C>S 0x3E SID_LOGONREALMEX

Message Id:	0x3E
Message Name:	SID_LOGONREALMEX
Direction:	Client to Server
Used By:	Diablo II, Diablo II Lord of Destruction
Format:	`(UINT32) Client Token (UINT8)[20] Hashed realm password (STRING) Realm title`

Remarks

Realm password is always "password".

Battle.net password hashes are hashed twice using BSHA1. First, the string "password" is hashed by itself, then the following data is hashed again and sent to Battle.net:

(UINT32) Client Token
(UINT32) Server Token
(UINT8)[20] First password hash