// File: /workspace/github_c_makefile_star2_O0/LoupVaillant[P]Monocypher-Utils/src/monocypher.c
// Function: poly_block
static void poly_block(crypto_poly1305_ctx *ctx)
{
    // s = h + c, without carry propagation
    const u64 s0 = ctx->h[0] + (u64)ctx->c[0]; // s0 <= 1_fffffffe
    const u64 s1 = ctx->h[1] + (u64)ctx->c[1]; // s1 <= 1_fffffffe
    const u64 s2 = ctx->h[2] + (u64)ctx->c[2]; // s2 <= 1_fffffffe
    const u64 s3 = ctx->h[3] + (u64)ctx->c[3]; // s3 <= 1_fffffffe
    const u32 s4 = ctx->h[4] +      ctx->c[4]; // s4 <=          5

    // Local all the things!
    const u32 r0 = ctx->r[0];       // r0  <= 0fffffff
    const u32 r1 = ctx->r[1];       // r1  <= 0ffffffc
    const u32 r2 = ctx->r[2];       // r2  <= 0ffffffc
    const u32 r3 = ctx->r[3];       // r3  <= 0ffffffc
    const u32 rr0 = (r0 >> 2) * 5;  // rr0 <= 13fffffb // lose 2 bits...
    const u32 rr1 = (r1 >> 2) + r1; // rr1 <= 13fffffb // rr1 == (r1 >> 2) * 5
    const u32 rr2 = (r2 >> 2) + r2; // rr2 <= 13fffffb // rr1 == (r2 >> 2) * 5
    const u32 rr3 = (r3 >> 2) + r3; // rr3 <= 13fffffb // rr1 == (r3 >> 2) * 5

    // (h + c) * r, without carry propagation
    const u64 x0 = s0*r0 + s1*rr3 + s2*rr2 + s3*rr1 +s4*rr0;//<=97ffffe007fffff8
    const u64 x1 = s0*r1 + s1*r0  + s2*rr3 + s3*rr2 +s4*rr1;//<=8fffffe20ffffff6
    const u64 x2 = s0*r2 + s1*r1  + s2*r0  + s3*rr3 +s4*rr2;//<=87ffffe417fffff4
    const u64 x3 = s0*r3 + s1*r2  + s2*r1  + s3*r0  +s4*rr3;//<=7fffffe61ffffff2
    const u32 x4 = s4 * (r0 & 3); // ...recover 2 bits      //<=               f

    // partial reduction modulo 2^130 - 5
    const u32 u5 = x4 + (x3 >> 32); // u5 <= 7ffffff5
    const u64 u0 = (u5 >>  2) * 5 + (x0 & 0xffffffff);
    const u64 u1 = (u0 >> 32)     + (x1 & 0xffffffff) + (x0 >> 32);
    const u64 u2 = (u1 >> 32)     + (x2 & 0xffffffff) + (x1 >> 32);
    const u64 u3 = (u2 >> 32)     + (x3 & 0xffffffff) + (x2 >> 32);
    const u64 u4 = (u3 >> 32)     + (u5 & 3);

    // Update the hash
    ctx->h[0] = u0 & 0xffffffff; // u0 <= 1_9ffffff0
    ctx->h[1] = u1 & 0xffffffff; // u1 <= 1_97ffffe0
    ctx->h[2] = u2 & 0xffffffff; // u2 <= 1_8fffffe2
    ctx->h[3] = u3 & 0xffffffff; // u3 <= 1_87ffffe4
    ctx->h[4] = (u32)u4;         // u4 <=          4
}

// Assembly:
pushq %rbp
movq %rsp, %rbp
subq $0x20, %rsp
movq %rdi, -0x8(%rbp)
movq -0x8(%rbp), %rax
movl 0x10(%rax), %eax
movq -0x8(%rbp), %rcx
movl 0x24(%rcx), %ecx
addq %rcx, %rax
movq %rax, -0x10(%rbp)
movq -0x8(%rbp), %rax
movl 0x14(%rax), %eax
movq -0x8(%rbp), %rcx
movl 0x28(%rcx), %ecx
addq %rcx, %rax
movq %rax, -0x18(%rbp)
movq -0x8(%rbp), %rax
movl 0x18(%rax), %eax
movq -0x8(%rbp), %rcx
movl 0x2c(%rcx), %ecx
addq %rcx, %rax
movq %rax, -0x20(%rbp)
movq -0x8(%rbp), %rax
movl 0x1c(%rax), %eax
movq -0x8(%rbp), %rcx
movl 0x30(%rcx), %ecx
addq %rcx, %rax
movq %rax, -0x28(%rbp)
movq -0x8(%rbp), %rax
movl 0x20(%rax), %eax
movq -0x8(%rbp), %rcx
addl 0x34(%rcx), %eax
movl %eax, -0x2c(%rbp)
movq -0x8(%rbp), %rax
movl (%rax), %eax
movl %eax, -0x30(%rbp)
movq -0x8(%rbp), %rax
movl 0x4(%rax), %eax
movl %eax, -0x34(%rbp)
movq -0x8(%rbp), %rax
movl 0x8(%rax), %eax
movl %eax, -0x38(%rbp)
movq -0x8(%rbp), %rax
movl 0xc(%rax), %eax
movl %eax, -0x3c(%rbp)
movl -0x30(%rbp), %eax
shrl $0x2, %eax
imull $0x5, %eax, %eax
movl %eax, -0x40(%rbp)
movl -0x34(%rbp), %eax
shrl $0x2, %eax
addl -0x34(%rbp), %eax
movl %eax, -0x44(%rbp)
movl -0x38(%rbp), %eax
shrl $0x2, %eax
addl -0x38(%rbp), %eax
movl %eax, -0x48(%rbp)
movl -0x3c(%rbp), %eax
shrl $0x2, %eax
addl -0x3c(%rbp), %eax
movl %eax, -0x4c(%rbp)
movq -0x10(%rbp), %rax
movl -0x30(%rbp), %ecx
imulq %rcx, %rax
movq -0x18(%rbp), %rcx
movl -0x4c(%rbp), %edx
imulq %rdx, %rcx
addq %rcx, %rax
movq -0x20(%rbp), %rcx
movl -0x48(%rbp), %edx
imulq %rdx, %rcx
addq %rcx, %rax
movq -0x28(%rbp), %rcx
movl -0x44(%rbp), %edx
imulq %rdx, %rcx
addq %rcx, %rax
movl -0x2c(%rbp), %ecx
imull -0x40(%rbp), %ecx
movl %ecx, %ecx
addq %rcx, %rax
movq %rax, -0x58(%rbp)
movq -0x10(%rbp), %rax
movl -0x34(%rbp), %ecx
imulq %rcx, %rax
movq -0x18(%rbp), %rcx
movl -0x30(%rbp), %edx
imulq %rdx, %rcx
addq %rcx, %rax
movq -0x20(%rbp), %rcx
movl -0x4c(%rbp), %edx
imulq %rdx, %rcx
addq %rcx, %rax
movq -0x28(%rbp), %rcx
movl -0x48(%rbp), %edx
imulq %rdx, %rcx
addq %rcx, %rax
movl -0x2c(%rbp), %ecx
imull -0x44(%rbp), %ecx
movl %ecx, %ecx
addq %rcx, %rax
movq %rax, -0x60(%rbp)
movq -0x10(%rbp), %rax
movl -0x38(%rbp), %ecx
imulq %rcx, %rax
movq -0x18(%rbp), %rcx
movl -0x34(%rbp), %edx
imulq %rdx, %rcx
addq %rcx, %rax
movq -0x20(%rbp), %rcx
movl -0x30(%rbp), %edx
imulq %rdx, %rcx
addq %rcx, %rax
movq -0x28(%rbp), %rcx
movl -0x4c(%rbp), %edx
imulq %rdx, %rcx
addq %rcx, %rax
movl -0x2c(%rbp), %ecx
imull -0x48(%rbp), %ecx
movl %ecx, %ecx
addq %rcx, %rax
movq %rax, -0x68(%rbp)
movq -0x10(%rbp), %rax
movl -0x3c(%rbp), %ecx
imulq %rcx, %rax
movq -0x18(%rbp), %rcx
movl -0x38(%rbp), %edx
imulq %rdx, %rcx
addq %rcx, %rax
movq -0x20(%rbp), %rcx
movl -0x34(%rbp), %edx
imulq %rdx, %rcx
addq %rcx, %rax
movq -0x28(%rbp), %rcx
movl -0x30(%rbp), %edx
imulq %rdx, %rcx
addq %rcx, %rax
movl -0x2c(%rbp), %ecx
imull -0x4c(%rbp), %ecx
movl %ecx, %ecx
addq %rcx, %rax
movq %rax, -0x70(%rbp)
movl -0x2c(%rbp), %eax
movl -0x30(%rbp), %ecx
andl $0x3, %ecx
imull %ecx, %eax
movl %eax, -0x74(%rbp)
movl -0x74(%rbp), %eax
movq -0x70(%rbp), %rcx
shrq $0x20, %rcx
addq %rcx, %rax
movl %eax, -0x78(%rbp)
movl -0x78(%rbp), %eax
shrl $0x2, %eax
imull $0x5, %eax, %eax
movl %eax, %eax
movabsq $0xffffffff, %rcx       # imm = 0xFFFFFFFF
andq -0x58(%rbp), %rcx
addq %rcx, %rax
movq %rax, -0x80(%rbp)
movq -0x80(%rbp), %rax
shrq $0x20, %rax
movabsq $0xffffffff, %rcx       # imm = 0xFFFFFFFF
andq -0x60(%rbp), %rcx
addq %rcx, %rax
movq -0x58(%rbp), %rcx
shrq $0x20, %rcx
addq %rcx, %rax
movq %rax, -0x88(%rbp)
movq -0x88(%rbp), %rax
shrq $0x20, %rax
movabsq $0xffffffff, %rcx       # imm = 0xFFFFFFFF
andq -0x68(%rbp), %rcx
addq %rcx, %rax
movq -0x60(%rbp), %rcx
shrq $0x20, %rcx
addq %rcx, %rax
movq %rax, -0x90(%rbp)
movq -0x90(%rbp), %rax
shrq $0x20, %rax
movabsq $0xffffffff, %rcx       # imm = 0xFFFFFFFF
andq -0x70(%rbp), %rcx
addq %rcx, %rax
movq -0x68(%rbp), %rcx
shrq $0x20, %rcx
addq %rcx, %rax
movq %rax, -0x98(%rbp)
movq -0x98(%rbp), %rax
shrq $0x20, %rax
movl -0x78(%rbp), %ecx
andl $0x3, %ecx
movl %ecx, %ecx
addq %rcx, %rax
movq %rax, -0xa0(%rbp)
movabsq $0xffffffff, %rax       # imm = 0xFFFFFFFF
andq -0x80(%rbp), %rax
movl %eax, %ecx
movq -0x8(%rbp), %rax
movl %ecx, 0x10(%rax)
movabsq $0xffffffff, %rax       # imm = 0xFFFFFFFF
andq -0x88(%rbp), %rax
movl %eax, %ecx
movq -0x8(%rbp), %rax
movl %ecx, 0x14(%rax)
movabsq $0xffffffff, %rax       # imm = 0xFFFFFFFF
andq -0x90(%rbp), %rax
movl %eax, %ecx
movq -0x8(%rbp), %rax
movl %ecx, 0x18(%rax)
movabsq $0xffffffff, %rax       # imm = 0xFFFFFFFF
andq -0x98(%rbp), %rax
movl %eax, %ecx
movq -0x8(%rbp), %rax
movl %ecx, 0x1c(%rax)
movq -0xa0(%rbp), %rax
movl %eax, %ecx
movq -0x8(%rbp), %rax
movl %ecx, 0x20(%rax)
addq $0x20, %rsp
popq %rbp
retq
nopl (%rax,%rax)