@echo off
title [InstanceCheats.com] Fix E2001 / E2002 / E2003 / E2004 / C1104
color 0C
echo.
echo  ============================================================
echo   InstanceCheats.com Fix - Error Codes E2001-E2004 / C1104
echo   System Config ^& Windows Security Fix
echo  ============================================================
echo.

net session >nul 2>&1
if %errorlevel% neq 0 (
    echo  [ERROR] This script requires Administrator privileges.
    pause
    exit /b 1
)

echo  [1/8] Disabling Fast Boot...
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power" /v HiberbootEnabled /t REG_DWORD /d 0 /f >nul 2>&1
powercfg /h off >nul 2>&1
echo       [OK]

echo  [2/8] Disabling VBS...
reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v EnableVirtualizationBasedSecurity /t REG_DWORD /d 0 /f >nul 2>&1
reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v RequirePlatformSecurityFeatures /t REG_DWORD /d 0 /f >nul 2>&1
echo       [OK]

echo  [3/8] Disabling Memory Integrity (HVCI)...
reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /v Enabled /t REG_DWORD /d 0 /f >nul 2>&1
reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\KernelShadowStacks" /v Enabled /t REG_DWORD /d 0 /f >nul 2>&1
echo       [OK]

echo  [4/8] Disabling Windows Defender policies...
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 1 /f >nul 2>&1
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v DisableRealtimeMonitoring /t REG_DWORD /d 1 /f >nul 2>&1
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v DisableBehaviorMonitoring /t REG_DWORD /d 1 /f >nul 2>&1
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v DisableOnAccessProtection /t REG_DWORD /d 1 /f >nul 2>&1
echo       [OK]

echo  [5/8] Disabling Vulnerable Driver Blocklist...
reg add "HKLM\SYSTEM\CurrentControlSet\Control\CI\Config" /v VulnerableDriverBlocklistEnable /t REG_DWORD /d 0 /f >nul 2>&1
echo       [OK]

echo  [6/8] Disabling Hyper-V...
bcdedit /set hypervisorlaunchtype off >nul 2>&1
dism /Online /Disable-Feature /FeatureName:Microsoft-Hyper-V-All /NoRestart >nul 2>&1
dism /Online /Disable-Feature /FeatureName:HypervisorPlatform /NoRestart >nul 2>&1
dism /Online /Disable-Feature /FeatureName:VirtualMachinePlatform /NoRestart >nul 2>&1
echo       [OK]

echo  [7/8] Flushing DNS and resetting Winsock...
ipconfig /flushdns >nul 2>&1
netsh winsock reset >nul 2>&1
netsh int ip reset >nul 2>&1
echo       [OK]

echo  [8/8] Adding C:\ to Defender exclusions...
powershell -Command "Add-MpPreference -ExclusionPath 'C:\' -ErrorAction SilentlyContinue" >nul 2>&1
echo       [OK]

echo.
echo  ============================================================
echo   [OK] All fixes for E2001-E2004 / C1104 applied.
echo   A REBOOT is required. Restart your PC now.
echo  ============================================================
echo.
choice /C YN /M "  Reboot now? (Y/N)"
if %errorlevel%==1 shutdown /r /t 5 /c "Rebooting to apply E-code fixes..."