AzSDK

2.5.2

Framework/Configurations/ContinuousAssurance/RunbookCoreSetup.ps1

                                #telemetry functions

function Set-Modules

{

    param(

        [System.Collections.IDictionary] $ModuleList,

        [string[]] $SyncModuleList

    )

    $ModuleList.Keys | ForEach-Object{

    $ModuleName = $_

    $ModuleVersion = $ModuleList.Item($_)

    $Module = Get-AzureRmAutomationModule `

        -ResourceGroupName $AutomationAccountRG `

        -AutomationAccountName $AutomationAccountName `

        -Name $ModuleName -ErrorAction SilentlyContinue

    if(($Module | Measure-Object).Count -eq 0)

    {

        PublishEvent -EventName "CA Setup Modules" -Properties @{"ModuleName" = $ModuleName; "ModuleState"= "NotAvailable"; "RequiredModuleVersion"= $ModuleVersion}

        #Download module if it is not available

        DownloadModule -ModuleName $ModuleName -ModuleVersion $ModuleVersion -Sync ($SyncModuleList.Contains($ModuleName))

    }

    else

    {

        PublishEvent -EventName "CA Setup Modules" -Properties @{"ModuleName" = $ModuleName; "ModuleState"= $Module.ProvisioningState; "RequiredModuleVersion"= $ModuleVersion; "AvailableModuleVersion" = $Module.Version}

        #module is in extraction state

        if($Module.ProvisioningState -ne "Failed" -and $Module.ProvisioningState -ne "Succeeded" -and $Module.ProvisioningState -ne "Created")

        {

            "Current provisioning state for module $ModuleName is $($Module.ProvisioningState)"

        }

        #Check if module with specified version already exists

        elseif(CheckModuleVersion -ModuleName $ModuleName -ModuleVersion $ModuleVersion)

        {

            $ModuleName + " is up to date in assets"

            return

        }

        else

        {

            #Download required version

            DownloadModule -ModuleName $ModuleName -ModuleVersion $ModuleVersion -Sync ($SyncModuleList.Contains($ModuleName))

        }

    }

  }

}

function DownloadModule

{

    param(

         [string]$ModuleName,

         [string]$ModuleVersion,

         [bool] $Sync

    )

    $SearchResult = SearchModule -ModuleName $ModuleName -ModuleVersion $ModuleVersion

    if($SearchResult)

    {

        $ModuleName = $SearchResult.title.'#text' # get correct casing for the Module name

        $PackageDetails = Invoke-RestMethod -Method Get -UseBasicParsing -Uri $SearchResult.id

        $ModuleVersion = $PackageDetails.entry.properties.version

        #Build the content URL for the nuget package

        $ModuleContentUrl = "$PublicPSGalleryUrl/api/v2/package/$ModuleName/$ModuleVersion"

        if($ModuleName -imatch "AzSDK*")

        {

            $ModuleContentUrl = "$AzSDKPSGalleryUrl/api/v2/package/$ModuleName/$ModuleVersion"

        }

        # Find the actual blob storage location of the Module

        do {

            $ActualUrl = $ModuleContentUrl

            $ModuleContentUrl = (Invoke-WebRequest -Uri $ModuleContentUrl -MaximumRedirection 0 -UseBasicParsing -ErrorAction Ignore).Headers.Location

        } while(!$ModuleContentUrl.Contains(".nupkg"))

        $retryCount = 0

        do{

            $retryCount++

            $AutomationModule = New-AzureRmAutomationModule `

                    -ResourceGroupName $AutomationAccountRG `

                    -AutomationAccountName $AutomationAccountName `

                    -Name $ModuleName `

                    -ContentLink $ActualUrl

        } while($null -eq $AutomationModule -and $retryCount -le 3)

        "Downloading "+ $ModuleName + " Version " + $ModuleVersion

        if($Sync)

        {

         while(

                $AutomationModule.ProvisioningState -ne "Created" -and

                $AutomationModule.ProvisioningState -ne "Succeeded" -and

                $AutomationModule.ProvisioningState -ne "Failed"

                )

                {

                    #Module is in extracting state

                    Start-Sleep -Seconds 120

                    $AutomationModule = $AutomationModule | Get-AzureRmAutomationModule

                }

                if($AutomationModule.ProvisioningState -eq "Failed")

                {

                    Write-Error "Importing $AutomationModule Module to Automation failed."

                }

        }

    }

}

function CheckModuleVersion

{

    param(

        [string] $ModuleName,

        [string] $ModuleVersion

    )

    $SearchResult = SearchModule -ModuleName $ModuleName -ModuleVersion $ModuleVersion

    $Module = Get-AzureRmAutomationModule `

        -ResourceGroupName $AutomationAccountRG `

        -AutomationAccountName $AutomationAccountName `

        -Name $ModuleName -ErrorAction SilentlyContinue

        if(($Module | Measure-Object).Count -eq 0)

        {

            #Module is not available

            return $false

        }

        else

        {

            #added condition to return false if module is not successfully extracted

            return ((($Module.ProvisioningState -eq "Succeeded") -or ($Module.ProvisioningState -eq "Created")) -and ($SearchResult.properties.Version -eq $Module.Version))

        }

}

function SearchModule

{

     param(

            [string] $ModuleName,

            [string] $ModuleVersion

        )

    $url =""

    $PSGalleryUrlComputed = $PublicPSGalleryUrl

    if($ModuleName -imatch "AzSDK*")

    {

            $PSGalleryUrlComputed = $AzSDKPSGalleryUrl

    }

    if([string]::IsNullOrWhiteSpace($ModuleVersion))

    {

        $queryString = "`$filter=IsLatestVersion&searchTerm=%27$ModuleName%27&includePrerelease=false&`$skip=0&`$top=40"

        $url = "$PSGalleryUrlComputed/api/v2/Search()?$queryString"

    }

    else

    {

        $queryString = "id=%27$ModuleName%27&`$skip=0&`$top=40"

        $url = "$PSGalleryUrlComputed/api/v2/FindPackagesById()?$queryString"

    }

    $SearchResult = Invoke-RestMethod -Method Get -Uri $url -UseBasicParsing

    if(!$SearchResult)

    {

            Write-Error "Could not find Module '$ModuleName'"

            return $null

    }

    else

    {

        $SearchResult = $SearchResult | Where-Object -FilterScript {

                return $_.title.'#text' -eq $ModuleName

        }

        #filter for module version

        if(![string]::IsNullOrWhiteSpace($ModuleVersion)) {

                $SearchResult = $SearchResult | Where-Object -FilterScript {

                    return $_.properties.version -eq $ModuleVersion

            }

        }

        return $SearchResult

    }

}

function AddDependentModules

{

     param(

         $InputModuleList

   )

    $InputModuleList.Keys | ForEach-Object{

    $moduleName = $_

    $moduleVersion = $InputModuleList.Item($_)

    $searchResult = SearchModule -ModuleName $moduleName -ModuleVersion $moduleVersion

    if($searchResult)

    {

         $packageDetails = Invoke-RestMethod -Method Get -UseBasicParsing -Uri $searchResult.id

         $dependencies = $packageDetails.entry.properties.dependencies

         if($dependencies)

         {

             $dependencies = $dependencies.Split("|")

             # parse dependencies, which are in the format: Module1name:[Module1version]:|Module2name:[Module2version]

                for($index=$dependencies.count-1;($index -ge 0) -and (![string]::IsNullOrWhiteSpace($dependencies[$index]));$index--)

                {

                    $dependencyModuleDetail = $dependencies[$index].Split(":")

                    $dependencyModuleName = $dependencyModuleDetail[0]

                    $dependencyModuleVersion = $dependencyModuleDetail[1].Replace('[','').Replace(']','')

                    #Add dependent module to the result list

                    if(!$ResultModuleList.Contains($dependencyModuleName))

                    {

                        $tempList = [ordered]@{$dependencyModuleName=$dependencyModuleVersion}

                        $tempList+= $ResultModuleList

                        $ResultModuleList.Clear()

                        $tempList.Keys|ForEach-Object{$ResultModuleList.Add($_,$tempList.Item($_))}

                        AddDependentModules -InputModuleList @{$dependencyModuleName=$dependencyModuleVersion} | Out-Null

                    }

                 }

          }

          if(!$ResultModuleList.Contains($moduleName))

          {

             if([string]::IsNullOrWhiteSpace($moduleVersion))

              {

                $moduleVersion = $searchResult.properties.Version

              }

            $ResultModuleList.Add($moduleName,$moduleVersion)

          }

     }

   }

   return $ResultModuleList

}

try

{

    $setupTimer = [System.Diagnostics.Stopwatch]::StartNew();

    PublishEvent -EventName "CA Setup Started"

    #config start

    $AzSDKModuleName = "AzSDK"

    $RunbookName = "Continuous_Assurance_Runbook"

    $CAHelperScheduleName = "CA_Helper_Schedule"

    $AzSDKPSGalleryUrl = "https://www.powershellgallery.com"

    $PublicPSGalleryUrl = "https://www.powershellgallery.com"

    #config end

    #initialize variables

    $ResultModuleList = [ordered]@{}

    $retryDownloadIntervalMins = 10

    $monitorjobIntervalMins = 30

    #Set subscription id

    $SubscriptionID = $RunAsConnection.SubscriptionID

    #Check if scan job is already running

    $jobs = Get-AzureRmAutomationJob -Name $RunbookName -ResourceGroupName $AutomationAccountRG -AutomationAccountName $AutomationAccountName | Where-Object { $_.Status -in ("Queued", "Starting", "Resuming", "Running",  "Activating")} | Measure-Object

    if($jobs.Count -gt 1)

    {

        #create schedule and quit

        CreateHelperSchedule -nextRetryIntervalInMinutes $monitorjobIntervalMins

        return;

    }

    else

    {

        #create schedule

        CreateHelperSchedule -nextRetryIntervalInMinutes $monitorjobIntervalMins

    }

    #check for the installed AzSDK module

    $azsdkmodules = @()

    $azsdkModules += Get-AzureRmAutomationModule -ResourceGroupName $AutomationAccountRG `

    -AutomationAccountName $AutomationAccountName -ErrorAction SilentlyContinue | Where-Object { $_.Name -like "azsdk*" }

    if($azsdkModules.Count -gt 1)

    {

        #Not the intended state. Cleaning up all the azsdk modules

        $azsdkModules | ForEach-Object { Remove-AzureRmAutomationModule -ResourceGroupName $AutomationAccountRG -AutomationAccountName $AutomationAccountName -Name $_.Name -ErrorAction SilentlyContinue -Force }

    }

    elseif($azsdkModules.Count -eq 1 -and $azsdkModules[0].Name -ne $AzSDKModuleName)

    {

        Remove-AzureRmAutomationModule -ResourceGroupName $AutomationAccountRG -AutomationAccountName $AutomationAccountName -Name $azsdkModules[0].Name -ErrorAction SilentlyContinue -Force

    }

    #check if AzureRM is available (for scenario where AzSDK is available but AzureRM extraction might have failed)

    $azureRmModule = Get-AzureRmAutomationModule -ResourceGroupName $AutomationAccountRG `

    -AutomationAccountName $AutomationAccountName `

    -Name AzureRM -ErrorAction SilentlyContinue

    $isAzureRMAvailable = ($azureRmModule| Where-Object {$_.ProvisioningState -eq "Succeeded" -or $_.ProvisioningState -eq "Created"} | Measure-Object).Count -gt 0

    $azsdkModule = Get-AzureRmAutomationModule -ResourceGroupName $AutomationAccountRG `

    -AutomationAccountName $AutomationAccountName `

    -Name $AzSDKModuleName -ErrorAction SilentlyContinue

    $isAzSDKAvailable = ($azsdkModule | Where-Object {$_.ProvisioningState -eq "Succeeded" -or $_.ProvisioningState -eq "Created"} | Measure-Object).Count -gt 0

    if($isAzSDKAvailable)

    {

        Import-Module $AzSDKModuleName

    }

    $isAzsdkLatest = CheckModuleVersion -ModuleName $AzSDKModuleName

    $isSetupComplete = $isAzsdkLatest -and $isAzureRMAvailable

    $azsdkSearchResult = SearchModule -ModuleName $AzSDKModuleName

    $latestAzsdkVersion = $azsdkSearchResult.properties.Version

    #Telemetry

    PublishEvent -EventName "CA Setup Required Modules State" -Properties @{

    "ModuleStateAzSDK"= $azsdkModule.ProvisioningState; `

    "ModuleStateAzureRm"=$azureRmModule.ProvisioningState; `

    "InstalledModuleVersionAzSDK"=$azsdkModule.Version; `

    "InstalledModuleVersionAzureRm"=$azureRmModule.Version; `

    "RequiredModuleVersionAzSDK"=$latestAzsdkVersion; `

    "IsCompleteAzureRm"=$isAzureRMAvailable; `

    "IsCompleteAzSDK"=$isAzsdkLatest; `

    "IsComplete"=$isSetupComplete

    }

    #check if AzSDK module is latest and AzureRM is available

    if(!$isSetupComplete)

    {

        $jobs = Get-AzureRmAutomationJob -ResourceGroupName $AutomationAccountRG `

        -AutomationAccountName $AutomationAccountName -RunbookName $RunbookName | `

        Where-Object {$_.CreationTime.UtcDateTime.Date -eq $(get-date).ToUniversalTime().Date}

        if($jobs.Count -gt 15)

        {

            "Something went wrong while loading modules. Please contact AzSDK support team."

            #Disable the schedules 

            $allSchedules = Get-AzureRmAutomationSchedule -AutomationAccountName $AutomationAccountName `

            -ResourceGroupName $AutomationAccountRG

            if(($allSchedules|Measure-Object).Count -gt 0)

            {

                $allSchedules| ForEach-Object{

                 Set-AzureRmAutomationSchedule -Name $_.Name -IsEnabled $false -ResourceGroupName $AutomationAccountRG -AutomationAccountName $AutomationAccountName | Out-Null

                 }

            }

            PublishEvent -EventName "CA Setup Error" -Properties @{"JobsCount"=$jobs.Count} -Metrics @{"TimeTakenInMs" =$setupTimer.ElapsedMilliseconds; "SuccessCount" = 0}

            return;

        }

        #Update all modules

        #Module list is in hashtable format : key = modulename , value = version (This is useful to fetch version of specific module by name)

        $finalModuleList = [ordered]@{}

        #Get dependencies of azsdk module

        PublishEvent -EventName "CA Setup Computing Dependencies"

        AddDependentModules -InputModuleList @{$AzSDKModuleName=""} | Out-Null

        #Azure modules to be downloaded first should be added first in finalModuleList

        $baseModuleList = [ordered]@{}

        $baseModuleList.Add("AzureRM.Profile",$ResultModuleList.Item("AzureRM.Profile"))

        $baseModuleList.Add("AzureRM.Automation",$ResultModuleList.Item("AzureRM.Automation"))

        $ResultModuleList.Remove("AzureRM.Profile")

        $ResultModuleList.Remove("AzureRM.Automation")

        $finalModuleList += $baseModuleList

        $finalModuleList += $ResultModuleList

        $syncModules = @("AzureRM.Profile", "AzureRM.Automation");

        Set-Modules -ModuleList $finalModuleList -SyncModuleList $syncModules

        "Creating the interim scan schedule..."

        CreateHelperSchedule -nextRetryIntervalInMinutes $retryDownloadIntervalMins

    }

    #check if AzSDK command is accessible

    elseif((Get-Command -Name "Get-AzSDKAzureServicesSecurityStatus" -ErrorAction SilentlyContinue|Measure-Object).Count -eq 0)

    {

        "Creating the interim scan schedule..."

        CreateHelperSchedule -nextRetryIntervalInMinutes $retryDownloadIntervalMins

    }

    else

    {

        PublishEvent -EventName "CA Setup Succeeded" -Metrics @{"TimeTakenInMs" = $setupTimer.ElapsedMilliseconds;"SuccessCount" = 1}

    }

    PublishEvent -EventName "CA Setup Completed" -Metrics @{"TimeTakenInMs" = $setupTimer.ElapsedMilliseconds;"SuccessCount" = 1}

}

catch

{

    PublishEvent -EventName "CA Setup Error" -Properties @{ "ErrorRecord" = ($_ | Out-String) } -Metrics @{"TimeTakenInMs" =$setupTimer.ElapsedMilliseconds; "SuccessCount" = 0}

}

# SIG # Begin signature block

# MIIkAgYJKoZIhvcNAQcCoIIj8zCCI+8CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCClOf6Tvm/3zEhM

# X2xf6yBEKb/wZqr9ZAUsLGj3ySLfe6CCDZMwggYRMIID+aADAgECAhMzAAAAjoeR

# pFcaX8o+AAAAAACOMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p

# bmcgUENBIDIwMTEwHhcNMTYxMTE3MjIwOTIxWhcNMTgwMjE3MjIwOTIxWjCBgzEL

# MAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1v

# bmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjENMAsGA1UECxMETU9Q

# UjEeMBwGA1UEAxMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMIIBIjANBgkqhkiG9w0B

# AQEFAAOCAQ8AMIIBCgKCAQEA0IfUQit+ndnGetSiw+MVktJTnZUXyVI2+lS/qxCv

# 6cnnzCZTw8Jzv23WAOUA3OlqZzQw9hYXtAGllXyLuaQs5os7efYjDHmP81LfQAEc

# wsYDnetZz3Pp2HE5m/DOJVkt0slbCu9+1jIOXXQSBOyeBFOmawJn+E1Zi3fgKyHg

# 78CkRRLPA3sDxjnD1CLcVVx3Qv+csuVVZ2i6LXZqf2ZTR9VHCsw43o17lxl9gtAm

# +KWO5aHwXmQQ5PnrJ8by4AjQDfJnwNjyL/uJ2hX5rg8+AJcH0Qs+cNR3q3J4QZgH

# uBfMorFf7L3zUGej15Tw0otVj1OmlZPmsmbPyTdo5GPHzwIDAQABo4IBgDCCAXww

# HwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0OBBYEFKvI1u2y

# FdKqjvHM7Ww490VK0Iq7MFIGA1UdEQRLMEmkRzBFMQ0wCwYDVQQLEwRNT1BSMTQw

# MgYDVQQFEysyMzAwMTIrYjA1MGM2ZTctNzY0MS00NDFmLWJjNGEtNDM0ODFlNDE1

# ZDA4MB8GA1UdIwQYMBaAFEhuZOVQBdOCqhc3NyK1bajKdQKVMFQGA1UdHwRNMEsw

# SaBHoEWGQ2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY0Nv

# ZFNpZ1BDQTIwMTFfMjAxMS0wNy0wOC5jcmwwYQYIKwYBBQUHAQEEVTBTMFEGCCsG

# AQUFBzAChkVodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01p

# Y0NvZFNpZ1BDQTIwMTFfMjAxMS0wNy0wOC5jcnQwDAYDVR0TAQH/BAIwADANBgkq

# hkiG9w0BAQsFAAOCAgEARIkCrGlT88S2u9SMYFPnymyoSWlmvqWaQZk62J3SVwJR

# avq/m5bbpiZ9CVbo3O0ldXqlR1KoHksWU/PuD5rDBJUpwYKEpFYx/KCKkZW1v1rO

# qQEfZEah5srx13R7v5IIUV58MwJeUTub5dguXwJMCZwaQ9px7eTZ56LadCwXreUM

# tRj1VAnUvhxzzSB7pPrI29jbOq76kMWjvZVlrkYtVylY1pLwbNpj8Y8zon44dl7d

# 8zXtrJo7YoHQThl8SHywC484zC281TllqZXBA+KSybmr0lcKqtxSCy5WJ6PimJdX

# jrypWW4kko6C4glzgtk1g8yff9EEjoi44pqDWLDUmuYx+pRHjn2m4k5589jTajMW

# UHDxQruYCen/zJVVWwi/klKoCMTx6PH/QNf5mjad/bqQhdJVPlCtRh/vJQy4njpI

# BGPveJiiXQMNAtjcIKvmVrXe7xZmw9dVgh5PgnjJnlQaEGC3F6tAE5GusBnBmjOd

# 7jJyzWXMT0aYLQ9RYB58+/7b6Ad5B/ehMzj+CZrbj3u2Or2FhrjMvH0BMLd7Hald

# G73MTRf3bkcz1UDfasouUbi1uc/DBNM75ePpEIzrp7repC4zaikvFErqHsEiODUF

# he/CBAANa8HYlhRIFa9+UrC4YMRStUqCt4UqAEkqJoMnWkHevdVmSbwLnHhwCbww

# ggd6MIIFYqADAgECAgphDpDSAAAAAAADMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYD

# VQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEe

# MBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3Nv

# ZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxMTAeFw0xMTA3MDgyMDU5

# MDlaFw0yNjA3MDgyMTA5MDlaMH4xCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNo

# aW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29y

# cG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIw

# MTEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCr8PpyEBwurdhuqoIQ

# TTS68rZYIZ9CGypr6VpQqrgGOBoESbp/wwwe3TdrxhLYC/A4wpkGsMg51QEUMULT

# iQ15ZId+lGAkbK+eSZzpaF7S35tTsgosw6/ZqSuuegmv15ZZymAaBelmdugyUiYS

# L+erCFDPs0S3XdjELgN1q2jzy23zOlyhFvRGuuA4ZKxuZDV4pqBjDy3TQJP4494H

# DdVceaVJKecNvqATd76UPe/74ytaEB9NViiienLgEjq3SV7Y7e1DkYPZe7J7hhvZ

# PrGMXeiJT4Qa8qEvWeSQOy2uM1jFtz7+MtOzAz2xsq+SOH7SnYAs9U5WkSE1JcM5

# bmR/U7qcD60ZI4TL9LoDho33X/DQUr+MlIe8wCF0JV8YKLbMJyg4JZg5SjbPfLGS

# rhwjp6lm7GEfauEoSZ1fiOIlXdMhSz5SxLVXPyQD8NF6Wy/VI+NwXQ9RRnez+ADh

# vKwCgl/bwBWzvRvUVUvnOaEP6SNJvBi4RHxF5MHDcnrgcuck379GmcXvwhxX24ON

# 7E1JMKerjt/sW5+v/N2wZuLBl4F77dbtS+dJKacTKKanfWeA5opieF+yL4TXV5xc

# v3coKPHtbcMojyyPQDdPweGFRInECUzF1KVDL3SV9274eCBYLBNdYJWaPk8zhNqw

# iBfenk70lrC8RqBsmNLg1oiMCwIDAQABo4IB7TCCAekwEAYJKwYBBAGCNxUBBAMC

# AQAwHQYDVR0OBBYEFEhuZOVQBdOCqhc3NyK1bajKdQKVMBkGCSsGAQQBgjcUAgQM

# HgoAUwB1AGIAQwBBMAsGA1UdDwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB8GA1Ud

# IwQYMBaAFHItOgIxkEO5FAVO4eqnxzHRI4k0MFoGA1UdHwRTMFEwT6BNoEuGSWh0

# dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kvY3JsL3Byb2R1Y3RzL01pY1Jvb0Nl

# ckF1dDIwMTFfMjAxMV8wM18yMi5jcmwwXgYIKwYBBQUHAQEEUjBQME4GCCsGAQUF

# BzAChkJodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jvb0Nl

# ckF1dDIwMTFfMjAxMV8wM18yMi5jcnQwgZ8GA1UdIASBlzCBlDCBkQYJKwYBBAGC

# Ny4DMIGDMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtp

# b3BzL2RvY3MvcHJpbWFyeWNwcy5odG0wQAYIKwYBBQUHAgIwNB4yIB0ATABlAGcA

# YQBsAF8AcABvAGwAaQBjAHkAXwBzAHQAYQB0AGUAbQBlAG4AdAAuIB0wDQYJKoZI

# hvcNAQELBQADggIBAGfyhqWY4FR5Gi7T2HRnIpsLlhHhY5KZQpZ90nkMkMFlXy4s

# PvjDctFtg/6+P+gKyju/R6mj82nbY78iNaWXXWWEkH2LRlBV2AySfNIaSxzzPEKL

# UtCw/WvjPgcuKZvmPRul1LUdd5Q54ulkyUQ9eHoj8xN9ppB0g430yyYCRirCihC7

# pKkFDJvtaPpoLpWgKj8qa1hJYx8JaW5amJbkg/TAj/NGK978O9C9Ne9uJa7lryft

# 0N3zDq+ZKJeYTQ49C/IIidYfwzIY4vDFLc5bnrRJOQrGCsLGra7lstnbFYhRRVg4

# MnEnGn+x9Cf43iw6IGmYslmJaG5vp7d0w0AFBqYBKig+gj8TTWYLwLNN9eGPfxxv

# FX1Fp3blQCplo8NdUmKGwx1jNpeG39rz+PIWoZon4c2ll9DuXWNB41sHnIc+BncG

# 0QaxdR8UvmFhtfDcxhsEvt9Bxw4o7t5lL+yX9qFcltgA1qFGvVnzl6UJS0gQmYAf

# 0AApxbGbpT9Fdx41xtKiop96eiL6SJUfq/tHI4D1nvi/a7dLl+LrdXga7Oo3mXkY

# S//WsyNodeav+vyL6wuA6mk7r/ww7QRMjt/fdW1jkT3RnVZOT7+AVyKheBEyIXrv

# QQqxP/uozKRdwaGIm1dxVk5IRcBCyZt2WwqASGv9eZ/BvW1taslScxMNelDNMYIV

# xTCCFcECAQEwgZUwfjELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x

# EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv

# bjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAxMQITMwAA

# AI6HkaRXGl/KPgAAAAAAjjANBglghkgBZQMEAgEFAKCBsDAZBgkqhkiG9w0BCQMx

# DAYKKwYBBAGCNwIBBDAcBgorBgEEAYI3AgELMQ4wDAYKKwYBBAGCNwIBFTAvBgkq

# hkiG9w0BCQQxIgQgGxsGfq1t4MA25MiDR1uh3MaDigL+S6mWBamrEhKmU9gwRAYK

# KwYBBAGCNwIBDDE2MDSgEoAQAEEAegBTAEQASwAyADUAMqEegBxodHRwczovL2Fr

# YS5tcy9henNka29zc2RvY3MgMA0GCSqGSIb3DQEBAQUABIIBAG+/YYsfy4/Qo8tG

# 5dFVE+eCiF4xOG97l4r9mPGElelDjyfLe73r4RcLVrmqf8rDwcWWtYXJTC2C2RWQ

# POticWUhJnByLNABbNSWatCNzQbtRhswei4VRafEzItmw0SU57OciNtcGvX20Vfq

# DIUvUXjHyWb8Ozoj9y6atvcAYq+BWpesLKv90n/LMQI0Nstsaw795OsbYZ8W1dx2

# qieB3IK1/XDNCIFoGO3o+EurArVhm/k7Kcp8Vqn1LwxTQL7zrmrHtr776yITs1dL

# UrxoeHRuyRdic23RtZHFDzzAXuWjQ1q//29CMDwHEPNqCpAN3NKULKDFf3pK30hO

# E97tIWGhghNNMIITSQYKKwYBBAGCNwMDATGCEzkwghM1BgkqhkiG9w0BBwKgghMm

# MIITIgIBAzEPMA0GCWCGSAFlAwQCAQUAMIIBPQYLKoZIhvcNAQkQAQSgggEsBIIB

# KDCCASQCAQEGCisGAQQBhFkKAwEwMTANBglghkgBZQMEAgEFAAQgz+da6Q55CeGE

# cAmkiD50p59HSZEBVZ1n2S5Z8WhP9wsCBlmSJmy5lhgTMjAxNzA5MDUwOTM2MzMu

# Mzk2WjAHAgEBgAIB9KCBuaSBtjCBszELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldh

# c2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBD

# b3Jwb3JhdGlvbjENMAsGA1UECxMETU9QUjEnMCUGA1UECxMebkNpcGhlciBEU0Ug

# RVNOOkMwRjQtMzA4Ni1ERUY4MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFt

# cCBTZXJ2aWNloIIO0DCCBnEwggRZoAMCAQICCmEJgSoAAAAAAAIwDQYJKoZIhvcN

# AQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD

# VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAw

# BgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEw

# MB4XDTEwMDcwMTIxMzY1NVoXDTI1MDcwMTIxNDY1NVowfDELMAkGA1UEBhMCVVMx

# EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoT

# FU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUt

# U3RhbXAgUENBIDIwMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp

# HQ28dxGKOiDs/BOX9fp/aZRrdFQQ1aUKAIKF++18aEssX8XD5WHCdrc+Zitb8BVT

# JwQxH0EbGpUdzgkTjnxhMFmxMEQP8WCIhFRDDNdNuDgIs0Ldk6zWczBXJoKjRQ3Q

# 6vVHgc2/JGAyWGBG8lhHhjKEHnRhZ5FfgVSxz5NMksHEpl3RYRNuKMYa+YaAu99h

# /EbBJx0kZxJyGiGKr0tkiVBisV39dx898Fd1rL2KQk1AUdEPnAY+Z3/1ZsADlkR+

# 79BL/W7lmsqxqPJ6Kgox8NpOBpG2iAg16HgcsOmZzTznL0S6p/TcZL2kAcEgCZN4

# zfy8wMlEXV4WnAEFTyJNAgMBAAGjggHmMIIB4jAQBgkrBgEEAYI3FQEEAwIBADAd

# BgNVHQ4EFgQU1WM6XIoxkPNDe3xGG8UzaFqFbVUwGQYJKwYBBAGCNxQCBAweCgBT

# AHUAYgBDAEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgw

# FoAU1fZWy4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDov

# L2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0

# XzIwMTAtMDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0

# cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAx

# MC0wNi0yMy5jcnQwgaAGA1UdIAEB/wSBlTCBkjCBjwYJKwYBBAGCNy4DMIGBMD0G

# CCsGAQUFBwIBFjFodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vUEtJL2RvY3MvQ1BT

# L2RlZmF1bHQuaHRtMEAGCCsGAQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAFAAbwBs

# AGkAYwB5AF8AUwB0AGEAdABlAG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4IC

# AQAH5ohRDeLG4Jg/gXEDPZ2joSFvs+umzPUxvs8F4qn++ldtGTCzwsVmyWrf9efw

# eL3HqJ4l4/m87WtUVwgrUYJEEvu5U4zM9GASinbMQEBBm9xcF/9c+V4XNZgkVkt0

# 70IQyK+/f8Z/8jd9Wj8c8pl5SpFSAK84Dxf1L3mBZdmptWvkx872ynoAb0swRCQi

# PM/tA6WWj1kpvLb9BOFwnzJKJ/1Vry/+tuWOM7tiX5rbV0Dp8c6ZZpCM/2pif93F

# SguRJuI57BlKcWOdeyFtw5yjojz6f32WapB4pm3S4Zz5Hfw42JT0xqUKloakvZ4a

# rgRCg7i1gJsiOCC1JeVk7Pf0v35jWSUPei45V3aicaoGig+JFrphpxHLmtgOR5qA

# xdDNp9DvfYPw4TtxCd9ddJgiCGHasFAeb73x4QDf5zEHpJM692VHeOj4qEir995y

# fmFrb3epgcunCaw5u+zGy9iCtHLNHfS4hQEegPsbiSpUObJb2sgNVZl6h3M7COaY

# LeqN4DMuEin1wC9UJyH3yKxO2ii4sanblrKnQqLJzxlBTeCG+SqaoxFmMNO7dDJL

# 32N79ZmKLxvHIa9Zta7cRDyXUHHXodLFVeNp3lfB0d4wwP3M5k37Db9dT+mdHhk4

# L7zPWAUu7w2gUDXa7wknHNWzfjUeCLraNtvTX4/edIhJEjCCBNowggPCoAMCAQIC

# EzMAAACj7x8iIIFj3KUAAAAAAKMwDQYJKoZIhvcNAQELBQAwfDELMAkGA1UEBhMC

# VVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNV

# BAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRp

# bWUtU3RhbXAgUENBIDIwMTAwHhcNMTYwOTA3MTc1NjQ5WhcNMTgwOTA3MTc1NjQ5

# WjCBszELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT

# B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjENMAsGA1UE

# CxMETU9QUjEnMCUGA1UECxMebkNpcGhlciBEU0UgRVNOOkMwRjQtMzA4Ni1ERUY4

# MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIIBIjANBgkq

# hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdEel8cTafg4OxUX5kgO+V+CrFSdMBqt

# EF3Q8gX3P2iGN1rQAFPmnG0caPIpx9b/MZhSTRG69cFkhjo5CSdWSV6foSEZKRvM

# Whbj830BVRcs6eGslvvHma8ocAB1IvoucpRUX7rRxawy1OXWHnnwgaMKvmO+eGln

# 4o+F0cm+yH+Qi+S4fpiub74qZAgaSLc5Ichq9CRLYBDUcoByCDjpbvk7U+1Z2yTU

# TWHIW9NpYwAyvcyxUT3rQLh/uL67ch3BOGzeCY5uLZk6bEUI3rNPW21tgJHZI5tI

# mUwe5RF/sxeedpG94iYWHxEAHDrfmegs/+x1LFgpcKcXLSjuj7SjXwIDAQABo4IB

# GzCCARcwHQYDVR0OBBYEFPqFumZm6EaZ2nCfuiElQNvg6LFwMB8GA1UdIwQYMBaA

# FNVjOlyKMZDzQ3t8RhvFM2hahW1VMFYGA1UdHwRPME0wS6BJoEeGRWh0dHA6Ly9j

# cmwubWljcm9zb2Z0LmNvbS9wa2kvY3JsL3Byb2R1Y3RzL01pY1RpbVN0YVBDQV8y

# MDEwLTA3LTAxLmNybDBaBggrBgEFBQcBAQROMEwwSgYIKwYBBQUHMAKGPmh0dHA6

# Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljVGltU3RhUENBXzIwMTAt

# MDctMDEuY3J0MAwGA1UdEwEB/wQCMAAwEwYDVR0lBAwwCgYIKwYBBQUHAwgwDQYJ

# KoZIhvcNAQELBQADggEBAB3RRbpbtL+K5oaNRc41iCYSRrAzg2phMcgWc/jmJHpq

# wcAVNzyNxykNSMt0l6Wyh+EGeNVDjFM68OJRDni20/wcjSXlUxoV2T56vMe7wU5m

# WFEYD2UlYSGhvuaRw2CO+Qm0PojCpnKBOxzyEBzVBa6IXTRVUqhDhozwDVS+S+RL

# 7heVtpu8AmsWzbItbPWr3zXhBoO0WUHnHgHzaE332N4kLEZLQsCNF3NEUCuN3nbN

# f3Rd3+ZkzDK4nsDPZVIRCAZ6l7aDZaNi2MODujmOR7hTqsNmGhy9SU703NQHrNK4

# 0WT54HfJ7HaAxKsXK+sjg7WWifHYS5aS3W+pwjvW85yhggN5MIICYQIBATCB46GB

# uaSBtjCBszELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNV

# BAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjENMAsG

# A1UECxMETU9QUjEnMCUGA1UECxMebkNpcGhlciBEU0UgRVNOOkMwRjQtMzA4Ni1E

# RUY4MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiUKAQEw

# CQYFKw4DAhoFAAMVADXko/tOP/8mDXH1bV4Se5GWOKaNoIHCMIG/pIG8MIG5MQsw

# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u

# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMQ0wCwYDVQQLEwRNT1BS

# MScwJQYDVQQLEx5uQ2lwaGVyIE5UUyBFU046NTdGNi1DMUUwLTU1NEMxKzApBgNV

# BAMTIk1pY3Jvc29mdCBUaW1lIFNvdXJjZSBNYXN0ZXIgQ2xvY2swDQYJKoZIhvcN

# AQEFBQACBQDdWK09MCIYDzIwMTcwOTA1MDQ1NzMzWhgPMjAxNzA5MDYwNDU3MzNa

# MHcwPQYKKwYBBAGEWQoEATEvMC0wCgIFAN1YrT0CAQAwCgIBAAICCK8CAf8wBwIB

# AAICGAkwCgIFAN1Z/r0CAQAwNgYKKwYBBAGEWQoEAjEoMCYwDAYKKwYBBAGEWQoD

# AaAKMAgCAQACAxbjYKEKMAgCAQACAwehIDANBgkqhkiG9w0BAQUFAAOCAQEAMYfi

# 5I9zkyR80j3BPxZ8ymXjfpDzMwuSzutzFXOoENXkLYOBMI+wDSKQfCmrkES79KHm

# Ihi5slKqvI/Rnr5YnQdRreDGw1uMERxhdv2x/zYplwbpYpmerI3mBGdcdNFrkYut

# Em6DLmp29H1Xps2/aT4Phg/Ksqar5XVrMpiu2jJQiVWRDJroS6l7KkGHK6hugOZ3

# nLymAnfET3VKMifzcmnTLQxtm23rT/qkOaHvMR5YD0ObLB3MzWAdoUlZqhfUwvq0

# 74Sehyidxw5qFg4WM5Y7vozRy6E08winEFsMZRfXfmaqM4lpLOgCFyswgjyFN3Ip

# DGGsbKuUyMlFsj1WQzGCAvUwggLxAgEBMIGTMHwxCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1w

# IFBDQSAyMDEwAhMzAAAAo+8fIiCBY9ylAAAAAACjMA0GCWCGSAFlAwQCAQUAoIIB

# MjAaBgkqhkiG9w0BCQMxDQYLKoZIhvcNAQkQAQQwLwYJKoZIhvcNAQkEMSIEIJKI

# /lkNVwGhP0Buf+eubP6a/GfLih5M8U7xKQfxBkGkMIHiBgsqhkiG9w0BCRACDDGB

# 0jCBzzCBzDCBsQQUNeSj+04//yYNcfVtXhJ7kZY4po0wgZgwgYCkfjB8MQswCQYD

# VQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEe

# MBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3Nv

# ZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAKPvHyIggWPcpQAAAAAAozAWBBQH

# C6BGmJxwjkd2fNRs75/46vRKnjANBgkqhkiG9w0BAQsFAASCAQAgBdd5bO8OeewO

# nwhMednSSoiBU+vAPhC48qzlo8Xfw+yqR4tJjDhNE2g3Xly968pt7xuX3QkrQ9xY

# 386M2rP7PmutVfkycJLflkDmY1W0MH1HXq03Em7s4kaCE1sT8ogPll9huqADFBQp

# fiL0Y11F3tIbKDfs2o77aFMYNh0RGpGkCKQM5uDmt8Hu+fW2bWtMert7dspEp2zR

# bQ7W4VZy4iYQuiIvBtpHPbsO9P54pakpcLCW5fr5LptEgVglRi6C16HSrqQfpQmP

# 50WvY07dTexRWh7GtmSWaJAW6GeJHJ8lfUzXkVq+gEhGmHZ93NUBOYrfiZlb9Pwb

# O2Sx0ok7

# SIG # End signature block