// File: /workspace/github_c_makefile_star2_O2/Seclabs-htc[P]slip39/trezor-crypto/sha2.c
// Function: sha256_Update
void sha256_Update(SHA256_CTX* context, const sha2_byte *data, size_t len) {
	unsigned int	freespace, usedspace;

	if (len == 0) {
		/* Calling with no data is valid - we do nothing */
		return;
	}

	usedspace = (context->bitcount >> 3) % SHA256_BLOCK_LENGTH;
	if (usedspace > 0) {
		/* Calculate how much free space is available in the buffer */
		freespace = SHA256_BLOCK_LENGTH - usedspace;

		if (len >= freespace) {
			/* Fill the buffer completely and process it */
			MEMCPY_BCOPY(((uint8_t*)context->buffer) + usedspace, data, freespace);
			context->bitcount += freespace << 3;
			len -= freespace;
			data += freespace;
#if BYTE_ORDER == LITTLE_ENDIAN
			/* Convert TO host byte order */
			for (int j = 0; j < 16; j++) {
				REVERSE32(context->buffer[j],context->buffer[j]);
			}
#endif
			sha256_Transform(context->state, context->buffer, context->state);
		} else {
			/* The buffer is not yet full */
			MEMCPY_BCOPY(((uint8_t*)context->buffer) + usedspace, data, len);
			context->bitcount += len << 3;
			/* Clean up: */
			usedspace = freespace = 0;
			return;
		}
	}
	while (len >= SHA256_BLOCK_LENGTH) {
		/* Process as many complete blocks as we can */
		MEMCPY_BCOPY(context->buffer, data, SHA256_BLOCK_LENGTH);
#if BYTE_ORDER == LITTLE_ENDIAN
		/* Convert TO host byte order */
		for (int j = 0; j < 16; j++) {
			REVERSE32(context->buffer[j],context->buffer[j]);
		}
#endif
		sha256_Transform(context->state, context->buffer, context->state);
		context->bitcount += SHA256_BLOCK_LENGTH << 3;
		len -= SHA256_BLOCK_LENGTH;
		data += SHA256_BLOCK_LENGTH;
	}
	if (len > 0) {
		/* There's left-overs, so save 'em */
		MEMCPY_BCOPY(context->buffer, data, len);
		context->bitcount += len << 3;
	}
	/* Clean up: */
	usedspace = freespace = 0;
}

// Assembly:
testq %rdx, %rdx
je 0x908d
pushq %rbp
movq %rsp, %rbp
pushq %r15
pushq %r14
pushq %r13
pushq %r12
pushq %rbx
pushq %rax
movq %rdx, %r15
movq %rsi, %r14
movq %rdi, %rbx
movl 0x20(%rdi), %eax
shrl $0x3, %eax
andl $0x3f, %eax
je 0x8ff6
pushq $0x40
popq %r12
subl %eax, %r12d
movq %r15, %r13
movl %eax, %eax
leaq (%rbx,%rax), %rdi
addq $0x28, %rdi
subq %r12, %r13
jb 0x906c
pushq $0xa
popq %r15
leaq 0x28(%rbx), %rax
movq %rax, -0x30(%rbp)
movq %r14, %rsi
movq %r12, %rdx
callq 0x8080
leal (,%r12,8), %eax
addq %rax, 0x20(%rbx)
cmpq $0x1a, %r15
je 0x8fe1
movl (%rbx,%r15,4), %eax
bswapl %eax
movl %eax, (%rbx,%r15,4)
incq %r15
jmp 0x8fcc
addq %r12, %r14
movq %rbx, %rdi
movq -0x30(%rbp), %rsi
movq %rbx, %rdx
callq 0x8d31
movq %r13, %r15
leaq 0x28(%rbx), %r12
pushq $0xa
popq %r13
cmpq $0x40, %r15
jb 0x9064
movups (%r14), %xmm0
movups 0x10(%r14), %xmm1
movups 0x20(%r14), %xmm2
movups 0x30(%r14), %xmm3
movups %xmm3, 0x30(%r12)
movups %xmm2, 0x20(%r12)
movups %xmm1, 0x10(%r12)
movups %xmm0, (%r12)
movq %r13, %rax
cmpq $0x1a, %rax
je 0x9044
movl (%rbx,%rax,4), %ecx
bswapl %ecx
movl %ecx, (%rbx,%rax,4)
incq %rax
jmp 0x9031
movq %rbx, %rdi
movq %r12, %rsi
movq %rbx, %rdx
callq 0x8d31
addq $0x200, 0x20(%rbx)      # imm = 0x200
addq $-0x40, %r15
addq $0x40, %r14
jmp 0x8ffe
testq %r15, %r15
je 0x907f
movq %r12, %rdi
movq %r14, %rsi
movq %r15, %rdx
callq 0x8080
shlq $0x3, %r15
addq %r15, 0x20(%rbx)
addq $0x8, %rsp
popq %rbx
popq %r12
popq %r13
popq %r14
popq %r15
popq %rbp
retq