user: 请显示与下面列出的汇编代码相匹配的C语言实现：

```asm
<crypto_aead_decrypt>:
  endbr64
  push   %r15
  push   %r14
  push   %r13
  push   %r12
  push   %rbp
  push   %rbx
  mov    %rsi,%rbx
  sub    $0xc8,%rsp
  mov    %rdi,0x18(%rsp)
  mov    0x100(%rsp),%rbp
  mov    %rcx,0x8(%rsp)
  mov    0x108(%rsp),%rsi
  mov    %r8,0x10(%rsp)
  mov    0x110(%rsp),%rdi
  mov    %r9,0x20(%rsp)
  mov    %fs:0x28,%rax
  mov    %rax,0xb8(%rsp)
  xor    %eax,%eax
  cmp    $0xf,%r8
  jbe    L85
  lea    0x60(%rsp),%r15
  mov    %r9,%r12
  mov    %r15,%rdx
  call   <aegis128_initialization@plt>
  cmp    $0xf,%rbp
  jbe    L14
  mov    $0x10,%r14d
  lea    0x40(%rsp),%r13
  sub    $0x10,%r12
  nopw   0x0(%rax,%rax,1)
L2:
  lea    (%r12,%r14,1),%rdi
  mov    %r15,%rdx
  mov    %r13,%rsi
  call   <aegis128_enc_aut_step@plt>
  mov    %r14,%rcx
  add    $0x10,%r14
  cmp    %rbp,%r14
  jbe    L2
L77:
  mov    %rbp,%r12
  and    $0xf,%r12d
  jne    L68
L21:
  mov    0x10(%rsp),%rax
  lea    -0x10(%rax),%rdi
  mov    %rdi,(%rbx)
  cmp    $0xf,%rdi
  jbe    L18
  mov    0x8(%rsp),%rax
  mov    $0x10,%r14d
  lea    -0x10(%rax),%r13
  mov    0x18(%rsp),%rax
  lea    -0x10(%rax),%r12
  cs nopw 0x0(%rax,%rax,1)
L50:
  lea    (%r12,%r14,1),%rdi
  lea    0x0(%r13,%r14,1),%rsi
  mov    %r15,%rdx
  call   <aegis128_dec_aut_step@plt>
  mov    (%rbx),%rdi
  mov    %r14,%r9
  add    $0x10,%r14
  cmp    %r14,%rdi
  jae    L50
L79:
  test   $0xf,%dil
  jne    L63
L103:
  lea    0x50(%rsp),%rcx
  mov    %r15,%r8
  mov    $0x10,%edx
  mov    %rbp,%rsi
  call   <aegis128_tag_generation@plt>
  mov    0x8(%rsp),%rax
  mov    0x10(%rsp),%rbx
  movdqu -0x10(%rax,%rbx,1),%xmm0
  pxor   0x50(%rsp),%xmm0
  movdqa %xmm0,%xmm1
  psrldq $0x8,%xmm1
  por    %xmm1,%xmm0
  movdqa %xmm0,%xmm1
  psrldq $0x4,%xmm1
  por    %xmm1,%xmm0
  movdqa %xmm0,%xmm1
  psrldq $0x2,%xmm1
  por    %xmm1,%xmm0
  movdqa %xmm0,%xmm1
  psrldq $0x1,%xmm1
  por    %xmm1,%xmm0
  movd   %xmm0,%eax
  neg    %al
  sbb    %eax,%eax
L105:
  mov    0xb8(%rsp),%rdx
  sub    %fs:0x28,%rdx
  jne    L80
  add    $0xc8,%rsp
  pop    %rbx
  pop    %rbp
  pop    %r12
  pop    %r13
  pop    %r14
  pop    %r15
  ret
  nopw   0x0(%rax,%rax,1)
L68:
  lea    0x30(%rsp),%r13
  xor    %esi,%esi
  mov    $0x10,%edx
  mov    %rcx,0x28(%rsp)
  mov    %r13,%rdi
  call   <memset@plt>
  mov    0x20(%rsp),%rsi
  mov    %r12,%rdx
  mov    %r13,%rdi
  mov    0x28(%rsp),%rcx
  add    %rcx,%rsi
  call   <memcpy@plt>
  lea    0x40(%rsp),%rsi
  mov    %r15,%rdx
  mov    %r13,%rdi
  call   <aegis128_enc_aut_step@plt>
  jmp    L21
  cs nopw 0x0(%rax,%rax,1)
L63:
  lea    0x40(%rsp),%r13
  mov    $0x10,%edx
  xor    %esi,%esi
  mov    %r9,0x20(%rsp)
  mov    %r13,%rdi
  lea    0x30(%rsp),%r12
  call   <memset@plt>
  mov    0x20(%rsp),%r9
  mov    (%rbx),%rdx
  mov    %r13,%rdi
  mov    0x8(%rsp),%rax
  and    $0xf,%edx
  lea    (%rax,%r9,1),%rsi
  call   <memcpy@plt>
  mov    %r15,%rdx
  mov    %r13,%rsi
  mov    %r12,%rdi
  call   <aegis128_dec_aut_step@plt>
  mov    0x20(%rsp),%r9
  mov    (%rbx),%rdx
  mov    %r12,%rsi
  mov    0x18(%rsp),%rdi
  and    $0xf,%edx
  add    %r9,%rdi
  call   <memcpy@plt>
  mov    (%rbx),%rdx
  mov    %r12,%rdi
  xor    %esi,%esi
  and    $0xf,%edx
  call   <memset@plt>
  movdqa 0x60(%rsp),%xmm0
  mov    (%rbx),%rdi
  pxor   0x30(%rsp),%xmm0
  movaps %xmm0,0x60(%rsp)
  jmp    L103
L14:
  xor    %ecx,%ecx
  jmp    L77
L18:
  xor    %r9d,%r9d
  jmp    L79
L85:
  mov    $0xffffffff,%eax
  jmp    L105
L80:
  call   <__stack_chk_fail@plt>
```

assistant: ```c
int crypto_aead_decrypt(unsigned char *m, unsigned long long *mlen, unsigned char *nsec, const unsigned char *c, unsigned long long clen, const unsigned char *ad, unsigned long long adlen, const unsigned char *npub, const unsigned char *k) {
  unsigned long i;
  unsigned char plaintextblock[16], ciphertextblock[16];
  unsigned char tag[16];
  unsigned char check = 0;
  unsigned char aegis128_state[80];
  if (clen < 16)
    return -1;
  aegis128_initialization(k, npub, aegis128_state);
  for (i = 0; (i + 16) <= adlen; i += 16) {
    aegis128_enc_aut_step(ad + i, ciphertextblock, aegis128_state);
  }
  if ((adlen & 0xf) != 0) {
    memset(plaintextblock, 0, 16);
    memcpy(plaintextblock, ad + i, adlen & 0xf);
    aegis128_enc_aut_step(plaintextblock, ciphertextblock, aegis128_state);
  }
  *mlen = clen - 16;
  for (i = 0; (i + 16) <= *mlen; i += 16) {
    aegis128_dec_aut_step(m + i, c + i, aegis128_state);
  }
  if ((*mlen & 0xf) != 0) {
    memset(ciphertextblock, 0, 16);
    memcpy(ciphertextblock, c + i, *mlen & 0xf);
    aegis128_dec_aut_step(plaintextblock, ciphertextblock, aegis128_state);
    memcpy(m + i, plaintextblock, *mlen & 0xf);
    memset(plaintextblock, 0, *mlen & 0xf);
    ((unsigned long long *)aegis128_state)[0] ^= ((unsigned long long *)plaintextblock)[0];
    ((unsigned long long *)aegis128_state)[1] ^= ((unsigned long long *)plaintextblock)[1];
  }
  aegis128_tag_generation(*mlen, adlen, 16, tag, aegis128_state);
  for (i = 0; i < 16; i++)
    check |= (tag[i] ^ c[clen - 16 + i]);
  if (check == 0)
    return 0;
  else
    return -1;
}
```