parsing of 0009 packet using buffer. looks like decryption might be broken though