Skip to content

Instantly share code, notes, and snippets.

@bombless
Last active December 2, 2025 17:39
Show Gist options
  • Select an option

  • Save bombless/f585d8203ff23faa311a12e09d8c462e to your computer and use it in GitHub Desktop.

Select an option

Save bombless/f585d8203ff23faa311a12e09d8c462e to your computer and use it in GitHub Desktop.
x/9i 0x4c3916c

这里是EFI_MAIN入口

x/9i 0x4c3a8b9

这里是GAMELOGIC宏的入口

0x4c3a8b7是JMP指令的地址

程序应该在0x4c6b160这个位置结束,也就是0x4c6b160之后的地址应该都不是程序里的

这个命令会很方便:

gdb -ex "target remote :1234" -ex "b *0x4c3a8b9" -ex "continue"

然后,进入游戏,游戏开始之后,ignore 1 334之后再continue会很方便,立刻定位到出问题的状态附近

UPSCALE_MODE的读取代码在0x4c6a5cf

调试这个问题的话用

gdb -ex "target remote :1234" -ex "b *0x4c6a5cf" -ex "continue"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment