user: Demonstrate the C code that generates the assembly output below:

```asm
<crypto_aead_decrypt>:
  endbr64
  push   %r15
  push   %r14
  push   %r13
  push   %r12
  push   %rbp
  push   %rbx
  sub    $0xb8,%rsp
  mov    %rdi,%r14
  mov    %rsi,%r12
  mov    %r8,0x18(%rsp)
  mov    0xf0(%rsp),%r13
  mov    0xf8(%rsp),%rsi
  mov    0x100(%rsp),%rdi
  mov    %fs:0x28,%rax
  mov    %rax,0xa8(%rsp)
  xor    %eax,%eax
  cmp    $0xf,%r8
  jbe    L113
  mov    %rcx,%rbp
  mov    %r9,%r15
  lea    0x50(%rsp),%rdx
  call   <aegis128_initialization@plt>
  cmp    $0xf,%r13
  jbe    L105
  mov    $0x10,%ebx
  lea    0x50(%rsp),%rax
  mov    %rax,0x8(%rsp)
L51:
  lea    0x30(%rsp),%rsi
  lea    -0x10(%r15,%rbx,1),%rdi
  mov    0x8(%rsp),%rdx
  call   <aegis128_enc_aut_step@plt>
  mov    %rbx,0x10(%rsp)
  add    $0x10,%rbx
  cmp    %rbx,%r13
  jae    L51
L15:
  mov    %r13,%rbx
  and    $0xf,%ebx
  jne    L116
L49:
  mov    0x18(%rsp),%rax
  sub    $0x10,%rax
  mov    %rax,(%r12)
  cmp    $0xf,%rax
  jbe    L96
  mov    $0x10,%ebx
  lea    0x50(%rsp),%r15
L83:
  lea    -0x10(%rbp,%rbx,1),%rsi
  lea    -0x10(%r14,%rbx,1),%rdi
  mov    %r15,%rdx
  call   <aegis128_dec_aut_step@plt>
  mov    (%r12),%rax
  mov    %rbx,0x8(%rsp)
  add    $0x10,%rbx
  cmp    %rbx,%rax
  jae    L83
L100:
  test   $0xf,%al
  jne    L127
L41:
  lea    0x40(%rsp),%rcx
  lea    0x50(%rsp),%r8
  mov    $0x10,%edx
  mov    %r13,%rsi
  mov    (%r12),%rdi
  call   <aegis128_tag_generation@plt>
  mov    $0x0,%ecx
  mov    $0x0,%eax
  add    0x18(%rsp),%rbp
  lea    0x40(%rsp),%rsi
L106:
  movzbl -0x10(%rbp,%rax,1),%edx
  xor    (%rax,%rsi,1),%dl
  or     %edx,%ecx
  add    $0x1,%rax
  cmp    $0x10,%rax
  jne    L106
  neg    %cl
  sbb    %eax,%eax
L0:
  mov    0xa8(%rsp),%rdx
  sub    %fs:0x28,%rdx
  jne    L94
  add    $0xb8,%rsp
  pop    %rbx
  pop    %rbp
  pop    %r12
  pop    %r13
  pop    %r14
  pop    %r15
  ret
L105:
  movq   $0x0,0x10(%rsp)
  jmp    L15
L116:
  lea    0x20(%rsp),%rax
  mov    $0x10,%edx
  mov    $0x0,%esi
  mov    %rax,0x8(%rsp)
  mov    %rax,%rdi
  call   <memset@plt>
  mov    0x10(%rsp),%rsi
  add    %r15,%rsi
  mov    %rbx,%rdx
  mov    0x8(%rsp),%rbx
  mov    %rbx,%rdi
  call   <memcpy@plt>
  lea    0x50(%rsp),%rdx
  lea    0x30(%rsp),%rsi
  mov    %rbx,%rdi
  call   <aegis128_enc_aut_step@plt>
  jmp    L49
L96:
  movq   $0x0,0x8(%rsp)
  jmp    L100
L127:
  lea    0x30(%rsp),%rbx
  mov    $0x10,%edx
  mov    $0x0,%esi
  mov    %rbx,%rdi
  call   <memset@plt>
  mov    (%r12),%rdx
  and    $0xf,%edx
  mov    0x8(%rsp),%rax
  lea    0x0(%rbp,%rax,1),%rsi
  mov    %rbx,%rdi
  call   <memcpy@plt>
  lea    0x50(%rsp),%rdx
  lea    0x20(%rsp),%r15
  mov    %rbx,%rsi
  mov    %r15,%rdi
  call   <aegis128_dec_aut_step@plt>
  mov    (%r12),%rdx
  and    $0xf,%edx
  mov    0x8(%rsp),%rax
  lea    (%r14,%rax,1),%rdi
  mov    %r15,%rsi
  call   <memcpy@plt>
  mov    (%r12),%rdx
  and    $0xf,%edx
  mov    $0x0,%esi
  mov    %r15,%rdi
  call   <memset@plt>
  mov    0x20(%rsp),%rax
  xor    %rax,0x50(%rsp)
  mov    0x28(%rsp),%rax
  xor    %rax,0x58(%rsp)
  jmp    L41
L113:
  mov    $0xffffffff,%eax
  jmp    L0
L94:
  call   <__stack_chk_fail@plt>
```

assistant: ```c
int crypto_aead_decrypt(unsigned char *m, unsigned long long *mlen, unsigned char *nsec, const unsigned char *c, unsigned long long clen, const unsigned char *ad, unsigned long long adlen, const unsigned char *npub, const unsigned char *k) {
  unsigned long i;
  unsigned char plaintextblock[16], ciphertextblock[16];
  unsigned char tag[16];
  unsigned char check = 0;
  unsigned char aegis128_state[80];
  if (clen < 16)
    return -1;
  aegis128_initialization(k, npub, aegis128_state);
  for (i = 0; (i + 16) <= adlen; i += 16) {
    aegis128_enc_aut_step(ad + i, ciphertextblock, aegis128_state);
  }
  if ((adlen & 0xf) != 0) {
    memset(plaintextblock, 0, 16);
    memcpy(plaintextblock, ad + i, adlen & 0xf);
    aegis128_enc_aut_step(plaintextblock, ciphertextblock, aegis128_state);
  }
  *mlen = clen - 16;
  for (i = 0; (i + 16) <= *mlen; i += 16) {
    aegis128_dec_aut_step(m + i, c + i, aegis128_state);
  }
  if ((*mlen & 0xf) != 0) {
    memset(ciphertextblock, 0, 16);
    memcpy(ciphertextblock, c + i, *mlen & 0xf);
    aegis128_dec_aut_step(plaintextblock, ciphertextblock, aegis128_state);
    memcpy(m + i, plaintextblock, *mlen & 0xf);
    memset(plaintextblock, 0, *mlen & 0xf);
    ((unsigned long long *)aegis128_state)[0] ^= ((unsigned long long *)plaintextblock)[0];
    ((unsigned long long *)aegis128_state)[1] ^= ((unsigned long long *)plaintextblock)[1];
  }
  aegis128_tag_generation(*mlen, adlen, 16, tag, aegis128_state);
  for (i = 0; i < 16; i++)
    check |= (tag[i] ^ c[clen - 16 + i]);
  if (check == 0)
    return 0;
  else
    return -1;
}
```