Let me get this straight, so you said that it can be done with the reflector, and you admitted using it and failing. then you are asking for him to give it to you?
Quote:
Patch 5532:
private const int SendPacketFxnAddress = 0x6E72A3;
private const int RecvPacketFxnAddress = 0x6E7578;
private const int RecvLoopAddress = 0x6E6DC7;
private const int Return8Address = 0x69A3D6;
private const int NetworkClass = 10082968;
As for how to find addresses I just do it the obvious/noob way; just find any "landmarks" near the previous addresses in the new client. For example find "catch error in process msg:" and search upwards to the first "Test EAX, EAX" command gives you the RecvLoopAddress.
For NetworkClass I attach, login, break at SendPacketFxnAddress and use the value in ECX.