@echo off
chcp 936 >nul 2>&1

:: 自动管理员后台提权
fltmc >nul 2>&1 || (
    powershell -WindowStyle Hidden -Command "Start-Process '%~f0' -Verb RunAs" >nul 2>&1 & exit
)

:: 关闭 Hyper-V 相关功能
DISM.exe /Online /Disable-Feature:Containers-DisposableClientVM /NoRestart >nul 2>&1
DISM.exe /Online /Disable-Feature:VirtualMachinePlatform /NoRestart >nul 2>&1
DISM.exe /Online /Disable-Feature:Microsoft-Hyper-V-Management-Clients /NoRestart >nul 2>&1
DISM.exe /Online /Disable-Feature:Microsoft-Hyper-V-Services /NoRestart >nul 2>&1
DISM.exe /Online /Disable-Feature:Microsoft-Hyper-V-Hypervisor /NoRestart >nul 2>&1
DISM.exe /Online /Disable-Feature:Microsoft-Hyper-V-Management-PowerShell /NoRestart >nul 2>&1
DISM.exe /Online /Disable-Feature:Microsoft-Hyper-V-Tools-All /NoRestart >nul 2>&1
DISM.exe /Online /Disable-Feature:Microsoft-Hyper-V /NoRestart >nul 2>&1
DISM.exe /Online /Disable-Feature:HypervisorPlatform /NoRestart >nul 2>&1
DISM.exe /Online /Disable-Feature:Microsoft-Hyper-V-Online /NoRestart >nul 2>&1
DISM.exe /Online /Disable-Feature:IsolatedUserMode /NoRestart >nul 2>&1

:: 关闭 VBS 与设备防护
reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /f /v "EnableVirtualizationBasedSecurity" /t REG_DWORD /d 0 >nul 2>&1
reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /f /v "RequirePlatformSecurityFeatures" /t REG_DWORD /d 0 >nul 2>&1
reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /f /v "SecureBiometrics" /t REG_DWORD /d 0 >nul 2>&1
reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /f /v "WindowsHello" /t REG_DWORD /d 0 >nul 2>&1
reg add "HKLM\SYSTEM\CurrentControlSet\Services\HvHost" /f /v "Start" /t REG_DWORD /d 4 >nul 2>&1

:: 关闭内存完整性（核心隔离）
reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /f /v "Enabled" /t REG_DWORD /d 0 >nul 2>&1
reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /f /v "EnabledBootId" /t REG_DWORD /d 0 >nul 2>&1
reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /f /v "WasEnabledBy" /t REG_DWORD /d 0 >nul 2>&1

:: 关闭 LSA 保护
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /f /v "RunAsPPL" /t REG_DWORD /d 0 >nul 2>&1

:: 关闭 hypervisor
bcdedit /set hypervisorlaunchtype off >nul 2>&1

:: 中文正常弹窗（GBK编码，无乱码）
mshta vbscript:msgbox("Hyper-V、VBS、内存完整性已关闭，重启电脑生效",64,"执行完成")(window.close)

exit