user: 这段汇编代码用C语言表示是什么样的？

```asm
<crypto_aead_encrypt>:
  endbr64
  push   %r15
  mov    %r9,%r15
  push   %r14
  push   %r13
  push   %r12
  mov    %r8,%r12
  push   %rbp
  mov    %rcx,%rbp
  push   %rbx
  sub    $0xd8,%rsp
  mov    0x120(%rsp),%rax
  mov    %rdi,0x28(%rsp)
  mov    %rsi,0x40(%rsp)
  mov    0x118(%rsp),%r13
  mov    %rdx,0x30(%rsp)
  mov    %rax,0x38(%rsp)
  mov    %fs:0x28,%rax
  mov    %rax,0xc8(%rsp)
  xor    %eax,%eax
  movq   $0x0,0x56(%rsp)
  test   %rcx,%rcx
  je     L182
  movabs $0xaaaaaaaaaaaaaaab,%rdx
  lea    0x5(%rcx),%rsi
  movabs $0x2aaaaaaaaaaaaaaa,%rcx
  mov    %rsi,%rax
  mov    %rsi,0x20(%rsp)
  imul   %rdx,%rax
  ror    %rax
  cmp    %rcx,%rax
  ja     L230
L25:
  mov    0x20(%rsp),%rbx
  mov    %rbx,%rdi
  call   <malloc@plt>
  mov    0x30(%rsp),%rdi
  mov    %rbx,%rcx
  mov    %rbp,%rsi
  mov    %rax,%rdx
  mov    %rax,%r14
  call   <padding@plt>
L111:
  test   %r15,%r15
  jne    L113
  mov    0x38(%rsp),%rbx
  lea    0x70(%rsp),%r12
  mov    %r13,%rdi
  lea    0x56(%rsp),%r15
  mov    %r12,%rdx
  mov    %rbx,%rsi
  call   <E@plt>
  lea    0x78(%rsp),%rdx
  mov    %rbx,%rsi
  mov    %r12,%rdi
  call   <E@plt>
  mov    0x76(%rsp),%rax
  mov    %r15,%rdx
  mov    %r12,%rsi
  mov    %r15,%rdi
  mov    %rax,0x66(%rsp)
  movzwl 0x7e(%rsp),%eax
  mov    %ax,0x6e(%rsp)
  call   <E@plt>
  nopw   0x0(%rax,%rax,1)
L223:
  mov    0x20(%rsp),%rax
  test   %rax,%rax
  je     L7
  test   %rbp,%rbp
  je     L67
  cmp    %rbp,%rax
  mov    0x30(%rsp),%r11
  mov    0x28(%rsp),%r9
  mov    %r14,%r12
  cmova  %rbp,%rax
  mov    %r14,0x48(%rsp)
  mov    %rbp,%r10
  xor    %ebx,%ebx
  mov    %r12,%rbp
  lea    0x80(%rsp),%r13
  mov    %r11,%r14
  mov    %rax,0x18(%rsp)
  lea    0x66(%rsp),%rax
  mov    %r9,%r12
  mov    %rax,0x8(%rsp)
  lea    0x50(%rsp),%rax
  mov    %rax,(%rsp)
  cs nopw 0x0(%rax,%rax,1)
L128:
  mov    0x8(%rsp),%rdi
  mov    %r13,%rsi
  mov    %r10,0x10(%rsp)
  call   <KS@plt>
  mov    (%rsp),%rcx
  mov    %r15,%rdx
  mov    %r13,%rsi
  mov    %r15,%rdi
  call   <Gleak@plt>
  movzbl 0x0(%rbp),%eax
  mov    0x10(%rsp),%r10
  xor    %al,0x58(%rsp)
  movzbl (%r14),%eax
  xor    0x50(%rsp),%al
  mov    %al,(%r12)
  movzbl 0x1(%rbp),%eax
  xor    %al,0x59(%rsp)
  lea    0x1(%rbx),%rax
  cmp    %rax,%r10
  jbe    L54
  movzbl 0x1(%r14),%eax
  xor    0x51(%rsp),%al
  mov    %al,0x1(%r12)
L54:
  movzbl 0x2(%rbp),%eax
  xor    %al,0x5a(%rsp)
  lea    0x2(%rbx),%rax
  cmp    %rax,%r10
  jbe    L231
  movzbl 0x2(%r14),%eax
  xor    0x52(%rsp),%al
  mov    %al,0x2(%r12)
L231:
  movzbl 0x3(%rbp),%eax
  xor    %al,0x5b(%rsp)
  lea    0x3(%rbx),%rax
  cmp    %rax,%r10
  jbe    L77
  movzbl 0x3(%r14),%eax
  xor    0x53(%rsp),%al
  mov    %al,0x3(%r12)
L77:
  movzbl 0x4(%rbp),%eax
  xor    %al,0x5c(%rsp)
  lea    0x4(%rbx),%rax
  cmp    %rax,%r10
  jbe    L249
  movzbl 0x4(%r14),%eax
  xor    0x54(%rsp),%al
  mov    %al,0x4(%r12)
L249:
  movzbl 0x5(%rbp),%eax
  xor    %al,0x5d(%rsp)
  lea    0x5(%rbx),%rax
  cmp    %rax,%r10
  jbe    L158
  movzbl 0x5(%r14),%eax
  xor    0x55(%rsp),%al
  mov    %al,0x5(%r12)
L158:
  lea    0x6(%rbx),%eax
  add    $0x6,%rbp
  add    $0x6,%rbx
  add    $0x6,%r14
  add    $0x6,%r12
  cmp    %rbx,0x18(%rsp)
  ja     L128
  mov    0x48(%rsp),%r14
  mov    %r10,%rbp
  cmp    %rbx,0x20(%rsp)
  jbe    L7
L23:
  cltq
  mov    %rbp,%r8
  mov    0x30(%rsp),%r11
  mov    0x28(%rsp),%rbp
  lea    0x1(%rax),%r12
  nopl   0x0(%rax)
L104:
  mov    0x8(%rsp),%rdi
  mov    %r13,%rsi
  mov    %r8,0x18(%rsp)
  mov    %r11,0x10(%rsp)
  call   <KS@plt>
  mov    (%rsp),%rcx
  mov    %r15,%rdx
  mov    %r13,%rsi
  mov    %r15,%rdi
  call   <Gleak@plt>
  mov    0x18(%rsp),%r8
  movzbl (%r14,%rbx,1),%eax
  xor    %al,0x58(%rsp)
  movzbl (%r14,%r12,1),%eax
  xor    %al,0x59(%rsp)
  cmp    %r8,%r12
  mov    0x10(%rsp),%r11
  jae    L75
  movzbl 0x51(%rsp),%eax
  xor    (%r11,%r12,1),%al
  mov    %al,0x0(%rbp,%r12,1)
L75:
  movzbl 0x1(%r14,%r12,1),%eax
  xor    %al,0x5a(%rsp)
  lea    0x1(%r12),%rax
  cmp    %rax,%r8
  jbe    L96
  movzbl 0x52(%rsp),%eax
  xor    0x1(%r11,%r12,1),%al
  mov    %al,0x1(%rbp,%r12,1)
L96:
  movzbl 0x2(%r14,%r12,1),%eax
  xor    %al,0x5b(%rsp)
  lea    0x2(%r12),%rax
  cmp    %rax,%r8
  jbe    L141
  movzbl 0x53(%rsp),%eax
  xor    0x2(%r11,%r12,1),%al
  mov    %al,0x2(%rbp,%r12,1)
L141:
  movzbl 0x3(%r14,%r12,1),%eax
  xor    %al,0x5c(%rsp)
  lea    0x3(%r12),%rax
  cmp    %rax,%r8
  jbe    L105
  movzbl 0x3(%r11,%r12,1),%eax
  xor    0x54(%rsp),%al
  mov    %al,0x3(%rbp,%r12,1)
L105:
  movzbl 0x4(%r14,%r12,1),%eax
  xor    %al,0x5d(%rsp)
  lea    0x4(%r12),%rax
  cmp    %r8,%rax
  jae    L246
  movzbl 0x4(%r11,%r12,1),%eax
  xor    0x55(%rsp),%al
  mov    %al,0x4(%rbp,%r12,1)
L246:
  lea    0x5(%r12),%rbx
  add    $0x6,%r12
  cmp    0x20(%rsp),%rbx
  jb     L104
  mov    %r8,%rbp
L7:
  mov    0x38(%rsp),%rsi
  lea    0x5e(%rsp),%rdx
  mov    %r15,%rdi
  call   <E@plt>
  mov    0x5e(%rsp),%rax
  mov    0x28(%rsp),%rcx
  mov    %rax,(%rcx,%rbp,1)
  mov    0x40(%rsp),%rax
  add    $0x8,%rbp
  mov    %rbp,(%rax)
  mov    0xc8(%rsp),%rax
  sub    %fs:0x28,%rax
  jne    L49
  add    $0xd8,%rsp
  xor    %eax,%eax
  pop    %rbx
  pop    %rbp
  pop    %r12
  pop    %r13
  pop    %r14
  pop    %r15
  ret
  nopw   0x0(%rax,%rax,1)
L67:
  lea    0x66(%rsp),%rcx
  xor    %ebx,%ebx
  xor    %eax,%eax
  mov    %rcx,0x8(%rsp)
  lea    0x50(%rsp),%rcx
  lea    0x80(%rsp),%r13
  mov    %rcx,(%rsp)
  jmp    L23
L230:
  mov    %rsi,%rax
  mul    %rdx
  shr    $0x2,%rdx
  lea    0x3(%rdx,%rdx,2),%rax
  add    %rax,%rax
  mov    %rax,0x20(%rsp)
  jmp    L25
L113:
  movabs $0xaaaaaaaaaaaaaaab,%rdx
  lea    0x5(%r15),%rdi
  movabs $0x2aaaaaaaaaaaaaaa,%rcx
  mov    %rdi,%rax
  mov    %rdi,(%rsp)
  imul   %rdx,%rax
  ror    %rax
  cmp    %rcx,%rax
  jbe    L256
  mov    %rdi,%rax
  mul    %rdx
  shr    $0x2,%rdx
  lea    0x3(%rdx,%rdx,2),%rbx
  lea    (%rbx,%rbx,1),%rax
  mov    %rax,(%rsp)
L256:
  mov    (%rsp),%rdi
  call   <malloc@plt>
  mov    (%rsp),%rcx
  mov    %r15,%rsi
  mov    %r12,%rdi
  mov    %rax,%rdx
  mov    %rax,%rbx
  lea    0x70(%rsp),%r12
  call   <padding@plt>
  mov    0x38(%rsp),%r15
  mov    %r12,%rdx
  mov    %r13,%rdi
  mov    %r15,%rsi
  call   <E@plt>
  mov    %r15,%rsi
  lea    0x78(%rsp),%rdx
  mov    %r12,%rdi
  call   <E@plt>
  mov    0x76(%rsp),%rax
  lea    0x56(%rsp),%r15
  mov    %r12,%rsi
  mov    %r15,%rdx
  mov    %r15,%rdi
  mov    %rax,0x66(%rsp)
  movzwl 0x7e(%rsp),%eax
  mov    %ax,0x6e(%rsp)
  call   <E@plt>
  mov    (%rsp),%rax
  test   %rax,%rax
  je     L223
  mov    %rbx,%r12
  lea    0x66(%rsp),%rdx
  xor    %ebx,%ebx
  mov    %r14,(%rsp)
  mov    %rbp,0x8(%rsp)
  mov    %r12,%r14
  mov    %rbx,%rbp
  mov    %rdx,%r12
  lea    0x80(%rsp),%r13
  mov    %rax,%rbx
  nopl   0x0(%rax,%rax,1)
L163:
  mov    %r13,%rsi
  mov    %r12,%rdi
  add    $0x6,%rbp
  add    $0x6,%r14
  call   <KS@plt>
  mov    %r15,%rdx
  mov    %r13,%rsi
  mov    %r15,%rdi
  call   <G@plt>
  movzbl -0x6(%r14),%eax
  xor    %al,0x58(%rsp)
  movzbl -0x5(%r14),%eax
  xor    %al,0x59(%rsp)
  movzbl -0x4(%r14),%eax
  xor    %al,0x5a(%rsp)
  movzbl -0x3(%r14),%eax
  xor    %al,0x5b(%rsp)
  movzbl -0x2(%r14),%eax
  xor    %al,0x5c(%rsp)
  movzbl -0x1(%r14),%eax
  xor    %al,0x5d(%rsp)
  cmp    %rbp,%rbx
  ja     L163
  mov    (%rsp),%r14
  mov    0x8(%rsp),%rbp
  jmp    L223
L182:
  xor    %edi,%edi
  call   <malloc@plt>
  mov    0x30(%rsp),%rdi
  xor    %ecx,%ecx
  xor    %esi,%esi
  mov    %rax,%rdx
  mov    %rax,%r14
  call   <padding@plt>
  movq   $0x0,0x20(%rsp)
  jmp    L111
L49:
  call   <__stack_chk_fail@plt>
```

assistant: ```c
int crypto_aead_encrypt(unsigned char *c, unsigned long long *clen, const unsigned char *m, unsigned long long mlen, const unsigned char *ad, unsigned long long adlen, const unsigned char *nsec, const unsigned char *npub, const unsigned char *k) {
  unsigned char *mpad;
  unsigned long long mpadlen;
  unsigned char *adpad = NULL;
  unsigned long long adpadlen;
  unsigned char ukey[16];
  unsigned char datastate[8] = {0}, keystate[10], leak[6];
  unsigned char subkey[16 * 4];
  unsigned char tag[8];
  int i, j;
  if (mlen == 0) {
    mpadlen = 0;
    mpad = (unsigned char *)malloc(mpadlen);
    padding(m, mlen, mpad, mpadlen);
  } else {
    if ((mlen + 5) % 6 == 0) {
      mpadlen = mlen + 5;
    } else {
      mpadlen = ((mlen + 5) / 6 + 1) * 6;
    }
    mpad = (unsigned char *)malloc(mpadlen);
    padding(m, mlen, mpad, mpadlen);
  }
  if (adlen == 0) {
    adpadlen = 0;
  } else {
    if ((adlen + 5) % 6 == 0) {
      adpadlen = adlen + 5;
    } else {
      adpadlen = ((adlen + 5) / 6 + 1) * 6;
    }
    adpad = (unsigned char *)malloc(adpadlen);
    padding(ad, adlen, adpad, adpadlen);
  }
  E(npub, k, ukey);
  E(ukey, k, ukey + 8);
  for (i = 0; i < 10; i++) {
    keystate[i] = ukey[i + 6];
  }
  E(datastate, ukey, datastate);
  for (i = 0; i < adpadlen; i += 6) {
    KS(keystate, subkey);
    G(datastate, subkey, datastate);
    for (j = 0; j < 6; j++) {
      datastate[j + 2] ^= adpad[i + j];
    }
  }
  for (i = 0; i < mpadlen; i += 6) {
    KS(keystate, subkey);
    Gleak(datastate, subkey, datastate, leak);
    for (j = 0; j < 6; j++) {
      datastate[j + 2] ^= mpad[i + j];
      if ((i + j) < mlen) {
        c[i + j] = m[i + j] ^ leak[j];
      }
    }
  }
  E(datastate, k, tag);
  for (i = 0; i < 8; i++) {
    c[mlen + i] = tag[i];
  }
  *clen = mlen + 8;
  return 0;
}
```