	.file	"extr_fe25519.c_crypto_sign_ed25519_ref_fe25519_sub.c"
	.intel_syntax noprefix
	.text
	.p2align 4
	.globl	fe25519_sub
	.type	fe25519_sub, @function
fe25519_sub:
.LFB0:
	.cfi_startproc
	endbr64
	sub	rsp, 280
	.cfi_def_cfa_offset 288
	mov	r9, QWORD PTR [rsi]
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR 264[rsp], rax
	xor	eax, eax
	mov	r8, rsp
	mov	rax, QWORD PTR [r9]
	lea	rcx, 474[rax]
	mov	rax, QWORD PTR 248[r9]
	add	rax, 254
	mov	QWORD PTR 248[rsp], rax
	mov	eax, 8
	.p2align 4,,10
	.p2align 3
.L2:
	mov	rsi, QWORD PTR [r9+rax]
	add	rsi, 510
	mov	QWORD PTR [r8+rax], rsi
	add	rax, 8
	cmp	rax, 248
	jne	.L2
	mov	rsi, QWORD PTR [rdx]
	xor	eax, eax
	mov	rdx, QWORD PTR [rdi]
	jmp	.L4
	.p2align 4,,10
	.p2align 3
.L10:
	mov	rcx, QWORD PTR [r8+rax]
.L4:
	sub	rcx, QWORD PTR [rsi+rax]
	mov	QWORD PTR [rdx+rax], rcx
	add	rax, 8
	cmp	rax, 256
	jne	.L10
	mov	rax, QWORD PTR 264[rsp]
	xor	rax, QWORD PTR fs:40
	jne	.L11
	add	rsp, 280
	.cfi_remember_state
	.cfi_def_cfa_offset 8
	jmp	reduce_add_sub@PLT
.L11:
	.cfi_restore_state
	call	__stack_chk_fail@PLT
	.cfi_endproc
.LFE0:
	.size	fe25519_sub, .-fe25519_sub
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 2
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"extr_fe25519.c_crypto_sign_ed25519_ref_fe25519_sub.c"
	.text
	.section	.rodata.cst4,"aM",%progbits,4
	.align	2
.LC0:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	fe25519_sub
	.syntax unified
	.arm
	.fpu softvfp
	.type	fe25519_sub, %function
fe25519_sub:
	@ args = 0, pretend = 0, frame = 136
	@ frame_needed = 0, uses_anonymous_args = 0
	push	{r4, r5, lr}
	sub	sp, sp, #140
	ldr	r5, [r1]
	add	r1, sp, #8
	mov	ip, r1
	ldr	r3, .L12
	mov	r4, r5
	ldr	r3, [r3]
	str	r3, [sp, #132]
	mov	r3,#0
	ldr	r3, [r5]
	ldr	r5, [r5, #124]
	add	lr, r3, #472
	add	r3, r5, #254
	add	lr, lr, #2
	str	r3, [sp, #128]
	add	r5, sp, #128
.L2:
	ldr	r3, [r4, #4]!
	add	r3, r3, #508
	add	r3, r3, #2
	str	r3, [ip], #4
	cmp	ip, r5
	bne	.L2
	ldr	ip, [r2]
	ldr	r2, [r0]
	sub	ip, ip, #4
	add	r4, sp, #132
	sub	r2, r2, #4
	b	.L4
.L10:
	ldr	lr, [r1], #4
.L4:
	ldr	r3, [ip, #4]!
	cmp	r1, r4
	sub	r3, lr, r3
	str	r3, [r2, #4]!
	bne	.L10
	ldr	r3, .L12
	ldr	r2, [r3]
	ldr	r3, [sp, #132]
	eors	r2, r3, r2
	mov	r3, #0
	bne	.L11
	add	sp, sp, #140
	@ sp needed
	pop	{r4, r5, lr}
	b	reduce_add_sub
.L11:
	bl	__stack_chk_fail
.L13:
	.align	2
.L12:
	.word	.LC0
	.size	fe25519_sub, .-fe25519_sub
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
