Holy crap, I just took a look at the source code for freediag. Man did they make that protocol complex. So many different variants... Consult is much easier! I look forward to seeing the results of your future hackings.