Running dism /online /cleanup-image /restorehealth
whether physical or virtual doesn't make any difference. You mentioned a broken domain controller. The much simpler method is to stand up a new one for replacement (shouldn't take more than 30 mins or so to do)
I'd use dcdiag / repadmin tools to verify health correcting all errors found
before starting any
operations. Then stand up the new 2019, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.
--please don't forget to Accept as answer if the reply is helpful--