user: 请显示与下面列出的汇编代码相匹配的C语言实现：

```asm
<replaceEvents>:
  endbr64
  push   %rbp
  lea    D112(%rip),%rsi
  mov    %rdi,%rbp
  call   <strcmp@plt>
  test   %rax,%rax
  jne    L42
  mov    %rbp,%rdi
  mov    $0x100,%edx
  lea    D27(%rip),%rsi
  pop    %rbp
  jmp    1060 <strncpy@plt>
  xchg   %ax,%ax
L42:
  lea    D110(%rip),%rsi
  mov    %rbp,%rdi
  call   <strcmp@plt>
  test   %rax,%rax
  jne    L36
  mov    %rbp,%rdi
  mov    $0x100,%edx
  lea    D155(%rip),%rsi
  pop    %rbp
  jmp    1060 <strncpy@plt>
  nopl   0x0(%rax)
L36:
  lea    D4(%rip),%rsi
  mov    %rbp,%rdi
  call   <strcmp@plt>
  test   %rax,%rax
  je     L44
  lea    D158(%rip),%rsi
  mov    %rbp,%rdi
  call   <strcmp@plt>
  test   %rax,%rax
  jne    L10
  mov    %rbp,%rdi
  mov    $0x100,%edx
  lea    D45(%rip),%rsi
  pop    %rbp
  jmp    1060 <strncpy@plt>
  nopl   (%rax)
L44:
  mov    %rbp,%rdi
  mov    $0x100,%edx
  lea    D150(%rip),%rsi
  pop    %rbp
  jmp    1060 <strncpy@plt>
  nopl   (%rax)
L10:
  lea    D6(%rip),%rsi
  mov    %rbp,%rdi
  call   <strcmp@plt>
  test   %rax,%rax
  je     L18
  lea    D59(%rip),%rsi
  mov    %rbp,%rdi
  call   <strcmp@plt>
  test   %rax,%rax
  jne    L12
  mov    %rbp,%rdi
  mov    $0x100,%edx
  lea    D144(%rip),%rsi
  pop    %rbp
  jmp    1060 <strncpy@plt>
  nopl   (%rax)
L18:
  mov    %rbp,%rdi
  mov    $0x100,%edx
  lea    D37(%rip),%rsi
  pop    %rbp
  jmp    1060 <strncpy@plt>
  nopl   (%rax)
L12:
  lea    D23(%rip),%rsi
  mov    %rbp,%rdi
  call   <strcmp@plt>
  test   %rax,%rax
  jne    L66
  mov    %rbp,%rdi
  mov    $0x100,%edx
  lea    D108(%rip),%rsi
  pop    %rbp
  jmp    1060 <strncpy@plt>
L66:
  lea    D76(%rip),%rsi
  mov    %rbp,%rdi
  call   <strcmp@plt>
  test   %rax,%rax
  je     L19
  pop    %rbp
  ret
L19:
  mov    %rbp,%rdi
  mov    $0x100,%edx
  lea    D86(%rip),%rsi
  pop    %rbp
  jmp    1060 <strncpy@plt>
```

tool_calls: name: extract_symbolic_data
arguments: tag: D112
datatype: string
name: extract_symbolic_data
arguments: tag: D27
datatype: string
name: extract_symbolic_data
arguments: tag: D110
datatype: string
name: extract_symbolic_data
arguments: tag: D155
datatype: string
name: extract_symbolic_data
arguments: tag: D4
datatype: string
name: extract_symbolic_data
arguments: tag: D158
datatype: string
name: extract_symbolic_data
arguments: tag: D45
datatype: string
name: extract_symbolic_data
arguments: tag: D150
datatype: string
name: extract_symbolic_data
arguments: tag: D6
datatype: string
name: extract_symbolic_data
arguments: tag: D59
datatype: string
name: extract_symbolic_data
arguments: tag: D144
datatype: string
name: extract_symbolic_data
arguments: tag: D37
datatype: string
name: extract_symbolic_data
arguments: tag: D23
datatype: string
name: extract_symbolic_data
arguments: tag: D108
datatype: string
name: extract_symbolic_data
arguments: tag: D76
datatype: string
name: extract_symbolic_data
arguments: tag: D86
datatype: string

tool: D112: open,creat,link,symlink,truncate,ftruncate,mknod,rename,truncate64,ftruncate64,access

tool: D27: File_Read_Write

tool: D110: unlink,rmdir

tool: D155: File_Remove

tool: D4: execve

tool: D158: chmod,chown,lchown,fchmod,fchown,fchown32,lchown32,chown32

tool: D45: File_Attrib

tool: D150: Process_Events

tool: D6: mount,umount,umount2,settimeofday,swapon,swapoff,reboot,setdomainname,create_module,delete_module,quotactl

tool: D59: socketcall

tool: D144: Socket_Events

tool: D37: Admin_Events

tool: D23: login_auth,login_start,logout

tool: D108: Logon_Logoff

tool: D76: acct_mgmt

tool: D86: User_Events

assistant: ```c
void replaceEvents(char *event) {
  if (strcmp(event, "open,creat,link,symlink,truncate,ftruncate,mknod,rename,truncate64,ftruncate64,access") == 0) {
    strncpy(event, "File_Read_Write", 256);
  } else if (strcmp(event, "unlink,rmdir") == 0) {
    strncpy(event, "File_Remove", 256);
  } else if (strcmp(event, "execve") == 0) {
    strncpy(event, "Process_Events", 256);
  } else if (strcmp(event, "chmod,chown,lchown,fchmod,fchown,fchown32,lchown32,chown32") == 0) {
    strncpy(event, "File_Attrib", 256);
  } else if (strcmp(event, "mount,umount,umount2,settimeofday,swapon,swapoff,reboot,setdomainname,create_module,delete_module,quotactl") == 0) {
    strncpy(event, "Admin_Events", 256);
  } else if (strcmp(event, "socketcall") == 0) {
    strncpy(event, "Socket_Events", 256);
  } else if (strcmp(event, "login_auth,login_start,logout") == 0) {
    strncpy(event, "Logon_Logoff", 256);
  } else if (strcmp(event, "acct_mgmt") == 0) {
    strncpy(event, "User_Events", 256);
  }
}
```