@echo off

rem Ãö³¬Hypervisor
bcdedit /set hypervisorlaunchtype off > nul 2>&1
if %errorlevel% equ 0 (
    echo Ãö³¬Hypervisor ¦¨¥\
) else (
    echo Ãö³¬Hypervisor ¥¢±Ñ
)

rem Ãö³¬Windows DefenderªºDeviceGuard¬ÛÃö³]©w
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows Defender\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /v Enabled /t REG_DWORD /d 0 /f > nul 2>&1
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows Defender\DeviceGuard\Scenarios\VulnerableDriverBlockList" /v Enabled /t REG_DWORD /d 0 /f > nul 2>&1
reg add "HKLM\SYSTEM\CurrentControlSet\Control\CI\Config" /v VulnerableDriverBlocklistEnable /t REG_DWORD /d 0 /f > nul 2>&1
if %errorlevel% equ 0 (
    echo Ãö³¬Windows DefenderªºDeviceGuard¬ÛÃö³]©w ¦¨¥\
) else (
    echo Ãö³¬Windows DefenderªºDeviceGuard¬ÛÃö³]©w ¥¢±Ñ
)

rem Ãö³¬DeviceGuardªºHypervisorEnforcedCodeIntegrity
reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /v "Enabled" /t REG_DWORD /d 0 /f > nul 2>&1
if %errorlevel% equ 0 (
    echo Ãö³¬DeviceGuardªºHypervisorEnforcedCodeIntegrity ¦¨¥\
) else (
    echo Ãö³¬DeviceGuardªºHypervisorEnforcedCodeIntegrity ¥¢±Ñ
)

rem ·s¼WWindows DefenderªºDisableAntiSpyware³]©w
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware" /d 1 /t REG_DWORD /f > nul 2>&1
if %errorlevel% equ 0 (
    echo ·s¼WWindows DefenderªºDisableAntiSpyware³]©w ¦¨¥\
) else (
    echo ·s¼WWindows DefenderªºDisableAntiSpyware³]©w ¥¢±Ñ
)

pause