Base: TLS 1.0
Endian: little
| name | offset | size |
|---|---|---|
| random (i32) | 0 | 4 |
| zero padding (i16) | 4 | 2 |
| method (i16) | 6 | 2 |
| data length (i32) | 8 | 4 |
| encrypted data | 12 | n |
Cipher: SEED-CBC
IV: 6D10DD11BA3761C9771E22F36E10C19D (hex)
Key: MD5(first_8_bytes_of_packet)
| name | offset | size |
|---|---|---|
| BSON Object | 0 | - |
| method | desc |
|---|---|
| 0x7530 | call server prepare |
| 0x272a | unknown |
| 0x2720 | unknown |
| 0x2714 | unknown |
| 0x2717 | unknown |
| 0x2718 | unknown |
| 0x2710 | create voice call |
| 0x2727 | unknown |
| 0x2722 | create voice call (group) |
| 0x2714 | terminate call |
| 0x272b | unknown |
| 0x272c | create live talk |
| 0x271c | unknown |
| 0x271e | unknown |
| 0x2724 | unknown |
| 0x2725 | unknown |
맥용 바이너리를 보니 메소드 0x272b도 있는 것 같습니다.