CWho (0x18)
Previous: CAttack | Client action index | Next: CWhisper
CWho is client-to-server action 0x18 in the 4.21 protocol.
Direction: client to server
Encrypted: Yes. See Sequence and XOR Transformation.
Payload offsets begin with the first byte after the action. The frame marker, frame length, action, sequence, and trailing zero are excluded.
Payload format
CWho has no payload. Darkages.exe:0x0043E384 net_c_send_who_request submits exactly one logical byte, the action.
Queue call sites
| Queue call | Containing IDA function | Function address |
|---|---|---|
Darkages.exe:0x0043E39C | net_c_send_who_request | Darkages.exe:0x0043E384 |
UI flow
The E window button and mapped E/e key call ui_window_buttons_select, which sends CWho every time. On first use it also allocates, adds, and registers Users Dialog Pane, then hides it. SShowUsers 0x36 populates and shows that persistent pane when the reply arrives. See UI, Input, and Packet Flows.