[TUTORIAL] remove checksum from your manequin msg server

[forcer_]

ok guys, enough of mistery.
here is the solution:

* download this exe unpacker:

To view the content, you need to sign in or register

unpack your msgserver(I used manequin one) with this app.

* download immunity debugger(it's a tweaked ollydbg):

To view the content, you need to sign in or register

* open msgserver in the debugger.

* right click on the assembler code window to get the menu, then search for -> all referenced text strings

* all strings window pops up, scroll up to the top and right click & choose
search for text and then type: "chksum", press ok then.
you will get the first search result, double click on it(don't close search results).

* scroll few lines up and change JE to JMP few lines before "chksum" text(double click to change the instruction).

* go back to search results window and search for chksum again.
change all occurrences except 3rd found.(you need to change the 4th occurrence however)

here is what you should get after changing all three JE to JMP

* after you change all 3 JE to JMP, right click on assembler window, and choose copy to excecutable -> all modifications, then click copy all

* window pops up, right click on it, and choose save file

* name it whatever you like & enjoy your msgserver without checksum.
PLEASE LEAVE CREDIT FOR THIS GUIDE IF YOU PLAN TO COPY IT! thank you.

 

[DeathNoteEO]

Re: remove checksum from your manequin msg server

ok guys, enough of mistery.
here is the solution:

* download this exe unpacker:

To view the content, you need to sign in or register

unpack your msgserver(I used manequin one) with this app.

* download immunity debugger(it's a tweaked ollydbg):

To view the content, you need to sign in or register

* open msgserver in the debugger.

* right click on the assembler code window to get the menu, then search for -> all referenced text strings

* all strings window pops up, scroll up to the top and right click & choose
search for text and then type: "chksum", press ok then.
you will get the first search result, double click on it(don't close search results).

* scroll few lines up and change JE to JMP few lines before "chksum" text(double click to change the instruction).

* go back to search results window and search for chksum again.
change all occurrences except 3rd found.(you need to change the 4th occurrence however)

here is what you should get after changing all three JE to JMP

* after you change all 3 JE to JMP, right click on assembler window, and choose copy to excecutable -> all modifications, then click copy all

* window pops up, right click on it, and choose save file

* name it whatever you like & enjoy your msgserver without checksum.
PLEASE LEAVE CREDIT FOR THIS GUIDE IF YOU PLAN TO COPY IT! thank you.

Nice bro I was gonna release it here for you sense i didn't see it but i wasnt sure

 

[wesman2232]

Re: remove checksum from your manequin msg server

thanks for the guide forcer <3