Validating DayZ Keys

Sooo since everybody is asking questions about how to validate DayZ / ArmA2 Serials I thought why not make a topic where we can bring together our knowledge!
I will provide some pseudocode in this post.

Checking if a serial has been banned by BattleEye
1. Get the BattleEye-GUID of the serial.

Code:

string BEGuid = md5("BE" + md5("XXXX-XXXXX-XXXXX-XXXXX-XXXXX")); // Replace with your serial

2. Sent 4 randoms characters and the BEGuid via UDP to 81.0.236.117 on port 2324 and wait for a response:

Code:

UDPClient.send("some" + BEGuid); // 'some' can be anything that is 4 chars long. Ex: 'aosq', 'fido', 'blub'

3. If the response contains the string "Global", "Ban" or "Global Ban" the serial has been banned, otherwise it's clean!

Does anybody know, how Darky's program is checking if the serial is VALID and PLAYBLE? I can provide a Wireshark-record of the packets if necessary.

Feel free to contribute!

Can you make a video,l am a noob xd

you can find the battleye guid throw game i think

Originally Posted by javaEEcrack

Used HEX: 89 23 E9 50 14 EB E6 A8 80 87 7D A5 93 21 E6

First Packet:

Code:

29	1365.753684000	x.x.x.x.x	69.10.30.248	UDP	179	Source port: 61116  Destination port: 29910

0000  00 24 fe df 19 f2 bc 5f  f4 54 d6 09 08 00 45 00   .$....._ .T....E.
0010  00 a5 2c 72 00 00 80 11  37 0e c0 a8 b2 1d 45 0a   ..,r.... 7.....E.
0020  1e f8 ee bc 74 d6 00 91  24 10 3b 00 18 11 1b 2c   ....t... $.;....,
0030  25 17 08 09 39 40 40 4d  52 3d 0e 0d 2f 39 41 11   %...9@@M R=../9A.
0040  37 29 3f 05 33 25 15 04  1e 15 2f 16 49 53 56 5b   7)?.3%.. ../.ISV[
0050  04 45 43 1b 53 03 59 5c  42 45 40 56 53 0f 04 4a   .EC.S.Y\ BE@VS..J
0060  45 4e 50 02 5b 5c 47 49  41 5f 52 5a 5d 47 13 1d   ENP.[\GI A_RZ]G..
0070  02 58 0c 00 15 44 4d 01  59 5d 54 45 49 40 06 04   .X...DM. Y]TEI@..
0080  54 04 43 12 4d 54 03 09  50 41 14 1b 06 57 5d 54   T.C.MT.. PA...W]T
0090  10 12 1b 3b 08 1d 39 42  46 4e 50 56 5e 51 40 2c   ...;..9B FNPV^Q@,
00a0  0a 0c 04 14 39 47 48 4d  3b 13 08 14 03 02 16 08   ....9GHM ;.......
00b0  07 31 54                                           .1T        

Answer:

30	1365.997348000	69.10.30.248	x.x.x.x.x	UDP	115	Source port: 29910  Destination port: 61116

0000  00 24 fe df 19 f2 bc 5f  f4 54 d6 09 08 00 45 00   .$....._ .T....E.
0010  00 a6 2c 73 00 00 80 11  37 0c c0 a8 b2 1d 45 0a   ..,s.... 7.....E.
0020  1e f8 ee bd 74 d6 00 92  db 14 3b 00 18 11 1b 2c   ....t... ..;....,
0030  25 17 08 09 39 40 40 4d  52 3d 0e 0d 2f 40 15 24   %...9@@M R=../@.$
0040  37 5f 00 1b 27 25 15 04  1e 15 2f 16 49 53 56 5b   7_..'%.. ../.ISV[
0050  04 45 43 1b 53 03 59 5c  42 45 40 56 53 0f 04 4a   .EC.S.Y\ BE@VS..J
0060  45 4e 50 02 5b 5c 47 49  41 5f 52 5e 03 11 42 40   ENP.[\GI A_R^..B@
0070  03 55 5e 04 11 16 1a 50  07 55 55 40 47 49 02 02   .U^....P .UU@GI..
0080  5b 04 17 45 41 5f 05 0c  01 46 15 4f 5f 04 59 54   [..EA_.. .F.O_.YT
0090  4a 48 1f 3b 08 1d 39 42  46 4e 50 56 5e 51 40 2c   JH.;..9B FNPV^Q@,
00a0  0a 0c 04 14 39 40 45 4d  56 3d 1f 00 02 00 0b 08   ....9@EM V=......
00b0  0e 0b 39 42                                        ..9B

Second Packet same used Hex

Code:

31	1368.216922000	x.x.x.x 69.10.30.248	UDP	180	Source port: 61117  Destination port: 29910

0000  00 24 fe df 19 f2 bc 5f  f4 54 d6 09 08 00 45 00   .$....._ .T....E.
0010  00 a6 2c 73 00 00 80 11  37 0c c0 a8 b2 1d 45 0a   ..,s.... 7.....E.
0020  1e f8 ee bd 74 d6 00 92  db 14 3b 00 18 11 1b 2c   ....t... ..;....,
0030  25 17 08 09 39 40 40 4d  52 3d 0e 0d 2f 40 15 24   %...9@@M R=../@.$
0040  37 5f 00 1b 27 25 15 04  1e 15 2f 16 49 53 56 5b   7_..'%.. ../.ISV[
0050  04 45 43 1b 53 03 59 5c  42 45 40 56 53 0f 04 4a   .EC.S.Y\ BE@VS..J
0060  45 4e 50 02 5b 5c 47 49  41 5f 52 5e 03 11 42 40   ENP.[\GI A_R^..B@
0070  03 55 5e 04 11 16 1a 50  07 55 55 40 47 49 02 02   .U^....P .UU@GI..
0080  5b 04 17 45 41 5f 05 0c  01 46 15 4f 5f 04 59 54   [..EA_.. .F.O_.YT
0090  4a 48 1f 3b 08 1d 39 42  46 4e 50 56 5e 51 40 2c   JH.;..9B FNPV^Q@,
00a0  0a 0c 04 14 39 40 45 4d  56 3d 1f 00 02 00 0b 08   ....9@EM V=......
00b0  0e 0b 39 42                                        ..9B             

Answer

32	1368.449738000	69.10.30.248	x.x.x.x UDP	116	Source port: 29910  Destination port: 61117

0000  bc 5f f4 54 d6 09 00 24  fe df 19 f2 08 00 45 00   ._.T...$ ......E.
0010  00 66 16 0f 00 00 75 11  58 b0 45 0a 1e f8 c0 a8   .f....u. X.E.....
0020  b2 1d 74 d6 ee bd 00 52  70 cd 3b 14 03 0a 18 2c   ..t....R p.;....,
0030  25 04 05 31 03 43 44 4e  51 00 5b 56 11 44 1b 53   %..1.CDN Q.[V.D.S
0040  58 5c 50 4a 41 4b 05 00  54 50 44 47 1a 51 58 59   X\PJAK.. TPDG.QXY
0050  5c 4b 48 4a 3b 12 06 00  0a 2c 4a 52 55 5c 39 16   \KHJ;... .,JRU\9.
0060  02 0b 0a 12 0a 39 3a 1e  0f 06 0d 04 01 53 33 3d   .....9:. .....S3=
0070  47 2a 08 1c                                        G*..

They begins with 3b:00:18:11:1b:2c:25:17:08:09:39:40:40:4d:52:3d:0e :0d:2f but then it goes random even same key is used.

Just noticed 2515041e152f164953565b0445431b5303595c42454056530f 044a454e50025b5c4749415f should be the encrypted (?!) key.

Some checks i made

Seriously guys? This thread is supposed to be informational. Nobody will give you any keys here. It's for learning purposes ONLY!

PlayerID:

take first four values of hex-key as decimal w-x-y-0z-00-00-00-00-00-00-00-00-00-00-00
w+256*x+(256^2)*y+(256^3)*z
while z is only second char, so z can only be a number between 0-16 (00-0F)

If anyone can help us decrypt the packets send by Darky's program to validate the keys, here's some data:

Packet 1 - Serial used: "06-50-10-06-F5-F8-86-8E-62-09-0A-CE-D7-DF-C7" - Response: Valid
Request:

Code:

00000000  3b 00 18 11 1b 2c 25 17  08 09 39 40 40 4d 52 3d ;....,%. ..9@@MR=
00000010  0e 0d 2f 29 0f 23 19 1b  02 03 39 25 15 04 1e 15 ../).#.. ..9%....
00000020  2f 12 4f 02 50 0f 00 16  14 1a 04 55 5e 04 41 13 /.O.P... ...U^.A.
00000030  4d 55 53 5c 04 4a 42 4f  01 56 0c 53 40 46 49 04 MUS\.JBO .V.S@FI.
00000040  53 5a 00 12 48 4d 50 04  5d 04 41 45 1c 52 04 5b SZ..HMP. ].AE.R.[
00000050  03 45 44 18 50 05 5c 01  17 13 49 04 53 5f 52 10 .ED.P.\. ..I.S_R.
00000060  16 48 05 58 5d 57 12 12  41 3b 08 1d 39 42 46 4e .H.X]W.. A;..9BFN
00000070  50 56 5e 51 40 2c 0a 0c  04 14 39 42 43 4e 57 3d PV^Q@,.. ..9BCNW=
00000080  1f 00 02 00 0b 08 0e 0b  39 42                   ........ 9B

Answer:

Code:

00000000  3b 14 02 0e 2f 2c 1a 03  3d 0f 53 16 41 1b 02 04 ;.../,.. =.S.A...
00000010  09 06 10 44 4a 06 53 0e  51 41 42 48 06 58 5f 53 ...DJ.S. QABH.X_S
00000020  15 47 18 51 52 5b 55 10  42 25 14 0a 08 1c 2f 41 .G.QR[U. B%..../A
00000030  4a 50 51                                         JPQ

Packet 2 - Serial used: "86-5B-91-66-39-8A-A6-58-BB-B2-0A-FC-9A-21-55" - Response: Valid
Request:

Code:

00000000  3b 00 18 11 1b 2c 25 17  08 09 39 40 40 4d 52 3d ;....,%. ..9@@MR=
00000010  0e 0d 2f 1d 48 2e 03 0f  37 21 33 25 15 04 1e 15 ../.H... 7!3%....
00000020  2f 46 1a 56 52 0f 01 15  43 4d 02 51 09 5c 11 13 /F.VR... CM.Q.\..
00000030  1f 57 57 5e 06 45 43 49  54 02 0c 50 16 47 4b 5f .WW^.ECI T..P.GK_
00000040  56 55 51 4a 40 4d 05 04  5f 53 40 45 4d 5f 59 0e VUQJ@M.. _S@EM_Y.
00000050  07 44 11 4e 03 53 55 56  12 16 1b 56 03 0f 57 40 .D.N.SUV ...V..W@
00000060  48 1d 06 03 5c 57 40 13  4d 3b 08 1d 39 42 46 4e H...\W@. M;..9BFN
00000070  50 56 5e 51 40 2c 0a 0c  04 14 39 41 44 48 55 3d PV^Q@,.. ..9ADHU=
00000080  1f 00 02 00 0b 08 0e 0b  39 42                   ........ 9B

Answer:

Code:

00000000  3b 14 02 0e 2f 2c 1a 03  3d 5b 06 42 43 1b 03 07 ;.../,.. =[.BC...
00000010  5e 51 16 40 1d 5e 03 0e  03 43 46 4a 04 57 5e 55 ^Q.@.^.. .CFJ.W^U
00000020  40 13 18 52 04 5a 57 4b  47 25 14 0a 08 1c 2f 42 @..R.ZWK G%..../B
00000030  4d 56 53                                         MVS

Packet 3 - Serial used: "C6-4A-C6-B5-5A-1E-01-D4-01-3C-43-A6-87-02-34" - Response: Valid
Request:

Code:

00000000  3b 00 18 11 1b 2c 25 17  08 09 39 40 40 4d 52 3d ;....,%. ..9@@MR=
00000010  0e 0d 2f 35 20 23 14 17  31 02 09 25 15 04 1e 15 ../5 #.. 1..%....
00000020  2f 42 4d 52 51 0c 55 12  49 1a 05 59 0f 50 41 16 /BMRQ.U. I..Y.PA.
00000030  4e 05 51 5e 07 43 42 4c  03 04 08 00 42 46 18 51 N.Q^.CBL ....BF.Q
00000040  04 5f 57 42 40 4e 53 59  59 57 45 40 1b 03 05 59 ._WB@NSY YWE@...Y
00000050  52 4a 48 49 01 55 5f 52  12 42 18 51 58 09 50 42 RJHI.U_R .B.QX.PB
00000060  15 48 55 51 54 56 15 16  4d 3b 08 1d 39 42 46 4e .HUQTV.. M;..9BFN
00000070  50 56 5e 51 40 2c 0a 0c  04 14 39 42 48 4b 55 3d PV^Q@,.. ..9BHKU=
00000080  1f 00 02 00 0b 08 0e 0b  39 42                   ........ 9B

Answer:

Code:

00000000  3b 14 02 0e 2f 2c 1a 03  3d 5f 51 46 40 18 57 00 ;.../,.. =_QF@.W.
00000010  54 06 11 48 1b 52 53 0b  52 11 40 4a 05 51 5f 50 T..H.RS. R.@J.Q_P
00000020  17 15 1c 02 50 5b 04 45  15 25 14 0a 08 1c 2f 41 ....P[.E .%..../A
00000030  41 55 53                                         AUS

It is connecting to a GameSpy server to validate the keys. The first Byte 3b indicates that it contains serial data.

At the validation the answer for a valid key always starts with:
ascii: ;.../,..=
hex: 3b:14:02:0e:2f:2c:1a:03:3d

invalid starts with:
ascii:
;..
.,%..1
hex: 3b:14:03:0a:18:2c:25:04:05:31

Can anyone tell me, how to convert the serial (CD-Key) to the hexadecimal version (Hex-Key)?

Why don't we just use Darky's key changer to do this?

Originally Posted by Miniboris

Why don't we just use Darky's key changer to do this?

Because it is veeeery slow. I wanna make a multithreaded version of it but so far I only got the "bancheck" to work

And what you have contributed with?

How is this useful? Just use darky's keychanger to check the keys...

edit: nvm. Saw reason. My bad.

Cmon guys, keep this thread clean and informational. @NormenJaydenFBI: Could you kindly clean this thread from uninformational posts?

Originally Posted by dtrain07

Cmon guys, keep this thread clean and informational. @NormenJaydenFBI: Could you kindly clean this thread from uninformational posts?

Done, no flaming guys.

Validating DayZ Keys

Post a Reply

Similar Threads

Tags for this Thread