I'm struggling with following the steps in the excellent article by slippery_slope as well.

To bypass this protection, you first need to modify ShowEQ to read the key from the OP_SendLoginInfo code, and then apply a null-preserving, rotating XOR to the spawnStructs. The code change takes about ~30 lines of C code added to ShowEQ:

Modify the ShowEQ Configuration Op Codes document to expect the additional data.
Modify the ‘struct’ to contain the decryption key.
Store the key in memory for the session and update when necessary.
Modify the spawnStruct handling functions to decrypt the entire packet before further processing.
Some other threads where people have been working on this that I found helpful, still trying to get it all to work too.

http://www.showeq.net/forums/showthr...-ShowEQ-Status
http://www.showeq.net/forums/showthr...v33-6-25-patch