r15d, -1
	je	.L16
.L24:
	movsx	rax, DWORD PTR -80[rbp]
	mov	rcx, QWORD PTR -96[rbp]
	xor	edx, edx
	mov	rbx, QWORD PTR -104[rbp]
	lea	r14, [rcx+rax*8]
	movsx	rax, DWORD PTR -84[rbp]
	mov	r8d, DWORD PTR [r14]
	lea	r12, [rbx+rax*8]
	mov	ebx, DWORD PTR [r12]
	test	r15d, r15d
	je	.L17
	cmp	r8d, r15d
	sete	dl
	cmp	ebx, r15d
	sete	al
	or	edx, eax
	xor	edx, 1
	movzx	edx, dl
.L17:
	mov	esi, r13d
	mov	edi, r13d
	mov	DWORD PTR -72[rbp], r8d
	call	point_double_internal@PLT
	mov	r8d, DWORD PTR -72[rbp]
	cmp	r8d, r15d
	jne	.L18
	mov	edi, DWORD PTR 4[r14]
	call	assert@PLT
	test	r15d, r15d
	mov	eax, DWORD PTR 4[r14]
	setne	dl
	xor	esi, esi
	cmp	ebx, r15d
	setne	sil
	and	edx, esi
	test	eax, eax
	jle	.L19
	mov	rcx, QWORD PTR -112[rbp]
	sar	eax
	mov	edi, r13d
	cdqe
	mov	rsi, QWORD PTR [rcx+rax*8]
	call	add_pniels_to_pt@PLT
.L20:
	add	DWORD PTR -80[rbp], 1
	cmp	ebx, r15d
	jne	.L21
.L48:
	mov	edi, DWORD PTR 4[r12]
	call	assert@PLT
	mov	eax, DWORD PTR 4[r12]
	test	eax, eax
	jle	.L22
	mov	rdx, QWORD PTR curve448_wnaf_base[rip]
	sar	eax
	mov	edi, r13d
	cdqe
	mov	esi, DWORD PTR [rdx+rax*4]
	mov	edx, r15d
	call	add_niels_to_pt@PLT
.L23:
	sub	r15d, 1
	add	DWORD PTR -84[rbp], 1
	cmp	r15d, -1
	jne	.L24
	.p2align 4,,10
	.p2align 3
.L16:
	mov	esi, DWORD PTR -88[rbp]
	mov	rdi, QWORD PTR -96[rbp]
	sal	esi, 3
	call	OPENSSL_cleanse@PLT
	mov	esi, DWORD PTR -124[rbp]
	mov	rdi, QWORD PTR -104[rbp]
	sal	esi, 3
	call	OPENSSL_cleanse@PLT
	mov	esi, DWORD PTR -136[rbp]
	mov	rdi, QWORD PTR -112[rbp]
	sal	esi, 3
	call	OPENSSL_cleanse@PLT
	mov	ecx, DWORD PTR -80[rbp]
	xor	edi, edi
	cmp	DWORD PTR -132[rbp], ecx
	sete	dil
	call	assert@PLT
	mov	ecx, DWORD PTR -84[rbp]
	xor	edi, edi
	cmp	DWORD PTR -128[rbp], ecx
	sete	dil
	call	assert@PLT
	mov	rsp, QWORD PTR -120[rbp]
.L1:
	mov	rax, QWORD PTR -56[rbp]
	xor	rax, QWORD PTR fs:40
	jne	.L49
	lea	rsp, -40[rbp]
	pop	rbx
	pop	r12
	pop	r13
	pop	r14
	pop	r15
	pop	rbp
	.cfi_remember_state
	.cfi_def_cfa 7, 8
	ret
	.p2align 4,,10
	.p2align 3
.L41:
	.cfi_restore_state
	or	QWORD PTR -8[rsp+rax], 0
	jmp	.L4
.L43:
	or	QWORD PTR -8[rsp+rdx], 0
	jmp	.L7
	.p2align 4,,10
	.p2align 3
.L19:
	neg	eax
	mov	rcx, QWORD PTR -112[rbp]
	mov	edi, r13d
	sar	eax
	cdqe
	mov	rsi, QWORD PTR [rcx+rax*8]
	call	sub_pniels_from_pt@PLT
	jmp	.L20
	.p2align 4,,10
	.p2align 3
.L22:
	neg	eax
	mov	rdx, QWORD PTR curve448_wnaf_base[rip]
	mov	edi, r13d
	sar	eax
	cdqe
	mov	esi, DWORD PTR [rdx+rax*4]
	mov	edx, r15d
	call	sub_niels_from_pt@PLT
	jmp	.L23
	.p2align 4,,10
	.p2align 3
.L46:
	mov	eax, DWORD PTR 4[0+r8*4]
	mov	rcx, QWORD PTR -112[rbp]
	mov	edi, r14d
	sar	eax
	cdqe
	mov	rsi, QWORD PTR [rcx+rax*8]
	call	pniels_to_pt@PLT
	mov	DWORD PTR -80[rbp], 1
	mov	DWORD PTR -84[rbp], 0
	jmp	.L14
	.p2align 4,,10
	.p2align 3
.L47:
	mov	eax, DWORD PTR 4[0+r8*4]
	mov	rcx, QWORD PTR -112[rbp]
	mov	edi, r14d
	sar	eax
	cdqe
	mov	rsi, QWORD PTR [rcx+rax*8]
	call	pniels_to_pt@PLT
	mov	eax, DWORD PTR 4[0+rbx*4]
	mov	rdx, QWORD PTR curve448_wnaf_base[rip]
	mov	edi, r14d
	sar	eax
	cdqe
	mov	esi, DWORD PTR [rdx+rax*4]
	mov	edx, r12d
	call	add_niels_to_pt@PLT
	mov	DWORD PTR -80[rbp], 1
	mov	DWORD PTR -84[rbp], 1
	jmp	.L14
.L45:
	mov	esi, DWORD PTR curve448_point_identity[rip]
	mov	edi, r14d
	call	curve448_point_copy@PLT
	mov	rsp, QWORD PTR -120[rbp]
	jmp	.L1
.L49:
	call	__stack_chk_fail@PLT
	.cfi_endproc
.LFE0:
	.size	curve448_base_double_scalarmul_non_secret, .-curve448_base_double_scalarmul_non_secret
	.comm	curve448_wnaf_base,8,8
	.comm	curve448_point_identity,4,4
	.comm	C448_WNAF_VAR_TABLE_BITS,4,4
	.comm	C448_WNAF_FIXED_TABLE_BITS,4,4
	.comm	C448_SCALAR_BITS,4,4
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 2
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"extr_curve448.c_curve448_base_double_scalarmul_non_secret.c"
	.text
	.global	__aeabi_idiv
	.section	.rodata.cst4,"aM",%progbits,4
	.align	2
.LC0:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	curve448_base_double_scalarmul_non_secret
	.syntax unified
	.arm
	.fpu softvfp
	.type	curve448_base_double_scalarmul_non_secret, %function
curve448_base_double_scalarmul_non_secret:
	@ args = 0, pretend = 0, frame = 40
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{r4, r5, r6, r7, r8, r9, r10, fp, lr}
	add	fp, sp, #32
	sub	sp, sp, #44
	mov	r10, r1
	mov	r9, r3
	ldr	r1, .L26
	ldr	r3, .L26+4
	ldr	r7, [r1]
	ldr	r6, [r3]
	ldr	ip, .L26+8
	ldr	r3, .L26+12
	str	r2, [fp, #-48]
	add	r1, r6, #1
	mov	r5, r0
	mov	r0, r7
	ldr	r3, [r3]
	str	r3, [fp, #-40]
	mov	r3,#0
	ldr	r4, [ip]
	bl	__aeabi_idiv
	mov	r3, sp
	add	ip, r0, #3
	sub	r3, r3, ip, lsl #3
	str	sp, [fp, #-56]
	mov	sp, r3
	add	r1, r4, #1
	lsl	r3, ip, #3
	mov	r0, r7
	str	r3, [fp, #-60]
	bl	__aeabi_idiv
	mov	r7, sp
	add	ip, r0, #3
	sub	r3, r7, ip, lsl #3
	mov	sp, r3
	mov	r8, sp
	lsl	r3, ip, #3
	mov	r2, r4
	mov	r1, r10
	mov	r0, r8
	str	r3, [fp, #-64]
	bl	recode_wnaf
	mov	ip, r0
	mov	r1, r9
	mov	r2, r6
	mov	r0, r7
	str	ip, [fp, #-68]
	bl	recode_wnaf
	mov	r1, #8
	ldr	r3, .L26+4
	mov	ip, r0
	ldr	r3, [r3]
	mov	r2, r6
	lsl	r3, r1, r3
	str	r3, [fp, #-76]
	add	r3, r3, #7
	bic	r3, r3, #7
	sub	sp, sp, r3
	mov	r0, sp
	ldr	r1, [fp, #-48]
	str	r0, [fp, #-52]
	str	ip, [fp, #-72]
	bl	prepare_wnaf_table
	ldr	r4, [r7]
	cmp	r4, #0
	blt	.L21
	ldr	r3, [r8]
	cmp	r3, r4
	blt	.L22
	beq	.L23
	ldr	r1, .L26+16
	ldr	r2, [r8, #4]
	ldr	r1, [r1]
	asr	r2, r2, #1
	mov	r0, r5
	ldr	r1, [r1, r2, lsl #2]
	mov	r4, r3
	mov	r10, #0
	bl	niels_to_pt
	mov	r9, #1
.L5:
	subs	r4, r4, #1
	bpl	.L15
	b	.L7
.L9:
	cmp	r6, r4
	beq	.L24
.L12:
	subs	r4, r4, #1
	bcc	.L7
.L15:
	add	r2, r8, r9, lsl #3
	cmp	r4, #0
	str	r2, [fp, #-48]
	ldr	r3, [r7, r10, lsl #3]
	moveq	r2, r4
	ldr	r6, [r8, r9, lsl #3]
	beq	.L8
	cmp	r6, r4
	cmpne	r3, r4
	moveq	r2, #1
	movne	r2, #0
	eor	r2, r2, #1
.L8:
	mov	r1, r5
	mov	r0, r5
	str	r3, [fp, #-48]
	bl	point_double_internal
	ldr	r3, [fp, #-48]
	cmp	r3, r4
	bne	.L9
	add	r3, r7, r10, lsl #3
	ldr	r0, [r3, #4]
	bl	assert
	add	r2, r7, r10, lsl #3
	subs	r3, r6, r4
	ldr	r2, [r2, #4]
	movne	r3, #1
	cmp	r4, #0
	moveq	r3, #0
	cmp	r2, #0
	ble	.L10
	ldr	r1, [fp, #-52]
	asr	r2, r2, #1
	add	r2, r1, r2, lsl #3
	mov	r0, r5
	ldm	r2, {r1, r2}
	bl	add_pniels_to_pt
.L11:
	cmp	r6, r4
	add	r10, r10, #1
	bne	.L12
.L24:
	add	r6, r8, r9, lsl #3
	ldr	r0, [r6, #4]
	bl	assert
	ldr	r3, [r6, #4]
	cmp	r3, #0
	ble	.L13
	ldr	r2, .L26+16
	asr	r3, r3, #1
	ldr	r2, [r2]
	mov	r0, r5
	ldr	r1, [r2, r3, lsl #2]
	mov	r2, r4
	bl	add_niels_to_pt
.L14:
	subs	r4, r4, #1
	add	r9, r9, #1
	bcs	.L15
.L7:
	ldr	r1, [fp, #-60]
	mov	r0, r7
	bl	OPENSSL_cleanse
	ldr	r1, [fp, #-64]
	mov	r0, r8
	bl	OPENSSL_cleanse
	ldr	r1, [fp, #-76]
	ldr	r0, [fp, #-52]
	bl	OPENSSL_cleanse
	ldr	r3, [fp, #-72]
	sub	r0, r3, r10
	clz	r0, r0
	lsr	r0, r0, #5
	bl	assert
	ldr	r3, [fp, #-68]
	sub	r0, r3, r9
	clz	r0, r0
	lsr	r0, r0, #5
	bl	assert
	ldr	sp, [fp, #-56]
.L1:
	ldr	r3, .L26+12
	ldr	r2, [r3]
	ldr	r3, [fp, #-40]
	eors	r2, r3, r2
	mov	r3, #0
	bne	.L25
	sub	sp, fp, #32
	@ sp needed
	pop	{r4, r5, r6, r7, r8, r9, r10, fp, pc}
.L10:
	ldr	r1, [fp, #-52]
	rsb	r2, r2, #0
	asr	r2, r2, #1
	add	r2, r1, r2, lsl #3
	mov	r0, r5
	ldm	r2, {r1, r2}
	bl	sub_pniels_from_pt
	b	.L11
.L13:
	ldr	r2, .L26+16
	rsb	r3, r3, #0
	ldr	r2, [r2]
	asr	r3, r3, #1
	ldr	r1, [r2, r3, lsl #2]
	mov	r0, r5
	mov	r2, r4
	bl	sub_niels_from_pt
	b	.L14
.L22:
	ldr	r3, [r7, #4]
	ldr	r2, [fp, #-52]
	asr	r3, r3, #1
	add	r3, r2, r3, lsl #3
	mov	r0, r5
	ldm	r3, {r1, r2}
	bl	pniels_to_pt
	mov	r10, #1
	mov	r9, #0
	b	.L5
.L23:
	mov	r10, #1
	ldr	r3, [r7, #4]
	ldr	r2, [fp, #-52]
	asr	r3, r3, r10
	add	r3, r2, r3, lsl #3
	ldm	r3, {r1, r2}
	mov	r0, r5
	bl	pniels_to_pt
	ldr	r2, .L26+16
	ldr	r3, [r8, #4]
	ldr	r2, [r2]
	asr	r3, r3, r10
	ldr	r1, [r2, r3, lsl #2]
	mov	r0, r5
	mov	r2, r4
	bl	add_niels_to_pt
	mov	r9, r10
	b	.L5
.L21:
	ldr	r3, .L26+20
	mov	r0, r5
	ldr	r1, [r3]
	bl	curve448_point_copy
	ldr	sp, [fp, #-56]
	b	.L1
.L25:
	bl	__stack_chk_fail
.L27:
	.align	2
.L26:
	.word	C448_SCALAR_BITS
	.word	C448_WNAF_VAR_TABLE_BITS
	.word	C448_WNAF_FIXED_TABLE_BITS
	.word	.LC0
	.word	curve448_wnaf_base
	.word	curve448_point_identity
	.size	curve448_base_double_scalarmul_non_secret, .-curve448_base_double_scalarmul_non_secret
	.comm	curve448_wnaf_base,4,4
	.comm	curve448_point_identity,4,4
	.comm	C448_WNAF_VAR_TABLE_BITS,4,4
	.comm	C448_WNAF_FIXED_TABLE_BITS,4,4
	.comm	C448_SCALAR_BITS,4,4
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
