Transport Layer:Transmission Control Protocol (TCP)
Application Layer:Battle.net v1 TCP Messages (SID)
Message Id:0x5E
Message Name:SID_WARDEN
Direction:Client to Server
Used By:Starcraft Original, Starcraft Broodwar
Warcraft III Reign of Chaos, Warcraft III The Frozen Throne
Message Format:
(does not include protocol header)
(VOID) Encrypted Packet

Contents of encrypted data
    (UINT8) Packet Code

        0x00 - Warden Module Info
            (UINT8) Success (0x00 = Don't have the module, 0x01 = Have the module)
        0x01 - Warden Module Data
            (UINT8) Success (0x00 = MD5 doesn't match, 0x01 = MD5 matches)

        0x02 - Data Checker
            (UINT16) String Length
            (UINT32) String Checksum
            (VOID) String Data

                (UINT8) Success (0x00 = Read data, 0x01 = Unable to read)
                (VOID) Data (0x00 only)

                (UINT8) Success (0x00 = SHA1s match, 0x01 = SHA1s don't match)

            (UINT8) IDXor

        0x04 - Initialization
            (UINT32)[4] Unknown


The packet is encrypted via standard RC4 hashing, using one key for outbound data and another for inbound. Its purpose is to return executable data and checksum information from various Warden modules. Full information on how to handle this packet may be found at the Rudimentary Warden information topic.

Documentation provided by iago and Ringo.

| Edited: Anonymous


no one has commented yet.