eMule 0.49b XdP EdiTioN v3.0b4 ECB
*********************
eMule v0.49b | -XdP- v3.0b4
-- developed by umeK --
*********************
- READDED: Share Level
- Fake eChanblardNext 15.0 by send mod name and version to eChanblard clients
European Community
Download: -XdP-_EdiTioN_v3.0b4.rar 1.91 MB
From TronYx EBC Dev Board: -XdP-_EdiTioN_v3.0b4_ECB.rar 1.93 MB
ed2K Links:
-XdP-_EdiTioN_v3.0b4_ECB.rar
-XdP-_EdiTioN_v3.0b4.rar
REM:
How to remove send eMule Mod Name and Version or change to other Mod Names + Version - String must match! (Fake Comm Mods).
Instruction to remove Send Mod name and Version (use instead default emule version - No Mod name)
Change an illegal eMule Mod and detect it as a genuine eMule by BoBz
Remove Send Mod Name and Version
====================================================================
A typical illegal modified emule: emule 0.49b XdP 30 Mod by umeK
This version was detected as an illegal emule mod,
and was kicked from #emule-english with the message:
kicked by Ariesbot (Banned: Unsupported eMule Mod or outdated eMule.
Please get the REAL EMULE 0.49b @ http://www.emule-project.net)
This problem was fixed and then it tested OK like a genuine 0.49b!
Server: ircchat.emule-project.net
Channel: #emule-english (and possibly any other official help channel)
But a normal emule Server Search worked OK, so no problem there.
Name displayed in emule top blue band: emule 0.49b | -XdP- v3.
Also displayed in emule Server Info Tab at startup
These must be changed to just: emule 0.49b (to be valid non-mod emule)
Work must be done to change the emule version reported by emule.
This is the same as that displayed in the upper blue band of emule.
Start by a WinHex HEX Search of:
-XdP- v
in Hex: 2D 00 58 00 64 00 50 00 2D 00 20 00 76 00
at location
32A4D0 5B 00 46 00 61 00 4B 00 65 00 20 00 65 00 43 00 [.F.a.K.e. .e.C.
32A4E0 68 00 61 00 6E 00 62 00 6C 00 61 00 72 00 44 00 h.a.n.b.l.a.r.D.
32A4F0 5D 00 20 00 46 00 61 00 6B 00 65 00 2D 00 3E 00 ]. .F.a.k.e.-.>.
32A500 20 00 55 00 73 00 65 00 72 00 3A 00 20 00 7B 00 .U.s.e.r.:. .{.
32A510 20 00 25 00 73 00 20 00 7D 00 20 00 77 00 69 00 .%.s. .}. .w.i.
32A520 74 00 68 00 20 00 4D 00 6F 00 64 00 3A 00 20 00 t.h. .M.o.d.:. .
32A530 7B 00 20 00 25 00 73 00 20 00 7D 00 20 00 2E 00 {. .%.s. .}. ...
32A540 2E 00 2E 00 73 00 65 00 6E 00 64 00 20 00 4D 00 ....s.e.n.d. .M.
32A550 6F 00 64 00 53 00 74 00 72 00 69 00 6E 00 67 00 o.d.S.t.r.i.n.g.
32A560 3A 00 20 00 7B 00 20 00 65 00 43 00 68 00 61 00 :. .{. .e.C.h.a.
32A570 6E 00 62 00 6C 00 61 00 72 00 64 00 4E 00 65 00 n.b.l.a.r.d.N.e.
32A580 78 00 74 00 20 00 31 00 35 00 2E 00 30 00 20 00 x.t. .1.5...0. .
32A590 7D 00 00 00 65 00 43 00 68 00 61 00 6E 00 62 00 }...e.C.h.a.n.b.
32A5A0 6C 00 61 00 72 00 64 00 4E 00 65 00 78 00 74 00 l.a.r.d.N.e.x.t.
32A5B0 20 00 31 00 35 00 2E 00 30 00 00 00 2D 00 58 00 .1.5...0...-.X.
32A5C0 64 00 50 00 2D 00 20 00 76 00 33 00 2E 00 30 00 d.P.-. .v.3...0.
32A5D0 62 00 34 00 00 00 00 00 5B 00 45 00 6D 00 75 00 b.4.....[.E.m.u.
32A5E0 6C 00 61 00 54 00 65 00 5D l.a.T.e.]
fill with HEX 00 mod name and version
This emule now appears to be a generic v0.49b emule and hopefully
will fool the IRC channel #emule-english....
Success!! It works perfectly... NOT detected as illegal eMule Mod!
Here is the search replace pattern follow ?? upon 00 00 00 repeated in hex, fill all with 00 00 00 before .... this overwrites various mod versions after v
Match string only 1: (no repeat!)
Location Old New
00xxxxxx: 20 00
00xxxxxx: 7C 00 |
00xxxxxx: 20 00
00xxxxxx: 2D 00 -
00xxxxxx: 58 00 X
00xxxxxx: 64 00 d
00xxxxxx: 50 00 P
00xxxxxx: 2D 00 -
00xxxxxx: 20 00
00xxxxxx: 76 00 v
etc...
