Windows XP and Vista Product Key Recovery Tool

[Brodus]

Hi everyone, I'm just new Technibble, but so far I have found it to be a supportive and knowledgeable forum. I made a post a couple of days ago regarding a laptop I had in with non-booting HDD (it had failed). My problem was, the Windows serial key had rubbed off the bottom, and being unable to boot into Windows, I was unable to use any programs like Magic Jelly Bean or ViewKeyXP to retrieve the key. Fortunately, the customer ended up bringing in his Dell Windows DVD, which did not require a key. However in prior to receiving the DVD, during my key retrieval process, I found a very handle key retrieval tool.

The tool I found is called "Windows XP Decryptor Tool" and can be found at DagonDesign website (Only my second post, so I can't put in link, google "Dagondesign", and your first result will be the webpage. The program is under tools)

Essentially if you can retrieve the ntusers.dat file from the main account on the target HDD, you can load it up using loadhive.exe (also available for download from dagaondesign), and temporarily add it to a working computers registry. From the new temporary registry entry, you take the DigitalProductID and use the Windows XP Decryptor Tool to convert the binary entry into a Windows Product Key.

I hope that this tool proves to be a useful contribution to everyone's tech tool repertoire.

[reesk92]

sounds cool better than the magical jelly bean key finder (i think thats the one )
that needs the user to be logged in any way this tool could mean that a tech could pull the license key off a unbootable system along with the users data before the reinstall.

good post mate bryce should put this as the repair tool of the wee so long as its legit


edit its only fair i post the link for you http://www.dagondesign.com/tools/win...key-decrypter/ so here it is


after reading into it a bit im not sure as to whether this would be a good idea your esentially enetering your product key into the internet for tons of script kiddies to use on their pirate xp installs

[Brodus]

after reading into it a bit im not sure as to whether this would be a good idea your esentially enetering your product key into the internet for tons of script kiddies to use on their

Thank you for taking time to check out that site, I've found it to be a beneficial tool so far. As for entering your product key online, there's actually a embedded link on the link you provided. This links you to two offline tools that allow you to do this from your computer and not via upload.

Its at dagondesign(.com)/articles/windows-xp-product-key-recovery/

I'm sorry about the linking, but I just wanted to provide clarification on how this process can be most effective, and this link shows the full process, instructions on how to do it, and the offline tools required.

Again, my apologies for the link, but I hope this clears things up. Cheers!

[AtYourService]

I made a similar program that also needs the system up and running , its made in assembly and is only 9kb,,most of that file size is from the stupid windows icon, see windows bloats everything
http://www.whatsmypass.com/?page_id=143

ill have to look into the loadhive code sometime to adapt mine for offline drives


although i just realized magic jelly bean keyfinder has this feature already


recovering the product key can be done with a simple vbs script also

' ################################################## ############
' # #
' # VBScript to find the DigitalProductID for your #
' # Microsoft windows Installation and decode it to #
' # retrieve your windows Product Key #
' # #
' # ----------------------------------------------- #
' # #
' # Created by: Parabellum #
' # #
' ################################################## ############
'
' <--------------- Open Registry Key and populate binary data into an array -------------------------->
'
const HKEY_LOCAL_MACHINE = &H80000002
strKeyPath = "SOFTWARE\Microsoft\Windows NT\CurrentVersion"
strValueName = "DigitalProductId"
strComputer = "."
dim iValues()
Set oReg=GetObject("winmgmts:{impersonationLevel=imper sonate}!\\" & _
strComputer & "\root\default:StdRegProv")
oReg.GetBinaryValue HKEY_LOCAL_MACHINE,strKeyPath,strValueName,iValues
Dim arrDPID
arrDPID = Array()
For i = 52 to 66
ReDim Preserve arrDPID( UBound(arrDPID) + 1 )
arrDPID( UBound(arrDPID) ) = iValues(i)
Next
' <--------------- Create an array to hold the valid characters for a microsoft Product Key -------------------------->
Dim arrChars
arrChars = Array("B","C","D","F","G","H","J","K","M","P","Q", "R","T","V","W","X","Y","2","3","4","6","7","8","9 ")

' <--------------- The clever bit !!! (Decrypt the base24 encoded binary data)-------------------------->
For i = 24 To 0 Step -1
k = 0
For j = 14 To 0 Step -1
k = k * 256 Xor arrDPID(j)
arrDPID(j) = Int(k / 24)
k = k Mod 24
Next
strProductKey = arrChars(k) & strProductKey
' <------- add the "-" between the groups of 5 Char -------->
If i Mod 5 = 0 And i <> 0 Then strProductKey = "-" & strProductKey
Next
strFinalKey = strProductKey
'
' <---------- This part of the script displays operating system Information and the license Key --------->
'
strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
Set colOperatingSystems = objWMIService.ExecQuery _
("Select * from Win32_OperatingSystem")
For Each objOperatingSystem in colOperatingSystems
strOS = objOperatingSystem.Caption
strBuild = objOperatingSystem.BuildNumber
strSerial = objOperatingSystem.SerialNumber
strRegistered = objOperatingSystem.RegisteredUser
Next
Set wshShell=CreateObject("wscript.shell")
strPopupMsg = strOS & vbNewLine & vbNewLine
strPopupMsg = strPopupMsg & "Build Number: " & strBuild & vbNewLine
strPopupMsg = strPopupMsg & "PID: " & strSerial & vbNewLine & vbNewLine
strPopupMsg = strPopupMsg & "Registered to: " & strRegistered & vbNewLine & vbNewLine & vbNewLine
strPopupMsg = strPopupMsg & "Your Windows Product Key is:" & vbNewLine & vbNewLine & strFinalKey
strPopupTitle = "Microsoft Windows License Information"
wshShell.Popup strPopupMsg,,strPopupTitle,vbCancelOnly+vbinformat ion
WScript.Quit