Transport Layer:Transmission Control Protocol (TCP)
Application v1 TCP Messages (SID)
Message Id:0x18
Direction:Client to Server
Options: Deprecated
Used By:(nothing or unknown)
Message Format:
(does not include protocol header)
(UINT32) Cookie
(STRING) Key Value 


Returns the requested registry value from S>C 0x18 SID_REGISTRY.

| Edited: Anonymous



You would think Blizzard would actually have the Key Value be VOID, not STRING. Shame I cannot test that to see if it really is a VOID, because does not use this anymore.

Allowing access to the Windows registry without checking what is requested first is always a security risk, even if the data being requested is not changed. Does anyone know what used to use this for? What values (paths and keys) it told the client to send the value of?