[RELEASE] GetKey DLL (+ KMS support)

[Diamondo25]

Heya,

Our dear friends at Nexon Korea decided they needed MapleStory Globals AES + key changing method.
To show them that its not worth the hassle, I've upgraded my GetKey DLL to support their stuff as well.
I suggest you wait a second before injecting it, as Themida could still be unpacking.

Updated with new GMS support (easier method):

You must be registered to see links

Download:

You must be registered to see links

Have fun


GITHUB:

You must be registered to see links

 

[iceblade112]

Our dear friends at Nexon Korea

Dear friends indeed!

 

[ngnam87]

nice release,
i think you should make the output easy to copy!
i modified your source to write the output to a file, also add OdinMS format

//add this include first
#include <iostream>
#include <fstream>


sprintf_s(buffer, 100, "%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X", 
            aesKeyLocation[ 0], aesKeyLocation[ 1], aesKeyLocation[ 2], aesKeyLocation[ 3], aesKeyLocation[ 4], aesKeyLocation[ 5], aesKeyLocation[ 6], aesKeyLocation[ 7],
            aesKeyLocation[ 8], aesKeyLocation[ 9], aesKeyLocation[10], aesKeyLocation[11], aesKeyLocation[12], aesKeyLocation[13], aesKeyLocation[14], aesKeyLocation[15],
            aesKeyLocation[16], aesKeyLocation[17], aesKeyLocation[18], aesKeyLocation[19], aesKeyLocation[20], aesKeyLocation[21], aesKeyLocation[22], aesKeyLocation[23],
            aesKeyLocation[24], aesKeyLocation[25], aesKeyLocation[26], aesKeyLocation[27], aesKeyLocation[28], aesKeyLocation[29], aesKeyLocation[30], aesKeyLocation[31]


            );
        
        MessageBoxA(NULL, buffer, "KEYZ HERE", MB_OK);
        [COLOR=#ff0000]//custom code start[/COLOR]
        ofstream myfile("AESkey.txt");
        char temp[20];


        myfile << "Maple Shark Format:\n";        
        for(int i= 0; i< 32; i++){
            sprintf_s ( temp, "%02X", aesKeyLocation[i] );
            myfile << temp;
        }


        myfile << "\n\nOdinMS Format:\n";        
        for(int i= 0; i< 32; i+= 4){
            sprintf_s ( temp, "%02X", aesKeyLocation[i] );
            myfile << "(byte)0x" << temp ;
            myfile << ",(byte)0x00,(byte)0x00,(byte)0x00";
            if(i+ 4< 32){
                myfile<< ",";
            }
        }
        myfile.close();
        [COLOR=#ff0000]//custom code end[/COLOR]


        delete[] buffer;

 

[Diamondo25]

You can copy and paste the dialog. Just press ctrl+c when you see a messagebox, and you can paste it in notepad for example

 

[yjh1emd]

null lol

 

[Diamondo25]

but kms is blocked injector
how to use getkey dll?

InjectorGadget

 

[yjh1emd]

InjectorGadget

I use injector gadget but no responsive getkey dll inject maplestory.exe and when maplestory.exe show nexon logo at the same time maplestory.exe were exited.

gms is maplestory global, and keep it on startup screen at dll inject
when using dll for kms?

 

[ladyfirst2]

same GMS

 

[Diamondo25]

Updated the sauce with a different kind of method to find out where the key is located. Just search for the old key first lel

 

[ngnam87]

Updated the sauce with a different kind of method to find out where the key is located. Just search for the old key first lel

did you replace the old code? i prefer you use both method!

 

[Diamondo25]

did you replace the old code? i prefer you use both method!

The old method doesn't work when the function is virtualized. And it expects facts that can not be true (such as offsets).

 

[whoakr]

@Diamondo25
CAESCipher::Encrypt is at 004B3410, original userkey is at 00000000
(it is 226.1 - public kr server recently ver)
then what shoud i do?

 

[Diamondo25]

@Diamondo25
CAESCipher::Encrypt is at 004B3410, original userkey is at 00000000
(it is 226.1 - public kr server recently ver)
then what shoud i do?

They fucked up, seems they even changed the 'easy' guessing method. Bummar, need to have the client to find out what they changed

 

[whoakr]

They fucked up, seems they even changed the 'easy' guessing method. Bummar, need to have the client to find out what they changed

so.. if i upload 226client link, you can do that?

 

[Diamondo25]

so.. if i upload 226client link, you can do that?

prolly

 

[whoakr]

prolly

ok

You must be registered to see links

226.1 client link

 

[loevor]

Good.

 

[a65343371]

Chinese version of the access to the key error.Intercepted packets not decrypt.

 

[sunnyboy]

Chinese version of the access to the key error.Intercepted packets not decrypt.

Well obviously, it's only GMS and KMS supported. There's a China maple source somewhere and idk if they change their leys so u can just use that

 

[a65343371]

。。。。。。。。。。