Yes, I already figured out where in the PE I need to dump, but I don't see the function declarations I need listed in the 'LagerPacket(OMF).dll's. Closest thing I could come up with is: int __cdecl sub_4076E4(int, LPCSTR lpString2) @ offset [00006CE4] int __cdecl sub_402FA4(int, char *src, char, LPC...

While you might not have a need for it anymore, I am sure others do. I will share my research for those who want to know. One of the things that are being used in conjunction with this is what I believe to be a Partminer Lib file. This .bhl file could contain the shared key / password cipher for the...

Yes, you are both correct. They are using a compression utility to archive their images for reasons of security and updating/transfer times. You will have to uncompress it to extract the data files (in this case images). There are other games which use this as well. Kings of Kings III - MMORPG also ...

They are proprietary LZO real-time compressed and more than likely use SHA1/ZLib as its hash. See Markus Franz Xaver Johannes Oberhumer markus.oberhumer@jk.uni-linz.ac.at The payload consists of DirectDraw Surface gfx for icons and other things if you look at the headers in the icons.lpq file which ...