Transport Layer:Transmission Control Protocol (TCP)
Application Layer:Battle.net v1 TCP Messages (SID)
Message Id:0x44
Direction:Client to Server
Options: In Research
Used By:Warcraft III Reign of Chaos, Warcraft III The Frozen Throne
Message Format:
(does not include protocol header)
(UINT8) Subcommand ID

Subcommand 0x00 (WID_GAMESEARCH):
     (UINT32) Cookie
     (UINT32) Unknown
      (UINT8) Unknown
      (UINT8) Game type
      (UINT16) Enabled maps (every bit is one map, from 0x0000 to 0x0FFF)
      (UINT16) Unknown
      (UINT8) Unknown
     (UINT32) Tick count
     (UINT32) Race

Subcommand 0x02 (WID_MAPLIST):
     (UINT32) Cookie
      (UINT8) Number of types requested
    For each type requested:
         (UINT32) ID*
         (UINT32) Checksum*

Subcommand 0x03 (WID_CANCELSEARCH):

Subcommand 0x04 (WID_USERRECORD):
     (UINT32) Cookie
    (STRING) Account name
     (UINT32) Product ID ('WAR3' or 'W3XP')

Subcommand 0x07 (WID_TOURNAMENT):
     (UINT32) Cookie

Subcommand 0x08 (WID_CLANRECORD):
     (UINT32) Cookie
     (UINT32) Clan Tag
     (UINT32) Product ID ('WAR3' or 'W3XP')

Subcommand 0x09 (WID_ICONLIST):
     (UINT32) Cookie

Subcommand 0x0A (WID_SETICON):
     (UINT32) Icon


This packet is used for multiple purposes on Warcraft III. Known and validated purposes are listed here.

*Not fully known yet.

Game type values:

0x00: 1vs1
0x01: 2vs2
0x02: 3vs3
0x03: 4vs4
0x04: Free For All

Race values:

0x00000001: Human
0x00000002: Orc
0x00000004: Night Elf
0x00000008: Undead
0x00000020: Random
| Edited: Anonymous



I am not sure of all the values but I got this message when pressing quickplay in war3.

ff 44 1c 00 00 06 00 00 00 00 00 00 00 00 00 3f 0a 00 00 08 20 03 ff 00 08 00 00 00

Seems the 0x1c is the subcommand since it is always the same and the other codes change.


no thats the packets length. Take a look at http://www.bnetdocs.org/?op=doc&did=16 for the basic structure of BNCS packets