Edit on GitHub

GameService Client Authentication Keep-Alive Response

Summary

This packet is believed to serve as both a keep-alive and as an authentication/security response to the server.

It is the response to Gameservice Server 0x00D7 Authentication Keep-Alive Challenge.

Structure

gameservice_client_0088_authentication_keepalive_response

Name Type Summary
unknown_token u2 Unchanging over the course of a single session. Identical in challenge. Might be some sort of key.
server_id u2 ID of the server currently connected to.
response_length u4 Seen lengths of multiples of 8, from 0x3C (60) to 0x5C (92) inclusive. There is no known correlation between challenge length and response length.
response_data bytes[response_length] Unlike in the challenge, there are no obvious similar bits.

Definition

meta:
  id: gameservice_client_0088_authentication_keepalive_response
  title: GameService Client Authentication Keep-Alive Response
  encoding: ASCII
  endian: le
  imports:
    - ../../common/pstring
seq:
  - id: unknown_token
    type: u2
  - id: server_id
    type: u2
  - id: response_length
    type: u4
  - id: response_data
    size: response_length

Examples

Agent: TH.R6.829.01 
00000000
00000010
00000020
00000030
00000040
00000050

packetId = 136
88 00 
data > unknownToken = 28529
71 6f 
data > serverId = 20217
f9 4e 
data > responseLength = 76
4c 00 00 00 
data > responseData = 12,71,41,145,32,142,80,34,54,213,120,179,72,28,161,68,104,143,115,2,231,204,145,185,118,99,79,237,101,252,142,165,158,120,87,186,82,74,95,63,48,67,225,66,195,63,77,195,76,144,34,223,227,222,145,193,144,33,156,100,114,76,141,70,242,173,218,187,91,200,154,112,159,131,123,108
0c 47 29 91 20 8e 
50 22 36 d5 78 b3 48 1c a1 44 68 8f 73 02 e7 cc 
91 b9 76 63 4f ed 65 fc 8e a5 9e 78 57 ba 52 4a 
5f 3f 30 43 e1 42 c3 3f 4d c3 4c 90 22 df e3 de 
91 c1 90 21 9c 64 72 4c 8d 46 f2 ad da bb 5b c8 
9a 70 9f 83 7b 6c 
..qo.NL....G). .
P"6.x.H..Dh.s...
..vcO.e....xW.RJ
_?0C.B.?M.L."...
...!.drL.F....[.
.p..{l
Agent: TH.R6.829.01 
00000000
00000010
00000020
00000030
00000040
00000050

packetId = 136
88 00 
data > unknownToken = 26584
d8 67 
data > serverId = 20212
f4 4e 
data > responseLength = 76
4c 00 00 00 
data > responseData = 12,71,41,145,32,142,80,34,54,213,120,179,72,28,161,68,189,246,41,149,96,181,18,179,42,154,28,67,87,223,91,217,160,255,38,16,227,98,133,239,168,243,47,198,48,93,157,176,186,193,166,31,101,28,37,249,14,62,83,203,52,16,27,224,166,8,26,101,40,162,3,83,87,6,7,198
0c 47 29 91 20 8e 
50 22 36 d5 78 b3 48 1c a1 44 bd f6 29 95 60 b5 
12 b3 2a 9a 1c 43 57 df 5b d9 a0 ff 26 10 e3 62 
85 ef a8 f3 2f c6 30 5d 9d b0 ba c1 a6 1f 65 1c 
25 f9 0e 3e 53 cb 34 10 1b e0 a6 08 1a 65 28 a2 
03 53 57 06 07 c6 
...g.NL....G). .
P"6.x.H..D..).`.
..*..CW.[...&..b
..../.0]......e.
%..>S.4......e(.
.SW...
Agent: TH.R6.829.01 
00000000
00000010
00000020
00000030
00000040
00000050

packetId = 136
88 00 
data > unknownToken = 26584
d8 67 
data > serverId = 20212
f4 4e 
data > responseLength = 84
54 00 00 00 
data > responseData = 100,60,93,14,240,120,184,28,110,181,20,43,232,241,112,57,131,198,142,70,53,187,70,1,57,36,106,6,67,50,166,113,210,142,9,195,149,35,8,53,168,243,47,198,48,93,157,176,133,20,142,139,242,173,113,50,63,105,228,103,157,218,164,25,103,238,125,233,26,20,180,134,119,134,41,20,89,178,118,29,215,52,211,103
64 3c 5d 0e f0 78 
b8 1c 6e b5 14 2b e8 f1 70 39 83 c6 8e 46 35 bb 
46 01 39 24 6a 06 43 32 a6 71 d2 8e 09 c3 95 23 
08 35 a8 f3 2f c6 30 5d 9d b0 85 14 8e 8b f2 ad 
71 32 3f 69 e4 67 9d da a4 19 67 ee 7d e9 1a 14 
b4 86 77 86 29 14 59 b2 76 1d d7 34 d3 67 
...g.NT...d<]..x
..n..+..p9...F5.
F.9$j.C2.q.....#
.5../.0]........
q2?i.g....g.}...
..w.).Y.v..4.g
Agent: TH.R6.829.01 
00000000
00000010
00000020
00000030
00000040

packetId = 136
88 00 
data > unknownToken = 26584
d8 67 
data > serverId = 20212
f4 4e 
data > responseLength = 68
44 00 00 00 
data > responseData = 180,53,213,47,87,107,168,95,254,160,124,143,168,214,80,191,214,69,70,5,23,231,51,36,125,80,55,40,91,52,106,197,153,192,244,195,127,121,38,71,32,137,141,10,48,166,215,122,84,200,184,139,112,191,87,126,102,144,99,246,107,35,9,190,215,255,175,242
b4 35 d5 2f 57 6b 
a8 5f fe a0 7c 8f a8 d6 50 bf d6 45 46 05 17 e7 
33 24 7d 50 37 28 5b 34 6a c5 99 c0 f4 c3 7f 79 
26 47 20 89 8d 0a 30 a6 d7 7a 54 c8 b8 8b 70 bf 
57 7e 66 90 63 f6 6b 23 09 be d7 ff af f2 
...g.ND....5./Wk
._..|...P..EF...
3$}P7([4j.....y
&G ...0..zT...p.
W~f.c.k#......
Agent: TH.R6.829.01 
00000000
00000010
00000020
00000030
00000040
00000050

packetId = 136
88 00 
data > unknownToken = 26584
d8 67 
data > serverId = 20212
f4 4e 
data > responseLength = 76
4c 00 00 00 
data > responseData = 138,174,220,50,43,93,187,101,188,11,153,152,80,186,118,203,215,240,63,68,185,243,56,114,35,71,132,192,147,40,160,94,153,192,244,195,127,121,38,71,32,137,141,10,48,166,215,122,185,152,248,12,46,90,185,58,125,31,28,143,10,14,83,132,35,203,83,180,80,177,237,69,15,132,131,15
8a ae dc 32 2b 5d 
bb 65 bc 0b 99 98 50 ba 76 cb d7 f0 3f 44 b9 f3 
38 72 23 47 84 c0 93 28 a0 5e 99 c0 f4 c3 7f 79 
26 47 20 89 8d 0a 30 a6 d7 7a b9 98 f8 0c 2e 5a 
b9 3a 7d 1f 1c 8f 0a 0e 53 84 23 cb 53 b4 50 b1 
ed 45 0f 84 83 0f 
...g.NL......2+]
.e....P.v...?D..
8r#G...(.^....y
&G ...0..z.....Z
.:}.....S.#.S.P.
.E....
Agent: TH.R6.829.01 
00000000
00000010
00000020
00000030
00000040

packetId = 136
88 00 
data > unknownToken = 26584
d8 67 
data > serverId = 20212
f4 4e 
data > responseLength = 68
44 00 00 00 
data > responseData = 128,160,61,25,63,65,121,50,218,225,181,75,120,130,242,100,10,36,112,236,58,155,197,100,36,12,17,227,219,167,40,194,153,192,244,195,127,121,38,71,164,231,37,163,82,147,226,20,197,14,93,141,250,67,188,2,14,150,246,192,46,158,147,130,151,112,123,126
80 a0 3d 19 3f 41 
79 32 da e1 b5 4b 78 82 f2 64 0a 24 70 ec 3a 9b 
c5 64 24 0c 11 e3 db a7 28 c2 99 c0 f4 c3 7f 79 
26 47 a4 e7 25 a3 52 93 e2 14 c5 0e 5d 8d fa 43 
bc 02 0e 96 f6 c0 2e 9e 93 82 97 70 7b 7e 
...g.ND.....=.?A
y2...Kx..d.$p.:.
.d$.....(.....y
&G..%.R.....]..C
...........p{~
Agent: TH.R6.829.01 
00000000
00000010
00000020
00000030
00000040
00000050

packetId = 136
88 00 
data > unknownToken = 26584
d8 67 
data > serverId = 20212
f4 4e 
data > responseLength = 76
4c 00 00 00 
data > responseData = 228,180,28,30,247,105,59,60,238,30,89,90,232,211,118,120,60,180,187,110,193,106,1,185,82,83,106,41,57,96,251,84,153,192,244,195,127,121,38,71,32,137,141,10,48,166,215,122,36,176,164,77,199,108,36,201,171,95,221,171,192,191,134,33,116,75,96,120,175,23,104,85,167,62,119,153
e4 b4 1c 1e f7 69 
3b 3c ee 1e 59 5a e8 d3 76 78 3c b4 bb 6e c1 6a 
01 b9 52 53 6a 29 39 60 fb 54 99 c0 f4 c3 7f 79 
26 47 20 89 8d 0a 30 a6 d7 7a 24 b0 a4 4d c7 6c 
24 c9 ab 5f dd ab c0 bf 86 21 74 4b 60 78 af 17 
68 55 a7 3e 77 99 
...g.NL........i
;<..YZ..vx<..n.j
..RSj)9`.T....y
&G ...0..z$..M.l
$.._.....!tK`x..
hU.>w.
Agent: TH.R6.829.01 
00000000
00000010
00000020
00000030
00000040
00000050

packetId = 136
88 00 
data > unknownToken = 26584
d8 67 
data > serverId = 20212
f4 4e 
data > responseLength = 76
4c 00 00 00 
data > responseData = 250,137,251,72,203,19,245,145,172,157,239,218,144,39,234,35,23,69,91,250,144,114,207,216,150,45,169,112,10,170,255,166,153,192,244,195,127,121,38,71,164,231,37,163,82,147,226,20,116,141,114,161,168,222,72,248,222,72,224,231,0,73,247,160,164,134,145,213,132,202,96,205,63,2,43,90
fa 89 fb 48 cb 13 
f5 91 ac 9d ef da 90 27 ea 23 17 45 5b fa 90 72 
cf d8 96 2d a9 70 0a aa ff a6 99 c0 f4 c3 7f 79 
26 47 a4 e7 25 a3 52 93 e2 14 74 8d 72 a1 a8 de 
48 f8 de 48 e0 e7 00 49 f7 a0 a4 86 91 d5 84 ca 
60 cd 3f 02 2b 5a 
...g.NL......H..
.......'.#.E[..r
...-.p........y
&G..%.R...t.r...
H..H...I........
`.?.+Z
Agent: TH.R6.829.01 
00000000
00000010
00000020
00000030
00000040
00000050

packetId = 136
88 00 
data > unknownToken = 31723
eb 7b 
data > serverId = 20217
f9 4e 
data > responseLength = 76
4c 00 00 00 
data > responseData = 12,71,41,145,32,142,80,34,54,213,120,179,72,28,161,68,73,29,211,246,14,224,163,218,88,56,170,208,188,25,4,141,29,236,86,250,255,91,194,203,48,67,225,66,195,63,77,195,134,167,115,39,227,118,164,235,130,252,246,134,200,15,139,32,240,8,36,0,99,27,167,89,239,198,223,23
0c 47 29 91 20 8e 
50 22 36 d5 78 b3 48 1c a1 44 49 1d d3 f6 0e e0 
a3 da 58 38 aa d0 bc 19 04 8d 1d ec 56 fa ff 5b 
c2 cb 30 43 e1 42 c3 3f 4d c3 86 a7 73 27 e3 76 
a4 eb 82 fc f6 86 c8 0f 8b 20 f0 08 24 00 63 1b 
a7 59 ef c6 df 17 
...{.NL....G). .
P"6.x.H..DI.....
..X8........V..[
..0C.B.?M...s'.v
......... ..$.c.
.Y....