user: 请显示与下面列出的汇编代码相匹配的C语言实现:

```asm
<crypto_aead_decrypt>:
  endbr64
  push   %rbp
  mov    %rsp,%rbp
  sub    $0x110,%rsp
  mov    %rdi,-0xd8(%rbp)
  mov    %rsi,-0xe0(%rbp)
  mov    %rdx,-0xe8(%rbp)
  mov    %rcx,-0xf0(%rbp)
  mov    %r8,-0xf8(%rbp)
  mov    %r9,-0x100(%rbp)
  mov    0x18(%rbp),%rax
  mov    %rax,-0x108(%rbp)
  mov    0x20(%rbp),%rax
  mov    %rax,-0x110(%rbp)
  mov    %fs:0x28,%rax
  mov    %rax,-0x8(%rbp)
  xor    %eax,%eax
  lea    -0xc0(%rbp),%rdx
  mov    -0x108(%rbp),%rcx
  mov    -0x110(%rbp),%rax
  mov    %rcx,%rsi
  mov    %rax,%rdi
  call   <morus_initialization@plt>
  movl   $0x0,-0xc4(%rbp)
  jmp    L14
L21:
  mov    -0xc4(%rbp),%eax
  movslq %eax,%rdx
  mov    -0x100(%rbp),%rax
  lea    (%rdx,%rax,1),%rcx
  lea    -0xc0(%rbp),%rdx
  lea    -0x90(%rbp),%rax
  mov    %rax,%rsi
  mov    %rcx,%rdi
  call   <morus_enc_aut_step@plt>
  addl   $0x20,-0xc4(%rbp)
L14:
  mov    -0xc4(%rbp),%eax
  add    $0x20,%eax
  cltq
  cmp    %rax,0x10(%rbp)
  jae    L21
  mov    0x10(%rbp),%rax
  and    $0x1f,%eax
  test   %rax,%rax
  je     L58
  mov    0x10(%rbp),%rax
  and    $0x1f,%eax
  mov    %rax,%rsi
  mov    -0xc4(%rbp),%eax
  movslq %eax,%rdx
  mov    -0x100(%rbp),%rax
  lea    (%rdx,%rax,1),%rdi
  lea    -0xc0(%rbp),%rdx
  lea    -0x90(%rbp),%rax
  mov    %rdx,%rcx
  mov    %rsi,%rdx
  mov    %rax,%rsi
  call   <morus_enc_aut_partialblock@plt>
L58:
  mov    -0xf8(%rbp),%rax
  lea    -0x10(%rax),%rdx
  mov    -0xe0(%rbp),%rax
  mov    %rdx,(%rax)
  movl   $0x0,-0xc4(%rbp)
  jmp    L38
L51:
  mov    -0xc4(%rbp),%eax
  movslq %eax,%rdx
  mov    -0xf0(%rbp),%rax
  lea    (%rdx,%rax,1),%rsi
  mov    -0xc4(%rbp),%eax
  movslq %eax,%rdx
  mov    -0xd8(%rbp),%rax
  lea    (%rdx,%rax,1),%rcx
  lea    -0xc0(%rbp),%rax
  mov    %rax,%rdx
  mov    %rcx,%rdi
  call   <morus_dec_aut_step@plt>
  addl   $0x20,-0xc4(%rbp)
L38:
  mov    -0xc4(%rbp),%eax
  add    $0x20,%eax
  movslq %eax,%rdx
  mov    -0xe0(%rbp),%rax
  mov    (%rax),%rax
  cmp    %rax,%rdx
  jbe    L51
  mov    -0xe0(%rbp),%rax
  mov    (%rax),%rax
  and    $0x1f,%eax
  test   %rax,%rax
  je     L44
  mov    -0xe0(%rbp),%rax
  mov    (%rax),%rax
  and    $0x1f,%eax
  mov    %rax,%rdx
  mov    -0xc4(%rbp),%eax
  movslq %eax,%rcx
  mov    -0xf0(%rbp),%rax
  lea    (%rcx,%rax,1),%rsi
  mov    -0xc4(%rbp),%eax
  movslq %eax,%rcx
  mov    -0xd8(%rbp),%rax
  lea    (%rcx,%rax,1),%rdi
  lea    -0xc0(%rbp),%rax
  mov    %rax,%rcx
  call   <morus_dec_aut_partialblock@plt>
L44:
  mov    -0xe0(%rbp),%rax
  mov    (%rax),%rax
  lea    -0xc0(%rbp),%rcx
  mov    -0xf0(%rbp),%rdx
  mov    0x10(%rbp),%rsi
  mov    %rax,%rdi
  call   <morus_tag_verification@plt>
  mov    -0x8(%rbp),%rdx
  sub    %fs:0x28,%rdx
  je     L28
  call   <__stack_chk_fail@plt>
L28:
  leave
  ret
```

assistant: ```c
int crypto_aead_decrypt(unsigned char *m, unsigned long long *mlen, unsigned char *nsec, const unsigned char *c, unsigned long long clen, const unsigned char *ad, unsigned long long adlen, const unsigned char *npub, const unsigned char *k) {
  uint64_t i;
  uint8_t ciphertextblock[32];
  __m128i morus_state[5][2];
  morus_initialization(k, npub, morus_state);
  for (i = 0; (i + 32) <= adlen; i += 32) {
    morus_enc_aut_step(ad + i, ciphertextblock, morus_state);
  }
  if ((adlen & 0x1f) != 0) {
    morus_enc_aut_partialblock(ad + i, ciphertextblock, adlen & 0x1f, morus_state);
  }
  *mlen = clen - 16;
  for (i = 0; (i + 32) <= *mlen; i += 32) {
    morus_dec_aut_step(m + i, c + i, morus_state);
  }
  if ((*mlen & 0x1f) != 0) {
    morus_dec_aut_partialblock(m + i, c + i, *mlen & 0x1f, morus_state);
  }
  return morus_tag_verification(*mlen, adlen, c, morus_state);
}
```