Obs/bin/ObsDep/content/Powershell/Roles/Common/VhdWim.psm1

using module ..\Common\MountedImage.psm1
Import-Module -Name "$PSScriptRoot\..\..\Common\Helpers.psm1"
Import-Module -Name "$PSScriptRoot\..\..\Common\NetworkHelpers.psm1"
Import-Module -Name "$PSScriptRoot\..\..\Common\StorageHelpers.psm1"
Import-Module -Name "$PSScriptRoot\RoleHelpers.psm1"
$azureStackNugetPath = Get-ASArtifactPath -NugetName "Microsoft.AzureStack.Role.SBE"
Import-Module (Join-Path $azureStackNugetPath "content\CloudDeployment\Roles\OEM\OEM.psm1") -DisableNameChecking

function Get-MountedDisk
{
    Get-Disk | Where-Object Manufacturer -like 'Msft*' | Where-Object Model -like 'Virtual Disk*'
}

function Dismount-MountedDisk
{
    Get-MountedDisk | ForEach-Object { Dismount-DiskImage -DevicePath $_.Path }
}

function Get-MountedDiskDriveLetter
{
    Get-MountedDisk | Get-Partition | ForEach-Object DriveLetter
}

function New-VhdFromWim
{
    param (
        [Parameter(Mandatory=$true)]
        [string]
        $VhdPath,

        [Parameter(Mandatory=$true)]
        [string]
        $WimPath,

        [Parameter(Mandatory=$true)]
        [int]
        $WimImageIndex,

        [uint64]
        $SizeBytes = 40GB,

        [string[]]
        $DismFeaturesToInstall,

        [string[]]
        $ServerFeaturesToInstall,

        # Specifies if the VHD will be used for VHD boot rather than a primary boot device.
        # Do not set this if your VHD is going to be a primary boot disk on a VM.
        [switch]
        $VhdBoot,

        [switch]
        $Force
    )

    $ErrorActionPreference = [System.Management.Automation.ActionPreference]::Stop

    if (Test-Path $VhdPath) {
        # the other BVT disk (multi-node) is also a virtual disk but can not be dis-mounted (error will occur)
        # we have to target the only disk mapped to Vhd path
        Dismount-DiskImage -ImagePath $VhdPath
        if ($Force) {
            Remove-Item $VhdPath -Force
        }
        else {
            throw "VHD file $VhdPath already exists."
        }
    }

    # Try to start Hyper-V on the DVM
    $tryCount = 1
    while (($tryCount -lt 4) -and ((Get-Service vmms).Status -ne "Running")) {
        Trace-Execution "Attempt #$tryCount to start VMMS on '$Env:COMPUTERNAME'"
        Start-Service vmms
        Start-Sleep 30
        $tryCount++
    }
    if ((Get-Service vmms).Status -ne "Running") {
        Trace-Error "Failed to start VMMS on $Env:COMPUTERNAME"
    }

    $null = New-VHD -SizeBytes $SizeBytes -Path $VhdPath -Dynamic

    $hwDetectionService = Get-Service -Name ShellHWDetection -ErrorAction Ignore
    if ($hwDetectionService) {
        Trace-Execution "Stopping ShellHWDetection Service"
        Stop-Service ShellHWDetection
    }
    else {
        Trace-Execution "ShellHWDetection Service was not running, no need to stop the service."
    }

    Trace-Execution "Mounting VHD from: $VhdPath"
    Mount-DiskImage -ImagePath $VhdPath

    # Attempt to start defender if not already running
    $service = Get-Service -Name "windefend" -ErrorAction SilentlyContinue
    if ($null -ne $service -and $service.Status -ine "Running") {
        $service | Start-Service -ErrorAction SilentlyContinue | Out-Null
    }

    try
    {
        $virtualDisk = Get-Disk | Where-Object Manufacturer -like 'Msft*' | Where-Object Model -like 'Virtual Disk*' | Where-Object PartitionStyle -like 'RAW'
        $diskNumber = $virtualDisk.Number
        Trace-Execution "Performing initialize on disk number: $diskNumber"
        Initialize-Disk -Number $diskNumber -PartitionStyle MBR
        $partition = New-Partition -DiskNumber $diskNumber -UseMaximumSize -AssignDriveLetter -IsActive
        if ($null -eq $partition) {
            throw "Failed to create new partition during the process of creating WinPE VHD from WIM."
        }

        $driveLetter = $partition.DriveLetter
        $driveName = $driveLetter + ':'
        $diskPath = $driveName + '\'
        $volume = Format-Volume -Partition $partition -FileSystem NTFS -Confirm:$false
        $null = New-PSDrive -PSProvider FileSystem -Root "FileSystem::$diskPath" -Name $driveLetter

        # set exclusion path when windefend is running
        if ($null -ne $service -and $service.Status -eq "Running") {
            Trace-Execution "Exclude mount folders $diskPath from Windows Defender scan to speed up configuration."
            Add-MpPreference -ExclusionPath $diskPath -ErrorAction SilentlyContinue
        }

        # Use a randomly generated log path because Expand-WindowsImage sometimes crashes because of not being able to write to default log file DISM.LOG.
        $dismLogPath = [IO.Path]::GetTempFileName()
        Trace-Execution "Using the following path for the DISM log: $dismLogPath"
        $null = Expand-WindowsImage -ImagePath $WimPath -ApplyPath $diskPath -Index $WimImageIndex -LogPath $dismLogPath
        if (-not $VhdBoot) {
            $null = bcdboot "$driveName\Windows" /S $driveName
        }
    }
    finally
    {
        if ($null -ne $service -and $service.Status -eq "Running") {
            Trace-Execution "Remove Windows Defender exclusions for paths $diskPath"
            Remove-MpPreference -ExclusionPath $diskPath -ErrorAction SilentlyContinue
        }

        Get-PSDrive | Where-Object Name -eq $driveLetter | Remove-PSDrive
        Dismount-DiskImage -ImagePath $VhdPath

        if ($hwDetectionService) {
            Start-Service ShellHWDetection
            Trace-Execution "Started ShellHWDetection Service"
        }
        else {
            Trace-Execution "ShellHWDetection Service was not previously running, no need to restart the service."
        }
    }

    if ($DismFeaturesToInstall) {
        Enable-WindowsOptionalFeature -FeatureName $DismFeaturesToInstall -Online -All
    }

    if ($ServerFeaturesToInstall) {
        Install-WindowsFeature -Vhd $VhdPath -Name $ServerFeaturesToInstall -IncludeAllSubFeature -IncludeManagementTools
    }
}

function New-WimFromVhd
{
    param (
        [Parameter(Mandatory=$true)]
        [string]
        $WimPath,

        [Parameter(Mandatory=$true)]
        [string]
        $VhdPath,

        [switch]
        $Force
    )

    $ErrorActionPreference = [System.Management.Automation.ActionPreference]::Stop

    Dismount-MountedDisk

    if (Test-Path $WimPath) {
        if ($Force) {
            Remove-Item $WimPath -Force
        }
        else {
            throw "WIM file $WimPath already exists."
        }
    }

    try
    {
        Mount-DiskImage -ImagePath $VhdPath
        $driveLetter = Get-MountedDiskDriveLetter
        $null = New-WindowsImage -ImagePath $WimPath -CapturePath "$driveLetter`:" -Name "CPS Host Backup"
    }
    finally
    {
        Dismount-DiskImage -ImagePath $VhdPath
    }
}

<#
$newVhdFromWimParameters = @{
    VhdPath = 'C:\CloudDeployment\Images\AD-DNS-DHCP.vhdx'
    WimPath = 'C:\CloudDeployment\Images\install.wim'
    WimImageIndex = 4 # Full server
    ServerFeaturesToInstall = 'DHCP', 'DNS', 'AD-Domain-Services'
}
New-VhdFromWim @newVhdFromWimParameters -Force
 
$newVhdFromWimParameters = @{
    VhdPath = 'C:\CloudDeployment\Images\Host.vhdx'
    WimPath = 'C:\CloudDeployment\Images\install.wim'
    WimImageIndex = 4 # Full server
    SizeBytes = 100GB
}
New-VhdFromWim @newVhdFromWimParameters -Force
#>

#Enable-WindowsOptionalFeature -FeatureName Microsoft-Hyper-V-Offline, Microsoft-Hyper-V-Online -Online -all

# Returns back username and password as array count 0 and 1
function Get-UsernameAndPassword
{
    [CmdletBinding()]
    param (
        [Parameter(Mandatory=$true)]
        [PSCredential]
        $Credential
    )

    $networkCredential = $Credential.GetNetworkCredential()
    $username = $networkCredential.UserName
    # Replace any password single quotes with double quotes so that we dont break the powershell syntax
    $password = $networkCredential.Password.Replace("'","''")

    if (-not $networkCredential.Domain) {
        # Localhost is needed to create networkshares from winPE
        $username = 'Localhost\' + $networkCredential.UserName
    }
    elseif (-not $username.Contains('\')) {
        $username = $networkCredential.Domain + '\' + $networkCredential.UserName
    }

    $username
    $password
}

<#
.Synopsis
     Function to output a path to a deploydirect file that is intended to run from a WinPE context on a booting machine. This must only run from the physical machine role.
.Parameter DeployDirectPath
     The template deploydirect path.
.Parameter UsePxeServerRole
    Whether the deployment script should attempt to communicate with the on-stamp PXE server or with the initial deployment DVM.
.Parameter Parameters
    This object is based on the customer manifest. It contains the private information of the Key Vault role, as well as
    public information of all other roles. It is passed down by the deployment engine.
.Example
    New-DeployDirect -DeployDirectPath "$PSScriptRoot\DeployDirect.ps1" -UsePxeServerRole $false -Parameters $Parameters
 
    This will customize the template deploy direct file using entries from the parameters object, and will use the IP of the DVM in various locations.
#>

function New-DeployDirect
{
    [CmdletBinding()]
    param (
        [Parameter(Mandatory=$true)]
        [String]
        $DeployDirectPath,

        [Parameter(Mandatory=$true)]
        [bool]
        $UsePxeServerRole,

        [Parameter(Mandatory=$false)]
        [PSCredential]
        $PXEAccountCredential,

        [Parameter(Mandatory=$false)]
        [PSCredential]
        $VHDShareAccountCredential,

        [Parameter(Mandatory=$true)]
        [CloudEngine.Configurations.EceInterfaceParameters]
        $Parameters,

        [Parameter(Mandatory=$false)]
        [bool]
        $UseVersionedWim = $true,

        [Parameter(Mandatory=$true)]
        [string]
        $HypervisorSchedulerType

    )

    $ErrorActionPreference = [System.Management.Automation.ActionPreference]::Stop

    $cloudRole = $Parameters.Roles["Cloud"].PublicConfiguration
    $physicalMachinesRole = $Parameters.Roles["BareMetal"].PublicConfiguration
    $physicalMachinesRolePrivateInfo = $Parameters.Configuration.Role.PrivateInfo
    $securityInfo = $cloudRole.PublicInfo.SecurityInfo

    #
    # $PXEAccountCredential is the account used to write logs back to the PXE server or the DVM. It can be either specified by the caller of
    # this function, or (by default) the local administrator of the DVM.
    #
    # $VHDShareAccountCredential is the account used by WinPE to download the VHD to the local host. It can be either the local administrator of
    # the DVM, or an account specified by the caller of this function (mandatory when an on-stamp PXE server is used)
    #
    if ($UsePxeServerRole) {
        # For domain-joined PXE servers, using the local administrator is not an option, so credentials for both accounts must be specified
        if ($null -eq $PXEAccountCredential) {
            throw "Must specify PXEAccountCredential when using an on-stamp PXE server"
        }
        if ($null -eq $VHDShareAccountCredential) {
            throw "Must specify VHDShareAccountCredential when using an on-stamp PXE server"
        }
    }
    else {
        # For the DVM, we can use the local builtin administrator account, so explicit credentials are not needed
        $administratorUser = $securityInfo.LocalUsers.User | Where-Object Role -eq $physicalMachinesRolePrivateInfo.Accounts.BuiltInAdminAccountID
        if ($PXEAccountCredential -eq $null) {
            $PXEAccountCredential = $Parameters.GetCredential($administratorUser.Credential)
        }
        if ($VHDShareAccountCredential -eq $null) {
            $VHDShareAccountCredential = $Parameters.GetCredential($administratorUser.Credential)
        }
    }

    if ($UsePxeServerRole) {
        $pxeRole = $Parameters.Roles["PXE"].PublicConfiguration

        $pxeServerName = $pxeRole.Nodes.Node.Name

        $vmRoleDefinition = $Parameters.Roles["VirtualMachines"].PublicConfiguration
        $pxeNode = $vmRoleDefinition.Nodes.Node | Where-Object { $_.Name -eq $pxeServerName }

        $pxeIPAddress = @($pxeNode.NICs.NIC)[0].IPv4Address.Split("/")[0]
    }
    else {
        $deploymentMachineRole = $Parameters.Roles["DeploymentMachine"].PublicConfiguration
        $pxeIPAddress = $deploymentMachineRole.Nodes.Node.IPv4Address
        $pxeServerName = $Env:COMPUTERNAME
    }

    if ($UsePxeServerRole) {
        # Take image content from the PXE server
        $hostImageDir = "\\$pxeServerName\Images"
    }
    else {
        # Install Image is generated.
        $hostImageDir = $ExecutionContext.InvokeCommand.ExpandString($physicalMachinesRole.PublicInfo.VhdImageTargetDir.Path)
        if ($UseVersionedWim) {
            $hostImageDir = Get-AzSVersionedPath -Path $hostImageDir
        }

        if ($hostImageDir -like "*{*}*") {
            $clusterName = Get-ManagementClusterName $Parameters
            $hostImageDir = Get-SharePath $Parameters $hostImageDir $clusterName
        }
    }
    Trace-Execution "Using host image folder $hostImageDir for DeployDirect script"

    if ([Environment]::GetEnvironmentVariable("OSImageType") -eq "ISO") {
        Trace-Execution "OSImageType is ISO"
        $hostImagePath = $hostImageDir + '\' + $physicalMachinesRole.PublicInfo.InstallImage.ISOName
        Trace-Execution "Using host ISO $hostImagePath for DeployDirect script"

        # Copy SetupComplete.cmd script needed for ISO-based OS deployments to RemoteUnattend folder
        $isoSetupCompleteScript = "C:\CloudDeployment\Roles\Common\SetupComplete_ISO.cmd"
        if (Test-Path -Path $isoSetupCompleteScript) {
            Trace-Execution "Copy '$($isoSetupCompleteScript)' to RemoteUnattend folder"
            $dest = "C:\RemoteUnattend\SetupComplete.cmd"
            if (-not(Test-Path -Path (Split-Path -Path $dest -Parent))) {
                $null = New-Item -ItemType File -Path $dest -Force
            }
            Copy-Item -Path $isoSetupCompleteScript -Destination $dest -Force
            $version = ([string]($Parameters.Roles["Cloud"].PublicConfiguration.PublicInfo.Version)).Trim()
            # Add line to SetupComplete.cmd to create file on the host when deployment has completed
            Add-Content -Path $dest -Value "echo $version > C:\CloudBuilderTemp\$($physicalMachinesRole.PublicInfo.DeploymentGuid).txt"
        }
        else {
            Trace-Execution "Could not find 'C:\CloudDeployment\Roles\Common\SetupComplete_ISO.cmd'"
        }
    }
    else {
        Trace-Execution "OSImageType is VHD"
        if ($physicalMachinesRole.PublicInfo.InstallImage.Index) {
            $hostImagePath = $hostImageDir + '\' + $physicalMachinesRole.PublicInfo.InstallImage.VHDName
        }
        else {
            # Use the initial Image.
            $hostImagePath = $ExecutionContext.InvokeCommand.ExpandString($physicalMachinesRole.PublicInfo.InstallImage.Path)
        }
        Trace-Execution "Using host VHD $hostImagePath for DeployDirect script"
    }

    # This VHD should be unused
    $winPEVHDImagePath = $hostImageDir + '\' + $physicalMachinesRole.PublicInfo.BootImage.VHDName

    $deployScriptContent = Get-Content $DeployDirectPath

    $deployScriptContent = $deployScriptContent.Replace('[DeploymentGuid]', $physicalMachinesRole.PublicInfo.DeploymentGuid)
    $deployScriptContent = $deployScriptContent.Replace('[DVMIPAddress]', $pxeIPAddress)
    $deployScriptContent = $deployScriptContent.Replace('[DVMName]', $pxeServerName)
    $deployScriptContent = $deployScriptContent.Replace('[HostImagePath]',$hostImagePath)
    $deployScriptContent = $deployScriptContent.Replace('[WinPEVHDImagePath]', $winPEVHDImagePath)

    if ($UsePxeServerRole) {
        # On the PXE server C:\RemoteUnattend must be accessed as \\PXE\RemoteUnattend
        $deployScriptContent = $deployScriptContent.Replace('[RemoteUnattendShare]', "RemoteUnattend")
    }
    else {
        # Local administrator credentials are used on the DVM, so the C$ share is available
        $deployScriptContent = $deployScriptContent.Replace('[RemoteUnattendShare]', "C$\RemoteUnattend")
    }

    if (-not $hostImagePath.StartsWith('\\')) {
        # Used to create a host entry in WinPE.
        $deployScriptContent = $deployScriptContent.Replace('[HostShareIPAddress]', $pxeIPAddress)
        $deployScriptContent = $deployScriptContent.Replace('[HostShareName]', $pxeServerName)
    }
    else {
        # Get the IP and Hostname from the share.
        $shareComputerName = $hostImagePath.Substring(2).Split('\')[0]
        $shareIPv4 = Resolve-DnsName $shareComputerName | Where-Object QueryType -eq 'A'
        $ip = $null

        foreach ($shareIp in $shareIPv4.IPAddress) {
            $succcess = Test-Connection $shareIp -ErrorAction SilentlyContinue -ErrorVariable connectionError

            if ($succcess) {
                $ip = $shareIp
                break
            }
            else {
                Trace-Warning "Share endpoint failed with: $connectionError"
            }
        }

        Trace-Execution "Resolved: '$shareComputerName' to IP: '$ip'"

        # Used to create a host entry in WinPE
        $deployScriptContent = $deployScriptContent.Replace('[HostShareIPAddress]', $ip)
        $deployScriptContent = $deployScriptContent.Replace('[HostShareName]',$shareComputerName)
    }

    $user = Get-UsernameAndPassword -Credential $PXEAccountCredential

    Trace-Execution "Using the account '$($user[0])' for DVM share."
    $deployScriptContent = $deployScriptContent.Replace('[DVMUser]', $user[0])
    $deployScriptContent = $deployScriptContent.Replace('[DVMPassword]', $user[1])
    $deployScriptContent = $deployScriptContent.Replace('[HypervisorSchedulerType]', $HypervisorSchedulerType)

    if ($VHDShareAccountCredential) {
        $user = Get-UsernameAndPassword -Credential $vhdShareAccountCredential

        Trace-Execution "Using the account '$($user[0])' for host VHD share."
        $deployScriptContent = $deployScriptContent.Replace('[VHDSharePathUser]', $user[0])
        $deployScriptContent = $deployScriptContent.Replace('[VHDSharePathPassword]',$user[1])
    }
    else {
        Trace-Execution "Not setting host VHD share credentials."
    }

    $networkDefinition = Get-NetworkDefinitions -Parameters $Parameters
    $networks = $networkDefinition.Networks.Network
    $hostNicNetworkName = Get-NetworkNameForCluster -ClusterName "s-cluster" -NetworkName "HostNIC"

    foreach ($network in $networks) {
        if ($network.Name -eq $hostNicNetworkName) {
            $deployScriptContent = $deployScriptContent.Replace('[HostNetworkBeginAddress]', $network.IPv4.StartAddress)
            $deployScriptContent = $deployScriptContent.Replace('[HostNetworkEndAddress]', $network.IPv4.EndAddress)
        }
    }
    $deployScriptContent = $deployScriptContent.Replace('[RebootOnComplete]', '$true')

    $oneNodeRestore = [Environment]::GetEnvironmentVariable("OneNodeRestore", "Machine")
    Trace-Execution "OneNodeRestore: $($oneNodeRestore)"

    if (($UsePxeServerRole) -or (-not [System.String]::IsNullOrEmpty($oneNodeRestore)))
    {
        Trace-Execution "Setting ClearExistingStorage to false."
        $deployScriptContent = $deployScriptContent.Replace('[ClearExistingStorage]', '$false')
    }
    else
    {
        Trace-Execution "Setting ClearExistingStorage to true."
        $deployScriptContent = $deployScriptContent.Replace('[ClearExistingStorage]', '$true')
    }

    $isAnacortesBuild = [System.Environment]::GetEnvironmentVariable('ANACORTES_DEPLOYMENT', [System.EnvironmentVariableTarget]::Machine)
    if(((Get-Random -Maximum 100)% 2 -eq 0) -and ([System.String]::IsNullOrWhiteSpace($isAnacortesBuild)))
    {
        $deployScriptContent = $deployScriptContent.Replace('[IsOneDrive]', '$true')
    }
    else {
        $deployScriptContent = $deployScriptContent.Replace('[IsOneDrive]', '$false')
    }

    $newDeployDirectPath = "$PSScriptRoot\DeployDirectReplaced.ps1"
    Set-Content -Value $deployScriptContent -Path $newDeployDirectPath -Force

    return $newDeployDirectPath
}

function Test-SkipDriverInjection
{
    [CmdletBinding()]
    param (
        [Parameter(Mandatory = $true)]
        [bool]
        $SkipDriverInjection
    )

    $ErrorActionPreference = [System.Management.Automation.ActionPreference]::Stop

    $driverPath = "$env:SystemDrive\CloudDeployment\Drivers"

    if ($skipDriverInjection) {
        Trace-Warning 'Driver injection will be skipped as instructed by $CloudBuilder.SkipDriverInjection setting.'
    }
    elseif (-not (Test-Path $driverPath)) {
        Trace-Execution "Driver injection will be skipped as the driver path '$driverPath' does not exist."
        $skipDriverInjection = $true
    }
    elseif (-not (Get-ChildItem $driverPath)) {
        Trace-Execution "Driver injection will be skipped as the driver path '$driverPath' does not contain any files."
        $skipDriverInjection = $true
    }
    elseif (-not (Get-ChildItem $driverPath -Filter *.inf -Recurse)) {
        Trace-Execution "Driver injection will be skipped as the driver path '$driverPath' does not contain any drivers (no *.inf files found)."
        $skipDriverInjection = $true
    }

    return $skipDriverInjection
}

function New-PxeUnattendFile
{
    [CmdletBinding()]
    param (
        [Parameter(Mandatory=$true)]
        [String]
        $ComputerName,

        [Parameter(Mandatory=$false)]
        [String]
        $SLPKey,

        [Parameter(Mandatory=$true)]
        [string]
        $MachineIdentifier,

        [Parameter(Mandatory=$true)]
        [PSCredential]
        $LocalAdministratorCredential,

        [Parameter(Mandatory=$false)]
        [String]
        $DomainJoinBlob,

        [Parameter(Mandatory=$false)]
        [String]
        $DomainFqdn,

        [Parameter(Mandatory=$false)]
        [PSCredential]
        $DomainAdminCredential,

        [Parameter(Mandatory=$false)]
        [PSCredential]
        $LocalAccountCredential,

        [Parameter(Mandatory=$false)]
        [PSCredential]
        $LocalCloudAdminCredential,

        [Parameter(Mandatory=$true)]
        [String]
        $UnattendFilePath,

        [Parameter(Mandatory=$true)]
        [String]
        $OutputPath
    )

    $outputGuid = [Guid]::NewGuid();
    if (-not [Guid]::TryParse($MachineIdentifier, [ref] $outputGuid)) {
        # $OFS which is a special variable in powershell . OFS stands for Output field separator .
        $ofs = '-'
        $MacAddressString = "$(([System.Net.NetworkInformation.PhysicalAddress]$MachineIdentifier).GetAddressBytes() | ForEach-Object {'{0:X2}' -f $_})"
        $MachineIdentifier = $MacAddressString
    }

    $ErrorActionPreference = [System.Management.Automation.ActionPreference]::Stop

    $unattendContent = (Get-Content $UnattendFilePath)

    $unattendContent = $unattendContent.Replace('[ComputerName]', $ComputerName)

    # Commented out code is not needed for AsZ reset
    # Clean up later to have AsZ specific method

    #if ($SLPKey) {
    # $unattendContent = $unattendContent.Replace('[SLPKey]', $SLPKey)
    #}
    #else {
     # $unattendContent = $unattendContent -replace '<ProductKey>.*</ProductKey>', ''
    #}

    $unattendContent = $unattendContent.Replace('[LocalAdministratorPassword]', [System.Security.SecurityElement]::Escape(([Runtime.InteropServices.Marshal]::PtrToStringAuto([Runtime.InteropServices.Marshal]::SecureStringToBSTR($LocalAdministratorCredential.Password)))))
    #$unattendContent = $unattendContent.Replace('[LocalAdministratorName]', $LocalAdministratorCredential.UserName)

    # Multi-node tokens
    #$unattendContent = $unattendContent.Replace('[DomainJoinBlob]', $DomainJoinBlob)
    #$unattendContent = $unattendContent.Replace('[DomainFqdn]', $DomainFqdn)

    #if ($DomainAdminCredential) {
    # $unattendContent = $unattendContent.Replace('[DomainAdminUsername]', $DomainAdminCredential.UserName)
    # $unattendContent = $unattendContent.Replace('[DomainAdminPassword]', [System.Security.SecurityElement]::Escape(([Runtime.InteropServices.Marshal]::PtrToStringAuto([Runtime.InteropServices.Marshal]::SecureStringToBSTR($DomainAdminCredential.Password)))))
    #}

    #if ($LocalAccountCredential) {
    # $unattendContent = $unattendContent.Replace('[LocalAccountUsername]', $LocalAccountCredential.UserName)
    # $unattendContent = $unattendContent.Replace('[LocalAccountPassword]', [System.Security.SecurityElement]::Escape(([Runtime.InteropServices.Marshal]::PtrToStringAuto([Runtime.InteropServices.Marshal]::SecureStringToBSTR($LocalAccountCredential.Password)))))
    #}

    #if ($LocalCloudAdminCredential) {
    # $unattendContent = $unattendContent.Replace('[LocalCloudAdminUsername]', $LocalCloudAdminCredential.UserName)
    # $unattendContent = $unattendContent.Replace('[LocalCloudAdminPassword]', [System.Security.SecurityElement]::Escape(([Runtime.InteropServices.Marshal]::PtrToStringAuto([Runtime.InteropServices.Marshal]::SecureStringToBSTR($LocalCloudAdminCredential.Password)))))
    #}

    $unattendFilePath = "$OutputPath\$MachineIdentifier.xml"
    if (Test-Path $unattendFilePath) {
        Remove-Item $unattendFilePath -Force
    }

    Set-Content -Value $unattendContent -Path "$OutputPath\$MachineIdentifier.xml" -Force
}

function New-WinPEImage
{
    [CmdletBinding()]
    param (
        [Parameter(Mandatory=$true)]
        [String]
        $DeployDirectPath,

        [Parameter(Mandatory=$false)]
        [bool] $UseVersionedWim = $true,

        [Parameter(Mandatory=$false)]
        [PSCredential]
        $PXEAccountCredential,

        [Parameter(Mandatory=$false)]
        [PSCredential]
        $VHDShareAccountCredential,

        [Parameter(Mandatory=$true)]
        [CloudEngine.Configurations.EceInterfaceParameters]
        $Parameters,

        [Switch]$PostDeployment
    )

    $ErrorActionPreference = [System.Management.Automation.ActionPreference]::Stop
    $physicalMachinesRole = $Parameters.Roles["BareMetal"].PublicConfiguration
    $physicalMachinesRolePrivateInfo = $Parameters.Configuration.Role.PrivateInfo
    $cloudRole = $Parameters.Roles["Cloud"].PublicConfiguration

    $OEMRole = $Parameters.Roles["OEM"].PublicConfiguration
    $OEMModel = $OEMRole.PublicInfo.UpdatePackageManifest.UpdateInfo.Model

    $clusterName = Get-ManagementClusterName $Parameters

    $winPEBootImage = $physicalMachinesRole.PublicInfo.BootImage
    if ($PostDeployment.IsPresent) {
        $UsePxeServerRole = $true
        $bootImageSrcDir = $physicalMachinesRolePrivateInfo.LibraryShareImageFolder.Path
    }
    else {
        $UsePxeServerRole = $false
        $bootImageSrcDir = $ExecutionContext.InvokeCommand.ExpandString($winPEBootImage.SrcDir)
    }

    if ($bootImageSrcDir -like "*{*}*") {
        $bootImageSrcDir = Get-SharePath $Parameters $bootImageSrcDir $clusterName
    }

    # Use versioned path if specified
    if ($UseVersionedWim) {
        $bootImageSrcDir = Get-AzSVersionedPath -Path $bootImageSrcDir
    }

    $bootImagePath = Join-Path $bootImageSrcDir $winPEBootImage.BaseImage
    $bootImageIndex = $winPEBootImage.Index

    $vhdTargetDirPath = $ExecutionContext.InvokeCommand.ExpandString($physicalMachinesRole.PublicInfo.VhdImageTargetDir.Path)
    if ($vhdTargetDirPath -like "*{*}*") {
        $vhdTargetDirPath = Get-SharePath $Parameters $vhdTargetDirPath $clusterName
    }

    # Use versioned path if specified
    if ($UseVersionedWim) {
        $vhdTargetDirPath = Get-AzSVersionedPath -Path $vhdTargetDirPath
    }

    $winpeVhdImagePath = Join-Path $vhdTargetDirPath -ChildPath $winPEBootImage.VHDName
    $mountPath = Join-Path -Path ([IO.Path]::GetTempPath()) -ChildPath ([Guid]::NewGuid())

    if ($PostDeployment.IsPresent) {
        $wimStagingPath = Join-Path -Path ([IO.Path]::GetTempPath()) -ChildPath ([Guid]::NewGuid())
        $GenerateWim = $true
        $GenerateVhd = $false
    }
    else {
        $wimStagingPath = $bootImageSrcDir
        $skipCopy = $true
        $Script:IsIdempotentRun = [Bool]::Parse($physicalMachinesRolePrivateInfo.ExecutionContext.IdempotentRun)
        $GenerateWim = ((-not $Script:IsIdempotentRun) -or (-not (Test-Path $winpeVhdImagePath)))
        $GenerateVhd = $GenerateWim
    }

    if ($GenerateWim) {
        # Attempt to start defender if not already running
        $service = Get-Service -Name "windefend" -ErrorAction SilentlyContinue
        if ($null -ne $service -and $service.Status -ine "Running") {
            $service | Start-Service -ErrorAction SilentlyContinue | Out-Null
        }

        # On virtual environments to avoid infra VM reboots change hypervisor scheduler type to Classic.
        # On physical enviornments the scheduler type will be Core
        if (IsVirtualAzureStack($Parameters)) {
            $hypervisorSchedulerType = "Classic"
        }
        else {
            $hypervisorSchedulerType = "Core"
        }

        try
        {
            $newDeployDirectPath = New-DeployDirect `
                                        -DeployDirectPath $deployDirectPath `
                                        -PXEAccountCredential $PXEAccountCredential `
                                        -VHDShareAccountCredential $VHDShareAccountCredential `
                                        -UsePxeServerRole $UsePxeServerRole `
                                        -Parameters $Parameters `
                                        -UseVersionedWim $UseVersionedWim `
                                        -HypervisorSchedulerType $hypervisorSchedulerType
            Dismount-AllMountedImages

            if (-not (Test-Path $mountPath)) {
                $null =  New-Item -Path $mountPath -ItemType Directory
            }
            if (-not (Test-Path $wimStagingPath)) {
                $null =  New-Item -Path $wimStagingPath -ItemType Directory
            }

            # set exclusion path when windefend is running
            if ($null -ne $service -and $service.Status -eq "Running") {
                Trace-Execution "Exclude mount folders $mountPath and $wimStagingPath from Windows Defender scan to speed up configuration."
                Add-MpPreference -ExclusionPath $mountPath, $wimStagingPath -ErrorAction SilentlyContinue
            }

            Trace-Execution "Copying required content from '$bootImageSrcDir' to '$wimStagingPath'."
            if (-not $skipCopy) {
                $out = Robocopy.exe $bootImageSrcDir $wimStagingPath $physicalMachinesRole.PublicInfo.BootImage.BaseImage /R:2 /W:10
                # Check for exit code. If exit code is greater than 7, it means an error occured while peforming a copy operation.
                if ($LASTEXITCODE -ge 8) {
                    $message = "There were errors copying files from '$bootImageSrcDir' to '$wimStagingPath'. Robocopy exit code $LASTEXITCODE.`n"
                    $message += ($out | Out-String)
                    throw $message
                }
            }
            $wimStagingFile = Join-Path $wimStagingPath $physicalMachinesRole.PublicInfo.BootImage.BaseImage
            Trace-Execution "Mount '$wimStagingFile' to '$mountPath'."

            Mount-WindowsImageWithRetry -ImagePath $wimStagingFile -Path $mountPath -Index $bootImageIndex
            ######### This section is associated with Work Item 15253266 and should be removed after the data corruption bug is fixed. #########
            Trace-Execution "Mount '$wimStagingFile' successful."
            $registryPath = Join-Path $mountPath "\Windows\System32\config\SYSTEM"
            reg load HKLM\OFFLINE $registryPath
            reg add "HKLM\OFFLINE\ControlSet001\Control\Session Manager\Memory Management" /v VerifyDrivers /t REG_SZ /d * /f
            reg add "HKLM\OFFLINE\ControlSet001\Control\Session Manager\Memory Management" /v VerifyDriverLevel /t REG_DWORD /d 0x89 /f
            reg unload HKLM\OFFLINE
            Trace-Execution "Temporary registry setting complete."
            #########

            Copy-Item "$newDeployDirectPath" "$mountPath\DeployDirect.ps1" -Recurse -Force
            Copy-Item "$PSScriptRoot\..\Common\DeployDirectCommon.psm1" "$mountPath\DeployDirectCommon.psm1" -Recurse -Force
            Copy-Item "$PSScriptRoot\..\Common\startnet.cmd" "$mountPath\Windows\System32\startnet.cmd" -Recurse -Force
            Copy-Item "$PSScriptRoot\..\..\Common\Helpers.psm1" "$mountPath\Helpers.psm1" -Force
            Copy-Item "$PSScriptRoot\..\..\Common\Tracer.psm1" "$mountPath\Tracer.psm1" -Force

            Trace-Execution "Dismount and save mounted image."
            Dismount-WindowsImage -Path $mountPath -Save -Verbose:$false

            if (-not $skipCopy) {
                Trace-Execution "Copying updated boot image '$wimStagingFile' back to '$bootImageSrcDir'."
                $out = Robocopy.exe $wimStagingPath $bootImageSrcDir $physicalMachinesRole.PublicInfo.BootImage.BaseImage /R:2 /W:10
                # Check for exit code. If exit code is greater than 7, it means an error occured while performing a copy operation.
                if ($LASTEXITCODE -ge 8) {
                    $message = "There were errors copying files from '$wimStagingPath' to '$bootImageSrcDir'. Robocopy exit code $LASTEXITCODE.`n"
                    $message += ($out | Out-String)
                    throw $message
                }
                Remove-Item -Path $wimStagingFile -Force -Confirm:$false -ErrorAction Ignore
            }
        }
        finally
        {
            Dismount-AllMountedImages

            if ($null -ne $service -and $service.Status -eq "Running") {
                Trace-Execution "Remove Windows Defender exclusions for paths $MountPath and $wimStagingPath"
                Remove-MpPreference -ExclusionPath $MountPath, $wimStagingPath -ErrorAction SilentlyContinue
            }
        }

        if ($GenerateVhd) {
            Trace-Execution "Converting WIM image '$bootImagePath' to VHDBoot image '$winpeVhdImagePath'."

            $newVhdFromWimParameters = @{
                WimPath = $BootImagePath
                VhdPath = $winpeVhdImagePath
                WimImageIndex = $BootImageIndex
                SizeBytes = 120GB
                VhdBoot = $true
            }

            New-VhdFromWim @newVhdFromWimParameters -Force -Verbose
        }
    }
}

<#
Mounts the Wim file and injects desired content into it
#>

function Update-BootWimFile
{
    [CmdletBinding()]
    param (
        [Parameter(Mandatory=$true)]
        [CloudEngine.Configurations.EceInterfaceParameters]
        $Parameters,

        [Parameter(Mandatory=$false)]
        [bool] $UseVersionedWim = $true
    )

    $ErrorActionPreference = [System.Management.Automation.ActionPreference]::Stop
    $cloudRole = $Parameters.Roles["Cloud"].PublicConfiguration

    Trace-Execution "Update boot.wim file"
    $physicalMachinesRole = $Parameters.Roles["BareMetal"].PublicConfiguration
    $virtualMachinesRole = $Parameters.Roles["VirtualMachines"].PublicConfiguration
    $clusterName = Get-ManagementClusterName $Parameters
    # Windows Update staging folder
    $windowsUpdateStagingFolder = $physicalMachinesRole.PublicInfo.WindowsUpdateStagingFolder.Path
    if ($windowsUpdateStagingFolder -like "*{*}*") {
        $windowsUpdateStagingFolder = Get-SharePath $Parameters $windowsUpdateStagingFolder $clusterName
    }
    else {
        $windowsUpdateStagingFolder = $ExecutionContext.InvokeCommand.ExpandString($windowsUpdateStagingFolder)
    }

    # Boot image
    $winPEBootImage = $physicalMachinesRole.PublicInfo.BootImage
    $bootImageSrcDir = $ExecutionContext.InvokeCommand.ExpandString($winPEBootImage.SrcDir)
    if ($bootImageSrcDir -like "*{*}*") {
        $bootImageSrcDir = Get-SharePath $Parameters $bootImageSrcDir $clusterName
    }

    if ($UseVersionedWim) {
        $bootImagePath = Join-Path -Path (Get-AzSVersionedPath -Path $bootImageSrcDir) -ChildPath $winPEBootImage.BaseImage
    }
    else {
        $bootImagePath = Join-Path $bootImageSrcDir $winPEBootImage.BaseImage
    }

    $bootImageIndex = $winPEBootImage.Index

    if (Test-Path -Path $bootImagePath) {
        # Get rid of any half-built previous WIM.
        Clear-ImageMount -Path $bootImagePath -AlternateFileServerName $clusterName
    }

    # Mount the WIM file
    $mountedImage = [MountedImage]::new($bootImagePath, $bootImageIndex)

    # Get the image build and associated drivers path
    $windowsBuild = $mountedImage.GetBuild()
    $driverPath = Get-OEMDriverPath -Parameter $Parameters -Build $windowsBuild

    # Update the WIM file
    try
    {
        # Whenever Build runs on a seed ring node, there is very limited disk space.
        # Use a scratch drive for applying KBs.
        [string[]] $seedRingNodeNames = $Parameters.Roles["SeedRing"].PublicConfiguration.Nodes.Node | ForEach-Object Name
        if ($seedRingNodeNames -icontains $env:COMPUTERNAME) {
            Import-Module -Name "$PSScriptRoot\..\..\Roles\Common\Servicing\Scripts\Modules\HostTempDrive.psm1"
            $physicalHostName = Get-NodeRefNodeId $Parameters -RoleName "VirtualMachines" -NodeName $env:COMPUTERNAME
            $drive = New-ScratchDiskForNonHAVM -ComputerName $env:COMPUTERNAME -HyperVHosts @($physicalHostName)
            try
            {
                Trace-Execution "Running UpdateImageWithWindowsUpdates on a seed ring, using update scratch directory."
                # Inject Windows updates
                # TEMP: Ignore applicability check for packages when adding them to WinPE image.
                $mountedImage.UpdateImageWithWindowsUpdates($windowsUpdateStagingFolder, "$drive`:\UpdateTemp", $true)
            }
            finally
            {
                Remove-ScratchDiskForNonHAVM -ComputerName $env:COMPUTERNAME -HyperVHosts @($physicalHostName)
            }
        }
        else {
            # Inject Windows updates
            Trace-Execution "Injecting updates from non-seedring orchestrator."
            $mountedImage.UpdateImageWithWindowsUpdates($windowsUpdateStagingFolder)
        }

        # Inject drivers
        $skipDriverInjection = [Bool]::Parse($physicalMachinesRole.PublicInfo.SkipDriverInjection)
        $mountedImage.AddDriversToImage($driverPath, $skipDriverInjection)

        # Inject deployment content
        if ($Parameters.Configuration.Role.PrivateInfo.DeploymentContent) {
            $libraryShareNugetStorePath = Get-SharePath $Parameters $virtualMachinesRole.PublicInfo.LibraryShareNugetStoreFolder.Path $clusterName
            if (Test-Path -Path $libraryShareNugetStorePath) {
                $mountedImage.ExpandDeploymentArtifacts($Parameters.Configuration.Role.PrivateInfo.DeploymentContent, $libraryShareNugetStorePath)
            }
            else {
                $mountedImage.ExpandDeploymentArtifacts($Parameters.Configuration.Role.PrivateInfo.DeploymentContent)
            }
        }

        if ($UseVersionedWim) {
            # Get current or UpdateVersion in case of update
            $updateVersion = Get-InProgressUpdateVersion -Parameters $Parameters
            if ($null -ne $updateVersion) {
                $version = $updateVersion
            }
            else {
                $version = ([string]($cloudRole.PublicInfo.Version)).Trim()
            }

            $mountedImage.UpdateImageStatusFile($version, "BuildCompleted")
        }
    }
    finally
    {
        $mountedImage.Dispose()
    }
}

<#
.SYNOPSIS
 Dismounts all the mounted images
 
.DESCRIPTION
 Dismounts all the mounted images
#>

function Dismount-AllMountedImages
{
    Import-Module Dism
    Clear-WindowsCorruptMountPoint
    $mountedImages = Get-WindowsImage -Mounted -Verbose:$false
    if ($mountedImages) {
        Trace-Execution "Found the following mounted images:`r`n$($mountedImages | Out-String)"
        Trace-Execution "Discard previously mounted images."
        $null = $mountedImages | ForEach-Object {
            $mountPath = $_.MountPath
            try
            {
                Trace-Execution "Unmounting '$mountPath'"
                Dismount-WindowsImage -Path $mountPath -Discard -Verbose:$false
            }
            catch
            {
                # It is possible we may have hit mount point invalid mount point state due to ECE failover
                # so applying remediation and retrying. See VSO 8588300 for more details.
                Trace-Execution "Failed to unmount '$mountPath' so unloading mounted keys and retrying"
                $mountPathKey = $mountPath.Replace('\','/')
                $(reg query HKLM) | ForEach-Object { if ($_ -like "*$mountPathKey*") { reg unload $_ } }
                Dismount-WindowsImage -Path $mountPath -Discard -Verbose:$false
            }
        }
    }

    # If the mounted image was undergoing a DISM operation while ECE service was failed over or crashed,
    # it's possible that the image is still mounted. We can look for any such disks mounted from the SU1FileServer
    # and clean them up.
    $mountedDisks = Get-Disk | Where-Object Location -match "SU1FileServer"
    if ($mountedDisks) {
        Trace-Execution "Found the following mounted disks:`r`n$($mountedDisks | Format-List Number, FriendlyName, Size, Location)"
        foreach ($disk in $mountedDisks) {
            Dismount-VHD -DiskNumber $disk.Number
        }
    }

    Import-Module Storage
    Get-Volume | Where-Object FileSystemLabel -eq 'Deployment' | ForEach-Object { Get-DiskImage -DevicePath $_.Path.TrimEnd('\') } | Dismount-DiskImage
}

<#
 .Synopsis
  Reliable atomic copy of file.
 
 .Description
  This function performs a reliable copy of a file by using temporary staging copy and hash validation mechanism. This function is designed to be re-entrant.
#>

function Copy-FileAtomic
{
    [CmdletBinding()]
    param
    (
        [Parameter(Mandatory = $true, HelpMessage="Literal path to the source file which is to be copied.")]
        [string]
        $SourceFilePath,

        [Parameter(Mandatory = $true, HelpMessage="Literal path to the destination file where the source file would be copied to.")]
        [string]
        $DestinationFilePath
    )

    $destFile = Split-Path -path $DestinationFilePath -Leaf
    $destFolder = Split-Path -path $DestinationFilePath -Parent

    $newFileName = '{0}.new' -f $destFile
    $prevFileName = '{0}.prev' -f $destFile

    $newPath = Join-Path $destFolder $newFileName
    $prevPath = Join-Path $destFolder $prevFileName

    # Handle code re-entrancy
    if (Test-Path $prevPath)
    {
        if (Test-Path $DestinationFilePath)
        {
            Write-Verbose "Removing stale file: $prevPath"
            Remove-Item -Path $prevPath
        }
        else
        {
            Write-Verbose "Renaming stale file: $prevPath to $DestinationFilePath"
            Rename-Item -Path $prevPath -NewName $DestinationFilePath
        }
    }

    # Copy file to a temp file in destination folder
    Write-Verbose "Copying file $SourceFilePath to $newPath"
    Copy-Item -Path $SourceFilePath -Destination $newPath -Force -ErrorAction Stop

    # Validate copied staging file against original source file
    if ((Get-FileHash $SourceFilePath).hash -ne (Get-FileHash $newPath).hash)
    {
        throw "$newPath is not copied correctly."
    }

    # Handle atomicity and overwrite issues
    $overwrite = Test-Path $DestinationFilePath

    if ($overwrite)
    {
        Write-Verbose "Renaming existing destination file: $DestinationFilePath to $prevPath"
        Rename-Item -Path $DestinationFilePath -NewName $prevPath -ErrorAction Stop
    }

    Write-Verbose "Renaming new file: $newPath to $DestinationFilePath"
    Rename-Item -Path $newPath -NewName $DestinationFilePath -ErrorAction Stop

    if ($overwrite)
    {
        Write-Verbose "Removing stale file: $prevPath"
        Remove-Item -Path $prevPath
    }
}

<#
.SYNOPSIS
 Copy base images into the verioned folder
 
.DESCRIPTION
  Creates copies of the base images in the versioned folder.
#>

function New-VersionedImages
{
    [CmdletBinding()]
    param (
        [string] $InProgressImageFolder,
        [string] $BaseImageFolder,
        [string[]] $Images
    )

    $ErrorActionPreference = [System.Management.Automation.ActionPreference]::Stop

    # If the build folder exists, delete it and start again
    if (Test-Path $InProgressImageFolder) {
        Trace-Execution "Clean up old content as build did not complete during previous run."
        Remove-Item -Path $InProgressImageFolder -Recurse -Force
    }

    Trace-Execution "Creating build folder $InProgressImageFolder"
    $null = New-Item -Path $InProgressImageFolder -ItemType Directory -Force

    # Loop through all name of all the images needed
    foreach ($imageName in $Images) {
        $newImagePath = Join-Path -Path $InProgressImageFolder -ChildPath $imageName
        if (Test-Path $newImagePath) {
            Trace-Execution "The new image: $newImagePath already exists. Skipping creation of this image"
        }
        else {
            $sourceImagePath = Join-Path -Path $BaseImageFolder -ChildPath $imageName
            if (-not(Test-Path -Path $sourceImagePath)) {
                $sourceImagePath = Join-Path -Path 'C:\CustomArtifacts\Core\Image' -ChildPath $imageName
                if (-not(Test-Path -Path $sourceImagePath)) {
                    throw "Unable to find '$($imageName)' in any known source image path."
                }
            }
            Trace-Execution "Copying source image at '$sourceImagePath' to destination image path '$newImagePath'."
            Copy-FileAtomic -SourceFilePath $sourceImagePath -DestinationFilePath $newImagePath -Verbose -ErrorAction Stop
        }
    }
}

<#
.SYNOPSIS
 Get names of the images needed for deployment and updates
 
.DESCRIPTION
  Creates copies of the base images in the versioned folder.
 
.PARAMETER Parameters
 The EceInterfaceParameters object which is populated by ECE
#>

function Get-SourceImageNames
{
    [CmdletBinding()]
    param (
        [Parameter(Mandatory=$true)]
        [CloudEngine.Configurations.EceInterfaceParameters]
        $Parameters,

        [switch] $SkipWim,

        [switch] $SkipArtifacts
    )

    $ErrorActionPreference = [System.Management.Automation.ActionPreference]::Stop
    $images = @()
    # Roles
    $physicalMachinesRole = $Parameters.Roles["BareMetal"].PublicConfiguration
    $virtualMachinesRole = $Parameters.Roles["VirtualMachines"].PublicConfiguration

    if ($SkipWim.IsPresent -eq $false) {
        # Image to be used for host
        # Boot Image (boot.wim)
        $bootImageName = $physicalMachinesRole.PublicInfo.BootImage.BaseImage
        if ($bootImageName) {
            $images += $bootImageName
        }
    }

    # Image to be used for host OS.
    $hostOSImageName = $physicalMachinesRole.PublicInfo.InstallImage.BaseImage
    if ($hostOSImageName -and $images -notcontains $hostOSImageName) {
        $images += $hostOSImageName
    }

    if (($SkipWim.IsPresent -eq $false) -and ([Environment]::GetEnvironmentVariable("OSImageType") -eq "ISO")) {
        $images += $physicalMachinesRole.PublicInfo.InstallImage.ISOName
    }

    # Identify names of the VHDs to be copied, update the base images to be used for the guest VMs
    $guestVMs =  $virtualMachinesRole.Nodes.Node
    foreach ($vm in $guestVMs) {
        $osImageName = $vm.Vhds.Vhd | Where-Object Index -eq 0 | ForEach-Object Path
        if ($images -notcontains $osImageName) {
            # Add it to the array to avoid configuration of the same image multiple times
            $images += $osImageName
        }

        # Add Artifacts VHD to list of required images if specified in any VM role definition.
        $artifactsVhdName = $vm.Vhds.Vhd | Where-Object Path -eq "Artifacts.vhdx" | ForEach-Object Path

        if (![string]::IsNullOrEmpty($artifactsVhdName)) {
            Trace-Execution "Artifacts VHD '$artifactsVhdName' is requested by role definition of VM '$($vm.Name)'."
            Trace-Execution "SkipArtifacts switch is '$SkipArtifacts'."
            Trace-Execution "Current image list: '$images'."

            if (!$SkipArtifacts.IsPresent -and $images -notcontains $artifactsVhdName) {
                Trace-Execution "Add Artifacts VHD '$artifactsVhdName' to list of images required for deployment or update."
                $images += $artifactsVhdName

                Trace-Execution "Updated image list: '$images'."
            }
        }
    }
    $images = $images | where {$_ -inotmatch 'WindowsServerCore.vhdx'}
    return $images
}

# This function clears the mounted image.
function Clear-ImageMount
{
    param (
        # This will be \\XXXX\XXVM_temp*.vhdx
        [Parameter(Mandatory=$true)]
        [Alias("UncPath")]
        [string]
        $Path,

        [switch]
        $DeleteImage,

        # If the path is on the file server this script will attempt to close any open SMB handles.
        # Doing so requires a PS session to the file server. However the file server name (SU1FileServer) can resolve
        # to changing IPs, which can break the underlying WinRM session. As a workaround, an alternate target server name
        # can be provided by the caller (typically the cluster name), which always resolves to the same IP address.
        [string]
        $AlternateFileServerName
    )

    $ErrorActionPreference = [System.Management.Automation.ActionPreference]::Stop

    # Check if file or its dism mount exists.
    if (-not (Test-Path $Path*)) {
        Trace-Execution "The specified image '$Path' does not exist, no cleanup is necessary."
        return
    }

    if (Get-WindowsImage -Mounted | Where-Object MountStatus -eq 'Invalid') {
        Trace-Execution "Clear corrupt WindowsImage/DISM mount points."
        $null = Clear-WindowsCorruptMountPoint -Verbose:$False
    }

    Get-Disk | Where-Object Location -like $Path | ForEach-Object {
        Trace-Execution "Dismount image mounted by Mount-DiskImage on the local host."
        Dismount-DiskImage -ImagePath $_.Location -Confirm:$false
    }

    if ((Get-ChildItem "$Path.dism*" -Force) -or ((Get-ChildItem -Path $Path).Extension -eq '.wim')) {
        Trace-Execution "The file appears to be mounted by Mount-WindowsImage command, attempting to dismount it gracefully."
        Get-WindowsImage -Mounted -Verbose:$False | Where-Object ImagePath -like $Path | ForEach-Object {
            if ($_.MountStatus -eq 'NeedsRemount') {
                $null = New-Item -Path $_.Path -ItemType Directory -Force
                Mount-WindowsImage -Path $_.Path -Remount -Verbose:$False
            }
            $null = Dismount-WindowsImage -Path $_.Path -Discard -Verbose:$False
        }
    }

    # Check if path points to a network share.
    $uri = [System.Uri]$Path
    if ($uri.IsUnc) {
        $serverName = $uri.Host

        # WinNextWorkaround: do not use SU1FileServer as the target name for remote sessions. Use the cluster name instead.
        if ($serverName -eq "SU1FileServer" -and $AlternateFileServerName) {
            Trace-Execution "WinNextWorkaround: Known issues with creating remote sessions to SU1FileServer. Connecting to $AlternateFileServerName instead."
            $serverName = $AlternateFileServerName
        }

        $sharePath = [System.IO.Path]::GetPathRoot($Path)
        $shareRelativePath = $Path.Replace($sharePath, '').TrimStart('\')
        Trace-Execution "Establish remote connection to file server '$serverName' to remove potential locks on the file '$Path'."
        Invoke-Command $serverName {
            $verbose = $using:VerbosePreference -eq [System.Management.Automation.ActionPreference]::Continue
            Trace-Execution "Get SMB file handles to '$using:shareRelativePath'." -Verbose:$verbose
            $smbOpenFiles = Get-SmbOpenFile | Where-Object ShareRelativePath -like "$using:shareRelativePath*"
            if ($smbOpenFiles) {
                Trace-Execution "Remove SMB file handles to $($smbOpenFiles.ShareRelativePath -join ', ')." -Verbose:$verbose
                $smbOpenFiles | Close-SmbOpenFile -Force -Verbose:$verbose
            }
        }
    }

    # If the mounted image was undergoing a DISM operation it's possible that the image is still mounted.
    # We can look for any such disks mounted from the SU1FileServer and clean them up.
    $mountedDisks = $null
    try
    {
        $mountedDisks = Get-Disk | Where-Object Location -match $Path
    }
    catch
    {
        Trace-Execution "Failed to get disk using location match. '$_' . Trying exact match."

        try
        {
            $mountedDisks = Get-Disk | Where-Object Location -eq $Path
        }
        catch
        {
            Trace-Execution "Failed to get disk using exact match. '$_'."
        }
    }

    try
    {
        if ($mountedDisks) {
            Trace-Execution "Found the following mounted disks:`r`n$($mountedDisks | Format-List Number, FriendlyName, Size, Location | Out-String)"
            foreach ($disk in $mountedDisks) {
                Dismount-VHD -DiskNumber $disk.Number
            }
        }
    }
    catch
    {
        Trace-Execution "Best-effort error during dismount share disks: $_"
    }

    if (Get-ChildItem "$Path.dism*" -Force) {
        Trace-Execution "Failed to dismount image gracefully, attempting to forcefully remove the file."
        $dismFilePath = Get-ChildItem "$Path.dism*" -Force
        Trace-Execution "Remove '$dismFilePath'."
        $dismFilePath | Remove-Item -Force
    }

    if ($DeleteImage -and (Test-Path $Path)) {
        Trace-Execution "Delete image '$Path'."
        Remove-Item -Path $Path -Force
    }
}


Export-ModuleMember -Function Add-GuestCluster
Export-ModuleMember -Function Add-IDnsConfiguration
Export-ModuleMember -Function Add-IPAddress
Export-ModuleMember -Function Add-LoadBalancerToNetworkAdapter
Export-ModuleMember -Function Add-NetworkAdapterToNetwork
Export-ModuleMember -Function Clear-ImageMount
Export-ModuleMember -Function ConnectPSSession
Export-ModuleMember -Function ConvertFrom-IPAddress
Export-ModuleMember -Function Convert-IPv4IntToString
Export-ModuleMember -Function Convert-IPv4StringToInt
Export-ModuleMember -Function ConvertTo-IPAddress
Export-ModuleMember -Function ConvertTo-MacAddress
Export-ModuleMember -Function ConvertTo-PrefixLength
Export-ModuleMember -Function ConvertTo-SubnetMask
Export-ModuleMember -Function Dismount-AllMountedImages
Export-ModuleMember -Function Dismount-MountedDisk
Export-ModuleMember -Function Expand-DeploymentArtifacts
Export-ModuleMember -Function Expand-NugetContent
Export-ModuleMember -Function Expand-UpdateContent
Export-ModuleMember -Function Get-BareMetalCredential
Export-ModuleMember -Function Get-BroadcastAddress
Export-ModuleMember -Function Get-ClusterShare
Export-ModuleMember -Function Get-ClusterShareNames
Export-ModuleMember -Function Get-DomainCredential
Export-ModuleMember -Function Get-DomainIPMapping
Export-ModuleMember -Function Get-ExecutionContextNodeName
Export-ModuleMember -Function Get-GatewayAddress
Export-ModuleMember -Function Get-HostUpdateShare
Export-ModuleMember -Function Get-InProgressUpdateVersion
Export-ModuleMember -Function Get-IsVirtualNetworkAlreadyConfigured
Export-ModuleMember -Function Get-JeaSession
Export-ModuleMember -Function Get-LocalCsvPathFromSharePath
Export-ModuleMember -Function Get-MacAddress
Export-ModuleMember -Function Get-MacAddressString
Export-ModuleMember -Function Get-MountedDisk
Export-ModuleMember -Function Get-MountedDiskDriveLetter
Export-ModuleMember -Function Get-NCAccessControlList
Export-ModuleMember -Function Get-NCCredential
Export-ModuleMember -Function Get-NCGateway
Export-ModuleMember -Function Get-NCGatewayPool
Export-ModuleMember -Function Get-NCIPPool
Export-ModuleMember -Function Get-NCLoadBalancer
Export-ModuleMember -Function Get-NCLoadbalancerManager
Export-ModuleMember -Function Get-NCLoadBalancerMux
Export-ModuleMember -Function Get-NCLogicalNetwork
Export-ModuleMember -Function Get-NCLogicalNetworkSubnet
Export-ModuleMember -Function Get-NCMACPool
Export-ModuleMember -Function Get-NCNetworkInterface
Export-ModuleMember -Function Get-NCNetworkInterfaceInstanceId
Export-ModuleMember -Function Get-NCNetworkInterfaceResourceId
Export-ModuleMember -Function Get-NCPublicIPAddress
Export-ModuleMember -Function Get-NCServer
Export-ModuleMember -Function Get-NCSwitch
Export-ModuleMember -Function Get-NCVirtualGateway
Export-ModuleMember -Function Get-NCVirtualNetwork
Export-ModuleMember -Function Get-NCVirtualServer
Export-ModuleMember -Function Get-NCVirtualSubnet
Export-ModuleMember -Function Get-NetworkAddress
Export-ModuleMember -Function Get-NetworkDefinitionForCluster
Export-ModuleMember -Function Get-NetworkDefinitions
Export-ModuleMember -Function Get-NetworkMap
Export-ModuleMember -Function Get-NetworkNameForCluster
Export-ModuleMember -Function Get-PortProfileId
Export-ModuleMember -Function Get-RangeEndAddress
Export-ModuleMember -Function Get-ScopeRange
Export-ModuleMember -Function Get-ServerResourceId
Export-ModuleMember -Function Get-SharePath
Export-ModuleMember -Function Get-SourceImageNames
Export-ModuleMember -Function Get-StorageEndpointName
Export-ModuleMember -Function Get-UsernameAndPassword
Export-ModuleMember -Function Initialize-ECESession
Export-ModuleMember -Function Invoke-ECECommand
Export-ModuleMember -Function Invoke-PSDirectOnVM
Export-ModuleMember -Function Invoke-ScriptBlockInParallel
Export-ModuleMember -Function Invoke-ScriptBlockWithRetries
Export-ModuleMember -Function Invoke-WebRequestWithRetries
Export-ModuleMember -Function IsIpPoolRangeValid
Export-ModuleMember -Function IsIpWithinPoolRange
Export-ModuleMember -Function JSONDelete
Export-ModuleMember -Function JSONGet
Export-ModuleMember -Function JSONPost
Export-ModuleMember -Function Mount-WindowsImageWithRetry
Export-ModuleMember -Function New-ACL
Export-ModuleMember -Function New-Credential
Export-ModuleMember -Function New-DeployDirect
Export-ModuleMember -Function New-LoadBalancerVIP
Export-ModuleMember -Function New-NCAccessControlList
Export-ModuleMember -Function New-NCAccessControlListRule
Export-ModuleMember -Function New-NCBgpPeer
Export-ModuleMember -Function New-NCBgpRouter
Export-ModuleMember -Function New-NCBgpRoutingPolicy
Export-ModuleMember -Function New-NCBgpRoutingPolicyMap
Export-ModuleMember -Function New-NCCredential
Export-ModuleMember -Function New-NCGateway
Export-ModuleMember -Function New-NCGatewayPool
Export-ModuleMember -Function New-NCGreTunnel
Export-ModuleMember -Function New-NCIPPool
Export-ModuleMember -Function New-NCIPSecTunnel
Export-ModuleMember -Function New-NCL3Tunnel
Export-ModuleMember -Function New-NCLoadBalancer
Export-ModuleMember -Function New-NCLoadBalancerBackendAddressPool
Export-ModuleMember -Function New-NCLoadBalancerFrontEndIPConfiguration
Export-ModuleMember -Function New-NCLoadBalancerLoadBalancingRule
Export-ModuleMember -Function New-NCLoadBalancerMux
Export-ModuleMember -Function New-NCLoadBalancerMuxPeerRouterConfiguration
Export-ModuleMember -Function New-NCLoadBalancerOutboundNatRule
Export-ModuleMember -Function New-NCLoadBalancerProbe
Export-ModuleMember -Function New-NCLoadBalancerProbeObject
Export-ModuleMember -Function New-NCLogicalNetwork
Export-ModuleMember -Function New-NCLogicalNetworkSubnet
Export-ModuleMember -Function New-NCLogicalSubnet
Export-ModuleMember -Function New-NCMACPool
Export-ModuleMember -Function New-NCNetworkInterface
Export-ModuleMember -Function New-NCPublicIPAddress
Export-ModuleMember -Function New-NCServer
Export-ModuleMember -Function New-NCServerConnection
Export-ModuleMember -Function New-NCServerNetworkInterface
Export-ModuleMember -Function New-NCSlbState
Export-ModuleMember -Function New-NCSwitch
Export-ModuleMember -Function New-NCSwitchPort
Export-ModuleMember -Function New-NCVirtualGateway
Export-ModuleMember -Function New-NCVirtualNetwork
Export-ModuleMember -Function New-NCVirtualServer
Export-ModuleMember -Function New-NCVirtualSubnet
Export-ModuleMember -Function New-NCVpnClientAddressSpace
Export-ModuleMember -Function New-PxeUnattendFile
Export-ModuleMember -Function New-VersionedImages
Export-ModuleMember -Function New-VhdFromWim
Export-ModuleMember -Function New-WimFromVhd
Export-ModuleMember -Function New-WinPEImage
Export-ModuleMember -Function NormalizeIPv4Subnet
Export-ModuleMember -Function PublishAndStartDscConfiguration
Export-ModuleMember -Function PublishAndStartDscForJea
Export-ModuleMember -Function Remove-LoadBalancerFromNetworkAdapter
Export-ModuleMember -Function Remove-NCAccessControlList
Export-ModuleMember -Function Remove-NCCredential
Export-ModuleMember -Function Remove-NCGateway
Export-ModuleMember -Function Remove-NCGatewayPool
Export-ModuleMember -Function Remove-NCIPPool
Export-ModuleMember -Function Remove-NCLoadBalancer
Export-ModuleMember -Function Remove-NCLoadBalancerMux
Export-ModuleMember -Function Remove-NCLogicalNetwork
Export-ModuleMember -Function Remove-NCMACPool
Export-ModuleMember -Function Remove-NCNetworkInterface
Export-ModuleMember -Function Remove-NCPublicIPAddress
Export-ModuleMember -Function Remove-NCServer
Export-ModuleMember -Function Remove-NCSwitch
Export-ModuleMember -Function Remove-NCVirtualGateway
Export-ModuleMember -Function Remove-NCVirtualNetwork
Export-ModuleMember -Function Remove-NCVirtualServer
Export-ModuleMember -Function Remove-PortProfileId
Export-ModuleMember -Function Set-MacAndIPAddress
Export-ModuleMember -Function Set-NCConnection
Export-ModuleMember -Function Set-NCLoadBalancerManager
Export-ModuleMember -Function Set-PortProfileId
Export-ModuleMember -Function Set-PortProfileIdHelper
Export-ModuleMember -Function Test-IPConnection
Export-ModuleMember -Function Test-NetworkMap
Export-ModuleMember -Function Test-PSSession
Export-ModuleMember -Function Test-SkipDriverInjection
Export-ModuleMember -Function Test-WSManConnection
Export-ModuleMember -Function Trace-Error
Export-ModuleMember -Function Trace-Execution
Export-ModuleMember -Function Trace-Warning
Export-ModuleMember -Function Update-BootWimFile
Export-ModuleMember -Function Update-JEAEndpointsForUpdate
Export-ModuleMember -Function Update-NCCredential
Export-ModuleMember -Function Update-NCServer
Export-ModuleMember -Function Update-NCVirtualServer
Export-ModuleMember -Function Wait-Result
Export-ModuleMember -Function Wait-VirtualNetwork

# SIG # Begin signature block
# MIIoKgYJKoZIhvcNAQcCoIIoGzCCKBcCAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBW7frEEy9LDFln
# B2FNjd9HOu0VLVpEEoWhT/Q9gxCqrqCCDXYwggX0MIID3KADAgECAhMzAAADrzBA
# DkyjTQVBAAAAAAOvMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD
# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p
# bmcgUENBIDIwMTEwHhcNMjMxMTE2MTkwOTAwWhcNMjQxMTE0MTkwOTAwWjB0MQsw
# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u
# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
# AQDOS8s1ra6f0YGtg0OhEaQa/t3Q+q1MEHhWJhqQVuO5amYXQpy8MDPNoJYk+FWA
# hePP5LxwcSge5aen+f5Q6WNPd6EDxGzotvVpNi5ve0H97S3F7C/axDfKxyNh21MG
# 0W8Sb0vxi/vorcLHOL9i+t2D6yvvDzLlEefUCbQV/zGCBjXGlYJcUj6RAzXyeNAN
# xSpKXAGd7Fh+ocGHPPphcD9LQTOJgG7Y7aYztHqBLJiQQ4eAgZNU4ac6+8LnEGAL
# go1ydC5BJEuJQjYKbNTy959HrKSu7LO3Ws0w8jw6pYdC1IMpdTkk2puTgY2PDNzB
# tLM4evG7FYer3WX+8t1UMYNTAgMBAAGjggFzMIIBbzAfBgNVHSUEGDAWBgorBgEE
# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQURxxxNPIEPGSO8kqz+bgCAQWGXsEw
# RQYDVR0RBD4wPKQ6MDgxHjAcBgNVBAsTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEW
# MBQGA1UEBRMNMjMwMDEyKzUwMTgyNjAfBgNVHSMEGDAWgBRIbmTlUAXTgqoXNzci
# tW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vd3d3Lm1pY3Jvc29mdC5j
# b20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3JsMGEG
# CCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQu
# Y29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3J0
# MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIBAISxFt/zR2frTFPB45Yd
# mhZpB2nNJoOoi+qlgcTlnO4QwlYN1w/vYwbDy/oFJolD5r6FMJd0RGcgEM8q9TgQ
# 2OC7gQEmhweVJ7yuKJlQBH7P7Pg5RiqgV3cSonJ+OM4kFHbP3gPLiyzssSQdRuPY
# 1mIWoGg9i7Y4ZC8ST7WhpSyc0pns2XsUe1XsIjaUcGu7zd7gg97eCUiLRdVklPmp
# XobH9CEAWakRUGNICYN2AgjhRTC4j3KJfqMkU04R6Toyh4/Toswm1uoDcGr5laYn
# TfcX3u5WnJqJLhuPe8Uj9kGAOcyo0O1mNwDa+LhFEzB6CB32+wfJMumfr6degvLT
# e8x55urQLeTjimBQgS49BSUkhFN7ois3cZyNpnrMca5AZaC7pLI72vuqSsSlLalG
# OcZmPHZGYJqZ0BacN274OZ80Q8B11iNokns9Od348bMb5Z4fihxaBWebl8kWEi2O
# PvQImOAeq3nt7UWJBzJYLAGEpfasaA3ZQgIcEXdD+uwo6ymMzDY6UamFOfYqYWXk
# ntxDGu7ngD2ugKUuccYKJJRiiz+LAUcj90BVcSHRLQop9N8zoALr/1sJuwPrVAtx
# HNEgSW+AKBqIxYWM4Ev32l6agSUAezLMbq5f3d8x9qzT031jMDT+sUAoCw0M5wVt
# CUQcqINPuYjbS1WgJyZIiEkBMIIHejCCBWKgAwIBAgIKYQ6Q0gAAAAAAAzANBgkq
# hkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x
# EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv
# bjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5
# IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEwOTA5WjB+MQswCQYDVQQG
# EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG
# A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYDVQQDEx9NaWNyb3NvZnQg
# Q29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
# CgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+laUKq4BjgaBEm6f8MMHt03
# a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc6Whe0t+bU7IKLMOv2akr
# rnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4Ddato88tt8zpcoRb0Rrrg
# OGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+lD3v++MrWhAfTVYoonpy
# 4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nkkDstrjNYxbc+/jLTswM9
# sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6A4aN91/w0FK/jJSHvMAh
# dCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmdX4jiJV3TIUs+UsS1Vz8k
# A/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL5zmhD+kjSbwYuER8ReTB
# w3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zdsGbiwZeBe+3W7UvnSSmn
# Eyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3T8HhhUSJxAlMxdSlQy90
# lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS4NaIjAsCAwEAAaOCAe0w
# ggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRIbmTlUAXTgqoXNzcitW2o
# ynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYD
# VR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBDuRQFTuHqp8cx0SOJNDBa
# BgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2Ny
# bC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3JsMF4GCCsG
# AQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3dy5taWNyb3NvZnQuY29t
# L3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3J0MIGfBgNV
# HSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEFBQcCARYzaHR0cDovL3d3
# dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1hcnljcHMuaHRtMEAGCCsG
# AQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkAYwB5AF8AcwB0AGEAdABl
# AG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn8oalmOBUeRou09h0ZyKb
# C5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7v0epo/Np22O/IjWll11l
# hJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0bpdS1HXeUOeLpZMlEPXh6
# I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/KmtYSWMfCWluWpiW5IP0
# wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvyCInWH8MyGOLwxS3OW560
# STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBpmLJZiWhub6e3dMNABQam
# ASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJihsMdYzaXht/a8/jyFqGa
# J+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYbBL7fQccOKO7eZS/sl/ah
# XJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbSoqKfenoi+kiVH6v7RyOA
# 9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sLgOppO6/8MO0ETI7f33Vt
# Y5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtXcVZOSEXAQsmbdlsKgEhr
# /Xmfwb1tbWrJUnMTDXpQzTGCGgowghoGAgEBMIGVMH4xCzAJBgNVBAYTAlVTMRMw
# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
# aWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNp
# Z25pbmcgUENBIDIwMTECEzMAAAOvMEAOTKNNBUEAAAAAA68wDQYJYIZIAWUDBAIB
# BQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEO
# MAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIAbqGo6n2JnnkcMzo9PLqhAP
# L3WelPHJNNUXriYNKJpJMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8A
# cwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEB
# BQAEggEAxxAQWVsPbn5XhBXVCUsjRW3Mm531K59ua3NM2dbURPCnIn5nSBWLnj4N
# YGGg5iOONQ1wzDId1fdESuh+vz3fTHV395zv8ihMPU6vVD/d9VkP7w0yELJU/xYi
# EVLGX+ah5g4DF4LamMCbvIy+FdfHOuSw3rlN/mdvcyOmtU8opFimj9y92XqvH9HZ
# 2H91dbEQu1vo0Nc5bHKxlfGEzab0h9681210P8/cyw+rcD0N3b6ubEZaQFVd0dLM
# XD1RBZhlWeONYncSiLosCUX/fx9lUBjJGDd+37OUJfT52A+B+A+HFk0cbznkB702
# hVkKjqc6meXJpYqMiAenHciUBzyCJ6GCF5QwgheQBgorBgEEAYI3AwMBMYIXgDCC
# F3wGCSqGSIb3DQEHAqCCF20wghdpAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFSBgsq
# hkiG9w0BCRABBKCCAUEEggE9MIIBOQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFl
# AwQCAQUABCBWKfWFNKcgy+CyKxBFqMovFYnfDkgt4ZLd+FmcwTuc/QIGZr40CZLi
# GBMyMDI0MDgxOTE3Mjc1OC4xODZaMASAAgH0oIHRpIHOMIHLMQswCQYDVQQGEwJV
# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE
# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1l
# cmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046RjAwMi0w
# NUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2Wg
# ghHqMIIHIDCCBQigAwIBAgITMwAAAfI+MtdkrHCRlAABAAAB8jANBgkqhkiG9w0B
# AQsFADB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYD
# VQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDAeFw0yMzEyMDYxODQ1
# NThaFw0yNTAzMDUxODQ1NThaMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz
# aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv
# cnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25z
# MScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046RjAwMi0wNUUwLUQ5NDcxJTAjBgNV
# BAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEB
# AQUAA4ICDwAwggIKAoICAQC85fPLFwppYgxwYxkSEeYvQBtnYJTtKKj2FKxzHx0f
# gV6XgIIrmCWmpKl9IOzvOfJ/k6iP0RnoRo5F89Ad29edzGdlWbCj1Qyx5HUHNY8y
# u9ElJOmdgeuNvTK4RW4wu9iB5/z2SeCuYqyX/v8z6Ppv29h1ttNWsSc/KPOeuhzS
# AXqkA265BSFT5kykxvzB0LxoxS6oWoXWK6wx172NRJRYcINfXDhURvUfD70jioE9
# 2rW/OgjcOKxZkfQxLlwaFSrSnGs7XhMrp9TsUgmwsycTEOBdGVmf1HCD7WOaz5EE
# cQyIS2BpRYYwsPMbB63uHiJ158qNh1SJXuoL5wGDu/bZUzN+BzcLj96ixC7wJGQM
# BixWH9d++V8bl10RYdXDZlljRAvS6iFwNzrahu4DrYb7b8M7vvwhEL0xCOvb7WFM
# sstscXfkdE5g+NSacphgFfcoftQ5qPD2PNVmrG38DmHDoYhgj9uqPLP7vnoXf7j6
# +LW8Von158D0Wrmk7CumucQTiHRyepEaVDnnA2GkiJoeh/r3fShL6CHgPoTB7oYU
# /d6JOncRioDYqqRfV2wlpKVO8b+VYHL8hn11JRFx6p69mL8BRtSZ6dG/GFEVE+fV
# mgxYfICUrpghyQlETJPITEBS15IsaUuW0GvXlLSofGf2t5DAoDkuKCbC+3VdPmlY
# VQIDAQABo4IBSTCCAUUwHQYDVR0OBBYEFJVbhwAm6tAxBM5cH8Bg0+Y64oZ5MB8G
# A1UdIwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCG
# Tmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUy
# MFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4w
# XAYIKwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2Vy
# dHMvTWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwG
# A1UdEwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQD
# AgeAMA0GCSqGSIb3DQEBCwUAA4ICAQA9S6eO4HsfB00XpOgPabcN3QZeyipgilcQ
# SDZ8g6VCv9FVHzdSq9XpAsljZSKNWSClhJEz5Oo3Um/taPnobF+8CkAdkcLQhLdk
# Shfr91kzy9vDPrOmlCA2FQ9jVhFaat2QM33z1p+GCP5tuvirFaUWzUWVDFOpo/O5
# zDpzoPYtTr0cFg3uXaRLT54UQ3Y4uPYXqn6wunZtUQRMiJMzxpUlvdfWGUtCvnW3
# eDBikDkix1XE98VcYIz2+5fdcvrHVeUarGXy4LRtwzmwpsCtUh7tR6whCrVYkb6F
# udBdWM7TVvji7pGgfjesgnASaD/ChLux66PGwaIaF+xLzk0bNxsAj0uhd6QdWr6T
# T39m/SNZ1/UXU7kzEod0vAY3mIn8X5A4I+9/e1nBNpURJ6YiDKQd5YVgxsuZCWv4
# Qwb0mXhHIe9CubfSqZjvDawf2I229N3LstDJUSr1vGFB8iQ5W8ZLM5PwT8vtsKEB
# wHEYmwsuWmsxkimIF5BQbSzg9wz1O6jdWTxGG0OUt1cXWOMJUJzyEH4WSKZHOx53
# qcAvD9h0U6jEF2fuBjtJ/QDrWbb4urvAfrvqNn9lH7gVPplqNPDIvQ8DkZ3lvbQs
# Yqlz617e76ga7SY0w71+QP165CPdzUY36et2Sm4pvspEK8hllq3IYcyX0v897+X9
# YeecM1Pb1jCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZI
# hvcNAQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw
# DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x
# MjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAy
# MDEwMB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMC
# VVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNV
# BAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRp
# bWUtU3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
# AQDk4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25Phdg
# M/9cT8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPF
# dvWGUNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6
# GnszrYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBp
# Dco2LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50Zu
# yjLVwIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3E
# XzTdEonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0
# lBw0gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1q
# GFphAXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ
# +QuJYfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PA
# PBXbGjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkw
# EgYJKwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxG
# NSnPEP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARV
# MFMwUQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWlj
# cm9zb2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAK
# BggrBgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMC
# AYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvX
# zpoYxDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20v
# cGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYI
# KwYBBQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5j
# b20vcGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG
# 9w0BAQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0x
# M7U518JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmC
# VgADsAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449
# xvNo32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wM
# nosZiefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDS
# PeZKPmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2d
# Y3RILLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxn
# GSgkujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+Crvs
# QWY9af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokL
# jzbaukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL
# 6Xu/OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNN
# MIICNQIBATCB+aGB0aSBzjCByzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp
# bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw
# b3JhdGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEn
# MCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOkYwMDItMDVFMC1EOTQ3MSUwIwYDVQQD
# ExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQBr
# i943cFLH2TfQEfB05SLICg74CKCBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYD
# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1w
# IFBDQSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA6m34NDAiGA8yMDI0MDgxOTE2NTgy
# OFoYDzIwMjQwODIwMTY1ODI4WjB0MDoGCisGAQQBhFkKBAExLDAqMAoCBQDqbfg0
# AgEAMAcCAQACAhJoMAcCAQACAhMsMAoCBQDqb0m0AgEAMDYGCisGAQQBhFkKBAIx
# KDAmMAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJKoZI
# hvcNAQELBQADggEBAHCwrfax3HH2NKo589X13eUQ69Zjg6O2xgwymXLGuyN+jy3l
# jk58KGOlSH7CaFVZJcVGAYntXftClaK/gZ6noyOCe5DtIoDTC5MuLsbID/xrpnaq
# sFT3EtnviirCSAL7vbUgm9jGtIuCi/5OD1Eib6Lpd5+AnT/sBUv5X6gj1ghWLmK+
# a1bl35c+tyaYMjLtcFFq8J9vEw/xBqy3S/Jf3OPkuDwHHJWUTUk8SuFIoD4LzAJZ
# pKu1eXLclRVr5rTrg2aSrm7OqbNuulouM+nU+/KpPrSSX8dGY/UIsCaJcGTDcG7S
# RMg6AL6TyBeYPkIjlNYbitTtDvRYSI7sKxobWGoxggQNMIIECQIBATCBkzB8MQsw
# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u
# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNy
# b3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAfI+MtdkrHCRlAABAAAB8jAN
# BglghkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8G
# CSqGSIb3DQEJBDEiBCAtKXbNqdyhdL3e6uWY4oJ5iALqR3FLhEGY5UuhW8ax9DCB
# +gYLKoZIhvcNAQkQAi8xgeowgecwgeQwgb0EIPjaPh0uMVJc04+Y4Ru5BUUbHE4s
# uZ6nRHSUu0XXSkNEMIGYMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldh
# c2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBD
# b3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIw
# MTACEzMAAAHyPjLXZKxwkZQAAQAAAfIwIgQgiRoFP7PJ3AphTfqnteF/aePrCySp
# l/boRJ69yS4if10wDQYJKoZIhvcNAQELBQAEggIAj2QWpebBhQWUBqlxZrzQssAh
# bmVr4wMu0jAnLlR/TwRQtubI8+PolFzwQf02qa4MHw08BlXnQM25vixfT5BylBWh
# 1ApMT67Il4BlYDH52KPyAQumDJTJKkAUKPEfYkfz+UXDpjiG6HPJQqgs7W3AxnsA
# C6scGK9LA6IclIZj4C7oZyJWt3OVhwH4F9246G1NTeK2iHQMAfGU8lw3vTUxDp14
# aHArxlvGnM3Vcqq6CSD05omZkfAe2x4iOK2xT0LMDYeWBi4M1Mdx2p4qFfQCIkhX
# cYFB42OdACzW532f4TpWNprJFhsaX4i2vVWWXt2kcjyEoT2nBZ4Ll9KrM5uk42+O
# Q274agAWrGAMddsRQk9ogE0BhT9wOm9oINQRAs/ngE6LC7HWsAOCn+0y0ao0Oq9L
# pILC8wpXsjhnLHb9Z13gLbfn1YF7xapa1rvJ4VNeJKXEAt30QxgVOCFMW9jbg1qq
# JSfLAeIa25huXD8y4SRkSN2zfdaXRQ5XaKH0kPRQMXlJOUmRgLhy8PtPFvJmUQa1
# 28v3JsRACn13E+00RmOC7a+GlhcB5kAXU5Nb/R8IqIG2xhgS74v5++4O9RgUwUDr
# 26iEJCxQzyDwKAeXtjWGcQZNGQQKWcBT1o3INi1cnq4Mi+edQbegcEDqOSOXTAhb
# sCwAyzvZVUaXnwXeQuQ=
# SIG # End signature block