50 	u32 a, b, c, d, e, f, g, h, t1, t2;  in sha256_transform()  local
64 	e = state[4];  f = state[5];  g = state[6];  h = state[7];  in sha256_transform()
67 	t1 = h + e1(e) + Ch(e, f, g) + 0x428a2f98 + W[0];  in sha256_transform()
68 	t2 = e0(a) + Maj(a, b, c);    d += t1;    h = t1 + t2;  in sha256_transform()
70 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1 + t2;  in sha256_transform()
72 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1 + t2;  in sha256_transform()
74 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1 + t2;  in sha256_transform()
76 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1 + t2;  in sha256_transform()
77 	t1 = c + e1(h) + Ch(h, a, b) + 0x59f111f1 + W[5];  in sha256_transform()
79 	t1 = b + e1(g) + Ch(g, h, a) + 0x923f82a4 + W[6];  in sha256_transform()
81 	t1 = a + e1(f) + Ch(f, g, h) + 0xab1c5ed5 + W[7];  in sha256_transform()
84 	t1 = h + e1(e) + Ch(e, f, g) + 0xd807aa98 + W[8];  in sha256_transform()
85 	t2 = e0(a) + Maj(a, b, c);    d += t1;    h = t1 + t2;  in sha256_transform()
87 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1 + t2;  in sha256_transform()
89 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1 + t2;  in sha256_transform()
91 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1 + t2;  in sha256_transform()
93 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1 + t2;  in sha256_transform()
94 	t1 = c + e1(h) + Ch(h, a, b) + 0x80deb1fe + W[13];  in sha256_transform()
96 	t1 = b + e1(g) + Ch(g, h, a) + 0x9bdc06a7 + W[14];  in sha256_transform()
98 	t1 = a + e1(f) + Ch(f, g, h) + 0xc19bf174 + W[15];  in sha256_transform()
101 	t1 = h + e1(e) + Ch(e, f, g) + 0xe49b69c1 + W[16];  in sha256_transform()
102 	t2 = e0(a) + Maj(a, b, c);    d += t1;    h = t1+t2;  in sha256_transform()
104 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1+t2;  in sha256_transform()
106 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1+t2;  in sha256_transform()
108 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1+t2;  in sha256_transform()
110 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1+t2;  in sha256_transform()
111 	t1 = c + e1(h) + Ch(h, a, b) + 0x4a7484aa + W[21];  in sha256_transform()
113 	t1 = b + e1(g) + Ch(g, h, a) + 0x5cb0a9dc + W[22];  in sha256_transform()
115 	t1 = a + e1(f) + Ch(f, g, h) + 0x76f988da + W[23];  in sha256_transform()
118 	t1 = h + e1(e) + Ch(e, f, g) + 0x983e5152 + W[24];  in sha256_transform()
119 	t2 = e0(a) + Maj(a, b, c);    d += t1;    h = t1+t2;  in sha256_transform()
121 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1+t2;  in sha256_transform()
123 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1+t2;  in sha256_transform()
125 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1+t2;  in sha256_transform()
127 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1+t2;  in sha256_transform()
128 	t1 = c + e1(h) + Ch(h, a, b) + 0xd5a79147 + W[29];  in sha256_transform()
130 	t1 = b + e1(g) + Ch(g, h, a) + 0x06ca6351 + W[30];  in sha256_transform()
132 	t1 = a + e1(f) + Ch(f, g, h) + 0x14292967 + W[31];  in sha256_transform()
135 	t1 = h + e1(e) + Ch(e, f, g) + 0x27b70a85 + W[32];  in sha256_transform()
136 	t2 = e0(a) + Maj(a, b, c);    d += t1;    h = t1+t2;  in sha256_transform()
138 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1+t2;  in sha256_transform()
140 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1+t2;  in sha256_transform()
142 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1+t2;  in sha256_transform()
144 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1+t2;  in sha256_transform()
145 	t1 = c + e1(h) + Ch(h, a, b) + 0x766a0abb + W[37];  in sha256_transform()
147 	t1 = b + e1(g) + Ch(g, h, a) + 0x81c2c92e + W[38];  in sha256_transform()
149 	t1 = a + e1(f) + Ch(f, g, h) + 0x92722c85 + W[39];  in sha256_transform()
152 	t1 = h + e1(e) + Ch(e, f, g) + 0xa2bfe8a1 + W[40];  in sha256_transform()
153 	t2 = e0(a) + Maj(a, b, c);    d += t1;    h = t1+t2;  in sha256_transform()
155 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1+t2;  in sha256_transform()
157 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1+t2;  in sha256_transform()
159 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1+t2;  in sha256_transform()
161 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1+t2;  in sha256_transform()
162 	t1 = c + e1(h) + Ch(h, a, b) + 0xd6990624 + W[45];  in sha256_transform()
164 	t1 = b + e1(g) + Ch(g, h, a) + 0xf40e3585 + W[46];  in sha256_transform()
166 	t1 = a + e1(f) + Ch(f, g, h) + 0x106aa070 + W[47];  in sha256_transform()
169 	t1 = h + e1(e) + Ch(e, f, g) + 0x19a4c116 + W[48];  in sha256_transform()
170 	t2 = e0(a) + Maj(a, b, c);    d += t1;    h = t1+t2;  in sha256_transform()
172 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1+t2;  in sha256_transform()
174 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1+t2;  in sha256_transform()
176 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1+t2;  in sha256_transform()
178 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1+t2;  in sha256_transform()
179 	t1 = c + e1(h) + Ch(h, a, b) + 0x4ed8aa4a + W[53];  in sha256_transform()
181 	t1 = b + e1(g) + Ch(g, h, a) + 0x5b9cca4f + W[54];  in sha256_transform()
183 	t1 = a + e1(f) + Ch(f, g, h) + 0x682e6ff3 + W[55];  in sha256_transform()
186 	t1 = h + e1(e) + Ch(e, f, g) + 0x748f82ee + W[56];  in sha256_transform()
187 	t2 = e0(a) + Maj(a, b, c);    d += t1;    h = t1+t2;  in sha256_transform()
189 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1+t2;  in sha256_transform()
191 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1+t2;  in sha256_transform()
193 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1+t2;  in sha256_transform()
195 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1+t2;  in sha256_transform()
196 	t1 = c + e1(h) + Ch(h, a, b) + 0xa4506ceb + W[61];  in sha256_transform()
198 	t1 = b + e1(g) + Ch(g, h, a) + 0xbef9a3f7 + W[62];  in sha256_transform()
200 	t1 = a + e1(f) + Ch(f, g, h) + 0xc67178f2 + W[63];  in sha256_transform()
204 	state[4] += e; state[5] += f; state[6] += g; state[7] += h;  in sha256_transform()
207 	a = b = c = d = e = f = g = h = t1 = t2 = 0;  in sha256_transform()