anchor.diff:  rem     copyright notice, this list of conditions and the
   rem     following disclaimer in the documentation and/or other
   rem     materials provided with the distribution.
  -rem 
  +rem
   rem THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND
   rem CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES,
   rem INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
  
positive.code: goto end
  
  :found_ddk
  rem do not display this because the tool is called too many times and it polutes the output.
  IF DEFINED DEBUG (echo ddk is %ddk_path%)
  
  set descr="Citrix XenCenter"
  set timestamp=http://timestamp.geotrust.com/tsa
  if not [%2]==[] set descr=%2
  
  if /I NOT "%ddk_path%" == "SigntoolInPath" (
      %ddk_path%\bin\catalog\signtool.exe sign -a -s my -n "Citrix Systems, Inc" -d %descr% -t http://timestamp.verisign.com/scripts/timestamp.dll %1
  ) ELSE (
      C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -Command "$c = Get-ChildItem -Path cert:\\CurrentUser\\My, cert:\\LocalMachine\\My | Where-Object { $_.Thumbprint -like \"9c0ac20110aaf4733fc0eae7ec3ec8d5cc74dbcc\" }; If ($c) { signtool sign -v -sm -as -sha1 9c0ac20110aaf4733fc0eae7ec3ec8d5cc74dbcc -d `\"%descr%`\" -tr %timestamp% -td sha256 %1; signtool sign -v -sm -as -sha1 3d502d724093ef56499e24ce9c664a3471382ea9 -d `\"%descr%`\" -tr %timestamp% -td sha1 %1 } else {signtool sign -v -s -as -sha1 0699c0e67181f87ecdf7a7a6ad6f4481ee6c76cf -d `\"%descr%`\" -tr %timestamp% -td sha1 %1 ; }" <NUL
  )
  
  :end
  
negative.code: @echo off
  rem Copyright (c) Citrix Systems Inc.
  rem All rights reserved.
  rem
  rem Redistribution and use in source and binary forms,
  rem with or without modification, are permitted provided
  rem that the following conditions are met:
  rem
  rem *   Redistributions of source code must retain the above
  rem     copyright notice, this list of conditions and the
  rem     following disclaimer.
  