user: 请从给定的汇编指令推导出C源代码：

```asm
<test_sprintf_chk_range_sshrt>:
  endbr64
  push   %r12
  push   %rbp
  push   %rbx
  mov    $0x0,%edi
  call   <__builtin_malloc@plt>
  mov    %rax,%rbp
  mov    $0x9,%esi
  mov    $0x0,%edi
  call   <range_sshrt@plt>
  mov    %eax,%ebx
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin_object_size@plt>
  mov    %eax,%edx
  mov    %ebx,%r8d
  lea    D4(%rip),%rbx
  mov    %rbx,%rcx
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin___sprintf_chk@plt>
  mov    %rbp,%rdi
  call   <sink@plt>
  mov    $0x1,%edi
  call   <__builtin_malloc@plt>
  mov    %rax,%rbp
  mov    $0x1,%esi
  mov    $0x0,%edi
  call   <range_sshrt@plt>
  mov    %eax,%r12d
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin_object_size@plt>
  mov    %eax,%edx
  mov    %r12d,%r8d
  mov    %rbx,%rcx
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin___sprintf_chk@plt>
  mov    %rbp,%rdi
  call   <sink@plt>
  mov    $0x1,%edi
  call   <__builtin_malloc@plt>
  mov    %rax,%rbp
  mov    $0x9,%esi
  mov    $0x0,%edi
  call   <range_sshrt@plt>
  mov    %eax,%r12d
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin_object_size@plt>
  mov    %eax,%edx
  mov    %r12d,%r8d
  mov    %rbx,%rcx
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin___sprintf_chk@plt>
  mov    %rbp,%rdi
  call   <sink@plt>
  mov    $0x2,%edi
  call   <__builtin_malloc@plt>
  mov    %rax,%rbp
  mov    $0x1,%esi
  mov    $0x0,%edi
  call   <range_sshrt@plt>
  mov    %eax,%r12d
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin_object_size@plt>
  mov    %eax,%edx
  mov    %r12d,%r8d
  mov    %rbx,%rcx
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin___sprintf_chk@plt>
  mov    %rbp,%rdi
  call   <sink@plt>
  mov    $0x2,%edi
  call   <__builtin_malloc@plt>
  mov    %rax,%rbp
  mov    $0x9,%esi
  mov    $0x8,%edi
  call   <range_sshrt@plt>
  mov    %eax,%r12d
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin_object_size@plt>
  mov    %eax,%edx
  mov    %r12d,%r8d
  mov    %rbx,%rcx
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin___sprintf_chk@plt>
  mov    %rbp,%rdi
  call   <sink@plt>
  mov    $0x2,%edi
  call   <__builtin_malloc@plt>
  mov    %rax,%rbp
  mov    $0x9,%esi
  mov    $0x0,%edi
  call   <range_sshrt@plt>
  mov    %eax,%r12d
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin_object_size@plt>
  mov    %eax,%edx
  mov    %r12d,%r8d
  mov    %rbx,%rcx
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin___sprintf_chk@plt>
  mov    %rbp,%rdi
  call   <sink@plt>
  mov    $0x2,%edi
  call   <__builtin_malloc@plt>
  mov    %rax,%rbp
  mov    $0x0,%esi
  mov    $0xffffffff,%edi
  call   <range_sshrt@plt>
  mov    %eax,%r12d
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin_object_size@plt>
  mov    %eax,%edx
  mov    %r12d,%r8d
  mov    %rbx,%rcx
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin___sprintf_chk@plt>
  mov    %rbp,%rdi
  call   <sink@plt>
  mov    $0x2,%edi
  call   <__builtin_malloc@plt>
  mov    %rax,%rbp
  mov    $0xa,%esi
  mov    $0x9,%edi
  call   <range_sshrt@plt>
  mov    %eax,%r12d
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin_object_size@plt>
  mov    %eax,%edx
  mov    %r12d,%r8d
  mov    %rbx,%rcx
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin___sprintf_chk@plt>
  mov    %rbp,%rdi
  call   <sink@plt>
  mov    $0x3,%edi
  call   <__builtin_malloc@plt>
  mov    %rax,%rbp
  mov    $0x63,%esi
  mov    $0x0,%edi
  call   <range_sshrt@plt>
  mov    %eax,%r12d
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin_object_size@plt>
  mov    %eax,%edx
  mov    %r12d,%r8d
  mov    %rbx,%rcx
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin___sprintf_chk@plt>
  mov    %rbp,%rdi
  call   <sink@plt>
  mov    $0x3,%edi
  call   <__builtin_malloc@plt>
  mov    %rax,%rbp
  mov    $0x3e7,%esi
  mov    $0x63,%edi
  call   <range_sshrt@plt>
  mov    %eax,%r12d
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin_object_size@plt>
  mov    %eax,%edx
  mov    %r12d,%r8d
  mov    %rbx,%rcx
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin___sprintf_chk@plt>
  mov    %rbp,%rdi
  call   <sink@plt>
  mov    $0x4,%edi
  call   <__builtin_malloc@plt>
  mov    %rax,%rbp
  mov    $0x3e7,%esi
  mov    $0x0,%edi
  call   <range_sshrt@plt>
  mov    %eax,%r12d
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin_object_size@plt>
  mov    %eax,%edx
  mov    %r12d,%r8d
  mov    %rbx,%rcx
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin___sprintf_chk@plt>
  mov    %rbp,%rdi
  call   <sink@plt>
  mov    $0x4,%edi
  call   <__builtin_malloc@plt>
  mov    %rax,%rbp
  mov    $0x3e7,%esi
  mov    $0x63,%edi
  call   <range_sshrt@plt>
  mov    %eax,%r12d
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin_object_size@plt>
  mov    %eax,%edx
  mov    %r12d,%r8d
  mov    %rbx,%rcx
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin___sprintf_chk@plt>
  mov    %rbp,%rdi
  call   <sink@plt>
  mov    $0x4,%edi
  call   <__builtin_malloc@plt>
  mov    %rax,%rbp
  mov    $0x3e7,%esi
  mov    $0x3e6,%edi
  call   <range_sshrt@plt>
  mov    %eax,%r12d
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin_object_size@plt>
  mov    %eax,%edx
  mov    %r12d,%r8d
  mov    %rbx,%rcx
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin___sprintf_chk@plt>
  mov    %rbp,%rdi
  call   <sink@plt>
  mov    $0x4,%edi
  call   <__builtin_malloc@plt>
  mov    %rax,%rbp
  mov    $0x3e8,%esi
  mov    $0x3e7,%edi
  call   <range_sshrt@plt>
  mov    %eax,%r12d
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin_object_size@plt>
  mov    %eax,%edx
  mov    %r12d,%r8d
  mov    %rbx,%rcx
  mov    $0x0,%esi
  mov    %rbp,%rdi
  call   <__builtin___sprintf_chk@plt>
  mov    %rbp,%rdi
  call   <sink@plt>
  pop    %rbx
  pop    %rbp
  pop    %r12
  ret
```

tool_calls: name: extract_symbolic_data
arguments: data_label: D4
type_guessed: string

tool: D4: %i

assistant: ```c
void test_sprintf_chk_range_sshrt(void) {
  do {
    if (!0 || 256 == 0) {
      char *d;
      (d) = __builtin_malloc(0);
      __builtin___sprintf_chk(d, 0, __builtin_object_size(d, 0), "%i", range_sshrt(0, 9));
      sink(d);
    }
  } while (0);
  do {
    if (!0 || 257 == 0) {
      char *d;
      (d) = __builtin_malloc(1);
      __builtin___sprintf_chk(d, 0, __builtin_object_size(d, 0), "%i", range_sshrt(0, 1));
      sink(d);
    }
  } while (0);
  do {
    if (!0 || 258 == 0) {
      char *d;
      (d) = __builtin_malloc(1);
      __builtin___sprintf_chk(d, 0, __builtin_object_size(d, 0), "%i", range_sshrt(0, 9));
      sink(d);
    }
  } while (0);
  do {
    if (!0 || 259 == 0) {
      char *d;
      (d) = __builtin_malloc(2);
      __builtin___sprintf_chk(d, 0, __builtin_object_size(d, 0), "%i", range_sshrt(0, 1));
      sink(d);
    }
  } while (0);
  do {
    if (!0 || 260 == 0) {
      char *d;
      (d) = __builtin_malloc(2);
      __builtin___sprintf_chk(d, 0, __builtin_object_size(d, 0), "%i", range_sshrt(8, 9));
      sink(d);
    }
  } while (0);
  do {
    if (!0 || 261 == 0) {
      char *d;
      (d) = __builtin_malloc(2);
      __builtin___sprintf_chk(d, 0, __builtin_object_size(d, 0), "%i", range_sshrt(0, 9));
      sink(d);
    }
  } while (0);
  do {
    if (!0 || 262 == 0) {
      char *d;
      (d) = __builtin_malloc(2);
      __builtin___sprintf_chk(d, 0, __builtin_object_size(d, 0), "%i", range_sshrt(-1, 0));
      sink(d);
    }
  } while (0);
  do {
    if (!0 || 263 == 0) {
      char *d;
      (d) = __builtin_malloc(2);
      __builtin___sprintf_chk(d, 0, __builtin_object_size(d, 0), "%i", range_sshrt(9, 10));
      sink(d);
    }
  } while (0);
  do {
    if (!0 || 265 == 0) {
      char *d;
      (d) = __builtin_malloc(3);
      __builtin___sprintf_chk(d, 0, __builtin_object_size(d, 0), "%i", range_sshrt(0, 99));
      sink(d);
    }
  } while (0);
  do {
    if (!0 || 266 == 0) {
      char *d;
      (d) = __builtin_malloc(3);
      __builtin___sprintf_chk(d, 0, __builtin_object_size(d, 0), "%i", range_sshrt(99, 999));
      sink(d);
    }
  } while (0);
  do {
    if (!0 || 268 == 0) {
      char *d;
      (d) = __builtin_malloc(4);
      __builtin___sprintf_chk(d, 0, __builtin_object_size(d, 0), "%i", range_sshrt(0, 999));
      sink(d);
    }
  } while (0);
  do {
    if (!0 || 269 == 0) {
      char *d;
      (d) = __builtin_malloc(4);
      __builtin___sprintf_chk(d, 0, __builtin_object_size(d, 0), "%i", range_sshrt(99, 999));
      sink(d);
    }
  } while (0);
  do {
    if (!0 || 270 == 0) {
      char *d;
      (d) = __builtin_malloc(4);
      __builtin___sprintf_chk(d, 0, __builtin_object_size(d, 0), "%i", range_sshrt(998, 999));
      sink(d);
    }
  } while (0);
  do {
    if (!0 || 271 == 0) {
      char *d;
      (d) = __builtin_malloc(4);
      __builtin___sprintf_chk(d, 0, __builtin_object_size(d, 0), "%i", range_sshrt(999, 1000));
      sink(d);
    }
  } while (0);
}
```