给VMWare做器官切除手术失败！

冥界3大法王

如图所示：

这破东西总出来！需要手术切除！



你会发现，根本就断不下来啊。

[Asm] 纯文本查看 复制代码

?

001 002 003 004 005 006 007 008 009 010 011 012 013 014 015 016 017 018 019 020 021 022 023 024 025 026 027 028 029 030 031 032 033 034 035 036 037 038 039 040 041 042 043 044 045 046 047 048 049 050 051 052 053 054 055 056 057 058 059 060 061 062 063 064 065 066 067 068 069 070 071 072 073 074 075 076 077 078 079 080 081 082 083 084 085 086 087 088 089 090 091 092 093 094 095 096 097 098 099 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193

6CEBC870 <vmware | 68 08AE746D              | push vmwarecui.6D74AE08                  | 6D74AE08:"@&!*@*@(button.cui.toolsInfoBar.btnLblInstall)Install Tools"     BC70   6CEBC8B0 <vmware | 68 80AE746D              | push vmwarecui.6D74AE80                  | 6D74AE80:"@&!*@*@(button.cui.toolsInfoBar.btnLblLater)Remind Me Later" BCB0   ================================== 0083F560         | 68 B0958F00              | push vmware.8F95B0                       | 8F95B0:"@&!*@*@(msg.vmui.collectSupportData.toolsServiceState)VMware Tools"   AE960 ======================================= 0083F410 <vmware | 55                       | push ebp                                 | 0083F411         | 8BEC                     | mov ebp,esp                              | 0083F413         | 6A FF                    | push FFFFFFFF                            | 0083F415         | 68 3BBD8C00              | push <vmware.sub_8CBD3B>                 | 0083F41A         | 64:A1 00000000           | mov eax,dword ptr fs:[0]                 | 00000000:L"﹤o" 0083F420         | 50                       | push eax                                 | 0083F421         | 83EC 68                  | sub esp,68                               | 0083F424         | A1 E4EA9500              | mov eax,dword ptr ds:[95EAE4]            | 0083F429         | 33C5                     | xor eax,ebp                              | 0083F42B         | 8945 F0                  | mov dword ptr ss:[ebp-10],eax            | 0083F42E         | 53                       | push ebx                                 | ebx:&"@鼂" 0083F42F         | 56                       | push esi                                 | 0083F430         | 57                       | push edi                                 | edi:"8崗" 0083F431         | 50                       | push eax                                 | 0083F432         | 8D45 F4                  | lea eax,dword ptr ss:[ebp-C]             | 0083F435         | 64:A3 00000000           | mov dword ptr fs:[0],eax                 | 00000000:L"﹤o" 0083F43B         | 8BF1                     | mov esi,ecx                              | 0083F43D         | 8975 B0                  | mov dword ptr ss:[ebp-50],esi            | 0083F440         | FFB6 4C020000            | push dword ptr ds:[esi+24C]              | esi+24C:L"倀J捀瘮Ｈo筴眍倀J順褙" 0083F446         | 8D9E 4C020000            | lea ebx,dword ptr ds:[esi+24C]           | ebx:&"@鼂", esi+24C:L"倀J捀瘮Ｈo筴眍倀J順褙" 0083F44C         | FF15 64F48D00            | call dword ptr ds:[<&IsWindow>]          | 0083F452         | 85C0                     | test eax,eax                             | 0083F454         | 0F84 36020000            | je vmware.83F690                         | 是不是这里？ 0083F45A         | 6A 01                    | push 1                                   | 0083F45C         | FF76 04                  | push dword ptr ds:[esi+4]                | 0083F45F         | E8 5C97F6FF              | call <vmware.sub_7A8BC0>                 | 0083F464         | 50                       | push eax                                 | 0083F465         | FF15 9C0F8E00            | call dword ptr ds:[<&?GetImageList@NodeI | 0083F46B         | 83C4 08                  | add esp,8                                | 0083F46E         | 8BCB                     | mov ecx,ebx                              | ebx:&"@鼂" 0083F470         | 50                       | push eax                                 | 0083F471         | 8D45 AC                  | lea eax,dword ptr ss:[ebp-54]            | 0083F474         | 50                       | push eax                                 | 0083F475         | FF15 880B8E00            | call dword ptr ds:[<&?SetImageList@?$CLi | 0083F47B         | 6A F0                    | push FFFFFFF0                            | 0083F47D         | FF33                     | push dword ptr ds:[ebx]                  | [ebx]:"@鼂" 0083F47F         | FF15 20F58D00            | call dword ptr ds:[<&GetWindowLongW>]    | 0083F485         | 8BC8                     | mov ecx,eax                              | 0083F487         | 83C9 40                  | or ecx,40                                | 0083F48A         | 3BC1                     | cmp eax,ecx                              | 0083F48C         | 74 0B                    | je vmware.83F499                         | 0083F48E         | 51                       | push ecx                                 | 0083F48F         | 6A F0                    | push FFFFFFF0                            | 0083F491         | FF33                     | push dword ptr ds:[ebx]                  | [ebx]:"@鼂" 0083F493         | FF15 24F58D00            | call dword ptr ds:[<&SetWindowLongW>]    | 0083F499         | 68 24C00000              | push C024                                | 0083F49E         | 68 24C00000              | push C024                                | 0083F4A3         | 68 36100000              | push 1036                                | 0083F4A8         | FF33                     | push dword ptr ds:[ebx]                  | [ebx]:"@鼂" 0083F4AA         | FF15 40F48D00            | call dword ptr ds:[<&SendMessageW>]      | 0083F4B0         | 8D45 E0                  | lea eax,dword ptr ss:[ebp-20]            | [ebp-20]:"8崗" 0083F4B3         | 0F57C0                   | xorps xmm0,xmm0                          | 0083F4B6         | 50                       | push eax                                 | 0083F4B7         | FF33                     | push dword ptr ds:[ebx]                  | [ebx]:"@鼂" 0083F4B9         | 0F1145 E0                | movups xmmword ptr ss:[ebp-20],xmm0      | 0083F4BD         | FF15 F8F48D00            | call dword ptr ds:[<&GetClientRect>]     | 0083F4C3         | 8B7D E8                  | mov edi,dword ptr ss:[ebp-18]            | 0083F4C6         | 8D45 8C                  | lea eax,dword ptr ss:[ebp-74]            | 0083F4C9         | 2B7D E0                  | sub edi,dword ptr ss:[ebp-20]            | [ebp-20]:"8崗" 0083F4CC         | 68 74958F00              | push vmware.8F9574                       | 8F9574:"@&!*@*@(msg.vmui.collectSupportData.vmName)Virtual Machine" 0083F4D1         | 50                       | push eax                                 | 0083F4D2         | FF15 48FA8D00            | call dword ptr ds:[<&?GetLocalString[url=home.php?mod=space&uid=763140]@Cui[/url] | 0083F4D8         | 83C4 08                  | add esp,8                                | 0083F4DB         | 8BF0                     | mov esi,eax                              | 0083F4DD         | C745 FC 00000000         | mov dword ptr ss:[ebp-4],0               | 0083F4E4         | 8D0CBD 00000000          | lea ecx,dword ptr ds:[edi*4]             | 0083F4EB         | B8 67666666              | mov eax,66666667                         | 0083F4F0         | C745 C4 00000000         | mov dword ptr ss:[ebp-3C],0              | 0083F4F7         | F7E9                     | imul ecx                                 | 0083F4F9         | 0F57C0                   | xorps xmm0,xmm0                          | 0083F4FC         | 66:0F1345 CC             | movlpd qword ptr ss:[ebp-34],xmm0        | 0083F501         | 66:0F1345 D4             | movlpd qword ptr ss:[ebp-2C],xmm0        | 0083F506         | 8BCE                     | mov ecx,esi                              | 0083F508         | C745 DC 00000000         | mov dword ptr ss:[ebp-24],0              | [ebp-24]:&"@鼂" 0083F50F         | C1FA 02                  | sar edx,2                                | 0083F512         | 8BC2                     | mov eax,edx                              | 0083F514         | C745 B4 0F000000         | mov dword ptr ss:[ebp-4C],F              | [ebp-4C]:"8崗" 0083F51B         | C1E8 1F                  | shr eax,1F                               | 0083F51E         | 03C2                     | add eax,edx                              | 0083F520         | C745 B8 00000000         | mov dword ptr ss:[ebp-48],0              | [ebp-48]:&"@鼂" 0083F527         | 8945 BC                  | mov dword ptr ss:[ebp-44],eax            | [ebp-44]:&"@鼂" 0083F52A         | C745 C8 00000000         | mov dword ptr ss:[ebp-38],0              | 0083F531         | FF15 88038E00            | call dword ptr ds:[<&?GetUtf16Cache@stri | 0083F537         | 8945 C0                  | mov dword ptr ss:[ebp-40],eax            | 0083F53A         | 8D45 B4                  | lea eax,dword ptr ss:[ebp-4C]            | [ebp-4C]:"8崗" 0083F53D         | 50                       | push eax                                 | 0083F53E         | 6A 00                    | push 0                                   | 0083F540         | 68 61100000              | push 1061                                | 0083F545         | FF33                     | push dword ptr ds:[ebx]                  | [ebx]:"@鼂" 0083F547         | FF15 40F48D00            | call dword ptr ds:[<&SendMessageW>]      | 0083F54D         | C745 FC FFFFFFFF         | mov dword ptr ss:[ebp-4],FFFFFFFF        | 0083F554         | 8D4D 8C                  | lea ecx,dword ptr ss:[ebp-74]            | 0083F557         | FF15 94038E00            | call dword ptr ds:[<&??1string@utf@@QAE@ | 0083F55D         | 8D45 8C                  | lea eax,dword ptr ss:[ebp-74]            | 0083F560         | 68 B0958F00              | push vmware.8F95B0                       | 8F95B0:"@&!*@*@(msg.vmui.collectSupportData.toolsServiceState)VMware Tools" 0083F565         | 50                       | push eax                                 | 0083F566         | FF15 48FA8D00            | call dword ptr ds:[<&?GetLocalString@cui | 0083F56C         | 83C4 08                  | add esp,8                                | 0083F56F         | 8BF0                     | mov esi,eax                              | 0083F571         | C745 FC 01000000         | mov dword ptr ss:[ebp-4],1               | 0083F578         | 8D0C3F                   | lea ecx,dword ptr ds:[edi+edi]           | 0083F57B         | B8 67666666              | mov eax,66666667                         | 0083F580         | C745 C4 00000000         | mov dword ptr ss:[ebp-3C],0              | 0083F587         | F7E9                     | imul ecx                                 | 0083F589         | 0F57C0                   | xorps xmm0,xmm0                          | 0083F58C         | 66:0F1345 CC             | movlpd qword ptr ss:[ebp-34],xmm0        | 0083F591         | 66:0F1345 D4             | movlpd qword ptr ss:[ebp-2C],xmm0        | 0083F596         | 8BCE                     | mov ecx,esi                              | 0083F598         | C745 DC 00000000         | mov dword ptr ss:[ebp-24],0              | [ebp-24]:&"@鼂" 0083F59F         | C1FA 02                  | sar edx,2                                | 0083F5A2         | 8BC2                     | mov eax,edx                              | 0083F5A4         | C745 B4 0F000000         | mov dword ptr ss:[ebp-4C],F              | [ebp-4C]:"8崗" 0083F5AB         | C1E8 1F                  | shr eax,1F                               | 0083F5AE         | 03C2                     | add eax,edx                              | 0083F5B0         | C745 B8 00000000         | mov dword ptr ss:[ebp-48],0              | [ebp-48]:&"@鼂" 0083F5B7         | 8945 BC                  | mov dword ptr ss:[ebp-44],eax            | [ebp-44]:&"@鼂" 0083F5BA         | C745 C8 01000000         | mov dword ptr ss:[ebp-38],1              | 0083F5C1         | FF15 88038E00            | call dword ptr ds:[<&?GetUtf16Cache@stri | 0083F5C7         | 8945 C0                  | mov dword ptr ss:[ebp-40],eax            | 0083F5CA         | 8D45 B4                  | lea eax,dword ptr ss:[ebp-4C]            | [ebp-4C]:"8崗" 0083F5CD         | 50                       | push eax                                 | 0083F5CE         | 6A 01                    | push 1                                   | 0083F5D0         | 68 61100000              | push 1061                                | 0083F5D5         | FF33                     | push dword ptr ds:[ebx]                  | [ebx]:"@鼂" 0083F5D7         | FF15 40F48D00            | call dword ptr ds:[<&SendMessageW>]      | 0083F5DD         | C745 FC FFFFFFFF         | mov dword ptr ss:[ebp-4],FFFFFFFF        | 0083F5E4         | 8D4D 8C                  | lea ecx,dword ptr ss:[ebp-74]            | 0083F5E7         | FF15 94038E00            | call dword ptr ds:[<&??1string@utf@@QAE@ | 0083F5ED         | 8D45 8C                  | lea eax,dword ptr ss:[ebp-74]            | 0083F5F0         | 68 F4958F00              | push vmware.8F95F4                       | 8F95F4:"@&!*@*@(msg.vmui.collectSupportData.vmFileName)Location" 0083F5F5         | 50                       | push eax                                 | 0083F5F6         | FF15 48FA8D00            | call dword ptr ds:[<&?GetLocalString@cui | 0083F5FC         | 83C4 08                  | add esp,8                                | 0083F5FF         | 8BF0                     | mov esi,eax                              | 0083F601         | C745 FC 02000000         | mov dword ptr ss:[ebp-4],2               | 0083F608         | 8D0C7F                   | lea ecx,dword ptr ds:[edi+edi*2]         | 0083F60B         | B8 67666666              | mov eax,66666667                         | 0083F610         | C745 C4 00000000         | mov dword ptr ss:[ebp-3C],0              | 0083F617         | F7E9                     | imul ecx                                 | 0083F619         | 0F57C0                   | xorps xmm0,xmm0                          | 0083F61C         | 66:0F1345 CC             | movlpd qword ptr ss:[ebp-34],xmm0        | 0083F621         | 66:0F1345 D4             | movlpd qword ptr ss:[ebp-2C],xmm0        | 0083F626         | 8BCE                     | mov ecx,esi                              | 0083F628         | C745 DC 00000000         | mov dword ptr ss:[ebp-24],0              | [ebp-24]:&"@鼂" 0083F62F         | C1FA 02                  | sar edx,2                                | 0083F632         | 8BC2                     | mov eax,edx                              | 0083F634         | C745 B4 0F000000         | mov dword ptr ss:[ebp-4C],F              | [ebp-4C]:"8崗" 0083F63B         | C1E8 1F                  | shr eax,1F                               | 0083F63E         | 03C2                     | add eax,edx                              | 0083F640         | C745 B8 00000000         | mov dword ptr ss:[ebp-48],0              | [ebp-48]:&"@鼂" 0083F647         | 8945 BC                  | mov dword ptr ss:[ebp-44],eax            | [ebp-44]:&"@鼂" 0083F64A         | C745 C8 02000000         | mov dword ptr ss:[ebp-38],2              | 0083F651         | FF15 88038E00            | call dword ptr ds:[<&?GetUtf16Cache@stri | 0083F657         | 8945 C0                  | mov dword ptr ss:[ebp-40],eax            | 0083F65A         | 8D45 B4                  | lea eax,dword ptr ss:[ebp-4C]            | [ebp-4C]:"8崗" 0083F65D         | 50                       | push eax                                 | 0083F65E         | 6A 02                    | push 2                                   | 0083F660         | 68 61100000              | push 1061                                | 0083F665         | FF33                     | push dword ptr ds:[ebx]                  | [ebx]:"@鼂" 0083F667         | FF15 40F48D00            | call dword ptr ds:[<&SendMessageW>]      | 0083F66D         | C745 FC FFFFFFFF         | mov dword ptr ss:[ebp-4],FFFFFFFF        | 0083F674         | 8D4D 8C                  | lea ecx,dword ptr ss:[ebp-74]            | 0083F677         | FF15 94038E00            | call dword ptr ds:[<&??1string@utf@@QAE@ | 0083F67D         | 8B4D B0                  | mov ecx,dword ptr ss:[ebp-50]            | 0083F680         | 6A 01                    | push 1                                   | 0083F682         | 6A 02                    | push 2                                   | 0083F684         | 81C1 48020000            | add ecx,248                              | 0083F68A         | FF15 A40B8E00            | call dword ptr ds:[<&?SetAutoSizeColumn@ | 0083F690         | 8B4D F4                  | mov ecx,dword ptr ss:[ebp-C]             | 0083F693         | 64:890D 00000000         | mov dword ptr fs:[0],ecx                 | 00000000:L"﹤o" 0083F69A         | 59                       | pop ecx                                  | 0083F69B         | 5F                       | pop edi                                  | edi:"8崗" 0083F69C         | 5E                       | pop esi                                  | 0083F69D         | 5B                       | pop ebx                                  | ebx:&"@鼂" 0083F69E         | 8B4D F0                  | mov ecx,dword ptr ss:[ebp-10]            | 0083F6A1         | 33CD                     | xor ecx,ebp                              | 0083F6A3         | E8 08380600              | call vmware.8A2EB0                       | 0083F6A8         | 8BE5                     | mov esp,ebp                              | 0083F6AA         | 5D                       | pop ebp                                  | 0083F6AB         | C3                       | ret                                      |

冥界3大法王

Pwaerm 发表于 2023-9-10 10:12
恐怖如斯

不认真回答，举报垃圾。

luliucheng

这明显不对吧，窗口里的按钮是“以后提醒我”，但你断的是“不再提醒”，这肯定断不下来啊。

newyun

https://newyun.lanzoue.com/iVVAA17w2g6f 来给你个vmtool12.2.0

apull

不是有个不再提醒的按钮么

jimmyxing001

确实是这样，切除最好，可是不知道咋弄，大神继续

smile1110

你可以从工具箱里拿出来眼罩，把自己眼睛蒙上，这样子就看不到它了

月清晖

不得先修改字符串确认下是不是这里？