An empty channel 4 FLAP is also sent by the auth server directly after this SNAC (empty FLAPs are a signal to close the connection).
Length
Description
2 bytes
Family (0x0017)
2 bytes
Subtype (0x0005)
2 bytes
Flags
4 bytes
Snac Request ID
2 bytes
0x0001
2 bytes
Length L of the following
L bytes
DATA
DATA
The ICQ registration info. All chunks are in, uh, network byte order, I guess. (The number "5" is sent as "x05 00")
Length
Description
2 bytes
0x0300
4 bytes
0x0000 0000
2 bytes
0x2d00
2 bytes
0x0300
2 bytes
0x0000
2 bytes
0xff58
2 bytes
0xd03d
2 bytes
0xa7ba
2 bytes
0x0000
2 bytes
0x0004
2 bytes
0xec38 0000 - The same random cookie from the request
4 bytes
0x0000 0000
4 bytes
0x0000 0000
4 bytes
0x0000 0000
4 bytes
0x0000 0000
4 bytes
0x2dc5 2b09 - Your brand spankin' new ICQ number (remember, this is network byte order, so in real hexidecimal this is actually 0x092b c52d, which is 153,863,469 in decimal)
2 bytes
0xec38 0000 - The same random cookie from the request