"BPL":   true,
	"BVS":   true,
	"BVC":   true,
	"BHI":   true,
	"BLS":   true,
	"BGE":   true,
	"BLT":   true,
	"BGT":   true,
	"BLE":   true,
	"CALL":  true,
	"CBZ":   true,
	"CBZW":  true,
	"CBNZ":  true,
	"CBNZW": true,
	"JMP":   true,
	"TBNZ":  true,
	"TBZ":   true,

	// ADR isn't really a jump, but it takes a PC or label reference,
	// which needs to patched like a jump.
	"ADR":  true,
	"ADRP": true,

	CALL (R15)                                 // e0013fd6
	JMP  (R29)                                 // a0031fd6
	BRK $35943                                 // e08c31d4
	CBNZW R2, -1(PC)                           // e2ffff35
	CBNZ R7, -1(PC)                            // e7ffffb5
	CBZW R15, -1(PC)                           // efffff34
	CBZ R1, -1(PC)                             // e1ffffb4
	CCMN MI, ZR, R1, $4                        // e44341ba

MOVD in+8(FP), a_ptr MOVD n+16(FP), b_ptr MOVD p256const0<>(SB), const0 MOVD p256const1<>(SB), const1 LDP 0*16(a_ptr), (x0, x1) LDP 1*16(a_ptr), (x2, x3) sqrLoop: SUB $1, b_ptr CALL p256SqrInternal<>(SB) MOVD y0, x0 MOVD y1, x1 MOVD y2, x2 MOVD y3, x3 CBNZ b_ptr, sqrLoop STP (y0, y1), 0*16(res_ptr) STP (y2, y3), 1*16(res_ptr) RET /* ---------- // func p256Mul(res, in1, in2 *p256Element) TEXT ·p256Mul(SB),NOSPLIT,$0 MOVD res+0(FP), res_ptr MOVD in1+8(FP), a_ptr MOVD in2+16(FP), b_ptr MOVD p256const0<>(SB),...