user: Demonstrate the C code that generates the assembly output below:

```asm
<crypto_aead_decrypt>:
  endbr64
  push   %r15
  push   %r14
  push   %r13
  push   %r12
  push   %rbp
  push   %rbx
  sub    $0x158,%rsp
  mov    %rdi,0x28(%rsp)
  mov    %rsi,0x30(%rsp)
  mov    %rcx,0x20(%rsp)
  mov    %r8,0x18(%rsp)
  mov    %r9,0x38(%rsp)
  mov    0x190(%rsp),%r14
  mov    0x198(%rsp),%r15
  mov    0x1a0(%rsp),%rcx
  mov    %fs:0x28,%rax
  mov    %rax,0x148(%rsp)
  xor    %eax,%eax
L356:
  movzbl (%rcx,%rax,1),%edx
  mov    %dl,0xb0(%rsp,%rax,1)
  add    $0x1,%rax
  cmp    $0x10,%rax
  jne    L356
  lea    0xb0(%rsp),%rdi
  mov    $0xa,%esi
  mov    $0x0,%eax
  call   <keyschedule@plt>
  lea    0x120(%rsp),%rax
  lea    0x130(%rsp),%rdx
L250:
  movb   $0x0,(%rax)
  add    $0x1,%rax
  cmp    %rax,%rdx
  jne    L250
  lea    0x50(%rsp),%rbx
  lea    0x120(%rsp),%rdi
  mov    %rbx,%rsi
  mov    $0x0,%eax
  call   <AES128Enc@plt>
  lea    0x60(%rsp),%rbp
  mov    %rbp,%rsi
  mov    %rbx,%rdi
  mov    $0x0,%eax
  call   <Times2@plt>
  lea    0x70(%rsp),%rbx
  mov    %rbx,%rsi
  mov    %rbp,%rdi
  mov    $0x0,%eax
  call   <Times2@plt>
  lea    0x100(%rsp),%rsi
  mov    %rbx,%rdi
  mov    $0x0,%eax
  call   <Times2@plt>
  test   %r14,%r14
  jne    L432
  lea    0xa0(%rsp),%rax
  lea    0xb0(%rsp),%rdx
L505:
  movb   $0x0,(%rax)
  add    $0x1,%rax
  cmp    %rax,%rdx
  jne    L505
  jmp    L236
L432:
  mov    %r14,%rax
  shr    $0x4,%rax
  mov    %rax,%rdx
  add    $0x1,%rdx
  and    $0xf,%r14d
  cmove  %rax,%rdx
  lea    0x80(%rsp),%rax
  mov    %rax,0x10(%rsp)
  lea    0x90(%rsp),%r12
L366:
  movb   $0x0,(%rax)
  add    $0x1,%rax
  cmp    %rax,%r12
  jne    L366
  sub    $0x1,%rdx
  mov    %rdx,0x8(%rsp)
  je     L239
  mov    0x38(%rsp),%rbp
  mov    $0x0,%edi
  lea    0x100(%rsp),%rbx
  lea    0x130(%rsp),%rax
  lea    0xc0(%rsp),%r13
  mov    %r14,0x40(%rsp)
  mov    %rdi,%r14
  mov    %r15,0x48(%rsp)
  mov    %rax,%r15
L408:
  mov    $0x0,%eax
L340:
  movzbl 0x0(%rbp,%rax,1),%edx
  xor    (%rax,%rbx,1),%dl
  mov    %dl,0x120(%rsp,%rax,1)
  add    $0x1,%rax
  cmp    $0x10,%rax
  jne    L340
  lea    0x120(%rsp),%rdi
  mov    %r15,%rsi
  mov    $0x0,%eax
  call   <AES128Enc@plt>
  mov    %r15,%rdx
  mov    0x10(%rsp),%rax
L301:
  movzbl (%rdx),%ecx
  xor    %cl,(%rax)
  add    $0x1,%rax
  add    $0x1,%rdx
  cmp    %rax,%r12
  jne    L301
  mov    %r13,%rsi
  mov    %rbx,%rdi
  mov    $0x0,%eax
  call   <Times2@plt>
  mov    $0x0,%eax
L267:
  movzbl (%rax,%r13,1),%edx
  mov    %dl,(%rax,%rbx,1)
  add    $0x1,%rax
  cmp    $0x10,%rax
  jne    L267
  add    $0x1,%r14
  add    $0x10,%rbp
  cmp    0x8(%rsp),%r14
  jne    L408
  mov    0x40(%rsp),%r14
  mov    0x48(%rsp),%r15
L239:
  test   %r14,%r14
  je     L15
  mov    0x8(%rsp),%rcx
  shl    $0x4,%rcx
  mov    $0x0,%eax
  add    0x38(%rsp),%rcx
L452:
  movzbl (%rcx,%rax,1),%edx
  mov    %dl,0x90(%rsp,%rax,1)
  add    $0x1,%rax
  cmp    %rax,%r14
  jne    L452
  movb   $0x80,0x90(%rsp,%r14,1)
  lea    0x1(%r14),%rax
  cmp    $0xf,%rax
  ja     L359
  lea    0x90(%rsp,%r14,1),%rax
  lea    0x9f(%rsp),%rdx
L469:
  movb   $0x0,0x1(%rax)
  add    $0x1,%rax
  cmp    %rax,%rdx
  jne    L469
L359:
  mov    $0x0,%eax
  lea    0x90(%rsp),%rsi
  lea    0x60(%rsp),%rcx
L355:
  movzbl 0x80(%rsp,%rax,1),%edx
  xor    (%rax,%rsi,1),%dl
  xor    (%rcx,%rax,1),%dl
  mov    %dl,0x120(%rsp,%rax,1)
  add    $0x1,%rax
  cmp    $0x10,%rax
  jne    L355
L148:
  lea    0xa0(%rsp),%rsi
  lea    0x120(%rsp),%rdi
  mov    $0x0,%eax
  call   <AES128Enc@plt>
L236:
  mov    0x18(%rsp),%rax
  cmp    $0xf,%rax
  jbe    L64
  sub    $0x10,%rax
  mov    0x30(%rsp),%rdi
  mov    %rax,(%rdi)
  mov    $0x0,%eax
L40:
  movzbl (%r15,%rax,1),%edx
  mov    %dl,0xd0(%rsp,%rax,1)
  add    $0x1,%rax
  cmp    $0xd,%rax
  jne    L40
  movb   $0x80,0xdd(%rsp)
  movb   $0x0,0xde(%rsp)
  movb   $0x0,0xdf(%rsp)
  lea    0x110(%rsp),%rsi
  lea    0xd0(%rsp),%rdi
  mov    $0x0,%eax
  call   <AES128Enc@plt>
  cmpq   $0x10,0x18(%rsp)
  je     L176
  mov    0x18(%rsp),%rax
  mov    %rax,%rdi
  shr    $0x4,%rdi
  mov    %rdi,0x10(%rsp)
  and    $0xf,%eax
  mov    %rax,%r15
  je     L221
  lea    0xe0(%rsp),%rdx
  lea    (%rax,%rdx,1),%rcx
  mov    %rdx,%rax
L174:
  movb   $0x0,(%rax)
  add    $0x1,%rax
  cmp    %rax,%rcx
  jne    L174
  movb   $0x80,0xe0(%rsp,%r15,1)
  lea    0x1(%r15),%rax
  cmp    $0xf,%rax
  ja     L208
  lea    0xe0(%rsp,%r15,1),%rax
  add    $0xf,%rdx
L351:
  movb   $0x0,0x1(%rax)
  add    $0x1,%rax
  cmp    %rax,%rdx
  jne    L351
  jmp    L208
L15:
  mov    0x8(%rsp),%rax
  shl    $0x4,%rax
  mov    0x38(%rsp),%rdx
  add    %rax,%rdx
  lea    0x80(%rsp),%rsi
  lea    0x70(%rsp),%rcx
L388:
  movzbl (%rdx,%r14,1),%eax
  xor    (%r14,%rsi,1),%al
  xor    (%rcx,%r14,1),%al
  mov    %al,0x120(%rsp,%r14,1)
  add    $0x1,%r14
  cmp    $0x10,%r14
  jne    L388
  jmp    L148
L176:
  mov    $0x0,%eax
  lea    0x70(%rsp),%rsi
  lea    0x110(%rsp),%rcx
L488:
  movzbl (%rsi,%rax,1),%edx
  xor    (%rax,%rcx,1),%dl
  mov    %dl,0x120(%rsp,%rax,1)
  add    $0x1,%rax
  cmp    $0x10,%rax
  jne    L488
  lea    0x130(%rsp),%rsi
  lea    0x120(%rsp),%rdi
  mov    $0x0,%eax
  call   <AES128Enc@plt>
  mov    $0x0,%eax
  lea    0xa0(%rsp),%rcx
  mov    0x20(%rsp),%rsi
L419:
  movzbl 0x130(%rsp,%rax,1),%edx
  xor    (%rax,%rcx,1),%dl
  cmp    %dl,(%rsi,%rax,1)
  jne    L294
  add    $0x1,%rax
  cmp    $0x10,%rax
  jne    L419
  mov    $0x0,%eax
L212:
  mov    0x148(%rsp),%rdx
  sub    %fs:0x28,%rdx
  jne    L77
  add    $0x158,%rsp
  pop    %rbx
  pop    %rbp
  pop    %r12
  pop    %r13
  pop    %r14
  pop    %r15
  ret
L221:
  lea    0xe0(%rsp),%rax
  lea    0xf0(%rsp),%rdx
L252:
  movb   $0x0,(%rax)
  add    $0x1,%rax
  cmp    %rax,%rdx
  jne    L252
  subq   $0x1,0x10(%rsp)
L208:
  lea    0x100(%rsp),%rsi
  lea    0x70(%rsp),%rdi
  mov    $0x0,%eax
  call   <Times2@plt>
  mov    $0x0,%eax
  lea    0x110(%rsp),%rcx
L17:
  movzbl 0x100(%rsp,%rax,1),%edx
  xor    (%rax,%rcx,1),%dl
  mov    %dl,0x120(%rsp,%rax,1)
  add    $0x1,%rax
  cmp    $0x10,%rax
  jne    L17
  lea    0x130(%rsp),%rsi
  lea    0x120(%rsp),%rdi
  mov    $0x0,%eax
  call   <AES128Enc@plt>
  mov    0x10(%rsp),%rax
  sub    $0x1,%rax
  mov    %rax,0x8(%rsp)
  je     L425
  mov    0x20(%rsp),%rbp
  mov    0x28(%rsp),%rbx
  mov    $0x0,%eax
  lea    0xc0(%rsp),%r13
  lea    0x100(%rsp),%r12
  lea    0x110(%rsp),%r14
  mov    %r15,0x18(%rsp)
  mov    %rax,%r15
L22:
  mov    %r13,%rsi
  mov    %r12,%rdi
  mov    $0x0,%eax
  call   <Times2@plt>
  mov    $0x0,%eax
L103:
  movzbl 0x130(%rsp,%rax,1),%edx
  xor    0x0(%rbp,%rax,1),%dl
  mov    %dl,0x120(%rsp,%rax,1)
  movzbl (%rax,%r13,1),%esi
  mov    %esi,%ecx
  xor    (%rax,%r14,1),%cl
  xor    %ecx,%edx
  mov    %dl,(%rbx,%rax,1)
  mov    %sil,(%rax,%r12,1)
  add    $0x1,%rax
  cmp    $0x10,%rax
  jne    L103
  lea    0x130(%rsp),%rsi
  lea    0x120(%rsp),%rdi
  mov    $0x0,%eax
  call   <AES128Enc@plt>
  add    $0x1,%r15
  add    $0x10,%rbp
  add    $0x10,%rbx
  cmp    0x8(%rsp),%r15
  jne    L22
  mov    0x18(%rsp),%r15
L425:
  test   %r15,%r15
  je     L459
  mov    0x8(%rsp),%rcx
  shl    $0x4,%rcx
  lea    (%r15,%rcx,1),%rbx
  mov    %rcx,%rax
  lea    0x130(%rsp),%rdi
  sub    %rcx,%rdi
  lea    0xf0(%rsp),%rsi
  sub    %rcx,%rsi
  mov    0x28(%rsp),%r8
  mov    0x20(%rsp),%r9
L27:
  movzbl (%rdi,%rax,1),%edx
  xor    (%r9,%rax,1),%dl
  mov    %dl,(%r8,%rax,1)
  movb   $0x0,(%rsi,%rax,1)
  add    $0x1,%rax
  cmp    %rax,%rbx
  jne    L27
  mov    %r15,%rax
  lea    0xe0(%rsp),%rsi
L372:
  movzbl 0x130(%rsp,%rax,1),%edx
  xor    (%rax,%rsi,1),%dl
  mov    %dl,0xf0(%rsp,%rax,1)
  add    $0x1,%rax
  cmp    $0x10,%rax
  jne    L372
  mov    $0x0,%eax
  add    0x28(%rsp),%rcx
  lea    0x60(%rsp),%rdi
  lea    0x110(%rsp),%rsi
L444:
  movzbl (%rcx,%rax,1),%edx
  xor    (%rdi,%rax,1),%dl
  xor    (%rax,%rsi,1),%dl
  mov    %dl,0x120(%rsp,%rax,1)
  add    $0x1,%rax
  cmp    %rax,%r15
  jne    L444
  lea    0x60(%rsp),%rcx
  lea    0x110(%rsp),%rdx
L231:
  movzbl 0xf0(%rsp,%r15,1),%eax
  xor    (%rcx,%r15,1),%al
  xor    (%r15,%rdx,1),%al
  mov    %al,0x120(%rsp,%r15,1)
  add    $0x1,%r15
  cmp    $0x10,%r15
  jne    L231
  lea    0x130(%rsp),%rsi
  lea    0x120(%rsp),%rdi
  mov    $0x0,%eax
  call   <AES128Enc@plt>
  mov    $0x0,%eax
  add    0x20(%rsp),%rbx
  lea    0xa0(%rsp),%rcx
L365:
  movzbl 0x130(%rsp,%rax,1),%edx
  xor    (%rax,%rcx,1),%dl
  cmp    %dl,(%rbx,%rax,1)
  jne    L235
  add    $0x1,%rax
  cmp    $0x10,%rax
  jne    L365
  mov    $0x0,%eax
  jmp    L212
L459:
  mov    0x8(%rsp),%rcx
  shl    $0x4,%rcx
  mov    %r15,%rax
  mov    0x28(%rsp),%rsi
  add    %rcx,%rsi
  add    0x20(%rsp),%rcx
  lea    0x130(%rsp),%rdi
L177:
  movzbl (%rcx,%rax,1),%edx
  xor    (%rax,%rdi,1),%dl
  mov    %dl,(%rsi,%rax,1)
  add    $0x1,%rax
  cmp    $0x10,%rax
  jne    L177
  mov    %r15,%rax
  lea    0x70(%rsp),%rdi
  lea    0x110(%rsp),%rcx
L178:
  movzbl (%rsi,%rax,1),%edx
  xor    (%rdi,%rax,1),%dl
  xor    (%rax,%rcx,1),%dl
  mov    %dl,0x120(%rsp,%rax,1)
  add    $0x1,%rax
  cmp    $0x10,%rax
  jne    L178
  lea    0x130(%rsp),%rsi
  lea    0x120(%rsp),%rdi
  mov    $0x0,%eax
  call   <AES128Enc@plt>
  mov    0x10(%rsp),%rax
  shl    $0x4,%rax
  mov    0x20(%rsp),%rdx
  add    %rax,%rdx
  lea    0xa0(%rsp),%rcx
L487:
  movzbl 0x130(%rsp,%r15,1),%eax
  xor    (%r15,%rcx,1),%al
  cmp    %al,(%rdx,%r15,1)
  jne    L164
  add    $0x1,%r15
  cmp    $0x10,%r15
  jne    L487
  mov    $0x0,%eax
  jmp    L212
L64:
  mov    $0xfffffffe,%eax
  jmp    L212
L294:
  mov    $0xffffffff,%eax
  jmp    L212
L235:
  mov    $0xffffffff,%eax
  jmp    L212
L164:
  mov    $0xffffffff,%eax
  jmp    L212
L77:
  call   <__stack_chk_fail@plt>
```

assistant: ```c
int crypto_aead_decrypt(unsigned char *m, unsigned long long *mlen, unsigned char *nsec, const unsigned char *c, unsigned long long clen, const unsigned char *ad, unsigned long long adlen, const unsigned char *npub, const unsigned char *k) {
  unsigned char SumB[16], LastABlock[16], MacAESTag[16], Key[16], Double[16];
  unsigned long long a;
  unsigned char PaddedPMN[16];
  unsigned char LastCiphertextBlock[16], PaddedBlock[16];
  unsigned long long l;
  unsigned char StolenR[16];
  unsigned char Z[3][16], NextZ[16], U[16];
  unsigned char AESInputBlock[16], AESOutputBlock[16];
  unsigned long long i, j;
  for (j = 0; j < 16; j++)
    Key[j] = k[j];
  keyschedule(Key, 10);
  for (j = 0; j < 16; j++)
    AESInputBlock[j] = 0x0;
  AES128Enc(AESInputBlock, Z[0]);
  for (i = 0; i < 2; i++)
    Times2(Z[i], Z[i + 1]);
  Times2(Z[2], NextZ);
  if (adlen == 0) {
    for (j = 0; j < 16; j++)
      MacAESTag[j] = 0x0;
  } else {
    if (adlen % 16 == 0)
      a = adlen / 16;
    else
      a = adlen / 16 + 1;
    for (j = 0; j < 16; j++)
      SumB[j] = 0x0;
    for (i = 0; i < a - 1; i++) {
      for (j = 0; j < 16; j++)
        AESInputBlock[j] = ad[i * 16 + j] ^ NextZ[j];
      AES128Enc(AESInputBlock, AESOutputBlock);
      for (j = 0; j < 16; j++)
        SumB[j] = SumB[j] ^ AESOutputBlock[j];
      Times2(NextZ, Double);
      for (j = 0; j < 16; j++)
        NextZ[j] = Double[j];
    }
    if (adlen % 16 != 0) {
      for (j = 0; j < adlen % 16; j++)
        LastABlock[j] = ad[(a - 1) * 16 + j];
      LastABlock[adlen % 16] = 0x80;
      for (j = adlen % 16 + 1; j < 16; j++)
        LastABlock[j] = 0x0;
      for (j = 0; j < 16; j++)
        AESInputBlock[j] = SumB[j] ^ LastABlock[j] ^ Z[1][j];
    } else {
      for (j = 0; j < 16; j++)
        AESInputBlock[j] = SumB[j] ^ ad[(a - 1) * 16 + j] ^ Z[2][j];
    }
    AES128Enc(AESInputBlock, MacAESTag);
  }
  if (clen < 16)
    return -2;
  *mlen = clen - 16;
  for (j = 0; j < 13; j++)
    PaddedPMN[j] = npub[j];
  PaddedPMN[13] = 0x80;
  for (j = 13 + 1; j < 16; j++)
    PaddedPMN[j] = 0x0;
  AES128Enc(PaddedPMN, U);
  if (clen == 16) {
    for (j = 0; j < 16; j++)
      AESInputBlock[j] = Z[2][j] ^ U[j];
    AES128Enc(AESInputBlock, AESOutputBlock);
    for (j = 0; j < 16; j++) {
      if (c[j] != (AESOutputBlock[j] ^ MacAESTag[j]))
        return -1;
    }
  } else {
    l = clen / 16 - 1;
    if (clen % 16 != 0) {
      l = l + 1;
      for (j = 0; j < clen % 16; j++) {
        LastCiphertextBlock[j] = c[(l - 1) * 16 + j];
        PaddedBlock[j] = 0x0;
      }
      LastCiphertextBlock[clen % 16] = 0x0;
      PaddedBlock[clen % 16] = 0x80;
      for (j = clen % 16 + 1; j < 16; j++) {
        LastCiphertextBlock[j] = 0x0;
        PaddedBlock[j] = 0x0;
      }
    } else {
      for (j = 0; j < 16; j++) {
        LastCiphertextBlock[j] = c[(l - 1) * 16 + j];
        PaddedBlock[j] = 0x0;
      }
    }
    Times2(Z[2], NextZ);
    for (j = 0; j < 16; j++)
      AESInputBlock[j] = NextZ[j] ^ U[j];
    AES128Enc(AESInputBlock, AESOutputBlock);
    for (i = 0; i < l - 1; i++) {
      Times2(NextZ, Double);
      for (j = 0; j < 16; j++) {
        AESInputBlock[j] = AESOutputBlock[j] ^ c[i * 16 + j];
        m[i * 16 + j] = AESInputBlock[j] ^ Double[j] ^ U[j];
        NextZ[j] = Double[j];
      }
      AES128Enc(AESInputBlock, AESOutputBlock);
    }
    if (clen % 16 != 0) {
      for (j = 0; j < clen % 16; j++) {
        m[(l - 1) * 16 + j] = AESOutputBlock[j] ^ c[(l - 1) * 16 + j];
        StolenR[j] = 0x0;
      }
      for (j = (clen % 16); j < 16; j++)
        StolenR[j] = AESOutputBlock[j] ^ PaddedBlock[j];
    } else {
      for (j = 0; j < 16; j++) {
        m[(l - 1) * 16 + j] = AESOutputBlock[j] ^ c[(l - 1) * 16 + j];
        StolenR[j] = 0x0;
      }
    }
    if (clen % 16 != 0) {
      for (j = 0; j < (clen % 16); j++)
        AESInputBlock[j] = m[(l - 1) * 16 + j] ^ Z[1][j] ^ U[j];
      for (j = (clen % 16); j < 16; j++)
        AESInputBlock[j] = StolenR[j] ^ Z[1][j] ^ U[j];
      AES128Enc(AESInputBlock, AESOutputBlock);
      for (j = 0; j < 16; j++) {
        if (c[(l - 1) * 16 + clen % 16 + j] != (AESOutputBlock[j] ^ MacAESTag[j]))
          return -1;
      }
    } else {
      for (j = 0; j < 16; j++)
        AESInputBlock[j] = m[(l - 1) * 16 + j] ^ Z[2][j] ^ U[j];
      AES128Enc(AESInputBlock, AESOutputBlock);
      for (j = 0; j < 16; j++) {
        if (c[l * 16 + j] != (AESOutputBlock[j] ^ MacAESTag[j]))
          return -1;
      }
    }
  }
  return 0;
}
```