From a1627ac743289e768b138f1a60753a62e0869cc4 Mon Sep 17 00:00:00 2001
From: srdusr <trevorgray@srdusr.com>
Date: Wed, 24 Sep 2025 05:25:39 +0200
Subject: Update/Overhaul

---
 unix/virt/dos.sh | 998 -------------------------------------------------------
 1 file changed, 998 deletions(-)
 delete mode 100755 unix/virt/dos.sh

(limited to 'unix/virt/dos.sh')

diff --git a/unix/virt/dos.sh b/unix/virt/dos.sh
deleted file mode 100755
index 0b50c4b..0000000
--- a/unix/virt/dos.sh
+++ /dev/null
@@ -1,998 +0,0 @@
-#!/usr/bin/env bash
-
-# Set variables
-HOST_DIR="virt"
-VM_NAME="dos"
-VM_SIZE="80G" # Disk size in GB
-VM_RAM="8G"   # RAM size
-VM_CPU="6"    # Number of virtual CPUs
-CORES=$((VM_CPU / 2))
-THREADS_PER_CORE=2
-SOCKETS=1
-
-VM_DIR="$HOST_DIR/machines"
-IMAGE_DIR="$HOST_DIR/images"
-WIN_ISO_DIR="${IMAGE_DIR}/${VM_NAME}" # Directory for Windows ISO
-VM_DIR="$WIN_ISO_DIR"
-SOCKET_DIR="$VM_DIR"
-SHARED_DIR="${HOST_DIR}/shared"
-FIRMWARE_DIR="${HOST_DIR}/firmware"
-TPM_DIR="$WIN_ISO_DIR"
-TPM_SOCKET="${WIN_ISO_DIR}/${VM_NAME}.swtpm-sock"
-GUEST_PORT=22
-QCOW2_FILE="${VM_DIR}/${VM_NAME}.qcow2"
-RAW_FILE="${VM_DIR}/${VM_NAME}.raw"
-
-# Anti-detection: Generate realistic hardware identifiers
-REAL_MAC="00:1A:2B:3C:4D:5E"  # Example Dell MAC - replace with your choice
-REAL_SERIAL="$(openssl rand -hex 8 | tr '[:lower:]' '[:upper:]')"
-REAL_UUID="$(uuidgen)"
-REAL_VENDOR="Dell Inc."
-REAL_PRODUCT="OptiPlex 7090"
-REAL_VERSION="01"
-REAL_FAMILY="OptiPlex"
-
-# Try to find an available host port starting from 22220
-HOST_PORT_START=22220
-HOST_PORT_END=22300
-
-for ((port = HOST_PORT_START; port <= HOST_PORT_END; port++)); do
-    if ! ss -tuln | grep -q ":$port\b"; then
-        HOST_PORT=$port
-        echo "Using available port: $HOST_PORT"
-        break
-    fi
-done
-
-if [[ $port -gt $HOST_PORT_END ]]; then
-    echo "Error: No available ports found between $HOST_PORT_START and $HOST_PORT_END" >&2
-    exit 1
-fi
-
-# Set SMP configuration
-SMP_CONFIG="cores=$CORES,threads=$THREADS_PER_CORE,sockets=$SOCKETS"
-
-# Create necessary directories
-mkdir -p "${HOME}/${HOST_DIR}"
-mkdir -p "$IMAGE_DIR" "$SHARED_DIR" "$FIRMWARE_DIR"
-mkdir -p "$WIN_ISO_DIR" "$VM_DIR"
-mkdir -p "${WIN_ISO_DIR}/unattended"
-
-# Define ISO paths and URLs
-ISO_VIRTIO="${WIN_ISO_DIR}/virtio-win.iso"
-ISO_UNATTENDED="${WIN_ISO_DIR}/unattended.iso"
-
-# Find Windows ISO with flexible pattern matching
-find_windows_iso() {
-    # Check if directory exists
-    if [[ ! -d "$WIN_ISO_DIR" ]]; then
-        mkdir -p "$WIN_ISO_DIR"
-    fi
-
-    # Try to find any Windows ISO using case-insensitive patterns
-    local found_iso
-    found_iso=$(find "$WIN_ISO_DIR" -maxdepth 1 -type f \( \
-        -iname "*win11*.iso" -o \
-        -iname "*win*11*.iso" -o \
-        -iname "Win*.iso" -o \
-        -iname "Win11*.iso" -o \
-        -iname "Win*11*.iso" -o \
-        -iname "*windows*11*.iso" -o \
-        -iname "*windows11*.iso" \
-        \) -exec stat --format="%Y %n" {} \; | sort -n | tail -n 1 | cut -d' ' -f2-)
-
-    if [[ -n "$found_iso" && -f "$found_iso" ]]; then
-        echo "$found_iso"
-        return 0
-    fi
-
-    return 1
-}
-
-# Define download URLs
-VIRTIO_ISO_URL="https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/stable-virtio/virtio-win.iso"
-
-# Print colored messages
-print_info() { echo -e "\033[1;34m[INFO]\033[0m $1" >&2; }
-print_success() { echo -e "\033[1;32m[SUCCESS]\033[0m $1" >&2; }
-print_warning() { echo -e "\033[1;33m[WARNING]\033[0m $1" >&2; }
-print_error() { echo -e "\033[1;31m[ERROR]\033[0m $1" >&2; }
-
-# Helper: verify file integrity
-verify_file() {
-    local file="$1"
-    local expected_sha256="$2"
-
-    if [[ ! -f "$file" ]]; then
-        return 1
-    fi
-
-    if [[ -n "$expected_sha256" ]]; then
-        local actual_sha256
-        actual_sha256=$(sha256sum "$file" | cut -d' ' -f1)
-        if [[ "$actual_sha256" != "$expected_sha256" ]]; then
-            print_error "File integrity check failed for $file"
-            return 1
-        fi
-    fi
-
-    return 0
-}
-
-# Helper: download file with verification
-download_file() {
-    local url="$1"
-    local dest="$2"
-    local expected_sha256="$3"
-    local allow_failure="$4"
-
-    # Check if file exists and is valid
-    if [[ -f "$dest" ]]; then
-        if verify_file "$dest" "$expected_sha256"; then
-            print_info "File $dest already exists and verified."
-            return 0
-        else
-            print_warning "File $dest exists but failed verification. Redownloading..."
-            rm -f "$dest"
-        fi
-    fi
-
-    print_info "Downloading $url..."
-    if ! curl -fL --progress-bar -o "$dest" "$url"; then
-        print_error "Failed to download $url."
-        if [[ "$allow_failure" != "true" ]]; then
-            return 1
-        fi
-    else
-        # Verify downloaded file
-        if ! verify_file "$dest" "$expected_sha256"; then
-            print_error "Downloaded file failed verification"
-            rm -f "$dest"
-            return 1
-        fi
-        print_success "Successfully downloaded and verified $dest"
-    fi
-
-    return 0
-}
-
-# Handle curl errors
-handle_curl_error() {
-    local exit_code=$1
-    case $exit_code in
-        6) print_error "Couldn't resolve host" ;;
-        7) print_error "Failed to connect to host" ;;
-        22) print_error "HTTP page not retrieved (404, etc.)" ;;
-        28) print_error "Operation timeout" ;;
-        *) print_error "Curl failed with exit code $exit_code" ;;
-    esac
-}
-
-# Download Windows 11 ISO using Microsoft's API
-download_windows_iso() {
-    local windows_version="11"               # Default to Windows 11
-    local language="English (United States)" # Default language
-
-    # Parse arguments if provided
-    if [[ -n "$1" ]]; then
-        windows_version="$1"
-    fi
-
-    print_info "Attempting to download Windows $windows_version ISO from Microsoft..."
-
-    # Set required variables
-    local user_agent="Mozilla/5.0 (X11; Linux x86_64; rv:100.0) Gecko/20100101 Firefox/100.0"
-    local session_id="$(uuidgen)"
-    local profile="606624d44113"
-    local url="https://www.microsoft.com/en-us/software-download/windows$windows_version"
-
-    # Add ISO to URL for Windows 10
-    case "$windows_version" in
-    10) url="${url}ISO" ;;
-    esac
-
-    # Step 1: Get download page HTML
-    print_info "Fetching download page: $url"
-    local iso_download_page_html
-    iso_download_page_html="$(curl --disable --silent --user-agent "$user_agent" --header "Accept:" --max-filesize 1M --fail --proto =https --tlsv1.2 --http1.1 -- "$url")" || {
-        handle_curl_error $?
-        print_error "Failed to fetch the download page. Please download Windows $windows_version ISO manually from $url"
-        return 1
-    }
-
-    # Step 2: Extract Product Edition ID
-    print_info "Getting Product Edition ID..."
-    local product_edition_id
-    product_edition_id="$(echo "$iso_download_page_html" | grep -Eo '<option value="[0-9]+">Windows' | cut -d '"' -f 2 | head -n 1 | tr -cd '0-9' | head -c 16)"
-
-    if [[ -z "$product_edition_id" ]]; then
-        print_error "Failed to extract product edition ID."
-        print_error "Please download Windows $windows_version ISO manually from $url"
-        return 1
-    fi
-
-    print_success "Product Edition ID: $product_edition_id"
-
-    # Step 3: Register session ID
-    print_info "Registering session ID: $session_id"
-    curl --disable --silent --output /dev/null --user-agent "$user_agent" \
-        --header "Accept:" --max-filesize 100K --fail --proto =https --tlsv1.2 \
-        --http1.1 -- "https://vlscppe.microsoft.com/tags?org_id=y6jn8c31&session_id=$session_id" || {
-        print_error "Failed to register session ID."
-        return 1
-    }
-
-    # Step 4: Get language SKU ID
-    print_info "Getting language SKU ID..."
-    local language_skuid_table_json
-    language_skuid_table_json="$(curl --disable -s --fail --max-filesize 100K --proto =https --tlsv1.2 --http1.1 \
-        "https://www.microsoft.com/software-download-connector/api/getskuinformationbyproductedition?profile=${profile}&ProductEditionId=${product_edition_id}&SKU=undefined&friendlyFileName=undefined&Locale=en-US&sessionID=${session_id}")" || {
-        handle_curl_error $?
-        print_error "Failed to get language SKU information."
-        return 1
-    }
-
-    # Extract SKU ID for selected language
-    local sku_id
-
-    # Try with jq if available (more reliable)
-    if command -v jq >/dev/null 2>&1; then
-        sku_id="$(echo "$language_skuid_table_json" | jq -r '.Skus[] | select(.LocalizedLanguage=="'"$language"'" or .Language=="'"$language"'").Id')"
-    else
-        # Fallback to grep/cut if jq not available
-        sku_id="$(echo "$language_skuid_table_json" | grep -o '"Id":"[^"]*","Language":"'"$language"'"' | cut -d'"' -f4)"
-
-        if [[ -z "$sku_id" ]]; then
-            # Try alternative extraction method
-            sku_id="$(echo "$language_skuid_table_json" | grep -o '"LocalizedLanguage":"'"$language"'","Id":"[^"]*"' | cut -d'"' -f6)"
-        fi
-    fi
-
-    if [[ -z "$sku_id" ]]; then
-        print_error "Failed to extract SKU ID for $language."
-        return 1
-    fi
-
-    print_success "SKU ID: $sku_id"
-
-    # Step 5: Get ISO download link
-    print_info "Getting ISO download link..."
-    local iso_download_link_json
-    iso_download_link_json="$(curl --disable -s --fail --referer "$url" \
-        "https://www.microsoft.com/software-download-connector/api/GetProductDownloadLinksBySku?profile=${profile}&productEditionId=undefined&SKU=${sku_id}&friendlyFileName=undefined&Locale=en-US&sessionID=${session_id}")"
-
-    local failed=0
-
-    if [[ -z "$iso_download_link_json" ]]; then
-        print_error "Microsoft servers gave an empty response to the download request."
-        failed=1
-    fi
-
-    if echo "$iso_download_link_json" | grep -q "Sentinel marked this request as rejected."; then
-        print_error "Microsoft blocked the automated download request based on your IP address."
-        failed=1
-    fi
-
-    if [[ "$failed" -eq 1 ]]; then
-        print_warning "Please manually download the Windows $windows_version ISO using a web browser from: $url"
-        print_warning "Save the downloaded ISO to: $WIN_ISO_DIR"
-        return 1
-    fi
-
-    # Extract 64-bit ISO download URL
-    local iso_download_link
-
-    # Try with jq if available
-    if command -v jq >/dev/null 2>&1; then
-        iso_download_link="$(echo "$iso_download_link_json" | jq -r '.ProductDownloadOptions[].Uri' | grep x64 | head -n 1)"
-    else
-        # Fallback to grep/cut if jq not available
-        iso_download_link="$(echo "$iso_download_link_json" | grep -o '"Uri":"[^"]*x64[^"]*"' | cut -d'"' -f4 | head -n 1)"
-    fi
-
-    if [[ -z "$iso_download_link" ]]; then
-        print_error "Failed to extract the download link from Microsoft's response."
-        print_warning "Manually download the Windows $windows_version ISO using a web browser from: $url"
-        return 1
-    fi
-
-    print_success "Got download link: ${iso_download_link%%\?*}"
-
-    # Extract filename from URL
-    local file_name="$(echo "$iso_download_link" | cut -d'?' -f1 | rev | cut -d'/' -f1 | rev)"
-
-    # If filename couldn't be extracted, use default
-    if [[ -z "$file_name" || "$file_name" == "$iso_download_link" ]]; then
-        file_name="windows-$windows_version.iso"
-    fi
-
-    # Step 6: Download the ISO
-    print_info "Downloading Windows $windows_version ISO to $WIN_ISO_DIR/$file_name. This may take a while..."
-
-    # Direct curl download
-    curl --disable --progress-bar --fail --location --proto '=https' --tlsv1.2 --http1.1 \
-        --retry 3 --retry-delay 3 --connect-timeout 30 \
-        --output "$WIN_ISO_DIR/$file_name" "$iso_download_link" || {
-        handle_curl_error $?
-        return 1
-    }
-
-    if [[ $? -ne 0 ]]; then
-        print_error "Failed to download the Windows $windows_version ISO."
-        return 1
-    fi
-
-    print_success "Successfully downloaded Windows $windows_version ISO to $WIN_ISO_DIR/$file_name"
-
-    # Return the downloaded filename so calling code can use it
-    echo "$file_name"
-    return 0
-}
-
-# Create unattended installation ISO with proper Windows 11 bypass
-create_unattended_iso() {
-    print_info "Creating unattended installation ISO..."
-
-    # Create enhanced autounattend.xml with Windows 11 TPM/Secure Boot bypass
-    if [ ! -f "$WIN_ISO_DIR/unattended/autounattend.xml" ]; then
-        print_info "Creating enhanced autounattend.xml with Windows 11 bypass..."
-        mkdir -p "$WIN_ISO_DIR/unattended"
-        cat >"$WIN_ISO_DIR/unattended/autounattend.xml" <<'EOF'
-<?xml version="1.0" encoding="utf-8"?>
-<unattend xmlns="urn:schemas-microsoft-com:unattend">
-    <settings pass="windowsPE">
-        <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
-            <SetupUILanguage>
-                <UILanguage>en-US</UILanguage>
-            </SetupUILanguage>
-            <InputLocale>en-US</InputLocale>
-            <SystemLocale>en-US</SystemLocale>
-            <UILanguage>en-US</UILanguage>
-            <UILanguageFallback>en-US</UILanguageFallback>
-            <UserLocale>en-US</UserLocale>
-        </component>
-        <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
-            <DiskConfiguration>
-                <Disk wcm:action="add">
-                    <CreatePartitions>
-                        <CreatePartition wcm:action="add">
-                            <Order>1</Order>
-                            <Type>Primary</Type>
-                            <Size>100</Size>
-                        </CreatePartition>
-                        <CreatePartition wcm:action="add">
-                            <Order>2</Order>
-                            <Type>EFI</Type>
-                            <Size>100</Size>
-                        </CreatePartition>
-                        <CreatePartition wcm:action="add">
-                            <Order>3</Order>
-                            <Type>MSR</Type>
-                            <Size>16</Size>
-                        </CreatePartition>
-                        <CreatePartition wcm:action="add">
-                            <Order>4</Order>
-                            <Type>Primary</Type>
-                            <Extend>true</Extend>
-                        </CreatePartition>
-                    </CreatePartitions>
-                    <ModifyPartitions>
-                        <ModifyPartition wcm:action="add">
-                            <Order>1</Order>
-                            <PartitionID>1</PartitionID>
-                            <Label>WINRE</Label>
-                            <Format>NTFS</Format>
-                            <TypeID>DE94BBA4-06D1-4D40-A16A-BFD50179D6AC</TypeID>
-                        </ModifyPartition>
-                        <ModifyPartition wcm:action="add">
-                            <Order>2</Order>
-                            <PartitionID>2</PartitionID>
-                            <Label>System</Label>
-                            <Format>FAT32</Format>
-                        </ModifyPartition>
-                        <ModifyPartition wcm:action="add">
-                            <Order>3</Order>
-                            <PartitionID>3</PartitionID>
-                        </ModifyPartition>
-                        <ModifyPartition wcm:action="add">
-                            <Order>4</Order>
-                            <PartitionID>4</PartitionID>
-                            <Label>Windows</Label>
-                            <Format>NTFS</Format>
-                        </ModifyPartition>
-                    </ModifyPartitions>
-                    <DiskID>0</DiskID>
-                    <WillWipeDisk>true</WillWipeDisk>
-                </Disk>
-            </DiskConfiguration>
-            <ImageInstall>
-                <OSImage>
-                    <InstallTo>
-                        <DiskID>0</DiskID>
-                        <PartitionID>4</PartitionID>
-                    </InstallTo>
-                    <InstallToAvailablePartition>false</InstallToAvailablePartition>
-                    <WillShowUI>OnError</WillShowUI>
-                    <InstallFrom>
-                        <MetaData wcm:action="add">
-                            <Key>/IMAGE/INDEX</Key>
-                            <Value>6</Value>
-                        </MetaData>
-                    </InstallFrom>
-                </OSImage>
-            </ImageInstall>
-            <UserData>
-                <AcceptEula>true</AcceptEula>
-                <FullName>Windows User</FullName>
-                <Organization>Windows</Organization>
-                <ProductKey>
-                    <WillShowUI>Never</WillShowUI>
-                </ProductKey>
-            </UserData>
-            <!-- Windows 11 Requirements Bypass -->
-            <RunSynchronous>
-                <RunSynchronousCommand wcm:action="add">
-                    <Order>1</Order>
-                    <Path>reg add HKLM\SYSTEM\Setup\LabConfig /v BypassTPMCheck /t REG_DWORD /d 1 /f</Path>
-                </RunSynchronousCommand>
-                <RunSynchronousCommand wcm:action="add">
-                    <Order>2</Order>
-                    <Path>reg add HKLM\SYSTEM\Setup\LabConfig /v BypassSecureBootCheck /t REG_DWORD /d 1 /f</Path>
-                </RunSynchronousCommand>
-                <RunSynchronousCommand wcm:action="add">
-                    <Order>3</Order>
-                    <Path>reg add HKLM\SYSTEM\Setup\LabConfig /v BypassRAMCheck /t REG_DWORD /d 1 /f</Path>
-                </RunSynchronousCommand>
-                <RunSynchronousCommand wcm:action="add">
-                    <Order>4</Order>
-                    <Path>reg add HKLM\SYSTEM\Setup\LabConfig /v BypassStorageCheck /t REG_DWORD /d 1 /f</Path>
-                </RunSynchronousCommand>
-                <RunSynchronousCommand wcm:action="add">
-                    <Order>5</Order>
-                    <Path>reg add HKLM\SYSTEM\Setup\LabConfig /v BypassCPUCheck /t REG_DWORD /d 1 /f</Path>
-                </RunSynchronousCommand>
-            </RunSynchronous>
-            <EnableFirewall>false</EnableFirewall>
-            <EnableNetwork>true</EnableNetwork>
-        </component>
-    </settings>
-    <settings pass="specialize">
-        <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
-            <InputLocale>en-US</InputLocale>
-            <SystemLocale>en-US</SystemLocale>
-            <UILanguage>en-US</UILanguage>
-            <UILanguageFallback>en-US</UILanguageFallback>
-            <UserLocale>en-US</UserLocale>
-        </component>
-        <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
-            <ComputerName>DESKTOP-PC</ComputerName>
-            <TimeZone>UTC</TimeZone>
-        </component>
-        <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
-            <SkipAutoActivation>true</SkipAutoActivation>
-        </component>
-    </settings>
-    <settings pass="oobeSystem">
-        <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
-            <AutoLogon>
-                <Password>
-                    <Value>password</Value>
-                    <PlainText>true</PlainText>
-                </Password>
-                <LogonCount>1</LogonCount>
-                <Username>Administrator</Username>
-                <Enabled>true</Enabled>
-            </AutoLogon>
-            <OOBE>
-                <HideEULAPage>true</HideEULAPage>
-                <HideLocalAccountScreen>true</HideLocalAccountScreen>
-                <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
-                <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
-                <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
-                <NetworkLocation>Home</NetworkLocation>
-                <ProtectYourPC>1</ProtectYourPC>
-                <SkipMachineOOBE>true</SkipMachineOOBE>
-                <SkipUserOOBE>true</SkipUserOOBE>
-            </OOBE>
-            <UserAccounts>
-                <AdministratorPassword>
-                    <Value>password</Value>
-                    <PlainText>true</PlainText>
-                </AdministratorPassword>
-                <LocalAccounts>
-                    <LocalAccount wcm:action="add">
-                        <Password>
-                            <Value>password</Value>
-                            <PlainText>true</PlainText>
-                        </Password>
-                        <Name>User</Name>
-                        <Group>Administrators</Group>
-                        <DisplayName>User</DisplayName>
-                    </LocalAccount>
-                </LocalAccounts>
-            </UserAccounts>
-            <!-- Additional Windows 11 bypass commands -->
-            <FirstLogonCommands>
-                <SynchronousCommand wcm:action="add">
-                    <Order>1</Order>
-                    <CommandLine>reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v NoAutoUpdate /t REG_DWORD /d 1 /f</CommandLine>
-                </SynchronousCommand>
-                <SynchronousCommand wcm:action="add">
-                    <Order>2</Order>
-                    <CommandLine>reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f</CommandLine>
-                </SynchronousCommand>
-                <SynchronousCommand wcm:action="add">
-                    <Order>3</Order>
-                    <CommandLine>powershell -Command "Set-ExecutionPolicy Unrestricted -Force"</CommandLine>
-                </SynchronousCommand>
-            </FirstLogonCommands>
-        </component>
-    </settings>
-</unattend>
-EOF
-    fi
-
-    # Create the unattended ISO
-    if command -v genisoimage >/dev/null 2>&1; then
-        print_info "Creating unattended ISO using genisoimage..."
-        genisoimage -J -r -o "$WIN_ISO_DIR/unattended.iso" "$WIN_ISO_DIR/unattended" 2>/dev/null
-        return $?
-    elif command -v mkisofs >/dev/null 2>&1; then
-        print_info "Creating unattended ISO using mkisofs..."
-        mkisofs -J -r -o "$WIN_ISO_DIR/unattended.iso" "$WIN_ISO_DIR/unattended" 2>/dev/null
-        return $?
-    elif command -v xorriso >/dev/null 2>&1; then
-        print_info "Creating unattended ISO using xorriso..."
-        xorriso -as genisoimage -J -r -o "$WIN_ISO_DIR/unattended.iso" "$WIN_ISO_DIR/unattended" 2>/dev/null
-        return $?
-    else
-        print_warning "No ISO creation tool found (genisoimage, mkisofs, or xorriso)"
-        print_warning "Installing genisoimage..."
-        if command -v apt-get >/dev/null 2>&1; then
-            sudo apt-get update && sudo apt-get install -y genisoimage
-        elif command -v yum >/dev/null 2>&1; then
-            sudo yum install -y genisoimage
-        elif command -v pacman >/dev/null 2>&1; then
-            sudo pacman -S --noconfirm cdrtools
-        fi
-
-        # Try again after installation
-        if command -v genisoimage >/dev/null 2>&1; then
-            print_info "Creating unattended ISO using newly installed genisoimage..."
-            genisoimage -J -r -o "$WIN_ISO_DIR/unattended.iso" "$WIN_ISO_DIR/unattended" 2>/dev/null
-            return $?
-        else
-            print_error "Failed to install ISO creation tools"
-            return 1
-        fi
-    fi
-}
-
-# Download or locate essential files
-prepare_files() {
-    # Find Windows ISO
-    WINDOWS_ISO_PATH=$(find_windows_iso | tail -n 1 | xargs)
-    local iso_found=false
-
-    # Check if we found a valid ISO
-    if [[ -n "$WINDOWS_ISO_PATH" && -f "$WINDOWS_ISO_PATH" ]]; then
-        print_success "Using Windows ISO: $WINDOWS_ISO_PATH"
-        iso_found=true
-    else
-        print_warning "Windows ISO not found, attempting to download..."
-        if download_windows_iso; then
-            # Check again after download attempt
-            WINDOWS_ISO_PATH=$(find_windows_iso | tail -n 1 | xargs)
-            if [[ -n "$WINDOWS_ISO_PATH" && -f "$WINDOWS_ISO_PATH" ]]; then
-                print_success "Using downloaded Windows ISO: $WINDOWS_ISO_PATH"
-                iso_found=true
-            fi
-        fi
-    fi
-
-    # If we still don't have an ISO, exit
-    if [[ "$iso_found" != "true" ]]; then
-        print_error "Could not find or download Windows ISO"
-        print_info "Please place your Windows ISO file in: $WIN_ISO_DIR"
-        exit 1
-    fi
-
-    # Download VirtIO drivers if missing (optional for stealth mode)
-    if [[ ! -f "$ISO_VIRTIO" ]]; then
-        print_info "VirtIO drivers ISO not found, downloading (for fallback)..."
-        download_file "$VIRTIO_ISO_URL" "$ISO_VIRTIO" "" "true"
-    else
-        print_success "VirtIO drivers ISO already exists: $ISO_VIRTIO"
-    fi
-
-    # Create unattended ISO if it doesn't exist
-    if [[ ! -f "$ISO_UNATTENDED" ]]; then
-        create_unattended_iso
-        if [[ $? -eq 0 ]]; then
-            print_success "Created unattended ISO: $ISO_UNATTENDED"
-        else
-            print_error "Failed to create unattended ISO"
-            exit 1
-        fi
-    else
-        print_success "Unattended ISO already exists: $ISO_UNATTENDED"
-    fi
-}
-
-# Locate OVMF firmware files
-locate_ovmf() {
-    OVMF_DIRS=(
-        "/usr/share/OVMF"
-        "/usr/share/qemu"
-        "/usr/lib/qemu"
-        "/usr/share/edk2"
-        "/usr/lib/edk2"
-        "/usr/share/edk2/ovmf"
-        "/usr/share/edk2-ovmf"
-        "/usr/share/qemu/edk2-x86_64-code.fd"
-    )
-
-    OVMF_CODE=""
-    OVMF_VARS=""
-
-    for dir in "${OVMF_DIRS[@]}"; do
-        if [[ -f "$dir" ]]; then
-            # Handle direct file paths
-            if [[ "$dir" == *"code.fd" ]]; then
-                OVMF_CODE="$dir"
-                OVMF_VARS="$(dirname "$dir")/edk2-x86_64-vars.fd"
-            fi
-        elif [[ -d "$dir" ]]; then
-            # Handle directories
-            [[ -z "$OVMF_CODE" ]] && OVMF_CODE=$(find "$dir" -type f -name "OVMF_CODE.fd" -o -name "edk2-x86_64-code.fd" 2>/dev/null | head -n 1)
-            [[ -z "$OVMF_VARS" ]] && OVMF_VARS=$(find "$dir" -type f -name "OVMF_VARS.fd" -o -name "edk2-x86_64-vars.fd" 2>/dev/null | head -n 1)
-        fi
-        [[ -n "$OVMF_CODE" && -n "$OVMF_VARS" ]] && break
-    done
-
-    # Try package-specific locations
-    if [[ -z "$OVMF_CODE" || -z "$OVMF_VARS" ]]; then
-        # Ubuntu/Debian locations
-        [[ -z "$OVMF_CODE" ]] && OVMF_CODE="/usr/share/OVMF/OVMF_CODE_4M.fd"
-        [[ -z "$OVMF_VARS" && -f "/usr/share/OVMF/OVMF_VARS_4M.fd" ]] && OVMF_VARS="/usr/share/OVMF/OVMF_VARS_4M.fd"
-
-        # Arch Linux locations
-        [[ -z "$OVMF_CODE" ]] && OVMF_CODE="/usr/share/edk2-ovmf/x64/OVMF_CODE.fd"
-        [[ -z "$OVMF_VARS" && -f "/usr/share/edk2-ovmf/x64/OVMF_VARS.fd" ]] && OVMF_VARS="/usr/share/edk2-ovmf/x64/OVMF_VARS.fd"
-    fi
-
-    # Ensure a writable copy of OVMF_VARS.fd
-    local original_ovmf_vars="$OVMF_VARS"
-    OVMF_VARS="$FIRMWARE_DIR/OVMF_VARS.fd"
-
-    if [[ ! -f "$OVMF_VARS" && -f "$original_ovmf_vars" ]]; then
-        print_info "Copying OVMF_VARS.fd to $OVMF_VARS"
-        cp "$original_ovmf_vars" "$OVMF_VARS" 2>/dev/null || {
-            print_error "Failed to copy OVMF_VARS.fd!"
-            print_info "Trying to install OVMF firmware..."
-
-            # Try to install OVMF
-            if command -v apt-get >/dev/null 2>&1; then
-                sudo apt-get update && sudo apt-get install -y ovmf
-            elif command -v yum >/dev/null 2>&1; then
-                sudo yum install -y edk2-ovmf
-            elif command -v pacman >/dev/null 2>&1; then
-                sudo pacman -S --noconfirm edk2-ovmf
-            fi
-
-            # Try to locate again after installation
-            locate_ovmf
-            return
-        }
-    fi
-
-    # Check if required files exist
-    if [[ -z "$OVMF_CODE" || ! -f "$OVMF_CODE" ]]; then
-        print_error "OVMF_CODE.fd not found!"
-        print_info "Please install OVMF firmware package:"
-        print_info "  Ubuntu/Debian: sudo apt install ovmf"
-        print_info "  RHEL/CentOS: sudo yum install edk2-ovmf"
-        print_info "  Arch: sudo pacman -S edk2-ovmf"
-        exit 1
-    fi
-    if [[ ! -f "$OVMF_VARS" ]]; then
-        print_error "OVMF_VARS.fd not found or could not be copied!"
-        exit 1
-    fi
-
-    print_success "Found OVMF firmware: $OVMF_CODE"
-    print_success "Using OVMF vars: $OVMF_VARS"
-}
-
-# Create VM disk image
-create_disk() {
-    # Check if the qcow2 image file exists; if not, create it
-    if [[ ! -f "$QCOW2_FILE" ]]; then
-        print_info "Creating $QCOW2_FILE with a size of $VM_SIZE"
-        qemu-img create -f qcow2 "$QCOW2_FILE" "$VM_SIZE" || {
-            print_error "Failed to create qcow2 image!"
-            exit 1
-        }
-        print_success "Created VM disk image: $QCOW2_FILE"
-    else
-        print_success "VM disk image already exists: $QCOW2_FILE"
-    fi
-}
-
-# Helper function to convert QCOW2 to RAW for stealth
-convert_to_raw() {
-    if [[ -f "$QCOW2_FILE" && ! -f "$RAW_FILE" ]]; then
-        print_info "Converting QCOW2 to RAW format for stealth..."
-        qemu-img convert -f qcow2 -O raw "$QCOW2_FILE" "$RAW_FILE" || {
-            print_error "Failed to convert to RAW format"
-            exit 1
-        }
-        print_success "Successfully converted to RAW format: $RAW_FILE"
-    elif [[ ! -f "$RAW_FILE" ]]; then
-        print_info "Creating RAW disk image..."
-        qemu-img create -f raw "$RAW_FILE" "$VM_SIZE" || {
-            print_error "Failed to create RAW disk image"
-            exit 1
-        }
-        print_success "Created RAW disk image: $RAW_FILE"
-    else
-        print_success "RAW disk image already exists: $RAW_FILE"
-    fi
-}
-
-# Check dependencies
-check_dependencies() {
-    local missing_deps=()
-
-    # Check for essential tools
-    command -v qemu-system-x86_64 >/dev/null 2>&1 || missing_deps+=("qemu-system-x86_64")
-    command -v swtpm >/dev/null 2>&1 || missing_deps+=("swtpm")
-    command -v curl >/dev/null 2>&1 || missing_deps+=("curl")
-    command -v uuidgen >/dev/null 2>&1 || missing_deps+=("uuidgen")
-    command -v openssl >/dev/null 2>&1 || missing_deps+=("openssl")
-
-    if [[ ${#missing_deps[@]} -gt 0 ]]; then
-        print_error "Missing required dependencies: ${missing_deps[*]}"
-        print_info "Please install them using your package manager:"
-        print_info "  Ubuntu/Debian: sudo apt install qemu-system-x86 swtpm curl uuid-runtime openssl"
-        print_info "  RHEL/CentOS: sudo yum install qemu-kvm swtpm curl util-linux openssl"
-        print_info "  Arch: sudo pacman -S qemu swtpm curl util-linux openssl"
-        exit 1
-    fi
-}
-
-start_vm() {
-    # Verify that we have a Windows ISO
-    if [[ -z "$WINDOWS_ISO_PATH" || ! -f "$WINDOWS_ISO_PATH" ]]; then
-        print_error "Windows ISO file not found. Cannot start VM."
-        print_info "Please download Windows 11 ISO and save it to: $WIN_ISO_DIR"
-        exit 1
-    fi
-
-    # Anti-detection: Generate realistic hardware identifiers
-    REAL_MAC="00:1A:79:$(openssl rand -hex 3 | sed 's/../&:/g; s/:$//')"  # Dell OUI
-    REAL_SERIAL="$(openssl rand -hex 8 | tr '[:lower:]' '[:upper:]')"
-    REAL_UUID="$(uuidgen)"
-    REAL_VENDOR="Dell Inc."
-    REAL_PRODUCT="OptiPlex 7090"
-    REAL_VERSION="01"
-    REAL_FAMILY="OptiPlex"
-
-    # Stop any existing swtpm process for this VM
-    if [[ -f "$TPM_SOCKET" ]]; then
-        print_info "Cleaning up existing TPM socket..."
-        rm -f "$TPM_SOCKET"
-    fi
-
-    # Start swtpm (TPM emulator)
-    print_info "Starting TPM emulator..."
-    /sbin/swtpm socket \
-        --ctrl type=unixio,path="$TPM_SOCKET" \
-        --terminate \
-        --tpmstate dir="$TPM_DIR" \
-        --tpm2 &
-
-    # Give swtpm a moment to create the socket
-    sleep 1
-
-    # Verify TPM socket exists
-    if [[ ! -S "$TPM_SOCKET" ]]; then
-        print_error "TPM socket not created: $TPM_SOCKET"
-        exit 1
-    fi
-
-    print_info "Starting stealth Windows 11 VM..."
-    print_info "Using Windows ISO: $WINDOWS_ISO_PATH"
-    print_info "VM will boot from unattended installation ISO"
-    print_info "Default login: Username=User, Password=password"
-    print_info "Anti-detection measures enabled"
-
-    # Build qemu arguments in an array for safety and readability
-    QEMU_ARGS=(
-        # Basic VM configuration
-        -name "$REAL_PRODUCT",process="$VM_NAME"
-        -machine q35,hpet=off,smm=on,vmport=off,accel=kvm
-
-        # Global optimizations
-        -global kvm-pit.lost_tick_policy=discard
-        -global ICH9-LPC.disable_s3=1
-
-        # CPU configuration (stealth)
-        -cpu host,-hypervisor,+invtsc,+ssse3,l3-cache=on,migratable=no
-        -smp "$SMP_CONFIG"
-        -m "$VM_RAM"
-
-        # SMBIOS spoofing for anti-detection
-        -smbios type=0,vendor="$REAL_VENDOR",version="$REAL_VERSION",date="03/15/2023"
-        -smbios type=1,manufacturer="$REAL_VENDOR",product="$REAL_PRODUCT",version="$REAL_VERSION",serial="$REAL_SERIAL",uuid="$REAL_UUID",family="$REAL_FAMILY"
-        -smbios type=2,manufacturer="$REAL_VENDOR",product="0NK70N",version="A00",serial="$REAL_SERIAL"
-        -smbios type=3,manufacturer="$REAL_VENDOR",version="$REAL_VERSION",serial="$REAL_SERIAL"
-        -smbios type=4,manufacturer="Intel(R) Corporation",version="11th Gen Intel(R) Core(TM) i7-1165G7 @ 2.80GHz"
-
-        # Process management
-        -pidfile "$VM_DIR/$VM_NAME.pid"
-        -rtc base=localtime,clock=host,driftfix=slew
-
-        # Display and graphics
-        -vga qxl
-        -display sdl
-
-        # Boot configuration
-        -boot menu=on,splash-time=0,order=d,reboot-timeout=5000
-
-        # Random number generator
-        -object rng-random,id=rng0,filename=/dev/urandom
-        -device i82801b11-bridge,id=pci.1
-
-        # usb
-        -device usb-ehci,id=usb
-        -device usb-kbd,bus=usb.0
-        -device usb-tablet,bus=usb.0
-        -k en-us
-
-        # audio (pipewire)
-        -audiodev pipewire,id=audio0
-        -device AC97,audiodev=audio0
-
-        # Network (realistic NIC with stealth MAC)
-        -device rtl8139,netdev=nic,mac="$REAL_MAC"
-        -netdev user,hostname="$VM_NAME",hostfwd=tcp::"$HOST_PORT"-:"$GUEST_PORT",smb="$SHARED_DIR",id=nic
-
-        # UEFI firmware
-        -global driver=cfi.pflash01,property=secure,value=on
-        -drive if=pflash,format=raw,unit=0,file="$OVMF_CODE",readonly=on
-        -drive if=pflash,format=raw,unit=1,file="$OVMF_VARS"
-
-        # Main storage (AHCI for compatibility)
-        -device ahci,id=ahci
-        -drive if=none,id=disk0,format=raw,file="$RAW_FILE",cache=writeback
-        -device ide-hd,bus=ahci.0,drive=disk0
-
-        # CD-ROM drives (Windows ISO + Unattended)
-        -drive media=cdrom,index=0,file="$WINDOWS_ISO_PATH",if=ide
-        -drive media=cdrom,index=1,file="$ISO_UNATTENDED",if=ide
-
-        # TPM 2.0
-        -chardev socket,id=chrtpm,path="$TPM_SOCKET"
-        -tpmdev emulator,id=tpm0,chardev=chrtpm
-        -device tpm-tis,tpmdev=tpm0
-
-        # Monitoring and management sockets
-        -monitor unix:"$SOCKET_DIR/$VM_NAME-monitor.socket",server,nowait
-        -serial unix:"$SOCKET_DIR/$VM_NAME-serial.socket",server,nowait
-    )
-
-    # Add VirtIO ISO if it exists (as fallback)
-    if [[ -f "$ISO_VIRTIO" ]]; then
-        QEMU_ARGS+=(-drive media=cdrom,index=2,file="$ISO_VIRTIO",if=ide,readonly=on)
-    fi
-
-    print_info "Starting QEMU with stealth configuration..."
-    print_info "Monitor socket: $SOCKET_DIR/$VM_NAME-monitor.socket"
-    print_info "Serial socket: $SOCKET_DIR/$VM_NAME-serial.socket"
-    print_info "SSH port forwarding: localhost:$HOST_PORT -> VM:$GUEST_PORT"
-
-    # Execute qemu
-    exec qemu-system-x86_64 "${QEMU_ARGS[@]}"
-
-}
-
-# Helper function to convert QCOW2 to RAW for stealth
-convert_to_raw() {
-    if [[ -f "$QCOW2_FILE" && ! -f "$RAW_FILE" ]]; then
-        print_info "Converting QCOW2 to RAW format for stealth..."
-        qemu-img convert -f qcow2 -O raw "$QCOW2_FILE" "$RAW_FILE"
-        if [[ $? -eq 0 ]]; then
-            print_success "Successfully converted to RAW format"
-        else
-            print_error "Failed to convert to RAW format"
-            exit 1
-        fi
-    elif [[ ! -f "$RAW_FILE" ]]; then
-        print_info "Creating RAW disk image..."
-        qemu-img create -f raw "$RAW_FILE" "$VM_SIZE"
-    fi
-}
-
-# Anti-detection validation commands
-show_validation_commands() {
-    cat << 'EOF'
-=== VM DETECTION VALIDATION COMMANDS ===
-
-Run these commands inside Windows to verify stealth:
-
-# PowerShell - Check hardware info:
-Get-WmiObject -Class Win32_ComputerSystem | Select-Object Manufacturer, Model, TotalPhysicalMemory
-Get-WmiObject -Class Win32_BIOS | Select-Object Manufacturer, Version, SerialNumber
-Get-WmiObject -Class Win32_BaseBoard | Select-Object Manufacturer, Product, SerialNumber
-Get-WmiObject -Class Win32_Processor | Select-Object Name, Manufacturer, MaxClockSpeed
-
-# Check for hypervisor presence:
-Get-WmiObject -Class Win32_ComputerSystem | Select-Object HypervisorPresent
-bcdedit /enum | findstr hypervisorlaunchtype
-
-# Registry checks for VM artifacts:
-reg query "HKLM\HARDWARE\DESCRIPTION\System" /v SystemBiosVersion
-reg query "HKLM\HARDWARE\DESCRIPTION\System\BIOS" /v SystemManufacturer
-reg query "HKLM\SYSTEM\CurrentControlSet\Services" | findstr -i "vbox\|vmware\|qemu\|virtio"
-
-# Check network adapter:
-Get-WmiObject -Class Win32_NetworkAdapter | Where-Object {$_.NetConnectionStatus -eq 2} | Select-Object Name, MACAddress, Manufacturer
-
-# Check PCI devices for VM signatures:
-Get-WmiObject -Class Win32_PnPEntity | Where-Object {$_.Name -match "VirtIO|QEMU|VMware|VirtualBox|Hyper-V"} | Select-Object Name, DeviceID
-
-# Check running services:
-Get-Service | Where-Object {$_.Name -match "vbox|vmware|qemu|virtio|spice"}
-
-# Check for VM-specific processes:
-Get-Process | Where-Object {$_.ProcessName -match "vbox|vmware|qemu|virtio"}
-
-# Additional checks:
-systeminfo | findstr /C:"System Manufacturer" /C:"System Model" /C:"BIOS Version"
-wmic computersystem get manufacturer,model,name,systemtype
-
-EOF
-}
-
-# Cleanup function
-cleanup() {
-    print_info "Cleaning up..."
-
-    # Kill swtpm if running
-    if [[ -f "$TPM_SOCKET" ]]; then
-        pkill -f "swtpm.*$TPM_SOCKET" 2>/dev/null || true
-        rm -f "$TPM_SOCKET" 2>/dev/null || true
-    fi
-
-    # Remove PID file
-    if [[ -f "$VM_DIR/$VM_NAME.pid" ]]; then
-        rm -f "$VM_DIR/$VM_NAME.pid" 2>/dev/null || true
-    fi
-}
-
-# Trap cleanup on exit
-trap cleanup EXIT
-
-# Main execution function
-main() {
-    print_info "=== Windows 11 Stealth VM Setup ==="
-    print_info "VM Name: $VM_NAME"
-    print_info "VM Size: $VM_SIZE"
-    print_info "VM RAM: $VM_RAM"
-    print_info "VM CPUs: $VM_CPU"
-    print_info "Host Port: $HOST_PORT"
-
-    check_dependencies
-    prepare_files
-    locate_ovmf
-    create_disk
-    convert_to_raw
-    show_validation_commands
-
-    print_success "Setup complete! Starting VM..."
-    start_vm
-}
-
-# Run main function
-main "$@"
-- 
cgit v1.2.3