@jo3 I found this tutorial http://tpforums.org/forum/threads/16...d-the-XTEA-key and there is just simpler way to find recv address:
"There's great plugin for ollydbg which lets you execute SoftIce commands (SoftIce is a lowlever debugger that is used to debug hardware drivers and stuff like that. It's also very popular in game hacking scene). To get CommandBar plugin download it for example here: http://www.woodmann.com/collaborativ...php/CommandBar. Now open up the archive and place the CmdBar.dll to the same directory you've other plugins. By default it's the same directory than your ollydbg.exe I think.

Then restart ollydbg and you should notice fancy commandbar at the bottom. Now press F9 to start Tibia and login into the game and after that type "BPX recv" to the commandbar (without "-marks) and hit ENTER. Now olly should've put breakpoint on every place which calls recv() function. Now when next packet comes (which should happen pretty fast), you'll land place like this (scroll up a bit to see the whole function):"