Luigi Auriemma

Hi guys,
I've done a complete remake of the gamespy login emulator the last 2 days. At the moment it has this features:
- MySQL + SQlite3 support
- only Battlefield 2 tested yet
- Create account -> every password possible
- Recieve Account by Mail and Username
- Any password possible now (but you have to register your account first [create new account])
- ONE executable which runs: gpcm.gamespy.com, gpsp.gamespy.com and battlefield2.available.com (the latter is not yet tested - EDIT: v. 1.1a has full support now; see (*))

What i have planned to do:
- PHP admin interface to:

- kick users (if users are logged in it will just kick them back into the login menu)

- delete users

- Python script system support
- Makefile for compiling and running the server under OS X and Linux
- Simple PHP script to allow users to creat their accounts via your website

This is especially addressed to aluigi:
Could you tell me how exactly the passwordenc stuff works?
Ive done a bit of research but i haven't found out anything usefull yet.

Download and issue-tracker:
http://gsloginserver.googlecode.com

(*) Some of you guys maybe noticed that BF2 sometimes takes a lot of time to even load the videos. This is due to BF2 sending a request to battelfield2.available.gamespy.com. If it doesn't get an answer it will try it multiple times and then give up (timeout is several seconds), this will take about 30 seconds. My emulator will send an answer and so speed up the BF2 start.

Nice! 8)

do you mean this one?
http://aluigi.org/papers.htm#gspassenc

exactly.
I just copied the source from there but i don't understand the system.
Could you tell me how you found out that things with the encryption after base64?

if you refer about how to implement the code, well it's just the calling of base64 decoder function and then gspassenc() for the decryption process and base64 encoding plus gspassenc() for the encryption.
gspassenc is used for both encryption and decryption because it's a xor operation (indeed it's even possible to use a fixed xor string)

instead if you are mean how I reversed the code, it was a classical debugger job.
I guess I inserted a breakpoint on the access of the "passwordenc" string or probably directly in the function that performs the base64 decoding, sincerely don't remember.
if you want to find the gspassenc code inside the executable/process of a game search its constants like 0x41a7 and 0x79707367

about base64 remember that Gamespy uses the chars "[]_" instead of "+/="

why are you interested to this?
usually people are interested only to the "implementation" part :)

well isn't it kinda hard to code such a function ( i mean gspassenc and gslame )?
It appears to be very complicated with all that bit operations :P

no, it's enough simple.
just an assembly to C conversion