@setlocal DisableDelayedExpansion
@echo off



::============================================================================
::
::   此脚本是“Microsoft 激活脚本”（MAS）项目中的一部分
::
::   主    页：windowsaddict.ml
::      Email：windowsaddict@protonmail.com
::
::============================================================================



::  若要使用 Downlevel 方法（默认）激活，请使用 /a 参数运行脚本或在下面的行中将 0 更改为 1
set _acti=0

::  若要仅使用 Downlevel 方法（默认）生成 GenuineTicket.xml，请使用 /g 参数运行脚本或在下面的行中将 0 更改为 1
set _gent=0

::  要启用 LockBox 方法，请使用 /k 参数运行脚本或在下面的行中将 0 更改为 1
::  你需要将此选项与激活或门票生成一起使用。
::  例如，
::  HWID_Activation.cmd /a /k
::  HWID_Activation.cmd /g /k
set _lock=0



::  如果在上面的行中更改了值或使用了任何参数，脚本将以无人值守模式运行
::  如果使用多个选项，将仅应用其中一个选项



::========================================================================================================================================

:: 如果脚本是由 x64 位 Windows 上的 x86 进程启动的，则将使用 x64 进程重新启动脚本
:: 或者如果它是由 ARM64 Windows 上的 x86/ARM32 进程启动的，则将使用 ARM64 进程

if exist %SystemRoot%\Sysnative\cmd.exe (
set "_cmdf=%~f0"
setlocal EnableDelayedExpansion
start %SystemRoot%\Sysnative\cmd.exe /c ""!_cmdf!" %*"
exit /b
)

:: 如果脚本是由 ARM64 Windows 上的 x64 进程启动的，则将使用 ARM32 进程重新启动脚本

if exist %SystemRoot%\SysArm32\cmd.exe if %PROCESSOR_ARCHITECTURE%==AMD64 (
set "_cmdf=%~f0"
setlocal EnableDelayedExpansion
start %SystemRoot%\SysArm32\cmd.exe /c ""!_cmdf!" %*"
exit /b
)

:: 设置路径变量，如果在系统中配置错误时会有所帮助

set "SysPath=%SystemRoot%\System32"
if exist "%SystemRoot%\Sysnative\reg.exe" (set "SysPath=%SystemRoot%\Sysnative")
set "Path=%SysPath%;%SystemRoot%;%SysPath%\Wbem;%SysPath%\WindowsPowerShell\v1.0\"

::========================================================================================================================================

cls
color 07
title  HWID 激活

set _args=
set _elev=
set _unattended=0

set _args=%*
if defined _args set _args=%_args:"=%
if defined _args (
for %%A in (%_args%) do (
if /i "%%A"=="/a"  set _acti=1
if /i "%%A"=="/g"  set _gent=1
if /i "%%A"=="/k"  set _lock=1
if /i "%%A"=="-el" set _elev=1
)
)

for %%A in (%_acti% %_gent% %_lock%) do (if "%%A"=="1" set _unattended=1)

::========================================================================================================================================

set winbuild=1
set "nul=>nul 2>&1"
set "_psc=%SystemRoot%\System32\WindowsPowerShell\v1.0\powershell.exe"
for /f "tokens=6 delims=[]. " %%G in ('ver') do set winbuild=%%G

set _NCS=1
if %winbuild% LSS 10586 set _NCS=0
if %winbuild% GEQ 10586 reg query "HKCU\Console" /v ForceV2 2>nul | find /i "0x0" 1>nul && (set _NCS=0)

if %_NCS% EQU 1 (
for /F %%a in ('echo prompt $E ^| cmd') do set "esc=%%a"
set     "Red="41;97m""
set    "Gray="100;97m""
set   "Green="42;97m""
set "Magenta="45;97m""
set  "_White="40;37m""
set  "_Green="40;92m""
set "_Yellow="40;93m""
) else (
set     "Red="Red" "white""
set    "Gray="Darkgray" "white""
set   "Green="DarkGreen" "white""
set "Magenta="Darkmagenta" "white""
set  "_White="Black" "Gray""
set  "_Green="Black" "Green""
set "_Yellow="Black" "Yellow""
)

set "nceline=echo: &echo ==== 出现错误 ==== &echo:"
set "eline=echo: &call :dk_color %Red% "==== 出现错误 ====" &echo:"
set slp=SoftwareLicensingProduct
set sls=SoftwareLicensingService
set wApp=55c92734-d682-4d71-983e-d6ec3f16059f
if %~z0 GEQ 1500000 (set "_exitmsg=返回") else (set "_exitmsg=退出")
set "notifytocheckupdate=if %winbuild% GTR 19044 echo 请确保你正在使用此脚本的更新版本。"

::========================================================================================================================================

if %winbuild% LSS 10240 (
%eline%
echo 检测到不受支持的操作系统版本。
echo 项目仅支持 Windows 10/11。
goto dk_done
)

if %winbuild% GEQ 22483 if not exist %_psc% (
%nceline%
echo 在系统中未安装 Powershell。
goto dk_done
)

::========================================================================================================================================

::  修复路径名称中的特殊字符限制

set "_work=%~dp0"
if "%_work:~-1%"=="\" set "_work=%_work:~0,-1%"

set "_batf=%~f0"
set "_batp=%_batf:'=''%"

set "_PSarg="""%~f0""" -el %_args%"

set "_ttemp=%temp%"

setlocal EnableDelayedExpansion

::========================================================================================================================================

echo "!_batf!" | find /i "!_ttemp!" 1>nul && (
%eline%
echo 脚本是从 temp 文件夹启动的，
echo 最有可能的原因是，你是直接从压缩文件运行脚本。
echo:
echo 请解压压缩文件并从解压文件夹中启动脚本。
goto dk_done
)

::========================================================================================================================================

:: 将脚本提升为管理员权限及传递参数并防止循环

%nul% reg query HKU\S-1-5-19 || (
if not defined _elev %nul% %_psc% "start cmd.exe -arg '/c \"!_PSarg:'=''!\"' -verb runas" && exit /b
%eline%
echo 此脚本需要以管理员权限运行。
echo 若要继续执行，请在脚本上右键单击并选择“以管理员权限运行”
goto dk_done
)

::========================================================================================================================================

:dl_menu

if %_unattended%==0 (
cls
mode 76, 25
title  HWID 激活

if !_lock!==0 (set "_method=%_Green% "[Downlevel 方法]"") else (set "_method=%_Yellow% "  [LockBox 方法]"")
echo:
echo:
echo:
echo         ____________________________________________________________
echo:
call :dk_color2 %_White% "                [1] HWID 激活             " !_method!
echo                 ____________________________________________
echo:
call :dk_color2 %_White% "                [2] 生成门票              " !_method!
echo                 ____________________________________________
echo:      
echo                 [3] 更改方法
echo:
echo                 [4] %_exitmsg%
echo         ____________________________________________________________
echo: 
call :dk_color2 %_White% "              " %_Green% "请在键盘中输入菜单选项 [1、2、3、4]"
choice /C:1234 /N
set _el=!errorlevel!
if !_el!==4  exit /b
if !_el!==3  (
if !_lock!==0 (
set _lock=1
) else (
set _lock=0
)
cls
echo:
call :dk_color %_Green% " Downlevel 方法："
echo  它以最简单的过程创建用于激活的 downlevelGTkey 门票。
echo:
call :dk_color %_Yellow% " LockBox 方法："
echo  它创建了更好地模拟真实激活的 clientLockboxKey 票证，
echo  但是需要更多步骤，例如，
echo  - 清理 ClipSVC 许可证
echo  - 通过取得所有权来删除易失性和受保护的注册表项
echo  - 系统可能需要重新启动才能成功激活
echo  - Microsoft 帐户和商店应用可能需要在系统中重新登录-重启
echo:
call :dk_color2 %_White% " " %Green% "注意："
echo  Microsoft 接受这两种类型的票，而且这种情况不太可能改变。
echo  如果你不确定要选择哪一个，请选择默认的 Downlevel 方法。
echo:
call :dk_color %_Yellow% " 请按任意键返回……"
pause >nul
goto :dl_menu
)
if !_el!==2  set _gent=1&goto :dl_menu2
if !_el!==1  goto :dl_menu2
goto :dl_menu
)

:dl_menu2

cls
if %_gent%==1 (set _title=title  生成 HWID GenuineTicket.xml) else (set _title=title  HWID 激活)
if %_lock%==0 (%_title% [Downlevel 方法] & mode 102, 30) else (%_title% [Lockbox 方法] & mode 102, 32)

::========================================================================================================================================

if not exist %_psc% if %_lock%==1 (
set _lock=0
set _gent=0
%nceline%
echo 在系统中未安装 Powershell。
echo 它是 HWID 的 Lockbox 方法所必需的组件。
echo 你需要将脚本设置为默认值。
if %_unattended%==0 (
echo:
call :dk_color %_Yellow% "请按任意键返回……"
pause >nul
goto dl_menu
) else (
goto dk_done
)
)

if %_gent%==1 if exist %Systemdrive%\GenuineTicket.xml (
set _gent=0
%eline%
echo 文件“%Systemdrive%\GenuineTicket.xml”已经存在。
if %_unattended%==0 (
echo:
call :dk_color %_Yellow% "请按任意键返回……"
pause >nul
goto dl_menu
) else (
goto dk_done
)
)

::========================================================================================================================================

echo:
echo 正在初始化……

::  检查 WMI 和 sppsvc 错误

set applist=
net start sppsvc /y %nul%
if %winbuild% LSS 22483 set "chkapp=for /f "tokens=2 delims==" %%a in ('"wmic path %slp% where (ApplicationID='%wApp%') get ID /VALUE" 2^>nul')"
if %winbuild% GEQ 22483 set "chkapp=for /f "tokens=2 delims==" %%a in ('%_psc% "(([WMISEARCHER]'SELECT ID FROM %slp% WHERE ApplicationID=''%wApp%''').Get()).ID ^| %% {echo ('ID='+$_)}" 2^>nul')"
%chkapp% do (if defined applist (call set "applist=!applist! %%a") else (call set "applist=%%a"))

if not defined applist (
%eline%
echo 运行 WMI 查询检查失败，请验证这些服务是否正常工作
echo Windows Management Instrumentation [WinMgmt]、Software Protection [sppsvc]
echo:
echo 脚本将尝试启用这些服务。
echo:
if %_unattended%==0 (
call :dk_color %_Yellow% "请按任意键继续执行……"
pause >nul
)
for /f "skip=2 tokens=2*" %%a in ('reg query HKLM\SYSTEM\CurrentControlSet\Services\WinMgmt /v Start 2^>nul') do if /i %%b equ 0x4 (sc config WinMgmt start= auto %nul%)
net start WinMgmt /y %nul%
net stop sppsvc /y %nul%
net start sppsvc /y %nul%
cls
)

::========================================================================================================================================

:: 刷新许可证状态，有助于在 Windows 17134 及以上版本中获取正确的产品名称

call :dk_refresh

:: 检查产品名称

set winos=
for /f "skip=2 tokens=2*" %%a in ('reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v ProductName 2^>nul') do set "winos=%%b"

::========================================================================================================================================

::  检查系统是否永久激活

cls
call :dk_checkperm
if defined _perm if not %_gent%==1 (
echo ___________________________________________________________________________________________
echo:
call :dk_color2 %_White% "     " %Green% "正在检查：%winos% 已永久激活。"
call :dk_color2 %_White% "     " %Gray% "不需要执行激活。"
echo ___________________________________________________________________________________________
if %_unattended%==1 goto dk_done
echo:
choice /C:12 /N /M ">    [1] 激活 [2] %_exitmsg% ："
if errorlevel 2 exit /b
)
cls

::========================================================================================================================================

:: 检查评估版本

set _eval=
set _evalserv=
if exist "%SystemRoot%\Servicing\Packages\Microsoft-Windows-*EvalEdition~*.mum" set _eval=1
if exist "%SystemRoot%\Servicing\Packages\Microsoft-Windows-Server*EvalEdition~*.mum" set _evalserv=1
if exist "%SystemRoot%\Servicing\Packages\Microsoft-Windows-Server*EvalCorEdition~*.mum" set _eval=1 & set _evalserv=1

if defined _eval (
%eline%
echo [%winos% ^| %winbuild%]
if defined _evalserv (
echo Server 评估版本无法激活。请将其转换为完整的 Server 操作系统。
) else (
echo 评估版本无法激活。请安装完整的 Windows 操作系统。
echo 请查看自述文件，了解如何获取完整版本的正版安装介质。
)
goto dk_done
)

::========================================================================================================================================

:: 检查 SKU 数值

set osSKU=
for /f "tokens=3 delims=." %%a in ('reg query "HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions" /v OSProductPfn 2^>nul') do set "osSKU=%%a"

if not defined osSKU (
%eline%
echo SKU 数值未被正确检测到。正在中止……
goto dk_done
)

::========================================================================================================================================

:: 检查是否已安装 HWID 密钥（零售、OEM、MAK）

set _hwidk=
call :dk_channel
for %%A in (Retail,OEM,MAK) do echo: %_channel%| findstr /i "%%A" >nul && set _hwidk=1

::========================================================================================================================================

:: 检查密钥

set key=
set notworking=
set actidnotfound=

if defined applist call :hwiddata attempt1
if not defined key call :hwiddata attempt2

::========================================================================================================================================

if not defined key if not defined _hwidk (
%eline%
echo [%winos% ^| %winbuild% ^| SKU：%osSKU%]
echo 在支持的产品列表中找不到此产品。
%notifytocheckupdate%
echo:
echo 但是，如果你想要在此产品上尝试任何通用的零售、OEM、MAK 密钥，
echo 然后运行此脚本。
goto dk_done
)

if not defined key (
echo:
call :dk_color %Magenta% "====== 信息 ======"
echo:
echo [%winos% ^| %winbuild% ^| SKU：%osSKU%]
echo 在支持的产品列表中找不到此产品。
%notifytocheckupdate%
echo:
echo 由于 %_channel% 密钥已安装，脚本将尝试使用 HWID 激活。
echo:
echo 它可能会也可能不会激活它。
if %_unattended%==0 (
echo:
call :dk_color %_Yellow% "请按任意键继续执行……"
pause >nul
)
cls
)

::========================================================================================================================================

:: 企业版 LTSC 2021 不支持 HWID（在撰写此内容时）。
:: 若要使用 HWID 激活它，脚本将插入 Iot 企业版 LTSC 2021 的产品密钥。需要重新启动才能完全生效。

:: 如果你不想更改它，请注释/删除以下行。

set changekey=
if /i %key%==KCNVH-YKWX8-GJJB9-H9FDT-6F7W2 (
set _chan=OEM:NONSLP
set changekey=1
set notworking=
set key=QPM6N-7J2WJ-P88HH-P3YRH-YY74H
)

::========================================================================================================================================

:: 检查并显示现在不支持 HWID 但将来可能支持的版本的信息

if defined notworking (
echo:
call :dk_color %Magenta% "====== 信息 ======"
echo:
echo [%winos% ^| %winbuild% ^| SKU：%osSKU%]
echo 在撰写此内容时，此产品不支持 HWID 激活。
echo:
echo Now 它可能会也可能不会激活它。
if %_unattended%==0 (
echo:
call :dk_color %_Yellow% "请按任意键继续执行……"
pause >nul
)
cls
)

::========================================================================================================================================

:: 检查 Windows 体系结构

set arch=
for /f "skip=2 tokens=2*" %%a in ('reg query "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment" /v PROCESSOR_ARCHITECTURE') do set arch=%%b

if not defined arch (
%eline%
echo 无法检测到 Windows 体系结构。正在中止……
goto dk_done
)

::========================================================================================================================================

:: 检查文件

set ARM64_file=
if /i "%arch%"=="ARM64" set ARM64_file=arm64_

for %%# in (%ARM64_file%gatherosstate.exe %ARM64_file%slc.dll) do (
if not exist "!_work!\BIN\%%#" (
%eline%
echo 在“BIN”文件夹中缺少“%%#”文件。正在中止……
goto dk_done
)
)

:: 验证 gatherosstate.exe 文件

set _hash=
if /i "%arch%"=="ARM64" (set _orig=7E449AE5549A0D93CF65F4A1BB2AA7D1DC090D2D) else (set _orig=FABB5A0FC1E6A372219711152291339AF36ED0B5)
for /f "skip=1 tokens=* delims=" %%# in ('certutil -hashfile "!_work!\BIN\%ARM64_file%gatherosstate.exe" SHA1^|findstr /i /v CertUtil') do set "_hash=%%#"
set "_hash=%_hash: =%"

if /i not "%_hash%"=="%_orig%" (
%eline%
echo 发现 %ARM64_file%gatherosstate.exe 的 SHA1 哈希不匹配。
echo:
echo 期望值：%_orig%
echo 检测值：%_hash%
goto dk_done
)

::========================================================================================================================================

:: 检查 Internet 连接

cls
echo:
echo 正在检查操作系统信息                    [%winos% ^| %winbuild% ^| %arch%]

if not %_gent%==1 (
set _intcon=
ping -n 1 dns.msftncsi.com 2>nul | find "131.107.255.255" 1>nul || ping -n 1 www.microsoft.com 1>nul
if !errorlevel!==0 ( 
set _intcon=1
echo 正在检查 Internet 连接                  [已连接]
) else (
call :dk_color %Red% "检查 Internet 连接                      [未连接]"
)
)

::========================================================================================================================================

echo:
set "_serv=ClipSVC wlidsvc sppsvc LicenseManager Winmgmt wuauserv"

::  客户端许可服务（ClipSVC）
::  Microsoft 帐户登录助手
::  软件保护
::  Windows License Manager Service
::  Windows Management Instrumentation
::  Windows 更新

echo 正在检查服务                            [%_serv%]

::  检查已禁用的服务

set serv_ste=
for %%# in (%_serv%) do (
set serv_dis=
reg query HKLM\SYSTEM\CurrentControlSet\Services\%%# /v Start %nul% || set serv_dis=1
for /f "skip=2 tokens=2*" %%a in ('reg query HKLM\SYSTEM\CurrentControlSet\Services\%%# /v Start 2^>nul') do if /i %%b equ 0x4 set serv_dis=1
if defined serv_dis (if defined serv_ste (set "serv_ste=!serv_ste! %%#") else (set "serv_ste=%%#"))
)

::  更改已禁用的服务启动类型为自动

set serv_csts=
set serv_cste=

if defined serv_ste (
for %%# in (%serv_ste%) do (
sc config %%# start= auto %nul% && (
if defined serv_csts (set "serv_csts=!serv_csts! %%#") else (set "serv_csts=%%#")
) || (
if defined serv_cste (set "serv_cste=!serv_cste! %%#") else (set "serv_cste=%%#")
)
)
)

if defined serv_csts echo 正在启用禁用的服务                      [成功] [%serv_csts%]
if defined serv_cste call :dk_color %Red% "启用禁用的服务                          [失败] [%serv_cste%]"

::========================================================================================================================================

::  检查服务是否能够运行

set serv_e=
for %%# in (%_serv%) do (
sc query %%# | find /i "RUNNING" %nul% || net start %%# /y %nul%
sc query %%# | find /i "RUNNING" %nul% || sc start %%# %nul%
sc query %%# | find /i "RUNNING" %nul% || if defined serv_e (set "serv_e=!serv_e! %%#") else (set "serv_e=%%#")
)

if not defined serv_e (
echo 正在启动服务                            [成功]
) else (
call :dk_color %Red% "启动服务                                [失败] [%serv_e%]"
echo %serv_e% | find /i "wuauserv" %nul% && (
call :dk_color %Magenta% "Windows 更新服务 [wuauserv] 很可能已被工具阻止，请识别并取消阻止。"
)
)

if not defined applist (
call :dk_color %Red% "检查 WMI Query                          [失败]"
) else (
echo 正在检查 WMI Query                      [成功]
)

::========================================================================================================================================

::  安装密钥

echo:
if defined changekey call :dk_color %Magenta% "Windows 10 Iot Enterprise LTSC 2021 Product Key Is Selected For HWID 激活"&echo:

set _partial=
if defined key set _ipartial=%key:~-5%

if %winbuild% LSS 22483 for /f "tokens=2 delims==" %%# in ('wmic path %slp% where "ApplicationID='%wApp%' and PartialProductKey<>null" Get PartialProductKey /value 2^>nul') do set "_partial=%%#"
if %winbuild% GEQ 22483 for /f "tokens=2 delims==" %%# in ('%_psc% "(([WMISEARCHER]'SELECT PartialProductKey FROM %slp% WHERE ApplicationID=''%wApp%'' AND PartialProductKey IS NOT NULL').Get()).PartialProductKey | %% {echo ('PartialProductKey='+$_)}" 2^>nul') do set "_partial=%%#"

if defined key if /i "%_partial%"=="%_ipartial%" (
echo 正在检查已安装的产品密钥                [%key%] [%_channel%]
)

if not defined key (
echo 正在检查已安装的产品密钥                [部分产品密钥 - %_partial%] [%_channel%]
)

set _channel=
if defined key if /i not "%_partial%"=="%_ipartial%" (
if %winbuild% LSS 22483 wmic path %sls% where __CLASS='%sls%' call InstallProductKey ProductKey="%key%" %nul%
if %winbuild% GEQ 22483 %_psc% "(([WMISEARCHER]'SELECT Version FROM %sls%').Get()).InstallProductKey('%key%')" %nul%
if not !errorlevel!==0 cscript //nologo %windir%\system32\slmgr.vbs /ipk %key% %nul%

if !errorlevel!==0 (
call :dk_refresh
echo 正在安装常规产品密钥                    [%key%] [%_chan%] [成功]
) else (
call :dk_color %Red% "安装常规产品密钥                        [%key%] [%_chan%] [失败]%actidnotfound%"
)
)

::========================================================================================================================================

::  将文件复制到 temp 以生成票证，以避免在路径包含特殊字符或非英文名称的情况下可能出现的问题

echo:
set "temp_=%SystemRoot%\Temp\_Temp"
if exist "%temp_%\.*" rmdir /s /q "%temp_%\" %nul%
md "%temp_%\" %nul%

pushd "!_work!\BIN\"
copy /y /b "%ARM64_file%gatherosstate.exe" "%temp_%\gatherosstate.exe" %nul%
copy /y /b "%ARM64_file%slc.dll" "%temp_%\slc.dll" %nul%
popd

set copyf=
if not exist "%temp_%\gatherosstate.exe" set copyf=1
if not exist "%temp_%\slc.dll" set copyf=1

if defined copyf (
call :dk_color %Red% "将所需文件复制到临时文件                [%temp_%] [失败]"
goto :dl_final
) else (
echo 正在将所需文件复制到临时文件            [%temp_%] [成功]
)

::========================================================================================================================================

::  根据系统使用 slc.dll 修改 gatherosstate 中的 Pfn 值，这样一个 gatherosstate 可以在所有版本中使用

pushd "%temp_%\"
rundll32 "%temp_%\slc.dll",PatchGatherosstate %nul%
popd
if not exist "%temp_%\gatherosstatemodified.exe" (
call :dk_color %Red% "创建修改后的 Gatherosstate              [失败]正在中止……"
call :dk_color %Magenta% "最有可能的原因是防病毒软件阻止了此进程，请禁用它和/或创建适当的排除项"
goto :dl_final
) else (
echo 正在创建修改后的 Gatherosstate          [成功]
)

::========================================================================================================================================

::  清理 ClipSVC 许可证
::  仅当用户在此脚本中手动设置生成票证的 Lockbox 方法时，此代码才会运行。

if %_lock%==1 (
for %%# in (ClipSVC) do (
sc query %%# | find /i "STOPPED" %nul% || net stop %%# /y %nul%
sc query %%# | find /i "STOPPED" %nul% || sc stop %%# %nul%
)

rundll32 clipc.dll,ClipCleanUpState

if exist "%ProgramData%\Microsoft\Windows\ClipSVC\*.dat" del /f /q "%ProgramData%\Microsoft\Windows\ClipSVC\*.dat" %nul%

if exist "%ProgramData%\Microsoft\Windows\ClipSVC\tokens.dat" (
call :dk_color %Red% "清理 ClipSVC 许可证               [失败]"
) else (
echo 清理 ClipSVC 许可证               [成功]
)
)

::========================================================================================================================================

::  下面的注册表项（Volatile 和 Protected）是在 ClipSVC 许可证清理命令后创建的，系统重启后会
::  自动删除。需要删除才能激活系统而无需重启。

::  仅当用户在此脚本中手动设置生成票证的 Lockbox 方法时，此代码才会运行。

set "RegKey=HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ClipSVC\Volatile\PersistedSystemState"

if %_lock%==1 (
call :regown "%RegKey%" %nul% 
reg delete "%RegKey%" /f %nul% 

reg query "%RegKey%" %nul% && (
call :dk_color %Red% "删除易失性注册表                        [失败]"
call :dk_color %Magenta% "请重新启动系统，将会自动删除此注册表项"
) || (
echo 正在删除易失性注册表                    [成功]
)
)

::========================================================================================================================================

::  多次尝试生成票证，因为在某些情况下，一次尝试是不够的.

echo:
set "_noxml=if not exist "%temp_%\GenuineTicket.xml""

start /wait "" "%temp_%/gatherosstatemodified.exe" %nul%
%_noxml% timeout /t 3 %nul%
%_noxml% net stop sppsvc /y %nul%
%_noxml% call "%temp_%/gatherosstatemodified.exe" %nul%
%_noxml% timeout /t 3 %nul%
%_noxml% "%temp_%/gatherosstatemodified.exe" %nul%
%_noxml% timeout /t 3 %nul%

::  使用以下命令刷新 ClipSVC（清理后需要），与生成票证无关

if %_lock%==1 (
for %%# in (wlidsvc LicenseManager sppsvc) do (net stop %%# /y %nul% & net start %%# /y %nul%)
call :dk_refresh
)

%_noxml% (
call :dk_color %Red% "生成 GenuineTicket.xml                  [失败]正在中止……"
goto :dl_final
)

if %_lock%==1 (
find /i "clientLockboxKey" "%temp_%\GenuineTicket.xml" >nul && (
echo 正在生成 GenuineTicket.xml              [成功] [clientLockboxKey 票证]
) || (
call :dk_color %Red% "生成 GenuineTicket.xml                  [失败] [downlevelGTkey 票证已创建]正在中止……"
call :dk_color %Magenta% "Try again / Restart system"
goto :dl_final
)
) else (
echo 正在生成 GenuineTicket.xml              [成功]
)

::========================================================================================================================================

::  将 GenuineTicket.xml 复制到 C 盘根目录，如果脚本中使用了票证生成选项，则退出

if %_gent%==1 (
echo:
copy /y /b "%temp_%\GenuineTicket.xml" "%Systemdrive%\GenuineTicket.xml" %nul%
if not exist "%Systemdrive%\GenuineTicket.xml" (
call :dk_color %Red% "将 GenuineTicket.xml 复制到 %Systemdrive%\         [失败]"
) else (
call :dk_color %Green% "正在将 GenuineTicket.xml 复制到 %Systemdrive%\     [成功]"
)
goto :dl_final
)

::========================================================================================================================================

::  通过 clipup -v -o -altto <票证路径> 方法来申请票证，以避免用户名有空格/特殊字符/非英文名称时的某些问题
::  的某些问题

set "tdir=%ProgramData%\Microsoft\Windows\ClipSVC\GenuineTicket"
if exist "%tdir%\*.xml" del /f /q "%tdir%\*.xml" %nul%
copy /y /b "%temp_%\GenuineTicket.xml" "%tdir%\GenuineTicket.xml" %nul%

if not exist "%tdir%\GenuineTicket.xml" (
call :dk_color %Red% "无法将票证复制到 [%ProgramData%\Microsoft\Windows\ClipSVC\GenuineTicket\]"
goto :dl_final
)

set "_xmlexist=if exist "%tdir%\GenuineTicket.xml""

net stop ClipSVC /y %nul%
net start ClipSVC /y %nul%
%_xmlexist% timeout /t 2 %nul%
%_xmlexist% timeout /t 2 %nul%

%_xmlexist% %_psc% Restart-Service ClipSVC %nul%
%_xmlexist% timeout /t 2 %nul%
%_xmlexist% timeout /t 2 %nul%

set fallback_=
%_xmlexist% (
set fallback_=1
%nul% clipup -v -o
%_xmlexist% timeout /t 2 %nul%
)

%_xmlexist% (
call :dk_color %Red% "安装 GenuineTicket.xml                  [失败]正在中止……"
if exist "%tdir%\*.xml" del /f /q "%tdir%\*.xml" %nul%
goto :dl_final
) else (
if defined fallback_ (call :dk_color %Red% "正在安装 GenuineTicket.xml              [成功] [后备方法：clipup -v -o]"
) else (echo 正在安装 GenuineTicket.xml              [成功]
)
)

::==========================================================================================================================================

if defined changekey (
set winos=
for /f "skip=2 tokens=2*" %%a in ('reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v ProductName 2^>nul') do set "winos=%%b"
)

echo:
echo 正在激活……
echo:

call :dk_act
call :dk_checkperm
if defined _perm (
call :dk_color %Green% "%winos% 已永久激活。"
goto :dl_final
)

::  刷新一些服务和许可证状态

if %_lock%==1 set _retry=1
if defined _intcon set _retry=1

if defined _retry (
for %%# in (wlidsvc LicenseManager sppsvc) do (net stop %%# /y %nul% & net start %%# /y %nul%)
call :dk_refresh
call :dk_act
cscript //nologo %windir%\system32\slmgr.vbs /ato %nul%
)

::  使用 wmi 查询检查许可证状态原因，激活命令错误级别在 Windows 10 的旧版本中会给出不正确的结果

set _status=0
if %winbuild% LSS 22483 for /f "tokens=2 delims==" %%a in ('"wmic path %slp% where (ApplicationID='%wApp%' and PartialProductKey is not null) get LicenseStatusReason /VALUE" 2^>nul') do set "_status=%%a"
if %winbuild% GEQ 22483 for /f "tokens=2 delims==" %%a in ('%_psc% "(([WMISEARCHER]'SELECT LicenseStatusReason FROM %slp% WHERE ApplicationID=''%wApp%'' AND PartialProductKey IS NOT NULL').Get()).LicenseStatusReason | %% {echo ('LicenseStatusReason='+$_)}" 2^>nul') do set "_status=%%a"
cmd /c exit /b %_status%

if %_status% NEQ 0 set "error_code=[错误代码：0x!=ExitCode!]"

call :dk_checkperm

if defined _perm (
call :dk_color %Green% "%winos% 已永久激活。"
) else (
call :dk_color %Red% "激活失败 %error_code%"
call :dk_color %Magenta% "请再试一次 / 重新启动系统 / 查看自述文件中的疑难解答步骤"
)

::========================================================================================================================================

:dl_final

echo:
if exist "%temp_%\.*" rmdir /s /q "%temp_%\" %nul%
if exist "%temp_%\" (
call :dk_color %Red% "清理临时文件                            [失败]"
) else (
echo 正在清理临时文件                        [成功]
)

::  将服务启动类型回滚为禁用

set serv_rsts=
set serv_rste=

if defined serv_csts (
for %%# in (%serv_csts%) do (
sc config %%# start= disabled %nul% && (
if defined serv_rsts (set "serv_rsts=!serv_rsts! %%#") else (set "serv_rsts=%%#")
) || (
if defined serv_rste (set "serv_cste=!serv_rste! %%#") else (set "serv_rste=%%#")
)
)
)

if defined serv_rsts echo 正在将服务恢复为已禁用                  [成功] [%serv_rsts%]
if defined serv_rste call :dk_color %Red% "将服务恢复为已禁用                      [失败] [%serv_rste%]"

goto :dk_done

::========================================================================================================================================

::  递归设置注册表所有权和权限的简洁而平均的片段
::  由 @AveYo 由 @BAU 编写
::  pastebin.com/XTPt0JSC

::  由 @abbodi1406 修改，使其在仅安装 x86 版本的 PowerShell 的 ARM64 Windows 10（版本早于 21277）中工作。

::  仅当用户在此脚本中手动设置密码箱方法时，此代码才会运行。

:regown

%_psc% $A='%~1','%~2','%~3','%~4','%~5','%~6';iex(([io.file]::ReadAllText('!_batp!')-split':Own1\:.*')[1])&exit/b:Own1:
$D1=[uri].module.gettype('System.Diagnostics.Process')."GetM`ethods"(42) |where {$_.Name -eq 'SetPrivilege'} #`:no-ev-warn
'SeSecurityPrivilege','SeTakeOwnershipPrivilege','SeBackupPrivilege','SeRestorePrivilege'|foreach {$D1.Invoke($null, @("$_",2))}
$path=$A[0]; $rk=$path-split'\\',2; switch -regex ($rk[0]){'[mM]'{$hv=2147483650};'[uU]'{$hv=2147483649};default{$hv=2147483648};}
$HK=[Microsoft.Win32.RegistryKey]::OpenBaseKey($hv, 256); $s=$A[1]; $sps=[Security.Principal.SecurityIdentifier]
$u=($A[2],'S-1-5-32-544')[!$A[2]];$o=($A[3],$u)[!$A[3]];$w=$u,$o |% {new-object $sps($_)}; $old=!$A[3];$own=!$old; $y=$s-eq'all'
$rar=new-object Security.AccessControl.RegistryAccessRule( $w[0], ($A[5],'FullControl')[!$A[5]], 1, 0, ($A[4],'Allow')[!$A[4]] )
$x=$s-eq'none';function Own1($k){$t=$HK.OpenSubKey($k,2,'TakeOwnership');if($t){0,4|%{try{$o=$t.GetAccessControl($_)}catch{$old=0}
};if($old){$own=1;$w[1]=$o.GetOwner($sps)};$o.SetOwner($w[0]);$t.SetAccessControl($o); $c=$HK.OpenSubKey($k,2,'ChangePermissions')
$p=$c.GetAccessControl(2);if($y){$p.SetAccessRuleProtection(1,1)};$p.ResetAccessRule($rar);if($x){$p.RemoveAccessRuleAll($rar)}
$c.SetAccessControl($p);if($own){$o.SetOwner($w[1]);$t.SetAccessControl($o)};if($s){$($subkeys=$HK.OpenSubKey($k).GetSubKeyNames()) 2>$null;
foreach($n in $subkeys){Own1 "$k\$n"}}}};Own1 $rk[1];if($env:VO){get-acl Registry::$path|fl} #:Own1: lean & mean snippet by AveYo

::========================================================================================================================================

::  检查 Windows 永久激活状态

:dk_checkperm

if %winbuild% LSS 22483 wmic path %slp% where (LicenseStatus='1' and GracePeriodRemaining='0' and PartialProductKey is not NULL) get Name /value 2>nul | findstr /i "Windows" 1>nul && set _perm=1||set _perm=
if %winbuild% GEQ 22483 %_psc% "(([WMISEARCHER]'SELECT Name FROM %slp% WHERE LicenseStatus=1 AND GracePeriodRemaining=0 AND PartialProductKey IS NOT NULL').Get()).Name | %% {echo ('Name='+$_)}" 2>nul | findstr /i "Windows" 1>nul && set _perm=1||set _perm=
exit /b

::  刷新授权状态

:dk_refresh

if %winbuild% LSS 22483 wmic path %sls% where __CLASS='%sls%' call RefreshLicenseStatus %nul%
if %winbuild% GEQ 22483 %_psc% "$null=(([WMICLASS]'%sls%').GetInstances()).RefreshLicenseStatus()" %nul%
exit /b

::  检查 Windows 已安装密钥的通道

:dk_channel

if %winbuild% LSS 22483 for /f "tokens=2 delims==" %%# in ('wmic path %slp% where "ApplicationID='%wApp%' and PartialProductKey<>null" Get ProductKeyChannel /value 2^>nul') do set "_channel=%%#"
if %winbuild% GEQ 22483 for /f "tokens=2 delims==" %%# in ('%_psc% "(([WMISEARCHER]'SELECT ProductKeyChannel FROM %slp% WHERE ApplicationID=''%wApp%'' AND PartialProductKey IS NOT NULL').Get()).ProductKeyChannel | %% {echo ('ProductKeyChannel='+$_)}" 2^>nul') do set "_channel=%%#"
exit /b

::  激活命令

:dk_act

if %winbuild% LSS 22483 wmic path %slp% where "ApplicationID='%wApp%' and PartialProductKey<>null" call Activate %nul%
if %winbuild% GEQ 22483 %_psc% "(([WMISEARCHER]'SELECT ID FROM %slp% WHERE ApplicationID=''%wApp%'' AND PartialProductKey IS NOT NULL').Get()).Activate()" %nul%
exit /b

::========================================================================================================================================

:dk_color

if %_NCS% EQU 1 (
echo %esc%[%~1%~2%esc%[0m
) else (
if not exist %_psc% (echo %~3) else (%_psc% write-host -back '%1' -fore '%2' '%3')
)
exit /b

:dk_color2

if %_NCS% EQU 1 (
echo %esc%[%~1%~2%esc%[%~3%~4%esc%[0m
) else (
if not exist %_psc% (echo %~3%~6) else (%_psc% write-host -back '%1' -fore '%2' '%3' -NoNewline; write-host -back '%4' -fore '%5' '%6')
)
exit /b

::========================================================================================================================================

:dk_done

echo:
if %_unattended%==1 timeout /t 2 & exit /b
call :dk_color %_Yellow% "请按任意键%_exitmsg%……"
pause >nul
exit /b

::========================================================================================================================================

:: 第 1 列 = 激活 ID
:: 第 2 列 = 通用零售/OEM/MAK 密钥
:: 第 3 列 = SKU ID
:: 第 4 列 = 1 = 激活无效（在撰写本文时），0 = 激活有效
:: 第 5 列 = 密钥类型
:: 第 6 列 = WMI 版本 ID
:: 第 7 列 = 版本名称，以防止相同的版本 ID 用于具有不同密钥的不同操作系统版本
:: 分隔符 = _

::  密钥选项按以下顺序排列。Retail > OEM:NONSLP > OEM:DM > Volume:MAK

:hwiddata

for %%# in (
8b351c9c-f398-4515-9900-09df49427262_XGVPP-NMH47-7TTHJ-W3FW7-8HV2C___4_0_OEM:NONSLP_Enterprise
23505d51-32d6-41f0-8ca7-e78ad0f16e71_D6RD9-D4N8T-RT9QX-YW6YT-FCWWJ__11_1_____Retail_Starter
c83cef07-6b72-4bbc-a28f-a00386872839_3V6Q6-NQXCX-V8YXR-9QCYV-QPFCT__27_0_Volume:MAK_EnterpriseN
211b80cc-7f64-482c-89e9-4ba21ff827ad_3NFXW-2T27M-2BDW6-4GHRV-68XRX__47_1_____Retail_StarterN
4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c_VK7JG-NPHTM-C97JM-9MPGT-3V66T__48_0_____Retail_Professional
9fbaf5d6-4d83-4422-870d-fdda6e5858aa_2B87N-8KFHP-DKV6R-Y2C8J-PKCKT__49_0_____Retail_ProfessionalN
f742e4ff-909d-4fe9-aacb-3231d24a0c58_4CPRK-NM3K3-X6XXQ-RXX86-WXCHW__98_0_____Retail_CoreN
1d1bac85-7365-4fea-949a-96978ec91ae0_N2434-X9D7W-8PF6X-8DV9T-8TYMD__99_0_____Retail_CoreCountrySpecific
3ae2cc14-ab2d-41f4-972f-5e20142771dc_BT79Q-G7N6G-PGBYW-4YWX6-6F4BT_100_0_____Retail_CoreSingleLanguage
2b1f36bb-c1cd-4306-bf5c-a0367c2d97d8_YTMG3-N6DKC-DKB77-7M9GH-8HVX7_101_0_____Retail_Core
2a6137f3-75c0-4f26-8e3e-d83d802865a4_XKCNC-J26Q9-KFHD2-FKTHY-KD72Y_119_0_OEM:NONSLP_PPIPro
e558417a-5123-4f6f-91e7-385c1c7ca9d4_YNMGQ-8RYV3-4PGQ3-C8XTP-7CFBY_121_0_____Retail_Education
c5198a66-e435-4432-89cf-ec777c9d0352_84NGF-MHBT6-FXBX8-QWJK7-DRR8H_122_0_____Retail_EducationN
cce9d2de-98ee-4ce2-8113-222620c64a27_KCNVH-YKWX8-GJJB9-H9FDT-6F7W2_125_1_Volume:MAK_EnterpriseS_2021
d06934ee-5448-4fd1-964a-cd077618aa06_43TBQ-NH92J-XKTM7-KT3KK-P39PB_125_0_OEM:NONSLP_EnterpriseS_2019
706e0cfd-23f4-43bb-a9af-1a492b9f1302_NK96Y-D9CD8-W44CQ-R8YTK-DYJWX_125_0_OEM:NONSLP_EnterpriseS_2016
faa57748-75c8-40a2-b851-71ce92aa8b45_FWN7H-PF93Q-4GGP8-M8RF3-MDWWW_125_0_OEM:NONSLP_EnterpriseS_2015
2c060131-0e43-4e01-adc1-cf5ad1100da8_RQFNW-9TPM3-JQ73T-QV4VQ-DV9PT_126_1_Volume:MAK_EnterpriseSN_2021
e8f74caa-03fb-4839-8bcc-2e442b317e53_M33WV-NHY3C-R7FPM-BQGPT-239PG_126_1_Volume:MAK_EnterpriseSN_2019
3d1022d8-969f-4222-b54b-327f5a5af4c9_2DBW3-N2PJG-MVHW3-G7TDK-9HKR4_126_0_Volume:MAK_EnterpriseSN_2016
60c243e1-f90b-4a1b-ba89-387294948fb6_NTX6B-BRYC2-K6786-F6MVQ-M7V2X_126_0_Volume:MAK_EnterpriseSN_2015
a48938aa-62fa-4966-9d44-9f04da3f72f2_G3KNM-CHG6T-R36X3-9QDG6-8M8K9_138_1_____Retail_ProfessionalSingleLanguage
f7af7d09-40e4-419c-a49b-eae366689ebd_HNGCC-Y38KG-QVK8D-WMWRK-X86VK_139_1_____Retail_ProfessionalCountrySpecific
eb6d346f-1c60-4643-b960-40ec31596c45_DXG7C-N36C4-C4HTG-X4T3X-2YV77_161_0_____Retail_ProfessionalWorkstation
89e87510-ba92-45f6-8329-3afa905e3e83_WYPNQ-8C467-V2W6J-TX4WX-WT2RQ_162_0_____Retail_ProfessionalWorkstationN
62f0c100-9c53-4e02-b886-a3528ddfe7f6_8PTT6-RNW4C-6V7J2-C2D3X-MHBPB_164_0_____Retail_ProfessionalEducation
13a38698-4a49-4b9e-8e83-98fe51110953_GJTYN-HDMQY-FRR76-HVGC7-QPF8P_165_0_____Retail_ProfessionalEducationN
1ca0bfa8-d96b-4815-a732-7756f30c29e2_FV469-WGNG4-YQP66-2B2HY-KD8YX_171_1_OEM:NONSLP_EnterpriseG
8d6f6ffe-0c30-40ec-9db2-aad7b23bb6e3_FW7NV-4T673-HF4VX-9X4MM-B4H4T_172_1_OEM:NONSLP_EnterpriseGN
df96023b-dcd9-4be2-afa0-c6c871159ebe_NJCF7-PW8QT-3324D-688JX-2YV66_175_0_____Retail_ServerRdsh
d4ef7282-3d2c-4cf0-9976-8854e64a8d1e_V3WVW-N2PV2-CGWC3-34QGF-VMJ2C_178_0_____Retail_Cloud
af5c9381-9240-417d-8d35-eb40cd03e484_NH9J3-68WK7-6FB93-4K3DF-DJ4F6_179_0_____Retail_CloudN
c7051f63-3a76-4992-bce5-731ec0b1e825_2HN6V-HGTM8-6C97C-RK67V-JQPFD_183_1_____Retail_CloudE
8ab9bdd1-1f67-4997-82d9-8878520837d9_XQQYW-NFFMW-XJPBH-K8732-CKFFD_188_0_____OEM:DM_IoTEnterprise
ed655016-a9e8-4434-95d9-4345352c2552_QPM6N-7J2WJ-P88HH-P3YRH-YY74H_191_0_OEM:NONSLP_IoTEnterpriseS
d4bdc678-0a4b-4a32-a5b3-aaa24c3b0f24_K9VKN-3BGWV-Y624W-MCRMQ-BHDCD_202_0_____Retail_CloudEditionN
92fb8726-92a8-4ffc-94ce-f82e07444653_KY7PN-VR6RX-83W6Y-6DDYQ-T6R4W_203_0_____Retail_CloudEdition
) do (
for /f "tokens=1-7 delims=_" %%A in ("%%#") do if %osSKU%==%%C (

if %1==attempt1 if not defined key echo "!applist!" | find /i "%%A" 1>nul && (set "key=%%B" & set "_chan=%%E" & if %%D==1 set notworking=1)

if %1==attempt2 if not defined key (
set "actidnotfound= [不匹配的 Act-ID]"
set 7th=%%G
if not defined 7th (
set "key=%%B" & set "_chan=%%E" & if %%D==1 set notworking=1
) else (
echo "%winos%" | find "%%G" 1>nul && (set "key=%%B" & set "_chan=%%E" & if %%D==1 set notworking=1)
)
)
)
)
exit /b

::========================================================================================================================================