powershell script for offline office key decryption

1

I removed the "2007" office key from a "dead" PC that was on the registry Now I was modifying the popular "Search-RegistryKeyValues" script, to directly pass the value to decrypt. But I'm not sure what to "give".

My question is on the line

$valueData = (Get-ItemProperty $key).digitalproductid[52..66]

How can I change to what I have in txt? "DigitalProductID" = hex: a4,00,00, etc. .....

Thank you

The script:

function Search-RegistryKeyValues {
 param(
 [string]$path,
 [string]$valueName
 )
 Get-ChildItem $path -recurse -ea SilentlyContinue |
 % {
  if ((Get-ItemProperty -Path $_.PsPath -ea SilentlyContinue) -match $valueName)
  {
   $_.PsPath
  }
 }
}

# find registry key that has value "digitalproductid"
# 32-bit versions
$key = Search-RegistryKeyValues "hklm:\software\microsoft\office" "digitalproductid"
if ($key -eq $null) {
    # 64-bit versions
 $key = Search-RegistryKeyValues "hklm:\software\Wow6432Node\microsoft\office" "digitalproductid"
 if ($key -eq $null) {Write-Host "MS Office is not installed.";break}
}

$valueData = (Get-ItemProperty $key).digitalproductid[52..66]

# decrypt base24 encoded binary data
$productKey = ""
$chars = "BCDFGHJKMPQRTVWXY2346789"
for ($i = 24; $i -ge 0; $i--) {
 $r = 0
 for ($j = 14; $j -ge 0; $j--) {
  $r = ($r * 256) -bxor $valueData[$j]
  $valueData[$j] = [math]::Truncate($r / 24)
  $r = $r % 24
 }
 $productKey = $chars[$r] + $productKey
 if (($i % 5) -eq 0 -and $i -ne 0) {
  $productKey = "-" + $productKey
 }
}

Write-Host "MS Office Product Key:" $productKey

Using third-party software did not work because of file access limitations

    
asked by anonymous 01.07.2015 / 18:33

0 answers