给VMWare做器官切除手术失败！

冥界3大法王 发表于 2023-9-10 09:05

如图所示：

这破东西总出来！需要手术切除！

你会发现，根本就断不下来啊。

6CEBC870 <vmware | 68 08AE746D          | push vmwarecui.6D74AE08                | 6D74AE08:"@&!*@*@(button.cui.toolsInfoBar.btnLblInstall)Install Tools"

BC70

6CEBC8B0 <vmware | 68 80AE746D          | push vmwarecui.6D74AE80                | 6D74AE80:"@&!*@*@(button.cui.toolsInfoBar.btnLblLater)Remind Me Later"
BCB0

==================================
0083F560       | 68 B0958F00          | push vmware.8F95B0                   | 8F95B0:"@&!*@*@(msg.vmui.collectSupportData.toolsServiceState)VMware Tools"

AE960
=======================================
0083F410 <vmware | 55                   | push ebp                               |
0083F411       | 8BEC                   | mov ebp,esp                            |
0083F413       | 6A FF                | push FFFFFFFF                         |
0083F415       | 68 3BBD8C00          | push <vmware.sub_8CBD3B>             |
0083F41A       | 64:A1 00000000       | mov eax,dword ptr fs:             | 00000000:L"﹤o"
0083F420       | 50                   | push eax                               |
0083F421       | 83EC 68                | sub esp,68                            |
0083F424       | A1 E4EA9500          | mov eax,dword ptr ds:          |
0083F429       | 33C5                   | xor eax,ebp                            |
0083F42B       | 8945 F0                | mov dword ptr ss:,eax          |
0083F42E       | 53                   | push ebx                               | ebx:&"@鼂"
0083F42F       | 56                   | push esi                               |
0083F430       | 57                   | push edi                               | edi:"8崗"
0083F431       | 50                   | push eax                               |
0083F432       | 8D45 F4                | lea eax,dword ptr ss:          |
0083F435       | 64:A3 00000000       | mov dword ptr fs:,eax             | 00000000:L"﹤o"
0083F43B       | 8BF1                   | mov esi,ecx                            |
0083F43D       | 8975 B0                | mov dword ptr ss:,esi          |
0083F440       | FFB6 4C020000          | push dword ptr ds:          | esi+24C:L"倀J捀瘮Ｈo筴眍倀J順褙"
0083F446       | 8D9E 4C020000          | lea ebx,dword ptr ds:       | ebx:&"@鼂", esi+24C:L"倀J捀瘮Ｈo筴眍倀J順褙"
0083F44C       | FF15 64F48D00          | call dword ptr ds:[<&IsWindow>]       |
0083F452       | 85C0                   | test eax,eax                         |
0083F454       | 0F84 36020000          | je vmware.83F690                      | 是不是这里？
0083F45A       | 6A 01                | push 1                               |
0083F45C       | FF76 04                | push dword ptr ds:             |
0083F45F       | E8 5C97F6FF          | call <vmware.sub_7A8BC0>             |
0083F464       | 50                   | push eax                               |
0083F465       | FF15 9C0F8E00          | call dword ptr ds:[<&?GetImageList@NodeI |
0083F46B       | 83C4 08                | add esp,8                            |
0083F46E       | 8BCB                   | mov ecx,ebx                            | ebx:&"@鼂"
0083F470       | 50                   | push eax                               |
0083F471       | 8D45 AC                | lea eax,dword ptr ss:          |
0083F474       | 50                   | push eax                               |
0083F475       | FF15 880B8E00          | call dword ptr ds:[<&?SetImageList@?$CLi |
0083F47B       | 6A F0                | push FFFFFFF0                         |
0083F47D       | FF33                   | push dword ptr ds:                | :"@鼂"
0083F47F       | FF15 20F58D00          | call dword ptr ds:[<&GetWindowLongW>] |
0083F485       | 8BC8                   | mov ecx,eax                            |
0083F487       | 83C9 40                | or ecx,40                            |
0083F48A       | 3BC1                   | cmp eax,ecx                            |
0083F48C       | 74 0B                | je vmware.83F499                      |
0083F48E       | 51                   | push ecx                               |
0083F48F       | 6A F0                | push FFFFFFF0                         |
0083F491       | FF33                   | push dword ptr ds:                | :"@鼂"
0083F493       | FF15 24F58D00          | call dword ptr ds:[<&SetWindowLongW>] |
0083F499       | 68 24C00000          | push C024                            |
0083F49E       | 68 24C00000          | push C024                            |
0083F4A3       | 68 36100000          | push 1036                            |
0083F4A8       | FF33                   | push dword ptr ds:                | :"@鼂"
0083F4AA       | FF15 40F48D00          | call dword ptr ds:[<&SendMessageW>]    |
0083F4B0       | 8D45 E0                | lea eax,dword ptr ss:          | :"8崗"
0083F4B3       | 0F57C0                | xorps xmm0,xmm0                      |
0083F4B6       | 50                   | push eax                               |
0083F4B7       | FF33                   | push dword ptr ds:                | :"@鼂"
0083F4B9       | 0F1145 E0             | movups xmmword ptr ss:,xmm0    |
0083F4BD       | FF15 F8F48D00          | call dword ptr ds:[<&GetClientRect>] |
0083F4C3       | 8B7D E8                | mov edi,dword ptr ss:          |
0083F4C6       | 8D45 8C                | lea eax,dword ptr ss:          |
0083F4C9       | 2B7D E0                | sub edi,dword ptr ss:          | :"8崗"
0083F4CC       | 68 74958F00          | push vmware.8F9574                   | 8F9574:"@&!*@*@(msg.vmui.collectSupportData.vmName)Virtual Machine"
0083F4D1       | 50                   | push eax                               |
0083F4D2       | FF15 48FA8D00          | call dword ptr ds:[<&?GetLocalString@Cui |
0083F4D8       | 83C4 08                | add esp,8                            |
0083F4DB       | 8BF0                   | mov esi,eax                            |
0083F4DD       | C745 FC 00000000       | mov dword ptr ss:,0             |
0083F4E4       | 8D0CBD 00000000       | lea ecx,dword ptr ds:          |
0083F4EB       | B8 67666666          | mov eax,66666667                      |
0083F4F0       | C745 C4 00000000       | mov dword ptr ss:,0          |
0083F4F7       | F7E9                   | imul ecx                               |
0083F4F9       | 0F57C0                | xorps xmm0,xmm0                      |
0083F4FC       | 66:0F1345 CC          | movlpd qword ptr ss:,xmm0    |
0083F501       | 66:0F1345 D4          | movlpd qword ptr ss:,xmm0    |
0083F506       | 8BCE                   | mov ecx,esi                            |
0083F508       | C745 DC 00000000       | mov dword ptr ss:,0          | :&"@鼂"
0083F50F       | C1FA 02                | sar edx,2                            |
0083F512       | 8BC2                   | mov eax,edx                            |
0083F514       | C745 B4 0F000000       | mov dword ptr ss:,F          | :"8崗"
0083F51B       | C1E8 1F                | shr eax,1F                            |
0083F51E       | 03C2                   | add eax,edx                            |
0083F520       | C745 B8 00000000       | mov dword ptr ss:,0          | :&"@鼂"
0083F527       | 8945 BC                | mov dword ptr ss:,eax          | :&"@鼂"
0083F52A       | C745 C8 00000000       | mov dword ptr ss:,0          |
0083F531       | FF15 88038E00          | call dword ptr ds:[<&?GetUtf16Cache@stri |
0083F537       | 8945 C0                | mov dword ptr ss:,eax          |
0083F53A       | 8D45 B4                | lea eax,dword ptr ss:          | :"8崗"
0083F53D       | 50                   | push eax                               |
0083F53E       | 6A 00                | push 0                               |
0083F540       | 68 61100000          | push 1061                            |
0083F545       | FF33                   | push dword ptr ds:                | :"@鼂"
0083F547       | FF15 40F48D00          | call dword ptr ds:[<&SendMessageW>]    |
0083F54D       | C745 FC FFFFFFFF       | mov dword ptr ss:,FFFFFFFF    |
0083F554       | 8D4D 8C                | lea ecx,dword ptr ss:          |
0083F557       | FF15 94038E00          | call dword ptr ds:[<&??1string@utf@@QAE@ |
0083F55D       | 8D45 8C                | lea eax,dword ptr ss:          |
0083F560       | 68 B0958F00          | push vmware.8F95B0                   | 8F95B0:"@&!*@*@(msg.vmui.collectSupportData.toolsServiceState)VMware Tools"
0083F565       | 50                   | push eax                               |
0083F566       | FF15 48FA8D00          | call dword ptr ds:[<&?GetLocalString@cui |
0083F56C       | 83C4 08                | add esp,8                            |
0083F56F       | 8BF0                   | mov esi,eax                            |
0083F571       | C745 FC 01000000       | mov dword ptr ss:,1             |
0083F578       | 8D0C3F                | lea ecx,dword ptr ds:       |
0083F57B       | B8 67666666          | mov eax,66666667                      |
0083F580       | C745 C4 00000000       | mov dword ptr ss:,0          |
0083F587       | F7E9                   | imul ecx                               |
0083F589       | 0F57C0                | xorps xmm0,xmm0                      |
0083F58C       | 66:0F1345 CC          | movlpd qword ptr ss:,xmm0    |
0083F591       | 66:0F1345 D4          | movlpd qword ptr ss:,xmm0    |
0083F596       | 8BCE                   | mov ecx,esi                            |
0083F598       | C745 DC 00000000       | mov dword ptr ss:,0          | :&"@鼂"
0083F59F       | C1FA 02                | sar edx,2                            |
0083F5A2       | 8BC2                   | mov eax,edx                            |
0083F5A4       | C745 B4 0F000000       | mov dword ptr ss:,F          | :"8崗"
0083F5AB       | C1E8 1F                | shr eax,1F                            |
0083F5AE       | 03C2                   | add eax,edx                            |
0083F5B0       | C745 B8 00000000       | mov dword ptr ss:,0          | :&"@鼂"
0083F5B7       | 8945 BC                | mov dword ptr ss:,eax          | :&"@鼂"
0083F5BA       | C745 C8 01000000       | mov dword ptr ss:,1          |
0083F5C1       | FF15 88038E00          | call dword ptr ds:[<&?GetUtf16Cache@stri |
0083F5C7       | 8945 C0                | mov dword ptr ss:,eax          |
0083F5CA       | 8D45 B4                | lea eax,dword ptr ss:          | :"8崗"
0083F5CD       | 50                   | push eax                               |
0083F5CE       | 6A 01                | push 1                               |
0083F5D0       | 68 61100000          | push 1061                            |
0083F5D5       | FF33                   | push dword ptr ds:                | :"@鼂"
0083F5D7       | FF15 40F48D00          | call dword ptr ds:[<&SendMessageW>]    |
0083F5DD       | C745 FC FFFFFFFF       | mov dword ptr ss:,FFFFFFFF    |
0083F5E4       | 8D4D 8C                | lea ecx,dword ptr ss:          |
0083F5E7       | FF15 94038E00          | call dword ptr ds:[<&??1string@utf@@QAE@ |
0083F5ED       | 8D45 8C                | lea eax,dword ptr ss:          |
0083F5F0       | 68 F4958F00          | push vmware.8F95F4                   | 8F95F4:"@&!*@*@(msg.vmui.collectSupportData.vmFileName)Location"
0083F5F5       | 50                   | push eax                               |
0083F5F6       | FF15 48FA8D00          | call dword ptr ds:[<&?GetLocalString@cui |
0083F5FC       | 83C4 08                | add esp,8                            |
0083F5FF       | 8BF0                   | mov esi,eax                            |
0083F601       | C745 FC 02000000       | mov dword ptr ss:,2             |
0083F608       | 8D0C7F                | lea ecx,dword ptr ds:       |
0083F60B       | B8 67666666          | mov eax,66666667                      |
0083F610       | C745 C4 00000000       | mov dword ptr ss:,0          |
0083F617       | F7E9                   | imul ecx                               |
0083F619       | 0F57C0                | xorps xmm0,xmm0                      |
0083F61C       | 66:0F1345 CC          | movlpd qword ptr ss:,xmm0    |
0083F621       | 66:0F1345 D4          | movlpd qword ptr ss:,xmm0    |
0083F626       | 8BCE                   | mov ecx,esi                            |
0083F628       | C745 DC 00000000       | mov dword ptr ss:,0          | :&"@鼂"
0083F62F       | C1FA 02                | sar edx,2                            |
0083F632       | 8BC2                   | mov eax,edx                            |
0083F634       | C745 B4 0F000000       | mov dword ptr ss:,F          | :"8崗"
0083F63B       | C1E8 1F                | shr eax,1F                            |
0083F63E       | 03C2                   | add eax,edx                            |
0083F640       | C745 B8 00000000       | mov dword ptr ss:,0          | :&"@鼂"
0083F647       | 8945 BC                | mov dword ptr ss:,eax          | :&"@鼂"
0083F64A       | C745 C8 02000000       | mov dword ptr ss:,2          |
0083F651       | FF15 88038E00          | call dword ptr ds:[<&?GetUtf16Cache@stri |
0083F657       | 8945 C0                | mov dword ptr ss:,eax          |
0083F65A       | 8D45 B4                | lea eax,dword ptr ss:          | :"8崗"
0083F65D       | 50                   | push eax                               |
0083F65E       | 6A 02                | push 2                               |
0083F660       | 68 61100000          | push 1061                            |
0083F665       | FF33                   | push dword ptr ds:                | :"@鼂"
0083F667       | FF15 40F48D00          | call dword ptr ds:[<&SendMessageW>]    |
0083F66D       | C745 FC FFFFFFFF       | mov dword ptr ss:,FFFFFFFF    |
0083F674       | 8D4D 8C                | lea ecx,dword ptr ss:          |
0083F677       | FF15 94038E00          | call dword ptr ds:[<&??1string@utf@@QAE@ |
0083F67D       | 8B4D B0                | mov ecx,dword ptr ss:          |
0083F680       | 6A 01                | push 1                               |
0083F682       | 6A 02                | push 2                               |
0083F684       | 81C1 48020000          | add ecx,248                            |
0083F68A       | FF15 A40B8E00          | call dword ptr ds:[<&?SetAutoSizeColumn@ |
0083F690       | 8B4D F4                | mov ecx,dword ptr ss:          |
0083F693       | 64:890D 00000000       | mov dword ptr fs:,ecx             | 00000000:L"﹤o"
0083F69A       | 59                   | pop ecx                               |
0083F69B       | 5F                   | pop edi                               | edi:"8崗"
0083F69C       | 5E                   | pop esi                               |
0083F69D       | 5B                   | pop ebx                               | ebx:&"@鼂"
0083F69E       | 8B4D F0                | mov ecx,dword ptr ss:          |
0083F6A1       | 33CD                   | xor ecx,ebp                            |
0083F6A3       | E8 08380600          | call vmware.8A2EB0                   |
0083F6A8       | 8BE5                   | mov esp,ebp                            |
0083F6AA       | 5D                   | pop ebp                               |
0083F6AB       | C3                   | ret                                  |

冥界3大法王 发表于 2023-9-10 10:18

Pwaerm 发表于 2023-9-10 10:12
恐怖如斯

不认真回答，举报垃圾。{:301_987:}

luliucheng 发表于 2023-9-10 10:39

这明显不对吧，窗口里的按钮是“以后提醒我”，但你断的是“不再提醒”，这肯定断不下来啊。

newyun 发表于 2023-9-10 10:40

https://newyun.lanzoue.com/iVVAA17w2g6f 来给你个vmtool12.2.0

apull 发表于 2023-9-10 10:46

不是有个不再提醒的按钮么

jvmmqqll 发表于 2023-9-10 11:55

jimmyxing001 发表于 2023-9-10 13:49

确实是这样，切除最好，可是不知道咋弄，大神继续

smile1110 发表于 2023-9-10 14:44

你可以从工具箱里拿出来眼罩，把自己眼睛蒙上，这样子就看不到它了

月清晖 发表于 2023-9-11 08:31

不得先修改字符串确认下是不是这里？

页: [1]

吾爱破解 - 52pojie.cn's Archiver

给VMWare做器官切除手术失败！