From 7f2d16e1587a1a0d47875ede686e025b9f7fb576 Mon Sep 17 00:00:00 2001 From: Timofey Luin Date: Thu, 14 Dec 2023 22:15:09 +0100 Subject: [PATCH 1/4] avoid reading srs multiple times; allow setting lookup bits --- .../src/aggregation_circuit.rs | 32 ++++++--- .../src/committee_update_circuit.rs | 55 ++++++++------- .../gadget/crypto/sha256_flex/compression.rs | 4 -- .../src/gadget/crypto/sha256_flex/spread.rs | 4 -- .../src/gadget/crypto/sha256_flex/util.rs | 4 -- lightclient-circuits/src/sync_step_circuit.rs | 67 ++++++++++--------- lightclient-circuits/src/util/circuit.rs | 51 +++++++------- lightclient-circuits/src/witness/rotation.rs | 2 +- lightclient-circuits/src/witness/step.rs | 2 +- lightclient-circuits/tests/step.rs | 14 ++-- preprocessor/src/rotation.rs | 6 +- preprocessor/src/step.rs | 14 ++-- prover/src/args.rs | 12 +++- prover/src/cli.rs | 34 +++++----- prover/src/rpc.rs | 4 +- 15 files changed, 164 insertions(+), 141 deletions(-) diff --git a/lightclient-circuits/src/aggregation_circuit.rs b/lightclient-circuits/src/aggregation_circuit.rs index 57ec4b5..8a17bab 100644 --- a/lightclient-circuits/src/aggregation_circuit.rs +++ b/lightclient-circuits/src/aggregation_circuit.rs @@ -5,8 +5,11 @@ use crate::util::{AppCircuit, Halo2ConfigPinning, PinnableCircuit}; use halo2_base::{ gates::{circuit::CircuitBuilderStage, flex_gate::MultiPhaseThreadBreakPoints}, - halo2_proofs::{halo2curves::bn256::Fr, plonk::Error}, - utils::fs::gen_srs, + halo2_proofs::{ + halo2curves::bn256::{Bn256, Fr}, + plonk::Error, + poly::{commitment::Params, kzg::commitment::ParamsKZG}, + }, }; use serde::{Deserialize, Serialize}; use snark_verifier_sdk::{ @@ -20,12 +23,25 @@ use std::{ }; /// Configuration for the aggregation circuit. -#[derive(Clone, Debug, Serialize, Deserialize)] +#[derive(Clone, Debug, Default, Serialize, Deserialize)] pub struct AggregationConfigPinning { pub params: AggregationConfigParams, pub break_points: MultiPhaseThreadBreakPoints, } +impl AggregationConfigPinning { + pub fn new(k: u32, lookup_bits: usize) -> Self { + Self { + params: AggregationConfigParams { + degree: k, + lookup_bits, + ..Default::default() + }, + ..Default::default() + } + } +} + impl Halo2ConfigPinning for AggregationConfigPinning { type BreakPoints = MultiPhaseThreadBreakPoints; @@ -82,14 +98,12 @@ impl AppCircuit for AggregationCircuit { stage: CircuitBuilderStage, pinning: Option, snark: &Self::Witness, - k: u32, + params: &ParamsKZG, ) -> Result, Error> { - let lookup_bits = k as usize - 1; - let params = gen_srs(k); let circuit_params = pinning.clone().map_or( AggregationConfigParams { - degree: k, - lookup_bits, + degree: params.k(), + lookup_bits: params.k() as usize - 1, ..Default::default() }, |p| p.params, @@ -97,7 +111,7 @@ impl AppCircuit for AggregationCircuit { let mut circuit = AggregationCircuit::new::( stage, circuit_params, - ¶ms, + params, snark.clone(), Default::default(), ); diff --git a/lightclient-circuits/src/committee_update_circuit.rs b/lightclient-circuits/src/committee_update_circuit.rs index ad612c4..36e6da8 100644 --- a/lightclient-circuits/src/committee_update_circuit.rs +++ b/lightclient-circuits/src/committee_update_circuit.rs @@ -14,7 +14,11 @@ use crate::{ use eth_types::{Field, Spec, LIMB_BITS, NUM_LIMBS}; use halo2_base::{ gates::{circuit::CircuitBuilderStage, flex_gate::threads::CommonCircuitBuilder}, - halo2_proofs::{halo2curves::bn256, plonk::Error}, + halo2_proofs::{ + halo2curves::bn256::{self, Bn256}, + plonk::Error, + poly::{commitment::Params, kzg::commitment::ParamsKZG}, + }, AssignedValue, Context, QuantumCell, }; use halo2_ecc::{ @@ -222,12 +226,16 @@ impl AppCircuit for CommitteeUpdateCircuit { stage: CircuitBuilderStage, pinning: Option, witness: &witness::CommitteeUpdateArgs, - k: u32, + params: &ParamsKZG, ) -> Result, Error> { + let k = params.k() as usize; + let lookup_bits = pinning + .as_ref() + .map_or(k - 1, |p| p.params.lookup_bits.unwrap_or(k - 1)); let mut builder = Eth2CircuitBuilder::>::from_stage(stage) - .use_k(k as usize) + .use_k(k) .use_instance_columns(1); - let range = builder.range_chip(k as usize - 1); + let range = builder.range_chip(lookup_bits); let fp_chip = FpChip::new(&range, LIMB_BITS, NUM_LIMBS); let assigned_instances = Self::synthesize(&mut builder, &fp_chip, witness)?; @@ -322,7 +330,7 @@ mod tests { const K: u32 = 18; let witness = load_circuit_args(); - let circuit = CommitteeUpdateCircuit::::create_circuit( + let circuit = CommitteeUpdateCircuit::::mock_circuit( CircuitBuilderStage::Mock, None, &witness, @@ -346,12 +354,12 @@ mod tests { const PINNING_PATH: &str = "./config/committee_update_18.json"; const PKEY_PATH: &str = "../build/committee_update_18.pkey"; - let pk = CommitteeUpdateCircuit::::read_or_create_pk( + let pk = CommitteeUpdateCircuit::::create_pk( ¶ms, PKEY_PATH, PINNING_PATH, - false, &CommitteeUpdateArgs::::default(), + None, ); let witness = load_circuit_args(); @@ -367,33 +375,34 @@ mod tests { #[test] fn test_committee_update_aggregation_evm() { - const APP_K: u32 = 18; - const APP_PK_PATH: &str = "../build/committee_update_18.pkey"; - const APP_PINNING_PATH: &str = "./config/committee_update_18.json"; - const AGG_CONFIG_PATH: &str = "./config/committee_update_verifier_25.json"; + const APP_K: u32 = 20; + const APP_PK_PATH: &str = "../build/committee_update_20.pkey"; + const APP_PINNING_PATH: &str = "./config/committee_update_20.json"; + const AGG_K: u32 = 25; + const AGG_PK_PATH: &str = "../build/committee_update_verifier_24.pkey"; + const AGG_CONFIG_PATH: &str = "./config/committee_update_verifier_24.json"; let params_app = gen_srs(APP_K); - const AGG_K: u32 = 25; - let pk_app = CommitteeUpdateCircuit::::read_or_create_pk( + let pk_app = CommitteeUpdateCircuit::::create_pk( ¶ms_app, APP_PK_PATH, APP_PINNING_PATH, - false, &CommitteeUpdateArgs::::default(), + None, ); let witness = load_circuit_args(); let snark = gen_application_snark(¶ms_app, &pk_app, &witness, APP_PINNING_PATH); - let params = gen_srs(AGG_K); - println!("agg_params k: {:?}", params.k()); + let agg_params = gen_srs(AGG_K); + println!("agg_params k: {:?}", agg_params.k()); - let pk = AggregationCircuit::read_or_create_pk( - ¶ms, - "../build/committee_update_verifier_25.pkey", + let pk = AggregationCircuit::create_pk( + &agg_params, + AGG_PK_PATH, AGG_CONFIG_PATH, - false, &vec![snark.clone()], + None, ); let agg_config = AggregationConfigPinning::from_path(AGG_CONFIG_PATH); @@ -402,7 +411,7 @@ mod tests { CircuitBuilderStage::Prover, Some(agg_config), &vec![snark.clone()], - AGG_K, + &agg_params, ) .unwrap(); @@ -412,10 +421,10 @@ mod tests { println!("num_instances: {:?}", num_instances); println!("instances: {:?}", instances); - let proof = gen_evm_proof_shplonk(¶ms, &pk, agg_circuit, instances.clone()); + let proof = gen_evm_proof_shplonk(&agg_params, &pk, agg_circuit, instances.clone()); println!("proof size: {}", proof.len()); let deployment_code = AggregationCircuit::gen_evm_verifier_shplonk( - ¶ms, + &agg_params, &pk, None::, &vec![snark], diff --git a/lightclient-circuits/src/gadget/crypto/sha256_flex/compression.rs b/lightclient-circuits/src/gadget/crypto/sha256_flex/compression.rs index 75c72fb..da9288a 100644 --- a/lightclient-circuits/src/gadget/crypto/sha256_flex/compression.rs +++ b/lightclient-circuits/src/gadget/crypto/sha256_flex/compression.rs @@ -1,7 +1,3 @@ -// The Licensed Work is (c) 2023 ChainSafe -// Code: https://github.com/ChainSafe/Spectre -// SPDX-License-Identifier: LGPL-3.0-only - // ! This file is a modified version of the original file from https://github.com/zkemail/halo2-dynamic-sha256 (MIT license) use super::spread::SpreadChip; diff --git a/lightclient-circuits/src/gadget/crypto/sha256_flex/spread.rs b/lightclient-circuits/src/gadget/crypto/sha256_flex/spread.rs index 91488bd..23ae5fa 100644 --- a/lightclient-circuits/src/gadget/crypto/sha256_flex/spread.rs +++ b/lightclient-circuits/src/gadget/crypto/sha256_flex/spread.rs @@ -1,7 +1,3 @@ -// The Licensed Work is (c) 2023 ChainSafe -// Code: https://github.com/ChainSafe/Spectre -// SPDX-License-Identifier: LGPL-3.0-only - // ! This file is a modified version of the original file from https://github.com/zkemail/halo2-dynamic-sha256 (MIT license) use eth_types::Field; diff --git a/lightclient-circuits/src/gadget/crypto/sha256_flex/util.rs b/lightclient-circuits/src/gadget/crypto/sha256_flex/util.rs index 381f380..77e8911 100644 --- a/lightclient-circuits/src/gadget/crypto/sha256_flex/util.rs +++ b/lightclient-circuits/src/gadget/crypto/sha256_flex/util.rs @@ -1,7 +1,3 @@ -// The Licensed Work is (c) 2023 ChainSafe -// Code: https://github.com/ChainSafe/Spectre -// SPDX-License-Identifier: LGPL-3.0-only - // ! This file is a modified version of the original file from https://github.com/zkemail/halo2-dynamic-sha256 (MIT license) use eth_types::Field; diff --git a/lightclient-circuits/src/sync_step_circuit.rs b/lightclient-circuits/src/sync_step_circuit.rs index 5c91008..5ded6e9 100644 --- a/lightclient-circuits/src/sync_step_circuit.rs +++ b/lightclient-circuits/src/sync_step_circuit.rs @@ -22,7 +22,11 @@ use halo2_base::{ circuit::CircuitBuilderStage, flex_gate::threads::CommonCircuitBuilder, GateInstructions, RangeInstructions, }, - halo2_proofs::{halo2curves::bn256, plonk::Error}, + halo2_proofs::{ + halo2curves::bn256::{self, Bn256}, + plonk::Error, + poly::{commitment::Params, kzg::commitment::ParamsKZG}, + }, utils::CurveAffineExt, AssignedValue, Context, QuantumCell, }; @@ -399,12 +403,16 @@ impl AppCircuit for StepCircuit { stage: CircuitBuilderStage, pinning: Option, args: &Self::Witness, - k: u32, + params: &ParamsKZG, ) -> Result, Error> { + let k = params.k() as usize; + let lookup_bits = pinning + .as_ref() + .map_or(k - 1, |p| p.params.lookup_bits.unwrap_or(k - 1)); let mut builder = Eth2CircuitBuilder::>::from_stage(stage) - .use_k(k as usize) + .use_k(k) .use_instance_columns(1); - let range = builder.range_chip(k as usize - 1); + let range = builder.range_chip(lookup_bits); let fp_chip = FpChip::new(&range, LIMB_BITS, NUM_LIMBS); let assigned_instances = Self::synthesize(&mut builder, &fp_chip, args)?; @@ -461,13 +469,9 @@ mod tests { const K: u32 = 20; let witness = load_circuit_args(); - let circuit = StepCircuit::::create_circuit( - CircuitBuilderStage::Mock, - None, - &witness, - K, - ) - .unwrap(); + let circuit = + StepCircuit::::mock_circuit(CircuitBuilderStage::Mock, None, &witness, K) + .unwrap(); let instance = StepCircuit::::get_instances(&witness, LIMB_BITS); @@ -482,12 +486,12 @@ mod tests { const K: u32 = 22; let params = gen_srs(K); - let pk = StepCircuit::::read_or_create_pk( + let pk = StepCircuit::::create_pk( ¶ms, "../build/sync_step_22.pkey", "./config/sync_step_22.json", - false, &SyncStepArgs::::default(), + None, ); let witness = load_circuit_args(); @@ -506,12 +510,12 @@ mod tests { const K: u32 = 22; let params = gen_srs(K); - let pk = StepCircuit::::read_or_create_pk( + let pk = StepCircuit::::create_pk( ¶ms, "../build/sync_step_22.pkey", "./config/sync_step_22.json", - false, &SyncStepArgs::::default(), + None ); let witness = load_circuit_args(); @@ -522,7 +526,7 @@ mod tests { CircuitBuilderStage::Prover, Some(pinning), &witness, - K, + ¶ms, ) .unwrap(); @@ -542,19 +546,19 @@ mod tests { #[test] fn test_step_aggregation_evm() { - const APP_K: u32 = 21; - const APP_PK_PATH: &str = "../build/sync_step_21.pkey"; - const APP_PINNING_PATH: &str = "./config/sync_step_21.json"; + const APP_K: u32 = 20; + const APP_PK_PATH: &str = "../build/sync_step_20.pkey"; + const APP_PINNING_PATH: &str = "./config/sync_step_20.json"; + const AGG_K: u32 = 23; + const AGG_PK_PATH: &str = "../build/sync_step_verifier_23.pkey"; const AGG_CONFIG_PATH: &str = "./config/sync_step_verifier_23.json"; let params_app = gen_srs(APP_K); - - const AGG_K: u32 = 23; - let pk_app = StepCircuit::::read_or_create_pk( + let pk_app = StepCircuit::::create_pk( ¶ms_app, APP_PK_PATH, APP_PINNING_PATH, - false, &SyncStepArgs::::default(), + None ); let witness = load_circuit_args(); @@ -567,14 +571,15 @@ mod tests { ) .unwrap(); - let params = gen_srs(AGG_K); + let agg_params = gen_srs(AGG_K); - let pk = AggregationCircuit::read_or_create_pk( - ¶ms, - "../build/sync_step_verifier_23.pkey", + let pk = AggregationCircuit::create_pk( + &agg_params, + AGG_PK_PATH, AGG_CONFIG_PATH, - false, &vec![snark.clone()], + Some(AggregationConfigPinning::new(AGG_K, 19)) + ); let agg_config = AggregationConfigPinning::from_path(AGG_CONFIG_PATH); @@ -583,7 +588,7 @@ mod tests { CircuitBuilderStage::Prover, Some(agg_config), &vec![snark.clone()], - AGG_K, + &agg_params, ) .unwrap(); @@ -593,10 +598,10 @@ mod tests { println!("num_instances: {:?}", num_instances); println!("instances: {:?}", instances); - let proof = gen_evm_proof_shplonk(¶ms, &pk, agg_circuit, instances.clone()); + let proof = gen_evm_proof_shplonk(&agg_params, &pk, agg_circuit, instances.clone()); println!("proof size: {}", proof.len()); let deployment_code = AggregationCircuit::gen_evm_verifier_shplonk( - ¶ms, + &agg_params, &pk, None::, &vec![snark], diff --git a/lightclient-circuits/src/util/circuit.rs b/lightclient-circuits/src/util/circuit.rs index 6bda314..b95de66 100644 --- a/lightclient-circuits/src/util/circuit.rs +++ b/lightclient-circuits/src/util/circuit.rs @@ -13,9 +13,9 @@ use halo2_base::halo2_proofs::{ halo2curves::bn256::{Bn256, Fr, G1Affine}, plonk::ProvingKey, plonk::{Circuit, Error, VerifyingKey}, - poly::commitment::Params, poly::kzg::commitment::ParamsKZG, }; +use halo2_base::utils::fs::gen_srs; use serde::{Deserialize, Serialize}; use snark_verifier_sdk::evm::{ encode_calldata, evm_verify, gen_evm_proof_shplonk, gen_evm_verifier_shplonk, @@ -108,8 +108,8 @@ pub trait AppCircuit { fn create_circuit( stage: CircuitBuilderStage, pinning: Option, - witness_args: &Self::Witness, - k: u32, + witness: &Self::Witness, + params: &ParamsKZG, ) -> Result, Error>; /// Reads the proving key for the pre-circuit. @@ -117,11 +117,12 @@ pub trait AppCircuit { fn read_pk( params: &ParamsKZG, path: impl AsRef, - witness_args: &Self::Witness, + pinning_path: impl AsRef, + witness: &Self::Witness, ) -> ProvingKey { + let pinning = Self::Pinning::from_path(pinning_path); let circuit = - Self::create_circuit(CircuitBuilderStage::Keygen, None, witness_args, params.k()) - .unwrap(); + Self::create_circuit(CircuitBuilderStage::Keygen, Some(pinning), witness, params).unwrap(); custom_read_pk(path, &circuit) } @@ -132,9 +133,10 @@ pub trait AppCircuit { pk_path: impl AsRef, pinning_path: impl AsRef, witness_args: &Self::Witness, + pinning: Option, ) -> ProvingKey { let circuit = - Self::create_circuit(CircuitBuilderStage::Keygen, None, witness_args, params.k()) + Self::create_circuit(CircuitBuilderStage::Keygen, pinning, witness_args, params) .unwrap(); let pk_exists = pk_path.as_ref().exists(); @@ -151,20 +153,6 @@ pub trait AppCircuit { pinning.degree() } - fn read_or_create_pk( - params: &ParamsKZG, - pk_path: impl AsRef, - pinning_path: impl AsRef, - read_only: bool, - witness_args: &Self::Witness, - ) -> ProvingKey { - if read_only { - Self::read_pk(params, pk_path, witness_args) - } else { - Self::create_pk(params, pk_path, pinning_path, witness_args) - } - } - fn gen_proof_shplonk( params: &ParamsKZG, pk: &ProvingKey, @@ -176,7 +164,7 @@ pub trait AppCircuit { CircuitBuilderStage::Prover, Some(pinning), witness_args, - params.k(), + params, )?; let instances = circuit.instances(); let proof = gen_proof_shplonk(params, pk, circuit, instances, None); @@ -196,7 +184,7 @@ pub trait AppCircuit { CircuitBuilderStage::Prover, Some(pinning), witness_args, - params.k(), + params, )?; let snark = gen_snark_shplonk(params, pk, circuit, path); @@ -210,7 +198,7 @@ pub trait AppCircuit { witness_args: &Self::Witness, ) -> Result, Error> { let circuit = - Self::create_circuit(CircuitBuilderStage::Keygen, None, witness_args, params.k())?; + Self::create_circuit(CircuitBuilderStage::Keygen, None, witness_args, params)?; let deployment_code = custom_gen_evm_verifier_shplonk(params, pk.get_vk(), &circuit, yul_path); @@ -229,7 +217,7 @@ pub trait AppCircuit { CircuitBuilderStage::Prover, Some(pinning), witness_args, - params.k(), + params, )?; let instances = circuit.instances(); let proof = gen_evm_proof_shplonk(params, pk, circuit, instances.clone()); @@ -254,12 +242,23 @@ pub trait AppCircuit { CircuitBuilderStage::Prover, Some(pinning), witness_args, - params.k(), + params, )?; let calldata = write_calldata_generic(params, pk, circuit, path, deployment_code); Ok(calldata) } + + /// Same as [`AppCircuit::create_circuit`] but with a mock circuit. + fn mock_circuit( + stage: CircuitBuilderStage, + pinning: Option, + witness: &Self::Witness, + k: u32, + ) -> Result, Error> { + let params = gen_srs(k); + Self::create_circuit(stage, pinning, witness, ¶ms) + } } pub fn custom_gen_evm_verifier_shplonk>( diff --git a/lightclient-circuits/src/witness/rotation.rs b/lightclient-circuits/src/witness/rotation.rs index 50a5018..fac74f9 100644 --- a/lightclient-circuits/src/witness/rotation.rs +++ b/lightclient-circuits/src/witness/rotation.rs @@ -109,7 +109,7 @@ mod tests { const K: u32 = 18; let witness = CommitteeUpdateArgs::::default(); - let circuit = CommitteeUpdateCircuit::::create_circuit( + let circuit = CommitteeUpdateCircuit::::mock_circuit( CircuitBuilderStage::Mock, None, &witness, diff --git a/lightclient-circuits/src/witness/step.rs b/lightclient-circuits/src/witness/step.rs index 324584d..3755ef3 100644 --- a/lightclient-circuits/src/witness/step.rs +++ b/lightclient-circuits/src/witness/step.rs @@ -138,7 +138,7 @@ mod tests { const K: u32 = 20; let witness = SyncStepArgs::::default(); - let circuit = StepCircuit::::create_circuit( + let circuit = StepCircuit::::mock_circuit( CircuitBuilderStage::Mock, None, &witness, diff --git a/lightclient-circuits/tests/step.rs b/lightclient-circuits/tests/step.rs index 07cd2d6..71a9703 100644 --- a/lightclient-circuits/tests/step.rs +++ b/lightclient-circuits/tests/step.rs @@ -32,7 +32,7 @@ fn test_eth2_spec_mock_1( fn run_test_eth2_spec_mock(path: PathBuf) { let (sync_witness, rotation_witness) = read_test_files_and_gen_witness(&path); - let rotation_circuit = CommitteeUpdateCircuit::::create_circuit( + let rotation_circuit = CommitteeUpdateCircuit::::mock_circuit( CircuitBuilderStage::Mock, None, &rotation_witness, @@ -50,7 +50,7 @@ fn run_test_eth2_spec_mock(path: PathB prover.assert_satisfied_par(); end_timer!(timer); - let sync_circuit = StepCircuit::::create_circuit( + let sync_circuit = StepCircuit::::mock_circuit( CircuitBuilderStage::Mock, None, &sync_witness, @@ -76,12 +76,12 @@ fn test_eth2_spec_proofgen( let (witness, _) = read_test_files_and_gen_witness(&path); let params = gen_srs(K); - let pk = StepCircuit::::read_or_create_pk( + let pk = StepCircuit::::create_pk( ¶ms, "../build/sync_step_20.pkey", "./config/sync_step_20.json", - false, &SyncStepArgs::::default(), + None, ); let _ = StepCircuit::::gen_proof_shplonk( @@ -102,19 +102,19 @@ fn test_eth2_spec_evm_verify( const K: u32 = 21; let params = gen_srs(K); - let pk = StepCircuit::::read_or_create_pk( + let pk = StepCircuit::::create_pk( ¶ms, "../build/sync_step_21.pkey", "./config/sync_step_21.json", - false, &SyncStepArgs::::default(), + None ); let (witness, _) = read_test_files_and_gen_witness(&path); let pinning = Eth2ConfigPinning::from_path("./config/sync_step_21.json"); - let circuit = StepCircuit::::create_circuit( + let circuit = StepCircuit::::mock_circuit( CircuitBuilderStage::Prover, Some(pinning), &witness, diff --git a/preprocessor/src/rotation.rs b/preprocessor/src/rotation.rs index 6330696..0f67ab1 100644 --- a/preprocessor/src/rotation.rs +++ b/preprocessor/src/rotation.rs @@ -128,7 +128,7 @@ mod tests { let witness = fetch_rotation_args::(&client).await.unwrap(); let pinning = Eth2ConfigPinning::from_path(CONFIG_PATH); - let circuit = CommitteeUpdateCircuit::::create_circuit( + let circuit = CommitteeUpdateCircuit::::mock_circuit( CircuitBuilderStage::Mock, Some(pinning), &witness, @@ -146,12 +146,12 @@ mod tests { const K: u32 = 21; let params = gen_srs(K); - let pk = CommitteeUpdateCircuit::::read_or_create_pk( + let pk = CommitteeUpdateCircuit::::create_pk( ¶ms, "../build/sync_step_21.pkey", CONFIG_PATH, - false, &CommitteeUpdateArgs::::default(), + None, ); let client = MainnetClient::new(Url::parse("https://lodestar-sepolia.chainsafe.io").unwrap()); diff --git a/preprocessor/src/step.rs b/preprocessor/src/step.rs index 8c8fc8c..4b4bb36 100644 --- a/preprocessor/src/step.rs +++ b/preprocessor/src/step.rs @@ -180,13 +180,9 @@ mod tests { let witness = fetch_step_args::(&client).await.unwrap(); - let circuit = StepCircuit::::create_circuit( - CircuitBuilderStage::Mock, - None, - &witness, - K, - ) - .unwrap(); + let circuit = + StepCircuit::::mock_circuit(CircuitBuilderStage::Mock, None, &witness, K) + .unwrap(); let prover = MockProver::::run(K, &circuit, circuit.instances()).unwrap(); prover.assert_satisfied_par(); @@ -198,12 +194,12 @@ mod tests { const K: u32 = 21; let params = gen_srs(K); - let pk = StepCircuit::::read_or_create_pk( + let pk = StepCircuit::::create_pk( ¶ms, "../build/sync_step_21.pkey", CONFIG_PATH, - false, &SyncStepArgs::::default(), + None, ); let client = MainnetClient::new(Url::parse("https://lodestar-sepolia.chainsafe.io").unwrap()); diff --git a/prover/src/args.rs b/prover/src/args.rs index e98cc85..165ab76 100644 --- a/prover/src/args.rs +++ b/prover/src/args.rs @@ -60,7 +60,7 @@ pub enum ProofCmd { #[command(subcommand)] operation: OperationCmd, - #[clap(long, short, default_value = "21")] + #[clap(long, short, default_value = "20")] k: u32, #[clap(long, short)] @@ -71,22 +71,28 @@ pub enum ProofCmd { #[clap(long)] verifier_pk_path: PathBuf, + + #[clap(short = 'L', long)] + verifier_lookup_bits: Option, }, CommitteeUpdate { #[command(subcommand)] operation: OperationCmd, - #[clap(long, short, default_value = "18")] + #[clap(long, short, default_value = "20")] k: u32, #[clap(long, short)] pk_path: PathBuf, - #[clap(long, default_value = "25")] + #[clap(long, default_value = "24")] verifier_k: u32, #[clap(long)] verifier_pk_path: PathBuf, + + #[clap(short = 'L', long)] + verifier_lookup_bits: Option, }, } diff --git a/prover/src/cli.rs b/prover/src/cli.rs index dc98886..f5ec859 100644 --- a/prover/src/cli.rs +++ b/prover/src/cli.rs @@ -5,6 +5,8 @@ use crate::args::BaseArgs; use crate::args::{OperationCmd, ProofCmd}; use ark_std::{end_timer, start_timer}; +use lightclient_circuits::aggregation_circuit::AggregationConfigPinning; +use lightclient_circuits::halo2_base::gates::circuit::CircuitBuilderStage; use lightclient_circuits::halo2_base::utils::fs::gen_srs; use lightclient_circuits::{ committee_update_circuit::CommitteeUpdateCircuit, @@ -12,9 +14,6 @@ use lightclient_circuits::{ sync_step_circuit::StepCircuit, util::AppCircuit, }; -use lightclient_circuits::{ - halo2_base::gates::circuit::CircuitBuilderStage, halo2_proofs::poly::commitment::Params, -}; use snark_verifier::loader::halo2::halo2_ecc::halo2_base::halo2_proofs::poly::kzg::commitment::ParamsKZG; use snark_verifier_sdk::halo2::aggregation::AggregationCircuit; use snark_verifier_sdk::CircuitExt; @@ -56,6 +55,7 @@ where &pk_path, cfg_path, &Default::default(), + None, ); Ok(()) @@ -82,18 +82,19 @@ where verifier_k, verifier_pk_path, pk_path, + verifier_lookup_bits, } => { let cfg_path = get_config_path(&pk_path, &base_args.config_dir); let gen_dummy_snark = |k: u32| { let params = gen_srs(k); - let pk = CommitteeUpdateCircuit::::read_or_create_pk( + let pk = CommitteeUpdateCircuit::::create_pk( ¶ms, &pk_path, &cfg_path, - true, &Default::default(), + None, ); CommitteeUpdateCircuit::::gen_snark_shplonk( @@ -121,6 +122,9 @@ where &verifier_pk_path, verifier_cfg_path, &vec![dummy_snark], + verifier_lookup_bits.map(|lookup_bits| { + AggregationConfigPinning::new(verifier_k, lookup_bits) + }), ); Ok(()) @@ -156,18 +160,19 @@ where pk_path, verifier_k, verifier_pk_path, + verifier_lookup_bits, } => { let cfg_path = get_config_path(&pk_path, &base_args.config_dir); let gen_dummy_snark = |k: u32| { let params = gen_srs(k); - let pk = StepCircuit::::read_or_create_pk( + let pk = StepCircuit::::create_pk( ¶ms, &pk_path, &cfg_path, - true, &Default::default(), + None, ); StepCircuit::::gen_snark_shplonk( @@ -195,6 +200,9 @@ where &verifier_pk_path, verifier_cfg_path, &vec![dummy_snark], + verifier_lookup_bits.map(|lookup_bits| { + AggregationConfigPinning::new(verifier_k, lookup_bits) + }), ); Ok(()) @@ -244,16 +252,12 @@ fn gen_evm_verifier( estimate_gas: bool, default_witness: Circuit::Witness, ) -> eyre::Result<()> { - let pk = Circuit::read_pk(params, pk_path, &default_witness); + let pk = Circuit::read_pk(params, pk_path, cfg_path, &default_witness); let num_instances = { - let circuit = Circuit::create_circuit( - CircuitBuilderStage::Keygen, - None, - &default_witness, - params.k(), - ) - .unwrap(); + let circuit = + Circuit::create_circuit(CircuitBuilderStage::Keygen, None, &default_witness, params) + .unwrap(); circuit.num_instance().first().map_or(0, |x| *x as u32) }; diff --git a/prover/src/rpc.rs b/prover/src/rpc.rs index 5b89570..cacfbd9 100644 --- a/prover/src/rpc.rs +++ b/prover/src/rpc.rs @@ -86,6 +86,7 @@ pub(crate) async fn gen_evm_proof_committee_update_handler( let pk_agg = AggregationCircuit::read_pk( ¶ms_agg, format!("./build/{verifier_filename}.pkey"), + &pinning_path, &vec![snark.clone()], ); @@ -166,6 +167,7 @@ pub(crate) async fn gen_evm_proof_sync_step_compressed_handler( let pk_agg = AggregationCircuit::read_pk( ¶ms_agg, format!("./build/{verifier_filename}.pkey"), + &pinning_path, &vec![snark.clone()], ); @@ -204,7 +206,7 @@ where { let params = gen_srs(Circuit::get_degree(&config_path)); - let app_pk = Circuit::read_pk(¶ms, pk_path, &Circuit::Witness::default()); + let app_pk = Circuit::read_pk(¶ms, pk_path, &config_path, &Circuit::Witness::default()); Ok(Circuit::gen_snark_shplonk( ¶ms, From d7fd66ba0f3aeaeed747b5deaf1f6ec3c6e3c053 Mon Sep 17 00:00:00 2001 From: Timofey Luin Date: Thu, 14 Dec 2023 22:56:04 +0100 Subject: [PATCH 2/4] gen contracts --- .../committee_update_verifier.sol | 4 +-- .../snark-verifiers/sync_step_verifier.sol | 2 +- justfile | 14 +++++----- .../config/committee_update_testnet.json | 15 ++++------- .../committee_update_verifier_testnet.json | 6 ++--- .../config/sync_step_testnet.json | 26 ++++++++++++------- .../config/sync_step_verifier_testnet.json | 22 ++++++++-------- lightclient-circuits/tests/step.rs | 2 +- prover/src/args.rs | 8 +++--- 9 files changed, 50 insertions(+), 49 deletions(-) diff --git a/contracts/snark-verifiers/committee_update_verifier.sol b/contracts/snark-verifiers/committee_update_verifier.sol index 2d19927..215c09e 100644 --- a/contracts/snark-verifiers/committee_update_verifier.sol +++ b/contracts/snark-verifiers/committee_update_verifier.sol @@ -16,8 +16,8 @@ contract Verifier { bytes calldata proof ) public view returns (bool) { bool success = true; - bytes32[970] memory transcript; + bytes32[969] memory transcript; for (uint i = 0; i < pubInputs.length; i++) { require(pubInputs[i] < SIZE_LIMIT); } - assembly { let f_p := 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47 let f_q := 0x30644e72e131a029b85045b68181585d2833e84879b9709143e1f593f0000001 function validate_ec_point(x, y) -> valid { { let x_lt_p := lt(x, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) let y_lt_p := lt(y, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) valid := and(x_lt_p, y_lt_p) } { let y_square := mulmod(y, y, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) let x_square := mulmod(x, x, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) let x_cube := mulmod(x_square, x, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) let x_cube_plus_3 := addmod(x_cube, 3, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) let is_affine := eq(x_cube_plus_3, y_square) valid := and(valid, is_affine) } } mstore(0xa0, mod(calldataload(0x4), f_q))mstore(0xc0, mod(calldataload(0x24), f_q))mstore(0xe0, mod(calldataload(0x44), f_q))mstore(0x100, mod(calldataload(0x64), f_q))mstore(0x120, mod(calldataload(0x84), f_q))mstore(0x140, mod(calldataload(0xa4), f_q))mstore(0x160, mod(calldataload(0xc4), f_q))mstore(0x180, mod(calldataload(0xe4), f_q))mstore(0x1a0, mod(calldataload(0x104), f_q))mstore(0x1c0, mod(calldataload(0x124), f_q))mstore(0x1e0, mod(calldataload(0x144), f_q))mstore(0x200, mod(calldataload(0x164), f_q))mstore(0x220, mod(calldataload(0x184), f_q))mstore(0x240, mod(calldataload(0x1a4), f_q))mstore(0x260, mod(calldataload(0x1c4), f_q))mstore(0x280, mod(calldataload(0x1e4), f_q))mstore(0x2a0, mod(calldataload(0x204), f_q))mstore(0x2c0, mod(calldataload(0x224), f_q))mstore(0x2e0, mod(calldataload(0x244), f_q))mstore(0x300, mod(calldataload(0x264), f_q))mstore(0x320, mod(calldataload(0x284), f_q))mstore(0x340, mod(calldataload(0x2a4), f_q))mstore(0x360, mod(calldataload(0x2c4), f_q))mstore(0x380, mod(calldataload(0x2e4), f_q))mstore(0x3a0, mod(calldataload(0x304), f_q))mstore(0x3c0, mod(calldataload(0x324), f_q))mstore(0x3e0, mod(calldataload(0x344), f_q))mstore(0x400, mod(calldataload(0x364), f_q))mstore(0x420, mod(calldataload(0x384), f_q))mstore(0x440, mod(calldataload(0x3a4), f_q))mstore(0x460, mod(calldataload(0x3c4), f_q))mstore(0x480, mod(calldataload(0x3e4), f_q))mstore(0x4a0, mod(calldataload(0x404), f_q))mstore(0x4c0, mod(calldataload(0x424), f_q))mstore(0x4e0, mod(calldataload(0x444), f_q))mstore(0x500, mod(calldataload(0x464), f_q))mstore(0x520, mod(calldataload(0x484), f_q))mstore(0x540, mod(calldataload(0x4a4), f_q))mstore(0x560, mod(calldataload(0x4c4), f_q))mstore(0x580, mod(calldataload(0x4e4), f_q))mstore(0x5a0, mod(calldataload(0x504), f_q))mstore(0x5c0, mod(calldataload(0x524), f_q))mstore(0x5e0, mod(calldataload(0x544), f_q))mstore(0x600, mod(calldataload(0x564), f_q))mstore(0x620, mod(calldataload(0x584), f_q))mstore(0x640, mod(calldataload(0x5a4), f_q))mstore(0x660, mod(calldataload(0x5c4), f_q))mstore(0x680, mod(calldataload(0x5e4), f_q))mstore(0x6a0, mod(calldataload(0x604), f_q))mstore(0x6c0, mod(calldataload(0x624), f_q))mstore(0x6e0, mod(calldataload(0x644), f_q))mstore(0x700, mod(calldataload(0x664), f_q))mstore(0x720, mod(calldataload(0x684), f_q))mstore(0x740, mod(calldataload(0x6a4), f_q))mstore(0x760, mod(calldataload(0x6c4), f_q))mstore(0x780, mod(calldataload(0x6e4), f_q))mstore(0x7a0, mod(calldataload(0x704), f_q))mstore(0x7c0, mod(calldataload(0x724), f_q))mstore(0x7e0, mod(calldataload(0x744), f_q))mstore(0x800, mod(calldataload(0x764), f_q))mstore(0x820, mod(calldataload(0x784), f_q))mstore(0x840, mod(calldataload(0x7a4), f_q))mstore(0x860, mod(calldataload(0x7c4), f_q))mstore(0x880, mod(calldataload(0x7e4), f_q))mstore(0x8a0, mod(calldataload(0x804), f_q))mstore(0x8c0, mod(calldataload(0x824), f_q))mstore(0x8e0, mod(calldataload(0x844), f_q))mstore(0x900, mod(calldataload(0x864), f_q))mstore(0x920, mod(calldataload(0x884), f_q))mstore(0x940, mod(calldataload(0x8a4), f_q))mstore(0x960, mod(calldataload(0x8c4), f_q))mstore(0x980, mod(calldataload(0x8e4), f_q))mstore(0x9a0, mod(calldataload(0x904), f_q))mstore(0x9c0, mod(calldataload(0x924), f_q))mstore(0x9e0, mod(calldataload(0x944), f_q))mstore(0xa00, mod(calldataload(0x964), f_q))mstore(0xa20, mod(calldataload(0x984), f_q))mstore(0x80, 1854357779622015772907498683783501585605900437694562717430735193629672259344) { let x := calldataload(0x9e4) mstore(0xa40, x) let y := calldataload(0xa04) mstore(0xa60, y) success := and(validate_ec_point(x, y), success) }mstore(0xa80, keccak256(0x80, 2560)){ let hash := mload(0xa80) mstore(0xaa0, mod(hash, f_q)) mstore(0xac0, hash) } { let x := calldataload(0xa24) mstore(0xae0, x) let y := calldataload(0xa44) mstore(0xb00, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0xa64) mstore(0xb20, x) let y := calldataload(0xa84) mstore(0xb40, y) success := and(validate_ec_point(x, y), success) }mstore(0xb60, keccak256(0xac0, 160)){ let hash := mload(0xb60) mstore(0xb80, mod(hash, f_q)) mstore(0xba0, hash) }mstore8(0xbc0, 1)mstore(0xbc0, keccak256(0xba0, 33)){ let hash := mload(0xbc0) mstore(0xbe0, mod(hash, f_q)) mstore(0xc00, hash) } { let x := calldataload(0xaa4) mstore(0xc20, x) let y := calldataload(0xac4) mstore(0xc40, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0xae4) mstore(0xc60, x) let y := calldataload(0xb04) mstore(0xc80, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0xb24) mstore(0xca0, x) let y := calldataload(0xb44) mstore(0xcc0, y) success := and(validate_ec_point(x, y), success) }mstore(0xce0, keccak256(0xc00, 224)){ let hash := mload(0xce0) mstore(0xd00, mod(hash, f_q)) mstore(0xd20, hash) } { let x := calldataload(0xb64) mstore(0xd40, x) let y := calldataload(0xb84) mstore(0xd60, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0xba4) mstore(0xd80, x) let y := calldataload(0xbc4) mstore(0xda0, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0xbe4) mstore(0xdc0, x) let y := calldataload(0xc04) mstore(0xde0, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0xc24) mstore(0xe00, x) let y := calldataload(0xc44) mstore(0xe20, y) success := and(validate_ec_point(x, y), success) }mstore(0xe40, keccak256(0xd20, 288)){ let hash := mload(0xe40) mstore(0xe60, mod(hash, f_q)) mstore(0xe80, hash) }mstore(0xea0, mod(calldataload(0xc64), f_q))mstore(0xec0, mod(calldataload(0xc84), f_q))mstore(0xee0, mod(calldataload(0xca4), f_q))mstore(0xf00, mod(calldataload(0xcc4), f_q))mstore(0xf20, mod(calldataload(0xce4), f_q))mstore(0xf40, mod(calldataload(0xd04), f_q))mstore(0xf60, mod(calldataload(0xd24), f_q))mstore(0xf80, mod(calldataload(0xd44), f_q))mstore(0xfa0, mod(calldataload(0xd64), f_q))mstore(0xfc0, mod(calldataload(0xd84), f_q))mstore(0xfe0, mod(calldataload(0xda4), f_q))mstore(0x1000, mod(calldataload(0xdc4), f_q))mstore(0x1020, mod(calldataload(0xde4), f_q))mstore(0x1040, mod(calldataload(0xe04), f_q))mstore(0x1060, mod(calldataload(0xe24), f_q))mstore(0x1080, mod(calldataload(0xe44), f_q))mstore(0x10a0, mod(calldataload(0xe64), f_q))mstore(0x10c0, mod(calldataload(0xe84), f_q))mstore(0x10e0, mod(calldataload(0xea4), f_q))mstore(0x1100, keccak256(0xe80, 640)){ let hash := mload(0x1100) mstore(0x1120, mod(hash, f_q)) mstore(0x1140, hash) }mstore8(0x1160, 1)mstore(0x1160, keccak256(0x1140, 33)){ let hash := mload(0x1160) mstore(0x1180, mod(hash, f_q)) mstore(0x11a0, hash) } { let x := calldataload(0xec4) mstore(0x11c0, x) let y := calldataload(0xee4) mstore(0x11e0, y) success := and(validate_ec_point(x, y), success) }mstore(0x1200, keccak256(0x11a0, 96)){ let hash := mload(0x1200) mstore(0x1220, mod(hash, f_q)) mstore(0x1240, hash) } { let x := calldataload(0xf04) mstore(0x1260, x) let y := calldataload(0xf24) mstore(0x1280, y) success := and(validate_ec_point(x, y), success) }{ let x := mload(0xa0)x := add(x, shl(88, mload(0xc0)))x := add(x, shl(176, mload(0xe0)))mstore(0x12a0, x)let y := mload(0x100)y := add(y, shl(88, mload(0x120)))y := add(y, shl(176, mload(0x140)))mstore(0x12c0, y) success := and(validate_ec_point(x, y), success) }{ let x := mload(0x160)x := add(x, shl(88, mload(0x180)))x := add(x, shl(176, mload(0x1a0)))mstore(0x12e0, x)let y := mload(0x1c0)y := add(y, shl(88, mload(0x1e0)))y := add(y, shl(176, mload(0x200)))mstore(0x1300, y) success := and(validate_ec_point(x, y), success) }mstore(0x1320, mulmod(mload(0xe60), mload(0xe60), f_q))mstore(0x1340, mulmod(mload(0x1320), mload(0x1320), f_q))mstore(0x1360, mulmod(mload(0x1340), mload(0x1340), f_q))mstore(0x1380, mulmod(mload(0x1360), mload(0x1360), f_q))mstore(0x13a0, mulmod(mload(0x1380), mload(0x1380), f_q))mstore(0x13c0, mulmod(mload(0x13a0), mload(0x13a0), f_q))mstore(0x13e0, mulmod(mload(0x13c0), mload(0x13c0), f_q))mstore(0x1400, mulmod(mload(0x13e0), mload(0x13e0), f_q))mstore(0x1420, mulmod(mload(0x1400), mload(0x1400), f_q))mstore(0x1440, mulmod(mload(0x1420), mload(0x1420), f_q))mstore(0x1460, mulmod(mload(0x1440), mload(0x1440), f_q))mstore(0x1480, mulmod(mload(0x1460), mload(0x1460), f_q))mstore(0x14a0, mulmod(mload(0x1480), mload(0x1480), f_q))mstore(0x14c0, mulmod(mload(0x14a0), mload(0x14a0), f_q))mstore(0x14e0, mulmod(mload(0x14c0), mload(0x14c0), f_q))mstore(0x1500, mulmod(mload(0x14e0), mload(0x14e0), f_q))mstore(0x1520, mulmod(mload(0x1500), mload(0x1500), f_q))mstore(0x1540, mulmod(mload(0x1520), mload(0x1520), f_q))mstore(0x1560, mulmod(mload(0x1540), mload(0x1540), f_q))mstore(0x1580, mulmod(mload(0x1560), mload(0x1560), f_q))mstore(0x15a0, mulmod(mload(0x1580), mload(0x1580), f_q))mstore(0x15c0, mulmod(mload(0x15a0), mload(0x15a0), f_q))mstore(0x15e0, mulmod(mload(0x15c0), mload(0x15c0), f_q))mstore(0x1600, mulmod(mload(0x15e0), mload(0x15e0), f_q))mstore(0x1620, mulmod(mload(0x1600), mload(0x1600), f_q))mstore(0x1640, addmod(mload(0x1620), 21888242871839275222246405745257275088548364400416034343698204186575808495616, f_q))mstore(0x1660, mulmod(mload(0x1640), 21888242219518804655518433051623070663413851959604507555939307129453691614729, f_q))mstore(0x1680, mulmod(mload(0x1660), 2589924162180571669379035227311450128851046490936248479048462765733473671200, f_q))mstore(0x16a0, addmod(mload(0xe60), 19298318709658703552867370517945824959697317909479785864649741420842334824417, f_q))mstore(0x16c0, mulmod(mload(0x1660), 7358966525675286471217089135633860168646304224547606326237275077574224349359, f_q))mstore(0x16e0, addmod(mload(0xe60), 14529276346163988751029316609623414919902060175868428017460929109001584146258, f_q))mstore(0x1700, mulmod(mload(0x1660), 5723528081196465413808013109680264505774289533922470433187916976440924869204, f_q))mstore(0x1720, addmod(mload(0xe60), 16164714790642809808438392635577010582774074866493563910510287210134883626413, f_q))mstore(0x1740, mulmod(mload(0x1660), 9741553891420464328295280489650144566903017206473301385034033384879943874347, f_q))mstore(0x1760, addmod(mload(0xe60), 12146688980418810893951125255607130521645347193942732958664170801695864621270, f_q))mstore(0x1780, mulmod(mload(0x1660), 16569469942529664681363945218228869388192121720036659574609237682362097667612, f_q))mstore(0x17a0, addmod(mload(0xe60), 5318772929309610540882460527028405700356242680379374769088966504213710828005, f_q))mstore(0x17c0, mulmod(mload(0x1660), 17329448237240114492580865744088056414251735686965494637158808787419781175510, f_q))mstore(0x17e0, addmod(mload(0xe60), 4558794634599160729665540001169218674296628713450539706539395399156027320107, f_q))mstore(0x1800, mulmod(mload(0x1660), 11377606117859914088982205826922132024839443553408109299929510653283289974216, f_q))mstore(0x1820, addmod(mload(0xe60), 10510636753979361133264199918335143063708920847007925043768693533292518521401, f_q))mstore(0x1840, mulmod(mload(0x1660), 1, f_q))mstore(0x1860, addmod(mload(0xe60), 21888242871839275222246405745257275088548364400416034343698204186575808495616, f_q))mstore(0x1880, mulmod(mload(0x1660), 6143038923529407703646399695489445107254060255791852207908457597807435305312, f_q))mstore(0x18a0, addmod(mload(0xe60), 15745203948309867518600006049767829981294304144624182135789746588768373190305, f_q))mstore(0x18c0, mulmod(mload(0x1660), 11451405578697956743456240853980216273390554734748796433026540431386972584651, f_q))mstore(0x18e0, addmod(mload(0xe60), 10436837293141318478790164891277058815157809665667237910671663755188835910966, f_q))mstore(0x1900, mulmod(mload(0x1660), 16670521521732547392407716560529197273408943645332907966320731856743274895475, f_q))mstore(0x1920, addmod(mload(0xe60), 5217721350106727829838689184728077815139420755083126377377472329832533600142, f_q))mstore(0x1940, mulmod(mload(0x1660), 8374374965308410102411073611984011876711565317741801500439755773472076597347, f_q))mstore(0x1960, addmod(mload(0xe60), 13513867906530865119835332133273263211836799082674232843258448413103731898270, f_q))mstore(0x1980, mulmod(mload(0x1660), 17041886618628883845743410343041491135676788197442345444346654338941897766515, f_q))mstore(0x19a0, addmod(mload(0xe60), 4846356253210391376502995402215783952871576202973688899351549847633910729102, f_q))mstore(0x19c0, mulmod(mload(0x1660), 21490807004895109926141140246143262403290679459142140821740925192625185504522, f_q))mstore(0x19e0, addmod(mload(0xe60), 397435866944165296105265499114012685257684941273893521957278993950622991095, f_q))mstore(0x1a00, mulmod(mload(0x1660), 4947689244094276630090796471410438387704819356682144196760515917874272844658, f_q))mstore(0x1a20, addmod(mload(0xe60), 16940553627744998592155609273846836700843545043733890146937688268701535650959, f_q))mstore(0x1a40, mulmod(mload(0x1660), 11211301017135681023579411905410872569206244553457844956874280139879520583390, f_q))mstore(0x1a60, addmod(mload(0xe60), 10676941854703594198666993839846402519342119846958189386823924046696287912227, f_q))mstore(0x1a80, mulmod(mload(0x1660), 5264024894212359361117235356180248560912605977787414341366976252256241723081, f_q))mstore(0x1aa0, addmod(mload(0xe60), 16624217977626915861129170389077026527635758422628620002331227934319566772536, f_q))mstore(0x1ac0, mulmod(mload(0x1660), 18846108080730935585192484934247867403156699586319724728525857970312957475341, f_q))mstore(0x1ae0, addmod(mload(0xe60), 3042134791108339637053920811009407685391664814096309615172346216262851020276, f_q))mstore(0x1b00, mulmod(mload(0x1660), 14702679338564370535199761954906750181917994561807919001424434650417511039135, f_q))mstore(0x1b20, addmod(mload(0xe60), 7185563533274904687046643790350524906630369838608115342273769536158297456482, f_q))mstore(0x1b40, mulmod(mload(0x1660), 3615478808282855240548287271348143516886772452944084747768312988864436725401, f_q))mstore(0x1b60, addmod(mload(0xe60), 18272764063556419981698118473909131571661591947471949595929891197711371770216, f_q))mstore(0x1b80, mulmod(mload(0x1660), 20616120149426804763291284446254360562902600427757250597073510835143294097149, f_q))mstore(0x1ba0, addmod(mload(0xe60), 1272122722412470458955121299002914525645763972658783746624693351432514398468, f_q))mstore(0x1bc0, mulmod(mload(0x1660), 21451937155080765789602997556105366785934335730087568134349216848800867145453, f_q))mstore(0x1be0, addmod(mload(0xe60), 436305716758509432643408189151908302614028670328466209348987337774941350164, f_q))mstore(0x1c00, mulmod(mload(0x1660), 19017161409611545481649028523508330517390470146558499215911270929711753577772, f_q))mstore(0x1c20, addmod(mload(0xe60), 2871081462227729740597377221748944571157894253857535127786933256864054917845, f_q))mstore(0x1c40, mulmod(mload(0x1660), 1426404432721484388505361748317961535523355871255605456897797744433766488507, f_q))mstore(0x1c60, addmod(mload(0xe60), 20461838439117790833741043996939313553025008529160428886800406442142042007110, f_q))mstore(0x1c80, mulmod(mload(0x1660), 10856460699172062612938276947444161095149765964986006640875349177781443506948, f_q))mstore(0x1ca0, addmod(mload(0xe60), 11031782172667212609308128797813113993398598435430027702822855008794364988669, f_q))mstore(0x1cc0, mulmod(mload(0x1660), 13982290267294411190096162596630216412723378687553046594730793425118513274800, f_q))mstore(0x1ce0, addmod(mload(0xe60), 7905952604544864032150243148627058675824985712862987748967410761457295220817, f_q))mstore(0x1d00, mulmod(mload(0x1660), 6561173800290098519452899326025724923999000100011249967503610931251216538972, f_q))mstore(0x1d20, addmod(mload(0xe60), 15327069071549176702793506419231550164549364300404784376194593255324591956645, f_q))mstore(0x1d40, mulmod(mload(0x1660), 216092043779272773661818549620449970334216366264741118684015851799902419467, f_q))mstore(0x1d60, addmod(mload(0xe60), 21672150828060002448584587195636825118214148034151293225014188334775906076150, f_q))mstore(0x1d80, mulmod(mload(0x1660), 8339897343549661683735240707424456381152000284494796404206060322637347081841, f_q))mstore(0x1da0, addmod(mload(0xe60), 13548345528289613538511165037832818707396364115921237939492143863938461413776, f_q))mstore(0x1dc0, mulmod(mload(0x1660), 9537783784440837896026284659246718978615447564543116209283382057778110278482, f_q))mstore(0x1de0, addmod(mload(0xe60), 12350459087398437326220121086010556109932916835872918134414822128797698217135, f_q))mstore(0x1e00, mulmod(mload(0x1660), 4918863199804216794313374068541208658413103970649356533216388956233707684201, f_q))mstore(0x1e20, addmod(mload(0xe60), 16969379672035058427933031676716066430135260429766677810481815230342100811416, f_q))mstore(0x1e40, mulmod(mload(0x1660), 12619617507853212586156872920672483948819476989779550311307282715684870266992, f_q))mstore(0x1e60, addmod(mload(0xe60), 9268625363986062636089532824584791139728887410636484032390921470890938228625, f_q))mstore(0x1e80, mulmod(mload(0x1660), 7724834143148934071153960970746466069533317335090538734978957273885451415039, f_q))mstore(0x1ea0, addmod(mload(0xe60), 14163408728690341151092444774510809019015047065325495608719246912690357080578, f_q))mstore(0x1ec0, mulmod(mload(0x1660), 3947443723575973965644279767310964219908423994086470065513888332899718123222, f_q))mstore(0x1ee0, addmod(mload(0xe60), 17940799148263301256602125977946310868639940406329564278184315853676090372395, f_q))mstore(0x1f00, mulmod(mload(0x1660), 4278169934129084685243600944817585393960331423200121614669592058880339851017, f_q))mstore(0x1f20, addmod(mload(0xe60), 17610072937710190537002804800439689694588032977215912729028612127695468644600, f_q))mstore(0x1f40, mulmod(mload(0x1660), 18610195890048912503953886742825279624920778288956610528523679659246523534888, f_q))mstore(0x1f60, addmod(mload(0xe60), 3278046981790362718292519002431995463627586111459423815174524527329284960729, f_q))mstore(0x1f80, mulmod(mload(0x1660), 18650950439243380548803943501264732333660994969150820494757875443931913035538, f_q))mstore(0x1fa0, addmod(mload(0xe60), 3237292432595894673442462243992542754887369431265213848940328742643895460079, f_q))mstore(0x1fc0, mulmod(mload(0x1660), 1539082509056298927655194235755440186888826897239928178265486731666142403222, f_q))mstore(0x1fe0, addmod(mload(0xe60), 20349160362782976294591211509501834901659537503176106165432717454909666092395, f_q))mstore(0x2000, mulmod(mload(0x1660), 7201942790515709282685196242945925103656293029640288298785338889388148385095, f_q))mstore(0x2020, addmod(mload(0xe60), 14686300081323565939561209502311349984892071370775746044912865297187660110522, f_q))mstore(0x2040, mulmod(mload(0x1660), 19032961837237948602743626455740240236231119053033140765040043513661803148152, f_q))mstore(0x2060, addmod(mload(0xe60), 2855281034601326619502779289517034852317245347382893578658160672914005347465, f_q))mstore(0x2080, mulmod(mload(0x1660), 2567282239914283233897093963566444708534370585850632404740959782869832258160, f_q))mstore(0x20a0, addmod(mload(0xe60), 19320960631924991988349311781690830380013993814565401938957244403705976237457, f_q))mstore(0x20c0, mulmod(mload(0x1660), 4317410353320599552056040796202302907960891408523818766419977508859423800635, f_q))mstore(0x20e0, addmod(mload(0xe60), 17570832518518675670190364949054972180587472991892215577278226677716384694982, f_q))mstore(0x2100, mulmod(mload(0x1660), 13278633335035662196775171978256331227098467443289894350288377027124807268610, f_q))mstore(0x2120, addmod(mload(0xe60), 8609609536803613025471233767000943861449896957126139993409827159451001227007, f_q))mstore(0x2140, mulmod(mload(0x1660), 14875928112196239563830800280253496262679717528621719058794366823499719730250, f_q))mstore(0x2160, addmod(mload(0xe60), 7012314759643035658415605465003778825868646871794315284903837363076088765367, f_q))mstore(0x2180, mulmod(mload(0x1660), 19796139880566276863821462929959333991118601370893606152699382550533537294194, f_q))mstore(0x21a0, addmod(mload(0xe60), 2092102991272998358424942815297941097429763029522428190998821636042271201423, f_q))mstore(0x21c0, mulmod(mload(0x1660), 2366023502186770334390939928726871658997402416352868340984630739442624219298, f_q))mstore(0x21e0, addmod(mload(0xe60), 19522219369652504887855465816530403429550961984063166002713573447133184276319, f_q))mstore(0x2200, mulmod(mload(0x1660), 21253353101772772853143434797425538330127740258736196037595754086106342026689, f_q))mstore(0x2220, addmod(mload(0xe60), 634889770066502369102970947831736758420624141679838306102450100469466468928, f_q))mstore(0x2240, mulmod(mload(0x1660), 915149353520972163646494413843788069594022902357002628455555785223409501882, f_q))mstore(0x2260, addmod(mload(0xe60), 20973093518318303058599911331413487018954341498059031715242648401352398993735, f_q))mstore(0x2280, mulmod(mload(0x1660), 10568970125726285804117343896670014233202947662952899210242732241268902924574, f_q))mstore(0x22a0, addmod(mload(0xe60), 11319272746112989418129061848587260855345416737463135133455471945306905571043, f_q))mstore(0x22c0, mulmod(mload(0x1660), 14391499717548074167711220639833994904150450341569029103202493919171555826079, f_q))mstore(0x22e0, addmod(mload(0xe60), 7496743154291201054535185105423280184397914058847005240495710267404252669538, f_q))mstore(0x2300, mulmod(mload(0x1660), 21625474091353515468972056892507670731596366572979277269929807338991438239209, f_q))mstore(0x2320, addmod(mload(0xe60), 262768780485759753274348852749604356951997827436757073768396847584370256408, f_q))mstore(0x2340, mulmod(mload(0x1660), 5522161504810533295870699551020523636289972223872138525048055197429246400245, f_q))mstore(0x2360, addmod(mload(0xe60), 16366081367028741926375706194236751452258392176543895818650148989146562095372, f_q))mstore(0x2380, mulmod(mload(0x1660), 13460340987090708339895471217907463146299492238292355609500595215222015441425, f_q))mstore(0x23a0, addmod(mload(0xe60), 8427901884748566882350934527349811942248872162123678734197608971353793054192, f_q))mstore(0x23c0, mulmod(mload(0x1660), 10119780362642123194334092174270235809557798114544683654677907882314807212354, f_q))mstore(0x23e0, addmod(mload(0xe60), 11768462509197152027912313570987039278990566285871350689020296304261001283263, f_q))mstore(0x2400, mulmod(mload(0x1660), 17071166023700100601206475197987781457317255275364269378966936420361158573060, f_q))mstore(0x2420, addmod(mload(0xe60), 4817076848139174621039930547269493631231109125051764964731267766214649922557, f_q))mstore(0x2440, mulmod(mload(0x1660), 3766081621734395783232337525162072736827576297943013392955872170138036189193, f_q))mstore(0x2460, addmod(mload(0xe60), 18122161250104879439014068220095202351720788102473020950742332016437772306424, f_q))mstore(0x2480, mulmod(mload(0x1660), 12527559239011619672642164628594151794373299855825077281897476265823405013867, f_q))mstore(0x24a0, addmod(mload(0xe60), 9360683632827655549604241116663123294175064544590957061800727920752403481750, f_q))mstore(0x24c0, mulmod(mload(0x1660), 2080322550956715654503104356805349981348621877591103674778333538652571537127, f_q))mstore(0x24e0, addmod(mload(0xe60), 19807920320882559567743301388451925107199742522824930668919870647923236958490, f_q))mstore(0x2500, mulmod(mload(0x1660), 2628756703476154169061943895067339616982893965722790735027992440678275638809, f_q))mstore(0x2520, addmod(mload(0xe60), 19259486168363121053184461850189935471565470434693243608670211745897532856808, f_q))mstore(0x2540, mulmod(mload(0x1660), 9100833993744738801214480881117348002768153232283708533639316963648253510584, f_q))mstore(0x2560, addmod(mload(0xe60), 12787408878094536421031924864139927085780211168132325810058887222927554985033, f_q))mstore(0x2580, mulmod(mload(0x1660), 2716126075209315604595593532492318169063881707251443034813230722931138506730, f_q))mstore(0x25a0, addmod(mload(0xe60), 19172116796629959617650812212764956919484482693164591308884973463644669988887, f_q))mstore(0x25c0, mulmod(mload(0x1660), 11145214675344139457514777444556774698911688619991656085001542609383151586084, f_q))mstore(0x25e0, addmod(mload(0xe60), 10743028196495135764731628300700500389636675780424378258696661577192656909533, f_q))mstore(0x2600, mulmod(mload(0x1660), 9455661879513343744992217403146497004398519586311920696418911397370647067417, f_q))mstore(0x2620, addmod(mload(0xe60), 12432580992325931477254188342110778084149844814104113647279292789205161428200, f_q))mstore(0x2640, mulmod(mload(0x1660), 4245441013247250116003069945606352967193023389718465410501109428393342802981, f_q))mstore(0x2660, addmod(mload(0xe60), 17642801858592025106243335799650922121355341010697568933197094758182465692636, f_q))mstore(0x2680, mulmod(mload(0x1660), 8121682530053504880310722217952646955671803028092472717631336758359411770524, f_q))mstore(0x26a0, addmod(mload(0xe60), 13766560341785770341935683527304628132876561372323561626066867428216396725093, f_q))mstore(0x26c0, mulmod(mload(0x1660), 19228510170961893342195489288913594506775385223367826565223897736323409650249, f_q))mstore(0x26e0, addmod(mload(0xe60), 2659732700877381880050916456343680581772979177048207778474306450252398845368, f_q))mstore(0x2700, mulmod(mload(0x1660), 21028615043508430391966460973087822914495768542988934643007264425341826464745, f_q))mstore(0x2720, addmod(mload(0xe60), 859627828330844830279944772169452174052595857427099700690939761233982030872, f_q))mstore(0x2740, mulmod(mload(0x1660), 6132660129994545119218258312491950835441607143741804980633129304664017206141, f_q))mstore(0x2760, addmod(mload(0xe60), 15755582741844730103028147432765324253106757256674229363065074881911791289476, f_q))mstore(0x2780, mulmod(mload(0x1660), 20568413767908000563248462071403279763059526791006943936879709840333098380384, f_q))mstore(0x27a0, addmod(mload(0xe60), 1319829103931274658997943673853995325488837609409090406818494346242710115233, f_q))mstore(0x27c0, mulmod(mload(0x1660), 10094752117139066216691253588991632982053223883646966177987813353508871280747, f_q))mstore(0x27e0, addmod(mload(0xe60), 11793490754700209005555152156265642106495140516769068165710390833066937214870, f_q))mstore(0x2800, mulmod(mload(0x1660), 1412722828635353260820440480395979990287424749622479812473617828668210087992, f_q))mstore(0x2820, addmod(mload(0xe60), 20475520043203921961425965264861295098260939650793554531224586357907598407625, f_q))mstore(0x2840, mulmod(mload(0x1660), 5854133144571823792863860130267644613802765696134002830362054821530146160770, f_q))mstore(0x2860, addmod(mload(0xe60), 16034109727267451429382545614989630474745598704282031513336149365045662334847, f_q))mstore(0x2880, mulmod(mload(0x1660), 4011166062409277037846946896120088236083831265462590090132047642583670217875, f_q))mstore(0x28a0, addmod(mload(0xe60), 17877076809429998184399458849137186852464533134953444253566156543992138277742, f_q))mstore(0x28c0, mulmod(mload(0x1660), 21346203717540287263608402129024479709126363130664317843105498655869866203005, f_q))mstore(0x28e0, addmod(mload(0xe60), 542039154298987958638003616232795379422001269751716500592705530705942292612, f_q))mstore(0x2900, mulmod(mload(0x1660), 2596759765691555579319057187001626676797139380458426414819107034267851199894, f_q))mstore(0x2920, addmod(mload(0xe60), 19291483106147719642927348558255648411751225019957607928879097152307957295723, f_q))mstore(0x2940, mulmod(mload(0x1660), 515148244606945972463850631189471072103916690263705052318085725998468254533, f_q))mstore(0x2960, addmod(mload(0xe60), 21373094627232329249782555114067804016444447710152329291380118460577340241084, f_q))mstore(0x2980, mulmod(mload(0x1660), 16193474294403570471913209081172098662039194833035886085838226141251611760575, f_q))mstore(0x29a0, addmod(mload(0xe60), 5694768577435704750333196664085176426509169567380148257859978045324196735042, f_q))mstore(0x29c0, mulmod(mload(0x1660), 13788243025932779125104144225768424453664118806559109014238064020826883170336, f_q))mstore(0x29e0, addmod(mload(0xe60), 8099999845906496097142261519488850634884245593856925329460140165748925325281, f_q))mstore(0x2a00, mulmod(mload(0x1660), 12396386169390721083998741284742024397478287569179289945429941103360590919681, f_q))mstore(0x2a20, addmod(mload(0xe60), 9491856702448554138247664460515250691070076831236744398268263083215217575936, f_q))mstore(0x2a40, mulmod(mload(0x1660), 5980488956150442207659150513163747165544364597008566989111579977672498964212, f_q))mstore(0x2a60, addmod(mload(0xe60), 15907753915688833014587255232093527923003999803407467354586624208903309531405, f_q))mstore(0x2a80, mulmod(mload(0x1660), 6354421102357179089872998275128818476713799693323012459783788405734328942427, f_q))mstore(0x2aa0, addmod(mload(0xe60), 15533821769482096132373407470128456611834564707093021883914415780841479553190, f_q))mstore(0x2ac0, mulmod(mload(0x1660), 8561696234966975469289029207282849740510759316794581475824569334969644143582, f_q))mstore(0x2ae0, addmod(mload(0xe60), 13326546636872299752957376537974425348037605083621452867873634851606164352035, f_q))mstore(0x2b00, mulmod(mload(0x1660), 5397263786135457391507049168732549761126132269670746248720049083068923385507, f_q))mstore(0x2b20, addmod(mload(0xe60), 16490979085703817830739356576524725327422232130745288094978155103506885110110, f_q))mstore(0x2b40, mulmod(mload(0x1660), 5223738580615264174925218065001555728265216895679471490312087802465486318994, f_q))mstore(0x2b60, addmod(mload(0xe60), 16664504291224011047321187680255719360283147504736562853386116384110322176623, f_q)){ let prod := mload(0x16a0) prod := mulmod(mload(0x16e0), prod, f_q) mstore(0x2b80, prod) prod := mulmod(mload(0x1720), prod, f_q) mstore(0x2ba0, prod) prod := mulmod(mload(0x1760), prod, f_q) mstore(0x2bc0, prod) prod := mulmod(mload(0x17a0), prod, f_q) mstore(0x2be0, prod) prod := mulmod(mload(0x17e0), prod, f_q) mstore(0x2c00, prod) prod := mulmod(mload(0x1820), prod, f_q) mstore(0x2c20, prod) prod := mulmod(mload(0x1860), prod, f_q) mstore(0x2c40, prod) prod := mulmod(mload(0x18a0), prod, f_q) mstore(0x2c60, prod) prod := mulmod(mload(0x18e0), prod, f_q) mstore(0x2c80, prod) prod := mulmod(mload(0x1920), prod, f_q) mstore(0x2ca0, prod) prod := mulmod(mload(0x1960), prod, f_q) mstore(0x2cc0, prod) prod := mulmod(mload(0x19a0), prod, f_q) mstore(0x2ce0, prod) prod := mulmod(mload(0x19e0), prod, f_q) mstore(0x2d00, prod) prod := mulmod(mload(0x1a20), prod, f_q) mstore(0x2d20, prod) prod := mulmod(mload(0x1a60), prod, f_q) mstore(0x2d40, prod) prod := mulmod(mload(0x1aa0), prod, f_q) mstore(0x2d60, prod) prod := mulmod(mload(0x1ae0), prod, f_q) mstore(0x2d80, prod) prod := mulmod(mload(0x1b20), prod, f_q) mstore(0x2da0, prod) prod := mulmod(mload(0x1b60), prod, f_q) mstore(0x2dc0, prod) prod := mulmod(mload(0x1ba0), prod, f_q) mstore(0x2de0, prod) prod := mulmod(mload(0x1be0), prod, f_q) mstore(0x2e00, prod) prod := mulmod(mload(0x1c20), prod, f_q) mstore(0x2e20, prod) prod := mulmod(mload(0x1c60), prod, f_q) mstore(0x2e40, prod) prod := mulmod(mload(0x1ca0), prod, f_q) mstore(0x2e60, prod) prod := mulmod(mload(0x1ce0), prod, f_q) mstore(0x2e80, prod) prod := mulmod(mload(0x1d20), prod, f_q) mstore(0x2ea0, prod) prod := mulmod(mload(0x1d60), prod, f_q) mstore(0x2ec0, prod) prod := mulmod(mload(0x1da0), prod, f_q) mstore(0x2ee0, prod) prod := mulmod(mload(0x1de0), prod, f_q) mstore(0x2f00, prod) prod := mulmod(mload(0x1e20), prod, f_q) mstore(0x2f20, prod) prod := mulmod(mload(0x1e60), prod, f_q) mstore(0x2f40, prod) prod := mulmod(mload(0x1ea0), prod, f_q) mstore(0x2f60, prod) prod := mulmod(mload(0x1ee0), prod, f_q) mstore(0x2f80, prod) prod := mulmod(mload(0x1f20), prod, f_q) mstore(0x2fa0, prod) prod := mulmod(mload(0x1f60), prod, f_q) mstore(0x2fc0, prod) prod := mulmod(mload(0x1fa0), prod, f_q) mstore(0x2fe0, prod) prod := mulmod(mload(0x1fe0), prod, f_q) mstore(0x3000, prod) prod := mulmod(mload(0x2020), prod, f_q) mstore(0x3020, prod) prod := mulmod(mload(0x2060), prod, f_q) mstore(0x3040, prod) prod := mulmod(mload(0x20a0), prod, f_q) mstore(0x3060, prod) prod := mulmod(mload(0x20e0), prod, f_q) mstore(0x3080, prod) prod := mulmod(mload(0x2120), prod, f_q) mstore(0x30a0, prod) prod := mulmod(mload(0x2160), prod, f_q) mstore(0x30c0, prod) prod := mulmod(mload(0x21a0), prod, f_q) mstore(0x30e0, prod) prod := mulmod(mload(0x21e0), prod, f_q) mstore(0x3100, prod) prod := mulmod(mload(0x2220), prod, f_q) mstore(0x3120, prod) prod := mulmod(mload(0x2260), prod, f_q) mstore(0x3140, prod) prod := mulmod(mload(0x22a0), prod, f_q) mstore(0x3160, prod) prod := mulmod(mload(0x22e0), prod, f_q) mstore(0x3180, prod) prod := mulmod(mload(0x2320), prod, f_q) mstore(0x31a0, prod) prod := mulmod(mload(0x2360), prod, f_q) mstore(0x31c0, prod) prod := mulmod(mload(0x23a0), prod, f_q) mstore(0x31e0, prod) prod := mulmod(mload(0x23e0), prod, f_q) mstore(0x3200, prod) prod := mulmod(mload(0x2420), prod, f_q) mstore(0x3220, prod) prod := mulmod(mload(0x2460), prod, f_q) mstore(0x3240, prod) prod := mulmod(mload(0x24a0), prod, f_q) mstore(0x3260, prod) prod := mulmod(mload(0x24e0), prod, f_q) mstore(0x3280, prod) prod := mulmod(mload(0x2520), prod, f_q) mstore(0x32a0, prod) prod := mulmod(mload(0x2560), prod, f_q) mstore(0x32c0, prod) prod := mulmod(mload(0x25a0), prod, f_q) mstore(0x32e0, prod) prod := mulmod(mload(0x25e0), prod, f_q) mstore(0x3300, prod) prod := mulmod(mload(0x2620), prod, f_q) mstore(0x3320, prod) prod := mulmod(mload(0x2660), prod, f_q) mstore(0x3340, prod) prod := mulmod(mload(0x26a0), prod, f_q) mstore(0x3360, prod) prod := mulmod(mload(0x26e0), prod, f_q) mstore(0x3380, prod) prod := mulmod(mload(0x2720), prod, f_q) mstore(0x33a0, prod) prod := mulmod(mload(0x2760), prod, f_q) mstore(0x33c0, prod) prod := mulmod(mload(0x27a0), prod, f_q) mstore(0x33e0, prod) prod := mulmod(mload(0x27e0), prod, f_q) mstore(0x3400, prod) prod := mulmod(mload(0x2820), prod, f_q) mstore(0x3420, prod) prod := mulmod(mload(0x2860), prod, f_q) mstore(0x3440, prod) prod := mulmod(mload(0x28a0), prod, f_q) mstore(0x3460, prod) prod := mulmod(mload(0x28e0), prod, f_q) mstore(0x3480, prod) prod := mulmod(mload(0x2920), prod, f_q) mstore(0x34a0, prod) prod := mulmod(mload(0x2960), prod, f_q) mstore(0x34c0, prod) prod := mulmod(mload(0x29a0), prod, f_q) mstore(0x34e0, prod) prod := mulmod(mload(0x29e0), prod, f_q) mstore(0x3500, prod) prod := mulmod(mload(0x2a20), prod, f_q) mstore(0x3520, prod) prod := mulmod(mload(0x2a60), prod, f_q) mstore(0x3540, prod) prod := mulmod(mload(0x2aa0), prod, f_q) mstore(0x3560, prod) prod := mulmod(mload(0x2ae0), prod, f_q) mstore(0x3580, prod) prod := mulmod(mload(0x2b20), prod, f_q) mstore(0x35a0, prod) prod := mulmod(mload(0x2b60), prod, f_q) mstore(0x35c0, prod) prod := mulmod(mload(0x1640), prod, f_q) mstore(0x35e0, prod) }mstore(0x3620, 32)mstore(0x3640, 32)mstore(0x3660, 32)mstore(0x3680, mload(0x35e0))mstore(0x36a0, 21888242871839275222246405745257275088548364400416034343698204186575808495615)mstore(0x36c0, 21888242871839275222246405745257275088548364400416034343698204186575808495617)success := and(eq(staticcall(gas(), 0x5, 0x3620, 0xc0, 0x3600, 0x20), 1), success){ let inv := mload(0x3600) let v v := mload(0x1640) mstore(0x1640, mulmod(mload(0x35c0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2b60) mstore(0x2b60, mulmod(mload(0x35a0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2b20) mstore(0x2b20, mulmod(mload(0x3580), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2ae0) mstore(0x2ae0, mulmod(mload(0x3560), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2aa0) mstore(0x2aa0, mulmod(mload(0x3540), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2a60) mstore(0x2a60, mulmod(mload(0x3520), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2a20) mstore(0x2a20, mulmod(mload(0x3500), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x29e0) mstore(0x29e0, mulmod(mload(0x34e0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x29a0) mstore(0x29a0, mulmod(mload(0x34c0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2960) mstore(0x2960, mulmod(mload(0x34a0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2920) mstore(0x2920, mulmod(mload(0x3480), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x28e0) mstore(0x28e0, mulmod(mload(0x3460), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x28a0) mstore(0x28a0, mulmod(mload(0x3440), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2860) mstore(0x2860, mulmod(mload(0x3420), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2820) mstore(0x2820, mulmod(mload(0x3400), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x27e0) mstore(0x27e0, mulmod(mload(0x33e0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x27a0) mstore(0x27a0, mulmod(mload(0x33c0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2760) mstore(0x2760, mulmod(mload(0x33a0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2720) mstore(0x2720, mulmod(mload(0x3380), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x26e0) mstore(0x26e0, mulmod(mload(0x3360), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x26a0) mstore(0x26a0, mulmod(mload(0x3340), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2660) mstore(0x2660, mulmod(mload(0x3320), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2620) mstore(0x2620, mulmod(mload(0x3300), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x25e0) mstore(0x25e0, mulmod(mload(0x32e0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x25a0) mstore(0x25a0, mulmod(mload(0x32c0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2560) mstore(0x2560, mulmod(mload(0x32a0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2520) mstore(0x2520, mulmod(mload(0x3280), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x24e0) mstore(0x24e0, mulmod(mload(0x3260), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x24a0) mstore(0x24a0, mulmod(mload(0x3240), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2460) mstore(0x2460, mulmod(mload(0x3220), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2420) mstore(0x2420, mulmod(mload(0x3200), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x23e0) mstore(0x23e0, mulmod(mload(0x31e0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x23a0) mstore(0x23a0, mulmod(mload(0x31c0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2360) mstore(0x2360, mulmod(mload(0x31a0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2320) mstore(0x2320, mulmod(mload(0x3180), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x22e0) mstore(0x22e0, mulmod(mload(0x3160), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x22a0) mstore(0x22a0, mulmod(mload(0x3140), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2260) mstore(0x2260, mulmod(mload(0x3120), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2220) mstore(0x2220, mulmod(mload(0x3100), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x21e0) mstore(0x21e0, mulmod(mload(0x30e0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x21a0) mstore(0x21a0, mulmod(mload(0x30c0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2160) mstore(0x2160, mulmod(mload(0x30a0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2120) mstore(0x2120, mulmod(mload(0x3080), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x20e0) mstore(0x20e0, mulmod(mload(0x3060), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x20a0) mstore(0x20a0, mulmod(mload(0x3040), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2060) mstore(0x2060, mulmod(mload(0x3020), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2020) mstore(0x2020, mulmod(mload(0x3000), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1fe0) mstore(0x1fe0, mulmod(mload(0x2fe0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1fa0) mstore(0x1fa0, mulmod(mload(0x2fc0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1f60) mstore(0x1f60, mulmod(mload(0x2fa0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1f20) mstore(0x1f20, mulmod(mload(0x2f80), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1ee0) mstore(0x1ee0, mulmod(mload(0x2f60), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1ea0) mstore(0x1ea0, mulmod(mload(0x2f40), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1e60) mstore(0x1e60, mulmod(mload(0x2f20), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1e20) mstore(0x1e20, mulmod(mload(0x2f00), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1de0) mstore(0x1de0, mulmod(mload(0x2ee0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1da0) mstore(0x1da0, mulmod(mload(0x2ec0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1d60) mstore(0x1d60, mulmod(mload(0x2ea0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1d20) mstore(0x1d20, mulmod(mload(0x2e80), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1ce0) mstore(0x1ce0, mulmod(mload(0x2e60), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1ca0) mstore(0x1ca0, mulmod(mload(0x2e40), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1c60) mstore(0x1c60, mulmod(mload(0x2e20), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1c20) mstore(0x1c20, mulmod(mload(0x2e00), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1be0) mstore(0x1be0, mulmod(mload(0x2de0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1ba0) mstore(0x1ba0, mulmod(mload(0x2dc0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1b60) mstore(0x1b60, mulmod(mload(0x2da0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1b20) mstore(0x1b20, mulmod(mload(0x2d80), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1ae0) mstore(0x1ae0, mulmod(mload(0x2d60), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1aa0) mstore(0x1aa0, mulmod(mload(0x2d40), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1a60) mstore(0x1a60, mulmod(mload(0x2d20), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1a20) mstore(0x1a20, mulmod(mload(0x2d00), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x19e0) mstore(0x19e0, mulmod(mload(0x2ce0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x19a0) mstore(0x19a0, mulmod(mload(0x2cc0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1960) mstore(0x1960, mulmod(mload(0x2ca0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1920) mstore(0x1920, mulmod(mload(0x2c80), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x18e0) mstore(0x18e0, mulmod(mload(0x2c60), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x18a0) mstore(0x18a0, mulmod(mload(0x2c40), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1860) mstore(0x1860, mulmod(mload(0x2c20), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1820) mstore(0x1820, mulmod(mload(0x2c00), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x17e0) mstore(0x17e0, mulmod(mload(0x2be0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x17a0) mstore(0x17a0, mulmod(mload(0x2bc0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1760) mstore(0x1760, mulmod(mload(0x2ba0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1720) mstore(0x1720, mulmod(mload(0x2b80), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x16e0) mstore(0x16e0, mulmod(mload(0x16a0), inv, f_q)) inv := mulmod(v, inv, f_q) mstore(0x16a0, inv) }mstore(0x36e0, mulmod(mload(0x1680), mload(0x16a0), f_q))mstore(0x3700, mulmod(mload(0x16c0), mload(0x16e0), f_q))mstore(0x3720, mulmod(mload(0x1700), mload(0x1720), f_q))mstore(0x3740, mulmod(mload(0x1740), mload(0x1760), f_q))mstore(0x3760, mulmod(mload(0x1780), mload(0x17a0), f_q))mstore(0x3780, mulmod(mload(0x17c0), mload(0x17e0), f_q))mstore(0x37a0, mulmod(mload(0x1800), mload(0x1820), f_q))mstore(0x37c0, mulmod(mload(0x1840), mload(0x1860), f_q))mstore(0x37e0, mulmod(mload(0x1880), mload(0x18a0), f_q))mstore(0x3800, mulmod(mload(0x18c0), mload(0x18e0), f_q))mstore(0x3820, mulmod(mload(0x1900), mload(0x1920), f_q))mstore(0x3840, mulmod(mload(0x1940), mload(0x1960), f_q))mstore(0x3860, mulmod(mload(0x1980), mload(0x19a0), f_q))mstore(0x3880, mulmod(mload(0x19c0), mload(0x19e0), f_q))mstore(0x38a0, mulmod(mload(0x1a00), mload(0x1a20), f_q))mstore(0x38c0, mulmod(mload(0x1a40), mload(0x1a60), f_q))mstore(0x38e0, mulmod(mload(0x1a80), mload(0x1aa0), f_q))mstore(0x3900, mulmod(mload(0x1ac0), mload(0x1ae0), f_q))mstore(0x3920, mulmod(mload(0x1b00), mload(0x1b20), f_q))mstore(0x3940, mulmod(mload(0x1b40), mload(0x1b60), f_q))mstore(0x3960, mulmod(mload(0x1b80), mload(0x1ba0), f_q))mstore(0x3980, mulmod(mload(0x1bc0), mload(0x1be0), f_q))mstore(0x39a0, mulmod(mload(0x1c00), mload(0x1c20), f_q))mstore(0x39c0, mulmod(mload(0x1c40), mload(0x1c60), f_q))mstore(0x39e0, mulmod(mload(0x1c80), mload(0x1ca0), f_q))mstore(0x3a00, mulmod(mload(0x1cc0), mload(0x1ce0), f_q))mstore(0x3a20, mulmod(mload(0x1d00), mload(0x1d20), f_q))mstore(0x3a40, mulmod(mload(0x1d40), mload(0x1d60), f_q))mstore(0x3a60, mulmod(mload(0x1d80), mload(0x1da0), f_q))mstore(0x3a80, mulmod(mload(0x1dc0), mload(0x1de0), f_q))mstore(0x3aa0, mulmod(mload(0x1e00), mload(0x1e20), f_q))mstore(0x3ac0, mulmod(mload(0x1e40), mload(0x1e60), f_q))mstore(0x3ae0, mulmod(mload(0x1e80), mload(0x1ea0), f_q))mstore(0x3b00, mulmod(mload(0x1ec0), mload(0x1ee0), f_q))mstore(0x3b20, mulmod(mload(0x1f00), mload(0x1f20), f_q))mstore(0x3b40, mulmod(mload(0x1f40), mload(0x1f60), f_q))mstore(0x3b60, mulmod(mload(0x1f80), mload(0x1fa0), f_q))mstore(0x3b80, mulmod(mload(0x1fc0), mload(0x1fe0), f_q))mstore(0x3ba0, mulmod(mload(0x2000), mload(0x2020), f_q))mstore(0x3bc0, mulmod(mload(0x2040), mload(0x2060), f_q))mstore(0x3be0, mulmod(mload(0x2080), mload(0x20a0), f_q))mstore(0x3c00, mulmod(mload(0x20c0), mload(0x20e0), f_q))mstore(0x3c20, mulmod(mload(0x2100), mload(0x2120), f_q))mstore(0x3c40, mulmod(mload(0x2140), mload(0x2160), f_q))mstore(0x3c60, mulmod(mload(0x2180), mload(0x21a0), f_q))mstore(0x3c80, mulmod(mload(0x21c0), mload(0x21e0), f_q))mstore(0x3ca0, mulmod(mload(0x2200), mload(0x2220), f_q))mstore(0x3cc0, mulmod(mload(0x2240), mload(0x2260), f_q))mstore(0x3ce0, mulmod(mload(0x2280), mload(0x22a0), f_q))mstore(0x3d00, mulmod(mload(0x22c0), mload(0x22e0), f_q))mstore(0x3d20, mulmod(mload(0x2300), mload(0x2320), f_q))mstore(0x3d40, mulmod(mload(0x2340), mload(0x2360), f_q))mstore(0x3d60, mulmod(mload(0x2380), mload(0x23a0), f_q))mstore(0x3d80, mulmod(mload(0x23c0), mload(0x23e0), f_q))mstore(0x3da0, mulmod(mload(0x2400), mload(0x2420), f_q))mstore(0x3dc0, mulmod(mload(0x2440), mload(0x2460), f_q))mstore(0x3de0, mulmod(mload(0x2480), mload(0x24a0), f_q))mstore(0x3e00, mulmod(mload(0x24c0), mload(0x24e0), f_q))mstore(0x3e20, mulmod(mload(0x2500), mload(0x2520), f_q))mstore(0x3e40, mulmod(mload(0x2540), mload(0x2560), f_q))mstore(0x3e60, mulmod(mload(0x2580), mload(0x25a0), f_q))mstore(0x3e80, mulmod(mload(0x25c0), mload(0x25e0), f_q))mstore(0x3ea0, mulmod(mload(0x2600), mload(0x2620), f_q))mstore(0x3ec0, mulmod(mload(0x2640), mload(0x2660), f_q))mstore(0x3ee0, mulmod(mload(0x2680), mload(0x26a0), f_q))mstore(0x3f00, mulmod(mload(0x26c0), mload(0x26e0), f_q))mstore(0x3f20, mulmod(mload(0x2700), mload(0x2720), f_q))mstore(0x3f40, mulmod(mload(0x2740), mload(0x2760), f_q))mstore(0x3f60, mulmod(mload(0x2780), mload(0x27a0), f_q))mstore(0x3f80, mulmod(mload(0x27c0), mload(0x27e0), f_q))mstore(0x3fa0, mulmod(mload(0x2800), mload(0x2820), f_q))mstore(0x3fc0, mulmod(mload(0x2840), mload(0x2860), f_q))mstore(0x3fe0, mulmod(mload(0x2880), mload(0x28a0), f_q))mstore(0x4000, mulmod(mload(0x28c0), mload(0x28e0), f_q))mstore(0x4020, mulmod(mload(0x2900), mload(0x2920), f_q))mstore(0x4040, mulmod(mload(0x2940), mload(0x2960), f_q))mstore(0x4060, mulmod(mload(0x2980), mload(0x29a0), f_q))mstore(0x4080, mulmod(mload(0x29c0), mload(0x29e0), f_q))mstore(0x40a0, mulmod(mload(0x2a00), mload(0x2a20), f_q))mstore(0x40c0, mulmod(mload(0x2a40), mload(0x2a60), f_q))mstore(0x40e0, mulmod(mload(0x2a80), mload(0x2aa0), f_q))mstore(0x4100, mulmod(mload(0x2ac0), mload(0x2ae0), f_q))mstore(0x4120, mulmod(mload(0x2b00), mload(0x2b20), f_q))mstore(0x4140, mulmod(mload(0x2b40), mload(0x2b60), f_q)){ let result := mulmod(mload(0x37c0), mload(0xa0), f_q)result := addmod(mulmod(mload(0x37e0), mload(0xc0), f_q), result, f_q)result := addmod(mulmod(mload(0x3800), mload(0xe0), f_q), result, f_q)result := addmod(mulmod(mload(0x3820), mload(0x100), f_q), result, f_q)result := addmod(mulmod(mload(0x3840), mload(0x120), f_q), result, f_q)result := addmod(mulmod(mload(0x3860), mload(0x140), f_q), result, f_q)result := addmod(mulmod(mload(0x3880), mload(0x160), f_q), result, f_q)result := addmod(mulmod(mload(0x38a0), mload(0x180), f_q), result, f_q)result := addmod(mulmod(mload(0x38c0), mload(0x1a0), f_q), result, f_q)result := addmod(mulmod(mload(0x38e0), mload(0x1c0), f_q), result, f_q)result := addmod(mulmod(mload(0x3900), mload(0x1e0), f_q), result, f_q)result := addmod(mulmod(mload(0x3920), mload(0x200), f_q), result, f_q)result := addmod(mulmod(mload(0x3940), mload(0x220), f_q), result, f_q)result := addmod(mulmod(mload(0x3960), mload(0x240), f_q), result, f_q)result := addmod(mulmod(mload(0x3980), mload(0x260), f_q), result, f_q)result := addmod(mulmod(mload(0x39a0), mload(0x280), f_q), result, f_q)result := addmod(mulmod(mload(0x39c0), mload(0x2a0), f_q), result, f_q)result := addmod(mulmod(mload(0x39e0), mload(0x2c0), f_q), result, f_q)result := addmod(mulmod(mload(0x3a00), mload(0x2e0), f_q), result, f_q)result := addmod(mulmod(mload(0x3a20), mload(0x300), f_q), result, f_q)result := addmod(mulmod(mload(0x3a40), mload(0x320), f_q), result, f_q)result := addmod(mulmod(mload(0x3a60), mload(0x340), f_q), result, f_q)result := addmod(mulmod(mload(0x3a80), mload(0x360), f_q), result, f_q)result := addmod(mulmod(mload(0x3aa0), mload(0x380), f_q), result, f_q)result := addmod(mulmod(mload(0x3ac0), mload(0x3a0), f_q), result, f_q)result := addmod(mulmod(mload(0x3ae0), mload(0x3c0), f_q), result, f_q)result := addmod(mulmod(mload(0x3b00), mload(0x3e0), f_q), result, f_q)result := addmod(mulmod(mload(0x3b20), mload(0x400), f_q), result, f_q)result := addmod(mulmod(mload(0x3b40), mload(0x420), f_q), result, f_q)result := addmod(mulmod(mload(0x3b60), mload(0x440), f_q), result, f_q)result := addmod(mulmod(mload(0x3b80), mload(0x460), f_q), result, f_q)result := addmod(mulmod(mload(0x3ba0), mload(0x480), f_q), result, f_q)result := addmod(mulmod(mload(0x3bc0), mload(0x4a0), f_q), result, f_q)result := addmod(mulmod(mload(0x3be0), mload(0x4c0), f_q), result, f_q)result := addmod(mulmod(mload(0x3c00), mload(0x4e0), f_q), result, f_q)result := addmod(mulmod(mload(0x3c20), mload(0x500), f_q), result, f_q)result := addmod(mulmod(mload(0x3c40), mload(0x520), f_q), result, f_q)result := addmod(mulmod(mload(0x3c60), mload(0x540), f_q), result, f_q)result := addmod(mulmod(mload(0x3c80), mload(0x560), f_q), result, f_q)result := addmod(mulmod(mload(0x3ca0), mload(0x580), f_q), result, f_q)result := addmod(mulmod(mload(0x3cc0), mload(0x5a0), f_q), result, f_q)result := addmod(mulmod(mload(0x3ce0), mload(0x5c0), f_q), result, f_q)result := addmod(mulmod(mload(0x3d00), mload(0x5e0), f_q), result, f_q)result := addmod(mulmod(mload(0x3d20), mload(0x600), f_q), result, f_q)result := addmod(mulmod(mload(0x3d40), mload(0x620), f_q), result, f_q)result := addmod(mulmod(mload(0x3d60), mload(0x640), f_q), result, f_q)result := addmod(mulmod(mload(0x3d80), mload(0x660), f_q), result, f_q)result := addmod(mulmod(mload(0x3da0), mload(0x680), f_q), result, f_q)result := addmod(mulmod(mload(0x3dc0), mload(0x6a0), f_q), result, f_q)result := addmod(mulmod(mload(0x3de0), mload(0x6c0), f_q), result, f_q)result := addmod(mulmod(mload(0x3e00), mload(0x6e0), f_q), result, f_q)result := addmod(mulmod(mload(0x3e20), mload(0x700), f_q), result, f_q)result := addmod(mulmod(mload(0x3e40), mload(0x720), f_q), result, f_q)result := addmod(mulmod(mload(0x3e60), mload(0x740), f_q), result, f_q)result := addmod(mulmod(mload(0x3e80), mload(0x760), f_q), result, f_q)result := addmod(mulmod(mload(0x3ea0), mload(0x780), f_q), result, f_q)result := addmod(mulmod(mload(0x3ec0), mload(0x7a0), f_q), result, f_q)result := addmod(mulmod(mload(0x3ee0), mload(0x7c0), f_q), result, f_q)result := addmod(mulmod(mload(0x3f00), mload(0x7e0), f_q), result, f_q)result := addmod(mulmod(mload(0x3f20), mload(0x800), f_q), result, f_q)result := addmod(mulmod(mload(0x3f40), mload(0x820), f_q), result, f_q)result := addmod(mulmod(mload(0x3f60), mload(0x840), f_q), result, f_q)result := addmod(mulmod(mload(0x3f80), mload(0x860), f_q), result, f_q)result := addmod(mulmod(mload(0x3fa0), mload(0x880), f_q), result, f_q)result := addmod(mulmod(mload(0x3fc0), mload(0x8a0), f_q), result, f_q)result := addmod(mulmod(mload(0x3fe0), mload(0x8c0), f_q), result, f_q)result := addmod(mulmod(mload(0x4000), mload(0x8e0), f_q), result, f_q)result := addmod(mulmod(mload(0x4020), mload(0x900), f_q), result, f_q)result := addmod(mulmod(mload(0x4040), mload(0x920), f_q), result, f_q)result := addmod(mulmod(mload(0x4060), mload(0x940), f_q), result, f_q)result := addmod(mulmod(mload(0x4080), mload(0x960), f_q), result, f_q)result := addmod(mulmod(mload(0x40a0), mload(0x980), f_q), result, f_q)result := addmod(mulmod(mload(0x40c0), mload(0x9a0), f_q), result, f_q)result := addmod(mulmod(mload(0x40e0), mload(0x9c0), f_q), result, f_q)result := addmod(mulmod(mload(0x4100), mload(0x9e0), f_q), result, f_q)result := addmod(mulmod(mload(0x4120), mload(0xa00), f_q), result, f_q)result := addmod(mulmod(mload(0x4140), mload(0xa20), f_q), result, f_q)mstore(0x4160, result) }mstore(0x4180, mulmod(mload(0xee0), mload(0xec0), f_q))mstore(0x41a0, addmod(mload(0xea0), mload(0x4180), f_q))mstore(0x41c0, addmod(mload(0x41a0), sub(f_q, mload(0xf00)), f_q))mstore(0x41e0, mulmod(mload(0x41c0), mload(0xf80), f_q))mstore(0x4200, mulmod(mload(0xd00), mload(0x41e0), f_q))mstore(0x4220, addmod(1, sub(f_q, mload(0x1020)), f_q))mstore(0x4240, mulmod(mload(0x4220), mload(0x37c0), f_q))mstore(0x4260, addmod(mload(0x4200), mload(0x4240), f_q))mstore(0x4280, mulmod(mload(0xd00), mload(0x4260), f_q))mstore(0x42a0, mulmod(mload(0x1020), mload(0x1020), f_q))mstore(0x42c0, addmod(mload(0x42a0), sub(f_q, mload(0x1020)), f_q))mstore(0x42e0, mulmod(mload(0x42c0), mload(0x36e0), f_q))mstore(0x4300, addmod(mload(0x4280), mload(0x42e0), f_q))mstore(0x4320, mulmod(mload(0xd00), mload(0x4300), f_q))mstore(0x4340, addmod(1, sub(f_q, mload(0x36e0)), f_q))mstore(0x4360, addmod(mload(0x3700), mload(0x3720), f_q))mstore(0x4380, addmod(mload(0x4360), mload(0x3740), f_q))mstore(0x43a0, addmod(mload(0x4380), mload(0x3760), f_q))mstore(0x43c0, addmod(mload(0x43a0), mload(0x3780), f_q))mstore(0x43e0, addmod(mload(0x43c0), mload(0x37a0), f_q))mstore(0x4400, addmod(mload(0x4340), sub(f_q, mload(0x43e0)), f_q))mstore(0x4420, mulmod(mload(0xfc0), mload(0xb80), f_q))mstore(0x4440, addmod(mload(0xf20), mload(0x4420), f_q))mstore(0x4460, addmod(mload(0x4440), mload(0xbe0), f_q))mstore(0x4480, mulmod(mload(0xfe0), mload(0xb80), f_q))mstore(0x44a0, addmod(mload(0xea0), mload(0x4480), f_q))mstore(0x44c0, addmod(mload(0x44a0), mload(0xbe0), f_q))mstore(0x44e0, mulmod(mload(0x44c0), mload(0x4460), f_q))mstore(0x4500, mulmod(mload(0x1000), mload(0xb80), f_q))mstore(0x4520, addmod(mload(0x4160), mload(0x4500), f_q))mstore(0x4540, addmod(mload(0x4520), mload(0xbe0), f_q))mstore(0x4560, mulmod(mload(0x4540), mload(0x44e0), f_q))mstore(0x4580, mulmod(mload(0x4560), mload(0x1040), f_q))mstore(0x45a0, mulmod(1, mload(0xb80), f_q))mstore(0x45c0, mulmod(mload(0xe60), mload(0x45a0), f_q))mstore(0x45e0, addmod(mload(0xf20), mload(0x45c0), f_q))mstore(0x4600, addmod(mload(0x45e0), mload(0xbe0), f_q))mstore(0x4620, mulmod(4131629893567559867359510883348571134090853742863529169391034518566172092834, mload(0xb80), f_q))mstore(0x4640, mulmod(mload(0xe60), mload(0x4620), f_q))mstore(0x4660, addmod(mload(0xea0), mload(0x4640), f_q))mstore(0x4680, addmod(mload(0x4660), mload(0xbe0), f_q))mstore(0x46a0, mulmod(mload(0x4680), mload(0x4600), f_q))mstore(0x46c0, mulmod(8910878055287538404433155982483128285667088683464058436815641868457422632747, mload(0xb80), f_q))mstore(0x46e0, mulmod(mload(0xe60), mload(0x46c0), f_q))mstore(0x4700, addmod(mload(0x4160), mload(0x46e0), f_q))mstore(0x4720, addmod(mload(0x4700), mload(0xbe0), f_q))mstore(0x4740, mulmod(mload(0x4720), mload(0x46a0), f_q))mstore(0x4760, mulmod(mload(0x4740), mload(0x1020), f_q))mstore(0x4780, addmod(mload(0x4580), sub(f_q, mload(0x4760)), f_q))mstore(0x47a0, mulmod(mload(0x4780), mload(0x4400), f_q))mstore(0x47c0, addmod(mload(0x4320), mload(0x47a0), f_q))mstore(0x47e0, mulmod(mload(0xd00), mload(0x47c0), f_q))mstore(0x4800, addmod(1, sub(f_q, mload(0x1060)), f_q))mstore(0x4820, mulmod(mload(0x4800), mload(0x37c0), f_q))mstore(0x4840, addmod(mload(0x47e0), mload(0x4820), f_q))mstore(0x4860, mulmod(mload(0xd00), mload(0x4840), f_q))mstore(0x4880, mulmod(mload(0x1060), mload(0x1060), f_q))mstore(0x48a0, addmod(mload(0x4880), sub(f_q, mload(0x1060)), f_q))mstore(0x48c0, mulmod(mload(0x48a0), mload(0x36e0), f_q))mstore(0x48e0, addmod(mload(0x4860), mload(0x48c0), f_q))mstore(0x4900, mulmod(mload(0xd00), mload(0x48e0), f_q))mstore(0x4920, addmod(mload(0x10a0), mload(0xb80), f_q))mstore(0x4940, mulmod(mload(0x4920), mload(0x1080), f_q))mstore(0x4960, addmod(mload(0x10e0), mload(0xbe0), f_q))mstore(0x4980, mulmod(mload(0x4960), mload(0x4940), f_q))mstore(0x49a0, mulmod(mload(0xea0), mload(0xf60), f_q))mstore(0x49c0, addmod(mload(0x49a0), mload(0xb80), f_q))mstore(0x49e0, mulmod(mload(0x49c0), mload(0x1060), f_q))mstore(0x4a00, addmod(mload(0xf40), mload(0xbe0), f_q))mstore(0x4a20, mulmod(mload(0x4a00), mload(0x49e0), f_q))mstore(0x4a40, addmod(mload(0x4980), sub(f_q, mload(0x4a20)), f_q))mstore(0x4a60, mulmod(mload(0x4a40), mload(0x4400), f_q))mstore(0x4a80, addmod(mload(0x4900), mload(0x4a60), f_q))mstore(0x4aa0, mulmod(mload(0xd00), mload(0x4a80), f_q))mstore(0x4ac0, addmod(mload(0x10a0), sub(f_q, mload(0x10e0)), f_q))mstore(0x4ae0, mulmod(mload(0x4ac0), mload(0x37c0), f_q))mstore(0x4b00, addmod(mload(0x4aa0), mload(0x4ae0), f_q))mstore(0x4b20, mulmod(mload(0xd00), mload(0x4b00), f_q))mstore(0x4b40, mulmod(mload(0x4ac0), mload(0x4400), f_q))mstore(0x4b60, addmod(mload(0x10a0), sub(f_q, mload(0x10c0)), f_q))mstore(0x4b80, mulmod(mload(0x4b60), mload(0x4b40), f_q))mstore(0x4ba0, addmod(mload(0x4b20), mload(0x4b80), f_q))mstore(0x4bc0, mulmod(mload(0x1620), mload(0x1620), f_q))mstore(0x4be0, mulmod(mload(0x4bc0), mload(0x1620), f_q))mstore(0x4c00, mulmod(mload(0x4be0), mload(0x1620), f_q))mstore(0x4c20, mulmod(1, mload(0x1620), f_q))mstore(0x4c40, mulmod(1, mload(0x4bc0), f_q))mstore(0x4c60, mulmod(1, mload(0x4be0), f_q))mstore(0x4c80, mulmod(mload(0x4ba0), mload(0x1640), f_q))mstore(0x4ca0, mulmod(mload(0x1320), mload(0xe60), f_q))mstore(0x4cc0, mulmod(mload(0x4ca0), mload(0xe60), f_q))mstore(0x4ce0, mulmod(mload(0xe60), 11377606117859914088982205826922132024839443553408109299929510653283289974216, f_q))mstore(0x4d00, addmod(mload(0x1220), sub(f_q, mload(0x4ce0)), f_q))mstore(0x4d20, mulmod(mload(0xe60), 1, f_q))mstore(0x4d40, addmod(mload(0x1220), sub(f_q, mload(0x4d20)), f_q))mstore(0x4d60, mulmod(mload(0xe60), 6143038923529407703646399695489445107254060255791852207908457597807435305312, f_q))mstore(0x4d80, addmod(mload(0x1220), sub(f_q, mload(0x4d60)), f_q))mstore(0x4da0, mulmod(mload(0xe60), 11451405578697956743456240853980216273390554734748796433026540431386972584651, f_q))mstore(0x4dc0, addmod(mload(0x1220), sub(f_q, mload(0x4da0)), f_q))mstore(0x4de0, mulmod(mload(0xe60), 16670521521732547392407716560529197273408943645332907966320731856743274895475, f_q))mstore(0x4e00, addmod(mload(0x1220), sub(f_q, mload(0x4de0)), f_q))mstore(0x4e20, mulmod(8219252948654094797157108904669854317001423465917391825808691077170189464995, mload(0x4ca0), f_q))mstore(0x4e40, mulmod(mload(0x4e20), 1, f_q)){ let result := mulmod(mload(0x1220), mload(0x4e20), f_q)result := addmod(mulmod(mload(0xe60), sub(f_q, mload(0x4e40)), f_q), result, f_q)mstore(0x4e60, result) }mstore(0x4e80, mulmod(9296671232404480276013511827138458405364435620174469432662539796840967177791, mload(0x4ca0), f_q))mstore(0x4ea0, mulmod(mload(0x4e80), 6143038923529407703646399695489445107254060255791852207908457597807435305312, f_q)){ let result := mulmod(mload(0x1220), mload(0x4e80), f_q)result := addmod(mulmod(mload(0xe60), sub(f_q, mload(0x4ea0)), f_q), result, f_q)mstore(0x4ec0, result) }mstore(0x4ee0, mulmod(16067453484972395187530647612179984850313988171035408068464350590599411369550, mload(0x4ca0), f_q))mstore(0x4f00, mulmod(mload(0x4ee0), 11451405578697956743456240853980216273390554734748796433026540431386972584651, f_q)){ let result := mulmod(mload(0x1220), mload(0x4ee0), f_q)result := addmod(mulmod(mload(0xe60), sub(f_q, mload(0x4f00)), f_q), result, f_q)mstore(0x4f20, result) }mstore(0x4f40, mulmod(19739017567026423485440200119112518431529316337914698509896062636748956259037, mload(0x4ca0), f_q))mstore(0x4f60, mulmod(mload(0x4f40), 16670521521732547392407716560529197273408943645332907966320731856743274895475, f_q)){ let result := mulmod(mload(0x1220), mload(0x4f40), f_q)result := addmod(mulmod(mload(0xe60), sub(f_q, mload(0x4f60)), f_q), result, f_q)mstore(0x4f80, result) }mstore(0x4fa0, mulmod(1, mload(0x4d40), f_q))mstore(0x4fc0, mulmod(mload(0x4fa0), mload(0x4d80), f_q))mstore(0x4fe0, mulmod(mload(0x4fc0), mload(0x4dc0), f_q))mstore(0x5000, mulmod(mload(0x4fe0), mload(0x4e00), f_q))mstore(0x5020, mulmod(15745203948309867518600006049767829981294304144624182135789746588768373190306, mload(0xe60), f_q))mstore(0x5040, mulmod(mload(0x5020), 1, f_q)){ let result := mulmod(mload(0x1220), mload(0x5020), f_q)result := addmod(mulmod(mload(0xe60), sub(f_q, mload(0x5040)), f_q), result, f_q)mstore(0x5060, result) }mstore(0x5080, mulmod(6143038923529407703646399695489445107254060255791852207908457597807435305311, mload(0xe60), f_q))mstore(0x50a0, mulmod(mload(0x5080), 6143038923529407703646399695489445107254060255791852207908457597807435305312, f_q)){ let result := mulmod(mload(0x1220), mload(0x5080), f_q)result := addmod(mulmod(mload(0xe60), sub(f_q, mload(0x50a0)), f_q), result, f_q)mstore(0x50c0, result) }mstore(0x50e0, mulmod(10510636753979361133264199918335143063708920847007925043768693533292518521402, mload(0xe60), f_q))mstore(0x5100, mulmod(mload(0x50e0), 1, f_q)){ let result := mulmod(mload(0x1220), mload(0x50e0), f_q)result := addmod(mulmod(mload(0xe60), sub(f_q, mload(0x5100)), f_q), result, f_q)mstore(0x5120, result) }mstore(0x5140, mulmod(11377606117859914088982205826922132024839443553408109299929510653283289974215, mload(0xe60), f_q))mstore(0x5160, mulmod(mload(0x5140), 11377606117859914088982205826922132024839443553408109299929510653283289974216, f_q)){ let result := mulmod(mload(0x1220), mload(0x5140), f_q)result := addmod(mulmod(mload(0xe60), sub(f_q, mload(0x5160)), f_q), result, f_q)mstore(0x5180, result) }mstore(0x51a0, mulmod(mload(0x4fa0), mload(0x4d00), f_q)){ let result := mulmod(mload(0x1220), 1, f_q)result := addmod(mulmod(mload(0xe60), 21888242871839275222246405745257275088548364400416034343698204186575808495616, f_q), result, f_q)mstore(0x51c0, result) }{ let prod := mload(0x4e60) prod := mulmod(mload(0x4ec0), prod, f_q) mstore(0x51e0, prod) prod := mulmod(mload(0x4f20), prod, f_q) mstore(0x5200, prod) prod := mulmod(mload(0x4f80), prod, f_q) mstore(0x5220, prod) prod := mulmod(mload(0x5060), prod, f_q) mstore(0x5240, prod) prod := mulmod(mload(0x50c0), prod, f_q) mstore(0x5260, prod) prod := mulmod(mload(0x4fc0), prod, f_q) mstore(0x5280, prod) prod := mulmod(mload(0x5120), prod, f_q) mstore(0x52a0, prod) prod := mulmod(mload(0x5180), prod, f_q) mstore(0x52c0, prod) prod := mulmod(mload(0x51a0), prod, f_q) mstore(0x52e0, prod) prod := mulmod(mload(0x51c0), prod, f_q) mstore(0x5300, prod) prod := mulmod(mload(0x4fa0), prod, f_q) mstore(0x5320, prod) }mstore(0x5360, 32)mstore(0x5380, 32)mstore(0x53a0, 32)mstore(0x53c0, mload(0x5320))mstore(0x53e0, 21888242871839275222246405745257275088548364400416034343698204186575808495615)mstore(0x5400, 21888242871839275222246405745257275088548364400416034343698204186575808495617)success := and(eq(staticcall(gas(), 0x5, 0x5360, 0xc0, 0x5340, 0x20), 1), success){ let inv := mload(0x5340) let v v := mload(0x4fa0) mstore(0x4fa0, mulmod(mload(0x5300), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x51c0) mstore(0x51c0, mulmod(mload(0x52e0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x51a0) mstore(0x51a0, mulmod(mload(0x52c0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x5180) mstore(0x5180, mulmod(mload(0x52a0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x5120) mstore(0x5120, mulmod(mload(0x5280), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x4fc0) mstore(0x4fc0, mulmod(mload(0x5260), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x50c0) mstore(0x50c0, mulmod(mload(0x5240), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x5060) mstore(0x5060, mulmod(mload(0x5220), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x4f80) mstore(0x4f80, mulmod(mload(0x5200), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x4f20) mstore(0x4f20, mulmod(mload(0x51e0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x4ec0) mstore(0x4ec0, mulmod(mload(0x4e60), inv, f_q)) inv := mulmod(v, inv, f_q) mstore(0x4e60, inv) }{ let result := mload(0x4e60)result := addmod(mload(0x4ec0), result, f_q)result := addmod(mload(0x4f20), result, f_q)result := addmod(mload(0x4f80), result, f_q)mstore(0x5420, result) }mstore(0x5440, mulmod(mload(0x5000), mload(0x4fc0), f_q)){ let result := mload(0x5060)result := addmod(mload(0x50c0), result, f_q)mstore(0x5460, result) }mstore(0x5480, mulmod(mload(0x5000), mload(0x51a0), f_q)){ let result := mload(0x5120)result := addmod(mload(0x5180), result, f_q)mstore(0x54a0, result) }mstore(0x54c0, mulmod(mload(0x5000), mload(0x4fa0), f_q)){ let result := mload(0x51c0)mstore(0x54e0, result) }{ let prod := mload(0x5420) prod := mulmod(mload(0x5460), prod, f_q) mstore(0x5500, prod) prod := mulmod(mload(0x54a0), prod, f_q) mstore(0x5520, prod) prod := mulmod(mload(0x54e0), prod, f_q) mstore(0x5540, prod) }mstore(0x5580, 32)mstore(0x55a0, 32)mstore(0x55c0, 32)mstore(0x55e0, mload(0x5540))mstore(0x5600, 21888242871839275222246405745257275088548364400416034343698204186575808495615)mstore(0x5620, 21888242871839275222246405745257275088548364400416034343698204186575808495617)success := and(eq(staticcall(gas(), 0x5, 0x5580, 0xc0, 0x5560, 0x20), 1), success){ let inv := mload(0x5560) let v v := mload(0x54e0) mstore(0x54e0, mulmod(mload(0x5520), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x54a0) mstore(0x54a0, mulmod(mload(0x5500), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x5460) mstore(0x5460, mulmod(mload(0x5420), inv, f_q)) inv := mulmod(v, inv, f_q) mstore(0x5420, inv) }mstore(0x5640, mulmod(mload(0x5440), mload(0x5460), f_q))mstore(0x5660, mulmod(mload(0x5480), mload(0x54a0), f_q))mstore(0x5680, mulmod(mload(0x54c0), mload(0x54e0), f_q))mstore(0x56a0, mulmod(mload(0x1120), mload(0x1120), f_q))mstore(0x56c0, mulmod(mload(0x56a0), mload(0x1120), f_q))mstore(0x56e0, mulmod(mload(0x56c0), mload(0x1120), f_q))mstore(0x5700, mulmod(mload(0x56e0), mload(0x1120), f_q))mstore(0x5720, mulmod(mload(0x5700), mload(0x1120), f_q))mstore(0x5740, mulmod(mload(0x5720), mload(0x1120), f_q))mstore(0x5760, mulmod(mload(0x5740), mload(0x1120), f_q))mstore(0x5780, mulmod(mload(0x5760), mload(0x1120), f_q))mstore(0x57a0, mulmod(mload(0x5780), mload(0x1120), f_q))mstore(0x57c0, mulmod(mload(0x1180), mload(0x1180), f_q))mstore(0x57e0, mulmod(mload(0x57c0), mload(0x1180), f_q))mstore(0x5800, mulmod(mload(0x57e0), mload(0x1180), f_q)){ let result := mulmod(mload(0xea0), mload(0x4e60), f_q)result := addmod(mulmod(mload(0xec0), mload(0x4ec0), f_q), result, f_q)result := addmod(mulmod(mload(0xee0), mload(0x4f20), f_q), result, f_q)result := addmod(mulmod(mload(0xf00), mload(0x4f80), f_q), result, f_q)mstore(0x5820, result) }mstore(0x5840, mulmod(mload(0x5820), mload(0x5420), f_q))mstore(0x5860, mulmod(sub(f_q, mload(0x5840)), 1, f_q))mstore(0x5880, mulmod(mload(0x5860), 1, f_q))mstore(0x58a0, mulmod(1, mload(0x5440), f_q)){ let result := mulmod(mload(0x1020), mload(0x5060), f_q)result := addmod(mulmod(mload(0x1040), mload(0x50c0), f_q), result, f_q)mstore(0x58c0, result) }mstore(0x58e0, mulmod(mload(0x58c0), mload(0x5640), f_q))mstore(0x5900, mulmod(sub(f_q, mload(0x58e0)), 1, f_q))mstore(0x5920, mulmod(mload(0x58a0), 1, f_q)){ let result := mulmod(mload(0x1060), mload(0x5060), f_q)result := addmod(mulmod(mload(0x1080), mload(0x50c0), f_q), result, f_q)mstore(0x5940, result) }mstore(0x5960, mulmod(mload(0x5940), mload(0x5640), f_q))mstore(0x5980, mulmod(sub(f_q, mload(0x5960)), mload(0x1120), f_q))mstore(0x59a0, mulmod(mload(0x58a0), mload(0x1120), f_q))mstore(0x59c0, addmod(mload(0x5900), mload(0x5980), f_q))mstore(0x59e0, mulmod(mload(0x59c0), mload(0x1180), f_q))mstore(0x5a00, mulmod(mload(0x5920), mload(0x1180), f_q))mstore(0x5a20, mulmod(mload(0x59a0), mload(0x1180), f_q))mstore(0x5a40, addmod(mload(0x5880), mload(0x59e0), f_q))mstore(0x5a60, mulmod(1, mload(0x5480), f_q)){ let result := mulmod(mload(0x10a0), mload(0x5120), f_q)result := addmod(mulmod(mload(0x10c0), mload(0x5180), f_q), result, f_q)mstore(0x5a80, result) }mstore(0x5aa0, mulmod(mload(0x5a80), mload(0x5660), f_q))mstore(0x5ac0, mulmod(sub(f_q, mload(0x5aa0)), 1, f_q))mstore(0x5ae0, mulmod(mload(0x5a60), 1, f_q))mstore(0x5b00, mulmod(mload(0x5ac0), mload(0x57c0), f_q))mstore(0x5b20, mulmod(mload(0x5ae0), mload(0x57c0), f_q))mstore(0x5b40, addmod(mload(0x5a40), mload(0x5b00), f_q))mstore(0x5b60, mulmod(1, mload(0x54c0), f_q)){ let result := mulmod(mload(0x10e0), mload(0x51c0), f_q)mstore(0x5b80, result) }mstore(0x5ba0, mulmod(mload(0x5b80), mload(0x5680), f_q))mstore(0x5bc0, mulmod(sub(f_q, mload(0x5ba0)), 1, f_q))mstore(0x5be0, mulmod(mload(0x5b60), 1, f_q)){ let result := mulmod(mload(0xf20), mload(0x51c0), f_q)mstore(0x5c00, result) }mstore(0x5c20, mulmod(mload(0x5c00), mload(0x5680), f_q))mstore(0x5c40, mulmod(sub(f_q, mload(0x5c20)), mload(0x1120), f_q))mstore(0x5c60, mulmod(mload(0x5b60), mload(0x1120), f_q))mstore(0x5c80, addmod(mload(0x5bc0), mload(0x5c40), f_q)){ let result := mulmod(mload(0xf40), mload(0x51c0), f_q)mstore(0x5ca0, result) }mstore(0x5cc0, mulmod(mload(0x5ca0), mload(0x5680), f_q))mstore(0x5ce0, mulmod(sub(f_q, mload(0x5cc0)), mload(0x56a0), f_q))mstore(0x5d00, mulmod(mload(0x5b60), mload(0x56a0), f_q))mstore(0x5d20, addmod(mload(0x5c80), mload(0x5ce0), f_q)){ let result := mulmod(mload(0xf60), mload(0x51c0), f_q)mstore(0x5d40, result) }mstore(0x5d60, mulmod(mload(0x5d40), mload(0x5680), f_q))mstore(0x5d80, mulmod(sub(f_q, mload(0x5d60)), mload(0x56c0), f_q))mstore(0x5da0, mulmod(mload(0x5b60), mload(0x56c0), f_q))mstore(0x5dc0, addmod(mload(0x5d20), mload(0x5d80), f_q)){ let result := mulmod(mload(0xf80), mload(0x51c0), f_q)mstore(0x5de0, result) }mstore(0x5e00, mulmod(mload(0x5de0), mload(0x5680), f_q))mstore(0x5e20, mulmod(sub(f_q, mload(0x5e00)), mload(0x56e0), f_q))mstore(0x5e40, mulmod(mload(0x5b60), mload(0x56e0), f_q))mstore(0x5e60, addmod(mload(0x5dc0), mload(0x5e20), f_q)){ let result := mulmod(mload(0xfc0), mload(0x51c0), f_q)mstore(0x5e80, result) }mstore(0x5ea0, mulmod(mload(0x5e80), mload(0x5680), f_q))mstore(0x5ec0, mulmod(sub(f_q, mload(0x5ea0)), mload(0x5700), f_q))mstore(0x5ee0, mulmod(mload(0x5b60), mload(0x5700), f_q))mstore(0x5f00, addmod(mload(0x5e60), mload(0x5ec0), f_q)){ let result := mulmod(mload(0xfe0), mload(0x51c0), f_q)mstore(0x5f20, result) }mstore(0x5f40, mulmod(mload(0x5f20), mload(0x5680), f_q))mstore(0x5f60, mulmod(sub(f_q, mload(0x5f40)), mload(0x5720), f_q))mstore(0x5f80, mulmod(mload(0x5b60), mload(0x5720), f_q))mstore(0x5fa0, addmod(mload(0x5f00), mload(0x5f60), f_q)){ let result := mulmod(mload(0x1000), mload(0x51c0), f_q)mstore(0x5fc0, result) }mstore(0x5fe0, mulmod(mload(0x5fc0), mload(0x5680), f_q))mstore(0x6000, mulmod(sub(f_q, mload(0x5fe0)), mload(0x5740), f_q))mstore(0x6020, mulmod(mload(0x5b60), mload(0x5740), f_q))mstore(0x6040, addmod(mload(0x5fa0), mload(0x6000), f_q))mstore(0x6060, mulmod(mload(0x4c20), mload(0x54c0), f_q))mstore(0x6080, mulmod(mload(0x4c40), mload(0x54c0), f_q))mstore(0x60a0, mulmod(mload(0x4c60), mload(0x54c0), f_q)){ let result := mulmod(mload(0x4c80), mload(0x51c0), f_q)mstore(0x60c0, result) }mstore(0x60e0, mulmod(mload(0x60c0), mload(0x5680), f_q))mstore(0x6100, mulmod(sub(f_q, mload(0x60e0)), mload(0x5760), f_q))mstore(0x6120, mulmod(mload(0x5b60), mload(0x5760), f_q))mstore(0x6140, mulmod(mload(0x6060), mload(0x5760), f_q))mstore(0x6160, mulmod(mload(0x6080), mload(0x5760), f_q))mstore(0x6180, mulmod(mload(0x60a0), mload(0x5760), f_q))mstore(0x61a0, addmod(mload(0x6040), mload(0x6100), f_q)){ let result := mulmod(mload(0xfa0), mload(0x51c0), f_q)mstore(0x61c0, result) }mstore(0x61e0, mulmod(mload(0x61c0), mload(0x5680), f_q))mstore(0x6200, mulmod(sub(f_q, mload(0x61e0)), mload(0x5780), f_q))mstore(0x6220, mulmod(mload(0x5b60), mload(0x5780), f_q))mstore(0x6240, addmod(mload(0x61a0), mload(0x6200), f_q))mstore(0x6260, mulmod(mload(0x6240), mload(0x57e0), f_q))mstore(0x6280, mulmod(mload(0x5be0), mload(0x57e0), f_q))mstore(0x62a0, mulmod(mload(0x5c60), mload(0x57e0), f_q))mstore(0x62c0, mulmod(mload(0x5d00), mload(0x57e0), f_q))mstore(0x62e0, mulmod(mload(0x5da0), mload(0x57e0), f_q))mstore(0x6300, mulmod(mload(0x5e40), mload(0x57e0), f_q))mstore(0x6320, mulmod(mload(0x5ee0), mload(0x57e0), f_q))mstore(0x6340, mulmod(mload(0x5f80), mload(0x57e0), f_q))mstore(0x6360, mulmod(mload(0x6020), mload(0x57e0), f_q))mstore(0x6380, mulmod(mload(0x6120), mload(0x57e0), f_q))mstore(0x63a0, mulmod(mload(0x6140), mload(0x57e0), f_q))mstore(0x63c0, mulmod(mload(0x6160), mload(0x57e0), f_q))mstore(0x63e0, mulmod(mload(0x6180), mload(0x57e0), f_q))mstore(0x6400, mulmod(mload(0x6220), mload(0x57e0), f_q))mstore(0x6420, addmod(mload(0x5b40), mload(0x6260), f_q))mstore(0x6440, mulmod(1, mload(0x5000), f_q))mstore(0x6460, mulmod(1, mload(0x1220), f_q))mstore(0x6480, 0x0000000000000000000000000000000000000000000000000000000000000001) mstore(0x64a0, 0x0000000000000000000000000000000000000000000000000000000000000002)mstore(0x64c0, mload(0x6420))success := and(eq(staticcall(gas(), 0x7, 0x6480, 0x60, 0x6480, 0x40), 1), success)mstore(0x64e0, mload(0x6480)) mstore(0x6500, mload(0x64a0))mstore(0x6520, mload(0xa40)) mstore(0x6540, mload(0xa60))success := and(eq(staticcall(gas(), 0x6, 0x64e0, 0x80, 0x64e0, 0x40), 1), success)mstore(0x6560, mload(0xc20)) mstore(0x6580, mload(0xc40))mstore(0x65a0, mload(0x5a00))success := and(eq(staticcall(gas(), 0x7, 0x6560, 0x60, 0x6560, 0x40), 1), success)mstore(0x65c0, mload(0x64e0)) mstore(0x65e0, mload(0x6500))mstore(0x6600, mload(0x6560)) mstore(0x6620, mload(0x6580))success := and(eq(staticcall(gas(), 0x6, 0x65c0, 0x80, 0x65c0, 0x40), 1), success)mstore(0x6640, mload(0xc60)) mstore(0x6660, mload(0xc80))mstore(0x6680, mload(0x5a20))success := and(eq(staticcall(gas(), 0x7, 0x6640, 0x60, 0x6640, 0x40), 1), success)mstore(0x66a0, mload(0x65c0)) mstore(0x66c0, mload(0x65e0))mstore(0x66e0, mload(0x6640)) mstore(0x6700, mload(0x6660))success := and(eq(staticcall(gas(), 0x6, 0x66a0, 0x80, 0x66a0, 0x40), 1), success)mstore(0x6720, mload(0xae0)) mstore(0x6740, mload(0xb00))mstore(0x6760, mload(0x5b20))success := and(eq(staticcall(gas(), 0x7, 0x6720, 0x60, 0x6720, 0x40), 1), success)mstore(0x6780, mload(0x66a0)) mstore(0x67a0, mload(0x66c0))mstore(0x67c0, mload(0x6720)) mstore(0x67e0, mload(0x6740))success := and(eq(staticcall(gas(), 0x6, 0x6780, 0x80, 0x6780, 0x40), 1), success)mstore(0x6800, mload(0xb20)) mstore(0x6820, mload(0xb40))mstore(0x6840, mload(0x6280))success := and(eq(staticcall(gas(), 0x7, 0x6800, 0x60, 0x6800, 0x40), 1), success)mstore(0x6860, mload(0x6780)) mstore(0x6880, mload(0x67a0))mstore(0x68a0, mload(0x6800)) mstore(0x68c0, mload(0x6820))success := and(eq(staticcall(gas(), 0x6, 0x6860, 0x80, 0x6860, 0x40), 1), success)mstore(0x68e0, 0x210d6032c26fc929421bac007aa9ccc31abc84ca7d96a576e207aed3d8a0bbbe) mstore(0x6900, 0x070c952b6e2f28c7da86c58aaae8fcc717c3fa7b19a85342f8e0327ad9bebdec)mstore(0x6920, mload(0x62a0))success := and(eq(staticcall(gas(), 0x7, 0x68e0, 0x60, 0x68e0, 0x40), 1), success)mstore(0x6940, mload(0x6860)) mstore(0x6960, mload(0x6880))mstore(0x6980, mload(0x68e0)) mstore(0x69a0, mload(0x6900))success := and(eq(staticcall(gas(), 0x6, 0x6940, 0x80, 0x6940, 0x40), 1), success)mstore(0x69c0, 0x2b49991085edc0ad59347332eef079c69d246382b6050f559f6dfa3e267d4db7) mstore(0x69e0, 0x2f9011bf0177a5787cb6f4f2c628c3f220f334b24ce536720185a88518724f74)mstore(0x6a00, mload(0x62c0))success := and(eq(staticcall(gas(), 0x7, 0x69c0, 0x60, 0x69c0, 0x40), 1), success)mstore(0x6a20, mload(0x6940)) mstore(0x6a40, mload(0x6960))mstore(0x6a60, mload(0x69c0)) mstore(0x6a80, mload(0x69e0))success := and(eq(staticcall(gas(), 0x6, 0x6a20, 0x80, 0x6a20, 0x40), 1), success)mstore(0x6aa0, 0x037c4580a9a97e238feddf2ae206151881eee1409ce3c6eefcc4487744c630b9) mstore(0x6ac0, 0x26f6435b940c80c34dc07b73a2b53a94c3088a8a9a82295621ace6edb29e503e)mstore(0x6ae0, mload(0x62e0))success := and(eq(staticcall(gas(), 0x7, 0x6aa0, 0x60, 0x6aa0, 0x40), 1), success)mstore(0x6b00, mload(0x6a20)) mstore(0x6b20, mload(0x6a40))mstore(0x6b40, mload(0x6aa0)) mstore(0x6b60, mload(0x6ac0))success := and(eq(staticcall(gas(), 0x6, 0x6b00, 0x80, 0x6b00, 0x40), 1), success)mstore(0x6b80, 0x18562042b0db2c40176234842298430cc299c5dc4ee641186b81a81b93deed8e) mstore(0x6ba0, 0x17885fc68be2c24bf256ea08956d13786b0036f0df46403afb3bc0755b78e0ef)mstore(0x6bc0, mload(0x6300))success := and(eq(staticcall(gas(), 0x7, 0x6b80, 0x60, 0x6b80, 0x40), 1), success)mstore(0x6be0, mload(0x6b00)) mstore(0x6c00, mload(0x6b20))mstore(0x6c20, mload(0x6b80)) mstore(0x6c40, mload(0x6ba0))success := and(eq(staticcall(gas(), 0x6, 0x6be0, 0x80, 0x6be0, 0x40), 1), success)mstore(0x6c60, 0x2feb555b52fdd9e1684e134030605b5ec94681caf36a4e4355d6097133a66bd9) mstore(0x6c80, 0x0a4a40231cf5b42a9d90155b9df716e0d0fb57d5121045411af202b392a9962d)mstore(0x6ca0, mload(0x6320))success := and(eq(staticcall(gas(), 0x7, 0x6c60, 0x60, 0x6c60, 0x40), 1), success)mstore(0x6cc0, mload(0x6be0)) mstore(0x6ce0, mload(0x6c00))mstore(0x6d00, mload(0x6c60)) mstore(0x6d20, mload(0x6c80))success := and(eq(staticcall(gas(), 0x6, 0x6cc0, 0x80, 0x6cc0, 0x40), 1), success)mstore(0x6d40, 0x1bd0a67f586bc77c9ca9c4826e93b9879d2b61df3e6341bc7b0958989b5ee1c8) mstore(0x6d60, 0x1622c5f43ab3d3fa8451f7fcaad58fa90d003099a694561c670069b36b774233)mstore(0x6d80, mload(0x6340))success := and(eq(staticcall(gas(), 0x7, 0x6d40, 0x60, 0x6d40, 0x40), 1), success)mstore(0x6da0, mload(0x6cc0)) mstore(0x6dc0, mload(0x6ce0))mstore(0x6de0, mload(0x6d40)) mstore(0x6e00, mload(0x6d60))success := and(eq(staticcall(gas(), 0x6, 0x6da0, 0x80, 0x6da0, 0x40), 1), success)mstore(0x6e20, 0x29fda1a9448e657d929d2281c63afc607f9f178fcfb5af7d09c2d574cb12793c) mstore(0x6e40, 0x139009681ef4b24d62a2648814e6f760b4e8fd1854c02f160614d831f8362dd8)mstore(0x6e60, mload(0x6360))success := and(eq(staticcall(gas(), 0x7, 0x6e20, 0x60, 0x6e20, 0x40), 1), success)mstore(0x6e80, mload(0x6da0)) mstore(0x6ea0, mload(0x6dc0))mstore(0x6ec0, mload(0x6e20)) mstore(0x6ee0, mload(0x6e40))success := and(eq(staticcall(gas(), 0x6, 0x6e80, 0x80, 0x6e80, 0x40), 1), success)mstore(0x6f00, mload(0xd40)) mstore(0x6f20, mload(0xd60))mstore(0x6f40, mload(0x6380))success := and(eq(staticcall(gas(), 0x7, 0x6f00, 0x60, 0x6f00, 0x40), 1), success)mstore(0x6f60, mload(0x6e80)) mstore(0x6f80, mload(0x6ea0))mstore(0x6fa0, mload(0x6f00)) mstore(0x6fc0, mload(0x6f20))success := and(eq(staticcall(gas(), 0x6, 0x6f60, 0x80, 0x6f60, 0x40), 1), success)mstore(0x6fe0, mload(0xd80)) mstore(0x7000, mload(0xda0))mstore(0x7020, mload(0x63a0))success := and(eq(staticcall(gas(), 0x7, 0x6fe0, 0x60, 0x6fe0, 0x40), 1), success)mstore(0x7040, mload(0x6f60)) mstore(0x7060, mload(0x6f80))mstore(0x7080, mload(0x6fe0)) mstore(0x70a0, mload(0x7000))success := and(eq(staticcall(gas(), 0x6, 0x7040, 0x80, 0x7040, 0x40), 1), success)mstore(0x70c0, mload(0xdc0)) mstore(0x70e0, mload(0xde0))mstore(0x7100, mload(0x63c0))success := and(eq(staticcall(gas(), 0x7, 0x70c0, 0x60, 0x70c0, 0x40), 1), success)mstore(0x7120, mload(0x7040)) mstore(0x7140, mload(0x7060))mstore(0x7160, mload(0x70c0)) mstore(0x7180, mload(0x70e0))success := and(eq(staticcall(gas(), 0x6, 0x7120, 0x80, 0x7120, 0x40), 1), success)mstore(0x71a0, mload(0xe00)) mstore(0x71c0, mload(0xe20))mstore(0x71e0, mload(0x63e0))success := and(eq(staticcall(gas(), 0x7, 0x71a0, 0x60, 0x71a0, 0x40), 1), success)mstore(0x7200, mload(0x7120)) mstore(0x7220, mload(0x7140))mstore(0x7240, mload(0x71a0)) mstore(0x7260, mload(0x71c0))success := and(eq(staticcall(gas(), 0x6, 0x7200, 0x80, 0x7200, 0x40), 1), success)mstore(0x7280, mload(0xca0)) mstore(0x72a0, mload(0xcc0))mstore(0x72c0, mload(0x6400))success := and(eq(staticcall(gas(), 0x7, 0x7280, 0x60, 0x7280, 0x40), 1), success)mstore(0x72e0, mload(0x7200)) mstore(0x7300, mload(0x7220))mstore(0x7320, mload(0x7280)) mstore(0x7340, mload(0x72a0))success := and(eq(staticcall(gas(), 0x6, 0x72e0, 0x80, 0x72e0, 0x40), 1), success)mstore(0x7360, mload(0x11c0)) mstore(0x7380, mload(0x11e0))mstore(0x73a0, sub(f_q, mload(0x6440)))success := and(eq(staticcall(gas(), 0x7, 0x7360, 0x60, 0x7360, 0x40), 1), success)mstore(0x73c0, mload(0x72e0)) mstore(0x73e0, mload(0x7300))mstore(0x7400, mload(0x7360)) mstore(0x7420, mload(0x7380))success := and(eq(staticcall(gas(), 0x6, 0x73c0, 0x80, 0x73c0, 0x40), 1), success)mstore(0x7440, mload(0x1260)) mstore(0x7460, mload(0x1280))mstore(0x7480, mload(0x6460))success := and(eq(staticcall(gas(), 0x7, 0x7440, 0x60, 0x7440, 0x40), 1), success)mstore(0x74a0, mload(0x73c0)) mstore(0x74c0, mload(0x73e0))mstore(0x74e0, mload(0x7440)) mstore(0x7500, mload(0x7460))success := and(eq(staticcall(gas(), 0x6, 0x74a0, 0x80, 0x74a0, 0x40), 1), success)mstore(0x7520, mload(0x74a0)) mstore(0x7540, mload(0x74c0))mstore(0x7560, mload(0x1260)) mstore(0x7580, mload(0x1280))mstore(0x75a0, mload(0x12a0)) mstore(0x75c0, mload(0x12c0))mstore(0x75e0, mload(0x12e0)) mstore(0x7600, mload(0x1300))mstore(0x7620, keccak256(0x7520, 256))mstore(0x7640, mod(mload(30112), f_q))mstore(0x7660, mulmod(mload(0x7640), mload(0x7640), f_q))mstore(0x7680, mulmod(1, mload(0x7640), f_q))mstore(0x76a0, mload(0x75a0)) mstore(0x76c0, mload(0x75c0))mstore(0x76e0, mload(0x7680))success := and(eq(staticcall(gas(), 0x7, 0x76a0, 0x60, 0x76a0, 0x40), 1), success)mstore(0x7700, mload(0x7520)) mstore(0x7720, mload(0x7540))mstore(0x7740, mload(0x76a0)) mstore(0x7760, mload(0x76c0))success := and(eq(staticcall(gas(), 0x6, 0x7700, 0x80, 0x7700, 0x40), 1), success)mstore(0x7780, mload(0x75e0)) mstore(0x77a0, mload(0x7600))mstore(0x77c0, mload(0x7680))success := and(eq(staticcall(gas(), 0x7, 0x7780, 0x60, 0x7780, 0x40), 1), success)mstore(0x77e0, mload(0x7560)) mstore(0x7800, mload(0x7580))mstore(0x7820, mload(0x7780)) mstore(0x7840, mload(0x77a0))success := and(eq(staticcall(gas(), 0x6, 0x77e0, 0x80, 0x77e0, 0x40), 1), success)mstore(0x7860, mload(0x7700)) mstore(0x7880, mload(0x7720))mstore(0x78a0, 0x198e9393920d483a7260bfb731fb5d25f1aa493335a9e71297e485b7aef312c2) mstore(0x78c0, 0x1800deef121f1e76426a00665e5c4479674322d4f75edadd46debd5cd992f6ed) mstore(0x78e0, 0x090689d0585ff075ec9e99ad690c3395bc4b313370b38ef355acdadcd122975b) mstore(0x7900, 0x12c85ea5db8c6deb4aab71808dcb408fe3d1e7690c43d37b4ce6cc0166fa7daa)mstore(0x7920, mload(0x77e0)) mstore(0x7940, mload(0x7800))mstore(0x7960, 0x0181624e80f3d6ae28df7e01eaeab1c0e919877a3b8a6b7fbc69a6817d596ea2) mstore(0x7980, 0x1783d30dcb12d259bb89098addf6280fa4b653be7a152542a28f7b926e27e648) mstore(0x79a0, 0x00ae44489d41a0d179e2dfdc03bddd883b7109f8b6ae316a59e815c1a6b35304) mstore(0x79c0, 0x0b2147ab62a386bd63e6de1522109b8c9588ab466f5aadfde8c41ca3749423ee)success := and(eq(staticcall(gas(), 0x8, 0x7860, 0x180, 0x7860, 0x20), 1), success)success := and(eq(mload(0x7860), 1), success)} return success; } } + assembly { let f_p := 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47 let f_q := 0x30644e72e131a029b85045b68181585d2833e84879b9709143e1f593f0000001 function validate_ec_point(x, y) -> valid { { let x_lt_p := lt(x, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) let y_lt_p := lt(y, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) valid := and(x_lt_p, y_lt_p) } { let y_square := mulmod(y, y, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) let x_square := mulmod(x, x, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) let x_cube := mulmod(x_square, x, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) let x_cube_plus_3 := addmod(x_cube, 3, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) let is_affine := eq(x_cube_plus_3, y_square) valid := and(valid, is_affine) } } mstore(0xa0, mod(calldataload(0x4), f_q))mstore(0xc0, mod(calldataload(0x24), f_q))mstore(0xe0, mod(calldataload(0x44), f_q))mstore(0x100, mod(calldataload(0x64), f_q))mstore(0x120, mod(calldataload(0x84), f_q))mstore(0x140, mod(calldataload(0xa4), f_q))mstore(0x160, mod(calldataload(0xc4), f_q))mstore(0x180, mod(calldataload(0xe4), f_q))mstore(0x1a0, mod(calldataload(0x104), f_q))mstore(0x1c0, mod(calldataload(0x124), f_q))mstore(0x1e0, mod(calldataload(0x144), f_q))mstore(0x200, mod(calldataload(0x164), f_q))mstore(0x220, mod(calldataload(0x184), f_q))mstore(0x240, mod(calldataload(0x1a4), f_q))mstore(0x260, mod(calldataload(0x1c4), f_q))mstore(0x280, mod(calldataload(0x1e4), f_q))mstore(0x2a0, mod(calldataload(0x204), f_q))mstore(0x2c0, mod(calldataload(0x224), f_q))mstore(0x2e0, mod(calldataload(0x244), f_q))mstore(0x300, mod(calldataload(0x264), f_q))mstore(0x320, mod(calldataload(0x284), f_q))mstore(0x340, mod(calldataload(0x2a4), f_q))mstore(0x360, mod(calldataload(0x2c4), f_q))mstore(0x380, mod(calldataload(0x2e4), f_q))mstore(0x3a0, mod(calldataload(0x304), f_q))mstore(0x3c0, mod(calldataload(0x324), f_q))mstore(0x3e0, mod(calldataload(0x344), f_q))mstore(0x400, mod(calldataload(0x364), f_q))mstore(0x420, mod(calldataload(0x384), f_q))mstore(0x440, mod(calldataload(0x3a4), f_q))mstore(0x460, mod(calldataload(0x3c4), f_q))mstore(0x480, mod(calldataload(0x3e4), f_q))mstore(0x4a0, mod(calldataload(0x404), f_q))mstore(0x4c0, mod(calldataload(0x424), f_q))mstore(0x4e0, mod(calldataload(0x444), f_q))mstore(0x500, mod(calldataload(0x464), f_q))mstore(0x520, mod(calldataload(0x484), f_q))mstore(0x540, mod(calldataload(0x4a4), f_q))mstore(0x560, mod(calldataload(0x4c4), f_q))mstore(0x580, mod(calldataload(0x4e4), f_q))mstore(0x5a0, mod(calldataload(0x504), f_q))mstore(0x5c0, mod(calldataload(0x524), f_q))mstore(0x5e0, mod(calldataload(0x544), f_q))mstore(0x600, mod(calldataload(0x564), f_q))mstore(0x620, mod(calldataload(0x584), f_q))mstore(0x640, mod(calldataload(0x5a4), f_q))mstore(0x660, mod(calldataload(0x5c4), f_q))mstore(0x680, mod(calldataload(0x5e4), f_q))mstore(0x6a0, mod(calldataload(0x604), f_q))mstore(0x6c0, mod(calldataload(0x624), f_q))mstore(0x6e0, mod(calldataload(0x644), f_q))mstore(0x700, mod(calldataload(0x664), f_q))mstore(0x720, mod(calldataload(0x684), f_q))mstore(0x740, mod(calldataload(0x6a4), f_q))mstore(0x760, mod(calldataload(0x6c4), f_q))mstore(0x780, mod(calldataload(0x6e4), f_q))mstore(0x7a0, mod(calldataload(0x704), f_q))mstore(0x7c0, mod(calldataload(0x724), f_q))mstore(0x7e0, mod(calldataload(0x744), f_q))mstore(0x800, mod(calldataload(0x764), f_q))mstore(0x820, mod(calldataload(0x784), f_q))mstore(0x840, mod(calldataload(0x7a4), f_q))mstore(0x860, mod(calldataload(0x7c4), f_q))mstore(0x880, mod(calldataload(0x7e4), f_q))mstore(0x8a0, mod(calldataload(0x804), f_q))mstore(0x8c0, mod(calldataload(0x824), f_q))mstore(0x8e0, mod(calldataload(0x844), f_q))mstore(0x900, mod(calldataload(0x864), f_q))mstore(0x920, mod(calldataload(0x884), f_q))mstore(0x940, mod(calldataload(0x8a4), f_q))mstore(0x960, mod(calldataload(0x8c4), f_q))mstore(0x980, mod(calldataload(0x8e4), f_q))mstore(0x9a0, mod(calldataload(0x904), f_q))mstore(0x9c0, mod(calldataload(0x924), f_q))mstore(0x9e0, mod(calldataload(0x944), f_q))mstore(0xa00, mod(calldataload(0x964), f_q))mstore(0xa20, mod(calldataload(0x984), f_q))mstore(0x80, 11715439634905124192438350817812315705745438828637212350574099994782109495331) { let x := calldataload(0x9e4) mstore(0xa40, x) let y := calldataload(0xa04) mstore(0xa60, y) success := and(validate_ec_point(x, y), success) }mstore(0xa80, keccak256(0x80, 2560)){ let hash := mload(0xa80) mstore(0xaa0, mod(hash, f_q)) mstore(0xac0, hash) } { let x := calldataload(0xa24) mstore(0xae0, x) let y := calldataload(0xa44) mstore(0xb00, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0xa64) mstore(0xb20, x) let y := calldataload(0xa84) mstore(0xb40, y) success := and(validate_ec_point(x, y), success) }mstore(0xb60, keccak256(0xac0, 160)){ let hash := mload(0xb60) mstore(0xb80, mod(hash, f_q)) mstore(0xba0, hash) }mstore8(0xbc0, 1)mstore(0xbc0, keccak256(0xba0, 33)){ let hash := mload(0xbc0) mstore(0xbe0, mod(hash, f_q)) mstore(0xc00, hash) } { let x := calldataload(0xaa4) mstore(0xc20, x) let y := calldataload(0xac4) mstore(0xc40, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0xae4) mstore(0xc60, x) let y := calldataload(0xb04) mstore(0xc80, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0xb24) mstore(0xca0, x) let y := calldataload(0xb44) mstore(0xcc0, y) success := and(validate_ec_point(x, y), success) }mstore(0xce0, keccak256(0xc00, 224)){ let hash := mload(0xce0) mstore(0xd00, mod(hash, f_q)) mstore(0xd20, hash) } { let x := calldataload(0xb64) mstore(0xd40, x) let y := calldataload(0xb84) mstore(0xd60, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0xba4) mstore(0xd80, x) let y := calldataload(0xbc4) mstore(0xda0, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0xbe4) mstore(0xdc0, x) let y := calldataload(0xc04) mstore(0xde0, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0xc24) mstore(0xe00, x) let y := calldataload(0xc44) mstore(0xe20, y) success := and(validate_ec_point(x, y), success) }mstore(0xe40, keccak256(0xd20, 288)){ let hash := mload(0xe40) mstore(0xe60, mod(hash, f_q)) mstore(0xe80, hash) }mstore(0xea0, mod(calldataload(0xc64), f_q))mstore(0xec0, mod(calldataload(0xc84), f_q))mstore(0xee0, mod(calldataload(0xca4), f_q))mstore(0xf00, mod(calldataload(0xcc4), f_q))mstore(0xf20, mod(calldataload(0xce4), f_q))mstore(0xf40, mod(calldataload(0xd04), f_q))mstore(0xf60, mod(calldataload(0xd24), f_q))mstore(0xf80, mod(calldataload(0xd44), f_q))mstore(0xfa0, mod(calldataload(0xd64), f_q))mstore(0xfc0, mod(calldataload(0xd84), f_q))mstore(0xfe0, mod(calldataload(0xda4), f_q))mstore(0x1000, mod(calldataload(0xdc4), f_q))mstore(0x1020, mod(calldataload(0xde4), f_q))mstore(0x1040, mod(calldataload(0xe04), f_q))mstore(0x1060, mod(calldataload(0xe24), f_q))mstore(0x1080, mod(calldataload(0xe44), f_q))mstore(0x10a0, mod(calldataload(0xe64), f_q))mstore(0x10c0, mod(calldataload(0xe84), f_q))mstore(0x10e0, mod(calldataload(0xea4), f_q))mstore(0x1100, keccak256(0xe80, 640)){ let hash := mload(0x1100) mstore(0x1120, mod(hash, f_q)) mstore(0x1140, hash) }mstore8(0x1160, 1)mstore(0x1160, keccak256(0x1140, 33)){ let hash := mload(0x1160) mstore(0x1180, mod(hash, f_q)) mstore(0x11a0, hash) } { let x := calldataload(0xec4) mstore(0x11c0, x) let y := calldataload(0xee4) mstore(0x11e0, y) success := and(validate_ec_point(x, y), success) }mstore(0x1200, keccak256(0x11a0, 96)){ let hash := mload(0x1200) mstore(0x1220, mod(hash, f_q)) mstore(0x1240, hash) } { let x := calldataload(0xf04) mstore(0x1260, x) let y := calldataload(0xf24) mstore(0x1280, y) success := and(validate_ec_point(x, y), success) }{ let x := mload(0xa0)x := add(x, shl(88, mload(0xc0)))x := add(x, shl(176, mload(0xe0)))mstore(0x12a0, x)let y := mload(0x100)y := add(y, shl(88, mload(0x120)))y := add(y, shl(176, mload(0x140)))mstore(0x12c0, y) success := and(validate_ec_point(x, y), success) }{ let x := mload(0x160)x := add(x, shl(88, mload(0x180)))x := add(x, shl(176, mload(0x1a0)))mstore(0x12e0, x)let y := mload(0x1c0)y := add(y, shl(88, mload(0x1e0)))y := add(y, shl(176, mload(0x200)))mstore(0x1300, y) success := and(validate_ec_point(x, y), success) }mstore(0x1320, mulmod(mload(0xe60), mload(0xe60), f_q))mstore(0x1340, mulmod(mload(0x1320), mload(0x1320), f_q))mstore(0x1360, mulmod(mload(0x1340), mload(0x1340), f_q))mstore(0x1380, mulmod(mload(0x1360), mload(0x1360), f_q))mstore(0x13a0, mulmod(mload(0x1380), mload(0x1380), f_q))mstore(0x13c0, mulmod(mload(0x13a0), mload(0x13a0), f_q))mstore(0x13e0, mulmod(mload(0x13c0), mload(0x13c0), f_q))mstore(0x1400, mulmod(mload(0x13e0), mload(0x13e0), f_q))mstore(0x1420, mulmod(mload(0x1400), mload(0x1400), f_q))mstore(0x1440, mulmod(mload(0x1420), mload(0x1420), f_q))mstore(0x1460, mulmod(mload(0x1440), mload(0x1440), f_q))mstore(0x1480, mulmod(mload(0x1460), mload(0x1460), f_q))mstore(0x14a0, mulmod(mload(0x1480), mload(0x1480), f_q))mstore(0x14c0, mulmod(mload(0x14a0), mload(0x14a0), f_q))mstore(0x14e0, mulmod(mload(0x14c0), mload(0x14c0), f_q))mstore(0x1500, mulmod(mload(0x14e0), mload(0x14e0), f_q))mstore(0x1520, mulmod(mload(0x1500), mload(0x1500), f_q))mstore(0x1540, mulmod(mload(0x1520), mload(0x1520), f_q))mstore(0x1560, mulmod(mload(0x1540), mload(0x1540), f_q))mstore(0x1580, mulmod(mload(0x1560), mload(0x1560), f_q))mstore(0x15a0, mulmod(mload(0x1580), mload(0x1580), f_q))mstore(0x15c0, mulmod(mload(0x15a0), mload(0x15a0), f_q))mstore(0x15e0, mulmod(mload(0x15c0), mload(0x15c0), f_q))mstore(0x1600, mulmod(mload(0x15e0), mload(0x15e0), f_q))mstore(0x1620, addmod(mload(0x1600), 21888242871839275222246405745257275088548364400416034343698204186575808495616, f_q))mstore(0x1640, mulmod(mload(0x1620), 21888241567198334088790460357988866238279339518792980768180410072331574733841, f_q))mstore(0x1660, mulmod(mload(0x1640), 12929131318670223636853686797196826072950305380535537217467769528748593133487, f_q))mstore(0x1680, addmod(mload(0xe60), 8959111553169051585392718948060449015598059019880497126230434657827215362130, f_q))mstore(0x16a0, mulmod(mload(0x1640), 14655294445420895451632927078981340937842238432098198055057679026789553137428, f_q))mstore(0x16c0, addmod(mload(0xe60), 7232948426418379770613478666275934150706125968317836288640525159786255358189, f_q))mstore(0x16e0, mulmod(mload(0x1640), 12220484078924208264862893648548198807365556694478604924193442790112568454894, f_q))mstore(0x1700, addmod(mload(0xe60), 9667758792915066957383512096709076281182807705937429419504761396463240040723, f_q))mstore(0x1720, mulmod(mload(0x1640), 8734126352828345679573237859165904705806588461301144420590422589042130041188, f_q))mstore(0x1740, addmod(mload(0xe60), 13154116519010929542673167886091370382741775939114889923107781597533678454429, f_q))mstore(0x1760, mulmod(mload(0x1640), 7358966525675286471217089135633860168646304224547606326237275077574224349359, f_q))mstore(0x1780, addmod(mload(0xe60), 14529276346163988751029316609623414919902060175868428017460929109001584146258, f_q))mstore(0x17a0, mulmod(mload(0x1640), 9741553891420464328295280489650144566903017206473301385034033384879943874347, f_q))mstore(0x17c0, addmod(mload(0xe60), 12146688980418810893951125255607130521645347193942732958664170801695864621270, f_q))mstore(0x17e0, mulmod(mload(0x1640), 17329448237240114492580865744088056414251735686965494637158808787419781175510, f_q))mstore(0x1800, addmod(mload(0xe60), 4558794634599160729665540001169218674296628713450539706539395399156027320107, f_q))mstore(0x1820, mulmod(mload(0x1640), 1, f_q))mstore(0x1840, addmod(mload(0xe60), 21888242871839275222246405745257275088548364400416034343698204186575808495616, f_q))mstore(0x1860, mulmod(mload(0x1640), 11451405578697956743456240853980216273390554734748796433026540431386972584651, f_q))mstore(0x1880, addmod(mload(0xe60), 10436837293141318478790164891277058815157809665667237910671663755188835910966, f_q))mstore(0x18a0, mulmod(mload(0x1640), 8374374965308410102411073611984011876711565317741801500439755773472076597347, f_q))mstore(0x18c0, addmod(mload(0xe60), 13513867906530865119835332133273263211836799082674232843258448413103731898270, f_q))mstore(0x18e0, mulmod(mload(0x1640), 21490807004895109926141140246143262403290679459142140821740925192625185504522, f_q))mstore(0x1900, addmod(mload(0xe60), 397435866944165296105265499114012685257684941273893521957278993950622991095, f_q))mstore(0x1920, mulmod(mload(0x1640), 11211301017135681023579411905410872569206244553457844956874280139879520583390, f_q))mstore(0x1940, addmod(mload(0xe60), 10676941854703594198666993839846402519342119846958189386823924046696287912227, f_q))mstore(0x1960, mulmod(mload(0x1640), 18846108080730935585192484934247867403156699586319724728525857970312957475341, f_q))mstore(0x1980, addmod(mload(0xe60), 3042134791108339637053920811009407685391664814096309615172346216262851020276, f_q))mstore(0x19a0, mulmod(mload(0x1640), 3615478808282855240548287271348143516886772452944084747768312988864436725401, f_q))mstore(0x19c0, addmod(mload(0xe60), 18272764063556419981698118473909131571661591947471949595929891197711371770216, f_q))mstore(0x19e0, mulmod(mload(0x1640), 21451937155080765789602997556105366785934335730087568134349216848800867145453, f_q))mstore(0x1a00, addmod(mload(0xe60), 436305716758509432643408189151908302614028670328466209348987337774941350164, f_q))mstore(0x1a20, mulmod(mload(0x1640), 1426404432721484388505361748317961535523355871255605456897797744433766488507, f_q))mstore(0x1a40, addmod(mload(0xe60), 20461838439117790833741043996939313553025008529160428886800406442142042007110, f_q))mstore(0x1a60, mulmod(mload(0x1640), 13982290267294411190096162596630216412723378687553046594730793425118513274800, f_q))mstore(0x1a80, addmod(mload(0xe60), 7905952604544864032150243148627058675824985712862987748967410761457295220817, f_q))mstore(0x1aa0, mulmod(mload(0x1640), 216092043779272773661818549620449970334216366264741118684015851799902419467, f_q))mstore(0x1ac0, addmod(mload(0xe60), 21672150828060002448584587195636825118214148034151293225014188334775906076150, f_q))mstore(0x1ae0, mulmod(mload(0x1640), 9537783784440837896026284659246718978615447564543116209283382057778110278482, f_q))mstore(0x1b00, addmod(mload(0xe60), 12350459087398437326220121086010556109932916835872918134414822128797698217135, f_q))mstore(0x1b20, mulmod(mload(0x1640), 12619617507853212586156872920672483948819476989779550311307282715684870266992, f_q))mstore(0x1b40, addmod(mload(0xe60), 9268625363986062636089532824584791139728887410636484032390921470890938228625, f_q))mstore(0x1b60, mulmod(mload(0x1640), 3947443723575973965644279767310964219908423994086470065513888332899718123222, f_q))mstore(0x1b80, addmod(mload(0xe60), 17940799148263301256602125977946310868639940406329564278184315853676090372395, f_q))mstore(0x1ba0, mulmod(mload(0x1640), 18610195890048912503953886742825279624920778288956610528523679659246523534888, f_q))mstore(0x1bc0, addmod(mload(0xe60), 3278046981790362718292519002431995463627586111459423815174524527329284960729, f_q))mstore(0x1be0, mulmod(mload(0x1640), 1539082509056298927655194235755440186888826897239928178265486731666142403222, f_q))mstore(0x1c00, addmod(mload(0xe60), 20349160362782976294591211509501834901659537503176106165432717454909666092395, f_q))mstore(0x1c20, mulmod(mload(0x1640), 19032961837237948602743626455740240236231119053033140765040043513661803148152, f_q))mstore(0x1c40, addmod(mload(0xe60), 2855281034601326619502779289517034852317245347382893578658160672914005347465, f_q))mstore(0x1c60, mulmod(mload(0x1640), 4317410353320599552056040796202302907960891408523818766419977508859423800635, f_q))mstore(0x1c80, addmod(mload(0xe60), 17570832518518675670190364949054972180587472991892215577278226677716384694982, f_q))mstore(0x1ca0, mulmod(mload(0x1640), 14875928112196239563830800280253496262679717528621719058794366823499719730250, f_q))mstore(0x1cc0, addmod(mload(0xe60), 7012314759643035658415605465003778825868646871794315284903837363076088765367, f_q))mstore(0x1ce0, mulmod(mload(0x1640), 2366023502186770334390939928726871658997402416352868340984630739442624219298, f_q))mstore(0x1d00, addmod(mload(0xe60), 19522219369652504887855465816530403429550961984063166002713573447133184276319, f_q))mstore(0x1d20, mulmod(mload(0x1640), 915149353520972163646494413843788069594022902357002628455555785223409501882, f_q))mstore(0x1d40, addmod(mload(0xe60), 20973093518318303058599911331413487018954341498059031715242648401352398993735, f_q))mstore(0x1d60, mulmod(mload(0x1640), 14391499717548074167711220639833994904150450341569029103202493919171555826079, f_q))mstore(0x1d80, addmod(mload(0xe60), 7496743154291201054535185105423280184397914058847005240495710267404252669538, f_q))mstore(0x1da0, mulmod(mload(0x1640), 5522161504810533295870699551020523636289972223872138525048055197429246400245, f_q))mstore(0x1dc0, addmod(mload(0xe60), 16366081367028741926375706194236751452258392176543895818650148989146562095372, f_q))mstore(0x1de0, mulmod(mload(0x1640), 10119780362642123194334092174270235809557798114544683654677907882314807212354, f_q))mstore(0x1e00, addmod(mload(0xe60), 11768462509197152027912313570987039278990566285871350689020296304261001283263, f_q))mstore(0x1e20, mulmod(mload(0x1640), 3766081621734395783232337525162072736827576297943013392955872170138036189193, f_q))mstore(0x1e40, addmod(mload(0xe60), 18122161250104879439014068220095202351720788102473020950742332016437772306424, f_q))mstore(0x1e60, mulmod(mload(0x1640), 2080322550956715654503104356805349981348621877591103674778333538652571537127, f_q))mstore(0x1e80, addmod(mload(0xe60), 19807920320882559567743301388451925107199742522824930668919870647923236958490, f_q))mstore(0x1ea0, mulmod(mload(0x1640), 9100833993744738801214480881117348002768153232283708533639316963648253510584, f_q))mstore(0x1ec0, addmod(mload(0xe60), 12787408878094536421031924864139927085780211168132325810058887222927554985033, f_q))mstore(0x1ee0, mulmod(mload(0x1640), 11145214675344139457514777444556774698911688619991656085001542609383151586084, f_q))mstore(0x1f00, addmod(mload(0xe60), 10743028196495135764731628300700500389636675780424378258696661577192656909533, f_q))mstore(0x1f20, mulmod(mload(0x1640), 4245441013247250116003069945606352967193023389718465410501109428393342802981, f_q))mstore(0x1f40, addmod(mload(0xe60), 17642801858592025106243335799650922121355341010697568933197094758182465692636, f_q))mstore(0x1f60, mulmod(mload(0x1640), 19228510170961893342195489288913594506775385223367826565223897736323409650249, f_q))mstore(0x1f80, addmod(mload(0xe60), 2659732700877381880050916456343680581772979177048207778474306450252398845368, f_q))mstore(0x1fa0, mulmod(mload(0x1640), 6132660129994545119218258312491950835441607143741804980633129304664017206141, f_q))mstore(0x1fc0, addmod(mload(0xe60), 15755582741844730103028147432765324253106757256674229363065074881911791289476, f_q))mstore(0x1fe0, mulmod(mload(0x1640), 10094752117139066216691253588991632982053223883646966177987813353508871280747, f_q))mstore(0x2000, addmod(mload(0xe60), 11793490754700209005555152156265642106495140516769068165710390833066937214870, f_q))mstore(0x2020, mulmod(mload(0x1640), 5854133144571823792863860130267644613802765696134002830362054821530146160770, f_q))mstore(0x2040, addmod(mload(0xe60), 16034109727267451429382545614989630474745598704282031513336149365045662334847, f_q))mstore(0x2060, mulmod(mload(0x1640), 21346203717540287263608402129024479709126363130664317843105498655869866203005, f_q))mstore(0x2080, addmod(mload(0xe60), 542039154298987958638003616232795379422001269751716500592705530705942292612, f_q))mstore(0x20a0, mulmod(mload(0x1640), 515148244606945972463850631189471072103916690263705052318085725998468254533, f_q))mstore(0x20c0, addmod(mload(0xe60), 21373094627232329249782555114067804016444447710152329291380118460577340241084, f_q))mstore(0x20e0, mulmod(mload(0x1640), 13788243025932779125104144225768424453664118806559109014238064020826883170336, f_q))mstore(0x2100, addmod(mload(0xe60), 8099999845906496097142261519488850634884245593856925329460140165748925325281, f_q))mstore(0x2120, mulmod(mload(0x1640), 5980488956150442207659150513163747165544364597008566989111579977672498964212, f_q))mstore(0x2140, addmod(mload(0xe60), 15907753915688833014587255232093527923003999803407467354586624208903309531405, f_q))mstore(0x2160, mulmod(mload(0x1640), 8561696234966975469289029207282849740510759316794581475824569334969644143582, f_q))mstore(0x2180, addmod(mload(0xe60), 13326546636872299752957376537974425348037605083621452867873634851606164352035, f_q))mstore(0x21a0, mulmod(mload(0x1640), 5223738580615264174925218065001555728265216895679471490312087802465486318994, f_q))mstore(0x21c0, addmod(mload(0xe60), 16664504291224011047321187680255719360283147504736562853386116384110322176623, f_q))mstore(0x21e0, mulmod(mload(0x1640), 3302268277365219249160464068848832456250192077357408622723420445620736662125, f_q))mstore(0x2200, addmod(mload(0xe60), 18585974594474055973085941676408442632298172323058625720974783740955071833492, f_q))mstore(0x2220, mulmod(mload(0x1640), 14557038802599140430182096396825290815503940951075961210638273254419942783582, f_q))mstore(0x2240, addmod(mload(0xe60), 7331204069240134792064309348431984273044423449340073133059930932155865712035, f_q))mstore(0x2260, mulmod(mload(0x1640), 21631349642691366221117117325940229443266870213711402446456178962469345982255, f_q))mstore(0x2280, addmod(mload(0xe60), 256893229147909001129288419317045645281494186704631897242025224106462513362, f_q))mstore(0x22a0, mulmod(mload(0x1640), 16976236069879939850923145256911338076234942200101755618884183331004076579046, f_q))mstore(0x22c0, addmod(mload(0xe60), 4912006801959335371323260488345937012313422200314278724814020855571731916571, f_q))mstore(0x22e0, mulmod(mload(0x1640), 18106030913818996184930975996483865250387924434749113154514488995517615180373, f_q))mstore(0x2300, addmod(mload(0xe60), 3782211958020279037315429748773409838160439965666921189183715191058193315244, f_q))mstore(0x2320, mulmod(mload(0x1640), 13553911191894110065493137367144919847521088405945523452288398666974237857208, f_q))mstore(0x2340, addmod(mload(0xe60), 8334331679945165156753268378112355241027275994470510891409805519601570638409, f_q))mstore(0x2360, mulmod(mload(0x1640), 15126807493918544618788554261654793824894621953586710625413511093368555507114, f_q))mstore(0x2380, addmod(mload(0xe60), 6761435377920730603457851483602481263653742446829323718284693093207252988503, f_q))mstore(0x23a0, mulmod(mload(0x1640), 12222687719926148270818604386979005738180875192307070468454582955273533101023, f_q))mstore(0x23c0, addmod(mload(0xe60), 9665555151913126951427801358278269350367489208108963875243621231302275394594, f_q))mstore(0x23e0, mulmod(mload(0x1640), 16714975918200644516413377824646615398811161167186708005951772994925725210988, f_q))mstore(0x2400, addmod(mload(0xe60), 5173266953638630705833027920610659689737203233229326337746431191650083284629, f_q))mstore(0x2420, mulmod(mload(0x1640), 9697063347556872083384215826199993067635178715531258559890418744774301211662, f_q))mstore(0x2440, addmod(mload(0xe60), 12191179524282403138862189919057282020913185684884775783807785441801507283955, f_q))mstore(0x2460, mulmod(mload(0x1640), 8232431451150482057473812611943294635402895089782291356256081195754688638419, f_q))mstore(0x2480, addmod(mload(0xe60), 13655811420688793164772593133313980453145469310633742987442122990821119857198, f_q))mstore(0x24a0, mulmod(mload(0x1640), 13783318220968413117070077848579881425001701814458176881760898225529300547844, f_q))mstore(0x24c0, addmod(mload(0xe60), 8104924650870862105176327896677393663546662585957857461937305961046507947773, f_q))mstore(0x24e0, mulmod(mload(0x1640), 17070294809977715215077308683367050851120007385961664319144486981376266100228, f_q))mstore(0x2500, addmod(mload(0xe60), 4817948061861560007169097061890224237428357014454370024553717205199542395389, f_q))mstore(0x2520, mulmod(mload(0x1640), 10807735674816066981985242612061336605021639643453679977988966079770672437131, f_q))mstore(0x2540, addmod(mload(0xe60), 11080507197023208240261163133195938483526724756962354365709238106805136058486, f_q))mstore(0x2560, mulmod(mload(0x1640), 10320222094738691136760616041626757686650252828592064883134944032883139493239, f_q))mstore(0x2580, addmod(mload(0xe60), 11568020777100584085485789703630517401898111571823969460563260153692669002378, f_q))mstore(0x25a0, mulmod(mload(0x1640), 15487660954688013862248478071816391715224351867581977083810729441220383572585, f_q))mstore(0x25c0, addmod(mload(0xe60), 6400581917151261359997927673440883373324012532834057259887474745355424923032, f_q))mstore(0x25e0, mulmod(mload(0x1640), 12896114329936223826328336851156210236116218608332234285980274197209453560736, f_q))mstore(0x2600, addmod(mload(0xe60), 8992128541903051395918068894101064852432145792083800057717929989366354934881, f_q))mstore(0x2620, mulmod(mload(0x1640), 12459868075641381822485233712013080087763946065665469821362892189399541605692, f_q))mstore(0x2640, addmod(mload(0xe60), 9428374796197893399761172033244195000784418334750564522335311997176266889925, f_q))mstore(0x2660, mulmod(mload(0x1640), 19920191427190722095796166662590871096930011470879410060483116711019686308362, f_q))mstore(0x2680, addmod(mload(0xe60), 1968051444648553126450239082666403991618352929536624283215087475556122187255, f_q))mstore(0x26a0, mulmod(mload(0x1640), 12562571400845953139885120066983392294851269266041089223701347829190217414825, f_q))mstore(0x26c0, addmod(mload(0xe60), 9325671470993322082361285678273882793697095134374945119996856357385591080792, f_q))mstore(0x26e0, mulmod(mload(0x1640), 14448452208700780299613904085074562738832656926008536161675287466267527586412, f_q))mstore(0x2700, addmod(mload(0xe60), 7439790663138494922632501660182712349715707474407498182022916720308280909205, f_q))mstore(0x2720, mulmod(mload(0x1640), 16038300751658239075779628684257016433412502747804121525056508685985277092575, f_q))mstore(0x2740, addmod(mload(0xe60), 5849942120181036146466777061000258655135861652611912818641695500590531403042, f_q))mstore(0x2760, mulmod(mload(0x1640), 14084705004012911259675385222203814438408503240448202630833832765018917772160, f_q))mstore(0x2780, addmod(mload(0xe60), 7803537867826363962571020523053460650139861159967831712864371421556890723457, f_q))mstore(0x27a0, mulmod(mload(0x1640), 17665522928519859765452767154433594409738037332395989540221744312194874941704, f_q))mstore(0x27c0, addmod(mload(0xe60), 4222719943319415456793638590823680678810327068020044803476459874380933553913, f_q))mstore(0x27e0, mulmod(mload(0x1640), 16295049735753754081616348893169020553309720529814216200499589072340851153544, f_q))mstore(0x2800, addmod(mload(0xe60), 5593193136085521140630056852088254535238643870601818143198615114234957342073, f_q))mstore(0x2820, mulmod(mload(0x1640), 6955697244493336113861667751840378876927906302623587437721024018233754910398, f_q))mstore(0x2840, addmod(mload(0xe60), 14932545627345939108384737993416896211620458097792446905977180168342053585219, f_q))mstore(0x2860, mulmod(mload(0x1640), 14699031513037352720782022637883087576160364237534146709479748594993796784568, f_q))mstore(0x2880, addmod(mload(0xe60), 7189211358801922501464383107374187512388000162881887634218455591582011711049, f_q))mstore(0x28a0, mulmod(mload(0x1640), 1918679275621049296283934091410967415474987212511681231948800935495808101054, f_q))mstore(0x28c0, addmod(mload(0xe60), 19969563596218225925962471653846307673073377187904353111749403251080000394563, f_q))mstore(0x28e0, mulmod(mload(0x1640), 20776965232354160552367722884947240566565796482220309784613818285679578113242, f_q))mstore(0x2900, addmod(mload(0xe60), 1111277639485114669878682860310034521982567918195724559084385900896230382375, f_q))mstore(0x2920, mulmod(mload(0x1640), 13498745591877810872211159461644682954739332524336278910448604883789771736885, f_q))mstore(0x2940, addmod(mload(0xe60), 8389497279961464350035246283612592133809031876079755433249599302786036758732, f_q))mstore(0x2960, mulmod(mload(0x1640), 21158723257009161664752767929965294555629420783981476627372734966438349636085, f_q))mstore(0x2980, addmod(mload(0xe60), 729519614830113557493637815291980532918943616434557716325469220137458859532, f_q))mstore(0x29a0, mulmod(mload(0x1640), 6604851689411953560355663038203889299997924520355363678860500374111951937637, f_q))mstore(0x29c0, addmod(mload(0xe60), 15283391182427321661890742707053385788550439880060670664837703812463856557980, f_q))mstore(0x29e0, mulmod(mload(0x1640), 21702726909732705185590371357192368080626548100357549203145988898368692640320, f_q))mstore(0x2a00, addmod(mload(0xe60), 185515962106570036656034388064907007921816300058485140552215288207115855297, f_q))mstore(0x2a20, mulmod(mload(0x1640), 20345677989844117909528750049476969581182118546166966482506114734614108237981, f_q))mstore(0x2a40, addmod(mload(0xe60), 1542564881995157312717655695780305507366245854249067861192089451961700257636, f_q))mstore(0x2a60, mulmod(mload(0x1640), 16567582365062587108827662340989684267825804507588024377667462437222984777972, f_q))mstore(0x2a80, addmod(mload(0xe60), 5320660506776688113418743404267590820722559892828009966030741749352823717645, f_q))mstore(0x2aa0, mulmod(mload(0x1640), 11244009323710436498447061620026171700033960328162115124806024297270121927878, f_q))mstore(0x2ac0, addmod(mload(0xe60), 10644233548128838723799344125231103388514404072253919218892179889305686567739, f_q))mstore(0x2ae0, mulmod(mload(0x1640), 9706000582800290987287483383922226374157159042727108374973797832689105581010, f_q))mstore(0x2b00, addmod(mload(0xe60), 12182242289038984234958922361335048714391205357688925968724406353886702914607, f_q))mstore(0x2b20, mulmod(mload(0x1640), 790608022292213379425324383664216541739009722347092850716054055768832299157, f_q))mstore(0x2b40, addmod(mload(0xe60), 21097634849547061842821081361593058546809354678068941492982150130806976196460, f_q)){ let prod := mload(0x1680) prod := mulmod(mload(0x16c0), prod, f_q) mstore(0x2b60, prod) prod := mulmod(mload(0x1700), prod, f_q) mstore(0x2b80, prod) prod := mulmod(mload(0x1740), prod, f_q) mstore(0x2ba0, prod) prod := mulmod(mload(0x1780), prod, f_q) mstore(0x2bc0, prod) prod := mulmod(mload(0x17c0), prod, f_q) mstore(0x2be0, prod) prod := mulmod(mload(0x1800), prod, f_q) mstore(0x2c00, prod) prod := mulmod(mload(0x1840), prod, f_q) mstore(0x2c20, prod) prod := mulmod(mload(0x1880), prod, f_q) mstore(0x2c40, prod) prod := mulmod(mload(0x18c0), prod, f_q) mstore(0x2c60, prod) prod := mulmod(mload(0x1900), prod, f_q) mstore(0x2c80, prod) prod := mulmod(mload(0x1940), prod, f_q) mstore(0x2ca0, prod) prod := mulmod(mload(0x1980), prod, f_q) mstore(0x2cc0, prod) prod := mulmod(mload(0x19c0), prod, f_q) mstore(0x2ce0, prod) prod := mulmod(mload(0x1a00), prod, f_q) mstore(0x2d00, prod) prod := mulmod(mload(0x1a40), prod, f_q) mstore(0x2d20, prod) prod := mulmod(mload(0x1a80), prod, f_q) mstore(0x2d40, prod) prod := mulmod(mload(0x1ac0), prod, f_q) mstore(0x2d60, prod) prod := mulmod(mload(0x1b00), prod, f_q) mstore(0x2d80, prod) prod := mulmod(mload(0x1b40), prod, f_q) mstore(0x2da0, prod) prod := mulmod(mload(0x1b80), prod, f_q) mstore(0x2dc0, prod) prod := mulmod(mload(0x1bc0), prod, f_q) mstore(0x2de0, prod) prod := mulmod(mload(0x1c00), prod, f_q) mstore(0x2e00, prod) prod := mulmod(mload(0x1c40), prod, f_q) mstore(0x2e20, prod) prod := mulmod(mload(0x1c80), prod, f_q) mstore(0x2e40, prod) prod := mulmod(mload(0x1cc0), prod, f_q) mstore(0x2e60, prod) prod := mulmod(mload(0x1d00), prod, f_q) mstore(0x2e80, prod) prod := mulmod(mload(0x1d40), prod, f_q) mstore(0x2ea0, prod) prod := mulmod(mload(0x1d80), prod, f_q) mstore(0x2ec0, prod) prod := mulmod(mload(0x1dc0), prod, f_q) mstore(0x2ee0, prod) prod := mulmod(mload(0x1e00), prod, f_q) mstore(0x2f00, prod) prod := mulmod(mload(0x1e40), prod, f_q) mstore(0x2f20, prod) prod := mulmod(mload(0x1e80), prod, f_q) mstore(0x2f40, prod) prod := mulmod(mload(0x1ec0), prod, f_q) mstore(0x2f60, prod) prod := mulmod(mload(0x1f00), prod, f_q) mstore(0x2f80, prod) prod := mulmod(mload(0x1f40), prod, f_q) mstore(0x2fa0, prod) prod := mulmod(mload(0x1f80), prod, f_q) mstore(0x2fc0, prod) prod := mulmod(mload(0x1fc0), prod, f_q) mstore(0x2fe0, prod) prod := mulmod(mload(0x2000), prod, f_q) mstore(0x3000, prod) prod := mulmod(mload(0x2040), prod, f_q) mstore(0x3020, prod) prod := mulmod(mload(0x2080), prod, f_q) mstore(0x3040, prod) prod := mulmod(mload(0x20c0), prod, f_q) mstore(0x3060, prod) prod := mulmod(mload(0x2100), prod, f_q) mstore(0x3080, prod) prod := mulmod(mload(0x2140), prod, f_q) mstore(0x30a0, prod) prod := mulmod(mload(0x2180), prod, f_q) mstore(0x30c0, prod) prod := mulmod(mload(0x21c0), prod, f_q) mstore(0x30e0, prod) prod := mulmod(mload(0x2200), prod, f_q) mstore(0x3100, prod) prod := mulmod(mload(0x2240), prod, f_q) mstore(0x3120, prod) prod := mulmod(mload(0x2280), prod, f_q) mstore(0x3140, prod) prod := mulmod(mload(0x22c0), prod, f_q) mstore(0x3160, prod) prod := mulmod(mload(0x2300), prod, f_q) mstore(0x3180, prod) prod := mulmod(mload(0x2340), prod, f_q) mstore(0x31a0, prod) prod := mulmod(mload(0x2380), prod, f_q) mstore(0x31c0, prod) prod := mulmod(mload(0x23c0), prod, f_q) mstore(0x31e0, prod) prod := mulmod(mload(0x2400), prod, f_q) mstore(0x3200, prod) prod := mulmod(mload(0x2440), prod, f_q) mstore(0x3220, prod) prod := mulmod(mload(0x2480), prod, f_q) mstore(0x3240, prod) prod := mulmod(mload(0x24c0), prod, f_q) mstore(0x3260, prod) prod := mulmod(mload(0x2500), prod, f_q) mstore(0x3280, prod) prod := mulmod(mload(0x2540), prod, f_q) mstore(0x32a0, prod) prod := mulmod(mload(0x2580), prod, f_q) mstore(0x32c0, prod) prod := mulmod(mload(0x25c0), prod, f_q) mstore(0x32e0, prod) prod := mulmod(mload(0x2600), prod, f_q) mstore(0x3300, prod) prod := mulmod(mload(0x2640), prod, f_q) mstore(0x3320, prod) prod := mulmod(mload(0x2680), prod, f_q) mstore(0x3340, prod) prod := mulmod(mload(0x26c0), prod, f_q) mstore(0x3360, prod) prod := mulmod(mload(0x2700), prod, f_q) mstore(0x3380, prod) prod := mulmod(mload(0x2740), prod, f_q) mstore(0x33a0, prod) prod := mulmod(mload(0x2780), prod, f_q) mstore(0x33c0, prod) prod := mulmod(mload(0x27c0), prod, f_q) mstore(0x33e0, prod) prod := mulmod(mload(0x2800), prod, f_q) mstore(0x3400, prod) prod := mulmod(mload(0x2840), prod, f_q) mstore(0x3420, prod) prod := mulmod(mload(0x2880), prod, f_q) mstore(0x3440, prod) prod := mulmod(mload(0x28c0), prod, f_q) mstore(0x3460, prod) prod := mulmod(mload(0x2900), prod, f_q) mstore(0x3480, prod) prod := mulmod(mload(0x2940), prod, f_q) mstore(0x34a0, prod) prod := mulmod(mload(0x2980), prod, f_q) mstore(0x34c0, prod) prod := mulmod(mload(0x29c0), prod, f_q) mstore(0x34e0, prod) prod := mulmod(mload(0x2a00), prod, f_q) mstore(0x3500, prod) prod := mulmod(mload(0x2a40), prod, f_q) mstore(0x3520, prod) prod := mulmod(mload(0x2a80), prod, f_q) mstore(0x3540, prod) prod := mulmod(mload(0x2ac0), prod, f_q) mstore(0x3560, prod) prod := mulmod(mload(0x2b00), prod, f_q) mstore(0x3580, prod) prod := mulmod(mload(0x2b40), prod, f_q) mstore(0x35a0, prod) prod := mulmod(mload(0x1620), prod, f_q) mstore(0x35c0, prod) }mstore(0x3600, 32)mstore(0x3620, 32)mstore(0x3640, 32)mstore(0x3660, mload(0x35c0))mstore(0x3680, 21888242871839275222246405745257275088548364400416034343698204186575808495615)mstore(0x36a0, 21888242871839275222246405745257275088548364400416034343698204186575808495617)success := and(eq(staticcall(gas(), 0x5, 0x3600, 0xc0, 0x35e0, 0x20), 1), success){ let inv := mload(0x35e0) let v v := mload(0x1620) mstore(0x1620, mulmod(mload(0x35a0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2b40) mstore(0x2b40, mulmod(mload(0x3580), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2b00) mstore(0x2b00, mulmod(mload(0x3560), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2ac0) mstore(0x2ac0, mulmod(mload(0x3540), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2a80) mstore(0x2a80, mulmod(mload(0x3520), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2a40) mstore(0x2a40, mulmod(mload(0x3500), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2a00) mstore(0x2a00, mulmod(mload(0x34e0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x29c0) mstore(0x29c0, mulmod(mload(0x34c0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2980) mstore(0x2980, mulmod(mload(0x34a0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2940) mstore(0x2940, mulmod(mload(0x3480), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2900) mstore(0x2900, mulmod(mload(0x3460), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x28c0) mstore(0x28c0, mulmod(mload(0x3440), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2880) mstore(0x2880, mulmod(mload(0x3420), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2840) mstore(0x2840, mulmod(mload(0x3400), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2800) mstore(0x2800, mulmod(mload(0x33e0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x27c0) mstore(0x27c0, mulmod(mload(0x33c0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2780) mstore(0x2780, mulmod(mload(0x33a0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2740) mstore(0x2740, mulmod(mload(0x3380), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2700) mstore(0x2700, mulmod(mload(0x3360), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x26c0) mstore(0x26c0, mulmod(mload(0x3340), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2680) mstore(0x2680, mulmod(mload(0x3320), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2640) mstore(0x2640, mulmod(mload(0x3300), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2600) mstore(0x2600, mulmod(mload(0x32e0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x25c0) mstore(0x25c0, mulmod(mload(0x32c0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2580) mstore(0x2580, mulmod(mload(0x32a0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2540) mstore(0x2540, mulmod(mload(0x3280), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2500) mstore(0x2500, mulmod(mload(0x3260), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x24c0) mstore(0x24c0, mulmod(mload(0x3240), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2480) mstore(0x2480, mulmod(mload(0x3220), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2440) mstore(0x2440, mulmod(mload(0x3200), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2400) mstore(0x2400, mulmod(mload(0x31e0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x23c0) mstore(0x23c0, mulmod(mload(0x31c0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2380) mstore(0x2380, mulmod(mload(0x31a0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2340) mstore(0x2340, mulmod(mload(0x3180), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2300) mstore(0x2300, mulmod(mload(0x3160), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x22c0) mstore(0x22c0, mulmod(mload(0x3140), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2280) mstore(0x2280, mulmod(mload(0x3120), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2240) mstore(0x2240, mulmod(mload(0x3100), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2200) mstore(0x2200, mulmod(mload(0x30e0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x21c0) mstore(0x21c0, mulmod(mload(0x30c0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2180) mstore(0x2180, mulmod(mload(0x30a0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2140) mstore(0x2140, mulmod(mload(0x3080), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2100) mstore(0x2100, mulmod(mload(0x3060), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x20c0) mstore(0x20c0, mulmod(mload(0x3040), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2080) mstore(0x2080, mulmod(mload(0x3020), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2040) mstore(0x2040, mulmod(mload(0x3000), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2000) mstore(0x2000, mulmod(mload(0x2fe0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1fc0) mstore(0x1fc0, mulmod(mload(0x2fc0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1f80) mstore(0x1f80, mulmod(mload(0x2fa0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1f40) mstore(0x1f40, mulmod(mload(0x2f80), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1f00) mstore(0x1f00, mulmod(mload(0x2f60), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1ec0) mstore(0x1ec0, mulmod(mload(0x2f40), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1e80) mstore(0x1e80, mulmod(mload(0x2f20), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1e40) mstore(0x1e40, mulmod(mload(0x2f00), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1e00) mstore(0x1e00, mulmod(mload(0x2ee0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1dc0) mstore(0x1dc0, mulmod(mload(0x2ec0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1d80) mstore(0x1d80, mulmod(mload(0x2ea0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1d40) mstore(0x1d40, mulmod(mload(0x2e80), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1d00) mstore(0x1d00, mulmod(mload(0x2e60), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1cc0) mstore(0x1cc0, mulmod(mload(0x2e40), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1c80) mstore(0x1c80, mulmod(mload(0x2e20), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1c40) mstore(0x1c40, mulmod(mload(0x2e00), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1c00) mstore(0x1c00, mulmod(mload(0x2de0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1bc0) mstore(0x1bc0, mulmod(mload(0x2dc0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1b80) mstore(0x1b80, mulmod(mload(0x2da0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1b40) mstore(0x1b40, mulmod(mload(0x2d80), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1b00) mstore(0x1b00, mulmod(mload(0x2d60), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1ac0) mstore(0x1ac0, mulmod(mload(0x2d40), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1a80) mstore(0x1a80, mulmod(mload(0x2d20), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1a40) mstore(0x1a40, mulmod(mload(0x2d00), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1a00) mstore(0x1a00, mulmod(mload(0x2ce0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x19c0) mstore(0x19c0, mulmod(mload(0x2cc0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1980) mstore(0x1980, mulmod(mload(0x2ca0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1940) mstore(0x1940, mulmod(mload(0x2c80), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1900) mstore(0x1900, mulmod(mload(0x2c60), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x18c0) mstore(0x18c0, mulmod(mload(0x2c40), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1880) mstore(0x1880, mulmod(mload(0x2c20), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1840) mstore(0x1840, mulmod(mload(0x2c00), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1800) mstore(0x1800, mulmod(mload(0x2be0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x17c0) mstore(0x17c0, mulmod(mload(0x2bc0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1780) mstore(0x1780, mulmod(mload(0x2ba0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1740) mstore(0x1740, mulmod(mload(0x2b80), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1700) mstore(0x1700, mulmod(mload(0x2b60), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x16c0) mstore(0x16c0, mulmod(mload(0x1680), inv, f_q)) inv := mulmod(v, inv, f_q) mstore(0x1680, inv) }mstore(0x36c0, mulmod(mload(0x1660), mload(0x1680), f_q))mstore(0x36e0, mulmod(mload(0x16a0), mload(0x16c0), f_q))mstore(0x3700, mulmod(mload(0x16e0), mload(0x1700), f_q))mstore(0x3720, mulmod(mload(0x1720), mload(0x1740), f_q))mstore(0x3740, mulmod(mload(0x1760), mload(0x1780), f_q))mstore(0x3760, mulmod(mload(0x17a0), mload(0x17c0), f_q))mstore(0x3780, mulmod(mload(0x17e0), mload(0x1800), f_q))mstore(0x37a0, mulmod(mload(0x1820), mload(0x1840), f_q))mstore(0x37c0, mulmod(mload(0x1860), mload(0x1880), f_q))mstore(0x37e0, mulmod(mload(0x18a0), mload(0x18c0), f_q))mstore(0x3800, mulmod(mload(0x18e0), mload(0x1900), f_q))mstore(0x3820, mulmod(mload(0x1920), mload(0x1940), f_q))mstore(0x3840, mulmod(mload(0x1960), mload(0x1980), f_q))mstore(0x3860, mulmod(mload(0x19a0), mload(0x19c0), f_q))mstore(0x3880, mulmod(mload(0x19e0), mload(0x1a00), f_q))mstore(0x38a0, mulmod(mload(0x1a20), mload(0x1a40), f_q))mstore(0x38c0, mulmod(mload(0x1a60), mload(0x1a80), f_q))mstore(0x38e0, mulmod(mload(0x1aa0), mload(0x1ac0), f_q))mstore(0x3900, mulmod(mload(0x1ae0), mload(0x1b00), f_q))mstore(0x3920, mulmod(mload(0x1b20), mload(0x1b40), f_q))mstore(0x3940, mulmod(mload(0x1b60), mload(0x1b80), f_q))mstore(0x3960, mulmod(mload(0x1ba0), mload(0x1bc0), f_q))mstore(0x3980, mulmod(mload(0x1be0), mload(0x1c00), f_q))mstore(0x39a0, mulmod(mload(0x1c20), mload(0x1c40), f_q))mstore(0x39c0, mulmod(mload(0x1c60), mload(0x1c80), f_q))mstore(0x39e0, mulmod(mload(0x1ca0), mload(0x1cc0), f_q))mstore(0x3a00, mulmod(mload(0x1ce0), mload(0x1d00), f_q))mstore(0x3a20, mulmod(mload(0x1d20), mload(0x1d40), f_q))mstore(0x3a40, mulmod(mload(0x1d60), mload(0x1d80), f_q))mstore(0x3a60, mulmod(mload(0x1da0), mload(0x1dc0), f_q))mstore(0x3a80, mulmod(mload(0x1de0), mload(0x1e00), f_q))mstore(0x3aa0, mulmod(mload(0x1e20), mload(0x1e40), f_q))mstore(0x3ac0, mulmod(mload(0x1e60), mload(0x1e80), f_q))mstore(0x3ae0, mulmod(mload(0x1ea0), mload(0x1ec0), f_q))mstore(0x3b00, mulmod(mload(0x1ee0), mload(0x1f00), f_q))mstore(0x3b20, mulmod(mload(0x1f20), mload(0x1f40), f_q))mstore(0x3b40, mulmod(mload(0x1f60), mload(0x1f80), f_q))mstore(0x3b60, mulmod(mload(0x1fa0), mload(0x1fc0), f_q))mstore(0x3b80, mulmod(mload(0x1fe0), mload(0x2000), f_q))mstore(0x3ba0, mulmod(mload(0x2020), mload(0x2040), f_q))mstore(0x3bc0, mulmod(mload(0x2060), mload(0x2080), f_q))mstore(0x3be0, mulmod(mload(0x20a0), mload(0x20c0), f_q))mstore(0x3c00, mulmod(mload(0x20e0), mload(0x2100), f_q))mstore(0x3c20, mulmod(mload(0x2120), mload(0x2140), f_q))mstore(0x3c40, mulmod(mload(0x2160), mload(0x2180), f_q))mstore(0x3c60, mulmod(mload(0x21a0), mload(0x21c0), f_q))mstore(0x3c80, mulmod(mload(0x21e0), mload(0x2200), f_q))mstore(0x3ca0, mulmod(mload(0x2220), mload(0x2240), f_q))mstore(0x3cc0, mulmod(mload(0x2260), mload(0x2280), f_q))mstore(0x3ce0, mulmod(mload(0x22a0), mload(0x22c0), f_q))mstore(0x3d00, mulmod(mload(0x22e0), mload(0x2300), f_q))mstore(0x3d20, mulmod(mload(0x2320), mload(0x2340), f_q))mstore(0x3d40, mulmod(mload(0x2360), mload(0x2380), f_q))mstore(0x3d60, mulmod(mload(0x23a0), mload(0x23c0), f_q))mstore(0x3d80, mulmod(mload(0x23e0), mload(0x2400), f_q))mstore(0x3da0, mulmod(mload(0x2420), mload(0x2440), f_q))mstore(0x3dc0, mulmod(mload(0x2460), mload(0x2480), f_q))mstore(0x3de0, mulmod(mload(0x24a0), mload(0x24c0), f_q))mstore(0x3e00, mulmod(mload(0x24e0), mload(0x2500), f_q))mstore(0x3e20, mulmod(mload(0x2520), mload(0x2540), f_q))mstore(0x3e40, mulmod(mload(0x2560), mload(0x2580), f_q))mstore(0x3e60, mulmod(mload(0x25a0), mload(0x25c0), f_q))mstore(0x3e80, mulmod(mload(0x25e0), mload(0x2600), f_q))mstore(0x3ea0, mulmod(mload(0x2620), mload(0x2640), f_q))mstore(0x3ec0, mulmod(mload(0x2660), mload(0x2680), f_q))mstore(0x3ee0, mulmod(mload(0x26a0), mload(0x26c0), f_q))mstore(0x3f00, mulmod(mload(0x26e0), mload(0x2700), f_q))mstore(0x3f20, mulmod(mload(0x2720), mload(0x2740), f_q))mstore(0x3f40, mulmod(mload(0x2760), mload(0x2780), f_q))mstore(0x3f60, mulmod(mload(0x27a0), mload(0x27c0), f_q))mstore(0x3f80, mulmod(mload(0x27e0), mload(0x2800), f_q))mstore(0x3fa0, mulmod(mload(0x2820), mload(0x2840), f_q))mstore(0x3fc0, mulmod(mload(0x2860), mload(0x2880), f_q))mstore(0x3fe0, mulmod(mload(0x28a0), mload(0x28c0), f_q))mstore(0x4000, mulmod(mload(0x28e0), mload(0x2900), f_q))mstore(0x4020, mulmod(mload(0x2920), mload(0x2940), f_q))mstore(0x4040, mulmod(mload(0x2960), mload(0x2980), f_q))mstore(0x4060, mulmod(mload(0x29a0), mload(0x29c0), f_q))mstore(0x4080, mulmod(mload(0x29e0), mload(0x2a00), f_q))mstore(0x40a0, mulmod(mload(0x2a20), mload(0x2a40), f_q))mstore(0x40c0, mulmod(mload(0x2a60), mload(0x2a80), f_q))mstore(0x40e0, mulmod(mload(0x2aa0), mload(0x2ac0), f_q))mstore(0x4100, mulmod(mload(0x2ae0), mload(0x2b00), f_q))mstore(0x4120, mulmod(mload(0x2b20), mload(0x2b40), f_q)){ let result := mulmod(mload(0x37a0), mload(0xa0), f_q)result := addmod(mulmod(mload(0x37c0), mload(0xc0), f_q), result, f_q)result := addmod(mulmod(mload(0x37e0), mload(0xe0), f_q), result, f_q)result := addmod(mulmod(mload(0x3800), mload(0x100), f_q), result, f_q)result := addmod(mulmod(mload(0x3820), mload(0x120), f_q), result, f_q)result := addmod(mulmod(mload(0x3840), mload(0x140), f_q), result, f_q)result := addmod(mulmod(mload(0x3860), mload(0x160), f_q), result, f_q)result := addmod(mulmod(mload(0x3880), mload(0x180), f_q), result, f_q)result := addmod(mulmod(mload(0x38a0), mload(0x1a0), f_q), result, f_q)result := addmod(mulmod(mload(0x38c0), mload(0x1c0), f_q), result, f_q)result := addmod(mulmod(mload(0x38e0), mload(0x1e0), f_q), result, f_q)result := addmod(mulmod(mload(0x3900), mload(0x200), f_q), result, f_q)result := addmod(mulmod(mload(0x3920), mload(0x220), f_q), result, f_q)result := addmod(mulmod(mload(0x3940), mload(0x240), f_q), result, f_q)result := addmod(mulmod(mload(0x3960), mload(0x260), f_q), result, f_q)result := addmod(mulmod(mload(0x3980), mload(0x280), f_q), result, f_q)result := addmod(mulmod(mload(0x39a0), mload(0x2a0), f_q), result, f_q)result := addmod(mulmod(mload(0x39c0), mload(0x2c0), f_q), result, f_q)result := addmod(mulmod(mload(0x39e0), mload(0x2e0), f_q), result, f_q)result := addmod(mulmod(mload(0x3a00), mload(0x300), f_q), result, f_q)result := addmod(mulmod(mload(0x3a20), mload(0x320), f_q), result, f_q)result := addmod(mulmod(mload(0x3a40), mload(0x340), f_q), result, f_q)result := addmod(mulmod(mload(0x3a60), mload(0x360), f_q), result, f_q)result := addmod(mulmod(mload(0x3a80), mload(0x380), f_q), result, f_q)result := addmod(mulmod(mload(0x3aa0), mload(0x3a0), f_q), result, f_q)result := addmod(mulmod(mload(0x3ac0), mload(0x3c0), f_q), result, f_q)result := addmod(mulmod(mload(0x3ae0), mload(0x3e0), f_q), result, f_q)result := addmod(mulmod(mload(0x3b00), mload(0x400), f_q), result, f_q)result := addmod(mulmod(mload(0x3b20), mload(0x420), f_q), result, f_q)result := addmod(mulmod(mload(0x3b40), mload(0x440), f_q), result, f_q)result := addmod(mulmod(mload(0x3b60), mload(0x460), f_q), result, f_q)result := addmod(mulmod(mload(0x3b80), mload(0x480), f_q), result, f_q)result := addmod(mulmod(mload(0x3ba0), mload(0x4a0), f_q), result, f_q)result := addmod(mulmod(mload(0x3bc0), mload(0x4c0), f_q), result, f_q)result := addmod(mulmod(mload(0x3be0), mload(0x4e0), f_q), result, f_q)result := addmod(mulmod(mload(0x3c00), mload(0x500), f_q), result, f_q)result := addmod(mulmod(mload(0x3c20), mload(0x520), f_q), result, f_q)result := addmod(mulmod(mload(0x3c40), mload(0x540), f_q), result, f_q)result := addmod(mulmod(mload(0x3c60), mload(0x560), f_q), result, f_q)result := addmod(mulmod(mload(0x3c80), mload(0x580), f_q), result, f_q)result := addmod(mulmod(mload(0x3ca0), mload(0x5a0), f_q), result, f_q)result := addmod(mulmod(mload(0x3cc0), mload(0x5c0), f_q), result, f_q)result := addmod(mulmod(mload(0x3ce0), mload(0x5e0), f_q), result, f_q)result := addmod(mulmod(mload(0x3d00), mload(0x600), f_q), result, f_q)result := addmod(mulmod(mload(0x3d20), mload(0x620), f_q), result, f_q)result := addmod(mulmod(mload(0x3d40), mload(0x640), f_q), result, f_q)result := addmod(mulmod(mload(0x3d60), mload(0x660), f_q), result, f_q)result := addmod(mulmod(mload(0x3d80), mload(0x680), f_q), result, f_q)result := addmod(mulmod(mload(0x3da0), mload(0x6a0), f_q), result, f_q)result := addmod(mulmod(mload(0x3dc0), mload(0x6c0), f_q), result, f_q)result := addmod(mulmod(mload(0x3de0), mload(0x6e0), f_q), result, f_q)result := addmod(mulmod(mload(0x3e00), mload(0x700), f_q), result, f_q)result := addmod(mulmod(mload(0x3e20), mload(0x720), f_q), result, f_q)result := addmod(mulmod(mload(0x3e40), mload(0x740), f_q), result, f_q)result := addmod(mulmod(mload(0x3e60), mload(0x760), f_q), result, f_q)result := addmod(mulmod(mload(0x3e80), mload(0x780), f_q), result, f_q)result := addmod(mulmod(mload(0x3ea0), mload(0x7a0), f_q), result, f_q)result := addmod(mulmod(mload(0x3ec0), mload(0x7c0), f_q), result, f_q)result := addmod(mulmod(mload(0x3ee0), mload(0x7e0), f_q), result, f_q)result := addmod(mulmod(mload(0x3f00), mload(0x800), f_q), result, f_q)result := addmod(mulmod(mload(0x3f20), mload(0x820), f_q), result, f_q)result := addmod(mulmod(mload(0x3f40), mload(0x840), f_q), result, f_q)result := addmod(mulmod(mload(0x3f60), mload(0x860), f_q), result, f_q)result := addmod(mulmod(mload(0x3f80), mload(0x880), f_q), result, f_q)result := addmod(mulmod(mload(0x3fa0), mload(0x8a0), f_q), result, f_q)result := addmod(mulmod(mload(0x3fc0), mload(0x8c0), f_q), result, f_q)result := addmod(mulmod(mload(0x3fe0), mload(0x8e0), f_q), result, f_q)result := addmod(mulmod(mload(0x4000), mload(0x900), f_q), result, f_q)result := addmod(mulmod(mload(0x4020), mload(0x920), f_q), result, f_q)result := addmod(mulmod(mload(0x4040), mload(0x940), f_q), result, f_q)result := addmod(mulmod(mload(0x4060), mload(0x960), f_q), result, f_q)result := addmod(mulmod(mload(0x4080), mload(0x980), f_q), result, f_q)result := addmod(mulmod(mload(0x40a0), mload(0x9a0), f_q), result, f_q)result := addmod(mulmod(mload(0x40c0), mload(0x9c0), f_q), result, f_q)result := addmod(mulmod(mload(0x40e0), mload(0x9e0), f_q), result, f_q)result := addmod(mulmod(mload(0x4100), mload(0xa00), f_q), result, f_q)result := addmod(mulmod(mload(0x4120), mload(0xa20), f_q), result, f_q)mstore(0x4140, result) }mstore(0x4160, mulmod(mload(0xee0), mload(0xec0), f_q))mstore(0x4180, addmod(mload(0xea0), mload(0x4160), f_q))mstore(0x41a0, addmod(mload(0x4180), sub(f_q, mload(0xf00)), f_q))mstore(0x41c0, mulmod(mload(0x41a0), mload(0xf80), f_q))mstore(0x41e0, mulmod(mload(0xd00), mload(0x41c0), f_q))mstore(0x4200, addmod(1, sub(f_q, mload(0x1020)), f_q))mstore(0x4220, mulmod(mload(0x4200), mload(0x37a0), f_q))mstore(0x4240, addmod(mload(0x41e0), mload(0x4220), f_q))mstore(0x4260, mulmod(mload(0xd00), mload(0x4240), f_q))mstore(0x4280, mulmod(mload(0x1020), mload(0x1020), f_q))mstore(0x42a0, addmod(mload(0x4280), sub(f_q, mload(0x1020)), f_q))mstore(0x42c0, mulmod(mload(0x42a0), mload(0x36c0), f_q))mstore(0x42e0, addmod(mload(0x4260), mload(0x42c0), f_q))mstore(0x4300, mulmod(mload(0xd00), mload(0x42e0), f_q))mstore(0x4320, addmod(1, sub(f_q, mload(0x36c0)), f_q))mstore(0x4340, addmod(mload(0x36e0), mload(0x3700), f_q))mstore(0x4360, addmod(mload(0x4340), mload(0x3720), f_q))mstore(0x4380, addmod(mload(0x4360), mload(0x3740), f_q))mstore(0x43a0, addmod(mload(0x4380), mload(0x3760), f_q))mstore(0x43c0, addmod(mload(0x43a0), mload(0x3780), f_q))mstore(0x43e0, addmod(mload(0x4320), sub(f_q, mload(0x43c0)), f_q))mstore(0x4400, mulmod(mload(0xfc0), mload(0xb80), f_q))mstore(0x4420, addmod(mload(0xf20), mload(0x4400), f_q))mstore(0x4440, addmod(mload(0x4420), mload(0xbe0), f_q))mstore(0x4460, mulmod(mload(0xfe0), mload(0xb80), f_q))mstore(0x4480, addmod(mload(0xea0), mload(0x4460), f_q))mstore(0x44a0, addmod(mload(0x4480), mload(0xbe0), f_q))mstore(0x44c0, mulmod(mload(0x44a0), mload(0x4440), f_q))mstore(0x44e0, mulmod(mload(0x1000), mload(0xb80), f_q))mstore(0x4500, addmod(mload(0x4140), mload(0x44e0), f_q))mstore(0x4520, addmod(mload(0x4500), mload(0xbe0), f_q))mstore(0x4540, mulmod(mload(0x4520), mload(0x44c0), f_q))mstore(0x4560, mulmod(mload(0x4540), mload(0x1040), f_q))mstore(0x4580, mulmod(1, mload(0xb80), f_q))mstore(0x45a0, mulmod(mload(0xe60), mload(0x4580), f_q))mstore(0x45c0, addmod(mload(0xf20), mload(0x45a0), f_q))mstore(0x45e0, addmod(mload(0x45c0), mload(0xbe0), f_q))mstore(0x4600, mulmod(4131629893567559867359510883348571134090853742863529169391034518566172092834, mload(0xb80), f_q))mstore(0x4620, mulmod(mload(0xe60), mload(0x4600), f_q))mstore(0x4640, addmod(mload(0xea0), mload(0x4620), f_q))mstore(0x4660, addmod(mload(0x4640), mload(0xbe0), f_q))mstore(0x4680, mulmod(mload(0x4660), mload(0x45e0), f_q))mstore(0x46a0, mulmod(8910878055287538404433155982483128285667088683464058436815641868457422632747, mload(0xb80), f_q))mstore(0x46c0, mulmod(mload(0xe60), mload(0x46a0), f_q))mstore(0x46e0, addmod(mload(0x4140), mload(0x46c0), f_q))mstore(0x4700, addmod(mload(0x46e0), mload(0xbe0), f_q))mstore(0x4720, mulmod(mload(0x4700), mload(0x4680), f_q))mstore(0x4740, mulmod(mload(0x4720), mload(0x1020), f_q))mstore(0x4760, addmod(mload(0x4560), sub(f_q, mload(0x4740)), f_q))mstore(0x4780, mulmod(mload(0x4760), mload(0x43e0), f_q))mstore(0x47a0, addmod(mload(0x4300), mload(0x4780), f_q))mstore(0x47c0, mulmod(mload(0xd00), mload(0x47a0), f_q))mstore(0x47e0, addmod(1, sub(f_q, mload(0x1060)), f_q))mstore(0x4800, mulmod(mload(0x47e0), mload(0x37a0), f_q))mstore(0x4820, addmod(mload(0x47c0), mload(0x4800), f_q))mstore(0x4840, mulmod(mload(0xd00), mload(0x4820), f_q))mstore(0x4860, mulmod(mload(0x1060), mload(0x1060), f_q))mstore(0x4880, addmod(mload(0x4860), sub(f_q, mload(0x1060)), f_q))mstore(0x48a0, mulmod(mload(0x4880), mload(0x36c0), f_q))mstore(0x48c0, addmod(mload(0x4840), mload(0x48a0), f_q))mstore(0x48e0, mulmod(mload(0xd00), mload(0x48c0), f_q))mstore(0x4900, addmod(mload(0x10a0), mload(0xb80), f_q))mstore(0x4920, mulmod(mload(0x4900), mload(0x1080), f_q))mstore(0x4940, addmod(mload(0x10e0), mload(0xbe0), f_q))mstore(0x4960, mulmod(mload(0x4940), mload(0x4920), f_q))mstore(0x4980, mulmod(mload(0xea0), mload(0xf60), f_q))mstore(0x49a0, addmod(mload(0x4980), mload(0xb80), f_q))mstore(0x49c0, mulmod(mload(0x49a0), mload(0x1060), f_q))mstore(0x49e0, addmod(mload(0xf40), mload(0xbe0), f_q))mstore(0x4a00, mulmod(mload(0x49e0), mload(0x49c0), f_q))mstore(0x4a20, addmod(mload(0x4960), sub(f_q, mload(0x4a00)), f_q))mstore(0x4a40, mulmod(mload(0x4a20), mload(0x43e0), f_q))mstore(0x4a60, addmod(mload(0x48e0), mload(0x4a40), f_q))mstore(0x4a80, mulmod(mload(0xd00), mload(0x4a60), f_q))mstore(0x4aa0, addmod(mload(0x10a0), sub(f_q, mload(0x10e0)), f_q))mstore(0x4ac0, mulmod(mload(0x4aa0), mload(0x37a0), f_q))mstore(0x4ae0, addmod(mload(0x4a80), mload(0x4ac0), f_q))mstore(0x4b00, mulmod(mload(0xd00), mload(0x4ae0), f_q))mstore(0x4b20, mulmod(mload(0x4aa0), mload(0x43e0), f_q))mstore(0x4b40, addmod(mload(0x10a0), sub(f_q, mload(0x10c0)), f_q))mstore(0x4b60, mulmod(mload(0x4b40), mload(0x4b20), f_q))mstore(0x4b80, addmod(mload(0x4b00), mload(0x4b60), f_q))mstore(0x4ba0, mulmod(mload(0x1600), mload(0x1600), f_q))mstore(0x4bc0, mulmod(mload(0x4ba0), mload(0x1600), f_q))mstore(0x4be0, mulmod(mload(0x4bc0), mload(0x1600), f_q))mstore(0x4c00, mulmod(1, mload(0x1600), f_q))mstore(0x4c20, mulmod(1, mload(0x4ba0), f_q))mstore(0x4c40, mulmod(1, mload(0x4bc0), f_q))mstore(0x4c60, mulmod(mload(0x4b80), mload(0x1620), f_q))mstore(0x4c80, mulmod(mload(0x1320), mload(0xe60), f_q))mstore(0x4ca0, mulmod(mload(0x4c80), mload(0xe60), f_q))mstore(0x4cc0, mulmod(mload(0xe60), 17329448237240114492580865744088056414251735686965494637158808787419781175510, f_q))mstore(0x4ce0, addmod(mload(0x1220), sub(f_q, mload(0x4cc0)), f_q))mstore(0x4d00, mulmod(mload(0xe60), 1, f_q))mstore(0x4d20, addmod(mload(0x1220), sub(f_q, mload(0x4d00)), f_q))mstore(0x4d40, mulmod(mload(0xe60), 11451405578697956743456240853980216273390554734748796433026540431386972584651, f_q))mstore(0x4d60, addmod(mload(0x1220), sub(f_q, mload(0x4d40)), f_q))mstore(0x4d80, mulmod(mload(0xe60), 8374374965308410102411073611984011876711565317741801500439755773472076597347, f_q))mstore(0x4da0, addmod(mload(0x1220), sub(f_q, mload(0x4d80)), f_q))mstore(0x4dc0, mulmod(mload(0xe60), 21490807004895109926141140246143262403290679459142140821740925192625185504522, f_q))mstore(0x4de0, addmod(mload(0x1220), sub(f_q, mload(0x4dc0)), f_q))mstore(0x4e00, mulmod(6616149745577394522356295102346368305374051634342887004165528916468992151333, mload(0x4c80), f_q))mstore(0x4e20, mulmod(mload(0x4e00), 1, f_q)){ let result := mulmod(mload(0x1220), mload(0x4e00), f_q)result := addmod(mulmod(mload(0xe60), sub(f_q, mload(0x4e20)), f_q), result, f_q)mstore(0x4e40, result) }mstore(0x4e60, mulmod(530501691302793820034524283154921640443166880847115433758691660016816186416, mload(0x4c80), f_q))mstore(0x4e80, mulmod(mload(0x4e60), 11451405578697956743456240853980216273390554734748796433026540431386972584651, f_q)){ let result := mulmod(mload(0x1220), mload(0x4e60), f_q)result := addmod(mulmod(mload(0xe60), sub(f_q, mload(0x4e80)), f_q), result, f_q)mstore(0x4ea0, result) }mstore(0x4ec0, mulmod(6735468303947967792722299167169712601265763928443086612877978228369959138708, mload(0x4c80), f_q))mstore(0x4ee0, mulmod(mload(0x4ec0), 8374374965308410102411073611984011876711565317741801500439755773472076597347, f_q)){ let result := mulmod(mload(0x1220), mload(0x4ec0), f_q)result := addmod(mulmod(mload(0xe60), sub(f_q, mload(0x4ee0)), f_q), result, f_q)mstore(0x4f00, result) }mstore(0x4f20, mulmod(21558793644302942916864965630979640748886316167261336210841195936026980690666, mload(0x4c80), f_q))mstore(0x4f40, mulmod(mload(0x4f20), 21490807004895109926141140246143262403290679459142140821740925192625185504522, f_q)){ let result := mulmod(mload(0x1220), mload(0x4f20), f_q)result := addmod(mulmod(mload(0xe60), sub(f_q, mload(0x4f40)), f_q), result, f_q)mstore(0x4f60, result) }mstore(0x4f80, mulmod(1, mload(0x4d20), f_q))mstore(0x4fa0, mulmod(mload(0x4f80), mload(0x4d60), f_q))mstore(0x4fc0, mulmod(mload(0x4fa0), mload(0x4da0), f_q))mstore(0x4fe0, mulmod(mload(0x4fc0), mload(0x4de0), f_q))mstore(0x5000, mulmod(10436837293141318478790164891277058815157809665667237910671663755188835910967, mload(0xe60), f_q))mstore(0x5020, mulmod(mload(0x5000), 1, f_q)){ let result := mulmod(mload(0x1220), mload(0x5000), f_q)result := addmod(mulmod(mload(0xe60), sub(f_q, mload(0x5020)), f_q), result, f_q)mstore(0x5040, result) }mstore(0x5060, mulmod(11451405578697956743456240853980216273390554734748796433026540431386972584650, mload(0xe60), f_q))mstore(0x5080, mulmod(mload(0x5060), 11451405578697956743456240853980216273390554734748796433026540431386972584651, f_q)){ let result := mulmod(mload(0x1220), mload(0x5060), f_q)result := addmod(mulmod(mload(0xe60), sub(f_q, mload(0x5080)), f_q), result, f_q)mstore(0x50a0, result) }mstore(0x50c0, mulmod(4558794634599160729665540001169218674296628713450539706539395399156027320108, mload(0xe60), f_q))mstore(0x50e0, mulmod(mload(0x50c0), 1, f_q)){ let result := mulmod(mload(0x1220), mload(0x50c0), f_q)result := addmod(mulmod(mload(0xe60), sub(f_q, mload(0x50e0)), f_q), result, f_q)mstore(0x5100, result) }mstore(0x5120, mulmod(17329448237240114492580865744088056414251735686965494637158808787419781175509, mload(0xe60), f_q))mstore(0x5140, mulmod(mload(0x5120), 17329448237240114492580865744088056414251735686965494637158808787419781175510, f_q)){ let result := mulmod(mload(0x1220), mload(0x5120), f_q)result := addmod(mulmod(mload(0xe60), sub(f_q, mload(0x5140)), f_q), result, f_q)mstore(0x5160, result) }mstore(0x5180, mulmod(mload(0x4f80), mload(0x4ce0), f_q)){ let result := mulmod(mload(0x1220), 1, f_q)result := addmod(mulmod(mload(0xe60), 21888242871839275222246405745257275088548364400416034343698204186575808495616, f_q), result, f_q)mstore(0x51a0, result) }{ let prod := mload(0x4e40) prod := mulmod(mload(0x4ea0), prod, f_q) mstore(0x51c0, prod) prod := mulmod(mload(0x4f00), prod, f_q) mstore(0x51e0, prod) prod := mulmod(mload(0x4f60), prod, f_q) mstore(0x5200, prod) prod := mulmod(mload(0x5040), prod, f_q) mstore(0x5220, prod) prod := mulmod(mload(0x50a0), prod, f_q) mstore(0x5240, prod) prod := mulmod(mload(0x4fa0), prod, f_q) mstore(0x5260, prod) prod := mulmod(mload(0x5100), prod, f_q) mstore(0x5280, prod) prod := mulmod(mload(0x5160), prod, f_q) mstore(0x52a0, prod) prod := mulmod(mload(0x5180), prod, f_q) mstore(0x52c0, prod) prod := mulmod(mload(0x51a0), prod, f_q) mstore(0x52e0, prod) prod := mulmod(mload(0x4f80), prod, f_q) mstore(0x5300, prod) }mstore(0x5340, 32)mstore(0x5360, 32)mstore(0x5380, 32)mstore(0x53a0, mload(0x5300))mstore(0x53c0, 21888242871839275222246405745257275088548364400416034343698204186575808495615)mstore(0x53e0, 21888242871839275222246405745257275088548364400416034343698204186575808495617)success := and(eq(staticcall(gas(), 0x5, 0x5340, 0xc0, 0x5320, 0x20), 1), success){ let inv := mload(0x5320) let v v := mload(0x4f80) mstore(0x4f80, mulmod(mload(0x52e0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x51a0) mstore(0x51a0, mulmod(mload(0x52c0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x5180) mstore(0x5180, mulmod(mload(0x52a0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x5160) mstore(0x5160, mulmod(mload(0x5280), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x5100) mstore(0x5100, mulmod(mload(0x5260), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x4fa0) mstore(0x4fa0, mulmod(mload(0x5240), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x50a0) mstore(0x50a0, mulmod(mload(0x5220), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x5040) mstore(0x5040, mulmod(mload(0x5200), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x4f60) mstore(0x4f60, mulmod(mload(0x51e0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x4f00) mstore(0x4f00, mulmod(mload(0x51c0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x4ea0) mstore(0x4ea0, mulmod(mload(0x4e40), inv, f_q)) inv := mulmod(v, inv, f_q) mstore(0x4e40, inv) }{ let result := mload(0x4e40)result := addmod(mload(0x4ea0), result, f_q)result := addmod(mload(0x4f00), result, f_q)result := addmod(mload(0x4f60), result, f_q)mstore(0x5400, result) }mstore(0x5420, mulmod(mload(0x4fe0), mload(0x4fa0), f_q)){ let result := mload(0x5040)result := addmod(mload(0x50a0), result, f_q)mstore(0x5440, result) }mstore(0x5460, mulmod(mload(0x4fe0), mload(0x5180), f_q)){ let result := mload(0x5100)result := addmod(mload(0x5160), result, f_q)mstore(0x5480, result) }mstore(0x54a0, mulmod(mload(0x4fe0), mload(0x4f80), f_q)){ let result := mload(0x51a0)mstore(0x54c0, result) }{ let prod := mload(0x5400) prod := mulmod(mload(0x5440), prod, f_q) mstore(0x54e0, prod) prod := mulmod(mload(0x5480), prod, f_q) mstore(0x5500, prod) prod := mulmod(mload(0x54c0), prod, f_q) mstore(0x5520, prod) }mstore(0x5560, 32)mstore(0x5580, 32)mstore(0x55a0, 32)mstore(0x55c0, mload(0x5520))mstore(0x55e0, 21888242871839275222246405745257275088548364400416034343698204186575808495615)mstore(0x5600, 21888242871839275222246405745257275088548364400416034343698204186575808495617)success := and(eq(staticcall(gas(), 0x5, 0x5560, 0xc0, 0x5540, 0x20), 1), success){ let inv := mload(0x5540) let v v := mload(0x54c0) mstore(0x54c0, mulmod(mload(0x5500), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x5480) mstore(0x5480, mulmod(mload(0x54e0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x5440) mstore(0x5440, mulmod(mload(0x5400), inv, f_q)) inv := mulmod(v, inv, f_q) mstore(0x5400, inv) }mstore(0x5620, mulmod(mload(0x5420), mload(0x5440), f_q))mstore(0x5640, mulmod(mload(0x5460), mload(0x5480), f_q))mstore(0x5660, mulmod(mload(0x54a0), mload(0x54c0), f_q))mstore(0x5680, mulmod(mload(0x1120), mload(0x1120), f_q))mstore(0x56a0, mulmod(mload(0x5680), mload(0x1120), f_q))mstore(0x56c0, mulmod(mload(0x56a0), mload(0x1120), f_q))mstore(0x56e0, mulmod(mload(0x56c0), mload(0x1120), f_q))mstore(0x5700, mulmod(mload(0x56e0), mload(0x1120), f_q))mstore(0x5720, mulmod(mload(0x5700), mload(0x1120), f_q))mstore(0x5740, mulmod(mload(0x5720), mload(0x1120), f_q))mstore(0x5760, mulmod(mload(0x5740), mload(0x1120), f_q))mstore(0x5780, mulmod(mload(0x5760), mload(0x1120), f_q))mstore(0x57a0, mulmod(mload(0x1180), mload(0x1180), f_q))mstore(0x57c0, mulmod(mload(0x57a0), mload(0x1180), f_q))mstore(0x57e0, mulmod(mload(0x57c0), mload(0x1180), f_q)){ let result := mulmod(mload(0xea0), mload(0x4e40), f_q)result := addmod(mulmod(mload(0xec0), mload(0x4ea0), f_q), result, f_q)result := addmod(mulmod(mload(0xee0), mload(0x4f00), f_q), result, f_q)result := addmod(mulmod(mload(0xf00), mload(0x4f60), f_q), result, f_q)mstore(0x5800, result) }mstore(0x5820, mulmod(mload(0x5800), mload(0x5400), f_q))mstore(0x5840, mulmod(sub(f_q, mload(0x5820)), 1, f_q))mstore(0x5860, mulmod(mload(0x5840), 1, f_q))mstore(0x5880, mulmod(1, mload(0x5420), f_q)){ let result := mulmod(mload(0x1020), mload(0x5040), f_q)result := addmod(mulmod(mload(0x1040), mload(0x50a0), f_q), result, f_q)mstore(0x58a0, result) }mstore(0x58c0, mulmod(mload(0x58a0), mload(0x5620), f_q))mstore(0x58e0, mulmod(sub(f_q, mload(0x58c0)), 1, f_q))mstore(0x5900, mulmod(mload(0x5880), 1, f_q)){ let result := mulmod(mload(0x1060), mload(0x5040), f_q)result := addmod(mulmod(mload(0x1080), mload(0x50a0), f_q), result, f_q)mstore(0x5920, result) }mstore(0x5940, mulmod(mload(0x5920), mload(0x5620), f_q))mstore(0x5960, mulmod(sub(f_q, mload(0x5940)), mload(0x1120), f_q))mstore(0x5980, mulmod(mload(0x5880), mload(0x1120), f_q))mstore(0x59a0, addmod(mload(0x58e0), mload(0x5960), f_q))mstore(0x59c0, mulmod(mload(0x59a0), mload(0x1180), f_q))mstore(0x59e0, mulmod(mload(0x5900), mload(0x1180), f_q))mstore(0x5a00, mulmod(mload(0x5980), mload(0x1180), f_q))mstore(0x5a20, addmod(mload(0x5860), mload(0x59c0), f_q))mstore(0x5a40, mulmod(1, mload(0x5460), f_q)){ let result := mulmod(mload(0x10a0), mload(0x5100), f_q)result := addmod(mulmod(mload(0x10c0), mload(0x5160), f_q), result, f_q)mstore(0x5a60, result) }mstore(0x5a80, mulmod(mload(0x5a60), mload(0x5640), f_q))mstore(0x5aa0, mulmod(sub(f_q, mload(0x5a80)), 1, f_q))mstore(0x5ac0, mulmod(mload(0x5a40), 1, f_q))mstore(0x5ae0, mulmod(mload(0x5aa0), mload(0x57a0), f_q))mstore(0x5b00, mulmod(mload(0x5ac0), mload(0x57a0), f_q))mstore(0x5b20, addmod(mload(0x5a20), mload(0x5ae0), f_q))mstore(0x5b40, mulmod(1, mload(0x54a0), f_q)){ let result := mulmod(mload(0x10e0), mload(0x51a0), f_q)mstore(0x5b60, result) }mstore(0x5b80, mulmod(mload(0x5b60), mload(0x5660), f_q))mstore(0x5ba0, mulmod(sub(f_q, mload(0x5b80)), 1, f_q))mstore(0x5bc0, mulmod(mload(0x5b40), 1, f_q)){ let result := mulmod(mload(0xf20), mload(0x51a0), f_q)mstore(0x5be0, result) }mstore(0x5c00, mulmod(mload(0x5be0), mload(0x5660), f_q))mstore(0x5c20, mulmod(sub(f_q, mload(0x5c00)), mload(0x1120), f_q))mstore(0x5c40, mulmod(mload(0x5b40), mload(0x1120), f_q))mstore(0x5c60, addmod(mload(0x5ba0), mload(0x5c20), f_q)){ let result := mulmod(mload(0xf40), mload(0x51a0), f_q)mstore(0x5c80, result) }mstore(0x5ca0, mulmod(mload(0x5c80), mload(0x5660), f_q))mstore(0x5cc0, mulmod(sub(f_q, mload(0x5ca0)), mload(0x5680), f_q))mstore(0x5ce0, mulmod(mload(0x5b40), mload(0x5680), f_q))mstore(0x5d00, addmod(mload(0x5c60), mload(0x5cc0), f_q)){ let result := mulmod(mload(0xf60), mload(0x51a0), f_q)mstore(0x5d20, result) }mstore(0x5d40, mulmod(mload(0x5d20), mload(0x5660), f_q))mstore(0x5d60, mulmod(sub(f_q, mload(0x5d40)), mload(0x56a0), f_q))mstore(0x5d80, mulmod(mload(0x5b40), mload(0x56a0), f_q))mstore(0x5da0, addmod(mload(0x5d00), mload(0x5d60), f_q)){ let result := mulmod(mload(0xf80), mload(0x51a0), f_q)mstore(0x5dc0, result) }mstore(0x5de0, mulmod(mload(0x5dc0), mload(0x5660), f_q))mstore(0x5e00, mulmod(sub(f_q, mload(0x5de0)), mload(0x56c0), f_q))mstore(0x5e20, mulmod(mload(0x5b40), mload(0x56c0), f_q))mstore(0x5e40, addmod(mload(0x5da0), mload(0x5e00), f_q)){ let result := mulmod(mload(0xfc0), mload(0x51a0), f_q)mstore(0x5e60, result) }mstore(0x5e80, mulmod(mload(0x5e60), mload(0x5660), f_q))mstore(0x5ea0, mulmod(sub(f_q, mload(0x5e80)), mload(0x56e0), f_q))mstore(0x5ec0, mulmod(mload(0x5b40), mload(0x56e0), f_q))mstore(0x5ee0, addmod(mload(0x5e40), mload(0x5ea0), f_q)){ let result := mulmod(mload(0xfe0), mload(0x51a0), f_q)mstore(0x5f00, result) }mstore(0x5f20, mulmod(mload(0x5f00), mload(0x5660), f_q))mstore(0x5f40, mulmod(sub(f_q, mload(0x5f20)), mload(0x5700), f_q))mstore(0x5f60, mulmod(mload(0x5b40), mload(0x5700), f_q))mstore(0x5f80, addmod(mload(0x5ee0), mload(0x5f40), f_q)){ let result := mulmod(mload(0x1000), mload(0x51a0), f_q)mstore(0x5fa0, result) }mstore(0x5fc0, mulmod(mload(0x5fa0), mload(0x5660), f_q))mstore(0x5fe0, mulmod(sub(f_q, mload(0x5fc0)), mload(0x5720), f_q))mstore(0x6000, mulmod(mload(0x5b40), mload(0x5720), f_q))mstore(0x6020, addmod(mload(0x5f80), mload(0x5fe0), f_q))mstore(0x6040, mulmod(mload(0x4c00), mload(0x54a0), f_q))mstore(0x6060, mulmod(mload(0x4c20), mload(0x54a0), f_q))mstore(0x6080, mulmod(mload(0x4c40), mload(0x54a0), f_q)){ let result := mulmod(mload(0x4c60), mload(0x51a0), f_q)mstore(0x60a0, result) }mstore(0x60c0, mulmod(mload(0x60a0), mload(0x5660), f_q))mstore(0x60e0, mulmod(sub(f_q, mload(0x60c0)), mload(0x5740), f_q))mstore(0x6100, mulmod(mload(0x5b40), mload(0x5740), f_q))mstore(0x6120, mulmod(mload(0x6040), mload(0x5740), f_q))mstore(0x6140, mulmod(mload(0x6060), mload(0x5740), f_q))mstore(0x6160, mulmod(mload(0x6080), mload(0x5740), f_q))mstore(0x6180, addmod(mload(0x6020), mload(0x60e0), f_q)){ let result := mulmod(mload(0xfa0), mload(0x51a0), f_q)mstore(0x61a0, result) }mstore(0x61c0, mulmod(mload(0x61a0), mload(0x5660), f_q))mstore(0x61e0, mulmod(sub(f_q, mload(0x61c0)), mload(0x5760), f_q))mstore(0x6200, mulmod(mload(0x5b40), mload(0x5760), f_q))mstore(0x6220, addmod(mload(0x6180), mload(0x61e0), f_q))mstore(0x6240, mulmod(mload(0x6220), mload(0x57c0), f_q))mstore(0x6260, mulmod(mload(0x5bc0), mload(0x57c0), f_q))mstore(0x6280, mulmod(mload(0x5c40), mload(0x57c0), f_q))mstore(0x62a0, mulmod(mload(0x5ce0), mload(0x57c0), f_q))mstore(0x62c0, mulmod(mload(0x5d80), mload(0x57c0), f_q))mstore(0x62e0, mulmod(mload(0x5e20), mload(0x57c0), f_q))mstore(0x6300, mulmod(mload(0x5ec0), mload(0x57c0), f_q))mstore(0x6320, mulmod(mload(0x5f60), mload(0x57c0), f_q))mstore(0x6340, mulmod(mload(0x6000), mload(0x57c0), f_q))mstore(0x6360, mulmod(mload(0x6100), mload(0x57c0), f_q))mstore(0x6380, mulmod(mload(0x6120), mload(0x57c0), f_q))mstore(0x63a0, mulmod(mload(0x6140), mload(0x57c0), f_q))mstore(0x63c0, mulmod(mload(0x6160), mload(0x57c0), f_q))mstore(0x63e0, mulmod(mload(0x6200), mload(0x57c0), f_q))mstore(0x6400, addmod(mload(0x5b20), mload(0x6240), f_q))mstore(0x6420, mulmod(1, mload(0x4fe0), f_q))mstore(0x6440, mulmod(1, mload(0x1220), f_q))mstore(0x6460, 0x0000000000000000000000000000000000000000000000000000000000000001) mstore(0x6480, 0x0000000000000000000000000000000000000000000000000000000000000002)mstore(0x64a0, mload(0x6400))success := and(eq(staticcall(gas(), 0x7, 0x6460, 0x60, 0x6460, 0x40), 1), success)mstore(0x64c0, mload(0x6460)) mstore(0x64e0, mload(0x6480))mstore(0x6500, mload(0xa40)) mstore(0x6520, mload(0xa60))success := and(eq(staticcall(gas(), 0x6, 0x64c0, 0x80, 0x64c0, 0x40), 1), success)mstore(0x6540, mload(0xc20)) mstore(0x6560, mload(0xc40))mstore(0x6580, mload(0x59e0))success := and(eq(staticcall(gas(), 0x7, 0x6540, 0x60, 0x6540, 0x40), 1), success)mstore(0x65a0, mload(0x64c0)) mstore(0x65c0, mload(0x64e0))mstore(0x65e0, mload(0x6540)) mstore(0x6600, mload(0x6560))success := and(eq(staticcall(gas(), 0x6, 0x65a0, 0x80, 0x65a0, 0x40), 1), success)mstore(0x6620, mload(0xc60)) mstore(0x6640, mload(0xc80))mstore(0x6660, mload(0x5a00))success := and(eq(staticcall(gas(), 0x7, 0x6620, 0x60, 0x6620, 0x40), 1), success)mstore(0x6680, mload(0x65a0)) mstore(0x66a0, mload(0x65c0))mstore(0x66c0, mload(0x6620)) mstore(0x66e0, mload(0x6640))success := and(eq(staticcall(gas(), 0x6, 0x6680, 0x80, 0x6680, 0x40), 1), success)mstore(0x6700, mload(0xae0)) mstore(0x6720, mload(0xb00))mstore(0x6740, mload(0x5b00))success := and(eq(staticcall(gas(), 0x7, 0x6700, 0x60, 0x6700, 0x40), 1), success)mstore(0x6760, mload(0x6680)) mstore(0x6780, mload(0x66a0))mstore(0x67a0, mload(0x6700)) mstore(0x67c0, mload(0x6720))success := and(eq(staticcall(gas(), 0x6, 0x6760, 0x80, 0x6760, 0x40), 1), success)mstore(0x67e0, mload(0xb20)) mstore(0x6800, mload(0xb40))mstore(0x6820, mload(0x6260))success := and(eq(staticcall(gas(), 0x7, 0x67e0, 0x60, 0x67e0, 0x40), 1), success)mstore(0x6840, mload(0x6760)) mstore(0x6860, mload(0x6780))mstore(0x6880, mload(0x67e0)) mstore(0x68a0, mload(0x6800))success := and(eq(staticcall(gas(), 0x6, 0x6840, 0x80, 0x6840, 0x40), 1), success)mstore(0x68c0, 0x030dbbd05f2e2c1253c0fe505b5c8aa5f9d65757b8d6688eb05f5b7a7481f5c5) mstore(0x68e0, 0x0334317636ef9a31a90f82857c6abc1f8a8b735638d4699528b70ed33e7dcf36)mstore(0x6900, mload(0x6280))success := and(eq(staticcall(gas(), 0x7, 0x68c0, 0x60, 0x68c0, 0x40), 1), success)mstore(0x6920, mload(0x6840)) mstore(0x6940, mload(0x6860))mstore(0x6960, mload(0x68c0)) mstore(0x6980, mload(0x68e0))success := and(eq(staticcall(gas(), 0x6, 0x6920, 0x80, 0x6920, 0x40), 1), success)mstore(0x69a0, 0x01d98d5263bc490aabe0903ed3464cfbcddf63da8b5276dc21822ce255105f42) mstore(0x69c0, 0x0bf89e789c6428f9fcd86c5b18df6da02b13a6009b3bdf76a15c4408a38f19e3)mstore(0x69e0, mload(0x62a0))success := and(eq(staticcall(gas(), 0x7, 0x69a0, 0x60, 0x69a0, 0x40), 1), success)mstore(0x6a00, mload(0x6920)) mstore(0x6a20, mload(0x6940))mstore(0x6a40, mload(0x69a0)) mstore(0x6a60, mload(0x69c0))success := and(eq(staticcall(gas(), 0x6, 0x6a00, 0x80, 0x6a00, 0x40), 1), success)mstore(0x6a80, 0x26fea4be89252d9352b80dd9885dece3f2c688694aaa29a8025fb63d58b40e4c) mstore(0x6aa0, 0x24ff6fe738f0ddcc46a0ab99cac47b1426cdcc8f2b8804008f0539797dae5388)mstore(0x6ac0, mload(0x62c0))success := and(eq(staticcall(gas(), 0x7, 0x6a80, 0x60, 0x6a80, 0x40), 1), success)mstore(0x6ae0, mload(0x6a00)) mstore(0x6b00, mload(0x6a20))mstore(0x6b20, mload(0x6a80)) mstore(0x6b40, mload(0x6aa0))success := and(eq(staticcall(gas(), 0x6, 0x6ae0, 0x80, 0x6ae0, 0x40), 1), success)mstore(0x6b60, 0x10575040d8d0b2721ffae8380b2430134a0d7fe93ee14614a342c675b913b914) mstore(0x6b80, 0x1936b8b7fa75c8fed7087ac63997986762c1d397eca41b5967b3dbee4b534076)mstore(0x6ba0, mload(0x62e0))success := and(eq(staticcall(gas(), 0x7, 0x6b60, 0x60, 0x6b60, 0x40), 1), success)mstore(0x6bc0, mload(0x6ae0)) mstore(0x6be0, mload(0x6b00))mstore(0x6c00, mload(0x6b60)) mstore(0x6c20, mload(0x6b80))success := and(eq(staticcall(gas(), 0x6, 0x6bc0, 0x80, 0x6bc0, 0x40), 1), success)mstore(0x6c40, 0x12a5bf87de336c4990120a5cd85a02419f13666f9d66cb535e454fd9306edef1) mstore(0x6c60, 0x1b160f576b98fe4b389754bb6363ce360d030c45ca56169d0ef1a6bd5f1925b9)mstore(0x6c80, mload(0x6300))success := and(eq(staticcall(gas(), 0x7, 0x6c40, 0x60, 0x6c40, 0x40), 1), success)mstore(0x6ca0, mload(0x6bc0)) mstore(0x6cc0, mload(0x6be0))mstore(0x6ce0, mload(0x6c40)) mstore(0x6d00, mload(0x6c60))success := and(eq(staticcall(gas(), 0x6, 0x6ca0, 0x80, 0x6ca0, 0x40), 1), success)mstore(0x6d20, 0x2fef334900a272a4ebad08edbc56372c1029303d4b0b5ce6c556b9204cbfecc7) mstore(0x6d40, 0x15f82d8f5bdd521213bf4e0443fdb121bc4a942e225774a58d34d650fa357422)mstore(0x6d60, mload(0x6320))success := and(eq(staticcall(gas(), 0x7, 0x6d20, 0x60, 0x6d20, 0x40), 1), success)mstore(0x6d80, mload(0x6ca0)) mstore(0x6da0, mload(0x6cc0))mstore(0x6dc0, mload(0x6d20)) mstore(0x6de0, mload(0x6d40))success := and(eq(staticcall(gas(), 0x6, 0x6d80, 0x80, 0x6d80, 0x40), 1), success)mstore(0x6e00, 0x22e8ca2ccbc2de3d536b2ebe6c3ad3f99ff0935b154ff3630d3298a2f204afc7) mstore(0x6e20, 0x0a66913d11d12fd0a3801e6afe211964d9e3179abe30dd4ecae3fffdeb65d1dc)mstore(0x6e40, mload(0x6340))success := and(eq(staticcall(gas(), 0x7, 0x6e00, 0x60, 0x6e00, 0x40), 1), success)mstore(0x6e60, mload(0x6d80)) mstore(0x6e80, mload(0x6da0))mstore(0x6ea0, mload(0x6e00)) mstore(0x6ec0, mload(0x6e20))success := and(eq(staticcall(gas(), 0x6, 0x6e60, 0x80, 0x6e60, 0x40), 1), success)mstore(0x6ee0, mload(0xd40)) mstore(0x6f00, mload(0xd60))mstore(0x6f20, mload(0x6360))success := and(eq(staticcall(gas(), 0x7, 0x6ee0, 0x60, 0x6ee0, 0x40), 1), success)mstore(0x6f40, mload(0x6e60)) mstore(0x6f60, mload(0x6e80))mstore(0x6f80, mload(0x6ee0)) mstore(0x6fa0, mload(0x6f00))success := and(eq(staticcall(gas(), 0x6, 0x6f40, 0x80, 0x6f40, 0x40), 1), success)mstore(0x6fc0, mload(0xd80)) mstore(0x6fe0, mload(0xda0))mstore(0x7000, mload(0x6380))success := and(eq(staticcall(gas(), 0x7, 0x6fc0, 0x60, 0x6fc0, 0x40), 1), success)mstore(0x7020, mload(0x6f40)) mstore(0x7040, mload(0x6f60))mstore(0x7060, mload(0x6fc0)) mstore(0x7080, mload(0x6fe0))success := and(eq(staticcall(gas(), 0x6, 0x7020, 0x80, 0x7020, 0x40), 1), success)mstore(0x70a0, mload(0xdc0)) mstore(0x70c0, mload(0xde0))mstore(0x70e0, mload(0x63a0))success := and(eq(staticcall(gas(), 0x7, 0x70a0, 0x60, 0x70a0, 0x40), 1), success)mstore(0x7100, mload(0x7020)) mstore(0x7120, mload(0x7040))mstore(0x7140, mload(0x70a0)) mstore(0x7160, mload(0x70c0))success := and(eq(staticcall(gas(), 0x6, 0x7100, 0x80, 0x7100, 0x40), 1), success)mstore(0x7180, mload(0xe00)) mstore(0x71a0, mload(0xe20))mstore(0x71c0, mload(0x63c0))success := and(eq(staticcall(gas(), 0x7, 0x7180, 0x60, 0x7180, 0x40), 1), success)mstore(0x71e0, mload(0x7100)) mstore(0x7200, mload(0x7120))mstore(0x7220, mload(0x7180)) mstore(0x7240, mload(0x71a0))success := and(eq(staticcall(gas(), 0x6, 0x71e0, 0x80, 0x71e0, 0x40), 1), success)mstore(0x7260, mload(0xca0)) mstore(0x7280, mload(0xcc0))mstore(0x72a0, mload(0x63e0))success := and(eq(staticcall(gas(), 0x7, 0x7260, 0x60, 0x7260, 0x40), 1), success)mstore(0x72c0, mload(0x71e0)) mstore(0x72e0, mload(0x7200))mstore(0x7300, mload(0x7260)) mstore(0x7320, mload(0x7280))success := and(eq(staticcall(gas(), 0x6, 0x72c0, 0x80, 0x72c0, 0x40), 1), success)mstore(0x7340, mload(0x11c0)) mstore(0x7360, mload(0x11e0))mstore(0x7380, sub(f_q, mload(0x6420)))success := and(eq(staticcall(gas(), 0x7, 0x7340, 0x60, 0x7340, 0x40), 1), success)mstore(0x73a0, mload(0x72c0)) mstore(0x73c0, mload(0x72e0))mstore(0x73e0, mload(0x7340)) mstore(0x7400, mload(0x7360))success := and(eq(staticcall(gas(), 0x6, 0x73a0, 0x80, 0x73a0, 0x40), 1), success)mstore(0x7420, mload(0x1260)) mstore(0x7440, mload(0x1280))mstore(0x7460, mload(0x6440))success := and(eq(staticcall(gas(), 0x7, 0x7420, 0x60, 0x7420, 0x40), 1), success)mstore(0x7480, mload(0x73a0)) mstore(0x74a0, mload(0x73c0))mstore(0x74c0, mload(0x7420)) mstore(0x74e0, mload(0x7440))success := and(eq(staticcall(gas(), 0x6, 0x7480, 0x80, 0x7480, 0x40), 1), success)mstore(0x7500, mload(0x7480)) mstore(0x7520, mload(0x74a0))mstore(0x7540, mload(0x1260)) mstore(0x7560, mload(0x1280))mstore(0x7580, mload(0x12a0)) mstore(0x75a0, mload(0x12c0))mstore(0x75c0, mload(0x12e0)) mstore(0x75e0, mload(0x1300))mstore(0x7600, keccak256(0x7500, 256))mstore(0x7620, mod(mload(30080), f_q))mstore(0x7640, mulmod(mload(0x7620), mload(0x7620), f_q))mstore(0x7660, mulmod(1, mload(0x7620), f_q))mstore(0x7680, mload(0x7580)) mstore(0x76a0, mload(0x75a0))mstore(0x76c0, mload(0x7660))success := and(eq(staticcall(gas(), 0x7, 0x7680, 0x60, 0x7680, 0x40), 1), success)mstore(0x76e0, mload(0x7500)) mstore(0x7700, mload(0x7520))mstore(0x7720, mload(0x7680)) mstore(0x7740, mload(0x76a0))success := and(eq(staticcall(gas(), 0x6, 0x76e0, 0x80, 0x76e0, 0x40), 1), success)mstore(0x7760, mload(0x75c0)) mstore(0x7780, mload(0x75e0))mstore(0x77a0, mload(0x7660))success := and(eq(staticcall(gas(), 0x7, 0x7760, 0x60, 0x7760, 0x40), 1), success)mstore(0x77c0, mload(0x7540)) mstore(0x77e0, mload(0x7560))mstore(0x7800, mload(0x7760)) mstore(0x7820, mload(0x7780))success := and(eq(staticcall(gas(), 0x6, 0x77c0, 0x80, 0x77c0, 0x40), 1), success)mstore(0x7840, mload(0x76e0)) mstore(0x7860, mload(0x7700))mstore(0x7880, 0x198e9393920d483a7260bfb731fb5d25f1aa493335a9e71297e485b7aef312c2) mstore(0x78a0, 0x1800deef121f1e76426a00665e5c4479674322d4f75edadd46debd5cd992f6ed) mstore(0x78c0, 0x090689d0585ff075ec9e99ad690c3395bc4b313370b38ef355acdadcd122975b) mstore(0x78e0, 0x12c85ea5db8c6deb4aab71808dcb408fe3d1e7690c43d37b4ce6cc0166fa7daa)mstore(0x7900, mload(0x77c0)) mstore(0x7920, mload(0x77e0))mstore(0x7940, 0x0181624e80f3d6ae28df7e01eaeab1c0e919877a3b8a6b7fbc69a6817d596ea2) mstore(0x7960, 0x1783d30dcb12d259bb89098addf6280fa4b653be7a152542a28f7b926e27e648) mstore(0x7980, 0x00ae44489d41a0d179e2dfdc03bddd883b7109f8b6ae316a59e815c1a6b35304) mstore(0x79a0, 0x0b2147ab62a386bd63e6de1522109b8c9588ab466f5aadfde8c41ca3749423ee)success := and(eq(staticcall(gas(), 0x8, 0x7840, 0x180, 0x7840, 0x20), 1), success)success := and(eq(mload(0x7840), 1), success)} return success; } } diff --git a/contracts/snark-verifiers/sync_step_verifier.sol b/contracts/snark-verifiers/sync_step_verifier.sol index 5abbbd1..28784dc 100644 --- a/contracts/snark-verifiers/sync_step_verifier.sol +++ b/contracts/snark-verifiers/sync_step_verifier.sol @@ -20,4 +20,4 @@ contract Verifier { for (uint i = 0; i < pubInputs.length; i++) { require(pubInputs[i] < SIZE_LIMIT); } - assembly { let f_p := 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47 let f_q := 0x30644e72e131a029b85045b68181585d2833e84879b9709143e1f593f0000001 function validate_ec_point(x, y) -> valid { { let x_lt_p := lt(x, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) let y_lt_p := lt(y, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) valid := and(x_lt_p, y_lt_p) } { let y_square := mulmod(y, y, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) let x_square := mulmod(x, x, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) let x_cube := mulmod(x_square, x, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) let x_cube_plus_3 := addmod(x_cube, 3, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) let is_affine := eq(x_cube_plus_3, y_square) valid := and(valid, is_affine) } } mstore(0xa0, mod(calldataload(0x4), f_q))mstore(0xc0, mod(calldataload(0x24), f_q))mstore(0xe0, mod(calldataload(0x44), f_q))mstore(0x100, mod(calldataload(0x64), f_q))mstore(0x120, mod(calldataload(0x84), f_q))mstore(0x140, mod(calldataload(0xa4), f_q))mstore(0x160, mod(calldataload(0xc4), f_q))mstore(0x180, mod(calldataload(0xe4), f_q))mstore(0x1a0, mod(calldataload(0x104), f_q))mstore(0x1c0, mod(calldataload(0x124), f_q))mstore(0x1e0, mod(calldataload(0x144), f_q))mstore(0x200, mod(calldataload(0x164), f_q))mstore(0x220, mod(calldataload(0x184), f_q))mstore(0x240, mod(calldataload(0x1a4), f_q))mstore(0x80, 8325569209571006549891578535470763537346463669077080176404717952346010321955) { let x := calldataload(0x204) mstore(0x260, x) let y := calldataload(0x224) mstore(0x280, y) success := and(validate_ec_point(x, y), success) }mstore(0x2a0, keccak256(0x80, 544)){ let hash := mload(0x2a0) mstore(0x2c0, mod(hash, f_q)) mstore(0x2e0, hash) } { let x := calldataload(0x244) mstore(0x300, x) let y := calldataload(0x264) mstore(0x320, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0x284) mstore(0x340, x) let y := calldataload(0x2a4) mstore(0x360, y) success := and(validate_ec_point(x, y), success) }mstore(0x380, keccak256(0x2e0, 160)){ let hash := mload(0x380) mstore(0x3a0, mod(hash, f_q)) mstore(0x3c0, hash) }mstore8(0x3e0, 1)mstore(0x3e0, keccak256(0x3c0, 33)){ let hash := mload(0x3e0) mstore(0x400, mod(hash, f_q)) mstore(0x420, hash) } { let x := calldataload(0x2c4) mstore(0x440, x) let y := calldataload(0x2e4) mstore(0x460, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0x304) mstore(0x480, x) let y := calldataload(0x324) mstore(0x4a0, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0x344) mstore(0x4c0, x) let y := calldataload(0x364) mstore(0x4e0, y) success := and(validate_ec_point(x, y), success) }mstore(0x500, keccak256(0x420, 224)){ let hash := mload(0x500) mstore(0x520, mod(hash, f_q)) mstore(0x540, hash) } { let x := calldataload(0x384) mstore(0x560, x) let y := calldataload(0x3a4) mstore(0x580, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0x3c4) mstore(0x5a0, x) let y := calldataload(0x3e4) mstore(0x5c0, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0x404) mstore(0x5e0, x) let y := calldataload(0x424) mstore(0x600, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0x444) mstore(0x620, x) let y := calldataload(0x464) mstore(0x640, y) success := and(validate_ec_point(x, y), success) }mstore(0x660, keccak256(0x540, 288)){ let hash := mload(0x660) mstore(0x680, mod(hash, f_q)) mstore(0x6a0, hash) }mstore(0x6c0, mod(calldataload(0x484), f_q))mstore(0x6e0, mod(calldataload(0x4a4), f_q))mstore(0x700, mod(calldataload(0x4c4), f_q))mstore(0x720, mod(calldataload(0x4e4), f_q))mstore(0x740, mod(calldataload(0x504), f_q))mstore(0x760, mod(calldataload(0x524), f_q))mstore(0x780, mod(calldataload(0x544), f_q))mstore(0x7a0, mod(calldataload(0x564), f_q))mstore(0x7c0, mod(calldataload(0x584), f_q))mstore(0x7e0, mod(calldataload(0x5a4), f_q))mstore(0x800, mod(calldataload(0x5c4), f_q))mstore(0x820, mod(calldataload(0x5e4), f_q))mstore(0x840, mod(calldataload(0x604), f_q))mstore(0x860, mod(calldataload(0x624), f_q))mstore(0x880, mod(calldataload(0x644), f_q))mstore(0x8a0, mod(calldataload(0x664), f_q))mstore(0x8c0, mod(calldataload(0x684), f_q))mstore(0x8e0, mod(calldataload(0x6a4), f_q))mstore(0x900, mod(calldataload(0x6c4), f_q))mstore(0x920, keccak256(0x6a0, 640)){ let hash := mload(0x920) mstore(0x940, mod(hash, f_q)) mstore(0x960, hash) }mstore8(0x980, 1)mstore(0x980, keccak256(0x960, 33)){ let hash := mload(0x980) mstore(0x9a0, mod(hash, f_q)) mstore(0x9c0, hash) } { let x := calldataload(0x6e4) mstore(0x9e0, x) let y := calldataload(0x704) mstore(0xa00, y) success := and(validate_ec_point(x, y), success) }mstore(0xa20, keccak256(0x9c0, 96)){ let hash := mload(0xa20) mstore(0xa40, mod(hash, f_q)) mstore(0xa60, hash) } { let x := calldataload(0x724) mstore(0xa80, x) let y := calldataload(0x744) mstore(0xaa0, y) success := and(validate_ec_point(x, y), success) }{ let x := mload(0xa0)x := add(x, shl(88, mload(0xc0)))x := add(x, shl(176, mload(0xe0)))mstore(0xac0, x)let y := mload(0x100)y := add(y, shl(88, mload(0x120)))y := add(y, shl(176, mload(0x140)))mstore(0xae0, y) success := and(validate_ec_point(x, y), success) }{ let x := mload(0x160)x := add(x, shl(88, mload(0x180)))x := add(x, shl(176, mload(0x1a0)))mstore(0xb00, x)let y := mload(0x1c0)y := add(y, shl(88, mload(0x1e0)))y := add(y, shl(176, mload(0x200)))mstore(0xb20, y) success := and(validate_ec_point(x, y), success) }mstore(0xb40, mulmod(mload(0x680), mload(0x680), f_q))mstore(0xb60, mulmod(mload(0xb40), mload(0xb40), f_q))mstore(0xb80, mulmod(mload(0xb60), mload(0xb60), f_q))mstore(0xba0, mulmod(mload(0xb80), mload(0xb80), f_q))mstore(0xbc0, mulmod(mload(0xba0), mload(0xba0), f_q))mstore(0xbe0, mulmod(mload(0xbc0), mload(0xbc0), f_q))mstore(0xc00, mulmod(mload(0xbe0), mload(0xbe0), f_q))mstore(0xc20, mulmod(mload(0xc00), mload(0xc00), f_q))mstore(0xc40, mulmod(mload(0xc20), mload(0xc20), f_q))mstore(0xc60, mulmod(mload(0xc40), mload(0xc40), f_q))mstore(0xc80, mulmod(mload(0xc60), mload(0xc60), f_q))mstore(0xca0, mulmod(mload(0xc80), mload(0xc80), f_q))mstore(0xcc0, mulmod(mload(0xca0), mload(0xca0), f_q))mstore(0xce0, mulmod(mload(0xcc0), mload(0xcc0), f_q))mstore(0xd00, mulmod(mload(0xce0), mload(0xce0), f_q))mstore(0xd20, mulmod(mload(0xd00), mload(0xd00), f_q))mstore(0xd40, mulmod(mload(0xd20), mload(0xd20), f_q))mstore(0xd60, mulmod(mload(0xd40), mload(0xd40), f_q))mstore(0xd80, mulmod(mload(0xd60), mload(0xd60), f_q))mstore(0xda0, mulmod(mload(0xd80), mload(0xd80), f_q))mstore(0xdc0, mulmod(mload(0xda0), mload(0xda0), f_q))mstore(0xde0, mulmod(mload(0xdc0), mload(0xdc0), f_q))mstore(0xe00, mulmod(mload(0xde0), mload(0xde0), f_q))mstore(0xe20, addmod(mload(0xe00), 21888242871839275222246405745257275088548364400416034343698204186575808495616, f_q))mstore(0xe40, mulmod(mload(0xe20), 21888240262557392955334514970720457388010314637169927192662615958087340972065, f_q))mstore(0xe60, mulmod(mload(0xe40), 4506835738822104338668100540817374747935106310012997856968187171738630203507, f_q))mstore(0xe80, addmod(mload(0x680), 17381407133017170883578305204439900340613258090403036486730017014837178292110, f_q))mstore(0xea0, mulmod(mload(0xe40), 21710372849001950800533397158415938114909991150039389063546734567764856596059, f_q))mstore(0xec0, addmod(mload(0x680), 177870022837324421713008586841336973638373250376645280151469618810951899558, f_q))mstore(0xee0, mulmod(mload(0xe40), 1887003188133998471169152042388914354640772748308168868301418279904560637395, f_q))mstore(0xf00, addmod(mload(0x680), 20001239683705276751077253702868360733907591652107865475396785906671247858222, f_q))mstore(0xf20, mulmod(mload(0xe40), 2785514556381676080176937710880804108647911392478702105860685610379369825016, f_q))mstore(0xf40, addmod(mload(0x680), 19102728315457599142069468034376470979900453007937332237837518576196438670601, f_q))mstore(0xf60, mulmod(mload(0xe40), 14655294445420895451632927078981340937842238432098198055057679026789553137428, f_q))mstore(0xf80, addmod(mload(0x680), 7232948426418379770613478666275934150706125968317836288640525159786255358189, f_q))mstore(0xfa0, mulmod(mload(0xe40), 8734126352828345679573237859165904705806588461301144420590422589042130041188, f_q))mstore(0xfc0, addmod(mload(0x680), 13154116519010929542673167886091370382741775939114889923107781597533678454429, f_q))mstore(0xfe0, mulmod(mload(0xe40), 9741553891420464328295280489650144566903017206473301385034033384879943874347, f_q))mstore(0x1000, addmod(mload(0x680), 12146688980418810893951125255607130521645347193942732958664170801695864621270, f_q))mstore(0x1020, mulmod(mload(0xe40), 1, f_q))mstore(0x1040, addmod(mload(0x680), 21888242871839275222246405745257275088548364400416034343698204186575808495616, f_q))mstore(0x1060, mulmod(mload(0xe40), 8374374965308410102411073611984011876711565317741801500439755773472076597347, f_q))mstore(0x1080, addmod(mload(0x680), 13513867906530865119835332133273263211836799082674232843258448413103731898270, f_q))mstore(0x10a0, mulmod(mload(0xe40), 11211301017135681023579411905410872569206244553457844956874280139879520583390, f_q))mstore(0x10c0, addmod(mload(0x680), 10676941854703594198666993839846402519342119846958189386823924046696287912227, f_q))mstore(0x10e0, mulmod(mload(0xe40), 3615478808282855240548287271348143516886772452944084747768312988864436725401, f_q))mstore(0x1100, addmod(mload(0x680), 18272764063556419981698118473909131571661591947471949595929891197711371770216, f_q))mstore(0x1120, mulmod(mload(0xe40), 1426404432721484388505361748317961535523355871255605456897797744433766488507, f_q))mstore(0x1140, addmod(mload(0x680), 20461838439117790833741043996939313553025008529160428886800406442142042007110, f_q))mstore(0x1160, mulmod(mload(0xe40), 216092043779272773661818549620449970334216366264741118684015851799902419467, f_q))mstore(0x1180, addmod(mload(0x680), 21672150828060002448584587195636825118214148034151293225014188334775906076150, f_q))mstore(0x11a0, mulmod(mload(0xe40), 12619617507853212586156872920672483948819476989779550311307282715684870266992, f_q))mstore(0x11c0, addmod(mload(0x680), 9268625363986062636089532824584791139728887410636484032390921470890938228625, f_q))mstore(0x11e0, mulmod(mload(0xe40), 18610195890048912503953886742825279624920778288956610528523679659246523534888, f_q))mstore(0x1200, addmod(mload(0x680), 3278046981790362718292519002431995463627586111459423815174524527329284960729, f_q))mstore(0x1220, mulmod(mload(0xe40), 19032961837237948602743626455740240236231119053033140765040043513661803148152, f_q))mstore(0x1240, addmod(mload(0x680), 2855281034601326619502779289517034852317245347382893578658160672914005347465, f_q))mstore(0x1260, mulmod(mload(0xe40), 14875928112196239563830800280253496262679717528621719058794366823499719730250, f_q))mstore(0x1280, addmod(mload(0x680), 7012314759643035658415605465003778825868646871794315284903837363076088765367, f_q))mstore(0x12a0, mulmod(mload(0xe40), 915149353520972163646494413843788069594022902357002628455555785223409501882, f_q))mstore(0x12c0, addmod(mload(0x680), 20973093518318303058599911331413487018954341498059031715242648401352398993735, f_q))mstore(0x12e0, mulmod(mload(0xe40), 5522161504810533295870699551020523636289972223872138525048055197429246400245, f_q))mstore(0x1300, addmod(mload(0x680), 16366081367028741926375706194236751452258392176543895818650148989146562095372, f_q))mstore(0x1320, mulmod(mload(0xe40), 3766081621734395783232337525162072736827576297943013392955872170138036189193, f_q))mstore(0x1340, addmod(mload(0x680), 18122161250104879439014068220095202351720788102473020950742332016437772306424, f_q))mstore(0x1360, mulmod(mload(0xe40), 9100833993744738801214480881117348002768153232283708533639316963648253510584, f_q))mstore(0x1380, addmod(mload(0x680), 12787408878094536421031924864139927085780211168132325810058887222927554985033, f_q)){ let prod := mload(0xe80) prod := mulmod(mload(0xec0), prod, f_q) mstore(0x13a0, prod) prod := mulmod(mload(0xf00), prod, f_q) mstore(0x13c0, prod) prod := mulmod(mload(0xf40), prod, f_q) mstore(0x13e0, prod) prod := mulmod(mload(0xf80), prod, f_q) mstore(0x1400, prod) prod := mulmod(mload(0xfc0), prod, f_q) mstore(0x1420, prod) prod := mulmod(mload(0x1000), prod, f_q) mstore(0x1440, prod) prod := mulmod(mload(0x1040), prod, f_q) mstore(0x1460, prod) prod := mulmod(mload(0x1080), prod, f_q) mstore(0x1480, prod) prod := mulmod(mload(0x10c0), prod, f_q) mstore(0x14a0, prod) prod := mulmod(mload(0x1100), prod, f_q) mstore(0x14c0, prod) prod := mulmod(mload(0x1140), prod, f_q) mstore(0x14e0, prod) prod := mulmod(mload(0x1180), prod, f_q) mstore(0x1500, prod) prod := mulmod(mload(0x11c0), prod, f_q) mstore(0x1520, prod) prod := mulmod(mload(0x1200), prod, f_q) mstore(0x1540, prod) prod := mulmod(mload(0x1240), prod, f_q) mstore(0x1560, prod) prod := mulmod(mload(0x1280), prod, f_q) mstore(0x1580, prod) prod := mulmod(mload(0x12c0), prod, f_q) mstore(0x15a0, prod) prod := mulmod(mload(0x1300), prod, f_q) mstore(0x15c0, prod) prod := mulmod(mload(0x1340), prod, f_q) mstore(0x15e0, prod) prod := mulmod(mload(0x1380), prod, f_q) mstore(0x1600, prod) prod := mulmod(mload(0xe20), prod, f_q) mstore(0x1620, prod) }mstore(0x1660, 32)mstore(0x1680, 32)mstore(0x16a0, 32)mstore(0x16c0, mload(0x1620))mstore(0x16e0, 21888242871839275222246405745257275088548364400416034343698204186575808495615)mstore(0x1700, 21888242871839275222246405745257275088548364400416034343698204186575808495617)success := and(eq(staticcall(gas(), 0x5, 0x1660, 0xc0, 0x1640, 0x20), 1), success){ let inv := mload(0x1640) let v v := mload(0xe20) mstore(0xe20, mulmod(mload(0x1600), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1380) mstore(0x1380, mulmod(mload(0x15e0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1340) mstore(0x1340, mulmod(mload(0x15c0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1300) mstore(0x1300, mulmod(mload(0x15a0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x12c0) mstore(0x12c0, mulmod(mload(0x1580), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1280) mstore(0x1280, mulmod(mload(0x1560), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1240) mstore(0x1240, mulmod(mload(0x1540), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1200) mstore(0x1200, mulmod(mload(0x1520), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x11c0) mstore(0x11c0, mulmod(mload(0x1500), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1180) mstore(0x1180, mulmod(mload(0x14e0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1140) mstore(0x1140, mulmod(mload(0x14c0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1100) mstore(0x1100, mulmod(mload(0x14a0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x10c0) mstore(0x10c0, mulmod(mload(0x1480), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1080) mstore(0x1080, mulmod(mload(0x1460), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1040) mstore(0x1040, mulmod(mload(0x1440), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1000) mstore(0x1000, mulmod(mload(0x1420), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0xfc0) mstore(0xfc0, mulmod(mload(0x1400), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0xf80) mstore(0xf80, mulmod(mload(0x13e0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0xf40) mstore(0xf40, mulmod(mload(0x13c0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0xf00) mstore(0xf00, mulmod(mload(0x13a0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0xec0) mstore(0xec0, mulmod(mload(0xe80), inv, f_q)) inv := mulmod(v, inv, f_q) mstore(0xe80, inv) }mstore(0x1720, mulmod(mload(0xe60), mload(0xe80), f_q))mstore(0x1740, mulmod(mload(0xea0), mload(0xec0), f_q))mstore(0x1760, mulmod(mload(0xee0), mload(0xf00), f_q))mstore(0x1780, mulmod(mload(0xf20), mload(0xf40), f_q))mstore(0x17a0, mulmod(mload(0xf60), mload(0xf80), f_q))mstore(0x17c0, mulmod(mload(0xfa0), mload(0xfc0), f_q))mstore(0x17e0, mulmod(mload(0xfe0), mload(0x1000), f_q))mstore(0x1800, mulmod(mload(0x1020), mload(0x1040), f_q))mstore(0x1820, mulmod(mload(0x1060), mload(0x1080), f_q))mstore(0x1840, mulmod(mload(0x10a0), mload(0x10c0), f_q))mstore(0x1860, mulmod(mload(0x10e0), mload(0x1100), f_q))mstore(0x1880, mulmod(mload(0x1120), mload(0x1140), f_q))mstore(0x18a0, mulmod(mload(0x1160), mload(0x1180), f_q))mstore(0x18c0, mulmod(mload(0x11a0), mload(0x11c0), f_q))mstore(0x18e0, mulmod(mload(0x11e0), mload(0x1200), f_q))mstore(0x1900, mulmod(mload(0x1220), mload(0x1240), f_q))mstore(0x1920, mulmod(mload(0x1260), mload(0x1280), f_q))mstore(0x1940, mulmod(mload(0x12a0), mload(0x12c0), f_q))mstore(0x1960, mulmod(mload(0x12e0), mload(0x1300), f_q))mstore(0x1980, mulmod(mload(0x1320), mload(0x1340), f_q))mstore(0x19a0, mulmod(mload(0x1360), mload(0x1380), f_q)){ let result := mulmod(mload(0x1800), mload(0xa0), f_q)result := addmod(mulmod(mload(0x1820), mload(0xc0), f_q), result, f_q)result := addmod(mulmod(mload(0x1840), mload(0xe0), f_q), result, f_q)result := addmod(mulmod(mload(0x1860), mload(0x100), f_q), result, f_q)result := addmod(mulmod(mload(0x1880), mload(0x120), f_q), result, f_q)result := addmod(mulmod(mload(0x18a0), mload(0x140), f_q), result, f_q)result := addmod(mulmod(mload(0x18c0), mload(0x160), f_q), result, f_q)result := addmod(mulmod(mload(0x18e0), mload(0x180), f_q), result, f_q)result := addmod(mulmod(mload(0x1900), mload(0x1a0), f_q), result, f_q)result := addmod(mulmod(mload(0x1920), mload(0x1c0), f_q), result, f_q)result := addmod(mulmod(mload(0x1940), mload(0x1e0), f_q), result, f_q)result := addmod(mulmod(mload(0x1960), mload(0x200), f_q), result, f_q)result := addmod(mulmod(mload(0x1980), mload(0x220), f_q), result, f_q)result := addmod(mulmod(mload(0x19a0), mload(0x240), f_q), result, f_q)mstore(0x19c0, result) }mstore(0x19e0, mulmod(mload(0x700), mload(0x6e0), f_q))mstore(0x1a00, addmod(mload(0x6c0), mload(0x19e0), f_q))mstore(0x1a20, addmod(mload(0x1a00), sub(f_q, mload(0x720)), f_q))mstore(0x1a40, mulmod(mload(0x1a20), mload(0x7a0), f_q))mstore(0x1a60, mulmod(mload(0x520), mload(0x1a40), f_q))mstore(0x1a80, addmod(1, sub(f_q, mload(0x840)), f_q))mstore(0x1aa0, mulmod(mload(0x1a80), mload(0x1800), f_q))mstore(0x1ac0, addmod(mload(0x1a60), mload(0x1aa0), f_q))mstore(0x1ae0, mulmod(mload(0x520), mload(0x1ac0), f_q))mstore(0x1b00, mulmod(mload(0x840), mload(0x840), f_q))mstore(0x1b20, addmod(mload(0x1b00), sub(f_q, mload(0x840)), f_q))mstore(0x1b40, mulmod(mload(0x1b20), mload(0x1720), f_q))mstore(0x1b60, addmod(mload(0x1ae0), mload(0x1b40), f_q))mstore(0x1b80, mulmod(mload(0x520), mload(0x1b60), f_q))mstore(0x1ba0, addmod(1, sub(f_q, mload(0x1720)), f_q))mstore(0x1bc0, addmod(mload(0x1740), mload(0x1760), f_q))mstore(0x1be0, addmod(mload(0x1bc0), mload(0x1780), f_q))mstore(0x1c00, addmod(mload(0x1be0), mload(0x17a0), f_q))mstore(0x1c20, addmod(mload(0x1c00), mload(0x17c0), f_q))mstore(0x1c40, addmod(mload(0x1c20), mload(0x17e0), f_q))mstore(0x1c60, addmod(mload(0x1ba0), sub(f_q, mload(0x1c40)), f_q))mstore(0x1c80, mulmod(mload(0x7e0), mload(0x3a0), f_q))mstore(0x1ca0, addmod(mload(0x740), mload(0x1c80), f_q))mstore(0x1cc0, addmod(mload(0x1ca0), mload(0x400), f_q))mstore(0x1ce0, mulmod(mload(0x800), mload(0x3a0), f_q))mstore(0x1d00, addmod(mload(0x6c0), mload(0x1ce0), f_q))mstore(0x1d20, addmod(mload(0x1d00), mload(0x400), f_q))mstore(0x1d40, mulmod(mload(0x1d20), mload(0x1cc0), f_q))mstore(0x1d60, mulmod(mload(0x820), mload(0x3a0), f_q))mstore(0x1d80, addmod(mload(0x19c0), mload(0x1d60), f_q))mstore(0x1da0, addmod(mload(0x1d80), mload(0x400), f_q))mstore(0x1dc0, mulmod(mload(0x1da0), mload(0x1d40), f_q))mstore(0x1de0, mulmod(mload(0x1dc0), mload(0x860), f_q))mstore(0x1e00, mulmod(1, mload(0x3a0), f_q))mstore(0x1e20, mulmod(mload(0x680), mload(0x1e00), f_q))mstore(0x1e40, addmod(mload(0x740), mload(0x1e20), f_q))mstore(0x1e60, addmod(mload(0x1e40), mload(0x400), f_q))mstore(0x1e80, mulmod(4131629893567559867359510883348571134090853742863529169391034518566172092834, mload(0x3a0), f_q))mstore(0x1ea0, mulmod(mload(0x680), mload(0x1e80), f_q))mstore(0x1ec0, addmod(mload(0x6c0), mload(0x1ea0), f_q))mstore(0x1ee0, addmod(mload(0x1ec0), mload(0x400), f_q))mstore(0x1f00, mulmod(mload(0x1ee0), mload(0x1e60), f_q))mstore(0x1f20, mulmod(8910878055287538404433155982483128285667088683464058436815641868457422632747, mload(0x3a0), f_q))mstore(0x1f40, mulmod(mload(0x680), mload(0x1f20), f_q))mstore(0x1f60, addmod(mload(0x19c0), mload(0x1f40), f_q))mstore(0x1f80, addmod(mload(0x1f60), mload(0x400), f_q))mstore(0x1fa0, mulmod(mload(0x1f80), mload(0x1f00), f_q))mstore(0x1fc0, mulmod(mload(0x1fa0), mload(0x840), f_q))mstore(0x1fe0, addmod(mload(0x1de0), sub(f_q, mload(0x1fc0)), f_q))mstore(0x2000, mulmod(mload(0x1fe0), mload(0x1c60), f_q))mstore(0x2020, addmod(mload(0x1b80), mload(0x2000), f_q))mstore(0x2040, mulmod(mload(0x520), mload(0x2020), f_q))mstore(0x2060, addmod(1, sub(f_q, mload(0x880)), f_q))mstore(0x2080, mulmod(mload(0x2060), mload(0x1800), f_q))mstore(0x20a0, addmod(mload(0x2040), mload(0x2080), f_q))mstore(0x20c0, mulmod(mload(0x520), mload(0x20a0), f_q))mstore(0x20e0, mulmod(mload(0x880), mload(0x880), f_q))mstore(0x2100, addmod(mload(0x20e0), sub(f_q, mload(0x880)), f_q))mstore(0x2120, mulmod(mload(0x2100), mload(0x1720), f_q))mstore(0x2140, addmod(mload(0x20c0), mload(0x2120), f_q))mstore(0x2160, mulmod(mload(0x520), mload(0x2140), f_q))mstore(0x2180, addmod(mload(0x8c0), mload(0x3a0), f_q))mstore(0x21a0, mulmod(mload(0x2180), mload(0x8a0), f_q))mstore(0x21c0, addmod(mload(0x900), mload(0x400), f_q))mstore(0x21e0, mulmod(mload(0x21c0), mload(0x21a0), f_q))mstore(0x2200, mulmod(mload(0x6c0), mload(0x780), f_q))mstore(0x2220, addmod(mload(0x2200), mload(0x3a0), f_q))mstore(0x2240, mulmod(mload(0x2220), mload(0x880), f_q))mstore(0x2260, addmod(mload(0x760), mload(0x400), f_q))mstore(0x2280, mulmod(mload(0x2260), mload(0x2240), f_q))mstore(0x22a0, addmod(mload(0x21e0), sub(f_q, mload(0x2280)), f_q))mstore(0x22c0, mulmod(mload(0x22a0), mload(0x1c60), f_q))mstore(0x22e0, addmod(mload(0x2160), mload(0x22c0), f_q))mstore(0x2300, mulmod(mload(0x520), mload(0x22e0), f_q))mstore(0x2320, addmod(mload(0x8c0), sub(f_q, mload(0x900)), f_q))mstore(0x2340, mulmod(mload(0x2320), mload(0x1800), f_q))mstore(0x2360, addmod(mload(0x2300), mload(0x2340), f_q))mstore(0x2380, mulmod(mload(0x520), mload(0x2360), f_q))mstore(0x23a0, mulmod(mload(0x2320), mload(0x1c60), f_q))mstore(0x23c0, addmod(mload(0x8c0), sub(f_q, mload(0x8e0)), f_q))mstore(0x23e0, mulmod(mload(0x23c0), mload(0x23a0), f_q))mstore(0x2400, addmod(mload(0x2380), mload(0x23e0), f_q))mstore(0x2420, mulmod(mload(0xe00), mload(0xe00), f_q))mstore(0x2440, mulmod(mload(0x2420), mload(0xe00), f_q))mstore(0x2460, mulmod(mload(0x2440), mload(0xe00), f_q))mstore(0x2480, mulmod(1, mload(0xe00), f_q))mstore(0x24a0, mulmod(1, mload(0x2420), f_q))mstore(0x24c0, mulmod(1, mload(0x2440), f_q))mstore(0x24e0, mulmod(mload(0x2400), mload(0xe20), f_q))mstore(0x2500, mulmod(mload(0xb40), mload(0x680), f_q))mstore(0x2520, mulmod(mload(0x2500), mload(0x680), f_q))mstore(0x2540, mulmod(mload(0x680), 9741553891420464328295280489650144566903017206473301385034033384879943874347, f_q))mstore(0x2560, addmod(mload(0xa40), sub(f_q, mload(0x2540)), f_q))mstore(0x2580, mulmod(mload(0x680), 1, f_q))mstore(0x25a0, addmod(mload(0xa40), sub(f_q, mload(0x2580)), f_q))mstore(0x25c0, mulmod(mload(0x680), 8374374965308410102411073611984011876711565317741801500439755773472076597347, f_q))mstore(0x25e0, addmod(mload(0xa40), sub(f_q, mload(0x25c0)), f_q))mstore(0x2600, mulmod(mload(0x680), 11211301017135681023579411905410872569206244553457844956874280139879520583390, f_q))mstore(0x2620, addmod(mload(0xa40), sub(f_q, mload(0x2600)), f_q))mstore(0x2640, mulmod(mload(0x680), 3615478808282855240548287271348143516886772452944084747768312988864436725401, f_q))mstore(0x2660, addmod(mload(0xa40), sub(f_q, mload(0x2640)), f_q))mstore(0x2680, mulmod(13213688729882003894512633350385593288217014177373218494356903340348818451480, mload(0x2500), f_q))mstore(0x26a0, mulmod(mload(0x2680), 1, f_q)){ let result := mulmod(mload(0xa40), mload(0x2680), f_q)result := addmod(mulmod(mload(0x680), sub(f_q, mload(0x26a0)), f_q), result, f_q)mstore(0x26c0, result) }mstore(0x26e0, mulmod(8207090019724696496350398458716998472718344609680392612601596849934418295470, mload(0x2500), f_q))mstore(0x2700, mulmod(mload(0x26e0), 8374374965308410102411073611984011876711565317741801500439755773472076597347, f_q)){ let result := mulmod(mload(0xa40), mload(0x26e0), f_q)result := addmod(mulmod(mload(0x680), sub(f_q, mload(0x2700)), f_q), result, f_q)mstore(0x2720, result) }mstore(0x2740, mulmod(7391709068497399131897422873231908718558236401035363928063603272120120747483, mload(0x2500), f_q))mstore(0x2760, mulmod(mload(0x2740), 11211301017135681023579411905410872569206244553457844956874280139879520583390, f_q)){ let result := mulmod(mload(0xa40), mload(0x2740), f_q)result := addmod(mulmod(mload(0x680), sub(f_q, mload(0x2760)), f_q), result, f_q)mstore(0x2780, result) }mstore(0x27a0, mulmod(19036273796805830823244991598792794567595348772040298280440552631112242221017, mload(0x2500), f_q))mstore(0x27c0, mulmod(mload(0x27a0), 3615478808282855240548287271348143516886772452944084747768312988864436725401, f_q)){ let result := mulmod(mload(0xa40), mload(0x27a0), f_q)result := addmod(mulmod(mload(0x680), sub(f_q, mload(0x27c0)), f_q), result, f_q)mstore(0x27e0, result) }mstore(0x2800, mulmod(1, mload(0x25a0), f_q))mstore(0x2820, mulmod(mload(0x2800), mload(0x25e0), f_q))mstore(0x2840, mulmod(mload(0x2820), mload(0x2620), f_q))mstore(0x2860, mulmod(mload(0x2840), mload(0x2660), f_q))mstore(0x2880, mulmod(13513867906530865119835332133273263211836799082674232843258448413103731898271, mload(0x680), f_q))mstore(0x28a0, mulmod(mload(0x2880), 1, f_q)){ let result := mulmod(mload(0xa40), mload(0x2880), f_q)result := addmod(mulmod(mload(0x680), sub(f_q, mload(0x28a0)), f_q), result, f_q)mstore(0x28c0, result) }mstore(0x28e0, mulmod(8374374965308410102411073611984011876711565317741801500439755773472076597346, mload(0x680), f_q))mstore(0x2900, mulmod(mload(0x28e0), 8374374965308410102411073611984011876711565317741801500439755773472076597347, f_q)){ let result := mulmod(mload(0xa40), mload(0x28e0), f_q)result := addmod(mulmod(mload(0x680), sub(f_q, mload(0x2900)), f_q), result, f_q)mstore(0x2920, result) }mstore(0x2940, mulmod(12146688980418810893951125255607130521645347193942732958664170801695864621271, mload(0x680), f_q))mstore(0x2960, mulmod(mload(0x2940), 1, f_q)){ let result := mulmod(mload(0xa40), mload(0x2940), f_q)result := addmod(mulmod(mload(0x680), sub(f_q, mload(0x2960)), f_q), result, f_q)mstore(0x2980, result) }mstore(0x29a0, mulmod(9741553891420464328295280489650144566903017206473301385034033384879943874346, mload(0x680), f_q))mstore(0x29c0, mulmod(mload(0x29a0), 9741553891420464328295280489650144566903017206473301385034033384879943874347, f_q)){ let result := mulmod(mload(0xa40), mload(0x29a0), f_q)result := addmod(mulmod(mload(0x680), sub(f_q, mload(0x29c0)), f_q), result, f_q)mstore(0x29e0, result) }mstore(0x2a00, mulmod(mload(0x2800), mload(0x2560), f_q)){ let result := mulmod(mload(0xa40), 1, f_q)result := addmod(mulmod(mload(0x680), 21888242871839275222246405745257275088548364400416034343698204186575808495616, f_q), result, f_q)mstore(0x2a20, result) }{ let prod := mload(0x26c0) prod := mulmod(mload(0x2720), prod, f_q) mstore(0x2a40, prod) prod := mulmod(mload(0x2780), prod, f_q) mstore(0x2a60, prod) prod := mulmod(mload(0x27e0), prod, f_q) mstore(0x2a80, prod) prod := mulmod(mload(0x28c0), prod, f_q) mstore(0x2aa0, prod) prod := mulmod(mload(0x2920), prod, f_q) mstore(0x2ac0, prod) prod := mulmod(mload(0x2820), prod, f_q) mstore(0x2ae0, prod) prod := mulmod(mload(0x2980), prod, f_q) mstore(0x2b00, prod) prod := mulmod(mload(0x29e0), prod, f_q) mstore(0x2b20, prod) prod := mulmod(mload(0x2a00), prod, f_q) mstore(0x2b40, prod) prod := mulmod(mload(0x2a20), prod, f_q) mstore(0x2b60, prod) prod := mulmod(mload(0x2800), prod, f_q) mstore(0x2b80, prod) }mstore(0x2bc0, 32)mstore(0x2be0, 32)mstore(0x2c00, 32)mstore(0x2c20, mload(0x2b80))mstore(0x2c40, 21888242871839275222246405745257275088548364400416034343698204186575808495615)mstore(0x2c60, 21888242871839275222246405745257275088548364400416034343698204186575808495617)success := and(eq(staticcall(gas(), 0x5, 0x2bc0, 0xc0, 0x2ba0, 0x20), 1), success){ let inv := mload(0x2ba0) let v v := mload(0x2800) mstore(0x2800, mulmod(mload(0x2b60), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2a20) mstore(0x2a20, mulmod(mload(0x2b40), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2a00) mstore(0x2a00, mulmod(mload(0x2b20), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x29e0) mstore(0x29e0, mulmod(mload(0x2b00), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2980) mstore(0x2980, mulmod(mload(0x2ae0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2820) mstore(0x2820, mulmod(mload(0x2ac0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2920) mstore(0x2920, mulmod(mload(0x2aa0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x28c0) mstore(0x28c0, mulmod(mload(0x2a80), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x27e0) mstore(0x27e0, mulmod(mload(0x2a60), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2780) mstore(0x2780, mulmod(mload(0x2a40), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2720) mstore(0x2720, mulmod(mload(0x26c0), inv, f_q)) inv := mulmod(v, inv, f_q) mstore(0x26c0, inv) }{ let result := mload(0x26c0)result := addmod(mload(0x2720), result, f_q)result := addmod(mload(0x2780), result, f_q)result := addmod(mload(0x27e0), result, f_q)mstore(0x2c80, result) }mstore(0x2ca0, mulmod(mload(0x2860), mload(0x2820), f_q)){ let result := mload(0x28c0)result := addmod(mload(0x2920), result, f_q)mstore(0x2cc0, result) }mstore(0x2ce0, mulmod(mload(0x2860), mload(0x2a00), f_q)){ let result := mload(0x2980)result := addmod(mload(0x29e0), result, f_q)mstore(0x2d00, result) }mstore(0x2d20, mulmod(mload(0x2860), mload(0x2800), f_q)){ let result := mload(0x2a20)mstore(0x2d40, result) }{ let prod := mload(0x2c80) prod := mulmod(mload(0x2cc0), prod, f_q) mstore(0x2d60, prod) prod := mulmod(mload(0x2d00), prod, f_q) mstore(0x2d80, prod) prod := mulmod(mload(0x2d40), prod, f_q) mstore(0x2da0, prod) }mstore(0x2de0, 32)mstore(0x2e00, 32)mstore(0x2e20, 32)mstore(0x2e40, mload(0x2da0))mstore(0x2e60, 21888242871839275222246405745257275088548364400416034343698204186575808495615)mstore(0x2e80, 21888242871839275222246405745257275088548364400416034343698204186575808495617)success := and(eq(staticcall(gas(), 0x5, 0x2de0, 0xc0, 0x2dc0, 0x20), 1), success){ let inv := mload(0x2dc0) let v v := mload(0x2d40) mstore(0x2d40, mulmod(mload(0x2d80), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2d00) mstore(0x2d00, mulmod(mload(0x2d60), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2cc0) mstore(0x2cc0, mulmod(mload(0x2c80), inv, f_q)) inv := mulmod(v, inv, f_q) mstore(0x2c80, inv) }mstore(0x2ea0, mulmod(mload(0x2ca0), mload(0x2cc0), f_q))mstore(0x2ec0, mulmod(mload(0x2ce0), mload(0x2d00), f_q))mstore(0x2ee0, mulmod(mload(0x2d20), mload(0x2d40), f_q))mstore(0x2f00, mulmod(mload(0x940), mload(0x940), f_q))mstore(0x2f20, mulmod(mload(0x2f00), mload(0x940), f_q))mstore(0x2f40, mulmod(mload(0x2f20), mload(0x940), f_q))mstore(0x2f60, mulmod(mload(0x2f40), mload(0x940), f_q))mstore(0x2f80, mulmod(mload(0x2f60), mload(0x940), f_q))mstore(0x2fa0, mulmod(mload(0x2f80), mload(0x940), f_q))mstore(0x2fc0, mulmod(mload(0x2fa0), mload(0x940), f_q))mstore(0x2fe0, mulmod(mload(0x2fc0), mload(0x940), f_q))mstore(0x3000, mulmod(mload(0x2fe0), mload(0x940), f_q))mstore(0x3020, mulmod(mload(0x9a0), mload(0x9a0), f_q))mstore(0x3040, mulmod(mload(0x3020), mload(0x9a0), f_q))mstore(0x3060, mulmod(mload(0x3040), mload(0x9a0), f_q)){ let result := mulmod(mload(0x6c0), mload(0x26c0), f_q)result := addmod(mulmod(mload(0x6e0), mload(0x2720), f_q), result, f_q)result := addmod(mulmod(mload(0x700), mload(0x2780), f_q), result, f_q)result := addmod(mulmod(mload(0x720), mload(0x27e0), f_q), result, f_q)mstore(0x3080, result) }mstore(0x30a0, mulmod(mload(0x3080), mload(0x2c80), f_q))mstore(0x30c0, mulmod(sub(f_q, mload(0x30a0)), 1, f_q))mstore(0x30e0, mulmod(mload(0x30c0), 1, f_q))mstore(0x3100, mulmod(1, mload(0x2ca0), f_q)){ let result := mulmod(mload(0x840), mload(0x28c0), f_q)result := addmod(mulmod(mload(0x860), mload(0x2920), f_q), result, f_q)mstore(0x3120, result) }mstore(0x3140, mulmod(mload(0x3120), mload(0x2ea0), f_q))mstore(0x3160, mulmod(sub(f_q, mload(0x3140)), 1, f_q))mstore(0x3180, mulmod(mload(0x3100), 1, f_q)){ let result := mulmod(mload(0x880), mload(0x28c0), f_q)result := addmod(mulmod(mload(0x8a0), mload(0x2920), f_q), result, f_q)mstore(0x31a0, result) }mstore(0x31c0, mulmod(mload(0x31a0), mload(0x2ea0), f_q))mstore(0x31e0, mulmod(sub(f_q, mload(0x31c0)), mload(0x940), f_q))mstore(0x3200, mulmod(mload(0x3100), mload(0x940), f_q))mstore(0x3220, addmod(mload(0x3160), mload(0x31e0), f_q))mstore(0x3240, mulmod(mload(0x3220), mload(0x9a0), f_q))mstore(0x3260, mulmod(mload(0x3180), mload(0x9a0), f_q))mstore(0x3280, mulmod(mload(0x3200), mload(0x9a0), f_q))mstore(0x32a0, addmod(mload(0x30e0), mload(0x3240), f_q))mstore(0x32c0, mulmod(1, mload(0x2ce0), f_q)){ let result := mulmod(mload(0x8c0), mload(0x2980), f_q)result := addmod(mulmod(mload(0x8e0), mload(0x29e0), f_q), result, f_q)mstore(0x32e0, result) }mstore(0x3300, mulmod(mload(0x32e0), mload(0x2ec0), f_q))mstore(0x3320, mulmod(sub(f_q, mload(0x3300)), 1, f_q))mstore(0x3340, mulmod(mload(0x32c0), 1, f_q))mstore(0x3360, mulmod(mload(0x3320), mload(0x3020), f_q))mstore(0x3380, mulmod(mload(0x3340), mload(0x3020), f_q))mstore(0x33a0, addmod(mload(0x32a0), mload(0x3360), f_q))mstore(0x33c0, mulmod(1, mload(0x2d20), f_q)){ let result := mulmod(mload(0x900), mload(0x2a20), f_q)mstore(0x33e0, result) }mstore(0x3400, mulmod(mload(0x33e0), mload(0x2ee0), f_q))mstore(0x3420, mulmod(sub(f_q, mload(0x3400)), 1, f_q))mstore(0x3440, mulmod(mload(0x33c0), 1, f_q)){ let result := mulmod(mload(0x740), mload(0x2a20), f_q)mstore(0x3460, result) }mstore(0x3480, mulmod(mload(0x3460), mload(0x2ee0), f_q))mstore(0x34a0, mulmod(sub(f_q, mload(0x3480)), mload(0x940), f_q))mstore(0x34c0, mulmod(mload(0x33c0), mload(0x940), f_q))mstore(0x34e0, addmod(mload(0x3420), mload(0x34a0), f_q)){ let result := mulmod(mload(0x760), mload(0x2a20), f_q)mstore(0x3500, result) }mstore(0x3520, mulmod(mload(0x3500), mload(0x2ee0), f_q))mstore(0x3540, mulmod(sub(f_q, mload(0x3520)), mload(0x2f00), f_q))mstore(0x3560, mulmod(mload(0x33c0), mload(0x2f00), f_q))mstore(0x3580, addmod(mload(0x34e0), mload(0x3540), f_q)){ let result := mulmod(mload(0x780), mload(0x2a20), f_q)mstore(0x35a0, result) }mstore(0x35c0, mulmod(mload(0x35a0), mload(0x2ee0), f_q))mstore(0x35e0, mulmod(sub(f_q, mload(0x35c0)), mload(0x2f20), f_q))mstore(0x3600, mulmod(mload(0x33c0), mload(0x2f20), f_q))mstore(0x3620, addmod(mload(0x3580), mload(0x35e0), f_q)){ let result := mulmod(mload(0x7a0), mload(0x2a20), f_q)mstore(0x3640, result) }mstore(0x3660, mulmod(mload(0x3640), mload(0x2ee0), f_q))mstore(0x3680, mulmod(sub(f_q, mload(0x3660)), mload(0x2f40), f_q))mstore(0x36a0, mulmod(mload(0x33c0), mload(0x2f40), f_q))mstore(0x36c0, addmod(mload(0x3620), mload(0x3680), f_q)){ let result := mulmod(mload(0x7e0), mload(0x2a20), f_q)mstore(0x36e0, result) }mstore(0x3700, mulmod(mload(0x36e0), mload(0x2ee0), f_q))mstore(0x3720, mulmod(sub(f_q, mload(0x3700)), mload(0x2f60), f_q))mstore(0x3740, mulmod(mload(0x33c0), mload(0x2f60), f_q))mstore(0x3760, addmod(mload(0x36c0), mload(0x3720), f_q)){ let result := mulmod(mload(0x800), mload(0x2a20), f_q)mstore(0x3780, result) }mstore(0x37a0, mulmod(mload(0x3780), mload(0x2ee0), f_q))mstore(0x37c0, mulmod(sub(f_q, mload(0x37a0)), mload(0x2f80), f_q))mstore(0x37e0, mulmod(mload(0x33c0), mload(0x2f80), f_q))mstore(0x3800, addmod(mload(0x3760), mload(0x37c0), f_q)){ let result := mulmod(mload(0x820), mload(0x2a20), f_q)mstore(0x3820, result) }mstore(0x3840, mulmod(mload(0x3820), mload(0x2ee0), f_q))mstore(0x3860, mulmod(sub(f_q, mload(0x3840)), mload(0x2fa0), f_q))mstore(0x3880, mulmod(mload(0x33c0), mload(0x2fa0), f_q))mstore(0x38a0, addmod(mload(0x3800), mload(0x3860), f_q))mstore(0x38c0, mulmod(mload(0x2480), mload(0x2d20), f_q))mstore(0x38e0, mulmod(mload(0x24a0), mload(0x2d20), f_q))mstore(0x3900, mulmod(mload(0x24c0), mload(0x2d20), f_q)){ let result := mulmod(mload(0x24e0), mload(0x2a20), f_q)mstore(0x3920, result) }mstore(0x3940, mulmod(mload(0x3920), mload(0x2ee0), f_q))mstore(0x3960, mulmod(sub(f_q, mload(0x3940)), mload(0x2fc0), f_q))mstore(0x3980, mulmod(mload(0x33c0), mload(0x2fc0), f_q))mstore(0x39a0, mulmod(mload(0x38c0), mload(0x2fc0), f_q))mstore(0x39c0, mulmod(mload(0x38e0), mload(0x2fc0), f_q))mstore(0x39e0, mulmod(mload(0x3900), mload(0x2fc0), f_q))mstore(0x3a00, addmod(mload(0x38a0), mload(0x3960), f_q)){ let result := mulmod(mload(0x7c0), mload(0x2a20), f_q)mstore(0x3a20, result) }mstore(0x3a40, mulmod(mload(0x3a20), mload(0x2ee0), f_q))mstore(0x3a60, mulmod(sub(f_q, mload(0x3a40)), mload(0x2fe0), f_q))mstore(0x3a80, mulmod(mload(0x33c0), mload(0x2fe0), f_q))mstore(0x3aa0, addmod(mload(0x3a00), mload(0x3a60), f_q))mstore(0x3ac0, mulmod(mload(0x3aa0), mload(0x3040), f_q))mstore(0x3ae0, mulmod(mload(0x3440), mload(0x3040), f_q))mstore(0x3b00, mulmod(mload(0x34c0), mload(0x3040), f_q))mstore(0x3b20, mulmod(mload(0x3560), mload(0x3040), f_q))mstore(0x3b40, mulmod(mload(0x3600), mload(0x3040), f_q))mstore(0x3b60, mulmod(mload(0x36a0), mload(0x3040), f_q))mstore(0x3b80, mulmod(mload(0x3740), mload(0x3040), f_q))mstore(0x3ba0, mulmod(mload(0x37e0), mload(0x3040), f_q))mstore(0x3bc0, mulmod(mload(0x3880), mload(0x3040), f_q))mstore(0x3be0, mulmod(mload(0x3980), mload(0x3040), f_q))mstore(0x3c00, mulmod(mload(0x39a0), mload(0x3040), f_q))mstore(0x3c20, mulmod(mload(0x39c0), mload(0x3040), f_q))mstore(0x3c40, mulmod(mload(0x39e0), mload(0x3040), f_q))mstore(0x3c60, mulmod(mload(0x3a80), mload(0x3040), f_q))mstore(0x3c80, addmod(mload(0x33a0), mload(0x3ac0), f_q))mstore(0x3ca0, mulmod(1, mload(0x2860), f_q))mstore(0x3cc0, mulmod(1, mload(0xa40), f_q))mstore(0x3ce0, 0x0000000000000000000000000000000000000000000000000000000000000001) mstore(0x3d00, 0x0000000000000000000000000000000000000000000000000000000000000002)mstore(0x3d20, mload(0x3c80))success := and(eq(staticcall(gas(), 0x7, 0x3ce0, 0x60, 0x3ce0, 0x40), 1), success)mstore(0x3d40, mload(0x3ce0)) mstore(0x3d60, mload(0x3d00))mstore(0x3d80, mload(0x260)) mstore(0x3da0, mload(0x280))success := and(eq(staticcall(gas(), 0x6, 0x3d40, 0x80, 0x3d40, 0x40), 1), success)mstore(0x3dc0, mload(0x440)) mstore(0x3de0, mload(0x460))mstore(0x3e00, mload(0x3260))success := and(eq(staticcall(gas(), 0x7, 0x3dc0, 0x60, 0x3dc0, 0x40), 1), success)mstore(0x3e20, mload(0x3d40)) mstore(0x3e40, mload(0x3d60))mstore(0x3e60, mload(0x3dc0)) mstore(0x3e80, mload(0x3de0))success := and(eq(staticcall(gas(), 0x6, 0x3e20, 0x80, 0x3e20, 0x40), 1), success)mstore(0x3ea0, mload(0x480)) mstore(0x3ec0, mload(0x4a0))mstore(0x3ee0, mload(0x3280))success := and(eq(staticcall(gas(), 0x7, 0x3ea0, 0x60, 0x3ea0, 0x40), 1), success)mstore(0x3f00, mload(0x3e20)) mstore(0x3f20, mload(0x3e40))mstore(0x3f40, mload(0x3ea0)) mstore(0x3f60, mload(0x3ec0))success := and(eq(staticcall(gas(), 0x6, 0x3f00, 0x80, 0x3f00, 0x40), 1), success)mstore(0x3f80, mload(0x300)) mstore(0x3fa0, mload(0x320))mstore(0x3fc0, mload(0x3380))success := and(eq(staticcall(gas(), 0x7, 0x3f80, 0x60, 0x3f80, 0x40), 1), success)mstore(0x3fe0, mload(0x3f00)) mstore(0x4000, mload(0x3f20))mstore(0x4020, mload(0x3f80)) mstore(0x4040, mload(0x3fa0))success := and(eq(staticcall(gas(), 0x6, 0x3fe0, 0x80, 0x3fe0, 0x40), 1), success)mstore(0x4060, mload(0x340)) mstore(0x4080, mload(0x360))mstore(0x40a0, mload(0x3ae0))success := and(eq(staticcall(gas(), 0x7, 0x4060, 0x60, 0x4060, 0x40), 1), success)mstore(0x40c0, mload(0x3fe0)) mstore(0x40e0, mload(0x4000))mstore(0x4100, mload(0x4060)) mstore(0x4120, mload(0x4080))success := and(eq(staticcall(gas(), 0x6, 0x40c0, 0x80, 0x40c0, 0x40), 1), success)mstore(0x4140, 0x19ab69a3de3e6f8dcfbec2d6430860a406ef922fda090239a586a1d084c7ccc8) mstore(0x4160, 0x11abadf5e003c744053be4920238f12d02956f2e6c3f3c88594a3c6302861030)mstore(0x4180, mload(0x3b00))success := and(eq(staticcall(gas(), 0x7, 0x4140, 0x60, 0x4140, 0x40), 1), success)mstore(0x41a0, mload(0x40c0)) mstore(0x41c0, mload(0x40e0))mstore(0x41e0, mload(0x4140)) mstore(0x4200, mload(0x4160))success := and(eq(staticcall(gas(), 0x6, 0x41a0, 0x80, 0x41a0, 0x40), 1), success)mstore(0x4220, 0x03fab5527cc07125117069ef9aaa8d159cbacf20f5a795fb9e9279d3a330df37) mstore(0x4240, 0x0c79716bdab8b8e9064cf0e18fa6ea148b3c2c347d8af670deaab48124f25c19)mstore(0x4260, mload(0x3b20))success := and(eq(staticcall(gas(), 0x7, 0x4220, 0x60, 0x4220, 0x40), 1), success)mstore(0x4280, mload(0x41a0)) mstore(0x42a0, mload(0x41c0))mstore(0x42c0, mload(0x4220)) mstore(0x42e0, mload(0x4240))success := and(eq(staticcall(gas(), 0x6, 0x4280, 0x80, 0x4280, 0x40), 1), success)mstore(0x4300, 0x2438d66d0f87f7ef98d19ef70cf1a5d9350e9645d86f95cd2abf54603fe4ae3e) mstore(0x4320, 0x2ead746200c5cbcdc03f91dbdb5d9d50be56296e34786ae7a128428bf77e6081)mstore(0x4340, mload(0x3b40))success := and(eq(staticcall(gas(), 0x7, 0x4300, 0x60, 0x4300, 0x40), 1), success)mstore(0x4360, mload(0x4280)) mstore(0x4380, mload(0x42a0))mstore(0x43a0, mload(0x4300)) mstore(0x43c0, mload(0x4320))success := and(eq(staticcall(gas(), 0x6, 0x4360, 0x80, 0x4360, 0x40), 1), success)mstore(0x43e0, 0x1e959c11eea5bd89c84896b080203b24d4872c925cc37c54e2f61d3fd4eacccc) mstore(0x4400, 0x23cd4188a7e7d6c05ee4acbc9c1b69a5c7de38bf0dfb7d7ec811fec55daeda61)mstore(0x4420, mload(0x3b60))success := and(eq(staticcall(gas(), 0x7, 0x43e0, 0x60, 0x43e0, 0x40), 1), success)mstore(0x4440, mload(0x4360)) mstore(0x4460, mload(0x4380))mstore(0x4480, mload(0x43e0)) mstore(0x44a0, mload(0x4400))success := and(eq(staticcall(gas(), 0x6, 0x4440, 0x80, 0x4440, 0x40), 1), success)mstore(0x44c0, 0x2e0c23db179ba344eb4bb6e51f18f3388a9a72b4eff4e940bceda4799462c3f8) mstore(0x44e0, 0x26e6392eb217b1eab39df3c7c76b90adaa613e2865f0f72a756321877e568cc8)mstore(0x4500, mload(0x3b80))success := and(eq(staticcall(gas(), 0x7, 0x44c0, 0x60, 0x44c0, 0x40), 1), success)mstore(0x4520, mload(0x4440)) mstore(0x4540, mload(0x4460))mstore(0x4560, mload(0x44c0)) mstore(0x4580, mload(0x44e0))success := and(eq(staticcall(gas(), 0x6, 0x4520, 0x80, 0x4520, 0x40), 1), success)mstore(0x45a0, 0x22cc35b56115b8773c80beac4d8a2a684bb5f7e20a4824cb1dbd58f864d1edf2) mstore(0x45c0, 0x1fcf26896f8067ec8f8c8eb026b1a786c8a780d07e7fa9aeb046b0f3b200a841)mstore(0x45e0, mload(0x3ba0))success := and(eq(staticcall(gas(), 0x7, 0x45a0, 0x60, 0x45a0, 0x40), 1), success)mstore(0x4600, mload(0x4520)) mstore(0x4620, mload(0x4540))mstore(0x4640, mload(0x45a0)) mstore(0x4660, mload(0x45c0))success := and(eq(staticcall(gas(), 0x6, 0x4600, 0x80, 0x4600, 0x40), 1), success)mstore(0x4680, 0x12401ac3e261bee72a84d6aa5fed801e6221d40b61f161e05e30a86d2ee90f86) mstore(0x46a0, 0x108f0dc12053e073091046b238d41cb90c23d55122591554e5848f1412865f25)mstore(0x46c0, mload(0x3bc0))success := and(eq(staticcall(gas(), 0x7, 0x4680, 0x60, 0x4680, 0x40), 1), success)mstore(0x46e0, mload(0x4600)) mstore(0x4700, mload(0x4620))mstore(0x4720, mload(0x4680)) mstore(0x4740, mload(0x46a0))success := and(eq(staticcall(gas(), 0x6, 0x46e0, 0x80, 0x46e0, 0x40), 1), success)mstore(0x4760, mload(0x560)) mstore(0x4780, mload(0x580))mstore(0x47a0, mload(0x3be0))success := and(eq(staticcall(gas(), 0x7, 0x4760, 0x60, 0x4760, 0x40), 1), success)mstore(0x47c0, mload(0x46e0)) mstore(0x47e0, mload(0x4700))mstore(0x4800, mload(0x4760)) mstore(0x4820, mload(0x4780))success := and(eq(staticcall(gas(), 0x6, 0x47c0, 0x80, 0x47c0, 0x40), 1), success)mstore(0x4840, mload(0x5a0)) mstore(0x4860, mload(0x5c0))mstore(0x4880, mload(0x3c00))success := and(eq(staticcall(gas(), 0x7, 0x4840, 0x60, 0x4840, 0x40), 1), success)mstore(0x48a0, mload(0x47c0)) mstore(0x48c0, mload(0x47e0))mstore(0x48e0, mload(0x4840)) mstore(0x4900, mload(0x4860))success := and(eq(staticcall(gas(), 0x6, 0x48a0, 0x80, 0x48a0, 0x40), 1), success)mstore(0x4920, mload(0x5e0)) mstore(0x4940, mload(0x600))mstore(0x4960, mload(0x3c20))success := and(eq(staticcall(gas(), 0x7, 0x4920, 0x60, 0x4920, 0x40), 1), success)mstore(0x4980, mload(0x48a0)) mstore(0x49a0, mload(0x48c0))mstore(0x49c0, mload(0x4920)) mstore(0x49e0, mload(0x4940))success := and(eq(staticcall(gas(), 0x6, 0x4980, 0x80, 0x4980, 0x40), 1), success)mstore(0x4a00, mload(0x620)) mstore(0x4a20, mload(0x640))mstore(0x4a40, mload(0x3c40))success := and(eq(staticcall(gas(), 0x7, 0x4a00, 0x60, 0x4a00, 0x40), 1), success)mstore(0x4a60, mload(0x4980)) mstore(0x4a80, mload(0x49a0))mstore(0x4aa0, mload(0x4a00)) mstore(0x4ac0, mload(0x4a20))success := and(eq(staticcall(gas(), 0x6, 0x4a60, 0x80, 0x4a60, 0x40), 1), success)mstore(0x4ae0, mload(0x4c0)) mstore(0x4b00, mload(0x4e0))mstore(0x4b20, mload(0x3c60))success := and(eq(staticcall(gas(), 0x7, 0x4ae0, 0x60, 0x4ae0, 0x40), 1), success)mstore(0x4b40, mload(0x4a60)) mstore(0x4b60, mload(0x4a80))mstore(0x4b80, mload(0x4ae0)) mstore(0x4ba0, mload(0x4b00))success := and(eq(staticcall(gas(), 0x6, 0x4b40, 0x80, 0x4b40, 0x40), 1), success)mstore(0x4bc0, mload(0x9e0)) mstore(0x4be0, mload(0xa00))mstore(0x4c00, sub(f_q, mload(0x3ca0)))success := and(eq(staticcall(gas(), 0x7, 0x4bc0, 0x60, 0x4bc0, 0x40), 1), success)mstore(0x4c20, mload(0x4b40)) mstore(0x4c40, mload(0x4b60))mstore(0x4c60, mload(0x4bc0)) mstore(0x4c80, mload(0x4be0))success := and(eq(staticcall(gas(), 0x6, 0x4c20, 0x80, 0x4c20, 0x40), 1), success)mstore(0x4ca0, mload(0xa80)) mstore(0x4cc0, mload(0xaa0))mstore(0x4ce0, mload(0x3cc0))success := and(eq(staticcall(gas(), 0x7, 0x4ca0, 0x60, 0x4ca0, 0x40), 1), success)mstore(0x4d00, mload(0x4c20)) mstore(0x4d20, mload(0x4c40))mstore(0x4d40, mload(0x4ca0)) mstore(0x4d60, mload(0x4cc0))success := and(eq(staticcall(gas(), 0x6, 0x4d00, 0x80, 0x4d00, 0x40), 1), success)mstore(0x4d80, mload(0x4d00)) mstore(0x4da0, mload(0x4d20))mstore(0x4dc0, mload(0xa80)) mstore(0x4de0, mload(0xaa0))mstore(0x4e00, mload(0xac0)) mstore(0x4e20, mload(0xae0))mstore(0x4e40, mload(0xb00)) mstore(0x4e60, mload(0xb20))mstore(0x4e80, keccak256(0x4d80, 256))mstore(0x4ea0, mod(mload(19968), f_q))mstore(0x4ec0, mulmod(mload(0x4ea0), mload(0x4ea0), f_q))mstore(0x4ee0, mulmod(1, mload(0x4ea0), f_q))mstore(0x4f00, mload(0x4e00)) mstore(0x4f20, mload(0x4e20))mstore(0x4f40, mload(0x4ee0))success := and(eq(staticcall(gas(), 0x7, 0x4f00, 0x60, 0x4f00, 0x40), 1), success)mstore(0x4f60, mload(0x4d80)) mstore(0x4f80, mload(0x4da0))mstore(0x4fa0, mload(0x4f00)) mstore(0x4fc0, mload(0x4f20))success := and(eq(staticcall(gas(), 0x6, 0x4f60, 0x80, 0x4f60, 0x40), 1), success)mstore(0x4fe0, mload(0x4e40)) mstore(0x5000, mload(0x4e60))mstore(0x5020, mload(0x4ee0))success := and(eq(staticcall(gas(), 0x7, 0x4fe0, 0x60, 0x4fe0, 0x40), 1), success)mstore(0x5040, mload(0x4dc0)) mstore(0x5060, mload(0x4de0))mstore(0x5080, mload(0x4fe0)) mstore(0x50a0, mload(0x5000))success := and(eq(staticcall(gas(), 0x6, 0x5040, 0x80, 0x5040, 0x40), 1), success)mstore(0x50c0, mload(0x4f60)) mstore(0x50e0, mload(0x4f80))mstore(0x5100, 0x198e9393920d483a7260bfb731fb5d25f1aa493335a9e71297e485b7aef312c2) mstore(0x5120, 0x1800deef121f1e76426a00665e5c4479674322d4f75edadd46debd5cd992f6ed) mstore(0x5140, 0x090689d0585ff075ec9e99ad690c3395bc4b313370b38ef355acdadcd122975b) mstore(0x5160, 0x12c85ea5db8c6deb4aab71808dcb408fe3d1e7690c43d37b4ce6cc0166fa7daa)mstore(0x5180, mload(0x5040)) mstore(0x51a0, mload(0x5060))mstore(0x51c0, 0x0181624e80f3d6ae28df7e01eaeab1c0e919877a3b8a6b7fbc69a6817d596ea2) mstore(0x51e0, 0x1783d30dcb12d259bb89098addf6280fa4b653be7a152542a28f7b926e27e648) mstore(0x5200, 0x00ae44489d41a0d179e2dfdc03bddd883b7109f8b6ae316a59e815c1a6b35304) mstore(0x5220, 0x0b2147ab62a386bd63e6de1522109b8c9588ab466f5aadfde8c41ca3749423ee)success := and(eq(staticcall(gas(), 0x8, 0x50c0, 0x180, 0x50c0, 0x20), 1), success)success := and(eq(mload(0x50c0), 1), success)} return success; } } + assembly { let f_p := 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47 let f_q := 0x30644e72e131a029b85045b68181585d2833e84879b9709143e1f593f0000001 function validate_ec_point(x, y) -> valid { { let x_lt_p := lt(x, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) let y_lt_p := lt(y, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) valid := and(x_lt_p, y_lt_p) } { let y_square := mulmod(y, y, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) let x_square := mulmod(x, x, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) let x_cube := mulmod(x_square, x, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) let x_cube_plus_3 := addmod(x_cube, 3, 0x30644e72e131a029b85045b68181585d97816a916871ca8d3c208c16d87cfd47) let is_affine := eq(x_cube_plus_3, y_square) valid := and(valid, is_affine) } } mstore(0xa0, mod(calldataload(0x4), f_q))mstore(0xc0, mod(calldataload(0x24), f_q))mstore(0xe0, mod(calldataload(0x44), f_q))mstore(0x100, mod(calldataload(0x64), f_q))mstore(0x120, mod(calldataload(0x84), f_q))mstore(0x140, mod(calldataload(0xa4), f_q))mstore(0x160, mod(calldataload(0xc4), f_q))mstore(0x180, mod(calldataload(0xe4), f_q))mstore(0x1a0, mod(calldataload(0x104), f_q))mstore(0x1c0, mod(calldataload(0x124), f_q))mstore(0x1e0, mod(calldataload(0x144), f_q))mstore(0x200, mod(calldataload(0x164), f_q))mstore(0x220, mod(calldataload(0x184), f_q))mstore(0x240, mod(calldataload(0x1a4), f_q))mstore(0x80, 15063357149795515579629705953618634254647589286608361998185212173462665455386) { let x := calldataload(0x204) mstore(0x260, x) let y := calldataload(0x224) mstore(0x280, y) success := and(validate_ec_point(x, y), success) }mstore(0x2a0, keccak256(0x80, 544)){ let hash := mload(0x2a0) mstore(0x2c0, mod(hash, f_q)) mstore(0x2e0, hash) } { let x := calldataload(0x244) mstore(0x300, x) let y := calldataload(0x264) mstore(0x320, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0x284) mstore(0x340, x) let y := calldataload(0x2a4) mstore(0x360, y) success := and(validate_ec_point(x, y), success) }mstore(0x380, keccak256(0x2e0, 160)){ let hash := mload(0x380) mstore(0x3a0, mod(hash, f_q)) mstore(0x3c0, hash) }mstore8(0x3e0, 1)mstore(0x3e0, keccak256(0x3c0, 33)){ let hash := mload(0x3e0) mstore(0x400, mod(hash, f_q)) mstore(0x420, hash) } { let x := calldataload(0x2c4) mstore(0x440, x) let y := calldataload(0x2e4) mstore(0x460, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0x304) mstore(0x480, x) let y := calldataload(0x324) mstore(0x4a0, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0x344) mstore(0x4c0, x) let y := calldataload(0x364) mstore(0x4e0, y) success := and(validate_ec_point(x, y), success) }mstore(0x500, keccak256(0x420, 224)){ let hash := mload(0x500) mstore(0x520, mod(hash, f_q)) mstore(0x540, hash) } { let x := calldataload(0x384) mstore(0x560, x) let y := calldataload(0x3a4) mstore(0x580, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0x3c4) mstore(0x5a0, x) let y := calldataload(0x3e4) mstore(0x5c0, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0x404) mstore(0x5e0, x) let y := calldataload(0x424) mstore(0x600, y) success := and(validate_ec_point(x, y), success) } { let x := calldataload(0x444) mstore(0x620, x) let y := calldataload(0x464) mstore(0x640, y) success := and(validate_ec_point(x, y), success) }mstore(0x660, keccak256(0x540, 288)){ let hash := mload(0x660) mstore(0x680, mod(hash, f_q)) mstore(0x6a0, hash) }mstore(0x6c0, mod(calldataload(0x484), f_q))mstore(0x6e0, mod(calldataload(0x4a4), f_q))mstore(0x700, mod(calldataload(0x4c4), f_q))mstore(0x720, mod(calldataload(0x4e4), f_q))mstore(0x740, mod(calldataload(0x504), f_q))mstore(0x760, mod(calldataload(0x524), f_q))mstore(0x780, mod(calldataload(0x544), f_q))mstore(0x7a0, mod(calldataload(0x564), f_q))mstore(0x7c0, mod(calldataload(0x584), f_q))mstore(0x7e0, mod(calldataload(0x5a4), f_q))mstore(0x800, mod(calldataload(0x5c4), f_q))mstore(0x820, mod(calldataload(0x5e4), f_q))mstore(0x840, mod(calldataload(0x604), f_q))mstore(0x860, mod(calldataload(0x624), f_q))mstore(0x880, mod(calldataload(0x644), f_q))mstore(0x8a0, mod(calldataload(0x664), f_q))mstore(0x8c0, mod(calldataload(0x684), f_q))mstore(0x8e0, mod(calldataload(0x6a4), f_q))mstore(0x900, mod(calldataload(0x6c4), f_q))mstore(0x920, keccak256(0x6a0, 640)){ let hash := mload(0x920) mstore(0x940, mod(hash, f_q)) mstore(0x960, hash) }mstore8(0x980, 1)mstore(0x980, keccak256(0x960, 33)){ let hash := mload(0x980) mstore(0x9a0, mod(hash, f_q)) mstore(0x9c0, hash) } { let x := calldataload(0x6e4) mstore(0x9e0, x) let y := calldataload(0x704) mstore(0xa00, y) success := and(validate_ec_point(x, y), success) }mstore(0xa20, keccak256(0x9c0, 96)){ let hash := mload(0xa20) mstore(0xa40, mod(hash, f_q)) mstore(0xa60, hash) } { let x := calldataload(0x724) mstore(0xa80, x) let y := calldataload(0x744) mstore(0xaa0, y) success := and(validate_ec_point(x, y), success) }{ let x := mload(0xa0)x := add(x, shl(88, mload(0xc0)))x := add(x, shl(176, mload(0xe0)))mstore(0xac0, x)let y := mload(0x100)y := add(y, shl(88, mload(0x120)))y := add(y, shl(176, mload(0x140)))mstore(0xae0, y) success := and(validate_ec_point(x, y), success) }{ let x := mload(0x160)x := add(x, shl(88, mload(0x180)))x := add(x, shl(176, mload(0x1a0)))mstore(0xb00, x)let y := mload(0x1c0)y := add(y, shl(88, mload(0x1e0)))y := add(y, shl(176, mload(0x200)))mstore(0xb20, y) success := and(validate_ec_point(x, y), success) }mstore(0xb40, mulmod(mload(0x680), mload(0x680), f_q))mstore(0xb60, mulmod(mload(0xb40), mload(0xb40), f_q))mstore(0xb80, mulmod(mload(0xb60), mload(0xb60), f_q))mstore(0xba0, mulmod(mload(0xb80), mload(0xb80), f_q))mstore(0xbc0, mulmod(mload(0xba0), mload(0xba0), f_q))mstore(0xbe0, mulmod(mload(0xbc0), mload(0xbc0), f_q))mstore(0xc00, mulmod(mload(0xbe0), mload(0xbe0), f_q))mstore(0xc20, mulmod(mload(0xc00), mload(0xc00), f_q))mstore(0xc40, mulmod(mload(0xc20), mload(0xc20), f_q))mstore(0xc60, mulmod(mload(0xc40), mload(0xc40), f_q))mstore(0xc80, mulmod(mload(0xc60), mload(0xc60), f_q))mstore(0xca0, mulmod(mload(0xc80), mload(0xc80), f_q))mstore(0xcc0, mulmod(mload(0xca0), mload(0xca0), f_q))mstore(0xce0, mulmod(mload(0xcc0), mload(0xcc0), f_q))mstore(0xd00, mulmod(mload(0xce0), mload(0xce0), f_q))mstore(0xd20, mulmod(mload(0xd00), mload(0xd00), f_q))mstore(0xd40, mulmod(mload(0xd20), mload(0xd20), f_q))mstore(0xd60, mulmod(mload(0xd40), mload(0xd40), f_q))mstore(0xd80, mulmod(mload(0xd60), mload(0xd60), f_q))mstore(0xda0, mulmod(mload(0xd80), mload(0xd80), f_q))mstore(0xdc0, mulmod(mload(0xda0), mload(0xda0), f_q))mstore(0xde0, mulmod(mload(0xdc0), mload(0xdc0), f_q))mstore(0xe00, mulmod(mload(0xde0), mload(0xde0), f_q))mstore(0xe20, addmod(mload(0xe00), 21888242871839275222246405745257275088548364400416034343698204186575808495616, f_q))mstore(0xe40, mulmod(mload(0xe20), 21888240262557392955334514970720457388010314637169927192662615958087340972065, f_q))mstore(0xe60, mulmod(mload(0xe40), 4506835738822104338668100540817374747935106310012997856968187171738630203507, f_q))mstore(0xe80, addmod(mload(0x680), 17381407133017170883578305204439900340613258090403036486730017014837178292110, f_q))mstore(0xea0, mulmod(mload(0xe40), 21710372849001950800533397158415938114909991150039389063546734567764856596059, f_q))mstore(0xec0, addmod(mload(0x680), 177870022837324421713008586841336973638373250376645280151469618810951899558, f_q))mstore(0xee0, mulmod(mload(0xe40), 1887003188133998471169152042388914354640772748308168868301418279904560637395, f_q))mstore(0xf00, addmod(mload(0x680), 20001239683705276751077253702868360733907591652107865475396785906671247858222, f_q))mstore(0xf20, mulmod(mload(0xe40), 2785514556381676080176937710880804108647911392478702105860685610379369825016, f_q))mstore(0xf40, addmod(mload(0x680), 19102728315457599142069468034376470979900453007937332237837518576196438670601, f_q))mstore(0xf60, mulmod(mload(0xe40), 14655294445420895451632927078981340937842238432098198055057679026789553137428, f_q))mstore(0xf80, addmod(mload(0x680), 7232948426418379770613478666275934150706125968317836288640525159786255358189, f_q))mstore(0xfa0, mulmod(mload(0xe40), 8734126352828345679573237859165904705806588461301144420590422589042130041188, f_q))mstore(0xfc0, addmod(mload(0x680), 13154116519010929542673167886091370382741775939114889923107781597533678454429, f_q))mstore(0xfe0, mulmod(mload(0xe40), 9741553891420464328295280489650144566903017206473301385034033384879943874347, f_q))mstore(0x1000, addmod(mload(0x680), 12146688980418810893951125255607130521645347193942732958664170801695864621270, f_q))mstore(0x1020, mulmod(mload(0xe40), 1, f_q))mstore(0x1040, addmod(mload(0x680), 21888242871839275222246405745257275088548364400416034343698204186575808495616, f_q))mstore(0x1060, mulmod(mload(0xe40), 8374374965308410102411073611984011876711565317741801500439755773472076597347, f_q))mstore(0x1080, addmod(mload(0x680), 13513867906530865119835332133273263211836799082674232843258448413103731898270, f_q))mstore(0x10a0, mulmod(mload(0xe40), 11211301017135681023579411905410872569206244553457844956874280139879520583390, f_q))mstore(0x10c0, addmod(mload(0x680), 10676941854703594198666993839846402519342119846958189386823924046696287912227, f_q))mstore(0x10e0, mulmod(mload(0xe40), 3615478808282855240548287271348143516886772452944084747768312988864436725401, f_q))mstore(0x1100, addmod(mload(0x680), 18272764063556419981698118473909131571661591947471949595929891197711371770216, f_q))mstore(0x1120, mulmod(mload(0xe40), 1426404432721484388505361748317961535523355871255605456897797744433766488507, f_q))mstore(0x1140, addmod(mload(0x680), 20461838439117790833741043996939313553025008529160428886800406442142042007110, f_q))mstore(0x1160, mulmod(mload(0xe40), 216092043779272773661818549620449970334216366264741118684015851799902419467, f_q))mstore(0x1180, addmod(mload(0x680), 21672150828060002448584587195636825118214148034151293225014188334775906076150, f_q))mstore(0x11a0, mulmod(mload(0xe40), 12619617507853212586156872920672483948819476989779550311307282715684870266992, f_q))mstore(0x11c0, addmod(mload(0x680), 9268625363986062636089532824584791139728887410636484032390921470890938228625, f_q))mstore(0x11e0, mulmod(mload(0xe40), 18610195890048912503953886742825279624920778288956610528523679659246523534888, f_q))mstore(0x1200, addmod(mload(0x680), 3278046981790362718292519002431995463627586111459423815174524527329284960729, f_q))mstore(0x1220, mulmod(mload(0xe40), 19032961837237948602743626455740240236231119053033140765040043513661803148152, f_q))mstore(0x1240, addmod(mload(0x680), 2855281034601326619502779289517034852317245347382893578658160672914005347465, f_q))mstore(0x1260, mulmod(mload(0xe40), 14875928112196239563830800280253496262679717528621719058794366823499719730250, f_q))mstore(0x1280, addmod(mload(0x680), 7012314759643035658415605465003778825868646871794315284903837363076088765367, f_q))mstore(0x12a0, mulmod(mload(0xe40), 915149353520972163646494413843788069594022902357002628455555785223409501882, f_q))mstore(0x12c0, addmod(mload(0x680), 20973093518318303058599911331413487018954341498059031715242648401352398993735, f_q))mstore(0x12e0, mulmod(mload(0xe40), 5522161504810533295870699551020523636289972223872138525048055197429246400245, f_q))mstore(0x1300, addmod(mload(0x680), 16366081367028741926375706194236751452258392176543895818650148989146562095372, f_q))mstore(0x1320, mulmod(mload(0xe40), 3766081621734395783232337525162072736827576297943013392955872170138036189193, f_q))mstore(0x1340, addmod(mload(0x680), 18122161250104879439014068220095202351720788102473020950742332016437772306424, f_q))mstore(0x1360, mulmod(mload(0xe40), 9100833993744738801214480881117348002768153232283708533639316963648253510584, f_q))mstore(0x1380, addmod(mload(0x680), 12787408878094536421031924864139927085780211168132325810058887222927554985033, f_q)){ let prod := mload(0xe80) prod := mulmod(mload(0xec0), prod, f_q) mstore(0x13a0, prod) prod := mulmod(mload(0xf00), prod, f_q) mstore(0x13c0, prod) prod := mulmod(mload(0xf40), prod, f_q) mstore(0x13e0, prod) prod := mulmod(mload(0xf80), prod, f_q) mstore(0x1400, prod) prod := mulmod(mload(0xfc0), prod, f_q) mstore(0x1420, prod) prod := mulmod(mload(0x1000), prod, f_q) mstore(0x1440, prod) prod := mulmod(mload(0x1040), prod, f_q) mstore(0x1460, prod) prod := mulmod(mload(0x1080), prod, f_q) mstore(0x1480, prod) prod := mulmod(mload(0x10c0), prod, f_q) mstore(0x14a0, prod) prod := mulmod(mload(0x1100), prod, f_q) mstore(0x14c0, prod) prod := mulmod(mload(0x1140), prod, f_q) mstore(0x14e0, prod) prod := mulmod(mload(0x1180), prod, f_q) mstore(0x1500, prod) prod := mulmod(mload(0x11c0), prod, f_q) mstore(0x1520, prod) prod := mulmod(mload(0x1200), prod, f_q) mstore(0x1540, prod) prod := mulmod(mload(0x1240), prod, f_q) mstore(0x1560, prod) prod := mulmod(mload(0x1280), prod, f_q) mstore(0x1580, prod) prod := mulmod(mload(0x12c0), prod, f_q) mstore(0x15a0, prod) prod := mulmod(mload(0x1300), prod, f_q) mstore(0x15c0, prod) prod := mulmod(mload(0x1340), prod, f_q) mstore(0x15e0, prod) prod := mulmod(mload(0x1380), prod, f_q) mstore(0x1600, prod) prod := mulmod(mload(0xe20), prod, f_q) mstore(0x1620, prod) }mstore(0x1660, 32)mstore(0x1680, 32)mstore(0x16a0, 32)mstore(0x16c0, mload(0x1620))mstore(0x16e0, 21888242871839275222246405745257275088548364400416034343698204186575808495615)mstore(0x1700, 21888242871839275222246405745257275088548364400416034343698204186575808495617)success := and(eq(staticcall(gas(), 0x5, 0x1660, 0xc0, 0x1640, 0x20), 1), success){ let inv := mload(0x1640) let v v := mload(0xe20) mstore(0xe20, mulmod(mload(0x1600), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1380) mstore(0x1380, mulmod(mload(0x15e0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1340) mstore(0x1340, mulmod(mload(0x15c0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1300) mstore(0x1300, mulmod(mload(0x15a0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x12c0) mstore(0x12c0, mulmod(mload(0x1580), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1280) mstore(0x1280, mulmod(mload(0x1560), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1240) mstore(0x1240, mulmod(mload(0x1540), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1200) mstore(0x1200, mulmod(mload(0x1520), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x11c0) mstore(0x11c0, mulmod(mload(0x1500), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1180) mstore(0x1180, mulmod(mload(0x14e0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1140) mstore(0x1140, mulmod(mload(0x14c0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1100) mstore(0x1100, mulmod(mload(0x14a0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x10c0) mstore(0x10c0, mulmod(mload(0x1480), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1080) mstore(0x1080, mulmod(mload(0x1460), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1040) mstore(0x1040, mulmod(mload(0x1440), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x1000) mstore(0x1000, mulmod(mload(0x1420), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0xfc0) mstore(0xfc0, mulmod(mload(0x1400), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0xf80) mstore(0xf80, mulmod(mload(0x13e0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0xf40) mstore(0xf40, mulmod(mload(0x13c0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0xf00) mstore(0xf00, mulmod(mload(0x13a0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0xec0) mstore(0xec0, mulmod(mload(0xe80), inv, f_q)) inv := mulmod(v, inv, f_q) mstore(0xe80, inv) }mstore(0x1720, mulmod(mload(0xe60), mload(0xe80), f_q))mstore(0x1740, mulmod(mload(0xea0), mload(0xec0), f_q))mstore(0x1760, mulmod(mload(0xee0), mload(0xf00), f_q))mstore(0x1780, mulmod(mload(0xf20), mload(0xf40), f_q))mstore(0x17a0, mulmod(mload(0xf60), mload(0xf80), f_q))mstore(0x17c0, mulmod(mload(0xfa0), mload(0xfc0), f_q))mstore(0x17e0, mulmod(mload(0xfe0), mload(0x1000), f_q))mstore(0x1800, mulmod(mload(0x1020), mload(0x1040), f_q))mstore(0x1820, mulmod(mload(0x1060), mload(0x1080), f_q))mstore(0x1840, mulmod(mload(0x10a0), mload(0x10c0), f_q))mstore(0x1860, mulmod(mload(0x10e0), mload(0x1100), f_q))mstore(0x1880, mulmod(mload(0x1120), mload(0x1140), f_q))mstore(0x18a0, mulmod(mload(0x1160), mload(0x1180), f_q))mstore(0x18c0, mulmod(mload(0x11a0), mload(0x11c0), f_q))mstore(0x18e0, mulmod(mload(0x11e0), mload(0x1200), f_q))mstore(0x1900, mulmod(mload(0x1220), mload(0x1240), f_q))mstore(0x1920, mulmod(mload(0x1260), mload(0x1280), f_q))mstore(0x1940, mulmod(mload(0x12a0), mload(0x12c0), f_q))mstore(0x1960, mulmod(mload(0x12e0), mload(0x1300), f_q))mstore(0x1980, mulmod(mload(0x1320), mload(0x1340), f_q))mstore(0x19a0, mulmod(mload(0x1360), mload(0x1380), f_q)){ let result := mulmod(mload(0x1800), mload(0xa0), f_q)result := addmod(mulmod(mload(0x1820), mload(0xc0), f_q), result, f_q)result := addmod(mulmod(mload(0x1840), mload(0xe0), f_q), result, f_q)result := addmod(mulmod(mload(0x1860), mload(0x100), f_q), result, f_q)result := addmod(mulmod(mload(0x1880), mload(0x120), f_q), result, f_q)result := addmod(mulmod(mload(0x18a0), mload(0x140), f_q), result, f_q)result := addmod(mulmod(mload(0x18c0), mload(0x160), f_q), result, f_q)result := addmod(mulmod(mload(0x18e0), mload(0x180), f_q), result, f_q)result := addmod(mulmod(mload(0x1900), mload(0x1a0), f_q), result, f_q)result := addmod(mulmod(mload(0x1920), mload(0x1c0), f_q), result, f_q)result := addmod(mulmod(mload(0x1940), mload(0x1e0), f_q), result, f_q)result := addmod(mulmod(mload(0x1960), mload(0x200), f_q), result, f_q)result := addmod(mulmod(mload(0x1980), mload(0x220), f_q), result, f_q)result := addmod(mulmod(mload(0x19a0), mload(0x240), f_q), result, f_q)mstore(0x19c0, result) }mstore(0x19e0, mulmod(mload(0x700), mload(0x6e0), f_q))mstore(0x1a00, addmod(mload(0x6c0), mload(0x19e0), f_q))mstore(0x1a20, addmod(mload(0x1a00), sub(f_q, mload(0x720)), f_q))mstore(0x1a40, mulmod(mload(0x1a20), mload(0x7a0), f_q))mstore(0x1a60, mulmod(mload(0x520), mload(0x1a40), f_q))mstore(0x1a80, addmod(1, sub(f_q, mload(0x840)), f_q))mstore(0x1aa0, mulmod(mload(0x1a80), mload(0x1800), f_q))mstore(0x1ac0, addmod(mload(0x1a60), mload(0x1aa0), f_q))mstore(0x1ae0, mulmod(mload(0x520), mload(0x1ac0), f_q))mstore(0x1b00, mulmod(mload(0x840), mload(0x840), f_q))mstore(0x1b20, addmod(mload(0x1b00), sub(f_q, mload(0x840)), f_q))mstore(0x1b40, mulmod(mload(0x1b20), mload(0x1720), f_q))mstore(0x1b60, addmod(mload(0x1ae0), mload(0x1b40), f_q))mstore(0x1b80, mulmod(mload(0x520), mload(0x1b60), f_q))mstore(0x1ba0, addmod(1, sub(f_q, mload(0x1720)), f_q))mstore(0x1bc0, addmod(mload(0x1740), mload(0x1760), f_q))mstore(0x1be0, addmod(mload(0x1bc0), mload(0x1780), f_q))mstore(0x1c00, addmod(mload(0x1be0), mload(0x17a0), f_q))mstore(0x1c20, addmod(mload(0x1c00), mload(0x17c0), f_q))mstore(0x1c40, addmod(mload(0x1c20), mload(0x17e0), f_q))mstore(0x1c60, addmod(mload(0x1ba0), sub(f_q, mload(0x1c40)), f_q))mstore(0x1c80, mulmod(mload(0x7e0), mload(0x3a0), f_q))mstore(0x1ca0, addmod(mload(0x740), mload(0x1c80), f_q))mstore(0x1cc0, addmod(mload(0x1ca0), mload(0x400), f_q))mstore(0x1ce0, mulmod(mload(0x800), mload(0x3a0), f_q))mstore(0x1d00, addmod(mload(0x6c0), mload(0x1ce0), f_q))mstore(0x1d20, addmod(mload(0x1d00), mload(0x400), f_q))mstore(0x1d40, mulmod(mload(0x1d20), mload(0x1cc0), f_q))mstore(0x1d60, mulmod(mload(0x820), mload(0x3a0), f_q))mstore(0x1d80, addmod(mload(0x19c0), mload(0x1d60), f_q))mstore(0x1da0, addmod(mload(0x1d80), mload(0x400), f_q))mstore(0x1dc0, mulmod(mload(0x1da0), mload(0x1d40), f_q))mstore(0x1de0, mulmod(mload(0x1dc0), mload(0x860), f_q))mstore(0x1e00, mulmod(1, mload(0x3a0), f_q))mstore(0x1e20, mulmod(mload(0x680), mload(0x1e00), f_q))mstore(0x1e40, addmod(mload(0x740), mload(0x1e20), f_q))mstore(0x1e60, addmod(mload(0x1e40), mload(0x400), f_q))mstore(0x1e80, mulmod(4131629893567559867359510883348571134090853742863529169391034518566172092834, mload(0x3a0), f_q))mstore(0x1ea0, mulmod(mload(0x680), mload(0x1e80), f_q))mstore(0x1ec0, addmod(mload(0x6c0), mload(0x1ea0), f_q))mstore(0x1ee0, addmod(mload(0x1ec0), mload(0x400), f_q))mstore(0x1f00, mulmod(mload(0x1ee0), mload(0x1e60), f_q))mstore(0x1f20, mulmod(8910878055287538404433155982483128285667088683464058436815641868457422632747, mload(0x3a0), f_q))mstore(0x1f40, mulmod(mload(0x680), mload(0x1f20), f_q))mstore(0x1f60, addmod(mload(0x19c0), mload(0x1f40), f_q))mstore(0x1f80, addmod(mload(0x1f60), mload(0x400), f_q))mstore(0x1fa0, mulmod(mload(0x1f80), mload(0x1f00), f_q))mstore(0x1fc0, mulmod(mload(0x1fa0), mload(0x840), f_q))mstore(0x1fe0, addmod(mload(0x1de0), sub(f_q, mload(0x1fc0)), f_q))mstore(0x2000, mulmod(mload(0x1fe0), mload(0x1c60), f_q))mstore(0x2020, addmod(mload(0x1b80), mload(0x2000), f_q))mstore(0x2040, mulmod(mload(0x520), mload(0x2020), f_q))mstore(0x2060, addmod(1, sub(f_q, mload(0x880)), f_q))mstore(0x2080, mulmod(mload(0x2060), mload(0x1800), f_q))mstore(0x20a0, addmod(mload(0x2040), mload(0x2080), f_q))mstore(0x20c0, mulmod(mload(0x520), mload(0x20a0), f_q))mstore(0x20e0, mulmod(mload(0x880), mload(0x880), f_q))mstore(0x2100, addmod(mload(0x20e0), sub(f_q, mload(0x880)), f_q))mstore(0x2120, mulmod(mload(0x2100), mload(0x1720), f_q))mstore(0x2140, addmod(mload(0x20c0), mload(0x2120), f_q))mstore(0x2160, mulmod(mload(0x520), mload(0x2140), f_q))mstore(0x2180, addmod(mload(0x8c0), mload(0x3a0), f_q))mstore(0x21a0, mulmod(mload(0x2180), mload(0x8a0), f_q))mstore(0x21c0, addmod(mload(0x900), mload(0x400), f_q))mstore(0x21e0, mulmod(mload(0x21c0), mload(0x21a0), f_q))mstore(0x2200, mulmod(mload(0x6c0), mload(0x780), f_q))mstore(0x2220, addmod(mload(0x2200), mload(0x3a0), f_q))mstore(0x2240, mulmod(mload(0x2220), mload(0x880), f_q))mstore(0x2260, addmod(mload(0x760), mload(0x400), f_q))mstore(0x2280, mulmod(mload(0x2260), mload(0x2240), f_q))mstore(0x22a0, addmod(mload(0x21e0), sub(f_q, mload(0x2280)), f_q))mstore(0x22c0, mulmod(mload(0x22a0), mload(0x1c60), f_q))mstore(0x22e0, addmod(mload(0x2160), mload(0x22c0), f_q))mstore(0x2300, mulmod(mload(0x520), mload(0x22e0), f_q))mstore(0x2320, addmod(mload(0x8c0), sub(f_q, mload(0x900)), f_q))mstore(0x2340, mulmod(mload(0x2320), mload(0x1800), f_q))mstore(0x2360, addmod(mload(0x2300), mload(0x2340), f_q))mstore(0x2380, mulmod(mload(0x520), mload(0x2360), f_q))mstore(0x23a0, mulmod(mload(0x2320), mload(0x1c60), f_q))mstore(0x23c0, addmod(mload(0x8c0), sub(f_q, mload(0x8e0)), f_q))mstore(0x23e0, mulmod(mload(0x23c0), mload(0x23a0), f_q))mstore(0x2400, addmod(mload(0x2380), mload(0x23e0), f_q))mstore(0x2420, mulmod(mload(0xe00), mload(0xe00), f_q))mstore(0x2440, mulmod(mload(0x2420), mload(0xe00), f_q))mstore(0x2460, mulmod(mload(0x2440), mload(0xe00), f_q))mstore(0x2480, mulmod(1, mload(0xe00), f_q))mstore(0x24a0, mulmod(1, mload(0x2420), f_q))mstore(0x24c0, mulmod(1, mload(0x2440), f_q))mstore(0x24e0, mulmod(mload(0x2400), mload(0xe20), f_q))mstore(0x2500, mulmod(mload(0xb40), mload(0x680), f_q))mstore(0x2520, mulmod(mload(0x2500), mload(0x680), f_q))mstore(0x2540, mulmod(mload(0x680), 9741553891420464328295280489650144566903017206473301385034033384879943874347, f_q))mstore(0x2560, addmod(mload(0xa40), sub(f_q, mload(0x2540)), f_q))mstore(0x2580, mulmod(mload(0x680), 1, f_q))mstore(0x25a0, addmod(mload(0xa40), sub(f_q, mload(0x2580)), f_q))mstore(0x25c0, mulmod(mload(0x680), 8374374965308410102411073611984011876711565317741801500439755773472076597347, f_q))mstore(0x25e0, addmod(mload(0xa40), sub(f_q, mload(0x25c0)), f_q))mstore(0x2600, mulmod(mload(0x680), 11211301017135681023579411905410872569206244553457844956874280139879520583390, f_q))mstore(0x2620, addmod(mload(0xa40), sub(f_q, mload(0x2600)), f_q))mstore(0x2640, mulmod(mload(0x680), 3615478808282855240548287271348143516886772452944084747768312988864436725401, f_q))mstore(0x2660, addmod(mload(0xa40), sub(f_q, mload(0x2640)), f_q))mstore(0x2680, mulmod(13213688729882003894512633350385593288217014177373218494356903340348818451480, mload(0x2500), f_q))mstore(0x26a0, mulmod(mload(0x2680), 1, f_q)){ let result := mulmod(mload(0xa40), mload(0x2680), f_q)result := addmod(mulmod(mload(0x680), sub(f_q, mload(0x26a0)), f_q), result, f_q)mstore(0x26c0, result) }mstore(0x26e0, mulmod(8207090019724696496350398458716998472718344609680392612601596849934418295470, mload(0x2500), f_q))mstore(0x2700, mulmod(mload(0x26e0), 8374374965308410102411073611984011876711565317741801500439755773472076597347, f_q)){ let result := mulmod(mload(0xa40), mload(0x26e0), f_q)result := addmod(mulmod(mload(0x680), sub(f_q, mload(0x2700)), f_q), result, f_q)mstore(0x2720, result) }mstore(0x2740, mulmod(7391709068497399131897422873231908718558236401035363928063603272120120747483, mload(0x2500), f_q))mstore(0x2760, mulmod(mload(0x2740), 11211301017135681023579411905410872569206244553457844956874280139879520583390, f_q)){ let result := mulmod(mload(0xa40), mload(0x2740), f_q)result := addmod(mulmod(mload(0x680), sub(f_q, mload(0x2760)), f_q), result, f_q)mstore(0x2780, result) }mstore(0x27a0, mulmod(19036273796805830823244991598792794567595348772040298280440552631112242221017, mload(0x2500), f_q))mstore(0x27c0, mulmod(mload(0x27a0), 3615478808282855240548287271348143516886772452944084747768312988864436725401, f_q)){ let result := mulmod(mload(0xa40), mload(0x27a0), f_q)result := addmod(mulmod(mload(0x680), sub(f_q, mload(0x27c0)), f_q), result, f_q)mstore(0x27e0, result) }mstore(0x2800, mulmod(1, mload(0x25a0), f_q))mstore(0x2820, mulmod(mload(0x2800), mload(0x25e0), f_q))mstore(0x2840, mulmod(mload(0x2820), mload(0x2620), f_q))mstore(0x2860, mulmod(mload(0x2840), mload(0x2660), f_q))mstore(0x2880, mulmod(13513867906530865119835332133273263211836799082674232843258448413103731898271, mload(0x680), f_q))mstore(0x28a0, mulmod(mload(0x2880), 1, f_q)){ let result := mulmod(mload(0xa40), mload(0x2880), f_q)result := addmod(mulmod(mload(0x680), sub(f_q, mload(0x28a0)), f_q), result, f_q)mstore(0x28c0, result) }mstore(0x28e0, mulmod(8374374965308410102411073611984011876711565317741801500439755773472076597346, mload(0x680), f_q))mstore(0x2900, mulmod(mload(0x28e0), 8374374965308410102411073611984011876711565317741801500439755773472076597347, f_q)){ let result := mulmod(mload(0xa40), mload(0x28e0), f_q)result := addmod(mulmod(mload(0x680), sub(f_q, mload(0x2900)), f_q), result, f_q)mstore(0x2920, result) }mstore(0x2940, mulmod(12146688980418810893951125255607130521645347193942732958664170801695864621271, mload(0x680), f_q))mstore(0x2960, mulmod(mload(0x2940), 1, f_q)){ let result := mulmod(mload(0xa40), mload(0x2940), f_q)result := addmod(mulmod(mload(0x680), sub(f_q, mload(0x2960)), f_q), result, f_q)mstore(0x2980, result) }mstore(0x29a0, mulmod(9741553891420464328295280489650144566903017206473301385034033384879943874346, mload(0x680), f_q))mstore(0x29c0, mulmod(mload(0x29a0), 9741553891420464328295280489650144566903017206473301385034033384879943874347, f_q)){ let result := mulmod(mload(0xa40), mload(0x29a0), f_q)result := addmod(mulmod(mload(0x680), sub(f_q, mload(0x29c0)), f_q), result, f_q)mstore(0x29e0, result) }mstore(0x2a00, mulmod(mload(0x2800), mload(0x2560), f_q)){ let result := mulmod(mload(0xa40), 1, f_q)result := addmod(mulmod(mload(0x680), 21888242871839275222246405745257275088548364400416034343698204186575808495616, f_q), result, f_q)mstore(0x2a20, result) }{ let prod := mload(0x26c0) prod := mulmod(mload(0x2720), prod, f_q) mstore(0x2a40, prod) prod := mulmod(mload(0x2780), prod, f_q) mstore(0x2a60, prod) prod := mulmod(mload(0x27e0), prod, f_q) mstore(0x2a80, prod) prod := mulmod(mload(0x28c0), prod, f_q) mstore(0x2aa0, prod) prod := mulmod(mload(0x2920), prod, f_q) mstore(0x2ac0, prod) prod := mulmod(mload(0x2820), prod, f_q) mstore(0x2ae0, prod) prod := mulmod(mload(0x2980), prod, f_q) mstore(0x2b00, prod) prod := mulmod(mload(0x29e0), prod, f_q) mstore(0x2b20, prod) prod := mulmod(mload(0x2a00), prod, f_q) mstore(0x2b40, prod) prod := mulmod(mload(0x2a20), prod, f_q) mstore(0x2b60, prod) prod := mulmod(mload(0x2800), prod, f_q) mstore(0x2b80, prod) }mstore(0x2bc0, 32)mstore(0x2be0, 32)mstore(0x2c00, 32)mstore(0x2c20, mload(0x2b80))mstore(0x2c40, 21888242871839275222246405745257275088548364400416034343698204186575808495615)mstore(0x2c60, 21888242871839275222246405745257275088548364400416034343698204186575808495617)success := and(eq(staticcall(gas(), 0x5, 0x2bc0, 0xc0, 0x2ba0, 0x20), 1), success){ let inv := mload(0x2ba0) let v v := mload(0x2800) mstore(0x2800, mulmod(mload(0x2b60), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2a20) mstore(0x2a20, mulmod(mload(0x2b40), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2a00) mstore(0x2a00, mulmod(mload(0x2b20), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x29e0) mstore(0x29e0, mulmod(mload(0x2b00), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2980) mstore(0x2980, mulmod(mload(0x2ae0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2820) mstore(0x2820, mulmod(mload(0x2ac0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2920) mstore(0x2920, mulmod(mload(0x2aa0), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x28c0) mstore(0x28c0, mulmod(mload(0x2a80), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x27e0) mstore(0x27e0, mulmod(mload(0x2a60), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2780) mstore(0x2780, mulmod(mload(0x2a40), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2720) mstore(0x2720, mulmod(mload(0x26c0), inv, f_q)) inv := mulmod(v, inv, f_q) mstore(0x26c0, inv) }{ let result := mload(0x26c0)result := addmod(mload(0x2720), result, f_q)result := addmod(mload(0x2780), result, f_q)result := addmod(mload(0x27e0), result, f_q)mstore(0x2c80, result) }mstore(0x2ca0, mulmod(mload(0x2860), mload(0x2820), f_q)){ let result := mload(0x28c0)result := addmod(mload(0x2920), result, f_q)mstore(0x2cc0, result) }mstore(0x2ce0, mulmod(mload(0x2860), mload(0x2a00), f_q)){ let result := mload(0x2980)result := addmod(mload(0x29e0), result, f_q)mstore(0x2d00, result) }mstore(0x2d20, mulmod(mload(0x2860), mload(0x2800), f_q)){ let result := mload(0x2a20)mstore(0x2d40, result) }{ let prod := mload(0x2c80) prod := mulmod(mload(0x2cc0), prod, f_q) mstore(0x2d60, prod) prod := mulmod(mload(0x2d00), prod, f_q) mstore(0x2d80, prod) prod := mulmod(mload(0x2d40), prod, f_q) mstore(0x2da0, prod) }mstore(0x2de0, 32)mstore(0x2e00, 32)mstore(0x2e20, 32)mstore(0x2e40, mload(0x2da0))mstore(0x2e60, 21888242871839275222246405745257275088548364400416034343698204186575808495615)mstore(0x2e80, 21888242871839275222246405745257275088548364400416034343698204186575808495617)success := and(eq(staticcall(gas(), 0x5, 0x2de0, 0xc0, 0x2dc0, 0x20), 1), success){ let inv := mload(0x2dc0) let v v := mload(0x2d40) mstore(0x2d40, mulmod(mload(0x2d80), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2d00) mstore(0x2d00, mulmod(mload(0x2d60), inv, f_q)) inv := mulmod(v, inv, f_q) v := mload(0x2cc0) mstore(0x2cc0, mulmod(mload(0x2c80), inv, f_q)) inv := mulmod(v, inv, f_q) mstore(0x2c80, inv) }mstore(0x2ea0, mulmod(mload(0x2ca0), mload(0x2cc0), f_q))mstore(0x2ec0, mulmod(mload(0x2ce0), mload(0x2d00), f_q))mstore(0x2ee0, mulmod(mload(0x2d20), mload(0x2d40), f_q))mstore(0x2f00, mulmod(mload(0x940), mload(0x940), f_q))mstore(0x2f20, mulmod(mload(0x2f00), mload(0x940), f_q))mstore(0x2f40, mulmod(mload(0x2f20), mload(0x940), f_q))mstore(0x2f60, mulmod(mload(0x2f40), mload(0x940), f_q))mstore(0x2f80, mulmod(mload(0x2f60), mload(0x940), f_q))mstore(0x2fa0, mulmod(mload(0x2f80), mload(0x940), f_q))mstore(0x2fc0, mulmod(mload(0x2fa0), mload(0x940), f_q))mstore(0x2fe0, mulmod(mload(0x2fc0), mload(0x940), f_q))mstore(0x3000, mulmod(mload(0x2fe0), mload(0x940), f_q))mstore(0x3020, mulmod(mload(0x9a0), mload(0x9a0), f_q))mstore(0x3040, mulmod(mload(0x3020), mload(0x9a0), f_q))mstore(0x3060, mulmod(mload(0x3040), mload(0x9a0), f_q)){ let result := mulmod(mload(0x6c0), mload(0x26c0), f_q)result := addmod(mulmod(mload(0x6e0), mload(0x2720), f_q), result, f_q)result := addmod(mulmod(mload(0x700), mload(0x2780), f_q), result, f_q)result := addmod(mulmod(mload(0x720), mload(0x27e0), f_q), result, f_q)mstore(0x3080, result) }mstore(0x30a0, mulmod(mload(0x3080), mload(0x2c80), f_q))mstore(0x30c0, mulmod(sub(f_q, mload(0x30a0)), 1, f_q))mstore(0x30e0, mulmod(mload(0x30c0), 1, f_q))mstore(0x3100, mulmod(1, mload(0x2ca0), f_q)){ let result := mulmod(mload(0x840), mload(0x28c0), f_q)result := addmod(mulmod(mload(0x860), mload(0x2920), f_q), result, f_q)mstore(0x3120, result) }mstore(0x3140, mulmod(mload(0x3120), mload(0x2ea0), f_q))mstore(0x3160, mulmod(sub(f_q, mload(0x3140)), 1, f_q))mstore(0x3180, mulmod(mload(0x3100), 1, f_q)){ let result := mulmod(mload(0x880), mload(0x28c0), f_q)result := addmod(mulmod(mload(0x8a0), mload(0x2920), f_q), result, f_q)mstore(0x31a0, result) }mstore(0x31c0, mulmod(mload(0x31a0), mload(0x2ea0), f_q))mstore(0x31e0, mulmod(sub(f_q, mload(0x31c0)), mload(0x940), f_q))mstore(0x3200, mulmod(mload(0x3100), mload(0x940), f_q))mstore(0x3220, addmod(mload(0x3160), mload(0x31e0), f_q))mstore(0x3240, mulmod(mload(0x3220), mload(0x9a0), f_q))mstore(0x3260, mulmod(mload(0x3180), mload(0x9a0), f_q))mstore(0x3280, mulmod(mload(0x3200), mload(0x9a0), f_q))mstore(0x32a0, addmod(mload(0x30e0), mload(0x3240), f_q))mstore(0x32c0, mulmod(1, mload(0x2ce0), f_q)){ let result := mulmod(mload(0x8c0), mload(0x2980), f_q)result := addmod(mulmod(mload(0x8e0), mload(0x29e0), f_q), result, f_q)mstore(0x32e0, result) }mstore(0x3300, mulmod(mload(0x32e0), mload(0x2ec0), f_q))mstore(0x3320, mulmod(sub(f_q, mload(0x3300)), 1, f_q))mstore(0x3340, mulmod(mload(0x32c0), 1, f_q))mstore(0x3360, mulmod(mload(0x3320), mload(0x3020), f_q))mstore(0x3380, mulmod(mload(0x3340), mload(0x3020), f_q))mstore(0x33a0, addmod(mload(0x32a0), mload(0x3360), f_q))mstore(0x33c0, mulmod(1, mload(0x2d20), f_q)){ let result := mulmod(mload(0x900), mload(0x2a20), f_q)mstore(0x33e0, result) }mstore(0x3400, mulmod(mload(0x33e0), mload(0x2ee0), f_q))mstore(0x3420, mulmod(sub(f_q, mload(0x3400)), 1, f_q))mstore(0x3440, mulmod(mload(0x33c0), 1, f_q)){ let result := mulmod(mload(0x740), mload(0x2a20), f_q)mstore(0x3460, result) }mstore(0x3480, mulmod(mload(0x3460), mload(0x2ee0), f_q))mstore(0x34a0, mulmod(sub(f_q, mload(0x3480)), mload(0x940), f_q))mstore(0x34c0, mulmod(mload(0x33c0), mload(0x940), f_q))mstore(0x34e0, addmod(mload(0x3420), mload(0x34a0), f_q)){ let result := mulmod(mload(0x760), mload(0x2a20), f_q)mstore(0x3500, result) }mstore(0x3520, mulmod(mload(0x3500), mload(0x2ee0), f_q))mstore(0x3540, mulmod(sub(f_q, mload(0x3520)), mload(0x2f00), f_q))mstore(0x3560, mulmod(mload(0x33c0), mload(0x2f00), f_q))mstore(0x3580, addmod(mload(0x34e0), mload(0x3540), f_q)){ let result := mulmod(mload(0x780), mload(0x2a20), f_q)mstore(0x35a0, result) }mstore(0x35c0, mulmod(mload(0x35a0), mload(0x2ee0), f_q))mstore(0x35e0, mulmod(sub(f_q, mload(0x35c0)), mload(0x2f20), f_q))mstore(0x3600, mulmod(mload(0x33c0), mload(0x2f20), f_q))mstore(0x3620, addmod(mload(0x3580), mload(0x35e0), f_q)){ let result := mulmod(mload(0x7a0), mload(0x2a20), f_q)mstore(0x3640, result) }mstore(0x3660, mulmod(mload(0x3640), mload(0x2ee0), f_q))mstore(0x3680, mulmod(sub(f_q, mload(0x3660)), mload(0x2f40), f_q))mstore(0x36a0, mulmod(mload(0x33c0), mload(0x2f40), f_q))mstore(0x36c0, addmod(mload(0x3620), mload(0x3680), f_q)){ let result := mulmod(mload(0x7e0), mload(0x2a20), f_q)mstore(0x36e0, result) }mstore(0x3700, mulmod(mload(0x36e0), mload(0x2ee0), f_q))mstore(0x3720, mulmod(sub(f_q, mload(0x3700)), mload(0x2f60), f_q))mstore(0x3740, mulmod(mload(0x33c0), mload(0x2f60), f_q))mstore(0x3760, addmod(mload(0x36c0), mload(0x3720), f_q)){ let result := mulmod(mload(0x800), mload(0x2a20), f_q)mstore(0x3780, result) }mstore(0x37a0, mulmod(mload(0x3780), mload(0x2ee0), f_q))mstore(0x37c0, mulmod(sub(f_q, mload(0x37a0)), mload(0x2f80), f_q))mstore(0x37e0, mulmod(mload(0x33c0), mload(0x2f80), f_q))mstore(0x3800, addmod(mload(0x3760), mload(0x37c0), f_q)){ let result := mulmod(mload(0x820), mload(0x2a20), f_q)mstore(0x3820, result) }mstore(0x3840, mulmod(mload(0x3820), mload(0x2ee0), f_q))mstore(0x3860, mulmod(sub(f_q, mload(0x3840)), mload(0x2fa0), f_q))mstore(0x3880, mulmod(mload(0x33c0), mload(0x2fa0), f_q))mstore(0x38a0, addmod(mload(0x3800), mload(0x3860), f_q))mstore(0x38c0, mulmod(mload(0x2480), mload(0x2d20), f_q))mstore(0x38e0, mulmod(mload(0x24a0), mload(0x2d20), f_q))mstore(0x3900, mulmod(mload(0x24c0), mload(0x2d20), f_q)){ let result := mulmod(mload(0x24e0), mload(0x2a20), f_q)mstore(0x3920, result) }mstore(0x3940, mulmod(mload(0x3920), mload(0x2ee0), f_q))mstore(0x3960, mulmod(sub(f_q, mload(0x3940)), mload(0x2fc0), f_q))mstore(0x3980, mulmod(mload(0x33c0), mload(0x2fc0), f_q))mstore(0x39a0, mulmod(mload(0x38c0), mload(0x2fc0), f_q))mstore(0x39c0, mulmod(mload(0x38e0), mload(0x2fc0), f_q))mstore(0x39e0, mulmod(mload(0x3900), mload(0x2fc0), f_q))mstore(0x3a00, addmod(mload(0x38a0), mload(0x3960), f_q)){ let result := mulmod(mload(0x7c0), mload(0x2a20), f_q)mstore(0x3a20, result) }mstore(0x3a40, mulmod(mload(0x3a20), mload(0x2ee0), f_q))mstore(0x3a60, mulmod(sub(f_q, mload(0x3a40)), mload(0x2fe0), f_q))mstore(0x3a80, mulmod(mload(0x33c0), mload(0x2fe0), f_q))mstore(0x3aa0, addmod(mload(0x3a00), mload(0x3a60), f_q))mstore(0x3ac0, mulmod(mload(0x3aa0), mload(0x3040), f_q))mstore(0x3ae0, mulmod(mload(0x3440), mload(0x3040), f_q))mstore(0x3b00, mulmod(mload(0x34c0), mload(0x3040), f_q))mstore(0x3b20, mulmod(mload(0x3560), mload(0x3040), f_q))mstore(0x3b40, mulmod(mload(0x3600), mload(0x3040), f_q))mstore(0x3b60, mulmod(mload(0x36a0), mload(0x3040), f_q))mstore(0x3b80, mulmod(mload(0x3740), mload(0x3040), f_q))mstore(0x3ba0, mulmod(mload(0x37e0), mload(0x3040), f_q))mstore(0x3bc0, mulmod(mload(0x3880), mload(0x3040), f_q))mstore(0x3be0, mulmod(mload(0x3980), mload(0x3040), f_q))mstore(0x3c00, mulmod(mload(0x39a0), mload(0x3040), f_q))mstore(0x3c20, mulmod(mload(0x39c0), mload(0x3040), f_q))mstore(0x3c40, mulmod(mload(0x39e0), mload(0x3040), f_q))mstore(0x3c60, mulmod(mload(0x3a80), mload(0x3040), f_q))mstore(0x3c80, addmod(mload(0x33a0), mload(0x3ac0), f_q))mstore(0x3ca0, mulmod(1, mload(0x2860), f_q))mstore(0x3cc0, mulmod(1, mload(0xa40), f_q))mstore(0x3ce0, 0x0000000000000000000000000000000000000000000000000000000000000001) mstore(0x3d00, 0x0000000000000000000000000000000000000000000000000000000000000002)mstore(0x3d20, mload(0x3c80))success := and(eq(staticcall(gas(), 0x7, 0x3ce0, 0x60, 0x3ce0, 0x40), 1), success)mstore(0x3d40, mload(0x3ce0)) mstore(0x3d60, mload(0x3d00))mstore(0x3d80, mload(0x260)) mstore(0x3da0, mload(0x280))success := and(eq(staticcall(gas(), 0x6, 0x3d40, 0x80, 0x3d40, 0x40), 1), success)mstore(0x3dc0, mload(0x440)) mstore(0x3de0, mload(0x460))mstore(0x3e00, mload(0x3260))success := and(eq(staticcall(gas(), 0x7, 0x3dc0, 0x60, 0x3dc0, 0x40), 1), success)mstore(0x3e20, mload(0x3d40)) mstore(0x3e40, mload(0x3d60))mstore(0x3e60, mload(0x3dc0)) mstore(0x3e80, mload(0x3de0))success := and(eq(staticcall(gas(), 0x6, 0x3e20, 0x80, 0x3e20, 0x40), 1), success)mstore(0x3ea0, mload(0x480)) mstore(0x3ec0, mload(0x4a0))mstore(0x3ee0, mload(0x3280))success := and(eq(staticcall(gas(), 0x7, 0x3ea0, 0x60, 0x3ea0, 0x40), 1), success)mstore(0x3f00, mload(0x3e20)) mstore(0x3f20, mload(0x3e40))mstore(0x3f40, mload(0x3ea0)) mstore(0x3f60, mload(0x3ec0))success := and(eq(staticcall(gas(), 0x6, 0x3f00, 0x80, 0x3f00, 0x40), 1), success)mstore(0x3f80, mload(0x300)) mstore(0x3fa0, mload(0x320))mstore(0x3fc0, mload(0x3380))success := and(eq(staticcall(gas(), 0x7, 0x3f80, 0x60, 0x3f80, 0x40), 1), success)mstore(0x3fe0, mload(0x3f00)) mstore(0x4000, mload(0x3f20))mstore(0x4020, mload(0x3f80)) mstore(0x4040, mload(0x3fa0))success := and(eq(staticcall(gas(), 0x6, 0x3fe0, 0x80, 0x3fe0, 0x40), 1), success)mstore(0x4060, mload(0x340)) mstore(0x4080, mload(0x360))mstore(0x40a0, mload(0x3ae0))success := and(eq(staticcall(gas(), 0x7, 0x4060, 0x60, 0x4060, 0x40), 1), success)mstore(0x40c0, mload(0x3fe0)) mstore(0x40e0, mload(0x4000))mstore(0x4100, mload(0x4060)) mstore(0x4120, mload(0x4080))success := and(eq(staticcall(gas(), 0x6, 0x40c0, 0x80, 0x40c0, 0x40), 1), success)mstore(0x4140, 0x2a29a92f0d6fe46b79653fbc083c09800aa1b2e56c7973c6c21bfa4c1486e46e) mstore(0x4160, 0x05dfaba6e433c5b30f7097a7792e9013bfb7eb838682517bdf11d68951c90239)mstore(0x4180, mload(0x3b00))success := and(eq(staticcall(gas(), 0x7, 0x4140, 0x60, 0x4140, 0x40), 1), success)mstore(0x41a0, mload(0x40c0)) mstore(0x41c0, mload(0x40e0))mstore(0x41e0, mload(0x4140)) mstore(0x4200, mload(0x4160))success := and(eq(staticcall(gas(), 0x6, 0x41a0, 0x80, 0x41a0, 0x40), 1), success)mstore(0x4220, 0x0ba574041b9acf0b879828f757fdbe006ec303bb00e85d005f97abcd2607422d) mstore(0x4240, 0x25383b7c510633308b668f09fe22cbd16b83d898660128f6f5390ca909c737fa)mstore(0x4260, mload(0x3b20))success := and(eq(staticcall(gas(), 0x7, 0x4220, 0x60, 0x4220, 0x40), 1), success)mstore(0x4280, mload(0x41a0)) mstore(0x42a0, mload(0x41c0))mstore(0x42c0, mload(0x4220)) mstore(0x42e0, mload(0x4240))success := and(eq(staticcall(gas(), 0x6, 0x4280, 0x80, 0x4280, 0x40), 1), success)mstore(0x4300, 0x2791f81a6904461f649d0e9721cb4a56e033e188b17403bab35f964c2933adea) mstore(0x4320, 0x1b957ffe9eee2e38474fc73d00762637eb2f42f93dbd63b07ac3a7a80d01fcd8)mstore(0x4340, mload(0x3b40))success := and(eq(staticcall(gas(), 0x7, 0x4300, 0x60, 0x4300, 0x40), 1), success)mstore(0x4360, mload(0x4280)) mstore(0x4380, mload(0x42a0))mstore(0x43a0, mload(0x4300)) mstore(0x43c0, mload(0x4320))success := and(eq(staticcall(gas(), 0x6, 0x4360, 0x80, 0x4360, 0x40), 1), success)mstore(0x43e0, 0x1c0d239ee9e8daa18d0898f4091a6d571e50441d852906e11d0fae1d1dedb1fb) mstore(0x4400, 0x0749d3ee27e89e899d6b17981c477f185f713dc32c470a6b8ebfae12370a852d)mstore(0x4420, mload(0x3b60))success := and(eq(staticcall(gas(), 0x7, 0x43e0, 0x60, 0x43e0, 0x40), 1), success)mstore(0x4440, mload(0x4360)) mstore(0x4460, mload(0x4380))mstore(0x4480, mload(0x43e0)) mstore(0x44a0, mload(0x4400))success := and(eq(staticcall(gas(), 0x6, 0x4440, 0x80, 0x4440, 0x40), 1), success)mstore(0x44c0, 0x2be7bc0c93949aaf2165975ee11a8dac7a848510b8dbb3d07df1e97bf5c7d299) mstore(0x44e0, 0x2e0a12eab15526f01ee7f16166df315920eae20f49d2507431101ea98f4a17cd)mstore(0x4500, mload(0x3b80))success := and(eq(staticcall(gas(), 0x7, 0x44c0, 0x60, 0x44c0, 0x40), 1), success)mstore(0x4520, mload(0x4440)) mstore(0x4540, mload(0x4460))mstore(0x4560, mload(0x44c0)) mstore(0x4580, mload(0x44e0))success := and(eq(staticcall(gas(), 0x6, 0x4520, 0x80, 0x4520, 0x40), 1), success)mstore(0x45a0, 0x28730fcfa4e1791ce13e428c901bff6c476187f0ea04d422f623f16b58296254) mstore(0x45c0, 0x1872c5dde77a52f2641090fbd7c2a11e8d12f919017d70a4fe57e588ead44527)mstore(0x45e0, mload(0x3ba0))success := and(eq(staticcall(gas(), 0x7, 0x45a0, 0x60, 0x45a0, 0x40), 1), success)mstore(0x4600, mload(0x4520)) mstore(0x4620, mload(0x4540))mstore(0x4640, mload(0x45a0)) mstore(0x4660, mload(0x45c0))success := and(eq(staticcall(gas(), 0x6, 0x4600, 0x80, 0x4600, 0x40), 1), success)mstore(0x4680, 0x02d518a4f6d68ae5997ad24fe8b58068acb972cfe8b250ab82e5390d91914950) mstore(0x46a0, 0x0695bba443e1eeed7cf440186dde2e72ebf1ec3f84d8baf57ee1cbe7f36df70d)mstore(0x46c0, mload(0x3bc0))success := and(eq(staticcall(gas(), 0x7, 0x4680, 0x60, 0x4680, 0x40), 1), success)mstore(0x46e0, mload(0x4600)) mstore(0x4700, mload(0x4620))mstore(0x4720, mload(0x4680)) mstore(0x4740, mload(0x46a0))success := and(eq(staticcall(gas(), 0x6, 0x46e0, 0x80, 0x46e0, 0x40), 1), success)mstore(0x4760, mload(0x560)) mstore(0x4780, mload(0x580))mstore(0x47a0, mload(0x3be0))success := and(eq(staticcall(gas(), 0x7, 0x4760, 0x60, 0x4760, 0x40), 1), success)mstore(0x47c0, mload(0x46e0)) mstore(0x47e0, mload(0x4700))mstore(0x4800, mload(0x4760)) mstore(0x4820, mload(0x4780))success := and(eq(staticcall(gas(), 0x6, 0x47c0, 0x80, 0x47c0, 0x40), 1), success)mstore(0x4840, mload(0x5a0)) mstore(0x4860, mload(0x5c0))mstore(0x4880, mload(0x3c00))success := and(eq(staticcall(gas(), 0x7, 0x4840, 0x60, 0x4840, 0x40), 1), success)mstore(0x48a0, mload(0x47c0)) mstore(0x48c0, mload(0x47e0))mstore(0x48e0, mload(0x4840)) mstore(0x4900, mload(0x4860))success := and(eq(staticcall(gas(), 0x6, 0x48a0, 0x80, 0x48a0, 0x40), 1), success)mstore(0x4920, mload(0x5e0)) mstore(0x4940, mload(0x600))mstore(0x4960, mload(0x3c20))success := and(eq(staticcall(gas(), 0x7, 0x4920, 0x60, 0x4920, 0x40), 1), success)mstore(0x4980, mload(0x48a0)) mstore(0x49a0, mload(0x48c0))mstore(0x49c0, mload(0x4920)) mstore(0x49e0, mload(0x4940))success := and(eq(staticcall(gas(), 0x6, 0x4980, 0x80, 0x4980, 0x40), 1), success)mstore(0x4a00, mload(0x620)) mstore(0x4a20, mload(0x640))mstore(0x4a40, mload(0x3c40))success := and(eq(staticcall(gas(), 0x7, 0x4a00, 0x60, 0x4a00, 0x40), 1), success)mstore(0x4a60, mload(0x4980)) mstore(0x4a80, mload(0x49a0))mstore(0x4aa0, mload(0x4a00)) mstore(0x4ac0, mload(0x4a20))success := and(eq(staticcall(gas(), 0x6, 0x4a60, 0x80, 0x4a60, 0x40), 1), success)mstore(0x4ae0, mload(0x4c0)) mstore(0x4b00, mload(0x4e0))mstore(0x4b20, mload(0x3c60))success := and(eq(staticcall(gas(), 0x7, 0x4ae0, 0x60, 0x4ae0, 0x40), 1), success)mstore(0x4b40, mload(0x4a60)) mstore(0x4b60, mload(0x4a80))mstore(0x4b80, mload(0x4ae0)) mstore(0x4ba0, mload(0x4b00))success := and(eq(staticcall(gas(), 0x6, 0x4b40, 0x80, 0x4b40, 0x40), 1), success)mstore(0x4bc0, mload(0x9e0)) mstore(0x4be0, mload(0xa00))mstore(0x4c00, sub(f_q, mload(0x3ca0)))success := and(eq(staticcall(gas(), 0x7, 0x4bc0, 0x60, 0x4bc0, 0x40), 1), success)mstore(0x4c20, mload(0x4b40)) mstore(0x4c40, mload(0x4b60))mstore(0x4c60, mload(0x4bc0)) mstore(0x4c80, mload(0x4be0))success := and(eq(staticcall(gas(), 0x6, 0x4c20, 0x80, 0x4c20, 0x40), 1), success)mstore(0x4ca0, mload(0xa80)) mstore(0x4cc0, mload(0xaa0))mstore(0x4ce0, mload(0x3cc0))success := and(eq(staticcall(gas(), 0x7, 0x4ca0, 0x60, 0x4ca0, 0x40), 1), success)mstore(0x4d00, mload(0x4c20)) mstore(0x4d20, mload(0x4c40))mstore(0x4d40, mload(0x4ca0)) mstore(0x4d60, mload(0x4cc0))success := and(eq(staticcall(gas(), 0x6, 0x4d00, 0x80, 0x4d00, 0x40), 1), success)mstore(0x4d80, mload(0x4d00)) mstore(0x4da0, mload(0x4d20))mstore(0x4dc0, mload(0xa80)) mstore(0x4de0, mload(0xaa0))mstore(0x4e00, mload(0xac0)) mstore(0x4e20, mload(0xae0))mstore(0x4e40, mload(0xb00)) mstore(0x4e60, mload(0xb20))mstore(0x4e80, keccak256(0x4d80, 256))mstore(0x4ea0, mod(mload(19968), f_q))mstore(0x4ec0, mulmod(mload(0x4ea0), mload(0x4ea0), f_q))mstore(0x4ee0, mulmod(1, mload(0x4ea0), f_q))mstore(0x4f00, mload(0x4e00)) mstore(0x4f20, mload(0x4e20))mstore(0x4f40, mload(0x4ee0))success := and(eq(staticcall(gas(), 0x7, 0x4f00, 0x60, 0x4f00, 0x40), 1), success)mstore(0x4f60, mload(0x4d80)) mstore(0x4f80, mload(0x4da0))mstore(0x4fa0, mload(0x4f00)) mstore(0x4fc0, mload(0x4f20))success := and(eq(staticcall(gas(), 0x6, 0x4f60, 0x80, 0x4f60, 0x40), 1), success)mstore(0x4fe0, mload(0x4e40)) mstore(0x5000, mload(0x4e60))mstore(0x5020, mload(0x4ee0))success := and(eq(staticcall(gas(), 0x7, 0x4fe0, 0x60, 0x4fe0, 0x40), 1), success)mstore(0x5040, mload(0x4dc0)) mstore(0x5060, mload(0x4de0))mstore(0x5080, mload(0x4fe0)) mstore(0x50a0, mload(0x5000))success := and(eq(staticcall(gas(), 0x6, 0x5040, 0x80, 0x5040, 0x40), 1), success)mstore(0x50c0, mload(0x4f60)) mstore(0x50e0, mload(0x4f80))mstore(0x5100, 0x198e9393920d483a7260bfb731fb5d25f1aa493335a9e71297e485b7aef312c2) mstore(0x5120, 0x1800deef121f1e76426a00665e5c4479674322d4f75edadd46debd5cd992f6ed) mstore(0x5140, 0x090689d0585ff075ec9e99ad690c3395bc4b313370b38ef355acdadcd122975b) mstore(0x5160, 0x12c85ea5db8c6deb4aab71808dcb408fe3d1e7690c43d37b4ce6cc0166fa7daa)mstore(0x5180, mload(0x5040)) mstore(0x51a0, mload(0x5060))mstore(0x51c0, 0x0181624e80f3d6ae28df7e01eaeab1c0e919877a3b8a6b7fbc69a6817d596ea2) mstore(0x51e0, 0x1783d30dcb12d259bb89098addf6280fa4b653be7a152542a28f7b926e27e648) mstore(0x5200, 0x00ae44489d41a0d179e2dfdc03bddd883b7109f8b6ae316a59e815c1a6b35304) mstore(0x5220, 0x0b2147ab62a386bd63e6de1522109b8c9588ab466f5aadfde8c41ca3749423ee)success := and(eq(staticcall(gas(), 0x8, 0x50c0, 0x180, 0x50c0, 0x20), 1), success)success := and(eq(mload(0x50c0), 1), success)} return success; } } diff --git a/justfile b/justfile index bac1b92..684a717 100644 --- a/justfile +++ b/justfile @@ -17,22 +17,22 @@ setup-step network *k='22': cargo run -r -- circuit sync-step -p ./build/sync_step_$1.pkey -k $2 setup setup-step-compressed network *k='23': - cargo run -r -- circuit sync-step-compressed -p ./build/sync_step_$1.pkey -k 21 \ - --verifier-k $2 --verifier-pk-path ./build/sync_step_verifier_$1.pkey setup + cargo run -r -- circuit sync-step-compressed -k 20 -p ./build/sync_step_$1.pkey \ + -K $2 -P ./build/sync_step_verifier_$1.pkey -L 19 setup -setup-committee-update network *k='25': - cargo run -r -- circuit committee-update -p ./build/committee_update_$1.pkey -k 18 \ - --verifier-k $2 --verifier-pk-path ./build/committee_update_verifier_$1.pkey setup +setup-committee-update network *k='24': + cargo run -r -- circuit committee-update -k 20 -p ./build/committee_update_$1.pkey \ + -K $2 -P ./build/committee_update_verifier_$1.pkey setup gen-verifier-step network: cargo run -r -- circuit sync-step -p ./build/sync_step_$1.pkey gen-verifier -o ./contracts/snark-verifiers/sync_step.sol gen-verifier-step-compressed network: - cargo run -r -- circuit sync-step-compressed -p ./build/sync_step_$1.pkey --verifier-pk-path ./build/sync_step_verifier_$1.pkey \ + cargo run -r -- circuit sync-step-compressed -p ./build/sync_step_$1.pkey -P ./build/sync_step_verifier_$1.pkey \ gen-verifier -o ./contracts/snark-verifiers/sync_step_verifier.sol gen-verifier-committee-update network: - cargo run -r -- circuit committee-update -p ./build/committee_update_$1.pkey --verifier-pk-path ./build/committee_update_verifier_$1.pkey \ + cargo run -r -- circuit committee-update -p ./build/committee_update_$1.pkey -P ./build/committee_update_verifier_$1.pkey \ gen-verifier -o ./contracts/snark-verifiers/committee_update_verifier.sol build-contracts: diff --git a/lightclient-circuits/config/committee_update_testnet.json b/lightclient-circuits/config/committee_update_testnet.json index 2f358bb..4bea29b 100644 --- a/lightclient-circuits/config/committee_update_testnet.json +++ b/lightclient-circuits/config/committee_update_testnet.json @@ -1,8 +1,8 @@ { "params": { - "k": 18, + "k": 20, "num_advice_per_phase": [ - 7 + 2 ], "num_fixed": 1, "num_lookup_advice_per_phase": [ @@ -10,17 +10,12 @@ 0, 0 ], - "lookup_bits": 17, + "lookup_bits": 19, "num_instance_columns": 1 }, "break_points": [ [ - 262134, - 262134, - 262134, - 262133, - 262134, - 262134 + 1048566 ] ] -} +} \ No newline at end of file diff --git a/lightclient-circuits/config/committee_update_verifier_testnet.json b/lightclient-circuits/config/committee_update_verifier_testnet.json index 6d34e36..c38fdce 100644 --- a/lightclient-circuits/config/committee_update_verifier_testnet.json +++ b/lightclient-circuits/config/committee_update_verifier_testnet.json @@ -1,12 +1,12 @@ { "params": { - "degree": 25, + "degree": 24, "num_advice": 1, "num_lookup_advice": 1, "num_fixed": 1, - "lookup_bits": 8 + "lookup_bits": 23 }, "break_points": [ [] ] -} +} \ No newline at end of file diff --git a/lightclient-circuits/config/sync_step_testnet.json b/lightclient-circuits/config/sync_step_testnet.json index 216bbeb..a1396fe 100644 --- a/lightclient-circuits/config/sync_step_testnet.json +++ b/lightclient-circuits/config/sync_step_testnet.json @@ -1,25 +1,31 @@ { "params": { - "k": 21, + "k": 20, "num_advice_per_phase": [ - 6 + 12 ], "num_fixed": 1, "num_lookup_advice_per_phase": [ - 1, + 2, 0, 0 ], - "lookup_bits": 20, + "lookup_bits": 19, "num_instance_columns": 1 }, "break_points": [ [ - 2097142, - 2097142, - 2097140, - 2097142, - 2097142 + 1048566, + 1048564, + 1048566, + 1048566, + 1048565, + 1048566, + 1048566, + 1048566, + 1048564, + 1048566, + 1048566 ] ] -} +} \ No newline at end of file diff --git a/lightclient-circuits/config/sync_step_verifier_testnet.json b/lightclient-circuits/config/sync_step_verifier_testnet.json index a20e123..f64047e 100644 --- a/lightclient-circuits/config/sync_step_verifier_testnet.json +++ b/lightclient-circuits/config/sync_step_verifier_testnet.json @@ -1,12 +1,12 @@ { - "params": { - "degree": 23, - "num_advice": 1, - "num_lookup_advice": 1, - "num_fixed": 1, - "lookup_bits": 8 - }, - "break_points": [ - [] - ] - } + "params": { + "degree": 23, + "num_advice": 1, + "num_lookup_advice": 1, + "num_fixed": 1, + "lookup_bits": 19 + }, + "break_points": [ + [] + ] +} \ No newline at end of file diff --git a/lightclient-circuits/tests/step.rs b/lightclient-circuits/tests/step.rs index 71a9703..080f249 100644 --- a/lightclient-circuits/tests/step.rs +++ b/lightclient-circuits/tests/step.rs @@ -26,7 +26,7 @@ fn test_eth2_spec_mock_1( #[exclude("deneb*")] path: PathBuf, ) { - run_test_eth2_spec_mock::<18, 20>(path) + run_test_eth2_spec_mock::<18, 19>(path) } fn run_test_eth2_spec_mock(path: PathBuf) { diff --git a/prover/src/args.rs b/prover/src/args.rs index 165ab76..5f77a36 100644 --- a/prover/src/args.rs +++ b/prover/src/args.rs @@ -66,10 +66,10 @@ pub enum ProofCmd { #[clap(long, short)] pk_path: PathBuf, - #[clap(long, default_value = "23")] + #[clap(short='K', long, default_value = "23")] verifier_k: u32, - #[clap(long)] + #[clap(short='P', long)] verifier_pk_path: PathBuf, #[clap(short = 'L', long)] @@ -85,10 +85,10 @@ pub enum ProofCmd { #[clap(long, short)] pk_path: PathBuf, - #[clap(long, default_value = "24")] + #[clap(short='K', long, default_value = "24")] verifier_k: u32, - #[clap(long)] + #[clap(short='P', long)] verifier_pk_path: PathBuf, #[clap(short = 'L', long)] From 6ad5044c8d6394bbdd34b41c8fc673b23abd5d54 Mon Sep 17 00:00:00 2001 From: Timofey Luin Date: Fri, 15 Dec 2023 13:59:50 +0100 Subject: [PATCH 3/4] add missing license headers --- contracts/script/DeploySpectre.s.sol | 5 ++++- contracts/script/DeploySpectreTestnet.s.sol | 5 ++++- contracts/script/deploy_local.sh | 4 ---- contracts/script/deploy_testnet.sh | 4 ---- contracts/src/EndianConversions.sol | 5 ++++- contracts/src/RotateLib.sol | 5 ++++- contracts/src/Spectre.sol | 5 ++++- contracts/src/SyncStepLib.sol | 5 ++++- contracts/src/interfaces/CommitteeUpdateVerifier.sol | 5 ++++- contracts/src/interfaces/SyncStepVerifier.sol | 5 ++++- contracts/src/mocks/CommitteeUpdateMockVerifier.sol | 5 ++++- contracts/src/mocks/SyncStepMockVerifier.sol | 5 ++++- contracts/test/RotateExternal.sol | 5 ++++- contracts/test/SyncStepExternal.sol | 5 ++++- preprocessor/scripts/generateTestData.ts | 4 ---- preprocessor/scripts/util.ts | 4 ---- test-utils/scripts/download_consensus_specs.sh | 4 ---- 17 files changed, 48 insertions(+), 32 deletions(-) diff --git a/contracts/script/DeploySpectre.s.sol b/contracts/script/DeploySpectre.s.sol index 49b49a1..bcb4a90 100644 --- a/contracts/script/DeploySpectre.s.sol +++ b/contracts/script/DeploySpectre.s.sol @@ -1,4 +1,7 @@ -// SPDX-License-Identifier: MIT +// The Licensed Work is (c) 2023 ChainSafe +// Code: https://github.com/ChainSafe/Spectre +// SPDX-License-Identifier: LGPL-3.0-only + pragma solidity ^0.8.0; import "forge-std/Script.sol"; diff --git a/contracts/script/DeploySpectreTestnet.s.sol b/contracts/script/DeploySpectreTestnet.s.sol index 64f03c5..e03c78d 100644 --- a/contracts/script/DeploySpectreTestnet.s.sol +++ b/contracts/script/DeploySpectreTestnet.s.sol @@ -1,4 +1,7 @@ -// SPDX-License-Identifier: MIT +// The Licensed Work is (c) 2023 ChainSafe +// Code: https://github.com/ChainSafe/Spectre +// SPDX-License-Identifier: LGPL-3.0-only + pragma solidity ^0.8.0; import "forge-std/Script.sol"; diff --git a/contracts/script/deploy_local.sh b/contracts/script/deploy_local.sh index b8fe726..6132d7a 100644 --- a/contracts/script/deploy_local.sh +++ b/contracts/script/deploy_local.sh @@ -1,7 +1,3 @@ -# The Licensed Work is (c) 2023 ChainSafe -# Code: https://github.com/ChainSafe/Spectre -# SPDX-License-Identifier: LGPL-3.0-only - #!/bin/sh cd $(git rev-parse --show-toplevel) source .env diff --git a/contracts/script/deploy_testnet.sh b/contracts/script/deploy_testnet.sh index e64fcb4..a435ad4 100644 --- a/contracts/script/deploy_testnet.sh +++ b/contracts/script/deploy_testnet.sh @@ -1,7 +1,3 @@ -# The Licensed Work is (c) 2023 ChainSafe -# Code: https://github.com/ChainSafe/Spectre -# SPDX-License-Identifier: LGPL-3.0-only - #!/bin/sh cd $(git rev-parse --show-toplevel) source .env diff --git a/contracts/src/EndianConversions.sol b/contracts/src/EndianConversions.sol index 706a9b5..e12bd7b 100644 --- a/contracts/src/EndianConversions.sol +++ b/contracts/src/EndianConversions.sol @@ -1,4 +1,7 @@ -// SPDX-License-Identifier: MIT +// The Licensed Work is (c) 2023 ChainSafe +// Code: https://github.com/ChainSafe/Spectre +// SPDX-License-Identifier: LGPL-3.0-only + pragma solidity ^0.8.0; library EndianConversions { diff --git a/contracts/src/RotateLib.sol b/contracts/src/RotateLib.sol index 5bdb38e..e97a844 100644 --- a/contracts/src/RotateLib.sol +++ b/contracts/src/RotateLib.sol @@ -1,4 +1,7 @@ -// SPDX-License-Identifier: MIT +// The Licensed Work is (c) 2023 ChainSafe +// Code: https://github.com/ChainSafe/Spectre +// SPDX-License-Identifier: LGPL-3.0-only + pragma solidity ^0.8.0; import { EndianConversions } from "./EndianConversions.sol"; diff --git a/contracts/src/Spectre.sol b/contracts/src/Spectre.sol index fda21cb..88ef4d0 100644 --- a/contracts/src/Spectre.sol +++ b/contracts/src/Spectre.sol @@ -1,4 +1,7 @@ -// SPDX-License-Identifier: MIT +// The Licensed Work is (c) 2023 ChainSafe +// Code: https://github.com/ChainSafe/Spectre +// SPDX-License-Identifier: LGPL-3.0-only + pragma solidity ^0.8.0; import {SyncStepLib} from "./SyncStepLib.sol"; diff --git a/contracts/src/SyncStepLib.sol b/contracts/src/SyncStepLib.sol index c29d22b..838de73 100644 --- a/contracts/src/SyncStepLib.sol +++ b/contracts/src/SyncStepLib.sol @@ -1,4 +1,7 @@ -// SPDX-License-Identifier: MIT +// The Licensed Work is (c) 2023 ChainSafe +// Code: https://github.com/ChainSafe/Spectre +// SPDX-License-Identifier: LGPL-3.0-only + pragma solidity ^0.8.0; import { EndianConversions } from "./EndianConversions.sol"; diff --git a/contracts/src/interfaces/CommitteeUpdateVerifier.sol b/contracts/src/interfaces/CommitteeUpdateVerifier.sol index 1fa8d7f..3ca1356 100644 --- a/contracts/src/interfaces/CommitteeUpdateVerifier.sol +++ b/contracts/src/interfaces/CommitteeUpdateVerifier.sol @@ -1,4 +1,7 @@ -// SPDX-License-Identifier: MIT +// The Licensed Work is (c) 2023 ChainSafe +// Code: https://github.com/ChainSafe/Spectre +// SPDX-License-Identifier: LGPL-3.0-only + pragma solidity ^0.8.0; interface CommitteeUpdateVerifier { diff --git a/contracts/src/interfaces/SyncStepVerifier.sol b/contracts/src/interfaces/SyncStepVerifier.sol index aa73874..354a23a 100644 --- a/contracts/src/interfaces/SyncStepVerifier.sol +++ b/contracts/src/interfaces/SyncStepVerifier.sol @@ -1,4 +1,7 @@ -// SPDX-License-Identifier: MIT +// The Licensed Work is (c) 2023 ChainSafe +// Code: https://github.com/ChainSafe/Spectre +// SPDX-License-Identifier: LGPL-3.0-only + pragma solidity ^0.8.0; interface SyncStepVerifier { diff --git a/contracts/src/mocks/CommitteeUpdateMockVerifier.sol b/contracts/src/mocks/CommitteeUpdateMockVerifier.sol index 0fdbe71..674b1cc 100644 --- a/contracts/src/mocks/CommitteeUpdateMockVerifier.sol +++ b/contracts/src/mocks/CommitteeUpdateMockVerifier.sol @@ -1,5 +1,8 @@ -// SPDX-License-Identifier: MIT +// The Licensed Work is (c) 2023 ChainSafe +// Code: https://github.com/ChainSafe/Spectre +// SPDX-License-Identifier: LGPL-3.0-only + pragma solidity ^0.8.0; import { CommitteeUpdateVerifier } from "../interfaces/CommitteeUpdateVerifier.sol"; diff --git a/contracts/src/mocks/SyncStepMockVerifier.sol b/contracts/src/mocks/SyncStepMockVerifier.sol index bf8f13f..c7d1800 100644 --- a/contracts/src/mocks/SyncStepMockVerifier.sol +++ b/contracts/src/mocks/SyncStepMockVerifier.sol @@ -1,5 +1,8 @@ -// SPDX-License-Identifier: MIT +// The Licensed Work is (c) 2023 ChainSafe +// Code: https://github.com/ChainSafe/Spectre +// SPDX-License-Identifier: LGPL-3.0-only + pragma solidity ^0.8.0; import { SyncStepVerifier, SyncStepCompressedVerifier } from "../interfaces/SyncStepVerifier.sol"; diff --git a/contracts/test/RotateExternal.sol b/contracts/test/RotateExternal.sol index 2101161..e9a29b9 100644 --- a/contracts/test/RotateExternal.sol +++ b/contracts/test/RotateExternal.sol @@ -1,4 +1,7 @@ -// SPDX-License-Identifier: MIT +// The Licensed Work is (c) 2023 ChainSafe +// Code: https://github.com/ChainSafe/Spectre +// SPDX-License-Identifier: LGPL-3.0-only + pragma solidity 0.8.19; import { RotateLib } from "../src/RotateLib.sol"; diff --git a/contracts/test/SyncStepExternal.sol b/contracts/test/SyncStepExternal.sol index f5dd019..ec021f3 100644 --- a/contracts/test/SyncStepExternal.sol +++ b/contracts/test/SyncStepExternal.sol @@ -1,4 +1,7 @@ -// SPDX-License-Identifier: MIT +// The Licensed Work is (c) 2023 ChainSafe +// Code: https://github.com/ChainSafe/Spectre +// SPDX-License-Identifier: LGPL-3.0-only + pragma solidity 0.8.19; import {SyncStepLib} from "../src/SyncStepLib.sol"; diff --git a/preprocessor/scripts/generateTestData.ts b/preprocessor/scripts/generateTestData.ts index 3c65013..780c3ea 100644 --- a/preprocessor/scripts/generateTestData.ts +++ b/preprocessor/scripts/generateTestData.ts @@ -1,7 +1,3 @@ -// The Licensed Work is (c) 2023 ChainSafe -// Code: https://github.com/ChainSafe/Spectre -// SPDX-License-Identifier: LGPL-3.0-only - import fs from "fs"; import { bls12_381 } from '@noble/curves/bls12-381' import { diff --git a/preprocessor/scripts/util.ts b/preprocessor/scripts/util.ts index 4f02407..885a5a7 100644 --- a/preprocessor/scripts/util.ts +++ b/preprocessor/scripts/util.ts @@ -1,7 +1,3 @@ -// The Licensed Work is (c) 2023 ChainSafe -// Code: https://github.com/ChainSafe/Spectre -// SPDX-License-Identifier: LGPL-3.0-only - import { GindexBitstring } from "@chainsafe/persistent-merkle-tree"; import { ProjPointType } from "@noble/curves/abstract/weierstrass"; diff --git a/test-utils/scripts/download_consensus_specs.sh b/test-utils/scripts/download_consensus_specs.sh index 3d544b8..8f9200b 100644 --- a/test-utils/scripts/download_consensus_specs.sh +++ b/test-utils/scripts/download_consensus_specs.sh @@ -1,7 +1,3 @@ -# The Licensed Work is (c) 2023 ChainSafe -# Code: https://github.com/ChainSafe/Spectre -# SPDX-License-Identifier: LGPL-3.0-only - #!/bin/bash TESTS_TAG=v1.3.0 REPO_NAME=consensus-spec-tests From 8231818968e64b07bc7ce4885ebaecf0cbd0504b Mon Sep 17 00:00:00 2001 From: Timofey Luin Date: Fri, 15 Dec 2023 14:09:21 +0100 Subject: [PATCH 4/4] fix CI --- justfile | 2 +- .../src/committee_update_circuit.rs | 2 +- lightclient-circuits/src/sync_step_circuit.rs | 10 +-- lightclient-circuits/tests/step.rs | 76 +++++++++++++++---- 4 files changed, 68 insertions(+), 22 deletions(-) diff --git a/justfile b/justfile index 684a717..469de5e 100644 --- a/justfile +++ b/justfile @@ -51,7 +51,7 @@ download-spec-tests: clean-spec-tests #!/usr/bin/env bash if [[ ! -d 'consensus-spec-tests' ]]; then echo "Downloading test data." - test-utils/scripts/download_consensus_specs.sh + bash test-utils/scripts/download_consensus_specs.sh fi # deletes all the downloaded spec tests diff --git a/lightclient-circuits/src/committee_update_circuit.rs b/lightclient-circuits/src/committee_update_circuit.rs index 36e6da8..4a7f956 100644 --- a/lightclient-circuits/src/committee_update_circuit.rs +++ b/lightclient-circuits/src/committee_update_circuit.rs @@ -46,7 +46,7 @@ pub struct CommitteeUpdateCircuit { } impl CommitteeUpdateCircuit { - fn synthesize( + pub fn synthesize( builder: &mut ShaCircuitBuilder>, fp_chip: &FpChip, args: &witness::CommitteeUpdateArgs, diff --git a/lightclient-circuits/src/sync_step_circuit.rs b/lightclient-circuits/src/sync_step_circuit.rs index 5ded6e9..541d132 100644 --- a/lightclient-circuits/src/sync_step_circuit.rs +++ b/lightclient-circuits/src/sync_step_circuit.rs @@ -63,7 +63,7 @@ pub struct StepCircuit { } impl StepCircuit { - fn synthesize( + pub fn synthesize( builder: &mut ShaCircuitBuilder>, fp_chip: &FpChip, args: &witness::SyncStepArgs, @@ -439,6 +439,7 @@ impl AppCircuit for StepCircuit { } } + #[cfg(test)] mod tests { use std::fs; @@ -515,7 +516,7 @@ mod tests { "../build/sync_step_22.pkey", "./config/sync_step_22.json", &SyncStepArgs::::default(), - None + None, ); let witness = load_circuit_args(); @@ -558,7 +559,7 @@ mod tests { APP_PK_PATH, APP_PINNING_PATH, &SyncStepArgs::::default(), - None + None, ); let witness = load_circuit_args(); @@ -578,8 +579,7 @@ mod tests { AGG_PK_PATH, AGG_CONFIG_PATH, &vec![snark.clone()], - Some(AggregationConfigPinning::new(AGG_K, 19)) - + Some(AggregationConfigPinning::new(AGG_K, 19)), ); let agg_config = AggregationConfigPinning::from_path(AGG_CONFIG_PATH); diff --git a/lightclient-circuits/tests/step.rs b/lightclient-circuits/tests/step.rs index 080f249..7d4308a 100644 --- a/lightclient-circuits/tests/step.rs +++ b/lightclient-circuits/tests/step.rs @@ -4,18 +4,24 @@ use ark_std::{end_timer, start_timer}; use eth_types::{Minimal, LIMB_BITS}; +use eth_types::{Spec, NUM_LIMBS}; use halo2_base::gates::circuit::CircuitBuilderStage; use halo2_base::halo2_proofs::dev::MockProver; use halo2_base::halo2_proofs::halo2curves::bn256; use halo2_base::utils::fs::gen_srs; +use halo2_ecc::bls12_381::FpChip; use lightclient_circuits::committee_update_circuit::CommitteeUpdateCircuit; +use lightclient_circuits::gadget::crypto::{ShaBitGateManager, ShaFlexGateManager}; use lightclient_circuits::sync_step_circuit::StepCircuit; use lightclient_circuits::util::AppCircuit; use lightclient_circuits::util::Eth2ConfigPinning; use lightclient_circuits::util::Halo2ConfigPinning; +use lightclient_circuits::witness::CommitteeUpdateArgs; use lightclient_circuits::witness::SyncStepArgs; +use lightclient_circuits::Eth2CircuitBuilder; use rstest::rstest; use snark_verifier_sdk::CircuitExt; +use std::env::var; use std::path::PathBuf; use test_utils::read_test_files_and_gen_witness; @@ -29,16 +35,62 @@ fn test_eth2_spec_mock_1( run_test_eth2_spec_mock::<18, 19>(path) } +// Same as StepCircuit::create_circuit without loading SRS which fails CI. +pub(crate) fn mock_step_circuit( + args: &SyncStepArgs, + k: u32, + lookup_bits: Option, +) -> impl lightclient_circuits::util::PinnableCircuit { + let mut builder = + Eth2CircuitBuilder::>::from_stage(CircuitBuilderStage::Mock) + .use_k(k as usize) + .use_instance_columns(1); + let range = builder.range_chip(lookup_bits.unwrap_or(k as usize - 1)); + let fp_chip = FpChip::new(&range, LIMB_BITS, NUM_LIMBS); + + let assigned_instances = + StepCircuit::::synthesize(&mut builder, &fp_chip, args).unwrap(); + builder.set_instances(0, assigned_instances); + + builder.calculate_params(Some( + var("MINIMUM_ROWS") + .unwrap_or_else(|_| "0".to_string()) + .parse() + .unwrap(), + )); + builder +} + +// Same as CommitteeUpdateCircuit::create_circuit without loading SRS which fails CI. +pub(crate) fn mock_committee_update_circuit( + witness: &CommitteeUpdateArgs, + k: u32, + lookup_bits: Option, +) -> impl lightclient_circuits::util::PinnableCircuit { + let mut builder = + Eth2CircuitBuilder::>::from_stage(CircuitBuilderStage::Mock) + .use_k(k as usize) + .use_instance_columns(1); + let range = builder.range_chip(lookup_bits.unwrap_or(k as usize - 1)); + let fp_chip = FpChip::new(&range, LIMB_BITS, NUM_LIMBS); + + let assigned_instances = + CommitteeUpdateCircuit::::synthesize(&mut builder, &fp_chip, witness) + .unwrap(); + builder.set_instances(0, assigned_instances); + builder.calculate_params(Some( + var("MINIMUM_ROWS") + .unwrap_or_else(|_| "0".to_string()) + .parse() + .unwrap(), + )); + builder +} + fn run_test_eth2_spec_mock(path: PathBuf) { let (sync_witness, rotation_witness) = read_test_files_and_gen_witness(&path); - let rotation_circuit = CommitteeUpdateCircuit::::mock_circuit( - CircuitBuilderStage::Mock, - None, - &rotation_witness, - K_ROTATION, - ) - .unwrap(); + let rotation_circuit = mock_committee_update_circuit(&rotation_witness, K_ROTATION, None); let timer = start_timer!(|| "committee_update mock prover run"); let prover = MockProver::::run( @@ -50,13 +102,7 @@ fn run_test_eth2_spec_mock(path: PathB prover.assert_satisfied_par(); end_timer!(timer); - let sync_circuit = StepCircuit::::mock_circuit( - CircuitBuilderStage::Mock, - None, - &sync_witness, - K_SYNC, - ) - .unwrap(); + let sync_circuit = mock_step_circuit(&sync_witness, K_SYNC, None); let instance = StepCircuit::::get_instances(&sync_witness, LIMB_BITS); @@ -107,7 +153,7 @@ fn test_eth2_spec_evm_verify( "../build/sync_step_21.pkey", "./config/sync_step_21.json", &SyncStepArgs::::default(), - None + None, ); let (witness, _) = read_test_files_and_gen_witness(&path);