File sliver_83cb34f62800fed14e14547c39337aab8e0427fe2c6310a3fb40ce0ac36168c9.elf
Function:
    005ac6f0
    005ac6f0crypto/internal/fips140/hkdf.Expand[go.shape.*uint8]: ; void crypto/internal/fips140/hkdf.Expand[go.shape.*uint8](uintptr[2] * dict, int64_t h, struct []uint8 pseudorandomKey, struct string info, int keyLen)
    005ac6f0ldr x16, [x28+16]
    005ac6f4sub x17, sp, 176
    005ac6f8subs xzr, x17, x16
    005ac6fcb.ls 0x5ac9f8
    005ac700sub x20, sp, 304
    005ac704stp x29, x30, [x20-8]
    005ac708add sp, x20, 0
    005ac70csub x29, sp, 8
    005ac710str x0, [sp+312]
    005ac714str x1, [sp+320]
    005ac718str x2, [sp+328]
    005ac71cstr x3, [sp+336]
    005ac720str x4, [sp+344]
    005ac724str x5, [sp+352]
    005ac728str x6, [sp+360]
    005ac72cstr x7, [sp+368]
    005ac730str xzr, [sp+96]
    005ac734stp xzr, xzr, [sp+104]
    005ac738ldr x2, [sp+368]
    005ac73cadrp x0, 0x49000
    005ac740add x0, x0, 3072
    005ac744mov x1, xzr
    005ac748bl runtime.makeslice
    005ac74cldr x3, [sp+368]
    005ac750str x0, [sp+120]
    005ac754str xzr, [sp+128]
    005ac758str x3, [sp+136]
    005ac75cldr x3, [sp+312]
    005ac760ldrsb x27, [x3]
    005ac764ldr x0, [x3]
    005ac768str x0, [sp+248]
    005ac76cldr x2, [sp+328]
    005ac770ldr x1, [sp+320]
    005ac774ldr x3, [sp+336]
    005ac778ldr x4, [sp+344]
    005ac77cbl crypto/internal/fips140/hmac.New[go.shape.*uint8]
    005ac780str x0, [sp+144]
    005ac784bl crypto/internal/fips140/hmac.MarkAsUsedInKDF
    005ac788strb wzr, [sp+55]
    005ac78cstr xzr, [sp+152]
    005ac790stp xzr, xzr, [sp+160]
    005ac794b 0x5ac798
    005ac798
    005ac798loc_5ac798:
    005ac798ldr x4, [sp+128]
    005ac79cstr x4, [sp+88]
    005ac7a0ldr x5, [sp+368]
    005ac7a4subs xzr, x4, x5
    005ac7a8b.lt 0x5ac7b0
    005ac7acb 0x5ac9a0
    005ac7b0
    005ac7b0loc_5ac7b0:
    005ac7b0ldrb w4, [sp+55]
    005ac7b4add x5, x4, 1
    005ac7b8strb w5, [sp+55]
    005ac7bcsubs wzr, w4, 255
    005ac7c0b.eq 0x5ac9c8
    005ac7c4b 0x5ac7c8
    005ac7c8
    005ac7c8loc_5ac7c8:
    005ac7c8ubfm x4, x5, 0, 7
    005ac7ccsubs wzr, w4, 1
    005ac7d0b.hi 0x5ac7d8
    005ac7d4b 0x5ac7e4
    005ac7d8
    005ac7d8loc_5ac7d8:
    005ac7d8ldr x0, [sp+144]
    005ac7dcbl crypto/internal/fips140/hmac.(*HMAC).Reset
    005ac7e0b 0x5ac7e8
    005ac7e4
    005ac7e4loc_5ac7e4:
    005ac7e4b 0x5ac7e8
    005ac7e8
    005ac7e8loc_5ac7e8:
    005ac7e8ldr x1, [sp+152]
    005ac7ecldr x2, [sp+160]
    005ac7f0ldr x3, [sp+168]
    005ac7f4ldr x0, [sp+144]
    005ac7f8bl crypto/internal/fips140/hmac.(*HMAC).Write
    005ac7fcldr x1, [sp+352]
    005ac800ldr x2, [sp+360]
    005ac804mov x0, xzr
    005ac808bl runtime.stringtoslicebyte
    005ac80cstr x0, [sp+256]
    005ac810str x1, [sp+264]
    005ac814str x2, [sp+272]
    005ac818ldr x4, [sp+144]
    005ac81cmov x3, x2
    005ac820mov x2, x1
    005ac824mov x1, x0
    005ac828mov x0, x4
    005ac82cbl crypto/internal/fips140/hmac.(*HMAC).Write
    005ac830adrp x0, 0x51000
    005ac834add x0, x0, 2432
    005ac838bl runtime.newobject
    005ac83cstr x0, [sp+208]
    005ac840ldrb w4, [sp+55]
    005ac844strb w4, [x0]
    005ac848ldr x1, [sp+208]
    005ac84cldrsb x27, [x1]
    005ac850b 0x5ac854
    005ac854
    005ac854loc_5ac854:
    005ac854str x1, [sp+216]
    005ac858orr x3, xzr, 1
    005ac85cstr x3, [sp+224]
    005ac860str x3, [sp+232]
    005ac864ldr x0, [sp+144]
    005ac868mov x2, x3
    005ac86cbl crypto/internal/fips140/hmac.(*HMAC).Write
    005ac870ldr x1, [sp+152]
    005ac874ldr x3, [sp+168]
    005ac878b 0x5ac87c
    005ac87c
    005ac87cloc_5ac87c:
    005ac87cb 0x5ac880
    005ac880
    005ac880loc_5ac880:
    005ac880str x1, [sp+256]
    005ac884str xzr, [sp+264]
    005ac888str x3, [sp+272]
    005ac88cldr x0, [sp+144]
    005ac890mov x2, xzr
    005ac894bl crypto/internal/fips140/hmac.(*HMAC).Sum
    005ac898str x0, [sp+152]
    005ac89cstr x1, [sp+160]
    005ac8a0str x2, [sp+168]
    005ac8a4ldr x4, [sp+128]
    005ac8a8str x4, [sp+80]
    005ac8acldr x5, [sp+368]
    005ac8b0sub x4, x5, x4
    005ac8b4str x4, [sp+56]
    005ac8b8str x1, [sp+80]
    005ac8bcsubs xzr, x1, x4
    005ac8c0b.lt 0x5ac8c8
    005ac8c4b 0x5ac8cc
    005ac8c8
    005ac8c8loc_5ac8c8:
    005ac8c8b 0x5ac8d4
    005ac8cc
    005ac8ccloc_5ac8cc:
    005ac8ccmov x1, x4
    005ac8d0b 0x5ac8d4
    005ac8d4
    005ac8d4loc_5ac8d4:
    005ac8d4str x1, [sp+56]
    005ac8d8ldr x2, [sp+168]
    005ac8dcldr x5, [sp+152]
    005ac8e0subs xzr, x1, x2
    005ac8e4b.ls 0x5ac8ec
    005ac8e8b 0x5ac9c4
    005ac8ec
    005ac8ecloc_5ac8ec:
    005ac8ecb 0x5ac8f0
    005ac8f0
    005ac8f0loc_5ac8f0:
    005ac8f0str x5, [sp+256]
    005ac8f4str x1, [sp+264]
    005ac8f8str x2, [sp+272]
    005ac8fcldr x2, [sp+136]
    005ac900ldr x0, [sp+120]
    005ac904ldr x5, [sp+128]
    005ac908str x0, [sp+184]
    005ac90cstr x5, [sp+192]
    005ac910str x2, [sp+200]
    005ac914ldr x6, [sp+264]
    005ac918add x1, x5, x6
    005ac91cstr x1, [sp+72]
    005ac920subs xzr, x2, x1
    005ac924b.hs 0x5ac92c
    005ac928b 0x5ac934
    005ac92c
    005ac92cloc_5ac92c:
    005ac92cstr x1, [sp+192]
    005ac930b 0x5ac954
    005ac934
    005ac934loc_5ac934:
    005ac934ldr x3, [sp+264]
    005ac938adrp x4, 0x49000
    005ac93cadd x4, x4, 3072
    005ac940bl runtime.growslice
    005ac944str x0, [sp+184]
    005ac948str x1, [sp+192]
    005ac94cstr x2, [sp+200]
    005ac950b 0x5ac954
    005ac954
    005ac954loc_5ac954:
    005ac954ldr x3, [sp+264]
    005ac958str x3, [sp+64]
    005ac95cldr x3, [sp+72]
    005ac960ldr x4, [sp+264]
    005ac964sub x3, x3, x4
    005ac968ldr x4, [sp+184]
    005ac96cadd x0, x4, x3
    005ac970str x0, [sp+176]
    005ac974ldr x2, [sp+64]
    005ac978ldr x1, [sp+256]
    005ac97cbl runtime.memmove
    005ac980ldr x3, [sp+184]
    005ac984ldr x4, [sp+192]
    005ac988ldr x5, [sp+200]
    005ac98cstr x3, [sp+120]
    005ac990str x4, [sp+128]
    005ac994str x5, [sp+136]
    005ac998b 0x5ac99c
    005ac99c
    005ac99cloc_5ac99c:
    005ac99cb 0x5ac798
    005ac9a0
    005ac9a0loc_5ac9a0:
    005ac9a0ldr x0, [sp+120]
    005ac9a4ldr x1, [sp+128]
    005ac9a8ldr x2, [sp+136]
    005ac9acstr x0, [sp+96]
    005ac9b0str x1, [sp+104]
    005ac9b4str x2, [sp+112]
    005ac9b8ldp x29, x30, [sp-8]
    005ac9bcadd sp, sp, 304
    005ac9c0ret x30
    005ac9c4
    005ac9c4loc_5ac9c4:
    005ac9c4bl runtime.panicSliceAcap
    005ac9c8
    005ac9c8loc_5ac9c8:
    005ac9c8adrp x0, 0x10b000
    005ac9ccadd x0, x0, 3766
    005ac9d0str x0, [sp+280]
    005ac9d4movz x1, 22
    005ac9d8str x1, [sp+288]
    005ac9dcbl runtime.convTstring
    005ac9e0str x0, [sp+240]
    005ac9e4mov x1, x0
    005ac9e8adrp x0, 0x49000
    005ac9ecadd x0, x0, 2944
    005ac9f0bl runtime.gopanic
    005ac9f4hint
    005ac9f8
    005ac9f8loc_5ac9f8:
    005ac9f8stp x0, x1, [sp+8]
    005ac9fcstp x2, x3, [sp+24]
    005aca00stp x4, x5, [sp+40]
    005aca04stp x6, x7, [sp+56]
    005aca08mov x3, x30
    005aca0cbl runtime.morestack_noctxt.abi0
    005aca10ldp x0, x1, [sp+8]
    005aca14ldp x2, x3, [sp+24]
    005aca18ldp x4, x5, [sp+40]
    005aca1cldp x6, x7, [sp+56]
    005aca20b 0x5ac6f0
    005aca24udf 0
    005aca28udf 0
    005aca2cudf 0
    005ac6f0
    005aca30
    005aca30crypto/internal/fips140/hkdf.Extract[go.shape.*uint8]: ; void crypto/internal/fips140/hkdf.Extract[go.shape.*uint8](uintptr[3] * dict, int64_t h, struct []uint8 secret, struct []uint8 salt)
    005aca30ldr x16, [x28+16]
    005aca34sub x17, sp, 16
    005aca38subs xzr, x17, x16
    005aca3cb.ls 0x5acb6c
    005aca40str x30, [sp-144]!
    005aca44stur x29, [sp-8]
    005aca48sub x29, sp, 8
    005aca4cstr x0, [sp+152]
    005aca50str x1, [sp+160]
    005aca54str x2, [sp+168]
    005aca58str x3, [sp+176]
    005aca5cstr x4, [sp+184]
    005aca60str x5, [sp+192]
    005aca64str x6, [sp+200]
    005aca68str x7, [sp+208]
    005aca6cstr xzr, [sp+64]
    005aca70stp xzr, xzr, [sp+72]
    005aca74ldr x5, [sp+176]
    005aca78str x5, [sp+56]
    005aca7csubs xzr, x5, 14
    005aca80b.lt 0x5aca88
    005aca84b 0x5aca90
    005aca88
    005aca88loc_5aca88:
    005aca88bl crypto/internal/fips140.RecordNonApproved
    005aca8cb 0x5aca94
    005aca90
    005aca90loc_5aca90:
    005aca90b 0x5aca94
    005aca94
    005aca94loc_5aca94:
    005aca94ldr x5, [sp+192]
    005aca98cbnz x5, 0x5acaa0
    005aca9cb 0x5acaa4
    005acaa0
    005acaa0loc_5acaa0:
    005acaa0b 0x5acaf4
    005acaa4
    005acaa4loc_5acaa4:
    005acaa4ldr x26, [sp+160]
    005acaa8ldr x0, [x26]
    005acaacblr x0
    005acab0str x0, [sp+128]
    005acab4ldr x26, [sp+152]
    005acab8ldrsb x27, [x26]
    005acabcldr x1, [x26]
    005acac0blr x1
    005acac4str x0, [sp+56]
    005acac8mov x1, x0
    005acaccmov x2, x1
    005acad0adrp x0, 0x49000
    005acad4add x0, x0, 3072
    005acad8bl runtime.makeslice
    005acadcldr x1, [sp+56]
    005acae0ldr x2, [sp+56]
    005acae4str x0, [sp+192]
    005acae8str x1, [sp+200]
    005acaecstr x2, [sp+208]
    005acaf0b 0x5acaf4
    005acaf4
    005acaf4loc_5acaf4:
    005acaf4ldr x5, [sp+152]
    005acaf8ldrsb x27, [x5]
    005acafcldr x0, [x5+8]
    005acb00str x0, [sp+96]
    005acb04ldr x2, [sp+192]
    005acb08ldr x1, [sp+160]
    005acb0cldr x3, [sp+200]
    005acb10ldr x4, [sp+208]
    005acb14bl crypto/internal/fips140/hmac.New[go.shape.*uint8]
    005acb18str x0, [sp+88]
    005acb1cbl crypto/internal/fips140/hmac.MarkAsUsedInKDF
    005acb20ldr x1, [sp+168]
    005acb24ldr x2, [sp+176]
    005acb28ldr x3, [sp+184]
    005acb2cldr x0, [sp+88]
    005acb30bl crypto/internal/fips140/hmac.(*HMAC).Write
    005acb34ldr x0, [sp+88]
    005acb38mov x1, xzr
    005acb3cmov x2, xzr
    005acb40mov x3, x2
    005acb44bl crypto/internal/fips140/hmac.(*HMAC).Sum
    005acb48str x0, [sp+104]
    005acb4cstr x1, [sp+112]
    005acb50str x2, [sp+120]
    005acb54str x0, [sp+64]
    005acb58str x1, [sp+72]
    005acb5cstr x2, [sp+80]
    005acb60ldur x29, [sp-8]
    005acb64ldr x30, [sp], 144
    005acb68ret x30
    005acb6c
    005acb6cloc_5acb6c:
    005acb6cstp x0, x1, [sp+8]
    005acb70stp x2, x3, [sp+24]
    005acb74stp x4, x5, [sp+40]
    005acb78stp x6, x7, [sp+56]
    005acb7cmov x3, x30
    005acb80bl runtime.morestack_noctxt.abi0
    005acb84ldp x0, x1, [sp+8]
    005acb88ldp x2, x3, [sp+24]
    005acb8cldp x4, x5, [sp+40]
    005acb90ldp x6, x7, [sp+56]
    005acb94b 0x5aca30
    005acb98udf 0
    005acb9cudf 0
    005aca30
    005acba0
    005acba0crypto/internal/fips140/hkdf.Expand[go.shape.interface { BlockSize() int; Reset(); Size() int; Sum([]uint8) []uint8; Write([]uint8) (int, error) }]: ; void crypto/internal/fips140/hkdf.Expand[go.shape.interface { BlockSize() int; Reset(); Size() int; Sum([]uint8) []uint8; Write([]uint8) (int, error) }](uintptr[2] * dict, int64_t h, struct []uint8 pseudorandomKey, struct string info, int keyLen)
    005acba0ldr x16, [x28+16]
    005acba4sub x17, sp, 176
    005acba8subs xzr, x17, x16
    005acbacb.ls 0x5acea8
    005acbb0sub x20, sp, 304
    005acbb4stp x29, x30, [x20-8]
    005acbb8add sp, x20, 0
    005acbbcsub x29, sp, 8
    005acbc0str x0, [sp+312]
    005acbc4str x1, [sp+320]
    005acbc8str x2, [sp+328]
    005acbccstr x3, [sp+336]
    005acbd0str x4, [sp+344]
    005acbd4str x5, [sp+352]
    005acbd8str x6, [sp+360]
    005acbdcstr x7, [sp+368]
    005acbe0str xzr, [sp+96]
    005acbe4stp xzr, xzr, [sp+104]
    005acbe8ldr x2, [sp+368]
    005acbecadrp x0, 0x49000
    005acbf0add x0, x0, 3072
    005acbf4mov x1, xzr
    005acbf8bl runtime.makeslice
    005acbfcldr x3, [sp+368]
    005acc00str x0, [sp+120]
    005acc04str xzr, [sp+128]
    005acc08str x3, [sp+136]
    005acc0cldr x3, [sp+312]
    005acc10ldrsb x27, [x3]
    005acc14ldr x0, [x3]
    005acc18str x0, [sp+248]
    005acc1cldr x2, [sp+328]
    005acc20ldr x1, [sp+320]
    005acc24ldr x3, [sp+336]
    005acc28ldr x4, [sp+344]
    005acc2cbl crypto/internal/fips140/hmac.New[go.shape.interface { BlockSize() int; Reset(); Size() int; Sum([]uint8) []uint8; Write([]uint8) (int, error) }]
    005acc30str x0, [sp+144]
    005acc34bl crypto/internal/fips140/hmac.MarkAsUsedInKDF
    005acc38strb wzr, [sp+55]
    005acc3cstr xzr, [sp+152]
    005acc40stp xzr, xzr, [sp+160]
    005acc44b 0x5acc48
    005acc48
    005acc48loc_5acc48:
    005acc48ldr x4, [sp+128]
    005acc4cstr x4, [sp+88]
    005acc50ldr x5, [sp+368]
    005acc54subs xzr, x4, x5
    005acc58b.lt 0x5acc60
    005acc5cb 0x5ace50
    005acc60
    005acc60loc_5acc60:
    005acc60ldrb w4, [sp+55]
    005acc64add x5, x4, 1
    005acc68strb w5, [sp+55]
    005acc6csubs wzr, w4, 255
    005acc70b.eq 0x5ace78
    005acc74b 0x5acc78
    005acc78
    005acc78loc_5acc78:
    005acc78ubfm x4, x5, 0, 7
    005acc7csubs wzr, w4, 1
    005acc80b.hi 0x5acc88
    005acc84b 0x5acc94
    005acc88
    005acc88loc_5acc88:
    005acc88ldr x0, [sp+144]
    005acc8cbl crypto/internal/fips140/hmac.(*HMAC).Reset
    005acc90b 0x5acc98
    005acc94
    005acc94loc_5acc94:
    005acc94b 0x5acc98
    005acc98
    005acc98loc_5acc98:
    005acc98ldr x1, [sp+152]
    005acc9cldr x2, [sp+160]
    005acca0ldr x3, [sp+168]
    005acca4ldr x0, [sp+144]
    005acca8bl crypto/internal/fips140/hmac.(*HMAC).Write
    005accacldr x1, [sp+352]
    005accb0ldr x2, [sp+360]
    005accb4mov x0, xzr
    005accb8bl runtime.stringtoslicebyte
    005accbcstr x0, [sp+256]
    005accc0str x1, [sp+264]
    005accc4str x2, [sp+272]
    005accc8ldr x4, [sp+144]
    005accccmov x3, x2
    005accd0mov x2, x1
    005accd4mov x1, x0
    005accd8mov x0, x4
    005accdcbl crypto/internal/fips140/hmac.(*HMAC).Write
    005acce0adrp x0, 0x51000
    005acce4add x0, x0, 2432
    005acce8bl runtime.newobject
    005accecstr x0, [sp+208]
    005accf0ldrb w4, [sp+55]
    005accf4strb w4, [x0]
    005accf8ldr x1, [sp+208]
    005accfcldrsb x27, [x1]
    005acd00b 0x5acd04
    005acd04
    005acd04loc_5acd04:
    005acd04str x1, [sp+216]
    005acd08orr x3, xzr, 1
    005acd0cstr x3, [sp+224]
    005acd10str x3, [sp+232]
    005acd14ldr x0, [sp+144]
    005acd18mov x2, x3
    005acd1cbl crypto/internal/fips140/hmac.(*HMAC).Write
    005acd20ldr x1, [sp+152]
    005acd24ldr x3, [sp+168]
    005acd28b 0x5acd2c
    005acd2c
    005acd2cloc_5acd2c:
    005acd2cb 0x5acd30
    005acd30
    005acd30loc_5acd30:
    005acd30str x1, [sp+256]
    005acd34str xzr, [sp+264]
    005acd38str x3, [sp+272]
    005acd3cldr x0, [sp+144]
    005acd40mov x2, xzr
    005acd44bl crypto/internal/fips140/hmac.(*HMAC).Sum
    005acd48str x0, [sp+152]
    005acd4cstr x1, [sp+160]
    005acd50str x2, [sp+168]
    005acd54ldr x4, [sp+128]
    005acd58str x4, [sp+80]
    005acd5cldr x5, [sp+368]
    005acd60sub x4, x5, x4
    005acd64str x4, [sp+56]
    005acd68str x1, [sp+80]
    005acd6csubs xzr, x1, x4
    005acd70b.lt 0x5acd78
    005acd74b 0x5acd7c
    005acd78
    005acd78loc_5acd78:
    005acd78b 0x5acd84
    005acd7c
    005acd7cloc_5acd7c:
    005acd7cmov x1, x4
    005acd80b 0x5acd84
    005acd84
    005acd84loc_5acd84:
    005acd84str x1, [sp+56]
    005acd88ldr x2, [sp+168]
    005acd8cldr x5, [sp+152]
    005acd90subs xzr, x1, x2
    005acd94b.ls 0x5acd9c
    005acd98b 0x5ace74
    005acd9c
    005acd9cloc_5acd9c:
    005acd9cb 0x5acda0
    005acda0
    005acda0loc_5acda0:
    005acda0str x5, [sp+256]
    005acda4str x1, [sp+264]
    005acda8str x2, [sp+272]
    005acdacldr x2, [sp+136]
    005acdb0ldr x0, [sp+120]
    005acdb4ldr x5, [sp+128]
    005acdb8str x0, [sp+184]
    005acdbcstr x5, [sp+192]
    005acdc0str x2, [sp+200]
    005acdc4ldr x6, [sp+264]
    005acdc8add x1, x5, x6
    005acdccstr x1, [sp+72]
    005acdd0subs xzr, x2, x1
    005acdd4b.hs 0x5acddc
    005acdd8b 0x5acde4
    005acddc
    005acddcloc_5acddc:
    005acddcstr x1, [sp+192]
    005acde0b 0x5ace04
    005acde4
    005acde4loc_5acde4:
    005acde4ldr x3, [sp+264]
    005acde8adrp x4, 0x49000
    005acdecadd x4, x4, 3072
    005acdf0bl runtime.growslice
    005acdf4str x0, [sp+184]
    005acdf8str x1, [sp+192]
    005acdfcstr x2, [sp+200]
    005ace00b 0x5ace04
    005ace04
    005ace04loc_5ace04:
    005ace04ldr x3, [sp+264]
    005ace08str x3, [sp+64]
    005ace0cldr x3, [sp+72]
    005ace10ldr x4, [sp+264]
    005ace14sub x3, x3, x4
    005ace18ldr x4, [sp+184]
    005ace1cadd x0, x4, x3
    005ace20str x0, [sp+176]
    005ace24ldr x2, [sp+64]
    005ace28ldr x1, [sp+256]
    005ace2cbl runtime.memmove
    005ace30ldr x3, [sp+184]
    005ace34ldr x4, [sp+192]
    005ace38ldr x5, [sp+200]
    005ace3cstr x3, [sp+120]
    005ace40str x4, [sp+128]
    005ace44str x5, [sp+136]
    005ace48b 0x5ace4c
    005ace4c
    005ace4cloc_5ace4c:
    005ace4cb 0x5acc48
    005ace50
    005ace50loc_5ace50:
    005ace50ldr x0, [sp+120]
    005ace54ldr x1, [sp+128]
    005ace58ldr x2, [sp+136]
    005ace5cstr x0, [sp+96]
    005ace60str x1, [sp+104]
    005ace64str x2, [sp+112]
    005ace68ldp x29, x30, [sp-8]
    005ace6cadd sp, sp, 304
    005ace70ret x30
    005ace74
    005ace74loc_5ace74:
    005ace74bl runtime.panicSliceAcap
    005ace78
    005ace78loc_5ace78:
    005ace78adrp x0, 0x10b000
    005ace7cadd x0, x0, 3766
    005ace80str x0, [sp+280]
    005ace84movz x1, 22
    005ace88str x1, [sp+288]
    005ace8cbl runtime.convTstring
    005ace90str x0, [sp+240]
    005ace94mov x1, x0
    005ace98adrp x0, 0x49000
    005ace9cadd x0, x0, 2944
    005acea0bl runtime.gopanic
    005acea4hint
    005acea8
    005acea8loc_5acea8:
    005acea8stp x0, x1, [sp+8]
    005aceacstp x2, x3, [sp+24]
    005aceb0stp x4, x5, [sp+40]
    005aceb4stp x6, x7, [sp+56]
    005aceb8mov x3, x30
    005acebcbl runtime.morestack_noctxt.abi0
    005acec0ldp x0, x1, [sp+8]
    005acec4ldp x2, x3, [sp+24]
    005acec8ldp x4, x5, [sp+40]
    005aceccldp x6, x7, [sp+56]
    005aced0b 0x5acba0
    005aced4udf 0
    005aced8udf 0
    005acedcudf 0
    005acba0
    005acee0
    005acee0crypto/internal/fips140/hkdf.Extract[go.shape.interface { BlockSize() int; Reset(); Size() int; Sum([]uint8) []uint8; Write([]uint8) (int, error) }]: ; void crypto/internal/fips140/hkdf.Extract[go.shape.interface { BlockSize() int; Reset(); Size() int; Sum([]uint8) []uint8; Write([]uint8) (int, error) }](uintptr[3] * dict, int64_t h, struct []uint8 secret, struct []uint8 salt)
    005acee0ldr x16, [x28+16]
    005acee4sub x17, sp, 16
    005acee8subs xzr, x17, x16
    005aceecb.ls 0x5ad020
    005acef0str x30, [sp-144]!
    005acef4stur x29, [sp-8]
    005acef8sub x29, sp, 8
    005acefcstr x0, [sp+152]
    005acf00str x1, [sp+160]
    005acf04str x2, [sp+168]
    005acf08str x3, [sp+176]
    005acf0cstr x4, [sp+184]
    005acf10str x5, [sp+192]
    005acf14str x6, [sp+200]
    005acf18str x7, [sp+208]
    005acf1cstr xzr, [sp+56]
    005acf20stp xzr, xzr, [sp+64]
    005acf24ldr x5, [sp+176]
    005acf28str x5, [sp+48]
    005acf2csubs xzr, x5, 14
    005acf30b.lt 0x5acf38
    005acf34b 0x5acf40
    005acf38
    005acf38loc_5acf38:
    005acf38bl crypto/internal/fips140.RecordNonApproved
    005acf3cb 0x5acf44
    005acf40
    005acf40loc_5acf40:
    005acf40b 0x5acf44
    005acf44
    005acf44loc_5acf44:
    005acf44ldr x5, [sp+192]
    005acf48cbnz x5, 0x5acf50
    005acf4cb 0x5acf54
    005acf50
    005acf50loc_5acf50:
    005acf50b 0x5acfa8
    005acf54
    005acf54loc_5acf54:
    005acf54ldr x26, [sp+160]
    005acf58ldr x0, [x26]
    005acf5cblr x0
    005acf60str x0, [sp+120]
    005acf64str x1, [sp+128]
    005acf68ldr x26, [sp+152]
    005acf6cldrsb x27, [x26]
    005acf70ldr x2, [x26]
    005acf74blr x2
    005acf78str x0, [sp+48]
    005acf7cmov x1, x0
    005acf80mov x2, x1
    005acf84adrp x0, 0x49000
    005acf88add x0, x0, 3072
    005acf8cbl runtime.makeslice
    005acf90ldr x1, [sp+48]
    005acf94ldr x2, [sp+48]
    005acf98str x0, [sp+192]
    005acf9cstr x1, [sp+200]
    005acfa0str x2, [sp+208]
    005acfa4b 0x5acfa8
    005acfa8
    005acfa8loc_5acfa8:
    005acfa8ldr x5, [sp+152]
    005acfacldrsb x27, [x5]
    005acfb0ldr x0, [x5+8]
    005acfb4str x0, [sp+88]
    005acfb8ldr x2, [sp+192]
    005acfbcldr x1, [sp+160]
    005acfc0ldr x3, [sp+200]
    005acfc4ldr x4, [sp+208]
    005acfc8bl crypto/internal/fips140/hmac.New[go.shape.interface { BlockSize() int; Reset(); Size() int; Sum([]uint8) []uint8; Write([]uint8) (int, error) }]
    005acfccstr x0, [sp+80]
    005acfd0bl crypto/internal/fips140/hmac.MarkAsUsedInKDF
    005acfd4ldr x1, [sp+168]
    005acfd8ldr x2, [sp+176]
    005acfdcldr x3, [sp+184]
    005acfe0ldr x0, [sp+80]
    005acfe4bl crypto/internal/fips140/hmac.(*HMAC).Write
    005acfe8ldr x0, [sp+80]
    005acfecmov x1, xzr
    005acff0mov x2, xzr
    005acff4mov x3, x2
    005acff8bl crypto/internal/fips140/hmac.(*HMAC).Sum
    005acffcstr x0, [sp+96]
    005ad000str x1, [sp+104]
    005ad004str x2, [sp+112]
    005ad008str x0, [sp+56]
    005ad00cstr x1, [sp+64]
    005ad010str x2, [sp+72]
    005ad014ldur x29, [sp-8]
    005ad018ldr x30, [sp], 144
    005ad01cret x30
    005ad020
    005ad020loc_5ad020:
    005ad020stp x0, x1, [sp+8]
    005ad024stp x2, x3, [sp+24]
    005ad028stp x4, x5, [sp+40]
    005ad02cstp x6, x7, [sp+56]
    005ad030mov x3, x30
    005ad034bl runtime.morestack_noctxt.abi0
    005ad038ldp x0, x1, [sp+8]
    005ad03cldp x2, x3, [sp+24]
    005ad040ldp x4, x5, [sp+40]
    005ad044ldp x6, x7, [sp+56]
    005ad048b 0x5acee0
    005ad04cudf 0
    005acee0
    005ad050
    005ad050crypto/internal/fips140/mlkem.init.0: ; void crypto/internal/fips140/mlkem.init.0(void)
    005ad050ldr x16, [x28+16]
    005ad054subs xzr, sp, x16
    005ad058b.ls 0x5ad08c
    005ad05cstr x30, [sp-48]!
    005ad060stur x29, [sp-8]
    005ad064sub x29, sp, 8
    005ad068adrp x0, 0x105000
    005ad06cadd x0, x0, 1504
    005ad070movz x1, 10
    005ad074adrp x2, 0x12c000
    005ad078add x2, x2, 960
    005ad07cbl crypto/internal/fips140.CAST
    005ad080ldur x29, [sp-8]
    005ad084ldr x30, [sp], 48
    005ad088ret x30
    005ad08c
    005ad08cloc_5ad08c:
    005ad08cmov x3, x30
    005ad090bl runtime.morestack_noctxt.abi0
    005ad094b 0x5ad050
    005ad098udf 0
    005ad09cudf 0
    005ad050
    005ad0a0
    005ad0a0crypto/internal/fips140/mlkem.fieldReduceOnce: ; void crypto/internal/fips140/mlkem.fieldReduceOnce(uint16 a)
    005ad0a0str x30, [sp-32]!
    005ad0a4stur x29, [sp-8]
    005ad0a8sub x29, sp, 8
    005ad0acstrh w0, [sp+40]
    005ad0b0strh wzr, [sp+20]
    005ad0b4sub x1, x0, 3329
    005ad0b8strh w1, [sp+22]
    005ad0bcubfm x1, x1, 15, 15
    005ad0c0movz x2, 3329
    005ad0c4madd w1, w2, w1, w0
    005ad0c8sub x1, x1, 3329
    005ad0ccstrh w1, [sp+22]
    005ad0d0strh w1, [sp+20]
    005ad0d4ldrh w0, [sp+20]
    005ad0d8add x29, sp, 24
    005ad0dcadd sp, sp, 32
    005ad0e0ret x30
    005ad0e4udf 0
    005ad0e8udf 0
    005ad0ecudf 0
    005ad0a0
    005ad0f0
    005ad0f0crypto/internal/fips140/mlkem.fieldAdd: ; void crypto/internal/fips140/mlkem.fieldAdd(crypto/internal/fips140/mlkem.fieldElement a, crypto/internal/fips140/mlkem.fieldElement b)
    005ad0f0ldr x16, [x28+16]
    005ad0f4subs xzr, sp, x16
    005ad0f8b.ls 0x5ad138
    005ad0fcstr x30, [sp-32]!
    005ad100stur x29, [sp-8]
    005ad104sub x29, sp, 8
    005ad108strh w0, [sp+40]
    005ad10cstrh w1, [sp+42]
    005ad110strh wzr, [sp+18]
    005ad114add x1, x0, x1
    005ad118strh w1, [sp+20]
    005ad11cldrh w0, [sp+20]
    005ad120bl crypto/internal/fips140/mlkem.fieldReduceOnce
    005ad124strh w0, [sp+22]
    005ad128strh w0, [sp+18]
    005ad12cldur x29, [sp-8]
    005ad130ldr x30, [sp], 32
    005ad134ret x30
    005ad138
    005ad138loc_5ad138:
    005ad138strh w0, [sp+8]
    005ad13cstrh w1, [sp+10]
    005ad140mov x3, x30
    005ad144bl runtime.morestack_noctxt.abi0
    005ad148ldrh w0, [sp+8]
    005ad14cldrh w1, [sp+10]
    005ad150b 0x5ad0f0
    005ad154udf 0
    005ad158udf 0
    005ad15cudf 0
    005ad0f0
    005ad160
    005ad160crypto/internal/fips140/mlkem.fieldSub: ; void crypto/internal/fips140/mlkem.fieldSub(crypto/internal/fips140/mlkem.fieldElement a, crypto/internal/fips140/mlkem.fieldElement b)
    005ad160ldr x16, [x28+16]
    005ad164subs xzr, sp, x16
    005ad168b.ls 0x5ad1ac
    005ad16cstr x30, [sp-32]!
    005ad170stur x29, [sp-8]
    005ad174sub x29, sp, 8
    005ad178strh w0, [sp+40]
    005ad17cstrh w1, [sp+42]
    005ad180strh wzr, [sp+18]
    005ad184sub x1, x0, x1
    005ad188add x1, x1, 3329
    005ad18cstrh w1, [sp+20]
    005ad190ldrh w0, [sp+20]
    005ad194bl crypto/internal/fips140/mlkem.fieldReduceOnce
    005ad198strh w0, [sp+22]
    005ad19cstrh w0, [sp+18]
    005ad1a0ldur x29, [sp-8]
    005ad1a4ldr x30, [sp], 32
    005ad1a8ret x30
    005ad1ac
    005ad1acloc_5ad1ac:
    005ad1acstrh w0, [sp+8]
    005ad1b0strh w1, [sp+10]
    005ad1b4mov x3, x30
    005ad1b8bl runtime.morestack_noctxt.abi0
    005ad1bcldrh w0, [sp+8]
    005ad1c0ldrh w1, [sp+10]
    005ad1c4b 0x5ad160
    005ad1c8udf 0
    005ad1ccudf 0
    005ad160
    005ad1d0
    005ad1d0crypto/internal/fips140/mlkem.fieldReduce: ; void crypto/internal/fips140/mlkem.fieldReduce(uint32 a)
    005ad1d0ldr x16, [x28+16]
    005ad1d4subs xzr, sp, x16
    005ad1d8b.ls 0x5ad224
    005ad1dcstr x30, [sp-32]!
    005ad1e0stur x29, [sp-8]
    005ad1e4sub x29, sp, 8
    005ad1e8str w0, [sp+40]
    005ad1ecstrh wzr, [sp+16]
    005ad1f0ldr w1, [sp+40]
    005ad1f4movz x2, 5039
    005ad1f8madd x1, x1, x2, xzr
    005ad1fcubfm x1, x1, 24, 63
    005ad200str w1, [sp+20]
    005ad204movz x2, 3329
    005ad208msub w0, w2, w1, w0
    005ad20cbl crypto/internal/fips140/mlkem.fieldReduceOnce
    005ad210strh w0, [sp+18]
    005ad214strh w0, [sp+16]
    005ad218ldur x29, [sp-8]
    005ad21cldr x30, [sp], 32
    005ad220ret x30
    005ad224
    005ad224loc_5ad224:
    005ad224str w0, [sp+8]
    005ad228mov x3, x30
    005ad22cbl runtime.morestack_noctxt.abi0
    005ad230ldr w0, [sp+8]
    005ad234b 0x5ad1d0
    005ad238udf 0
    005ad23cudf 0
    005ad1d0
    005ad240
    005ad240crypto/internal/fips140/mlkem.fieldMul: ; void crypto/internal/fips140/mlkem.fieldMul(crypto/internal/fips140/mlkem.fieldElement a, crypto/internal/fips140/mlkem.fieldElement b)
    005ad240ldr x16, [x28+16]
    005ad244subs xzr, sp, x16
    005ad248b.ls 0x5ad28c
    005ad24cstr x30, [sp-32]!
    005ad250stur x29, [sp-8]
    005ad254sub x29, sp, 8
    005ad258strh w0, [sp+40]
    005ad25cstrh w1, [sp+42]
    005ad260strh wzr, [sp+16]
    005ad264ubfm x2, x0, 0, 15
    005ad268ubfm x1, x1, 0, 15
    005ad26cmadd w0, w2, w1, wzr
    005ad270str w0, [sp+20]
    005ad274bl crypto/internal/fips140/mlkem.fieldReduce
    005ad278strh w0, [sp+18]
    005ad27cstrh w0, [sp+16]
    005ad280ldur x29, [sp-8]
    005ad284ldr x30, [sp], 32
    005ad288ret x30
    005ad28c
    005ad28cloc_5ad28c:
    005ad28cstrh w0, [sp+8]
    005ad290strh w1, [sp+10]
    005ad294mov x3, x30
    005ad298bl runtime.morestack_noctxt.abi0
    005ad29cldrh w0, [sp+8]
    005ad2a0ldrh w1, [sp+10]
    005ad2a4b 0x5ad240
    005ad2a8udf 0
    005ad2acudf 0
    005ad240
    005ad2b0
    005ad2b0crypto/internal/fips140/mlkem.fieldMulSub: ; void crypto/internal/fips140/mlkem.fieldMulSub(crypto/internal/fips140/mlkem.fieldElement a, crypto/internal/fips140/mlkem.fieldElement b, crypto/internal/fips140/mlkem.fieldElement c)
    005ad2b0ldr x16, [x28+16]
    005ad2b4subs xzr, sp, x16
    005ad2b8b.ls 0x5ad308
    005ad2bcstr x30, [sp-32]!
    005ad2c0stur x29, [sp-8]
    005ad2c4sub x29, sp, 8
    005ad2c8strh w0, [sp+40]
    005ad2ccstrh w1, [sp+42]
    005ad2d0strh w2, [sp+44]
    005ad2d4strh wzr, [sp+16]
    005ad2d8ubfm x3, x0, 0, 15
    005ad2dcsub x1, x1, x2
    005ad2e0add x1, x1, 3329
    005ad2e4ubfm x1, x1, 0, 15
    005ad2e8madd w0, w3, w1, wzr
    005ad2ecstr w0, [sp+20]
    005ad2f0bl crypto/internal/fips140/mlkem.fieldReduce
    005ad2f4strh w0, [sp+18]
    005ad2f8strh w0, [sp+16]
    005ad2fcldur x29, [sp-8]
    005ad300ldr x30, [sp], 32
    005ad304ret x30
    005ad308
    005ad308loc_5ad308:
    005ad308strh w0, [sp+8]
    005ad30cstrh w1, [sp+10]
    005ad310strh w2, [sp+12]
    005ad314mov x3, x30
    005ad318bl runtime.morestack_noctxt.abi0
    005ad31cldrh w0, [sp+8]
    005ad320ldrh w1, [sp+10]
    005ad324ldrh w2, [sp+12]
    005ad328b 0x5ad2b0
    005ad32cudf 0
    005ad2b0
    005ad330
    005ad330crypto/internal/fips140/mlkem.fieldAddMul: ; void crypto/internal/fips140/mlkem.fieldAddMul(crypto/internal/fips140/mlkem.fieldElement a, crypto/internal/fips140/mlkem.fieldElement b, crypto/internal/fips140/mlkem.fieldElement c, crypto/internal/fips140/mlkem.fieldElement d)
    005ad330ldr x16, [x28+16]
    005ad334subs xzr, sp, x16
    005ad338b.ls 0x5ad394
    005ad33cstr x30, [sp-32]!
    005ad340stur x29, [sp-8]
    005ad344sub x29, sp, 8
    005ad348strh w0, [sp+40]
    005ad34cstrh w1, [sp+42]
    005ad350strh w2, [sp+44]
    005ad354strh w3, [sp+46]
    005ad358strh wzr, [sp+16]
    005ad35cldrh w2, [sp+40]
    005ad360ubfm x1, x1, 0, 15
    005ad364madd w1, w2, w1, wzr
    005ad368str w1, [sp+20]
    005ad36cldrh w2, [sp+44]
    005ad370ldrh w3, [sp+46]
    005ad374madd w0, w3, w2, w1
    005ad378str w0, [sp+20]
    005ad37cbl crypto/internal/fips140/mlkem.fieldReduce
    005ad380strh w0, [sp+18]
    005ad384strh w0, [sp+16]
    005ad388ldur x29, [sp-8]
    005ad38cldr x30, [sp], 32
    005ad390ret x30
    005ad394
    005ad394loc_5ad394:
    005ad394strh w0, [sp+8]
    005ad398strh w1, [sp+10]
    005ad39cstrh w2, [sp+12]
    005ad3a0strh w3, [sp+14]
    005ad3a4mov x3, x30
    005ad3a8bl runtime.morestack_noctxt.abi0
    005ad3acldrh w0, [sp+8]
    005ad3b0ldrh w1, [sp+10]
    005ad3b4ldrh w2, [sp+12]
    005ad3b8ldrh w3, [sp+14]
    005ad3bcb 0x5ad330
    005ad330
    005ad3c0
    005ad3c0crypto/internal/fips140/mlkem.compress: ; void crypto/internal/fips140/mlkem.compress(crypto/internal/fips140/mlkem.fieldElement x, uint8 d)
    005ad3c0str x30, [sp-48]!
    005ad3c4stur x29, [sp-8]
    005ad3c8sub x29, sp, 8
    005ad3ccstrh w0, [sp+56]
    005ad3d0strb w1, [sp+58]
    005ad3d4strh wzr, [sp+22]
    005ad3d8ubfm x1, x0, 0, 15
    005ad3dcldrb w2, [sp+58]
    005ad3e0lslv x1, x1, x2
    005ad3e4subs xzr, x2, 64
    005ad3e8csel x1, x1, xzr, lo
    005ad3ecstr w1, [sp+36]
    005ad3f0mov w2, w1
    005ad3f4movz x3, 5039
    005ad3f8madd x2, x2, x3, xzr
    005ad3fcubfm x3, x2, 24, 63
    005ad400str w3, [sp+28]
    005ad404movz x4, 3329
    005ad408msub w1, w4, w3, w1
    005ad40cstr w1, [sp+24]
    005ad410movz x3, 1664
    005ad414sub x3, x3, x1
    005ad418ubfm x3, x3, 31, 31
    005ad41cadd x2, x3, x2, lsr #24
    005ad420str w2, [sp+28]
    005ad424movz x3, 4993
    005ad428sub x1, x3, x1
    005ad42cubfm x1, x1, 31, 31
    005ad430add x1, x2, x1
    005ad434str w1, [sp+28]
    005ad438ldrb w2, [sp+58]
    005ad43corr x3, xzr, 1
    005ad440lslv x3, x3, x2
    005ad444subs xzr, x2, 64
    005ad448csel x2, x3, xzr, lo
    005ad44csub x2, x2, 1
    005ad450str w2, [sp+32]
    005ad454and x0, x1, x2
    005ad458strh w0, [sp+22]
    005ad45cadd x29, sp, 40
    005ad460add sp, sp, 48
    005ad464ret x30
    005ad468udf 0
    005ad46cudf 0
    005ad3c0
    005ad470
    005ad470crypto/internal/fips140/mlkem.decompress: ; void crypto/internal/fips140/mlkem.decompress(uint16 y, uint8 d)
    005ad470str x30, [sp-32]!
    005ad474stur x29, [sp-8]
    005ad478sub x29, sp, 8
    005ad47cstrh w0, [sp+40]
    005ad480strb w1, [sp+42]
    005ad484strh wzr, [sp+14]
    005ad488ubfm x1, x0, 0, 15
    005ad48cmovz x2, 3329
    005ad490madd w1, w1, w2, wzr
    005ad494str w1, [sp+20]
    005ad498ldrb w2, [sp+42]
    005ad49clsrv x3, x1, x2
    005ad4a0subs xzr, x2, 64
    005ad4a4csel x2, x3, xzr, lo
    005ad4a8str w2, [sp+16]
    005ad4acldrb w3, [sp+42]
    005ad4b0sub x3, x3, 1
    005ad4b4lsrv x1, x1, x3
    005ad4b8ubfm x3, x3, 0, 7
    005ad4bcsubs xzr, x3, 64
    005ad4c0csel x1, x1, xzr, lo
    005ad4c4and x1, x1, 1
    005ad4c8add x0, x2, x1
    005ad4ccstr w0, [sp+16]
    005ad4d0strh w0, [sp+14]
    005ad4d4add x29, sp, 24
    005ad4d8add sp, sp, 32
    005ad4dcret x30
    005ad470
    005ad4e0
    005ad4e0crypto/internal/fips140/mlkem.sliceForAppend: ; void crypto/internal/fips140/mlkem.sliceForAppend(struct []uint8 in, int n)
    005ad4e0ldr x16, [x28+16]
    005ad4e4sub x17, sp, 48
    005ad4e8subs xzr, x17, x16
    005ad4ecb.ls 0x5ad67c
    005ad4f0str x30, [sp-176]!
    005ad4f4stur x29, [sp-8]
    005ad4f8sub x29, sp, 8
    005ad4fcstr x0, [sp+184]
    005ad500str x1, [sp+192]
    005ad504str x2, [sp+200]
    005ad508str x3, [sp+208]
    005ad50cstr xzr, [sp+96]
    005ad510stp xzr, xzr, [sp+104]
    005ad514str xzr, [sp+72]
    005ad518stp xzr, xzr, [sp+80]
    005ad51cldr x6, [sp+192]
    005ad520str x6, [sp+64]
    005ad524ldr x7, [sp+208]
    005ad528add x2, x6, x7
    005ad52cstr x2, [sp+40]
    005ad530ldr x6, [sp+200]
    005ad534str x6, [sp+64]
    005ad538subs xzr, x6, x2
    005ad53cb.ge 0x5ad544
    005ad540b 0x5ad56c
    005ad544
    005ad544loc_5ad544:
    005ad544ldr x6, [sp+200]
    005ad548ldr x7, [sp+184]
    005ad54csubs xzr, x6, x2
    005ad550b.hs 0x5ad558
    005ad554b 0x5ad66c
    005ad558
    005ad558loc_5ad558:
    005ad558b 0x5ad55c
    005ad55c
    005ad55cloc_5ad55c:
    005ad55cstr x7, [sp+96]
    005ad560str x2, [sp+104]
    005ad564str x6, [sp+112]
    005ad568b 0x5ad60c
    005ad56c
    005ad56cloc_5ad56c:
    005ad56cadrp x0, 0x48000
    005ad570add x0, x0, 3072
    005ad574mov x1, x2
    005ad578bl runtime.makeslice
    005ad57cldr x3, [sp+40]
    005ad580ldr x4, [sp+40]
    005ad584str x0, [sp+96]
    005ad588str x3, [sp+104]
    005ad58cstr x4, [sp+112]
    005ad590str x0, [sp+144]
    005ad594str x3, [sp+152]
    005ad598str x4, [sp+160]
    005ad59cldr x3, [sp+192]
    005ad5a0ldr x4, [sp+184]
    005ad5a4ldr x5, [sp+200]
    005ad5a8str x4, [sp+120]
    005ad5acstr x3, [sp+128]
    005ad5b0str x5, [sp+136]
    005ad5b4ldr x4, [sp+152]
    005ad5b8str x4, [sp+56]
    005ad5bcsubs xzr, x4, x3
    005ad5c0b.gt 0x5ad5c8
    005ad5c4b 0x5ad5d0
    005ad5c8
    005ad5c8loc_5ad5c8:
    005ad5c8str x3, [sp+56]
    005ad5ccb 0x5ad5d4
    005ad5d0
    005ad5d0loc_5ad5d0:
    005ad5d0b 0x5ad5d4
    005ad5d4
    005ad5d4loc_5ad5d4:
    005ad5d4ldr x6, [sp+120]
    005ad5d8ldr x7, [sp+144]
    005ad5dcsubs xzr, x6, x7
    005ad5e0b.ne 0x5ad5e8
    005ad5e4b 0x5ad604
    005ad5e8
    005ad5e8loc_5ad5e8:
    005ad5e8ldr x3, [sp+56]
    005ad5ecstr x3, [sp+48]
    005ad5f0ldr x2, [sp+48]
    005ad5f4ldr x1, [sp+120]
    005ad5f8ldr x0, [sp+144]
    005ad5fcbl runtime.memmove
    005ad600b 0x5ad608
    005ad604
    005ad604loc_5ad604:
    005ad604b 0x5ad608
    005ad608
    005ad608loc_5ad608:
    005ad608b 0x5ad60c
    005ad60c
    005ad60cloc_5ad60c:
    005ad60cldr x0, [sp+192]
    005ad610str x0, [sp+64]
    005ad614ldr x1, [sp+104]
    005ad618ldr x6, [sp+112]
    005ad61cldr x7, [sp+96]
    005ad620b 0x5ad624
    005ad624
    005ad624loc_5ad624:
    005ad624subs xzr, x0, x1
    005ad628b.ls 0x5ad630
    005ad62cb 0x5ad668
    005ad630
    005ad630loc_5ad630:
    005ad630sub x5, x6, x0
    005ad634sub x4, x1, x0
    005ad638sub x6, xzr, x5
    005ad63cand x6, x0, x6, asr #63
    005ad640add x3, x7, x6
    005ad644str x3, [sp+72]
    005ad648str x4, [sp+80]
    005ad64cstr x5, [sp+88]
    005ad650ldr x0, [sp+96]
    005ad654ldr x1, [sp+104]
    005ad658ldr x2, [sp+112]
    005ad65cldur x29, [sp-8]
    005ad660ldr x30, [sp], 176
    005ad664ret x30
    005ad668
    005ad668loc_5ad668:
    005ad668bl runtime.panicSliceB
    005ad66c
    005ad66cloc_5ad66c:
    005ad66cmov x1, x2
    005ad670mov x2, x6
    005ad674bl runtime.panicSliceAcap
    005ad678hint
    005ad67c
    005ad67cloc_5ad67c:
    005ad67cstp x0, x1, [sp+8]
    005ad680stp x2, x3, [sp+24]
    005ad684mov x3, x30
    005ad688bl runtime.morestack_noctxt.abi0
    005ad68cldp x0, x1, [sp+8]
    005ad690ldp x2, x3, [sp+24]
    005ad694b 0x5ad4e0
    005ad698udf 0
    005ad69cudf 0
    005ad4e0
    005ad6a0
    005ad6a0crypto/internal/fips140/mlkem.ringCompressAndEncode1: ; void crypto/internal/fips140/mlkem.ringCompressAndEncode1(struct []uint8 s, crypto/internal/fips140/mlkem.ringElement f)
    005ad6a0ldr x16, [x28+16]
    005ad6a4sub x17, sp, 128
    005ad6a8subs xzr, x17, x16
    005ad6acb.ls 0x5ad8dc
    005ad6b0sub x20, sp, 256
    005ad6b4stp x29, x30, [x20-8]
    005ad6b8add sp, x20, 0
    005ad6bcsub x29, sp, 8
    005ad6c0str x0, [sp+776]
    005ad6c4str x1, [sp+784]
    005ad6c8str x2, [sp+792]
    005ad6ccstr xzr, [sp+104]
    005ad6d0stp xzr, xzr, [sp+112]
    005ad6d4str xzr, [sp+176]
    005ad6d8stp xzr, xzr, [sp+184]
    005ad6dcstr xzr, [sp+152]
    005ad6e0stp xzr, xzr, [sp+160]
    005ad6e4ldr x0, [sp+776]
    005ad6e8ldr x1, [sp+784]
    005ad6ecldr x2, [sp+792]
    005ad6f0orr x3, xzr, 32
    005ad6f4bl crypto/internal/fips140/mlkem.sliceForAppend
    005ad6f8str x0, [sp+176]
    005ad6fcstr x1, [sp+184]
    005ad700str x2, [sp+192]
    005ad704str x3, [sp+152]
    005ad708str x4, [sp+160]
    005ad70cstr x5, [sp+168]
    005ad710ldr x4, [sp+184]
    005ad714ldr x5, [sp+192]
    005ad718ldr x6, [sp+176]
    005ad71cstr x6, [sp+224]
    005ad720str x4, [sp+232]
    005ad724str x5, [sp+240]
    005ad728ldr x4, [sp+152]
    005ad72cldr x5, [sp+160]
    005ad730ldr x6, [sp+168]
    005ad734str x4, [sp+200]
    005ad738str x5, [sp+208]
    005ad73cstr x6, [sp+216]
    005ad740ldr x4, [sp+224]
    005ad744ldr x5, [sp+232]
    005ad748ldr x6, [sp+240]
    005ad74cstr x4, [sp+776]
    005ad750str x5, [sp+784]
    005ad754str x6, [sp+792]
    005ad758ldr x4, [sp+208]
    005ad75cldr x5, [sp+200]
    005ad760ldr x6, [sp+216]
    005ad764str x5, [sp+128]
    005ad768str x4, [sp+136]
    005ad76cstr x6, [sp+144]
    005ad770str xzr, [sp+96]
    005ad774str x4, [sp+88]
    005ad778b 0x5ad77c
    005ad77c
    005ad77cloc_5ad77c:
    005ad77cldr x3, [sp+88]
    005ad780ldr x4, [sp+96]
    005ad784subs xzr, x3, x4
    005ad788b.gt 0x5ad790
    005ad78cb 0x5ad7c4
    005ad790
    005ad790loc_5ad790:
    005ad790ldr x0, [sp+96]
    005ad794str x0, [sp+56]
    005ad798ldr x1, [sp+136]
    005ad79cldr x3, [sp+128]
    005ad7a0subs xzr, x1, x0
    005ad7a4b.hi 0x5ad7ac
    005ad7a8b 0x5ad8d4
    005ad7ac
    005ad7acloc_5ad7ac:
    005ad7acstrb wzr, [x3+x0]
    005ad7b0b 0x5ad7b4
    005ad7b4
    005ad7b4loc_5ad7b4:
    005ad7b4ldr x3, [sp+96]
    005ad7b8add x3, x3, 1
    005ad7bcstr x3, [sp+96]
    005ad7c0b 0x5ad77c
    005ad7c4
    005ad7c4loc_5ad7c4:
    005ad7c4str xzr, [sp+80]
    005ad7c8orr x1, xzr, 256
    005ad7ccstr x1, [sp+72]
    005ad7d0b 0x5ad7d4
    005ad7d4
    005ad7d4loc_5ad7d4:
    005ad7d4ldr x3, [sp+72]
    005ad7d8ldr x4, [sp+80]
    005ad7dcsubs xzr, x3, x4
    005ad7e0b.gt 0x5ad7e8
    005ad7e4b 0x5ad8a0
    005ad7e8
    005ad7e8loc_5ad7e8:
    005ad7e8ldr x0, [sp+80]
    005ad7ecstr x0, [sp+48]
    005ad7f0subs xzr, x0, 256
    005ad7f4b.lo 0x5ad7fc
    005ad7f8b 0x5ad8d0
    005ad7fc
    005ad7fcloc_5ad7fc:
    005ad7fcadd x2, sp, 264
    005ad800ldrh w0, [x2+x0]
    005ad804strh w0, [sp+44]
    005ad808orr x1, xzr, 1
    005ad80cbl crypto/internal/fips140/mlkem.compress
    005ad810strh w0, [sp+46]
    005ad814ldr x2, [sp+48]
    005ad818sbfm x3, x2, 63, 63
    005ad81cadd x2, x2, x3, lsr #61
    005ad820sbfm x0, x2, 3, 63
    005ad824str x0, [sp+64]
    005ad828ldr x1, [sp+136]
    005ad82cldr x3, [sp+128]
    005ad830subs xzr, x1, x2, asr #3
    005ad834b.hi 0x5ad83c
    005ad838b 0x5ad8cc
    005ad83c
    005ad83cloc_5ad83c:
    005ad83cldrb w3, [x3+x0]
    005ad840ldrh w4, [sp+46]
    005ad844ldr x5, [sp+48]
    005ad848sbfm x6, x5, 63, 63
    005ad84cadd x6, x5, x6, lsr #61
    005ad850and x6, x6, -8
    005ad854sub x5, x5, x6
    005ad858tbz x5, 63, 0x5ad860
    005ad85cb 0x5ad8c8
    005ad860
    005ad860loc_5ad860:
    005ad860ldr x1, [sp+136]
    005ad864ldr x6, [sp+128]
    005ad868lslv x4, x4, x5
    005ad86csubs xzr, x5, 64
    005ad870csel x4, x4, xzr, lo
    005ad874orr x3, x3, x4
    005ad878subs xzr, x1, x2, asr #3
    005ad87cb.hi 0x5ad884
    005ad880b 0x5ad8c4
    005ad884
    005ad884loc_5ad884:
    005ad884strb w3, [x6+x0]
    005ad888b 0x5ad88c
    005ad88c
    005ad88cloc_5ad88c:
    005ad88cldr x3, [sp+80]
    005ad890add x3, x3, 1
    005ad894str x3, [sp+80]
    005ad898orr x1, xzr, 256
    005ad89cb 0x5ad7d4
    005ad8a0
    005ad8a0loc_5ad8a0:
    005ad8a0ldr x0, [sp+776]
    005ad8a4ldr x1, [sp+784]
    005ad8a8ldr x2, [sp+792]
    005ad8acstr x0, [sp+104]
    005ad8b0str x1, [sp+112]
    005ad8b4str x2, [sp+120]
    005ad8b8ldp x29, x30, [sp-8]
    005ad8bcadd sp, sp, 256
    005ad8c0ret x30
    005ad8c4
    005ad8c4loc_5ad8c4:
    005ad8c4bl runtime.panicIndex
    005ad8c8
    005ad8c8loc_5ad8c8:
    005ad8c8bl runtime.panicshift
    005ad8cc
    005ad8ccloc_5ad8cc:
    005ad8ccbl runtime.panicIndex
    005ad8d0
    005ad8d0loc_5ad8d0:
    005ad8d0bl runtime.panicIndex
    005ad8d4
    005ad8d4loc_5ad8d4:
    005ad8d4bl runtime.panicIndex
    005ad8d8hint
    005ad8dc
    005ad8dcloc_5ad8dc:
    005ad8dcadd x27, sp, 520
    005ad8e0stp x0, x1, [x27]
    005ad8e4str x2, [sp+536]
    005ad8e8mov x3, x30
    005ad8ecbl runtime.morestack_noctxt.abi0
    005ad8f0add x27, sp, 520
    005ad8f4ldp x0, x1, [x27]
    005ad8f8ldr x2, [sp+536]
    005ad8fcb 0x5ad6a0
    005ad6a0
    005ad900
    005ad900crypto/internal/fips140/mlkem.ringDecodeAndDecompress1: ; void crypto/internal/fips140/mlkem.ringDecodeAndDecompress1(uint8[32] * b)
    005ad900ldr x16, [x28+16]
    005ad904sub x17, sp, 448
    005ad908subs xzr, x17, x16
    005ad90cb.ls 0x5ada44
    005ad910sub x20, sp, 576
    005ad914stp x29, x30, [x20-8]
    005ad918add sp, x20, 0
    005ad91csub x29, sp, 8
    005ad920str x0, [sp+1096]
    005ad924add x20, sp, 584
    005ad928adr x27, 16
    005ad92cstp x29, x27, [sp-24]
    005ad930sub x29, sp, 24
    005ad934bl fn_87c90
    005ad938sub x29, sp, 8
    005ad93cadd x20, sp, 32
    005ad940adr x27, 16
    005ad944stp x29, x27, [sp-24]
    005ad948sub x29, sp, 24
    005ad94cbl fn_87c90
    005ad950sub x29, sp, 8
    005ad954str xzr, [sp+560]
    005ad958orr x1, xzr, 256
    005ad95cstr x1, [sp+552]
    005ad960b 0x5ad964
    005ad964
    005ad964loc_5ad964:
    005ad964ldr x2, [sp+552]
    005ad968ldr x3, [sp+560]
    005ad96csubs xzr, x2, x3
    005ad970b.gt 0x5ad978
    005ad974b 0x5ada08
    005ad978
    005ad978loc_5ad978:
    005ad978ldr x2, [sp+560]
    005ad97cstr x2, [sp+544]
    005ad980ldr x3, [sp+1096]
    005ad984ldrsb x27, [x3]
    005ad988sbfm x4, x2, 63, 63
    005ad98cadd x4, x2, x4, lsr #61
    005ad990sbfm x0, x4, 3, 63
    005ad994subs xzr, x0, 32
    005ad998b.lo 0x5ad9a0
    005ad99cb 0x5ada38
    005ad9a0
    005ad9a0loc_5ad9a0:
    005ad9a0ldrb w3, [x3+x0]
    005ad9a4sbfm x4, x2, 63, 63
    005ad9a8add x4, x2, x4, lsr #61
    005ad9acand x4, x4, -8
    005ad9b0sub x2, x2, x4
    005ad9b4tbz x2, 63, 0x5ad9bc
    005ad9b8b 0x5ada34
    005ad9bc
    005ad9bcloc_5ad9bc:
    005ad9bclsrv x3, x3, x2
    005ad9c0subs xzr, x2, 64
    005ad9c4csel x2, x3, xzr, lo
    005ad9c8and x3, x2, 1
    005ad9ccstrb w3, [sp+31]
    005ad9d0ldr x0, [sp+544]
    005ad9d4and x2, x2, 1
    005ad9d8movz x3, 1665
    005ad9dcmadd w2, w2, w3, wzr
    005ad9e0subs xzr, x0, 256
    005ad9e4b.lo 0x5ad9ec
    005ad9e8b 0x5ada30
    005ad9ec
    005ad9ecloc_5ad9ec:
    005ad9ecadd x4, sp, 32
    005ad9f0strh w2, [x4+x0]
    005ad9f4b 0x5ad9f8
    005ad9f8
    005ad9f8loc_5ad9f8:
    005ad9f8ldr x2, [sp+560]
    005ad9fcadd x2, x2, 1
    005ada00str x2, [sp+560]
    005ada04b 0x5ad964
    005ada08
    005ada08loc_5ada08:
    005ada08add x21, sp, 584
    005ada0cadd x20, sp, 32
    005ada10adr x27, 16
    005ada14stp x29, x27, [sp-24]
    005ada18sub x29, sp, 24
    005ada1cbl fn_87e20
    005ada20sub x29, sp, 8
    005ada24ldp x29, x30, [sp-8]
    005ada28add sp, sp, 576
    005ada2cret x30
    005ada30
    005ada30loc_5ada30:
    005ada30bl runtime.panicIndex
    005ada34
    005ada34loc_5ada34:
    005ada34bl runtime.panicshift
    005ada38
    005ada38loc_5ada38:
    005ada38orr x1, xzr, 32
    005ada3cbl runtime.panicIndex
    005ada40hint
    005ada44
    005ada44loc_5ada44:
    005ada44str x0, [sp+520]
    005ada48mov x3, x30
    005ada4cbl runtime.morestack_noctxt.abi0
    005ada50ldr x0, [sp+520]
    005ada54b 0x5ad900
    005ada58udf 0
    005ada5cudf 0
    005ad900
    005ada60
    005ada60crypto/internal/fips140/mlkem.ringCompressAndEncode4: ; void crypto/internal/fips140/mlkem.ringCompressAndEncode4(struct []uint8 s, crypto/internal/fips140/mlkem.ringElement f)
    005ada60ldr x16, [x28+16]
    005ada64sub x17, sp, 96
    005ada68subs xzr, x17, x16
    005ada6cb.ls 0x5adc1c
    005ada70str x30, [sp-224]!
    005ada74stur x29, [sp-8]
    005ada78sub x29, sp, 8
    005ada7cstr x0, [sp+744]
    005ada80str x1, [sp+752]
    005ada84str x2, [sp+760]
    005ada88str xzr, [sp+72]
    005ada8cstp xzr, xzr, [sp+80]
    005ada90str xzr, [sp+144]
    005ada94stp xzr, xzr, [sp+152]
    005ada98str xzr, [sp+120]
    005ada9cstp xzr, xzr, [sp+128]
    005adaa0ldr x0, [sp+744]
    005adaa4ldr x1, [sp+752]
    005adaa8ldr x2, [sp+760]
    005adaacorr x3, xzr, 128
    005adab0bl crypto/internal/fips140/mlkem.sliceForAppend
    005adab4str x0, [sp+144]
    005adab8str x1, [sp+152]
    005adabcstr x2, [sp+160]
    005adac0str x3, [sp+120]
    005adac4str x4, [sp+128]
    005adac8str x5, [sp+136]
    005adaccldr x4, [sp+152]
    005adad0ldr x5, [sp+160]
    005adad4ldr x6, [sp+144]
    005adad8str x6, [sp+192]
    005adadcstr x4, [sp+200]
    005adae0str x5, [sp+208]
    005adae4ldr x4, [sp+120]
    005adae8ldr x5, [sp+128]
    005adaecldr x6, [sp+136]
    005adaf0str x4, [sp+168]
    005adaf4str x5, [sp+176]
    005adaf8str x6, [sp+184]
    005adafcldr x4, [sp+192]
    005adb00ldr x5, [sp+200]
    005adb04ldr x6, [sp+208]
    005adb08str x4, [sp+744]
    005adb0cstr x5, [sp+752]
    005adb10str x6, [sp+760]
    005adb14ldr x4, [sp+168]
    005adb18ldr x5, [sp+176]
    005adb1cldr x6, [sp+184]
    005adb20str x4, [sp+96]
    005adb24str x5, [sp+104]
    005adb28str x6, [sp+112]
    005adb2cstr xzr, [sp+56]
    005adb30b 0x5adb34
    005adb34
    005adb34loc_5adb34:
    005adb34ldr x3, [sp+56]
    005adb38subs xzr, x3, 256
    005adb3cb.lt 0x5adb44
    005adb40b 0x5adbe0
    005adb44
    005adb44loc_5adb44:
    005adb44ldr x0, [sp+56]
    005adb48subs xzr, x0, 256
    005adb4cb.lo 0x5adb54
    005adb50b 0x5adc10
    005adb54
    005adb54loc_5adb54:
    005adb54add x2, sp, 232
    005adb58ldrh w0, [x2+x0]
    005adb5cstrh w0, [sp+52]
    005adb60orr x1, xzr, 4
    005adb64bl crypto/internal/fips140/mlkem.compress
    005adb68strh w0, [sp+48]
    005adb6cldr x2, [sp+56]
    005adb70add x0, x2, 1
    005adb74subs xzr, x0, 256
    005adb78b.lo 0x5adb80
    005adb7cb 0x5adc08
    005adb80
    005adb80loc_5adb80:
    005adb80add x2, sp, 232
    005adb84ldrh w0, [x2+x0]
    005adb88strh w0, [sp+50]
    005adb8corr x1, xzr, 4
    005adb90bl crypto/internal/fips140/mlkem.compress
    005adb94strh w0, [sp+54]
    005adb98ldr x2, [sp+56]
    005adb9cadd x2, x2, x2, lsr #63
    005adba0sbfm x0, x2, 1, 63
    005adba4str x0, [sp+64]
    005adba8ldr x1, [sp+104]
    005adbacldr x3, [sp+96]
    005adbb0ldrh w4, [sp+48]
    005adbb4ldrh w5, [sp+54]
    005adbb8orr x4, x4, x5, lsl #4
    005adbbcsubs xzr, x1, x2, asr #1
    005adbc0b.hi 0x5adbc8
    005adbc4b 0x5adc04
    005adbc8
    005adbc8loc_5adbc8:
    005adbc8strb w4, [x3+x0]
    005adbccb 0x5adbd0
    005adbd0
    005adbd0loc_5adbd0:
    005adbd0ldr x3, [sp+56]
    005adbd4add x3, x3, 2
    005adbd8str x3, [sp+56]
    005adbdcb 0x5adb34
    005adbe0
    005adbe0loc_5adbe0:
    005adbe0ldr x0, [sp+744]
    005adbe4ldr x1, [sp+752]
    005adbe8ldr x2, [sp+760]
    005adbecstr x0, [sp+72]
    005adbf0str x1, [sp+80]
    005adbf4str x2, [sp+88]
    005adbf8ldur x29, [sp-8]
    005adbfcldr x30, [sp], 224
    005adc00ret x30
    005adc04
    005adc04loc_5adc04:
    005adc04bl runtime.panicIndex
    005adc08
    005adc08loc_5adc08:
    005adc08orr x1, xzr, 256
    005adc0cbl runtime.panicIndex
    005adc10
    005adc10loc_5adc10:
    005adc10orr x1, xzr, 256
    005adc14bl runtime.panicIndex
    005adc18hint
    005adc1c
    005adc1cloc_5adc1c:
    005adc1cadd x27, sp, 520
    005adc20stp x0, x1, [x27]
    005adc24str x2, [sp+536]
    005adc28mov x3, x30
    005adc2cbl runtime.morestack_noctxt.abi0
    005adc30add x27, sp, 520
    005adc34ldp x0, x1, [x27]
    005adc38ldr x2, [sp+536]
    005adc3cb 0x5ada60
    005ada60
    005adc40
    005adc40crypto/internal/fips140/mlkem.ringDecodeAndDecompress4: ; void crypto/internal/fips140/mlkem.ringDecodeAndDecompress4(uint8[128] * b)
    005adc40ldr x16, [x28+16]
    005adc44sub x17, sp, 448
    005adc48subs xzr, x17, x16
    005adc4cb.ls 0x5addbc
    005adc50sub x20, sp, 576
    005adc54stp x29, x30, [x20-8]
    005adc58add sp, x20, 0
    005adc5csub x29, sp, 8
    005adc60str x0, [sp+1096]
    005adc64add x20, sp, 584
    005adc68adr x27, 16
    005adc6cstp x29, x27, [sp-24]
    005adc70sub x29, sp, 24
    005adc74bl fn_87c90
    005adc78sub x29, sp, 8
    005adc7cadd x20, sp, 34
    005adc80adr x27, 16
    005adc84stp x29, x27, [sp-24]
    005adc88sub x29, sp, 24
    005adc8cbl fn_87c90
    005adc90sub x29, sp, 8
    005adc94str xzr, [sp+552]
    005adc98b 0x5adc9c
    005adc9c
    005adc9cloc_5adc9c:
    005adc9cldr x2, [sp+552]
    005adca0subs xzr, x2, 256
    005adca4b.lt 0x5adcac
    005adca8b 0x5add6c
    005adcac
    005adcacloc_5adcac:
    005adcacldr x2, [sp+1096]
    005adcb0ldrsb x27, [x2]
    005adcb4ldr x3, [sp+552]
    005adcb8add x3, x3, x3, lsr #63
    005adcbcsbfm x0, x3, 1, 63
    005adcc0subs xzr, x0, 128
    005adcc4b.lo 0x5adccc
    005adcc8b 0x5addb0
    005adccc
    005adcccloc_5adccc:
    005adcccldrb w2, [x2+x0]
    005adcd0and x0, x2, 15
    005adcd4strh w0, [sp+548]
    005adcd8orr x1, xzr, 4
    005adcdcbl crypto/internal/fips140/mlkem.decompress
    005adce0strh w0, [sp+550]
    005adce4ldr x2, [sp+552]
    005adce8subs xzr, x2, 256
    005adcecb.lo 0x5adcf4
    005adcf0b 0x5adda4
    005adcf4
    005adcf4loc_5adcf4:
    005adcf4add x3, sp, 34
    005adcf8strh w0, [x3+x2]
    005adcfcldr x2, [sp+1096]
    005add00ldrsb x27, [x2]
    005add04ldr x3, [sp+552]
    005add08add x3, x3, x3, lsr #63
    005add0csbfm x0, x3, 1, 63
    005add10subs xzr, x0, 128
    005add14b.lo 0x5add1c
    005add18b 0x5add9c
    005add1c
    005add1cloc_5add1c:
    005add1cldrb w2, [x2+x0]
    005add20ubfm x0, x2, 4, 7
    005add24strh w0, [sp+546]
    005add28orr x1, xzr, 4
    005add2cbl crypto/internal/fips140/mlkem.decompress
    005add30strh w0, [sp+550]
    005add34ldr x2, [sp+552]
    005add38add x0, x2, 1
    005add3cstr x0, [sp+560]
    005add40ldrh w2, [sp+550]
    005add44subs xzr, x0, 256
    005add48b.lo 0x5add50
    005add4cb 0x5add94
    005add50
    005add50loc_5add50:
    005add50add x3, sp, 34
    005add54strh w2, [x3+x0]
    005add58b 0x5add5c
    005add5c
    005add5cloc_5add5c:
    005add5cldr x2, [sp+552]
    005add60add x2, x2, 2
    005add64str x2, [sp+552]
    005add68b 0x5adc9c
    005add6c
    005add6cloc_5add6c:
    005add6cadd x21, sp, 584
    005add70add x20, sp, 34
    005add74adr x27, 16
    005add78stp x29, x27, [sp-24]
    005add7csub x29, sp, 24
    005add80bl fn_87e20
    005add84sub x29, sp, 8
    005add88ldp x29, x30, [sp-8]
    005add8cadd sp, sp, 576
    005add90ret x30
    005add94
    005add94loc_5add94:
    005add94orr x1, xzr, 256
    005add98bl runtime.panicIndex
    005add9c
    005add9cloc_5add9c:
    005add9corr x1, xzr, 128
    005adda0bl runtime.panicIndex
    005adda4
    005adda4loc_5adda4:
    005adda4mov x0, x2
    005adda8orr x1, xzr, 256
    005addacbl runtime.panicIndex
    005addb0
    005addb0loc_5addb0:
    005addb0orr x1, xzr, 128
    005addb4bl runtime.panicIndex
    005addb8hint
    005addbc
    005addbcloc_5addbc:
    005addbcstr x0, [sp+520]
    005addc0mov x3, x30
    005addc4bl runtime.morestack_noctxt.abi0
    005addc8ldr x0, [sp+520]
    005addccb 0x5adc40
    005adc40
    005addd0
    005addd0crypto/internal/fips140/mlkem.ringCompressAndEncode10: ; void crypto/internal/fips140/mlkem.ringCompressAndEncode10(struct []uint8 s, crypto/internal/fips140/mlkem.ringElement f)
    005addd0ldr x16, [x28+16]
    005addd4sub x17, sp, 96
    005addd8subs xzr, x17, x16
    005adddcb.ls 0x5ae10c
    005adde0str x30, [sp-224]!
    005adde4stur x29, [sp-8]
    005adde8sub x29, sp, 8
    005addecstr x0, [sp+744]
    005addf0str x1, [sp+752]
    005addf4str x2, [sp+760]
    005addf8str xzr, [sp+72]
    005addfcstp xzr, xzr, [sp+80]
    005ade00str xzr, [sp+144]
    005ade04stp xzr, xzr, [sp+152]
    005ade08str xzr, [sp+120]
    005ade0cstp xzr, xzr, [sp+128]
    005ade10ldr x0, [sp+744]
    005ade14ldr x1, [sp+752]
    005ade18ldr x2, [sp+760]
    005ade1cmovz x3, 320
    005ade20bl crypto/internal/fips140/mlkem.sliceForAppend
    005ade24str x0, [sp+144]
    005ade28str x1, [sp+152]
    005ade2cstr x2, [sp+160]
    005ade30str x3, [sp+120]
    005ade34str x4, [sp+128]
    005ade38str x5, [sp+136]
    005ade3cldr x4, [sp+152]
    005ade40ldr x5, [sp+160]
    005ade44ldr x6, [sp+144]
    005ade48str x6, [sp+192]
    005ade4cstr x4, [sp+200]
    005ade50str x5, [sp+208]
    005ade54ldr x4, [sp+120]
    005ade58ldr x5, [sp+128]
    005ade5cldr x6, [sp+136]
    005ade60str x4, [sp+168]
    005ade64str x5, [sp+176]
    005ade68str x6, [sp+184]
    005ade6cldr x4, [sp+192]
    005ade70ldr x5, [sp+200]
    005ade74ldr x6, [sp+208]
    005ade78str x4, [sp+744]
    005ade7cstr x5, [sp+752]
    005ade80str x6, [sp+760]
    005ade84ldr x4, [sp+168]
    005ade88ldr x5, [sp+176]
    005ade8cldr x6, [sp+184]
    005ade90str x4, [sp+96]
    005ade94str x5, [sp+104]
    005ade98str x6, [sp+112]
    005ade9cstr xzr, [sp+64]
    005adea0b 0x5adea4
    005adea4
    005adea4loc_5adea4:
    005adea4ldr x3, [sp+64]
    005adea8subs xzr, x3, 256
    005adeacb.lt 0x5adeb4
    005adeb0b 0x5ae094
    005adeb4
    005adeb4loc_5adeb4:
    005adeb4str xzr, [sp+56]
    005adeb8ldr x0, [sp+64]
    005adebcsubs xzr, x0, 256
    005adec0b.lo 0x5adec8
    005adec4b 0x5ae100
    005adec8
    005adec8loc_5adec8:
    005adec8add x2, sp, 232
    005adeccldrh w0, [x2+x0]
    005aded0strh w0, [sp+52]
    005aded4movz x1, 10
    005aded8bl crypto/internal/fips140/mlkem.compress
    005adedcstrh w0, [sp+54]
    005adee0ldr x2, [sp+56]
    005adee4ubfm x3, x0, 0, 15
    005adee8orr x2, x2, x3
    005adeecstr x2, [sp+56]
    005adef0ldr x2, [sp+64]
    005adef4add x0, x2, 1
    005adef8subs xzr, x0, 256
    005adefcb.lo 0x5adf04
    005adf00b 0x5ae0f8
    005adf04
    005adf04loc_5adf04:
    005adf04add x2, sp, 232
    005adf08ldrh w0, [x2+x0]
    005adf0cstrh w0, [sp+50]
    005adf10movz x1, 10
    005adf14bl crypto/internal/fips140/mlkem.compress
    005adf18strh w0, [sp+54]
    005adf1cldr x2, [sp+56]
    005adf20ubfm x3, x0, 54, 15
    005adf24orr x2, x2, x3
    005adf28str x2, [sp+56]
    005adf2cldr x2, [sp+64]
    005adf30add x0, x2, 2
    005adf34subs xzr, x0, 256
    005adf38b.lo 0x5adf40
    005adf3cb 0x5ae0f0
    005adf40
    005adf40loc_5adf40:
    005adf40add x2, sp, 232
    005adf44ldrh w0, [x2+x0]
    005adf48strh w0, [sp+48]
    005adf4cmovz x1, 10
    005adf50bl crypto/internal/fips140/mlkem.compress
    005adf54strh w0, [sp+54]
    005adf58ldr x2, [sp+56]
    005adf5cubfm x3, x0, 44, 15
    005adf60orr x2, x2, x3
    005adf64str x2, [sp+56]
    005adf68ldr x2, [sp+64]
    005adf6cadd x0, x2, 3
    005adf70subs xzr, x0, 256
    005adf74b.lo 0x5adf7c
    005adf78b 0x5ae0e8
    005adf7c
    005adf7cloc_5adf7c:
    005adf7cadd x2, sp, 232
    005adf80ldrh w0, [x2+x0]
    005adf84strh w0, [sp+46]
    005adf88movz x1, 10
    005adf8cbl crypto/internal/fips140/mlkem.compress
    005adf90strh w0, [sp+54]
    005adf94ldr x2, [sp+56]
    005adf98ubfm x3, x0, 34, 15
    005adf9corr x2, x2, x3
    005adfa0str x2, [sp+56]
    005adfa4ldr x1, [sp+104]
    005adfa8ldr x3, [sp+96]
    005adfacsubs xzr, x1, 0
    005adfb0b.hi 0x5adfb8
    005adfb4b 0x5ae0e0
    005adfb8
    005adfb8loc_5adfb8:
    005adfb8strb w2, [x3]
    005adfbcldr x1, [sp+104]
    005adfc0ldr x3, [sp+96]
    005adfc4ldr x4, [sp+56]
    005adfc8ubfm x4, x4, 8, 63
    005adfccsubs xzr, x1, 1
    005adfd0b.hi 0x5adfd8
    005adfd4b 0x5ae0d8
    005adfd8
    005adfd8loc_5adfd8:
    005adfd8strb w4, [x3+1]
    005adfdcldr x1, [sp+104]
    005adfe0ldr x3, [sp+96]
    005adfe4ldr x4, [sp+56]
    005adfe8ubfm x4, x4, 16, 63
    005adfecsubs xzr, x1, 2
    005adff0b.hi 0x5adff8
    005adff4b 0x5ae0d0
    005adff8
    005adff8loc_5adff8:
    005adff8strb w4, [x3+2]
    005adffcldr x1, [sp+104]
    005ae000ldr x3, [sp+96]
    005ae004ldr x4, [sp+56]
    005ae008ubfm x4, x4, 24, 63
    005ae00csubs xzr, x1, 3
    005ae010b.hi 0x5ae018
    005ae014b 0x5ae0c8
    005ae018
    005ae018loc_5ae018:
    005ae018strb w4, [x3+3]
    005ae01cldr x1, [sp+104]
    005ae020ldr x3, [sp+96]
    005ae024ldr x4, [sp+56]
    005ae028ubfm x4, x4, 32, 63
    005ae02csubs xzr, x1, 4
    005ae030b.hi 0x5ae038
    005ae034b 0x5ae0c0
    005ae038
    005ae038loc_5ae038:
    005ae038strb w4, [x3+4]
    005ae03cldr x1, [sp+104]
    005ae040ldr x3, [sp+96]
    005ae044ldr x4, [sp+112]
    005ae048b 0x5ae04c
    005ae04c
    005ae04cloc_5ae04c:
    005ae04csubs xzr, x1, 5
    005ae050b.hs 0x5ae058
    005ae054b 0x5ae0b8
    005ae058
    005ae058loc_5ae058:
    005ae058sub x4, x4, 5
    005ae05csub x5, xzr, x4
    005ae060sub x6, x1, 5
    005ae064sbfm x5, x5, 63, 63
    005ae068movz x7, 5
    005ae06cand x5, x5, x7
    005ae070add x3, x3, x5
    005ae074str x3, [sp+96]
    005ae078str x6, [sp+104]
    005ae07cstr x4, [sp+112]
    005ae080b 0x5ae084
    005ae084
    005ae084loc_5ae084:
    005ae084ldr x3, [sp+64]
    005ae088add x3, x3, 4
    005ae08cstr x3, [sp+64]
    005ae090b 0x5adea4
    005ae094
    005ae094loc_5ae094:
    005ae094ldr x0, [sp+744]
    005ae098ldr x1, [sp+752]
    005ae09cldr x2, [sp+760]
    005ae0a0str x0, [sp+72]
    005ae0a4str x1, [sp+80]
    005ae0a8str x2, [sp+88]
    005ae0acldur x29, [sp-8]
    005ae0b0ldr x30, [sp], 224
    005ae0b4ret x30
    005ae0b8
    005ae0b8loc_5ae0b8:
    005ae0b8movz x0, 5
    005ae0bcbl runtime.panicSliceB
    005ae0c0
    005ae0c0loc_5ae0c0:
    005ae0c0orr x0, xzr, 4
    005ae0c4bl runtime.panicIndex
    005ae0c8
    005ae0c8loc_5ae0c8:
    005ae0c8orr x0, xzr, 3
    005ae0ccbl runtime.panicIndex
    005ae0d0
    005ae0d0loc_5ae0d0:
    005ae0d0orr x0, xzr, 2
    005ae0d4bl runtime.panicIndex
    005ae0d8
    005ae0d8loc_5ae0d8:
    005ae0d8orr x0, xzr, 1
    005ae0dcbl runtime.panicIndex
    005ae0e0
    005ae0e0loc_5ae0e0:
    005ae0e0mov x0, xzr
    005ae0e4bl runtime.panicIndex
    005ae0e8
    005ae0e8loc_5ae0e8:
    005ae0e8orr x1, xzr, 256
    005ae0ecbl runtime.panicIndex
    005ae0f0
    005ae0f0loc_5ae0f0:
    005ae0f0orr x1, xzr, 256
    005ae0f4bl runtime.panicIndex
    005ae0f8
    005ae0f8loc_5ae0f8:
    005ae0f8orr x1, xzr, 256
    005ae0fcbl runtime.panicIndex
    005ae100
    005ae100loc_5ae100:
    005ae100orr x1, xzr, 256
    005ae104bl runtime.panicIndex
    005ae108hint
    005ae10c
    005ae10cloc_5ae10c:
    005ae10cadd x27, sp, 520
    005ae110stp x0, x1, [x27]
    005ae114str x2, [sp+536]
    005ae118mov x3, x30
    005ae11cbl runtime.morestack_noctxt.abi0
    005ae120add x27, sp, 520
    005ae124ldp x0, x1, [x27]
    005ae128ldr x2, [sp+536]
    005ae12cb 0x5addd0
    005addd0
    005ae130
    005ae130crypto/internal/fips140/mlkem.ringDecodeAndDecompress10: ; void crypto/internal/fips140/mlkem.ringDecodeAndDecompress10(uint8[320] * bb)
    005ae130ldr x16, [x28+16]
    005ae134sub x17, sp, 496
    005ae138subs xzr, x17, x16
    005ae13cb.ls 0x5ae400
    005ae140sub x20, sp, 624
    005ae144stp x29, x30, [x20-8]
    005ae148add sp, x20, 0
    005ae14csub x29, sp, 8
    005ae150str x0, [sp+1144]
    005ae154add x20, sp, 632
    005ae158adr x27, 16
    005ae15cstp x29, x27, [sp-24]
    005ae160sub x29, sp, 24
    005ae164bl fn_87c90
    005ae168sub x29, sp, 8
    005ae16cldr x2, [sp+1144]
    005ae170ldrsb x27, [x2]
    005ae174b 0x5ae178
    005ae178
    005ae178loc_5ae178:
    005ae178str x2, [sp+592]
    005ae17cmovz x2, 320
    005ae180str x2, [sp+600]
    005ae184str x2, [sp+608]
    005ae188add x20, sp, 38
    005ae18cadr x27, 16
    005ae190stp x29, x27, [sp-24]
    005ae194sub x29, sp, 24
    005ae198bl fn_87c90
    005ae19csub x29, sp, 8
    005ae1a0str xzr, [sp+560]
    005ae1a4b 0x5ae1a8
    005ae1a8
    005ae1a8loc_5ae1a8:
    005ae1a8ldr x2, [sp+560]
    005ae1acsubs xzr, x2, 256
    005ae1b0b.lt 0x5ae1b8
    005ae1b4b 0x5ae380
    005ae1b8
    005ae1b8loc_5ae1b8:
    005ae1b8ldr x1, [sp+600]
    005ae1bcldr x2, [sp+592]
    005ae1c0subs xzr, x1, 0
    005ae1c4b.hi 0x5ae1cc
    005ae1c8b 0x5ae3f4
    005ae1cc
    005ae1ccloc_5ae1cc:
    005ae1ccldrb w2, [x2]
    005ae1d0ldr x1, [sp+600]
    005ae1d4ldr x3, [sp+592]
    005ae1d8subs xzr, x1, 1
    005ae1dcb.hi 0x5ae1e4
    005ae1e0b 0x5ae3ec
    005ae1e4
    005ae1e4loc_5ae1e4:
    005ae1e4ldrb w3, [x3+1]
    005ae1e8ubfm x3, x3, 56, 7
    005ae1ecorr x2, x2, x3
    005ae1f0ldr x1, [sp+600]
    005ae1f4ldr x3, [sp+592]
    005ae1f8subs xzr, x1, 2
    005ae1fcb.hi 0x5ae204
    005ae200b 0x5ae3e4
    005ae204
    005ae204loc_5ae204:
    005ae204ldrb w3, [x3+2]
    005ae208ubfm x3, x3, 48, 7
    005ae20corr x2, x2, x3
    005ae210ldr x1, [sp+600]
    005ae214ldr x3, [sp+592]
    005ae218subs xzr, x1, 3
    005ae21cb.hi 0x5ae224
    005ae220b 0x5ae3dc
    005ae224
    005ae224loc_5ae224:
    005ae224ldrb w3, [x3+3]
    005ae228ubfm x3, x3, 40, 7
    005ae22corr x2, x2, x3
    005ae230ldr x1, [sp+600]
    005ae234ldr x3, [sp+592]
    005ae238subs xzr, x1, 4
    005ae23cb.hi 0x5ae244
    005ae240b 0x5ae3d4
    005ae244
    005ae244loc_5ae244:
    005ae244ldrb w3, [x3+4]
    005ae248ubfm x3, x3, 32, 7
    005ae24corr x2, x2, x3
    005ae250str x2, [sp+552]
    005ae254ldr x1, [sp+600]
    005ae258ldr x2, [sp+592]
    005ae25cldr x3, [sp+608]
    005ae260b 0x5ae264
    005ae264
    005ae264loc_5ae264:
    005ae264subs xzr, x1, 5
    005ae268b.hs 0x5ae270
    005ae26cb 0x5ae3cc
    005ae270
    005ae270loc_5ae270:
    005ae270sub x3, x3, 5
    005ae274sub x4, xzr, x3
    005ae278sub x5, x1, 5
    005ae27csbfm x4, x4, 63, 63
    005ae280movz x6, 5
    005ae284and x4, x4, x6
    005ae288add x2, x2, x4
    005ae28cstr x2, [sp+592]
    005ae290str x5, [sp+600]
    005ae294str x3, [sp+608]
    005ae298ldr x2, [sp+552]
    005ae29cand x0, x2, 1023
    005ae2a0movz x1, 10
    005ae2a4bl crypto/internal/fips140/mlkem.decompress
    005ae2a8strh w0, [sp+550]
    005ae2acldr x2, [sp+560]
    005ae2b0subs xzr, x2, 256
    005ae2b4b.lo 0x5ae2bc
    005ae2b8b 0x5ae3c0
    005ae2bc
    005ae2bcloc_5ae2bc:
    005ae2bcadd x3, sp, 38
    005ae2c0strh w0, [x3+x2]
    005ae2c4ldr x2, [sp+552]
    005ae2c8ubfm x0, x2, 10, 19
    005ae2ccmovz x1, 10
    005ae2d0bl crypto/internal/fips140/mlkem.decompress
    005ae2d4strh w0, [sp+550]
    005ae2d8ldr x2, [sp+560]
    005ae2dcadd x0, x2, 1
    005ae2e0str x0, [sp+584]
    005ae2e4ldrh w2, [sp+550]
    005ae2e8subs xzr, x0, 256
    005ae2ecb.lo 0x5ae2f4
    005ae2f0b 0x5ae3b8
    005ae2f4
    005ae2f4loc_5ae2f4:
    005ae2f4add x3, sp, 38
    005ae2f8strh w2, [x3+x0]
    005ae2fcldr x2, [sp+552]
    005ae300ubfm x0, x2, 20, 29
    005ae304movz x1, 10
    005ae308bl crypto/internal/fips140/mlkem.decompress
    005ae30cstrh w0, [sp+550]
    005ae310ldr x2, [sp+560]
    005ae314add x0, x2, 2
    005ae318str x0, [sp+576]
    005ae31cldrh w2, [sp+550]
    005ae320subs xzr, x0, 256
    005ae324b.lo 0x5ae32c
    005ae328b 0x5ae3b0
    005ae32c
    005ae32cloc_5ae32c:
    005ae32cadd x3, sp, 38
    005ae330strh w2, [x3+x0]
    005ae334ldr x2, [sp+552]
    005ae338ubfm x0, x2, 30, 39
    005ae33cmovz x1, 10
    005ae340bl crypto/internal/fips140/mlkem.decompress
    005ae344strh w0, [sp+550]
    005ae348ldr x2, [sp+560]
    005ae34cadd x0, x2, 3
    005ae350str x0, [sp+568]
    005ae354ldrh w2, [sp+550]
    005ae358subs xzr, x0, 256
    005ae35cb.lo 0x5ae364
    005ae360b 0x5ae3a8
    005ae364
    005ae364loc_5ae364:
    005ae364add x3, sp, 38
    005ae368strh w2, [x3+x0]
    005ae36cb 0x5ae370
    005ae370
    005ae370loc_5ae370:
    005ae370ldr x2, [sp+560]
    005ae374add x2, x2, 4
    005ae378str x2, [sp+560]
    005ae37cb 0x5ae1a8
    005ae380
    005ae380loc_5ae380:
    005ae380add x21, sp, 632
    005ae384add x20, sp, 38
    005ae388adr x27, 16
    005ae38cstp x29, x27, [sp-24]
    005ae390sub x29, sp, 24
    005ae394bl fn_87e20
    005ae398sub x29, sp, 8
    005ae39cldp x29, x30, [sp-8]
    005ae3a0add sp, sp, 624
    005ae3a4ret x30
    005ae3a8
    005ae3a8loc_5ae3a8:
    005ae3a8orr x1, xzr, 256
    005ae3acbl runtime.panicIndex
    005ae3b0
    005ae3b0loc_5ae3b0:
    005ae3b0orr x1, xzr, 256
    005ae3b4bl runtime.panicIndex
    005ae3b8
    005ae3b8loc_5ae3b8:
    005ae3b8orr x1, xzr, 256
    005ae3bcbl runtime.panicIndex
    005ae3c0
    005ae3c0loc_5ae3c0:
    005ae3c0mov x0, x2
    005ae3c4orr x1, xzr, 256
    005ae3c8bl runtime.panicIndex
    005ae3cc
    005ae3ccloc_5ae3cc:
    005ae3ccmovz x0, 5
    005ae3d0bl runtime.panicSliceB
    005ae3d4
    005ae3d4loc_5ae3d4:
    005ae3d4orr x0, xzr, 4
    005ae3d8bl runtime.panicIndex
    005ae3dc
    005ae3dcloc_5ae3dc:
    005ae3dcorr x0, xzr, 3
    005ae3e0bl runtime.panicIndex
    005ae3e4
    005ae3e4loc_5ae3e4:
    005ae3e4orr x0, xzr, 2
    005ae3e8bl runtime.panicIndex
    005ae3ec
    005ae3ecloc_5ae3ec:
    005ae3ecorr x0, xzr, 1
    005ae3f0bl runtime.panicIndex
    005ae3f4
    005ae3f4loc_5ae3f4:
    005ae3f4mov x0, xzr
    005ae3f8bl runtime.panicIndex
    005ae3fchint
    005ae400
    005ae400loc_5ae400:
    005ae400str x0, [sp+520]
    005ae404mov x3, x30
    005ae408bl runtime.morestack_noctxt.abi0
    005ae40cldr x0, [sp+520]
    005ae410b 0x5ae130
    005ae414udf 0
    005ae418udf 0
    005ae41cudf 0
    005ae130
    005ae420
    005ae420crypto/internal/fips140/mlkem.samplePolyCBD: ; void crypto/internal/fips140/mlkem.samplePolyCBD(struct []uint8 s, uint8 b)
    005ae420ldr x16, [x28+16]
    005ae424sub x17, sp, 656
    005ae428subs xzr, x17, x16
    005ae42cb.ls 0x5ae680
    005ae430sub x20, sp, 784
    005ae434stp x29, x30, [x20-8]
    005ae438add sp, x20, 0
    005ae43csub x29, sp, 8
    005ae440str x0, [sp+1304]
    005ae444str x1, [sp+1312]
    005ae448str x2, [sp+1320]
    005ae44cstrb w3, [sp+1328]
    005ae450add x20, sp, 792
    005ae454adr x27, 16
    005ae458stp x29, x27, [sp-24]
    005ae45csub x29, sp, 24
    005ae460bl fn_87c90
    005ae464sub x29, sp, 8
    005ae468bl crypto/internal/fips140/sha3.NewShake256
    005ae46cstr x0, [sp+712]
    005ae470ldr x2, [sp+1312]
    005ae474ldr x3, [sp+1320]
    005ae478ldr x1, [sp+1304]
    005ae47cbl crypto/internal/fips140/sha3.(*SHAKE).Write
    005ae480strb wzr, [sp+181]
    005ae484add x0, sp, 181
    005ae488str x0, [sp+744]
    005ae48cldrsb x27, [x0]
    005ae490ldrb w1, [sp+1328]
    005ae494strb w1, [x0]
    005ae498ldr x1, [sp+744]
    005ae49cldrsb x27, [x1]
    005ae4a0b 0x5ae4a4
    005ae4a4
    005ae4a4loc_5ae4a4:
    005ae4a4str x1, [sp+752]
    005ae4a8orr x3, xzr, 1
    005ae4acstr x3, [sp+760]
    005ae4b0str x3, [sp+768]
    005ae4b4ldr x0, [sp+712]
    005ae4b8mov x2, x3
    005ae4bcbl crypto/internal/fips140/sha3.(*SHAKE).Write
    005ae4c0b 0x5ae4c4
    005ae4c4
    005ae4c4loc_5ae4c4:
    005ae4c4add x20, sp, 53
    005ae4c8adr x27, 16
    005ae4ccstp x29, x27, [sp-24]
    005ae4d0sub x29, sp, 24
    005ae4d4bl fn_87cf0
    005ae4d8sub x29, sp, 8
    005ae4dcadd x1, sp, 53
    005ae4e0ldrsb x27, [x1]
    005ae4e4b 0x5ae4e8
    005ae4e8
    005ae4e8loc_5ae4e8:
    005ae4e8str x1, [sp+720]
    005ae4ecorr x3, xzr, 128
    005ae4f0str x3, [sp+728]
    005ae4f4str x3, [sp+736]
    005ae4f8ldr x0, [sp+712]
    005ae4fcmov x2, x3
    005ae500bl crypto/internal/fips140/sha3.(*SHAKE).Read
    005ae504add x20, sp, 182
    005ae508adr x27, 16
    005ae50cstp x29, x27, [sp-24]
    005ae510sub x29, sp, 24
    005ae514bl fn_87c90
    005ae518sub x29, sp, 8
    005ae51cstr xzr, [sp+696]
    005ae520b 0x5ae524
    005ae524
    005ae524loc_5ae524:
    005ae524ldr x2, [sp+696]
    005ae528subs xzr, x2, 256
    005ae52cb.lt 0x5ae534
    005ae530b 0x5ae63c
    005ae534
    005ae534loc_5ae534:
    005ae534ldr x1, [sp+728]
    005ae538ldr x2, [sp+720]
    005ae53cldr x3, [sp+696]
    005ae540add x3, x3, x3, lsr #63
    005ae544sbfm x0, x3, 1, 63
    005ae548subs xzr, x1, x3, asr #1
    005ae54cb.hi 0x5ae554
    005ae550b 0x5ae678
    005ae554
    005ae554loc_5ae554:
    005ae554ldrb w2, [x2+x0]
    005ae558strb w2, [sp+52]
    005ae55cubfm x3, x2, 7, 7
    005ae560strb w3, [sp+44]
    005ae564ubfm x3, x2, 6, 6
    005ae568strb w3, [sp+45]
    005ae56cubfm x3, x2, 5, 5
    005ae570strb w3, [sp+46]
    005ae574ubfm x2, x2, 4, 4
    005ae578strb w2, [sp+47]
    005ae57cldrb w2, [sp+52]
    005ae580ubfm x2, x2, 3, 3
    005ae584strb w2, [sp+48]
    005ae588ldrb w3, [sp+52]
    005ae58cubfm x3, x3, 2, 2
    005ae590strb w3, [sp+49]
    005ae594ldrb w4, [sp+52]
    005ae598ubfm x4, x4, 1, 1
    005ae59cstrb w4, [sp+50]
    005ae5a0ldrb w5, [sp+52]
    005ae5a4and x5, x5, 1
    005ae5a8strb w5, [sp+51]
    005ae5acadd x4, x5, x4
    005ae5b0ubfm x0, x4, 0, 7
    005ae5b4add x2, x3, x2
    005ae5b8ubfm x1, x2, 0, 7
    005ae5bcbl crypto/internal/fips140/mlkem.fieldSub
    005ae5c0strh w0, [sp+694]
    005ae5c4ldr x2, [sp+696]
    005ae5c8subs xzr, x2, 256
    005ae5ccb.lo 0x5ae5d4
    005ae5d0b 0x5ae66c
    005ae5d4
    005ae5d4loc_5ae5d4:
    005ae5d4add x3, sp, 182
    005ae5d8strh w0, [x3+x2]
    005ae5dcldrb w2, [sp+46]
    005ae5e0ldrb w3, [sp+47]
    005ae5e4add x2, x3, x2
    005ae5e8ubfm x0, x2, 0, 7
    005ae5ecldrb w2, [sp+45]
    005ae5f0ldrb w3, [sp+44]
    005ae5f4add x2, x2, x3
    005ae5f8ubfm x1, x2, 0, 7
    005ae5fcbl crypto/internal/fips140/mlkem.fieldSub
    005ae600strh w0, [sp+694]
    005ae604ldr x2, [sp+696]
    005ae608add x0, x2, 1
    005ae60cstr x0, [sp+704]
    005ae610ldrh w2, [sp+694]
    005ae614subs xzr, x0, 256
    005ae618b.lo 0x5ae620
    005ae61cb 0x5ae664
    005ae620
    005ae620loc_5ae620:
    005ae620add x3, sp, 182
    005ae624strh w2, [x3+x0]
    005ae628b 0x5ae62c
    005ae62c
    005ae62cloc_5ae62c:
    005ae62cldr x2, [sp+696]
    005ae630add x2, x2, 2
    005ae634str x2, [sp+696]
    005ae638b 0x5ae524
    005ae63c
    005ae63cloc_5ae63c:
    005ae63cadd x21, sp, 792
    005ae640add x20, sp, 182
    005ae644adr x27, 16
    005ae648stp x29, x27, [sp-24]
    005ae64csub x29, sp, 24
    005ae650bl fn_87e20
    005ae654sub x29, sp, 8
    005ae658ldp x29, x30, [sp-8]
    005ae65cadd sp, sp, 784
    005ae660ret x30
    005ae664
    005ae664loc_5ae664:
    005ae664orr x1, xzr, 256
    005ae668bl runtime.panicIndex
    005ae66c
    005ae66cloc_5ae66c:
    005ae66cmov x0, x2
    005ae670orr x1, xzr, 256
    005ae674bl runtime.panicIndex
    005ae678
    005ae678loc_5ae678:
    005ae678bl runtime.panicIndex
    005ae67chint
    005ae680
    005ae680loc_5ae680:
    005ae680add x27, sp, 520
    005ae684stp x0, x1, [x27]
    005ae688str x2, [sp+536]
    005ae68cstrb w3, [sp+544]
    005ae690mov x3, x30
    005ae694bl runtime.morestack_noctxt.abi0
    005ae698add x27, sp, 520
    005ae69cldp x0, x1, [x27]
    005ae6a0ldr x2, [sp+536]
    005ae6a4ldrb w3, [sp+544]
    005ae6a8b 0x5ae420
    005ae6acudf 0
    005ae420
    005ae6b0
    005ae6b0crypto/internal/fips140/mlkem.nttMul: ; void crypto/internal/fips140/mlkem.nttMul(crypto/internal/fips140/mlkem.nttElement f, crypto/internal/fips140/mlkem.nttElement g)
    005ae6b0ldr x16, [x28+16]
    005ae6b4sub x17, sp, 448
    005ae6b8subs xzr, x17, x16
    005ae6bcb.ls 0x5ae8ac
    005ae6c0sub x20, sp, 576
    005ae6c4stp x29, x30, [x20-8]
    005ae6c8add sp, x20, 0
    005ae6ccsub x29, sp, 8
    005ae6d0add x20, sp, 1608
    005ae6d4adr x27, 16
    005ae6d8stp x29, x27, [sp-24]
    005ae6dcsub x29, sp, 24
    005ae6e0bl fn_87c90
    005ae6e4sub x29, sp, 8
    005ae6e8add x20, sp, 26
    005ae6ecadr x27, 16
    005ae6f0stp x29, x27, [sp-24]
    005ae6f4sub x29, sp, 24
    005ae6f8bl fn_87c90
    005ae6fcsub x29, sp, 8
    005ae700str xzr, [sp+552]
    005ae704b 0x5ae708
    005ae708
    005ae708loc_5ae708:
    005ae708ldr x2, [sp+552]
    005ae70csubs xzr, x2, 256
    005ae710b.lt 0x5ae718
    005ae714b 0x5ae838
    005ae718
    005ae718loc_5ae718:
    005ae718ldr x0, [sp+552]
    005ae71csubs xzr, x0, 256
    005ae720b.lo 0x5ae728
    005ae724b 0x5ae8a0
    005ae728
    005ae728loc_5ae728:
    005ae728add x2, sp, 584
    005ae72cldrh w3, [x2+x0]
    005ae730strh w3, [sp+544]
    005ae734ldr x3, [sp+552]
    005ae738add x0, x3, 1
    005ae73csubs xzr, x0, 256
    005ae740b.lo 0x5ae748
    005ae744b 0x5ae898
    005ae748
    005ae748loc_5ae748:
    005ae748ldrh w0, [x2+x0]
    005ae74cstrh w0, [sp+542]
    005ae750ldr x3, [sp+552]
    005ae754subs xzr, x3, 256
    005ae758b.lo 0x5ae760
    005ae75cb 0x5ae88c
    005ae760
    005ae760loc_5ae760:
    005ae760add x4, sp, 1096
    005ae764ldrh w3, [x4+x3]
    005ae768strh w3, [sp+540]
    005ae76cldr x3, [sp+552]
    005ae770add x3, x3, 1
    005ae774subs xzr, x3, 256
    005ae778b.lo 0x5ae780
    005ae77cb 0x5ae880
    005ae780
    005ae780loc_5ae780:
    005ae780ldrh w1, [x4+x3]
    005ae784strh w1, [sp+538]
    005ae788bl crypto/internal/fips140/mlkem.fieldMul
    005ae78cstrh w0, [sp+546]
    005ae790ldr x2, [sp+552]
    005ae794add x2, x2, x2, lsr #63
    005ae798sbfm x2, x2, 1, 63
    005ae79csubs xzr, x2, 128
    005ae7a0b.lo 0x5ae7a8
    005ae7a4b 0x5ae874
    005ae7a8
    005ae7a8loc_5ae7a8:
    005ae7a8adrp x4, 0x447000
    005ae7acadd x4, x4, 800
    005ae7b0ldrh w3, [x4+x2]
    005ae7b4strh w3, [sp+548]
    005ae7b8ldrh w4, [sp+544]
    005ae7bcldrh w1, [sp+540]
    005ae7c0mov x2, x0
    005ae7c4mov x0, x4
    005ae7c8bl crypto/internal/fips140/mlkem.fieldAddMul
    005ae7ccstrh w0, [sp+550]
    005ae7d0ldr x4, [sp+552]
    005ae7d4subs xzr, x4, 256
    005ae7d8b.lo 0x5ae7e0
    005ae7dcb 0x5ae868
    005ae7e0
    005ae7e0loc_5ae7e0:
    005ae7e0add x5, sp, 26
    005ae7e4strh w0, [x5+x4]
    005ae7e8ldrh w1, [sp+538]
    005ae7ecldrh w2, [sp+542]
    005ae7f0ldrh w3, [sp+540]
    005ae7f4ldrh w0, [sp+544]
    005ae7f8bl crypto/internal/fips140/mlkem.fieldAddMul
    005ae7fcstrh w0, [sp+550]
    005ae800ldr x4, [sp+552]
    005ae804add x0, x4, 1
    005ae808str x0, [sp+560]
    005ae80cldrh w4, [sp+550]
    005ae810subs xzr, x0, 256
    005ae814b.lo 0x5ae81c
    005ae818b 0x5ae860
    005ae81c
    005ae81cloc_5ae81c:
    005ae81cadd x2, sp, 26
    005ae820strh w4, [x2+x0]
    005ae824b 0x5ae828
    005ae828
    005ae828loc_5ae828:
    005ae828ldr x2, [sp+552]
    005ae82cadd x2, x2, 2
    005ae830str x2, [sp+552]
    005ae834b 0x5ae708
    005ae838
    005ae838loc_5ae838:
    005ae838add x21, sp, 1608
    005ae83cadd x20, sp, 26
    005ae840adr x27, 16
    005ae844stp x29, x27, [sp-24]
    005ae848sub x29, sp, 24
    005ae84cbl fn_87e20
    005ae850sub x29, sp, 8
    005ae854ldp x29, x30, [sp-8]
    005ae858add sp, sp, 576
    005ae85cret x30
    005ae860
    005ae860loc_5ae860:
    005ae860orr x1, xzr, 256
    005ae864bl runtime.panicIndex
    005ae868
    005ae868loc_5ae868:
    005ae868mov x0, x4
    005ae86corr x1, xzr, 256
    005ae870bl runtime.panicIndex
    005ae874
    005ae874loc_5ae874:
    005ae874mov x0, x2
    005ae878orr x1, xzr, 128
    005ae87cbl runtime.panicIndex
    005ae880
    005ae880loc_5ae880:
    005ae880mov x0, x3
    005ae884orr x1, xzr, 256
    005ae888bl runtime.panicIndex
    005ae88c
    005ae88cloc_5ae88c:
    005ae88cmov x0, x3
    005ae890orr x1, xzr, 256
    005ae894bl runtime.panicIndex
    005ae898
    005ae898loc_5ae898:
    005ae898orr x1, xzr, 256
    005ae89cbl runtime.panicIndex
    005ae8a0
    005ae8a0loc_5ae8a0:
    005ae8a0orr x1, xzr, 256
    005ae8a4bl runtime.panicIndex
    005ae8a8hint
    005ae8ac
    005ae8acloc_5ae8ac:
    005ae8acmov x3, x30
    005ae8b0bl runtime.morestack_noctxt.abi0
    005ae8b4b 0x5ae6b0
    005ae8b8udf 0
    005ae8bcudf 0
    005ae6b0
    005ae8c0
    005ae8c0crypto/internal/fips140/mlkem.ntt: ; void crypto/internal/fips140/mlkem.ntt(crypto/internal/fips140/mlkem.ringElement f)
    005ae8c0ldr x16, [x28+16]
    005ae8c4sub x17, sp, 80
    005ae8c8subs xzr, x17, x16
    005ae8ccb.ls 0x5aebf4
    005ae8d0str x30, [sp-208]!
    005ae8d4stur x29, [sp-8]
    005ae8d8sub x29, sp, 8
    005ae8dcadd x20, sp, 728
    005ae8e0adr x27, 16
    005ae8e4stp x29, x27, [sp-24]
    005ae8e8sub x29, sp, 24
    005ae8ecbl fn_87c90
    005ae8f0sub x29, sp, 8
    005ae8f4orr x3, xzr, 1
    005ae8f8str x3, [sp+64]
    005ae8fcorr x1, xzr, 128
    005ae900str x1, [sp+56]
    005ae904b 0x5ae908
    005ae908
    005ae908loc_5ae908:
    005ae908ldr x3, [sp+56]
    005ae90csubs xzr, x3, 2
    005ae910b.ge 0x5ae918
    005ae914b 0x5ae920
    005ae918
    005ae918loc_5ae918:
    005ae918str xzr, [sp+48]
    005ae91cb 0x5ae948
    005ae920
    005ae920loc_5ae920:
    005ae920add x21, sp, 728
    005ae924add x20, sp, 216
    005ae928adr x27, 16
    005ae92cstp x29, x27, [sp-24]
    005ae930sub x29, sp, 24
    005ae934bl fn_87e20
    005ae938sub x29, sp, 8
    005ae93cldur x29, [sp-8]
    005ae940ldr x30, [sp], 208
    005ae944ret x30
    005ae948
    005ae948loc_5ae948:
    005ae948ldr x3, [sp+48]
    005ae94csubs xzr, x3, 256
    005ae950b.lt 0x5ae958
    005ae954b 0x5aea80
    005ae958
    005ae958loc_5ae958:
    005ae958ldr x0, [sp+64]
    005ae95csubs xzr, x0, 128
    005ae960b.lo 0x5ae968
    005ae964b 0x5aebec
    005ae968
    005ae968loc_5ae968:
    005ae968adrp x3, 0x447000
    005ae96cadd x3, x3, 1056
    005ae970ldrh w3, [x3+x0]
    005ae974strh w3, [sp+36]
    005ae978ldr x3, [sp+64]
    005ae97cadd x3, x3, 1
    005ae980str x3, [sp+64]
    005ae984ldr x3, [sp+56]
    005ae988ldr x4, [sp+48]
    005ae98cadd x3, x4, x3
    005ae990str x3, [sp+96]
    005ae994add x20, sp, 216
    005ae998ldrsb x27, [x20]
    005ae99cldr x0, [sp+48]
    005ae9a0subs xzr, x3, 256
    005ae9a4b.ls 0x5ae9ac
    005ae9a8b 0x5aebe0
    005ae9ac
    005ae9acloc_5ae9ac:
    005ae9acsubs xzr, x0, x3
    005ae9b0b.ls 0x5ae9b8
    005ae9b4b 0x5aebd8
    005ae9b8
    005ae9b8loc_5ae9b8:
    005ae9b8orr x2, xzr, 256
    005ae9bcsub x4, x2, x0
    005ae9c0sub x3, x3, x0
    005ae9c4sub x5, xzr, x4
    005ae9c8ubfm x6, x0, 63, 62
    005ae9ccand x5, x6, x5, asr #63
    005ae9d0add x5, x20, x5
    005ae9d4str x5, [sp+176]
    005ae9d8str x3, [sp+184]
    005ae9dcstr x4, [sp+192]
    005ae9e0ldr x3, [sp+48]
    005ae9e4ldr x4, [sp+56]
    005ae9e8add x0, x3, x4
    005ae9ecstr x0, [sp+88]
    005ae9f0ldr x3, [sp+48]
    005ae9f4ldr x4, [sp+56]
    005ae9f8add x3, x3, x4
    005ae9fcldr x4, [sp+56]
    005aea00add x3, x3, x4
    005aea04str x3, [sp+80]
    005aea08ldrsb x27, [x20]
    005aea0csubs xzr, x3, 256
    005aea10b.ls 0x5aea18
    005aea14b 0x5aebd0
    005aea18
    005aea18loc_5aea18:
    005aea18subs xzr, x3, x0
    005aea1cb.hs 0x5aea24
    005aea20b 0x5aebc8
    005aea24
    005aea24loc_5aea24:
    005aea24sub x4, x2, x0
    005aea28sub x3, x3, x0
    005aea2csub x5, xzr, x4
    005aea30ubfm x6, x0, 63, 62
    005aea34and x5, x6, x5, asr #63
    005aea38add x5, x20, x5
    005aea3cstr x5, [sp+152]
    005aea40str x3, [sp+160]
    005aea44str x4, [sp+168]
    005aea48ldr x3, [sp+176]
    005aea4cldr x4, [sp+184]
    005aea50ldr x5, [sp+192]
    005aea54str x3, [sp+128]
    005aea58str x4, [sp+136]
    005aea5cstr x5, [sp+144]
    005aea60ldr x3, [sp+152]
    005aea64ldr x4, [sp+160]
    005aea68ldr x5, [sp+168]
    005aea6cstr x3, [sp+104]
    005aea70str x4, [sp+112]
    005aea74str x5, [sp+120]
    005aea78str xzr, [sp+72]
    005aea7cb 0x5aea98
    005aea80
    005aea80loc_5aea80:
    005aea80b 0x5aea84
    005aea84
    005aea84loc_5aea84:
    005aea84ldr x3, [sp+56]
    005aea88add x3, x3, x3, lsr #63
    005aea8csbfm x3, x3, 1, 63
    005aea90str x3, [sp+56]
    005aea94b 0x5ae908
    005aea98
    005aea98loc_5aea98:
    005aea98ldr x3, [sp+56]
    005aea9cldr x4, [sp+72]
    005aeaa0subs xzr, x3, x4
    005aeaa4b.gt 0x5aeaac
    005aeaa8b 0x5aeb8c
    005aeaac
    005aeaacloc_5aeaac:
    005aeaacldr x0, [sp+72]
    005aeab0ldr x3, [sp+112]
    005aeab4ldr x4, [sp+104]
    005aeab8subs xzr, x3, x0
    005aeabcb.hi 0x5aeac4
    005aeac0b 0x5aebc0
    005aeac4
    005aeac4loc_5aeac4:
    005aeac4ldrh w1, [x4+x0]
    005aeac8strh w1, [sp+44]
    005aeaccldrh w0, [sp+36]
    005aead0bl crypto/internal/fips140/mlkem.fieldMul
    005aead4strh w0, [sp+38]
    005aead8ldr x2, [sp+72]
    005aeadcldr x1, [sp+136]
    005aeae0ldr x3, [sp+128]
    005aeae4subs xzr, x2, x1
    005aeae8b.lo 0x5aeaf0
    005aeaecb 0x5aebb8
    005aeaf0
    005aeaf0loc_5aeaf0:
    005aeaf0ldrh w2, [x3+x2]
    005aeaf4strh w2, [sp+42]
    005aeaf8mov x1, x0
    005aeafcmov x0, x2
    005aeb00bl crypto/internal/fips140/mlkem.fieldSub
    005aeb04strh w0, [sp+46]
    005aeb08ldr x2, [sp+72]
    005aeb0cldr x1, [sp+112]
    005aeb10ldr x3, [sp+104]
    005aeb14subs xzr, x2, x1
    005aeb18b.lo 0x5aeb20
    005aeb1cb 0x5aebb0
    005aeb20
    005aeb20loc_5aeb20:
    005aeb20strh w0, [x3+x2]
    005aeb24ldr x0, [sp+72]
    005aeb28ldr x1, [sp+136]
    005aeb2cldr x2, [sp+128]
    005aeb30subs xzr, x0, x1
    005aeb34b.lo 0x5aeb3c
    005aeb38b 0x5aebac
    005aeb3c
    005aeb3cloc_5aeb3c:
    005aeb3cldrh w0, [x2+x0]
    005aeb40strh w0, [sp+40]
    005aeb44ldrh w1, [sp+38]
    005aeb48bl crypto/internal/fips140/mlkem.fieldAdd
    005aeb4cstrh w0, [sp+46]
    005aeb50ldr x2, [sp+72]
    005aeb54ldr x1, [sp+136]
    005aeb58ldr x3, [sp+128]
    005aeb5csubs xzr, x2, x1
    005aeb60b.lo 0x5aeb68
    005aeb64b 0x5aeba4
    005aeb68
    005aeb68loc_5aeb68:
    005aeb68strh w0, [x3+x2]
    005aeb6cb 0x5aeb70
    005aeb70
    005aeb70loc_5aeb70:
    005aeb70ldr x3, [sp+72]
    005aeb74add x3, x3, 1
    005aeb78str x3, [sp+72]
    005aeb7corr x1, xzr, 128
    005aeb80orr x2, xzr, 256
    005aeb84add x20, sp, 216
    005aeb88b 0x5aea98
    005aeb8c
    005aeb8cloc_5aeb8c:
    005aeb8cb 0x5aeb90
    005aeb90
    005aeb90loc_5aeb90:
    005aeb90ldr x3, [sp+48]
    005aeb94ldr x4, [sp+56]
    005aeb98add x3, x3, x4, lsl #1
    005aeb9cstr x3, [sp+48]
    005aeba0b 0x5ae948
    005aeba4
    005aeba4loc_5aeba4:
    005aeba4mov x0, x2
    005aeba8bl runtime.panicIndex
    005aebac
    005aebacloc_5aebac:
    005aebacbl runtime.panicIndex
    005aebb0
    005aebb0loc_5aebb0:
    005aebb0mov x0, x2
    005aebb4bl runtime.panicIndex
    005aebb8
    005aebb8loc_5aebb8:
    005aebb8mov x0, x2
    005aebbcbl runtime.panicIndex
    005aebc0
    005aebc0loc_5aebc0:
    005aebc0mov x1, x3
    005aebc4bl runtime.panicIndex
    005aebc8
    005aebc8loc_5aebc8:
    005aebc8mov x1, x3
    005aebccbl runtime.panicSliceB
    005aebd0
    005aebd0loc_5aebd0:
    005aebd0mov x1, x3
    005aebd4bl runtime.panicSliceAlen
    005aebd8
    005aebd8loc_5aebd8:
    005aebd8mov x1, x3
    005aebdcbl runtime.panicSliceB
    005aebe0
    005aebe0loc_5aebe0:
    005aebe0mov x1, x3
    005aebe4orr x2, xzr, 256
    005aebe8bl runtime.panicSliceAlen
    005aebec
    005aebecloc_5aebec:
    005aebecbl runtime.panicIndex
    005aebf0hint
    005aebf4
    005aebf4loc_5aebf4:
    005aebf4mov x3, x30
    005aebf8bl runtime.morestack_noctxt.abi0
    005aebfcb 0x5ae8c0
    005ae8c0