user: 下面的汇编指令对应的C源代码是什么：

```asm
<crypto_aead_decrypt>:
  endbr64
  push   %rbp
  mov    %rsp,%rbp
  sub    $0xc0,%rsp
  mov    %rdi,-0x88(%rbp)
  mov    %rsi,-0x90(%rbp)
  mov    %rdx,-0x98(%rbp)
  mov    %rcx,-0xa0(%rbp)
  mov    %r8,-0xa8(%rbp)
  mov    %r9,-0xb0(%rbp)
  mov    0x18(%rbp),%rax
  mov    %rax,-0xb8(%rbp)
  mov    0x20(%rbp),%rax
  mov    %rax,-0xc0(%rbp)
  mov    %fs:0x28,%rax
  mov    %rax,-0x8(%rbp)
  xor    %eax,%eax
  movb   $0x0,-0x7d(%rbp)
  lea    -0x60(%rbp),%rdx
  mov    -0xb8(%rbp),%rcx
  mov    -0xc0(%rbp),%rax
  mov    %rcx,%rsi
  mov    %rax,%rdi
  call   <acorn128_initialization_32bitversion@plt>
  movl   $0xffffffff,-0x70(%rbp)
  movl   $0xffffffff,-0x6c(%rbp)
  movq   $0x0,-0x68(%rbp)
  jmp    L107
L176:
  mov    -0x68(%rbp),%rax
  lea    0x0(,%rax,4),%rdx
  mov    -0xb0(%rbp),%rax
  add    %rdx,%rax
  mov    (%rax),%esi
  mov    -0x6c(%rbp),%r8d
  mov    -0x70(%rbp),%edi
  lea    -0x74(%rbp),%rcx
  lea    -0x78(%rbp),%rdx
  lea    -0x60(%rbp),%rax
  mov    %r8d,%r9d
  mov    %edi,%r8d
  mov    %rax,%rdi
  call   <encrypt_32bits@plt>
  addq   $0x1,-0x68(%rbp)
L107:
  mov    0x10(%rbp),%rax
  shr    $0x2,%rax
  cmp    %rax,-0x68(%rbp)
  jb     L176
  mov    0x10(%rbp),%rax
  and    $0xfffffffffffffffc,%rax
  mov    %rax,-0x68(%rbp)
  jmp    L100
L20:
  movl   $0xff,-0x70(%rbp)
  movl   $0xff,-0x6c(%rbp)
  mov    -0xb0(%rbp),%rdx
  mov    -0x68(%rbp),%rax
  add    %rdx,%rax
  movzbl (%rax),%eax
  movzbl %al,%eax
  mov    %eax,-0x7c(%rbp)
  mov    -0x7c(%rbp),%esi
  mov    -0x6c(%rbp),%r8d
  mov    -0x70(%rbp),%edi
  lea    -0x74(%rbp),%rcx
  lea    -0x78(%rbp),%rdx
  lea    -0x60(%rbp),%rax
  mov    %r8d,%r9d
  mov    %edi,%r8d
  mov    %rax,%rdi
  call   <encrypt_8bits@plt>
  addq   $0x1,-0x68(%rbp)
L100:
  mov    -0x68(%rbp),%rax
  cmp    0x10(%rbp),%rax
  jb     L20
  movq   $0x0,-0x68(%rbp)
  jmp    L230
L11:
  cmpq   $0x0,-0x68(%rbp)
  jne    L189
  movl   $0x1,-0x7c(%rbp)
  jmp    L115
L189:
  movl   $0x0,-0x7c(%rbp)
L115:
  cmpq   $0x3,-0x68(%rbp)
  ja     L74
  movl   $0xffffffff,-0x70(%rbp)
  jmp    L87
L74:
  movl   $0x0,-0x70(%rbp)
L87:
  movl   $0xffffffff,-0x6c(%rbp)
  mov    -0x7c(%rbp),%esi
  mov    -0x6c(%rbp),%r8d
  mov    -0x70(%rbp),%edi
  lea    -0x74(%rbp),%rcx
  lea    -0x78(%rbp),%rdx
  lea    -0x60(%rbp),%rax
  mov    %r8d,%r9d
  mov    %edi,%r8d
  mov    %rax,%rdi
  call   <encrypt_32bits@plt>
  addq   $0x1,-0x68(%rbp)
L230:
  cmpq   $0x7,-0x68(%rbp)
  jbe    L11
  movl   $0xffffffff,-0x70(%rbp)
  movl   $0x0,-0x6c(%rbp)
  mov    -0xa8(%rbp),%rax
  lea    -0x10(%rax),%rdx
  mov    -0x90(%rbp),%rax
  mov    %rdx,(%rax)
  movq   $0x0,-0x68(%rbp)
  jmp    L203
L6:
  mov    -0x68(%rbp),%rax
  lea    0x0(,%rax,4),%rdx
  mov    -0xa0(%rbp),%rax
  add    %rdx,%rax
  mov    (%rax),%edx
  mov    -0x68(%rbp),%rax
  lea    0x0(,%rax,4),%rcx
  mov    -0x88(%rbp),%rax
  lea    (%rcx,%rax,1),%rsi
  mov    -0x6c(%rbp),%r8d
  mov    -0x70(%rbp),%edi
  lea    -0x74(%rbp),%rcx
  lea    -0x60(%rbp),%rax
  mov    %r8d,%r9d
  mov    %edi,%r8d
  mov    %rax,%rdi
  call   <decrypt_32bits@plt>
  addq   $0x1,-0x68(%rbp)
L203:
  mov    -0x90(%rbp),%rax
  mov    (%rax),%rax
  shr    $0x2,%rax
  cmp    %rax,-0x68(%rbp)
  jb     L6
  mov    -0x90(%rbp),%rax
  mov    (%rax),%rax
  and    $0xfffffffffffffffc,%rax
  mov    %rax,-0x68(%rbp)
  jmp    L124
L121:
  movl   $0xff,-0x70(%rbp)
  movl   $0x0,-0x6c(%rbp)
  mov    -0xa0(%rbp),%rdx
  mov    -0x68(%rbp),%rax
  add    %rdx,%rax
  movzbl (%rax),%eax
  movzbl %al,%eax
  mov    %eax,-0x78(%rbp)
  mov    -0x78(%rbp),%edx
  mov    -0x6c(%rbp),%r8d
  mov    -0x70(%rbp),%edi
  lea    -0x74(%rbp),%rcx
  lea    -0x7c(%rbp),%rsi
  lea    -0x60(%rbp),%rax
  mov    %r8d,%r9d
  mov    %edi,%r8d
  mov    %rax,%rdi
  call   <decrypt_8bits@plt>
  mov    -0x7c(%rbp),%edx
  mov    -0x88(%rbp),%rcx
  mov    -0x68(%rbp),%rax
  add    %rcx,%rax
  mov    %dl,(%rax)
  addq   $0x1,-0x68(%rbp)
L124:
  mov    -0x90(%rbp),%rax
  mov    (%rax),%rax
  cmp    %rax,-0x68(%rbp)
  jb     L121
  movq   $0x0,-0x68(%rbp)
  jmp    L180
L69:
  cmpq   $0x0,-0x68(%rbp)
  jne    L231
  movl   $0x1,-0x7c(%rbp)
  jmp    L65
L231:
  movl   $0x0,-0x7c(%rbp)
L65:
  cmpq   $0x3,-0x68(%rbp)
  ja     L175
  movl   $0xffffffff,-0x70(%rbp)
  jmp    L131
L175:
  movl   $0x0,-0x70(%rbp)
L131:
  movl   $0x0,-0x6c(%rbp)
  mov    -0x7c(%rbp),%esi
  mov    -0x6c(%rbp),%r8d
  mov    -0x70(%rbp),%edi
  lea    -0x74(%rbp),%rcx
  lea    -0x78(%rbp),%rdx
  lea    -0x60(%rbp),%rax
  mov    %r8d,%r9d
  mov    %edi,%r8d
  mov    %rax,%rdi
  call   <encrypt_32bits@plt>
  addq   $0x1,-0x68(%rbp)
L180:
  cmpq   $0x7,-0x68(%rbp)
  jbe    L69
  mov    -0x90(%rbp),%rax
  mov    (%rax),%rax
  lea    -0x60(%rbp),%rcx
  lea    -0x20(%rbp),%rdx
  mov    %rcx,%r8
  mov    %rdx,%rcx
  mov    $0x10,%edx
  mov    0x10(%rbp),%rsi
  mov    %rax,%rdi
  call   <acorn128_tag_generation_32bits_version@plt>
  movq   $0x0,-0x68(%rbp)
  jmp    L199
L37:
  lea    -0x20(%rbp),%rdx
  mov    -0x68(%rbp),%rax
  add    %rdx,%rax
  movzbl (%rax),%edx
  mov    -0xa8(%rbp),%rcx
  mov    -0x68(%rbp),%rax
  add    %rcx,%rax
  lea    -0x10(%rax),%rcx
  mov    -0xa0(%rbp),%rax
  add    %rcx,%rax
  movzbl (%rax),%eax
  xor    %edx,%eax
  or     %al,-0x7d(%rbp)
  addq   $0x1,-0x68(%rbp)
L199:
  cmpq   $0xf,-0x68(%rbp)
  jbe    L37
  cmpb   $0x0,-0x7d(%rbp)
  jne    L202
  mov    $0x0,%eax
  jmp    L241
L202:
  mov    $0xffffffff,%eax
L241:
  mov    -0x8(%rbp),%rdx
  sub    %fs:0x28,%rdx
  je     L127
  call   <__stack_chk_fail@plt>
L127:
  leave
  ret
```

assistant: ```c
int crypto_aead_decrypt(unsigned char *m, unsigned long long *mlen, unsigned char *nsec, const unsigned char *c, unsigned long long clen, const unsigned char *ad, unsigned long long adlen, const unsigned char *npub, const unsigned char *k) {
  unsigned long long i;
  unsigned char tag[16], check = 0;
  unsigned int plaintextword, ciphertextword, ksword;
  unsigned long long state[7];
  unsigned int ca, cb;
  acorn128_initialization_32bitversion(k, npub, state);
  ca = 0xffffffff;
  cb = 0xffffffff;
  for (i = 0; i < adlen / 4; i = i + 1) {
    encrypt_32bits(state, ((unsigned int *)ad)[i], &ciphertextword, &ksword, ca, cb);
  }
  for (i = adlen & 0xfffffffffffffffcULL; i < adlen; i++) {
    ca = 0xff;
    cb = 0xff;
    plaintextword = ad[i];
    encrypt_8bits(state, plaintextword, &ciphertextword, &ksword, ca, cb);
  }
  for (i = 0; i < 256 / 32; i++) {
    if (i == 0)
      plaintextword = 0x1;
    else
      plaintextword = 0;
    if (i < 128 / 32)
      ca = 0xffffffff;
    else
      ca = 0;
    cb = 0xffffffff;
    encrypt_32bits(state, plaintextword, &ciphertextword, &ksword, ca, cb);
  }
  ca = 0xffffffff;
  cb = 0;
  *mlen = clen - 16;
  for (i = 0; i < *mlen / 4; i = i + 1) {
    decrypt_32bits(state, &(((unsigned int *)m)[i]), ((unsigned int *)c)[i], &ksword, ca, cb);
  }
  for (i = *mlen & 0xfffffffffffffffcULL; i < *mlen; i++) {
    ca = 0xff;
    cb = 0x0;
    ciphertextword = c[i];
    decrypt_8bits(state, &plaintextword, ciphertextword, &ksword, ca, cb);
    m[i] = plaintextword;
  }
  for (i = 0; i < 256 / 32; i++) {
    if (i == 0)
      plaintextword = 0x1;
    else
      plaintextword = 0;
    if (i < 128 / 32)
      ca = 0xffffffff;
    else
      ca = 0;
    cb = 0;
    encrypt_32bits(state, plaintextword, &ciphertextword, &ksword, ca, cb);
  }
  acorn128_tag_generation_32bits_version(*mlen, adlen, 16, tag, state);
  for (i = 0; i < 16; i++)
    check |= (tag[i] ^ c[clen - 16 + i]);
  if (check == 0)
    return 0;
  else
    return -1;
}
```