import gdb
gr = gdb.execute
inf = gdb.selected_inferior()
pid = inf.pid
base = None
for line in open("/proc/%d/maps" % pid):
    parts = line.split()
    try:
        lo, hi = [int(x,16) for x in parts[0].split('-')]
    except Exception:
        continue
    if base is None and "libnvidia-eglcore" in line and int(parts[2],16) == 0:
        base = lo
print("BASE 0x%x" % (base or 0))
state = {"hits":0, "cleared":0}
class B(gdb.Breakpoint):
    def __init__(self):
        super().__init__("*0x%x" % (base + 0xB33D30), internal=False)
        self.silent = True
    def stop(self):
        state["hits"] += 1
        try:
            obj = int(gdb.parse_and_eval("$rdi"))
            n = int(gdb.parse_and_eval("$rsi"))
            cnt = int(gdb.parse_and_eval("*(unsigned int*)0x%x" % (obj + 0x22efc)))
            if state["hits"] <= 6:
                print("HIT %d obj=0x%x n=0x%x cnt=%d" % (state["hits"], obj, n, cnt))
            for i in range(0, min(cnt, 32)):
                p = int(gdb.parse_and_eval("*(unsigned long*)0x%x" % (obj + 0x1428 + i*8)))
                if not p:
                    continue
                tgt = p + n * 0x10
                try:
                    v16 = int(gdb.parse_and_eval("*(unsigned short*)0x%x" % (tgt + 0xe)))
                    if v16 == 0xffff:
                        gr("set {unsigned short}0x%x = 0" % (tgt + 0xe))
                        gr("set {unsigned int}0x%x = 0" % tgt)
                        gr("set {unsigned short}0x%x = 0" % (tgt + 0xc))
                        state["cleared"] += 1
                        if state["cleared"] <= 12:
                            print("CLEAR#%d obj=0x%x n=0x%x tgt=0x%x" % (state["cleared"], obj, n, tgt))
                except Exception as e:
                    if state["hits"] <= 6:
                        print("E%d fail %s" % (i, e))
        except Exception as e:
            if state["hits"] <= 6:
                print("hitfail %s" % e)
        return state["hits"] >= 4000
try:
    B(); print("BP-SET")
    gr("continue")
except Exception as e:
    print("bpfail %s" % e)
print("T94-DONE hits=%d cleared=%d" % (state["hits"], state["cleared"]))