KingAnt.net This space left intentionally blank. 
Oscar Protocol Documentation | Random Pidgin Files

Oscar Protocol Specification: Family 0x0017, Subtype 0x0004

unfinished

This is the SNAC sent to the auth server to request a new ICQ number. It should be the very first thing sent, after the initial "New Connection."

Thanks to Sean Egan and the licq source code for pretty much all of this.

Source: Client

LengthDescription
2 bytesFamily (0x0017)
2 bytesSubtype (0x0004)
2 bytesFlags
4 bytesSnac Request ID
2 bytes0x0001
2 bytesLength L of the following
L bytesThe ICQ registration info. All chunks are in, uh, network byte order, I guess (the number "5" is sent as "x05 00").
LengthDescription
2 bytes0x0000
2 bytes0x0000
2 bytes0x2800
2 bytes0x0300
4 bytes0x0000 0000
4 bytes0x0000 0000
2 bytes0xec38 0000 - Some type of random cookie?
2 bytes0xec38 0000 - Same number as above
4 bytes0x0000 0000
4 bytes0x0000 0000
4 bytes0x0000 0000
4 bytes0x0000 0000
2 bytesLength L of the following
L bytesThe password you wish to use for the new ICQ account. In plain text and null terminated.
2 bytes0xec38 0000 - Same number as above
2 bytes0x0000
2 bytes0x0602. 0x1502 has also been seen

All material Copyright © 2000-2014, All Rights Reserved
Linux is a registered trademark of Linus Torvalds.
AIM is a registered trademark of America Online, Inc.
ICQ is a registered trademark of ICQ Inc.
All other trademarks are property of their respective owners.