user: 请从给定的汇编指令推导出C源代码:

```asm
<hdSurEncPhase1_D2_0F_11>:
  endbr64
  push   %r15
  mov    %rdi,%r15
  push   %r14
  push   %r13
  lea    D22(%rip),%r13
  push   %r12
  lea    D1(%rip),%r12
  push   %rbp
  push   %rbx
  sub    $0x98,%rsp
  mov    %fs:0x28,%rax
  mov    %rax,0x88(%rsp)
  xor    %eax,%eax
  lea    0x70(%rsp),%rax
  mov    %rax,0x68(%rsp)
L21:
  xor    %ebx,%ebx
  nopl   (%rax)
L4:
  movzbl 0x0(%r13,%rbx,1),%esi
  movzbl (%r15,%rbx,1),%ebp
  mov    %ebx,%edi
  call   <hdSurEncBasicCrypt_D2_0F_11@plt>
  xor    %eax,%ebp
  mov    %bpl,(%r15,%rbx,1)
  add    $0x1,%rbx
  cmp    $0x10,%rbx
  jne    L4
  movzbl 0x9(%r15),%esi
  movzbl 0x7(%r15),%ebx
  movzbl 0x2(%r15),%r11d
  movzbl (%r15),%ecx
  movzbl 0x1(%r15),%edx
  movzbl 0x3(%r15),%r10d
  mov    %esi,0x18(%rsp)
  movzbl 0xe(%r15),%esi
  movzbl 0x6(%r15),%r9d
  mov    %ebx,0x1c(%rsp)
  movzbl 0xf(%r15),%ebx
  movzbl 0x4(%r15),%edi
  movzbl 0x5(%r15),%eax
  movzbl 0xa(%r15),%r14d
  mov    %esi,0x14(%rsp)
  mov    %r11d,%esi
  sub    %ecx,%esi
  movzbl 0xb(%r15),%r8d
  movzbl 0x8(%r15),%ebp
  mov    %ebx,0x24(%rsp)
  lea    (%rdx,%rdx,1),%ebx
  mov    %r14d,(%rsp)
  movzbl 0xc(%r15),%r14d
  add    %ebx,%esi
  mov    %ebx,0x28(%rsp)
  mov    %r9d,%ebx
  mov    %esi,0x40(%rsp)
  mov    %r10d,%esi
  sub    %edi,%ebx
  neg    %esi
  mov    %r8d,0x20(%rsp)
  movzbl 0xd(%r15),%r8d
  add    %esi,%esi
  mov    %esi,0x58(%rsp)
  lea    (%rax,%rax,1),%esi
  add    %esi,%ebx
  mov    %esi,0x2c(%rsp)
  mov    %ebx,0x44(%rsp)
  mov    0x1c(%rsp),%ebx
  neg    %ebx
  lea    (%rbx,%rbx,1),%esi
  mov    %esi,0x5c(%rsp)
  mov    0x18(%rsp),%esi
  add    %esi,%esi
  mov    %esi,0x30(%rsp)
  mov    (%rsp),%esi
  mov    0x30(%rsp),%ebx
  sub    %ebp,%esi
  add    %esi,%ebx
  mov    %ebx,0x48(%rsp)
  mov    0x20(%rsp),%ebx
  neg    %ebx
  lea    (%rbx,%rbx,1),%esi
  mov    %esi,0x60(%rsp)
  lea    (%r8,%r8,1),%esi
  mov    %esi,0x34(%rsp)
  mov    0x14(%rsp),%esi
  sub    %r14d,%esi
  add    0x34(%rsp),%esi
  mov    %esi,0x4c(%rsp)
  mov    0x24(%rsp),%esi
  neg    %esi
  mov    %esi,%ebx
  lea    (%r11,%r11,1),%esi
  add    %ebx,%ebx
  mov    %ebx,0x3c(%rsp)
  lea    (%r9,%r9,1),%ebx
  mov    %ebx,0x50(%rsp)
  mov    (%rsp),%ebx
  add    %ebx,%ebx
  mov    %ebx,0x54(%rsp)
  mov    0x14(%rsp),%ebx
  add    %ebx,%ebx
  mov    %ebx,0x38(%rsp)
  lea    (%r10,%rcx,1),%ebx
  sub    %edx,%ebx
  sub    %ecx,%edx
  sub    %r11d,%ebx
  mov    0x40(%rsp),%r11d
  mov    %ebx,0x64(%rsp)
  mov    0x58(%rsp),%ebx
  add    %ebx,%r11d
  add    %ebx,%edx
  mov    0x1c(%rsp),%ebx
  mov    %r11d,0x40(%rsp)
  lea    (%rdx,%rsi,1),%r11d
  lea    (%rcx,%r10,4),%edx
  sub    0x28(%rsp),%edx
  mov    %edx,%ecx
  lea    (%rbx,%rdi,1),%edx
  mov    0x48(%rsp),%r10d
  sub    %r9d,%edx
  sub    %esi,%ecx
  sub    %eax,%edx
  mov    %ecx,0x28(%rsp)
  mov    0x44(%rsp),%ecx
  sub    %edi,%eax
  mov    %edx,0x1c(%rsp)
  mov    0x5c(%rsp),%edx
  add    %edx,%ecx
  add    %edx,%eax
  mov    0x50(%rsp),%edx
  mov    %ecx,%esi
  lea    (%rax,%rdx,1),%ecx
  lea    (%rdi,%rbx,4),%eax
  mov    0x20(%rsp),%ebx
  sub    0x2c(%rsp),%eax
  sub    %edx,%eax
  mov    0x18(%rsp),%edi
  movzbl %cl,%ecx
  mov    %eax,%edx
  mov    %ebx,%eax
  add    %ebp,%eax
  movzbl %dl,%edx
  sub    %edi,%eax
  shl    $0x8,%rdx
  sub    (%rsp),%eax
  or     %rcx,%rdx
  mov    %eax,(%rsp)
  mov    0x60(%rsp),%r9d
  mov    %edi,%eax
  sub    %ebp,%eax
  mov    0x54(%rsp),%edi
  movzbl %sil,%ecx
  shl    $0x8,%rdx
  add    %r9d,%eax
  or     %rcx,%rdx
  movzbl 0x1c(%rsp),%ecx
  add    %r9d,%r10d
  shl    $0x8,%rdx
  lea    (%rax,%rdi,1),%r9d
  lea    0x0(%rbp,%rbx,4),%eax
  mov    0x24(%rsp),%ebx
  sub    0x30(%rsp),%eax
  or     %rcx,%rdx
  movzbl 0x28(%rsp),%ecx
  movzbl %r9b,%r9d
  mov    %eax,%ebp
  shl    $0x8,%rdx
  mov    %ebx,%eax
  lea    (%r14,%rbx,4),%ebx
  or     %rcx,%rdx
  sub    0x34(%rsp),%ebx
  add    %r14d,%eax
  sub    0x38(%rsp),%ebx
  sub    %r8d,%eax
  movzbl %r11b,%ecx
  sub    %r14d,%r8d
  shl    $0x8,%rdx
  add    0x3c(%rsp),%r8d
  movzbl %bl,%esi
  add    0x38(%rsp),%r8d
  or     %rcx,%rdx
  movzbl %r8b,%r8d
  movzbl 0x40(%rsp),%ecx
  shl    $0x8,%rsi
  sub    %edi,%ebp
  or     %r8,%rsi
  mov    0x4c(%rsp),%edi
  shl    $0x8,%rdx
  add    0x3c(%rsp),%edi
  or     %rcx,%rdx
  movzbl %dil,%edi
  shl    $0x8,%rsi
  sub    0x14(%rsp),%eax
  shl    $0x8,%rdx
  or     %rdi,%rsi
  movzbl %al,%edi
  movzbl %bpl,%ebp
  shl    $0x8,%rsi
  movzbl %r10b,%r10d
  movzbl 0x64(%rsp),%ecx
  mov    $0x1,%ebx
  mov    %rsi,%rax
  movzbl (%rsp),%esi
  or     %rdi,%rax
  or     %rcx,%rdx
  mov    %r15,%rdi
  shl    $0x8,%rax
  mov    %rdx,(%rsp)
  mov    $0x10,%edx
  or     %rbp,%rax
  shl    $0x8,%rax
  or     %r9,%rax
  shl    $0x8,%rax
  or     %r10,%rax
  shl    $0x8,%rax
  or     %rsi,%rax
  mov    0x68(%rsp),%rsi
  mov    %rax,0x8(%rsp)
  movdqa (%rsp),%xmm0
  movaps %xmm0,0x70(%rsp)
  call   <memcpy@plt>
  movzbl 0x5(%r15),%edx
  movzbl 0x1(%r15),%eax
  movzbl 0xa(%r15),%esi
  movzbl 0xe(%r15),%ecx
  mov    %dl,0x1(%r15)
  movzbl 0x9(%r15),%edx
  mov    %dl,0x5(%r15)
  movzbl 0xd(%r15),%edx
  mov    %al,0xd(%r15)
  movzbl 0x6(%r15),%eax
  mov    %dl,0x9(%r15)
  movzbl 0x2(%r15),%edx
  mov    %cl,0x6(%r15)
  movzbl 0x3(%r15),%ecx
  mov    %sil,0x2(%r15)
  movzbl 0xf(%r15),%esi
  mov    %dl,0xa(%r15)
  movzbl 0x7(%r15),%edx
  mov    %al,0xe(%r15)
  movzbl 0xb(%r15),%eax
  mov    %sil,0x3(%r15)
  xor    %esi,%esi
  mov    %cl,0x7(%r15)
  mov    %dl,0xb(%r15)
  mov    %al,0xf(%r15)
  jmp    L41
  nopl   0x0(%rax)
L46:
  and    $0x3,%eax
  movsbl (%r12,%rax,1),%esi
L41:
  movzbl -0x1(%r15,%rbx,1),%edi
  call   <hdSurEncCryptLookup_D2_0F_11@plt>
  mov    %al,-0x1(%r15,%rbx,1)
  mov    %ebx,%eax
  add    $0x1,%rbx
  cmp    $0x11,%rbx
  jne    L46
  lea    D26(%rip),%rcx
  lea    -0x10(%r13),%rax
  cmp    %r13,%rcx
  je     L24
  mov    %rax,%r13
  jmp    L21
L24:
  mov    0x88(%rsp),%rax
  sub    %fs:0x28,%rax
  jne    L51
  add    $0x98,%rsp
  pop    %rbx
  pop    %rbp
  pop    %r12
  pop    %r13
  pop    %r14
  pop    %r15
  ret
L51:
  call   <__stack_chk_fail@plt>
```

tool_calls: name: extract_symbolic_data
arguments: data_tag: D1
data_type: string

tool: 

assistant: ```c
void hdSurEncPhase1_D2_0F_11(unsigned char *CWs) {
  static const unsigned char lookup1[] = {0x16, 0x71, 0xCA, 0x14, 0xC4, 0xF4, 0xA3, 0x5A, 0x9D, 0x5F, 0x85, 0x8B, 0xA6, 0x77, 0xFD, 0x3C, 0x5F, 0x13, 0x2A, 0x5F, 0x61, 0x36, 0xE4, 0xDC, 0x0D, 0x82, 0x92, 0xC5, 0x25, 0xE1, 0x7A, 0x1C, 0x29, 0x19, 0x94, 0x2F, 0xC5, 0xD2, 0xDC, 0xBA, 0x86, 0x60, 0x64, 0x60, 0x86, 0x92, 0xA3, 0x4E, 0x3D, 0x9B, 0xCC, 0x16, 0xBB, 0xBA, 0xD2, 0xF0, 0x6A, 0xD3, 0x2F, 0x07, 0x75, 0xBD, 0x28, 0xDB};
  static const char lookup2[] = {1, -1, -1, 1, -1, 2, 1, -2, -1, 1, 2, -2, 1, -2, -2, 4};
  static const char CAddrIndex[] = {0, 1, 3, 4};
  int i, j, i1, i2, i3;
  for (i = 3; i >= 0; --i) {
    for (j = 0; j <= 15; ++j) {
      CWs[j] = CWs[j] ^ hdSurEncBasicCrypt_D2_0F_11(j, lookup1[(16 * i) + j]);
    }
    unsigned char Buffer[16];
    unsigned int k;
    for (i1 = 0; i1 <= 3; ++i1) {
      for (i2 = 0; i2 <= 3; ++i2) {
        k = 0;
        for (i3 = 0; i3 <= 3; ++i3) {
          k = k + (CWs[(i2 * 4) + i3] * lookup2[(i3 * 4) + i1]);
          Buffer[(i2 * 4) + i1] = (unsigned char)k;
        }
      }
    }
    memcpy(CWs, Buffer, 16);
    unsigned char a4[4];
    for (i1 = 1; i1 <= 3; ++i1) {
      for (i2 = 0; i2 <= 3; ++i2) {
        a4[i2] = i1 + (i2 * 4);
      }
      for (i2 = 0; i2 <= i1 - 1; ++i2) {
        unsigned char tmp = CWs[a4[0]];
        for (i3 = 1; i3 <= 3; ++i3) {
          CWs[a4[i3 - 1]] = CWs[a4[i3]];
        }
        CWs[a4[3]] = tmp;
      }
    }
    for (i1 = 0; i1 <= 15; ++i1) {
      CWs[i1] = hdSurEncCryptLookup_D2_0F_11(CWs[i1], CAddrIndex[i1 & 3]);
    }
  }
}
```