// File: /workspace/github_c_makefile_star2_O3/LoupVaillant[P]Monocypher-Utils/src/monocypher.c
// Function: fe_tobytes
static void fe_tobytes(u8 s[32], const fe h)
{
    i32 t[10];
    FOR (i, 0, 10) {
        t[i] = h[i];
    }
    i32 q = (19 * t[9] + (((i32) 1) << 24)) >> 25;
    FOR (i, 0, 5) {
        q += t[2*i  ]; q >>= 26;
        q += t[2*i+1]; q >>= 25;
    }
    t[0] += 19 * q;

    i32 c0 = t[0] >> 26; t[1] += c0; t[0] -= c0 * (1 << 26);
    i32 c1 = t[1] >> 25; t[2] += c1; t[1] -= c1 * (1 << 25);
    i32 c2 = t[2] >> 26; t[3] += c2; t[2] -= c2 * (1 << 26);
    i32 c3 = t[3] >> 25; t[4] += c3; t[3] -= c3 * (1 << 25);
    i32 c4 = t[4] >> 26; t[5] += c4; t[4] -= c4 * (1 << 26);
    i32 c5 = t[5] >> 25; t[6] += c5; t[5] -= c5 * (1 << 25);
    i32 c6 = t[6] >> 26; t[7] += c6; t[6] -= c6 * (1 << 26);
    i32 c7 = t[7] >> 25; t[8] += c7; t[7] -= c7 * (1 << 25);
    i32 c8 = t[8] >> 26; t[9] += c8; t[8] -= c8 * (1 << 26);
    i32 c9 = t[9] >> 25;             t[9] -= c9 * (1 << 25);

    store32_le(s +  0, ((u32)t[0] >>  0) | ((u32)t[1] << 26));
    store32_le(s +  4, ((u32)t[1] >>  6) | ((u32)t[2] << 19));
    store32_le(s +  8, ((u32)t[2] >> 13) | ((u32)t[3] << 13));
    store32_le(s + 12, ((u32)t[3] >> 19) | ((u32)t[4] <<  6));
    store32_le(s + 16, ((u32)t[5] >>  0) | ((u32)t[6] << 25));
    store32_le(s + 20, ((u32)t[6] >>  7) | ((u32)t[7] << 19));
    store32_le(s + 24, ((u32)t[7] >> 13) | ((u32)t[8] << 12));
    store32_le(s + 28, ((u32)t[8] >> 20) | ((u32)t[9] <<  6));

    WIPE_BUFFER(t);
}

// Assembly:
pushq %rbp
pushq %r15
pushq %r14
pushq %r13
pushq %r12
pushq %rbx
movq 0x20(%rsi), %rax
movq %rax, -0x18(%rsp)
movups (%rsi), %xmm0
movups 0x10(%rsi), %xmm1
movaps %xmm1, -0x28(%rsp)
movaps %xmm0, -0x38(%rsp)
movl -0x14(%rsp), %ecx
leal (%rcx,%rcx,8), %eax
movq %rcx, -0x8(%rsp)
leal (%rcx,%rax,2), %eax
addl $0x1000000, %eax        # imm = 0x1000000
sarl $0x19, %eax
xorl %ecx, %ecx
addl -0x38(%rsp,%rcx,8), %eax
sarl $0x1a, %eax
addl -0x34(%rsp,%rcx,8), %eax
incq %rcx
sarl $0x19, %eax
cmpq $0x5, %rcx
jne 0x5919
leal (%rax,%rax,8), %ecx
leal (%rax,%rcx,2), %eax
addl -0x38(%rsp), %eax
movl %eax, %r11d
sarl $0x1a, %r11d
addl -0x34(%rsp), %r11d
movl %eax, %edx
movl %r11d, %ebp
sarl $0x19, %ebp
addl -0x30(%rsp), %ebp
movl %ebp, %r10d
sarl $0x1a, %r10d
addl -0x2c(%rsp), %r10d
movl %r10d, %r9d
sarl $0x19, %r9d
addl -0x28(%rsp), %r9d
movl %r9d, %ebx
sarl $0x1a, %ebx
addl -0x24(%rsp), %ebx
movl %ebx, %r8d
sarl $0x19, %r8d
addl -0x20(%rsp), %r8d
movl %r8d, %r12d
sarl $0x1a, %r12d
addl -0x1c(%rsp), %r12d
movl %r12d, %r13d
sarl $0x19, %r13d
addl -0x18(%rsp), %r13d
andl $0x3000000, %edx        # imm = 0x3000000
movl %r11d, %r15d
shll $0x1a, %r15d
orl %edx, %r15d
movb %al, (%rdi)
movb %ah, 0x1(%rdi)
shrl $0x10, %eax
movb %al, 0x2(%rdi)
movl %r11d, %esi
shrl $0x6, %esi
movl $0x70000, %eax          # imm = 0x70000
movl %esi, %ecx
andl %eax, %ecx
movl %ebp, %edx
shll $0x13, %edx
orl %ecx, %edx
movl %ebp, %r14d
shrl $0xd, %ebp
movl %ebp, %eax
andl $0x1f00, %eax           # imm = 0x1F00
movl %r10d, %ecx
shll $0xd, %ecx
orl %eax, %ecx
shrl $0x18, %r15d
movb %r15b, 0x3(%rdi)
movb %sil, 0x4(%rdi)
shrl $0xe, %r11d
movb %r11b, 0x5(%rdi)
shrl $0x10, %edx
movb %dl, 0x6(%rdi)
shrl $0x5, %r14d
movb %r14b, 0x7(%rdi)
movb %bpl, 0x8(%rdi)
movb %ch, 0x9(%rdi)
movl %ebx, %edx
andl $0x1000000, %edx        # imm = 0x1000000
movl %r10d, %eax
shrl $0x3, %eax
movb %al, 0xa(%rdi)
movl %r10d, %eax
shrl $0xb, %eax
movb %al, 0xb(%rdi)
shrl $0x13, %r10d
andl $0x3f, %r10d
movl %r9d, %eax
shll $0x6, %eax
orl %r10d, %eax
movb %al, 0xc(%rdi)
movl %r9d, %eax
shrl $0x2, %eax
movb %al, 0xd(%rdi)
movl %r9d, %eax
shrl $0xa, %eax
movb %al, 0xe(%rdi)
shrl $0x12, %r9d
movb %r9b, 0xf(%rdi)
movl %r8d, %eax
shll $0x19, %eax
orl %edx, %eax
movb %bl, 0x10(%rdi)
movb %bh, 0x11(%rdi)
shrl $0x10, %ebx
movb %bl, 0x12(%rdi)
movl %r12d, %edx
movl %r12d, %esi
shrl $0xd, %r12d
movl %r12d, %ecx
andl $0xf00, %ecx            # imm = 0xF00
movl %r13d, %ebx
shll $0xc, %ebx
orl %ecx, %ebx
shrl $0x18, %eax
movb %al, 0x13(%rdi)
movl %r8d, %eax
shrl $0x7, %eax
movl $0x70000, %ecx          # imm = 0x70000
andl %eax, %ecx
shll $0x13, %edx
orl %ecx, %edx
movb %al, 0x14(%rdi)
shrl $0xf, %r8d
movb %r8b, 0x15(%rdi)
shrl $0x10, %edx
movb %dl, 0x16(%rdi)
shrl $0x5, %esi
movb %sil, 0x17(%rdi)
movb %r12b, 0x18(%rdi)
movb %bh, 0x19(%rdi)
movl %r13d, %eax
sarl $0x1a, %eax
addl -0x8(%rsp), %eax
movl %r13d, %ecx
shrl $0x4, %ecx
movb %cl, 0x1a(%rdi)
movl %r13d, %ecx
shrl $0xc, %ecx
movb %cl, 0x1b(%rdi)
shrl $0x14, %r13d
andl $0x3f, %r13d
movl %eax, %ecx
shll $0x6, %ecx
orl %r13d, %ecx
movb %cl, 0x1c(%rdi)
movl %eax, %ecx
shrl $0x2, %ecx
movb %cl, 0x1d(%rdi)
movl %eax, %ecx
shrl $0xa, %ecx
movb %cl, 0x1e(%rdi)
shrl $0x12, %eax
andl $0x7f, %eax
movb %al, 0x1f(%rdi)
xorl %eax, %eax
movb $0x0, -0x38(%rsp,%rax)
incq %rax
cmpq $0x28, %rax
jne 0x5aff
popq %rbx
popq %r12
popq %r13
popq %r14
popq %r15
popq %rbp
retq