user: Please show me the C implementation that matches the assembly code listed below:

```asm
<crypto_aead_decrypt>:
  endbr64
  push   %r15
  push   %r14
  push   %r13
  push   %r12
  push   %rbp
  push   %rbx
  sub    $0x88,%rsp
  mov    %rdi,%r14
  mov    %rsi,%r12
  mov    %r8,0x18(%rsp)
  mov    0xc0(%rsp),%r13
  mov    0xc8(%rsp),%rsi
  mov    0xd0(%rsp),%rdi
  mov    %fs:0x28,%rax
  mov    %rax,0x78(%rsp)
  xor    %eax,%eax
  cmp    $0xf,%r8
  jbe    L132
  mov    %rcx,%rbp
  mov    %r9,%r15
  lea    0x20(%rsp),%rdx
  call   <aegis256_initialization@plt>
  cmp    $0xf,%r13
  jbe    L113
  mov    $0x10,%ebx
  lea    0x20(%rsp),%rax
  mov    %rax,0x8(%rsp)
L82:
  lea    0x50(%rsp),%rsi
  lea    -0x10(%r15,%rbx,1),%rdi
  mov    0x8(%rsp),%rdx
  call   <aegis256_enc_aut_step@plt>
  mov    %rbx,0x10(%rsp)
  add    $0x10,%rbx
  cmp    %rbx,%r13
  jae    L82
L75:
  mov    %r13,%rbx
  and    $0xf,%ebx
  jne    L79
L81:
  mov    0x18(%rsp),%rax
  sub    $0x10,%rax
  mov    %rax,(%r12)
  cmp    $0xf,%rax
  jbe    L134
  mov    $0x10,%ebx
  lea    0x20(%rsp),%r15
L88:
  lea    -0x10(%rbp,%rbx,1),%rsi
  lea    -0x10(%r14,%rbx,1),%rdi
  mov    %r15,%rdx
  call   <aegis256_dec_aut_step@plt>
  mov    (%r12),%rax
  mov    %rbx,0x8(%rsp)
  add    $0x10,%rbx
  cmp    %rbx,%rax
  jae    L88
L21:
  test   $0xf,%al
  jne    L29
L55:
  lea    0x60(%rsp),%rcx
  lea    0x20(%rsp),%r8
  mov    $0x10,%edx
  mov    %r13,%rsi
  mov    (%r12),%rdi
  call   <aegis256_tag_generation@plt>
  mov    $0x0,%ecx
  mov    $0x0,%eax
  add    (%r12),%rbp
  lea    0x60(%rsp),%rsi
L36:
  movzbl 0x0(%rbp,%rax,1),%edx
  xor    (%rax,%rsi,1),%dl
  or     %edx,%ecx
  add    $0x1,%rax
  cmp    $0x10,%rax
  jne    L36
  neg    %cl
  sbb    %eax,%eax
L19:
  mov    0x78(%rsp),%rdx
  sub    %fs:0x28,%rdx
  jne    L43
  add    $0x88,%rsp
  pop    %rbx
  pop    %rbp
  pop    %r12
  pop    %r13
  pop    %r14
  pop    %r15
  ret
L113:
  movq   $0x0,0x10(%rsp)
  jmp    L75
L79:
  lea    0x40(%rsp),%rax
  mov    $0x10,%edx
  mov    $0x0,%esi
  mov    %rax,0x8(%rsp)
  mov    %rax,%rdi
  call   <memset@plt>
  mov    0x10(%rsp),%rsi
  add    %r15,%rsi
  mov    %rbx,%rdx
  mov    0x8(%rsp),%rbx
  mov    %rbx,%rdi
  call   <memcpy@plt>
  lea    0x20(%rsp),%rdx
  lea    0x50(%rsp),%rsi
  mov    %rbx,%rdi
  call   <aegis256_enc_aut_step@plt>
  jmp    L81
L134:
  movq   $0x0,0x8(%rsp)
  jmp    L21
L29:
  lea    0x50(%rsp),%r15
  mov    $0x10,%edx
  mov    $0x0,%esi
  mov    %r15,%rdi
  call   <memset@plt>
  mov    (%r12),%rdx
  and    $0xf,%edx
  mov    0x8(%rsp),%rax
  lea    0x0(%rbp,%rax,1),%rsi
  mov    %r15,%rdi
  call   <memcpy@plt>
  lea    0x20(%rsp),%rdx
  lea    0x40(%rsp),%rbx
  mov    %r15,%rsi
  mov    %rbx,%rdi
  call   <aegis256_dec_aut_step@plt>
  mov    (%r12),%rdx
  and    $0xf,%edx
  mov    0x8(%rsp),%rax
  lea    (%r14,%rax,1),%rdi
  mov    %rbx,%rsi
  call   <memcpy@plt>
  mov    (%r12),%rdx
  and    $0xf,%edx
  mov    $0x0,%esi
  mov    %rbx,%rdi
  call   <memset@plt>
  mov    %rbx,%rdi
  call   <_mm_load_si128@plt>
  mov    %eax,%esi
  mov    0x20(%rsp),%edi
  call   <_mm_xor_si128@plt>
  mov    %eax,0x20(%rsp)
  jmp    L55
L132:
  mov    $0xffffffff,%eax
  jmp    L19
L43:
  call   <__stack_chk_fail@plt>
```

assistant: ```c
int crypto_aead_decrypt(unsigned char *m, unsigned long long *mlen, unsigned char *nsec, const unsigned char *c, unsigned long long clen, const unsigned char *ad, unsigned long long adlen, const unsigned char *npub, const unsigned char *k) {
  unsigned long long i;
  unsigned char plaintextblock[16], ciphertextblock[16];
  unsigned char tag[16];
  unsigned char check = 0;
  __m128i aegis256_state[6];
  if (clen < 16)
    return -1;
  aegis256_initialization(k, npub, aegis256_state);
  for (i = 0; (i + 16) <= adlen; i += 16) {
    aegis256_enc_aut_step(ad + i, ciphertextblock, aegis256_state);
  }
  if ((adlen & 0xf) != 0) {
    memset(plaintextblock, 0, 16);
    memcpy(plaintextblock, ad + i, adlen & 0xf);
    aegis256_enc_aut_step(plaintextblock, ciphertextblock, aegis256_state);
  }
  *mlen = clen - 16;
  for (i = 0; (i + 16) <= *mlen; i += 16) {
    aegis256_dec_aut_step(m + i, c + i, aegis256_state);
  }
  if ((*mlen & 0xf) != 0) {
    memset(ciphertextblock, 0, 16);
    memcpy(ciphertextblock, c + i, *mlen & 0xf);
    aegis256_dec_aut_step(plaintextblock, ciphertextblock, aegis256_state);
    memcpy(m + i, plaintextblock, *mlen & 0xf);
    memset(plaintextblock, 0, *mlen & 0xf);
    aegis256_state[0] = _mm_xor_si128(aegis256_state[0], _mm_load_si128((__m128i *)plaintextblock));
  }
  aegis256_tag_generation(*mlen, adlen, 16, tag, aegis256_state);
  for (i = 0; i < 16; i++)
    check |= (tag[i] ^ c[i + *mlen]);
  if (check == 0)
    return 0;
  else
    return -1;
}
```