An empty channel 4 FLAP is also sent by the auth server directly after this SNAC (empty FLAPs are a signal to close the connection).
Length
Description
2 bytes
Family (0x0017)
2 bytes
Subtype (0x0005)
2 bytes
Flags
4 bytes
Snac Request ID
2 bytes
0x0001
2 bytes
Length L of the following
L bytes
DATA
DATA
The ICQ registration info. All chunks are in, uh, network byte order, I guess. (The number "5" is sent as "x05 00")
Length
Description
2 bytes
0x0300
4 bytes
0x0000 0000
2 bytes
0x2d00
2 bytes
0x0300
2 bytes
0x0000
2 bytes
0xff58
2 bytes
0xd03d
2 bytes
0xa7ba
2 bytes
0x0000
2 bytes
0x0004
2 bytes
0xec38 0000 - The same random cookie from the request
4 bytes
0x0000 0000
4 bytes
0x0000 0000
4 bytes
0x0000 0000
4 bytes
0x0000 0000
4 bytes
0x2dc5 2b09 - Your brand spankin' new ICQ number (remember, this is network byte order, so in real hexidecimal this is actually 0x092b c52d, which is 153,863,469 in decimal)
2 bytes
0xec38 0000 - The same random cookie from the request
2 bytes
0x0000
From Aleksandr Shutko: SNAC(17,05) registration reply (new uin) SNAC(17,05) BUCP__REGISTER_RESPONSE
This is the server reply for SNAC(17,04). It contain
new uin. This snac mean that registration finished succesfully.
Server also can reply with SNAC(17,01) if it can't
create new user account.