user: 这段汇编代码用C语言表示是什么样的?

```asm
<crypto_aead_decrypt>:
  endbr64
  push   %r15
  push   %r14
  push   %r13
  push   %r12
  push   %rbp
  push   %rbx
  mov    %rcx,%rbx
  sub    $0x178,%rsp
  mov    0x1b8(%rsp),%rax
  mov    %r8,0x20(%rsp)
  lea    0x70(%rsp),%r14
  lea    0x140(%rsp),%rbp
  mov    %r9,0x48(%rsp)
  lea    0x80(%rsp),%r12
  mov    0x1b0(%rsp),%r13
  lea    0x90(%rsp),%r15
  mov    %rdi,0x28(%rsp)
  lea    0xd0(%rsp),%rdi
  mov    %rsi,0x30(%rsp)
  mov    $0xa,%esi
  mov    %rax,0x38(%rsp)
  mov    %fs:0x28,%rax
  mov    %rax,0x168(%rsp)
  mov    0x1c0(%rsp),%rax
  movdqu (%rax),%xmm4
  xor    %eax,%eax
  movaps %xmm4,0xd0(%rsp)
  call   <keyschedule@plt>
  pxor   %xmm0,%xmm0
  mov    %r14,%rsi
  mov    %rbp,%rdi
  xor    %eax,%eax
  movaps %xmm0,0x140(%rsp)
  call   <AES128Enc@plt>
  mov    %r12,%rsi
  mov    %r14,%rdi
  xor    %eax,%eax
  call   <Times2@plt>
  mov    %r12,%rdi
  mov    %r15,%rsi
  xor    %eax,%eax
  lea    0x120(%rsp),%r12
  mov    %r15,0x50(%rsp)
  call   <Times2@plt>
  xor    %eax,%eax
  mov    %r12,%rsi
  mov    %r15,%rdi
  call   <Times2@plt>
  test   %r13,%r13
  pxor   %xmm0,%xmm0
  jne    L1462
  movaps %xmm0,0xc0(%rsp)
L195:
  mov    0x20(%rsp),%r15
  cmp    $0xf,%r15
  jbe    L1263
  mov    0x30(%rsp),%rcx
  lea    -0x10(%r15),%rax
  xor    %r11d,%r11d
  lea    0xf0(%rsp),%rdi
  lea    0x130(%rsp),%rsi
  movb   $0x80,0xfd(%rsp)
  mov    %rax,(%rcx)
  mov    0x38(%rsp),%rcx
  mov    %r11w,0xfe(%rsp)
  mov    (%rcx),%rax
  mov    %rax,0xf0(%rsp)
  mov    0x8(%rcx),%eax
  mov    %eax,0xf8(%rsp)
  movzbl 0xc(%rcx),%eax
  mov    %al,0xfc(%rsp)
  xor    %eax,%eax
  call   <AES128Enc@plt>
  cmp    $0x10,%r15
  je     L510
  mov    0x20(%rsp),%rax
  mov    %rax,%rcx
  shr    $0x4,%rcx
  and    $0xf,%eax
  mov    %rcx,0x30(%rsp)
  lea    -0x1(%rcx),%r14
  mov    %rax,%r9
  jne    L646
  mov    0x50(%rsp),%rdi
  mov    %rcx,%r15
  pxor   %xmm0,%xmm0
  mov    %r12,%rsi
  mov    %rax,0x18(%rsp)
  sub    $0x2,%r15
  xor    %eax,%eax
  lea    0x150(%rsp),%r13
  movaps %xmm0,0x100(%rsp)
  mov    %r15,(%rsp)
  call   <Times2@plt>
  xor    %eax,%eax
  mov    %r13,%rsi
  mov    %rbp,%rdi
  movdqa 0x130(%rsp),%xmm0
  pxor   0x120(%rsp),%xmm0
  movaps %xmm0,0x140(%rsp)
  call   <AES128Enc@plt>
  test   %r15,%r15
  je     L1176
  mov    %r14,0x30(%rsp)
  mov    0x18(%rsp),%r9
L851:
  mov    %r9,0x38(%rsp)
  mov    %rbx,%r15
  xor    %r8d,%r8d
  mov    0x28(%rsp),%r14
  lea    0xe0(%rsp),%rax
  mov    %rbx,0x40(%rsp)
  mov    %r8,%rbx
  mov    %rax,0x18(%rsp)
  mov    %r12,%rax
  mov    %r15,%r12
  mov    %rax,%r15
  nopw   0x0(%rax,%rax,1)
L85:
  mov    0x18(%rsp),%rsi
  mov    %r15,%rdi
  xor    %eax,%eax
  call   <Times2@plt>
  movzbl 0x150(%rsp),%esi
  xor    (%r12),%sil
  mov    %rbp,%rdi
  movzbl 0xe0(%rsp),%eax
  xor    0x130(%rsp),%al
  mov    %sil,0x140(%rsp)
  movdqa 0xe0(%rsp),%xmm0
  xor    %esi,%eax
  movzbl 0x151(%rsp),%esi
  mov    %al,(%r14)
  movzbl 0xe1(%rsp),%eax
  xor    0x1(%r12),%sil
  xor    0x131(%rsp),%al
  xor    %esi,%eax
  mov    %sil,0x141(%rsp)
  movzbl 0x152(%rsp),%esi
  mov    %al,0x1(%r14)
  movzbl 0xe2(%rsp),%eax
  xor    0x2(%r12),%sil
  xor    0x132(%rsp),%al
  xor    %esi,%eax
  mov    %sil,0x142(%rsp)
  movzbl 0x153(%rsp),%esi
  mov    %al,0x2(%r14)
  movzbl 0xe3(%rsp),%eax
  xor    0x3(%r12),%sil
  xor    0x133(%rsp),%al
  xor    %esi,%eax
  mov    %sil,0x143(%rsp)
  movzbl 0x154(%rsp),%esi
  mov    %al,0x3(%r14)
  movzbl 0xe4(%rsp),%eax
  xor    0x4(%r12),%sil
  xor    0x134(%rsp),%al
  xor    %esi,%eax
  mov    %sil,0x144(%rsp)
  movzbl 0x155(%rsp),%esi
  mov    %al,0x4(%r14)
  xor    0x5(%r12),%sil
  movzbl 0xe5(%rsp),%eax
  xor    0x135(%rsp),%al
  mov    %sil,0x145(%rsp)
  xor    %esi,%eax
  movzbl 0x156(%rsp),%esi
  mov    %al,0x5(%r14)
  movzbl 0xe6(%rsp),%eax
  xor    0x6(%r12),%sil
  xor    0x136(%rsp),%al
  xor    %esi,%eax
  mov    %sil,0x146(%rsp)
  movzbl 0x157(%rsp),%esi
  mov    %al,0x6(%r14)
  movzbl 0xe7(%rsp),%eax
  xor    0x7(%r12),%sil
  xor    0x137(%rsp),%al
  xor    %esi,%eax
  mov    %sil,0x147(%rsp)
  movzbl 0x158(%rsp),%esi
  mov    %al,0x7(%r14)
  movzbl 0xe8(%rsp),%eax
  xor    0x8(%r12),%sil
  xor    0x138(%rsp),%al
  xor    %esi,%eax
  mov    %sil,0x148(%rsp)
  movzbl 0x159(%rsp),%esi
  mov    %al,0x8(%r14)
  movzbl 0xe9(%rsp),%eax
  xor    0x9(%r12),%sil
  xor    0x139(%rsp),%al
  xor    %esi,%eax
  mov    %sil,0x149(%rsp)
  movzbl 0x15a(%rsp),%esi
  mov    %al,0x9(%r14)
  xor    0xa(%r12),%sil
  add    $0x1,%rbx
  add    $0x10,%r12
  mov    %sil,0x14a(%rsp)
  movzbl 0xea(%rsp),%eax
  add    $0x10,%r14
  xor    0x13a(%rsp),%al
  xor    %esi,%eax
  movzbl 0x15b(%rsp),%esi
  mov    %al,-0x6(%r14)
  movzbl 0xeb(%rsp),%eax
  xor    -0x5(%r12),%sil
  xor    0x13b(%rsp),%al
  xor    %esi,%eax
  mov    %sil,0x14b(%rsp)
  movzbl 0x15c(%rsp),%esi
  mov    %al,-0x5(%r14)
  movzbl 0xec(%rsp),%eax
  xor    -0x4(%r12),%sil
  xor    0x13c(%rsp),%al
  xor    %esi,%eax
  mov    %sil,0x14c(%rsp)
  movzbl 0x15d(%rsp),%esi
  mov    %al,-0x4(%r14)
  movzbl 0xed(%rsp),%eax
  xor    -0x3(%r12),%sil
  xor    0x13d(%rsp),%al
  xor    %esi,%eax
  mov    %sil,0x14d(%rsp)
  movzbl 0x15e(%rsp),%esi
  mov    %al,-0x3(%r14)
  movzbl 0xee(%rsp),%eax
  xor    -0x2(%r12),%sil
  xor    0x13e(%rsp),%al
  xor    %esi,%eax
  mov    %sil,0x14e(%rsp)
  movzbl 0x15f(%rsp),%esi
  mov    %al,-0x2(%r14)
  xor    -0x1(%r12),%sil
  mov    %sil,0x14f(%rsp)
  movaps %xmm0,0x60(%rsp)
  movzbl 0x6f(%rsp),%eax
  xor    0x13f(%rsp),%al
  xor    %esi,%eax
  mov    %r13,%rsi
  movaps %xmm0,0x120(%rsp)
  mov    %al,-0x1(%r14)
  xor    %eax,%eax
  call   <AES128Enc@plt>
  cmp    (%rsp),%rbx
  jne    L85
  mov    %rbx,%r8
  mov    0x38(%rsp),%r9
  mov    0x40(%rsp),%rbx
  shl    $0x4,%r8
  mov    %r8,%r14
  test   %r9,%r9
  je     L877
L1059:
  mov    0x28(%rsp),%r11
  lea    0x1(%r14),%rdi
  lea    -0x1(%r9),%rsi
  lea    (%rbx,%rdi,1),%rax
  lea    (%r11,%r14,1),%rcx
  mov    %rcx,%rdx
  sub    %rax,%rdx
  cmp    $0x6,%rdx
  jbe    L874
  cmp    $0x6,%rsi
  jbe    L874
  movq   0x150(%rsp),%xmm1
  movq   (%rbx,%r14,1),%xmm0
  pxor   %xmm1,%xmm0
  movq   %xmm0,(%rcx)
  cmp    $0x8,%r9
  je     L1569
  movzbl 0x8(%rbx,%r14,1),%eax
  xor    0x158(%rsp),%al
  mov    %al,0x8(%r11,%r14,1)
  cmp    $0x9,%r9
  jbe    L731
  movzbl 0x9(%rbx,%r14,1),%eax
  xor    0x159(%rsp),%al
  mov    %al,0x9(%r11,%r14,1)
  cmp    $0xa,%r9
  je     L731
  movzbl 0xa(%rbx,%r14,1),%eax
  xor    0x15a(%rsp),%al
  mov    %al,0xa(%r11,%r14,1)
  cmp    $0xb,%r9
  je     L731
  movzbl 0xb(%rbx,%r14,1),%eax
  xor    0x15b(%rsp),%al
  mov    %al,0xb(%r11,%r14,1)
  cmp    $0xc,%r9
  je     L731
  movzbl 0xc(%rbx,%r14,1),%eax
  xor    0x15c(%rsp),%al
  mov    %al,0xc(%r11,%r14,1)
  cmp    $0xd,%r9
  je     L731
  movzbl 0xd(%rbx,%r14,1),%eax
  xor    0x15d(%rsp),%al
  mov    %al,0xd(%r11,%r14,1)
  cmp    $0xf,%r9
  jne    L731
  movzbl 0xe(%rbx,%r14,1),%eax
  xor    0x15e(%rsp),%al
  mov    %al,0xe(%r11,%r14,1)
L731:
  lea    0x110(%rsp),%rdx
  xor    %r8d,%r8d
  mov    %rdx,%rax
  cmp    $0x8,%r9d
  jae    L1474
L641:
  test   $0x4,%r9b
  jne    L1488
  test   $0x2,%r9b
  jne    L412
L1616:
  test   $0x1,%r9b
  jne    L1167
L1287:
  mov    $0x10,%edx
  mov    $0xf,%edi
  mov    %r9,%rax
  sub    %r9,%rdx
  sub    %r9,%rdi
L1338:
  movzbl 0x150(%rsp,%rax,1),%r8d
  xor    0x100(%rsp,%rax,1),%r8b
  mov    %r8b,0x110(%rsp,%rax,1)
  cmp    $0xf,%rax
  je     L674
  movzbl 0x151(%rsp,%rax,1),%r10d
  xor    0x101(%rsp,%rax,1),%r10b
  mov    %r10b,0x111(%rsp,%rax,1)
  cmp    $0xe,%rax
  je     L674
  movzbl 0x152(%rsp,%rax,1),%r10d
  xor    0x102(%rsp,%rax,1),%r10b
  mov    %r10b,0x112(%rsp,%rax,1)
  cmp    $0xd,%rax
  je     L674
  movzbl 0x153(%rsp,%rax,1),%r10d
  xor    0x103(%rsp,%rax,1),%r10b
  mov    %r10b,0x113(%rsp,%rax,1)
  cmp    $0xc,%rax
  je     L674
  movzbl 0x154(%rsp,%rax,1),%r10d
  xor    0x104(%rsp,%rax,1),%r10b
  mov    %r10b,0x114(%rsp,%rax,1)
  cmp    $0xb,%rax
  je     L674
  movzbl 0x155(%rsp,%rax,1),%r10d
  lea    0x6(%rax),%r8
  xor    0x105(%rsp,%rax,1),%r10b
  mov    %r10b,0x115(%rsp,%rax,1)
  cmp    $0xa,%rax
  je     L674
  movzbl 0x106(%rsp,%rax,1),%eax
  xor    0x150(%rsp,%r8,1),%al
  mov    %al,0x110(%rsp,%r8,1)
L674:
  cmp    $0x6,%rsi
  jbe    L118
L1532:
  movq   0x80(%rsp),%xmm1
  movq   0x130(%rsp),%xmm0
  pxor   %xmm1,%xmm0
  movq   (%rcx),%xmm1
  pxor   %xmm1,%xmm0
  movq   %xmm0,0x140(%rsp)
  cmp    $0x8,%r9
  je     L366
  mov    $0x8,%eax
L1500:
  mov    0x28(%rsp),%r8
  movzbl 0x80(%rsp,%rax,1),%esi
  xor    0x130(%rsp,%rax,1),%sil
  add    %rax,%r8
  xor    (%r8,%r14,1),%sil
  mov    %sil,0x140(%rsp,%rax,1)
  lea    0x1(%rax),%rsi
  cmp    %rsi,%r9
  jbe    L935
  movzbl 0x81(%rsp,%rax,1),%r8d
  lea    0x2(%rax),%rsi
  xor    0x131(%rsp,%rax,1),%r8b
  xor    0x1(%rax,%rcx,1),%r8b
  mov    %r8b,0x141(%rsp,%rax,1)
  cmp    %rsi,%r9
  jbe    L935
  movzbl 0x82(%rsp,%rax,1),%r8d
  lea    0x3(%rax),%rsi
  xor    0x132(%rsp,%rax,1),%r8b
  xor    0x2(%rax,%rcx,1),%r8b
  mov    %r8b,0x142(%rsp,%rax,1)
  cmp    %rsi,%r9
  jbe    L935
  movzbl 0x83(%rsp,%rax,1),%r8d
  lea    0x4(%rax),%rsi
  xor    0x133(%rsp,%rax,1),%r8b
  xor    0x3(%rax,%rcx,1),%r8b
  mov    %r8b,0x143(%rsp,%rax,1)
  cmp    %rsi,%r9
  jbe    L935
  movzbl 0x84(%rsp,%rax,1),%r8d
  lea    0x5(%rax),%rsi
  xor    0x134(%rsp,%rax,1),%r8b
  xor    0x4(%rax,%rcx,1),%r8b
  mov    %r8b,0x144(%rsp,%rax,1)
  cmp    %rsi,%r9
  jbe    L935
  movzbl 0x85(%rsp,%rax,1),%r8d
  xor    0x135(%rsp,%rax,1),%r8b
  xor    0x5(%rax,%rcx,1),%r8b
  mov    %r8b,0x145(%rsp,%rax,1)
  add    $0x6,%rax
  cmp    %rax,%r9
  jbe    L935
  movzbl 0x80(%rsp,%rax,1),%esi
  xor    0x130(%rsp,%rax,1),%sil
  xor    (%rcx,%rax,1),%sil
  mov    %sil,0x140(%rsp,%rax,1)
L935:
  cmp    $0x6,%rdi
  jbe    L1745
L366:
  movq   0x110(%rsp,%r9,1),%xmm1
  lea    0x8(%r9),%rax
  movq   0x130(%rsp,%r9,1),%xmm0
  pxor   %xmm1,%xmm0
  movq   0x80(%rsp,%r9,1),%xmm1
  pxor   %xmm1,%xmm0
  movq   %xmm0,0x140(%rsp,%r9,1)
  cmp    $0x8,%rdx
  je     L850
L633:
  movzbl 0x110(%rsp,%rax,1),%edx
  xor    0x80(%rsp,%rax,1),%dl
  xor    0x130(%rsp,%rax,1),%dl
  mov    %dl,0x140(%rsp,%rax,1)
  cmp    $0xf,%rax
  je     L850
  movzbl 0x111(%rsp,%rax,1),%edx
  xor    0x81(%rsp,%rax,1),%dl
  xor    0x131(%rsp,%rax,1),%dl
  mov    %dl,0x141(%rsp,%rax,1)
  cmp    $0xe,%rax
  je     L850
  movzbl 0x112(%rsp,%rax,1),%edx
  xor    0x82(%rsp,%rax,1),%dl
  xor    0x132(%rsp,%rax,1),%dl
  mov    %dl,0x142(%rsp,%rax,1)
  cmp    $0xd,%rax
  je     L850
  movzbl 0x113(%rsp,%rax,1),%edx
  xor    0x83(%rsp,%rax,1),%dl
  xor    0x133(%rsp,%rax,1),%dl
  mov    %dl,0x143(%rsp,%rax,1)
  cmp    $0xc,%rax
  je     L850
  movzbl 0x114(%rsp,%rax,1),%ecx
  xor    0x84(%rsp,%rax,1),%cl
  xor    0x134(%rsp,%rax,1),%cl
  mov    %cl,0x144(%rsp,%rax,1)
  cmp    $0xb,%rax
  je     L850
  movzbl 0x115(%rsp,%rax,1),%edx
  xor    0x85(%rsp,%rax,1),%dl
  xor    0x135(%rsp,%rax,1),%dl
  mov    %dl,0x145(%rsp,%rax,1)
  lea    0x6(%rax),%rdx
  cmp    $0xa,%rax
  je     L850
  movzbl 0x116(%rsp,%rax,1),%eax
  xor    0x80(%rsp,%rdx,1),%al
  xor    0x130(%rsp,%rdx,1),%al
  mov    %al,0x140(%rsp,%rdx,1)
L850:
  mov    %r13,%rsi
  mov    %rbp,%rdi
  xor    %eax,%eax
  mov    %r9,(%rsp)
  call   <AES128Enc@plt>
  mov    (%rsp),%r9
  movzbl 0xc0(%rsp),%eax
  xor    0x150(%rsp),%al
  lea    (%r9,%r14,1),%r8
  cmp    (%rbx,%r8,1),%al
  jne    L439
  movzbl 0xc1(%rsp),%eax
  xor    0x151(%rsp),%al
  cmp    0x1(%rbx,%r8,1),%al
  jne    L439
  movzbl 0xc2(%rsp),%eax
  xor    0x152(%rsp),%al
  cmp    0x2(%rbx,%r8,1),%al
  jne    L439
  movzbl 0xc3(%rsp),%eax
  xor    0x153(%rsp),%al
  cmp    0x3(%rbx,%r8,1),%al
  jne    L439
  movzbl 0xc4(%rsp),%eax
  xor    0x154(%rsp),%al
  cmp    0x4(%rbx,%r8,1),%al
  jne    L439
  movzbl 0x155(%rsp),%eax
  xor    0xc5(%rsp),%al
  cmp    0x5(%rbx,%r8,1),%al
  jne    L439
  movzbl 0x156(%rsp),%eax
  xor    0xc6(%rsp),%al
  cmp    %al,0x6(%rbx,%r8,1)
  jne    L439
  movzbl 0x157(%rsp),%eax
  xor    0xc7(%rsp),%al
  cmp    %al,0x7(%rbx,%r8,1)
  jne    L439
  movzbl 0x158(%rsp),%eax
  xor    0xc8(%rsp),%al
  cmp    %al,0x8(%rbx,%r8,1)
  jne    L439
  movzbl 0xc9(%rsp),%eax
  xor    0x159(%rsp),%al
  cmp    0x9(%rbx,%r8,1),%al
  jne    L439
  movzbl 0x15a(%rsp),%eax
  xor    0xca(%rsp),%al
  cmp    %al,0xa(%rbx,%r8,1)
  jne    L439
  movzbl 0x15b(%rsp),%eax
  xor    0xcb(%rsp),%al
  cmp    %al,0xb(%rbx,%r8,1)
  jne    L439
  movzbl 0x15c(%rsp),%eax
  xor    0xcc(%rsp),%al
  cmp    %al,0xc(%rbx,%r8,1)
  jne    L439
  movzbl 0x15d(%rsp),%eax
  xor    0xcd(%rsp),%al
  cmp    %al,0xd(%rbx,%r8,1)
  jne    L439
  movzbl 0x15e(%rsp),%eax
  xor    0xce(%rsp),%al
  cmp    %al,0xe(%rbx,%r8,1)
  jne    L439
  movzbl 0x15f(%rsp),%eax
  xor    0xcf(%rsp),%al
  cmp    %al,0xf(%rbx,%r8,1)
  jne    L439
  xor    %eax,%eax
  jmp    L1349
L1462:
  mov    %r13,%rdx
  mov    %r13,%rax
  movaps %xmm0,0xa0(%rsp)
  and    $0xf,%edx
  shr    $0x4,%rax
  cmp    $0x1,%rdx
  mov    %rdx,0x40(%rsp)
  sbb    $0x0,%rax
  mov    %rax,0x18(%rsp)
  test   %rax,%rax
  je     L562
  mov    0x48(%rsp),%r15
  xor    %r14d,%r14d
  lea    0x150(%rsp),%r13
  lea    0xe0(%rsp),%rax
  mov    %rbx,0x58(%rsp)
  pxor   %xmm5,%xmm5
  mov    %r14,%rbx
  movdqa 0x120(%rsp),%xmm0
  mov    %rax,%r14
  mov    %r13,%rax
  movaps %xmm5,(%rsp)
  mov    %r15,%r13
  mov    %rax,%r15
  nopl   0x0(%rax,%rax,1)
L1705:
  movdqu 0x0(%r13),%xmm3
  mov    %r15,%rsi
  mov    %rbp,%rdi
  xor    %eax,%eax
  add    $0x1,%rbx
  add    $0x10,%r13
  pxor   %xmm3,%xmm0
  movaps %xmm0,0x140(%rsp)
  call   <AES128Enc@plt>
  movdqa (%rsp),%xmm2
  mov    %r14,%rsi
  mov    %r12,%rdi
  pxor   0x150(%rsp),%xmm2
  xor    %eax,%eax
  movaps %xmm2,(%rsp)
  movaps %xmm2,0xa0(%rsp)
  call   <Times2@plt>
  movdqa 0xe0(%rsp),%xmm0
  movaps %xmm0,0x120(%rsp)
  cmp    0x18(%rsp),%rbx
  jne    L1705
  mov    0x58(%rsp),%rbx
  shlq   $0x4,0x18(%rsp)
L562:
  mov    0x40(%rsp),%rcx
  test   %rcx,%rcx
  jne    L803
  mov    0x48(%rsp),%rax
  mov    0x18(%rsp),%rcx
  movdqa 0x90(%rsp),%xmm0
  pxor   0xa0(%rsp),%xmm0
  movdqu (%rax,%rcx,1),%xmm1
  pxor   %xmm1,%xmm0
  movaps %xmm0,0x140(%rsp)
L1744:
  lea    0xc0(%rsp),%rsi
  mov    %rbp,%rdi
  xor    %eax,%eax
  call   <AES128Enc@plt>
  jmp    L195
L646:
  lea    0x100(%rsp),%rdx
  xor    %esi,%esi
  mov    %rdx,%rax
  cmp    $0x8,%r9d
  jae    L1628
L1508:
  test   $0x4,%r9b
  jne    L761
  test   $0x2,%r9b
  jne    L318
L181:
  test   $0x1,%r9b
  jne    L1749
L453:
  movb   $0x80,0x100(%rsp,%r9,1)
  lea    0x1(%r9),%rcx
  cmp    $0xf,%r9
  je     L1332
  mov    $0xf,%eax
  add    %rcx,%rdx
  xor    %esi,%esi
  sub    %r9,%rax
  cmp    $0x8,%eax
  jb     L113
  mov    %eax,%ecx
  movq   $0x0,(%rdx)
  movq   $0x0,-0x8(%rdx,%rcx,1)
  lea    0x8(%rdx),%rcx
  and    $0xfffffffffffffff8,%rcx
  sub    %rcx,%rdx
  add    %edx,%eax
  and    $0xfffffff8,%eax
  cmp    $0x8,%eax
  jb     L1332
  and    $0xfffffff8,%eax
  xor    %edx,%edx
L226:
  mov    %edx,%edi
  add    $0x8,%edx
  mov    %rsi,(%rcx,%rdi,1)
  cmp    %eax,%edx
  jb     L226
L1332:
  mov    0x50(%rsp),%rdi
  mov    %r12,%rsi
  xor    %eax,%eax
  mov    %r9,0x18(%rsp)
  lea    0x150(%rsp),%r13
  call   <Times2@plt>
  xor    %eax,%eax
  mov    %r13,%rsi
  mov    %rbp,%rdi
  movdqa 0x130(%rsp),%xmm0
  pxor   0x120(%rsp),%xmm0
  movaps %xmm0,0x140(%rsp)
  call   <AES128Enc@plt>
  test   %r14,%r14
  mov    %r14,(%rsp)
  mov    0x18(%rsp),%r9
  jne    L851
  jmp    L1059
L803:
  mov    0x48(%rsp),%rsi
  lea    0xb0(%rsp),%rdx
  add    0x18(%rsp),%rsi
  mov    %rdx,%rdi
  mov    %rsi,%rax
  cmp    $0x8,%ecx
  jae    L1206
L579:
  xor    %ecx,%ecx
  testb  $0x4,0x40(%rsp)
  jne    L1271
  testb  $0x2,0x40(%rsp)
  jne    L1695
L1757:
  testb  $0x1,0x40(%rsp)
  jne    L1383
L1000:
  mov    0x40(%rsp),%rax
  movb   $0x80,0xb0(%rsp,%rax,1)
  lea    0x1(%rax),%rcx
  cmp    $0xf,%rax
  je     L1200
  mov    $0xf,%eax
  sub    0x40(%rsp),%rax
  add    %rcx,%rdx
  xor    %edi,%edi
  cmp    $0x8,%eax
  jb     L15
  mov    %eax,%ecx
  movq   $0x0,(%rdx)
  movq   $0x0,-0x8(%rdx,%rcx,1)
  lea    0x8(%rdx),%rcx
  and    $0xfffffffffffffff8,%rcx
  sub    %rcx,%rdx
  add    %edx,%eax
  and    $0xfffffff8,%eax
  cmp    $0x8,%eax
  jb     L1200
  and    $0xfffffff8,%eax
  xor    %edx,%edx
L959:
  mov    %edx,%esi
  add    $0x8,%edx
  mov    %rdi,(%rcx,%rsi,1)
  cmp    %eax,%edx
  jb     L959
L1200:
  movdqa 0xb0(%rsp),%xmm0
  pxor   0xa0(%rsp),%xmm0
  pxor   0x80(%rsp),%xmm0
  movaps %xmm0,0x140(%rsp)
  jmp    L1744
L1176:
  movq   $0x1,0x30(%rsp)
  xor    %r14d,%r14d
L877:
  mov    0x28(%rsp),%rax
  lea    (%rax,%r14,1),%rcx
  lea    0x1(%rbx,%r14,1),%rax
  mov    %rcx,%rdx
  sub    %rax,%rdx
  cmp    $0xe,%rdx
  jbe    L1041
  movdqu (%rbx,%r14,1),%xmm0
  pxor   0x150(%rsp),%xmm0
  movups %xmm0,(%rcx)
  movdqa %xmm0,%xmm1
L752:
  movdqa 0x130(%rsp),%xmm0
  mov    %r13,%rsi
  mov    %rbp,%rdi
  xor    %eax,%eax
  pxor   0x90(%rsp),%xmm0
  pxor   %xmm1,%xmm0
  movaps %xmm0,0x140(%rsp)
  call   <AES128Enc@plt>
  mov    0x30(%rsp),%rax
  movzbl 0x150(%rsp),%edx
  xor    0xc0(%rsp),%dl
  shl    $0x4,%rax
  cmp    %dl,(%rbx,%rax,1)
  jne    L439
  movzbl 0x151(%rsp),%edx
  xor    0xc1(%rsp),%dl
  cmp    %dl,0x1(%rbx,%rax,1)
  jne    L439
  movzbl 0x152(%rsp),%edx
  xor    0xc2(%rsp),%dl
  cmp    %dl,0x2(%rbx,%rax,1)
  jne    L439
  movzbl 0x153(%rsp),%edx
  xor    0xc3(%rsp),%dl
  cmp    %dl,0x3(%rbx,%rax,1)
  jne    L439
  movzbl 0x154(%rsp),%edx
  xor    0xc4(%rsp),%dl
  cmp    %dl,0x4(%rbx,%rax,1)
  jne    L439
  movzbl 0x155(%rsp),%edx
  xor    0xc5(%rsp),%dl
  cmp    %dl,0x5(%rbx,%rax,1)
  jne    L439
  movzbl 0x156(%rsp),%edx
  xor    0xc6(%rsp),%dl
  cmp    %dl,0x6(%rbx,%rax,1)
  jne    L439
  movzbl 0x157(%rsp),%edx
  xor    0xc7(%rsp),%dl
  cmp    %dl,0x7(%rbx,%rax,1)
  jne    L439
  movzbl 0x158(%rsp),%edx
  xor    0xc8(%rsp),%dl
  cmp    %dl,0x8(%rbx,%rax,1)
  je     L277
L439:
  mov    $0xffffffff,%eax
L1349:
  mov    0x168(%rsp),%rdx
  sub    %fs:0x28,%rdx
  jne    L1043
  add    $0x178,%rsp
  pop    %rbx
  pop    %rbp
  pop    %r12
  pop    %r13
  pop    %r14
  pop    %r15
  ret
L510:
  movdqa 0x90(%rsp),%xmm0
  lea    0x150(%rsp),%rsi
  mov    %rbp,%rdi
  xor    %eax,%eax
  pxor   0x130(%rsp),%xmm0
  movaps %xmm0,0x140(%rsp)
  call   <AES128Enc@plt>
  movzbl 0x150(%rsp),%eax
  xor    0xc0(%rsp),%al
  cmp    %al,(%rbx)
  jne    L439
  movzbl 0x151(%rsp),%eax
  xor    0xc1(%rsp),%al
  cmp    %al,0x1(%rbx)
  jne    L439
  movzbl 0x152(%rsp),%eax
  xor    0xc2(%rsp),%al
  cmp    %al,0x2(%rbx)
  jne    L439
  movzbl 0x153(%rsp),%eax
  xor    0xc3(%rsp),%al
  cmp    %al,0x3(%rbx)
  jne    L439
  movzbl 0x154(%rsp),%eax
  xor    0xc4(%rsp),%al
  cmp    %al,0x4(%rbx)
  jne    L439
  movzbl 0x155(%rsp),%eax
  xor    0xc5(%rsp),%al
  cmp    %al,0x5(%rbx)
  jne    L439
  movzbl 0xc6(%rsp),%eax
  xor    0x156(%rsp),%al
  cmp    0x6(%rbx),%al
  jne    L439
  movzbl 0x157(%rsp),%eax
  xor    0xc7(%rsp),%al
  cmp    %al,0x7(%rbx)
  jne    L439
  movzbl 0xc8(%rsp),%eax
  xor    0x158(%rsp),%al
  cmp    %al,0x8(%rbx)
  jne    L439
  movzbl 0x159(%rsp),%eax
  xor    0xc9(%rsp),%al
  cmp    %al,0x9(%rbx)
  jne    L439
  movzbl 0x15a(%rsp),%eax
  xor    0xca(%rsp),%al
  cmp    0xa(%rbx),%al
  jne    L439
  movzbl 0x15b(%rsp),%eax
  xor    0xcb(%rsp),%al
  cmp    %al,0xb(%rbx)
  jne    L439
  movzbl 0xcc(%rsp),%eax
  xor    0x15c(%rsp),%al
  cmp    0xc(%rbx),%al
  jne    L439
  movzbl 0xcd(%rsp),%eax
  xor    0x15d(%rsp),%al
  cmp    0xd(%rbx),%al
  jne    L439
  movzbl 0xce(%rsp),%eax
  xor    0x15e(%rsp),%al
  cmp    0xe(%rbx),%al
  jne    L439
  movzbl 0x15f(%rsp),%eax
  xor    0xcf(%rsp),%al
  cmp    %al,0xf(%rbx)
  jne    L439
  xor    %eax,%eax
  jmp    L1349
L277:
  movzbl 0x159(%rsp),%edx
  xor    0xc9(%rsp),%dl
  cmp    %dl,0x9(%rbx,%rax,1)
  jne    L439
  movzbl 0x15a(%rsp),%edx
  xor    0xca(%rsp),%dl
  cmp    %dl,0xa(%rbx,%rax,1)
  jne    L439
  movzbl 0x15b(%rsp),%edx
  xor    0xcb(%rsp),%dl
  cmp    %dl,0xb(%rbx,%rax,1)
  jne    L439
  movzbl 0x15c(%rsp),%edx
  xor    0xcc(%rsp),%dl
  cmp    %dl,0xc(%rbx,%rax,1)
  jne    L439
  movzbl 0x15d(%rsp),%edx
  xor    0xcd(%rsp),%dl
  cmp    %dl,0xd(%rbx,%rax,1)
  jne    L439
  movzbl 0x15e(%rsp),%edx
  xor    0xce(%rsp),%dl
  cmp    %dl,0xe(%rbx,%rax,1)
  jne    L439
  movzbl 0x15f(%rsp),%edx
  xor    0xcf(%rsp),%dl
  cmp    %dl,0xf(%rbx,%rax,1)
  jne    L439
  xor    %eax,%eax
  jmp    L1349
L113:
  test   $0x4,%al
  jne    L1123
  test   %eax,%eax
  je     L1332
  movb   $0x0,(%rdx)
  test   $0x2,%al
  je     L1332
  mov    %eax,%eax
  xor    %r8d,%r8d
  mov    %r8w,-0x2(%rdx,%rax,1)
  jmp    L1332
  nopl   (%rax)
L318:
  xor    %r10d,%r10d
  add    $0x2,%rax
  mov    %r10w,-0x2(%rax)
  test   $0x1,%r9b
  je     L453
  jmp    L1749
L1628:
  mov    %r9d,%edi
  xor    %eax,%eax
  and    $0xfffffff8,%edi
L723:
  mov    %eax,%ecx
  add    $0x8,%eax
  mov    %rsi,(%rdx,%rcx,1)
  cmp    %edi,%eax
  jb     L723
  add    %rdx,%rax
  jmp    L1508
L1749:
  movb   $0x0,(%rax)
  jmp    L453
L761:
  movl   $0x0,(%rax)
  add    $0x4,%rax
  test   $0x2,%r9b
  je     L181
  jmp    L318
L1271:
  mov    (%rax),%ecx
  mov    %ecx,(%rdi)
  mov    $0x4,%ecx
  testb  $0x2,0x40(%rsp)
  je     L1757
L1695:
  movzwl (%rax,%rcx,1),%esi
  mov    %si,(%rdi,%rcx,1)
  add    $0x2,%rcx
  testb  $0x1,0x40(%rsp)
  je     L1000
L1383:
  movzbl (%rax,%rcx,1),%eax
  mov    %al,(%rdi,%rcx,1)
  jmp    L1000
L412:
  xor    %edx,%edx
  add    $0x2,%rax
  mov    %dx,-0x2(%rax)
  test   $0x1,%r9b
  je     L1287
  jmp    L1167
L1488:
  movl   $0x0,(%rax)
  add    $0x4,%rax
  test   $0x2,%r9b
  je     L1616
  jmp    L412
L15:
  test   $0x4,%al
  jne    L637
  test   %eax,%eax
  je     L1200
  movb   $0x0,(%rdx)
  test   $0x2,%al
  je     L1200
  mov    %eax,%eax
  xor    %r13d,%r13d
  mov    %r13w,-0x2(%rdx,%rax,1)
  jmp    L1200
  nopl   0x0(%rax)
L1167:
  movb   $0x0,(%rax)
  jmp    L1287
L1206:
  mov    %ecx,%r8d
  xor    %eax,%eax
  and    $0xfffffff8,%r8d
L136:
  mov    %eax,%ecx
  add    $0x8,%eax
  mov    (%rsi,%rcx,1),%rdi
  mov    %rdi,(%rdx,%rcx,1)
  cmp    %r8d,%eax
  jb     L136
  lea    (%rdx,%rax,1),%rdi
  add    %rsi,%rax
  jmp    L579
L1474:
  mov    %r9d,%r10d
  xor    %eax,%eax
  and    $0xfffffff8,%r10d
L799:
  mov    %eax,%edi
  add    $0x8,%eax
  mov    %r8,(%rdx,%rdi,1)
  cmp    %r10d,%eax
  jb     L799
L624:
  add    %rdx,%rax
  jmp    L641
L1041:
  movzbl (%rbx,%r14,1),%edx
  xor    0x150(%rsp),%dl
  mov    %dl,(%rcx)
  movzbl 0x151(%rsp),%edx
  xor    (%rax),%dl
  mov    %edx,%eax
  mov    0x28(%rsp),%rdx
  mov    %al,0x1(%rdx,%r14,1)
  movzbl 0x2(%rbx,%r14,1),%eax
  xor    0x152(%rsp),%al
  mov    %al,0x2(%rdx,%r14,1)
  movzbl 0x3(%rbx,%r14,1),%eax
  xor    0x153(%rsp),%al
  mov    %al,0x3(%rdx,%r14,1)
  movzbl 0x4(%rbx,%r14,1),%eax
  xor    0x154(%rsp),%al
  mov    %al,0x4(%rdx,%r14,1)
  movzbl 0x5(%rbx,%r14,1),%eax
  xor    0x155(%rsp),%al
  mov    %al,0x5(%rdx,%r14,1)
  movzbl 0x6(%rbx,%r14,1),%eax
  xor    0x156(%rsp),%al
  mov    %al,0x6(%rdx,%r14,1)
  movzbl 0x7(%rbx,%r14,1),%eax
  xor    0x157(%rsp),%al
  mov    %al,0x7(%rdx,%r14,1)
  movzbl 0x8(%rbx,%r14,1),%eax
  xor    0x158(%rsp),%al
  mov    %al,0x8(%rdx,%r14,1)
  movzbl 0x9(%rbx,%r14,1),%eax
  xor    0x159(%rsp),%al
  mov    %al,0x9(%rdx,%r14,1)
  movzbl 0xa(%rbx,%r14,1),%eax
  xor    0x15a(%rsp),%al
  mov    %al,0xa(%rdx,%r14,1)
  movzbl 0xb(%rbx,%r14,1),%eax
  xor    0x15b(%rsp),%al
  mov    %al,0xb(%rdx,%r14,1)
  movzbl 0xc(%rbx,%r14,1),%eax
  xor    0x15c(%rsp),%al
  mov    %al,0xc(%rdx,%r14,1)
  movzbl 0xd(%rbx,%r14,1),%eax
  xor    0x15d(%rsp),%al
  mov    %al,0xd(%rdx,%r14,1)
  movzbl 0xe(%rbx,%r14,1),%eax
  xor    0x15e(%rsp),%al
  mov    %al,0xe(%rdx,%r14,1)
  movzbl 0xf(%rbx,%r14,1),%eax
  xor    0x15f(%rsp),%al
  mov    %al,0xf(%rdx,%r14,1)
  movdqu (%rcx),%xmm1
  jmp    L752
L874:
  movzbl (%rbx,%r14,1),%edx
  xor    0x150(%rsp),%dl
  mov    %dl,(%rcx)
  testb  $0xe,0x20(%rsp)
  je     L45
  movzbl 0x151(%rsp),%edx
  xor    (%rax),%dl
  mov    %edx,%eax
  mov    0x28(%rsp),%rdx
  mov    %al,(%rdx,%rdi,1)
  cmp    $0x2,%r9
  je     L45
  movzbl 0x2(%rbx,%r14,1),%eax
  xor    0x152(%rsp),%al
  mov    %al,0x2(%rdx,%r14,1)
  cmp    $0x3,%r9
  je     L45
  movzbl 0x3(%rbx,%r14,1),%eax
  xor    0x153(%rsp),%al
  mov    %al,0x3(%rdx,%r14,1)
  cmp    $0x4,%r9
  je     L45
  movzbl 0x4(%rbx,%r14,1),%eax
  xor    0x154(%rsp),%al
  mov    %al,0x4(%rdx,%r14,1)
  cmp    $0x5,%r9
  je     L45
  movzbl 0x5(%rbx,%r14,1),%eax
  xor    0x155(%rsp),%al
  mov    %al,0x5(%rdx,%r14,1)
  cmp    $0x6,%r9
  je     L45
  movzbl 0x6(%rbx,%r14,1),%eax
  xor    0x156(%rsp),%al
  mov    %al,0x6(%rdx,%r14,1)
  cmp    $0x7,%r9
  je     L45
  movzbl 0x7(%rbx,%r14,1),%eax
  xor    0x157(%rsp),%al
  mov    %al,0x7(%rdx,%r14,1)
  cmp    $0x8,%r9
  je     L45
  movzbl 0x8(%rbx,%r14,1),%eax
  xor    0x158(%rsp),%al
  mov    %al,0x8(%rdx,%r14,1)
  cmp    $0x9,%r9
  je     L906
  movzbl 0x9(%rbx,%r14,1),%eax
  xor    0x159(%rsp),%al
  mov    %al,0x9(%rdx,%r14,1)
  cmp    $0xa,%r9
  je     L906
  movzbl 0xa(%rbx,%r14,1),%eax
  xor    0x15a(%rsp),%al
  mov    %al,0xa(%rdx,%r14,1)
  cmp    $0xb,%r9
  je     L906
  movzbl 0xb(%rbx,%r14,1),%eax
  xor    0x15b(%rsp),%al
  mov    %al,0xb(%rdx,%r14,1)
  cmp    $0xc,%r9
  je     L906
  movzbl 0xc(%rbx,%r14,1),%eax
  xor    0x15c(%rsp),%al
  mov    %al,0xc(%rdx,%r14,1)
  cmp    $0xd,%r9
  je     L906
  movzbl 0xd(%rbx,%r14,1),%eax
  xor    0x15d(%rsp),%al
  mov    %al,0xd(%rdx,%r14,1)
  cmp    $0xf,%r9
  jne    L906
  movzbl 0xe(%rbx,%r14,1),%eax
  xor    0x15e(%rsp),%al
  mov    %al,0xe(%rdx,%r14,1)
L906:
  lea    0x110(%rsp),%rdx
  xor    %r8d,%r8d
  mov    %rdx,%rax
  cmp    $0x8,%r9d
  jb     L641
  mov    %r9d,%edi
  xor    %eax,%eax
  and    $0xfffffff8,%edi
L532:
  mov    %eax,%r10d
  add    $0x8,%eax
  mov    %r8,(%rdx,%r10,1)
  cmp    %edi,%eax
  jb     L532
  jmp    L624
  nop
L45:
  lea    0x110(%rsp),%rdx
  xor    %r8d,%r8d
  mov    %rdx,%rax
  cmp    $0x8,%r9d
  jae    L271
L490:
  test   $0x4,%r9b
  je     L1609
  movl   $0x0,(%rax)
  add    $0x4,%rax
L1609:
  test   $0x2,%r9b
  je     L398
  xor    %edi,%edi
  add    $0x2,%rax
  mov    %di,-0x2(%rax)
L398:
  test   $0x1,%r9b
  je     L1175
  movb   $0x0,(%rax)
L1175:
  mov    $0xf,%edi
  mov    $0x10,%edx
  sub    %r9,%rdi
  sub    %r9,%rdx
  cmp    $0x6,%rdi
  jbe    L1566
  movq   0x100(%rsp,%r9,1),%xmm0
  lea    0x8(%r9),%rax
  movq   0x150(%rsp,%r9,1),%xmm1
  pxor   %xmm1,%xmm0
  movq   %xmm0,0x110(%rsp,%r9,1)
  cmp    $0x8,%rdx
  jne    L1338
L551:
  mov    $0x8,%edx
  jmp    L1532
L271:
  mov    %r9d,%r10d
  xor    %eax,%eax
  and    $0xfffffff8,%r10d
L1408:
  mov    %eax,%edi
  add    $0x8,%eax
  mov    %r8,(%rdx,%rdi,1)
  cmp    %r10d,%eax
  jb     L1408
  add    %rdx,%rax
  jmp    L490
L1569:
  movq   0x108(%rsp),%xmm0
  mov    $0x7,%edi
  movq   0x158(%rsp),%xmm1
  movq   $0x0,0x110(%rsp)
  pxor   %xmm1,%xmm0
  movq   %xmm0,0x118(%rsp)
  jmp    L551
L118:
  xor    %eax,%eax
  jmp    L1500
L1745:
  mov    %r9,%rax
  jmp    L633
L1123:
  mov    %eax,%eax
  movl   $0x0,(%rdx)
  movl   $0x0,-0x4(%rdx,%rax,1)
  jmp    L1332
L637:
  mov    %eax,%eax
  movl   $0x0,(%rdx)
  movl   $0x0,-0x4(%rdx,%rax,1)
  jmp    L1200
L1263:
  mov    $0xfffffffe,%eax
  jmp    L1349
L1566:
  mov    %r9,%rax
  jmp    L1338
L1043:
  call   <__stack_chk_fail@plt>
```

assistant: ```c
int crypto_aead_decrypt(unsigned char *m, unsigned long long *mlen, unsigned char *nsec, const unsigned char *c, unsigned long long clen, const unsigned char *ad, unsigned long long adlen, const unsigned char *npub, const unsigned char *k) {
  unsigned char SumB[16], LastABlock[16], MacAESTag[16], Key[16], Double[16];
  unsigned long long a;
  unsigned char PaddedPMN[16];
  unsigned char LastCiphertextBlock[16], PaddedBlock[16];
  unsigned long long l;
  unsigned char StolenR[16];
  unsigned char Z[3][16], NextZ[16], U[16];
  unsigned char AESInputBlock[16], AESOutputBlock[16];
  unsigned long long i, j;
  for (j = 0; j < 16; j++)
    Key[j] = k[j];
  keyschedule(Key, 10);
  for (j = 0; j < 16; j++)
    AESInputBlock[j] = 0x0;
  AES128Enc(AESInputBlock, Z[0]);
  for (i = 0; i < 2; i++)
    Times2(Z[i], Z[i + 1]);
  Times2(Z[2], NextZ);
  if (adlen == 0) {
    for (j = 0; j < 16; j++)
      MacAESTag[j] = 0x0;
  } else {
    if (adlen % 16 == 0)
      a = adlen / 16;
    else
      a = adlen / 16 + 1;
    for (j = 0; j < 16; j++)
      SumB[j] = 0x0;
    for (i = 0; i < a - 1; i++) {
      for (j = 0; j < 16; j++)
        AESInputBlock[j] = ad[i * 16 + j] ^ NextZ[j];
      AES128Enc(AESInputBlock, AESOutputBlock);
      for (j = 0; j < 16; j++)
        SumB[j] = SumB[j] ^ AESOutputBlock[j];
      Times2(NextZ, Double);
      for (j = 0; j < 16; j++)
        NextZ[j] = Double[j];
    }
    if (adlen % 16 != 0) {
      for (j = 0; j < adlen % 16; j++)
        LastABlock[j] = ad[(a - 1) * 16 + j];
      LastABlock[adlen % 16] = 0x80;
      for (j = adlen % 16 + 1; j < 16; j++)
        LastABlock[j] = 0x0;
      for (j = 0; j < 16; j++)
        AESInputBlock[j] = SumB[j] ^ LastABlock[j] ^ Z[1][j];
    } else {
      for (j = 0; j < 16; j++)
        AESInputBlock[j] = SumB[j] ^ ad[(a - 1) * 16 + j] ^ Z[2][j];
    }
    AES128Enc(AESInputBlock, MacAESTag);
  }
  if (clen < 16)
    return -2;
  *mlen = clen - 16;
  for (j = 0; j < 13; j++)
    PaddedPMN[j] = npub[j];
  PaddedPMN[13] = 0x80;
  for (j = 13 + 1; j < 16; j++)
    PaddedPMN[j] = 0x0;
  AES128Enc(PaddedPMN, U);
  if (clen == 16) {
    for (j = 0; j < 16; j++)
      AESInputBlock[j] = Z[2][j] ^ U[j];
    AES128Enc(AESInputBlock, AESOutputBlock);
    for (j = 0; j < 16; j++) {
      if (c[j] != (AESOutputBlock[j] ^ MacAESTag[j]))
        return -1;
    }
  } else {
    l = clen / 16 - 1;
    if (clen % 16 != 0) {
      l = l + 1;
      for (j = 0; j < clen % 16; j++) {
        LastCiphertextBlock[j] = c[(l - 1) * 16 + j];
        PaddedBlock[j] = 0x0;
      }
      LastCiphertextBlock[clen % 16] = 0x0;
      PaddedBlock[clen % 16] = 0x80;
      for (j = clen % 16 + 1; j < 16; j++) {
        LastCiphertextBlock[j] = 0x0;
        PaddedBlock[j] = 0x0;
      }
    } else {
      for (j = 0; j < 16; j++) {
        LastCiphertextBlock[j] = c[(l - 1) * 16 + j];
        PaddedBlock[j] = 0x0;
      }
    }
    Times2(Z[2], NextZ);
    for (j = 0; j < 16; j++)
      AESInputBlock[j] = NextZ[j] ^ U[j];
    AES128Enc(AESInputBlock, AESOutputBlock);
    for (i = 0; i < l - 1; i++) {
      Times2(NextZ, Double);
      for (j = 0; j < 16; j++) {
        AESInputBlock[j] = AESOutputBlock[j] ^ c[i * 16 + j];
        m[i * 16 + j] = AESInputBlock[j] ^ Double[j] ^ U[j];
        NextZ[j] = Double[j];
      }
      AES128Enc(AESInputBlock, AESOutputBlock);
    }
    if (clen % 16 != 0) {
      for (j = 0; j < clen % 16; j++) {
        m[(l - 1) * 16 + j] = AESOutputBlock[j] ^ c[(l - 1) * 16 + j];
        StolenR[j] = 0x0;
      }
      for (j = (clen % 16); j < 16; j++)
        StolenR[j] = AESOutputBlock[j] ^ PaddedBlock[j];
    } else {
      for (j = 0; j < 16; j++) {
        m[(l - 1) * 16 + j] = AESOutputBlock[j] ^ c[(l - 1) * 16 + j];
        StolenR[j] = 0x0;
      }
    }
    if (clen % 16 != 0) {
      for (j = 0; j < (clen % 16); j++)
        AESInputBlock[j] = m[(l - 1) * 16 + j] ^ Z[1][j] ^ U[j];
      for (j = (clen % 16); j < 16; j++)
        AESInputBlock[j] = StolenR[j] ^ Z[1][j] ^ U[j];
      AES128Enc(AESInputBlock, AESOutputBlock);
      for (j = 0; j < 16; j++) {
        if (c[(l - 1) * 16 + clen % 16 + j] != (AESOutputBlock[j] ^ MacAESTag[j]))
          return -1;
      }
    } else {
      for (j = 0; j < 16; j++)
        AESInputBlock[j] = m[(l - 1) * 16 + j] ^ Z[2][j] ^ U[j];
      AES128Enc(AESInputBlock, AESOutputBlock);
      for (j = 0; j < 16; j++) {
        if (c[l * 16 + j] != (AESOutputBlock[j] ^ MacAESTag[j]))
          return -1;
      }
    }
  }
  return 0;
}
```