pkeyconfig Info Reader +Plus+ [v19.0.2]

Can I have a screen shot

 

Can you provide latest pkeyconfig file ( yours )
Or just extract data and export to excel

 

Darki found bug,
i will re write the code for decode key
to match C dissambly logic

Code:

<#
        sppcomapi.dll
        __int64 __fastcall GetWindowsPKeyInfo(_WORD *a1, __int64 a2, __int64 a3, __int64 a4)
        {
            __int128 v46[3]; // __m128 v46[3], 48 bytes total
            int v47[44];
            int v48[320];
            memset(v46, 0, sizeof(v46));
            memset_0(v47, 0, 0xA4ui64);
            memset_0(v48, 0, 0x4F8ui64);
            v47[0] = 164;   // size of structure 1
            v48[0] = 1272;  // size of structure 2
        }
        #>    

So, darky write a small C++,
with sizeof, and get diffrent size's
so, to mimic to real api call,
Aka, decode key using pidgenx,
you actualy need do this,

Code:

# Allocate unmanaged memory for PID, DPID, and DPID4
$PIDPtr   = New-IntPtr -Size 0x30 -WriteSizeAtZero
$DPIDPtr  = New-IntPtr -Size 0xB0 -InitialValue 0xA4
$DPID4Ptr = New-IntPtr -Size 0x500 -InitialValue 0x4F8

and intersting part,

Code:

   CChkMacroETWLoggerT<CEmptyType>::LogHResultEvent(0i64);
    if ( v21 )
      v11 = ((__int64 (__fastcall *)(_WORD *, LPCWSTR, const wchar_t *, _QWORD, __int128 *, int *, int *))ProcAddress)(
              v44,
              v9,
              L"03612" --> ????
              0i64,
              v46,
              v47,
              v48);

 

bump version to [18.0.6.]
Main change's -->

• Application info tab have new property, Trusted time [latest activation time]
• SLInstallProofOfPurchase, use `msft:rm/algorithm/pkey/detect` as default
• PidGenX implementation was changed [[[ *** ]]]
• Add new function IsTokenBasedEdition [still think how it can be useful]
• Some other Little fixe`s, don't remember

[*]

Code:

        <#
        sppcomapi.dll
        __int64 __fastcall GetWindowsPKeyInfo(_WORD *a1, __int64 a2, __int64 a3, __int64 a4)
        {
            __int128 v46[3]; // __m128 v46[3], 48 bytes total
            int v47[44];
            int v48[320];
            memset(v46, 0, sizeof(v46)); // size of structure 2
            memset_0(v47, 0, 0xA4ui64);
            memset_0(v48, 0, 0x4F8ui64);
            v47[0] = 164;   // size of structure 3
            v48[0] = 1272;  // size of structure 4
        }
        #>

        # Allocate unmanaged memory for PID, DPID, and DPID4
        $PIDPtr   = New-IntPtr -Size 0x30  -WriteSizeAtZero
        $DPIDPtr  = New-IntPtr -Size 0xB0  -InitialValue 0xA4
        $DPID4Ptr = New-IntPtr -Size 0x500 -InitialValue 0x4F8

        try {
            try {
                # Call the function with appropriate parameters
                $result = $Global:PIDGENX::PidGenX(
                    $key, $configPath,
                    "03612",  # Default value for MSPID, 03612 ?? 00000 ?
                    0,        # UnknownUsage
                    $PIDPtr, $DPIDPtr, $DPID4Ptr
                )

                #Dump-MemoryAddress -Pointer $PIDPtr   -Length 0x30  -FileName PIDPtr
                #Dump-MemoryAddress -Pointer $DPIDPtr  -Length 0xB0  -FileName DPIDPtr
                #Dump-MemoryAddress -Pointer $DPID4Ptr -Length 0x500 -FileName DPID4Ptr

            } catch {

 

Darki re upload the version
fix few bugs, and upgrade some modules
~~~~~~~~~~~~~~~
found intresting thing,
so, in my prev` list, i have missing prev`
called SeDelegateSessionUserImpersonatePrivilege
for next time.

 

You need to login to view this posts content.

 

Upload new version now.
now show active Service / License*
Include Active License / Oem License Information & more.

* if you go an oem, default is oem, else, show active license

 

i think i can only get last 5 digits

 

v19.0.2 [compiled at 12/09/2025]

Code:

* Add new Helper NtStatus,
  to achieve direct pointer for imprtant str`
  needed for Script
* Updated with latest encode Blob from Mas
* Updated with latest tsforge dll library
* Also, to decode key's, now use PidGenX2

interesting diff`` between 2 function

Code:

    $result = $Global:PIDGENX::PidGenX(
        # Most important Roles
        $key, $configPath,
        # Default value for MSPID, 03612 ?? 00000 ?
        # PIDGENX2 -> v26 = L"00000" // SPPCOMAPI, GetWindowsPKeyInfo -> L"03612"
        "00000",
        # Unknown1
        0,
        # Structs
        $PIDPtr, $DPIDPtr, $DPID4Ptr
    )

    $result = $Global:PIDGENX::PidGenX2(
        # Most important Roles
        $key, $configPath,
        # Default value for MSPID, 03612 ?? 00000 ?
        # PIDGENX2 -> v26 = L"00000" // SPPCOMAPI, GetWindowsPKeyInfo -> L"03612"
        "00000",
        # Unknown1 / [Unknown2, Added in PidGenX2!]
        0,0,
        # Structs
        $PIDPtr, $DPIDPtr, $DPID4Ptr
    )

And i did wonder what this 03612.
solve you the mystery. [tsforge project]

Code:

        public string GetMPC()
        {
            if (mpc != null)
            {
                return mpc;
            }

            int build = Environment.OSVersion.Version.Build;

            mpc = build >= 10240 ? "03612" :
                    build >= 9600 ? "06401" :
                    build >= 9200 ? "05426" :
                    "55041";

which later been used here

Code:

   public static void InstallGenPKey(PSVersion version, bool production, Guid actId)
        {
            if (version == PSVersion.Vista) throw new NotSupportedException("This feature is not supported on Windows Vista/Server 2008.");
            if (actId == Guid.Empty) throw new ArgumentException("Activation ID must be specified for generated product key install.");

            PKeyConfig pkc = new PKeyConfig();
            
            try
            {
                pkc.LoadConfig(actId);
            }
            catch (ArgumentException)
            {
                pkc.LoadAllConfigs(SLApi.GetAppId(actId));
            }

            ProductConfig config;
            pkc.Products.TryGetValue(actId, out config);

            if (config == null) throw new ArgumentException("Activation ID " + actId + " not found in PKeyConfig.");

            ProductKey pkey = config.GetRandomKey();

            Guid instPkeyId = SLApi.GetInstalledPkeyID(actId);
            if (instPkeyId != Guid.Empty) SLApi.UninstallProductKey(instPkeyId);

            if (pkey.Algorithm == PKeyAlgorithm.PKEY2009)
            {
                uint status = SLApi.InstallProductKey(pkey);
                Logger.WriteLine(string.Format("Installing generated product key {0} status {1:X}", pkey, status));

                if ((int)status < 0)
                {
                    throw new ApplicationException("Failed to install generated product key.");
                }

                Logger.WriteLine("Successfully deposited generated product key.");
                return;
            }

            Logger.WriteLine("Key range is PKEY2005, creating fake key data...");

            if (pkey.Channel == "Volume:GVLK" && version == PSVersion.Win7) throw new NotSupportedException("Fake GVLK generation is not supported on Windows 7.");

            VariableBag pkb = new VariableBag(version);
            pkb.Blocks.AddRange(new[]
            {
                new CRCBlockModern
                {
                    DataType = CRCBlockType.STRING,
                    KeyAsStr = "SppPkeyBindingProductKey",
                    ValueAsStr = pkey.ToString()
                },
                new CRCBlockModern
                {
                    DataType = CRCBlockType.STRING,
                    KeyAsStr = "SppPkeyBindingMPC",
                    ValueAsStr = pkey.GetMPC()
                },

 

is this an x86 or x64 version,
x86 version could be problemtic,
it work well under x64 version of any win 10-11
with ps version --> 5

 

the only real possible things, who can be cause it, modules missing / differences
and i am also can't test it under server, cause i aint have one