|Transport Layer:||Transmission Control Protocol (TCP)|
|Application Layer:||Battle.net v1 TCP Messages (SID)|
|Direction:||Server to Client|
|Used By:||Warcraft III Reign of Chaos, Warcraft III The Frozen Throne|
(does not include protocol header)
Unknown. The person who found this was unable to disassemble Warcraft III's game.dll without a lot of trouble, and therefore had limited knowledge of it. It has been seen once, after SID_LOGONPROOF (0x54) in the NLS logon sequence.
Found at: game.dll
[Update 03/14/2016]: It was also seen during the Warcraft III 1.27a patch shortly before it went live. Here are some snapshots from a couple different bots: