This is brilliant work.
I've tested these scripts with Demo, 5.0.8.3 and God client, works great. Thanks!

This is really useful. It is exactly what I've been needing. Thank you!

Here's a trick I found for finding the beginning of the packet handler function.

Just search for:

CMP BYTE PTR DS:[EAX],33
In hex that's : 803833

clients I've seen so far have that instruction and only have it once: near the beginning of the packet handler function.

EDIT: damn, not true for all clients. It's there, but not necessarily next to the main packet handling code. In some clients it's off on it's own in a separate function that gets called before the main packet handler. It's a special handler for packet 0x33...

Also note that in client 7.0.25.0, that location of the 0x33 handler is called from 5 different locations in code and is for handling special packets -before- the main packet handler. Something to keep in mind. This style code is in clients from the 4.x to 7.x range.