338 		uint64_t x, f, cc, w, s, zh, zl;  in f256_montymul()
352 		zl = _umul128(b[0], x, &zh);  in f256_montymul()
353 		k = _addcarry_u64(0, t[0], zl, &zl);  in f256_montymul()
355 		f = zl & MASK52;  in f256_montymul()
356 		cc = (zl >> 52) | (zh << 12);  in f256_montymul()
358 		zl = _umul128(b[1], x, &zh);  in f256_montymul()
359 		k = _addcarry_u64(0, t[1], zl, &zl);  in f256_montymul()
361 		k = _addcarry_u64(0, cc, zl, &zl);  in f256_montymul()
363 		k = _addcarry_u64(0, f << 44, zl, &zl);  in f256_montymul()
365 		t[0] = zl & MASK52;  in f256_montymul()
366 		cc = (zl >> 52) | (zh << 12);  in f256_montymul()
368 		zl = _umul128(b[2], x, &zh);  in f256_montymul()
369 		k = _addcarry_u64(0, t[2], zl, &zl);  in f256_montymul()
371 		k = _addcarry_u64(0, cc, zl, &zl);  in f256_montymul()
373 		t[1] = zl & MASK52;  in f256_montymul()
374 		cc = (zl >> 52) | (zh << 12);  in f256_montymul()
376 		zl = _umul128(b[3], x, &zh);  in f256_montymul()
377 		k = _addcarry_u64(0, t[3], zl, &zl);  in f256_montymul()
379 		k = _addcarry_u64(0, cc, zl, &zl);  in f256_montymul()
381 		k = _addcarry_u64(0, f << 36, zl, &zl);  in f256_montymul()
383 		t[2] = zl & MASK52;  in f256_montymul()
384 		cc = (zl >> 52) | (zh << 12);  in f256_montymul()
386 		zl = _umul128(b[4], x, &zh);  in f256_montymul()
387 		k = _addcarry_u64(0, t[4], zl, &zl);  in f256_montymul()
389 		k = _addcarry_u64(0, cc, zl, &zl);  in f256_montymul()
391 		k = _addcarry_u64(0, f << 48, zl, &zl);  in f256_montymul()
393 		k = _subborrow_u64(0, zl, f << 16, &zl);  in f256_montymul()
395 		t[3] = zl & MASK52;  in f256_montymul()
396 		t[4] = (zl >> 52) | (zh << 12);  in f256_montymul()