1
I removed from a PC "dead" the key from office 2007 that was in the register Now he was modifying the popular " Search-Registrykeyvalues " script to directly pass the decryption value. But I’m not sure what to "give him".
my doubt is on the line
$valueData = (Get-ItemProperty $key).digitalproductid[52..66]
How can I change to put what I have in txt? "Digitalproductid"=Hex:A4,00,00, etc.....
Thank you
The script:
function Search-RegistryKeyValues {
param(
[string]$path,
[string]$valueName
)
Get-ChildItem $path -recurse -ea SilentlyContinue |
% {
if ((Get-ItemProperty -Path $_.PsPath -ea SilentlyContinue) -match $valueName)
{
$_.PsPath
}
}
}
# find registry key that has value "digitalproductid"
# 32-bit versions
$key = Search-RegistryKeyValues "hklm:\software\microsoft\office" "digitalproductid"
if ($key -eq $null) {
# 64-bit versions
$key = Search-RegistryKeyValues "hklm:\software\Wow6432Node\microsoft\office" "digitalproductid"
if ($key -eq $null) {Write-Host "MS Office is not installed.";break}
}
$valueData = (Get-ItemProperty $key).digitalproductid[52..66]
# decrypt base24 encoded binary data
$productKey = ""
$chars = "BCDFGHJKMPQRTVWXY2346789"
for ($i = 24; $i -ge 0; $i--) {
$r = 0
for ($j = 14; $j -ge 0; $j--) {
$r = ($r * 256) -bxor $valueData[$j]
$valueData[$j] = [math]::Truncate($r / 24)
$r = $r % 24
}
$productKey = $chars[$r] + $productKey
if (($i % 5) -eq 0 -and $i -ne 0) {
$productKey = "-" + $productKey
}
}
Write-Host "MS Office Product Key:" $productKey
Using 3rd party software did not work due to file access limitations
The answer to this question was in English here:
– Ezeq