AzSKPreview.ADO

1.3.1

Framework/Abstracts/CommandBase.ps1

                                <#

.Description

    Base class for all command classes. 

    Provides functionality to fire events/operations at command levels like command started, 

    command completed and perform operation like generate run-identifier, invoke auto module update, 

    open log folder at the end of commmand execution etc

#>

using namespace System.Management.Automation

Set-StrictMode -Version Latest

class CommandBase: AzSKRoot {

    #Region: Properties 

    [string[]] $FilterTags = @();

    [bool] $DoNotOpenOutputFolder = $false;

    [bool] $Force = $false

    #EndRegion

    #Region: Constructor 

    CommandBase([string] $subscriptionId, [InvocationInfo] $invocationContext):

    Base($subscriptionId) {

        [Helpers]::AbstractClass($this, [CommandBase]);

        if (-not $invocationContext) {

            throw [System.ArgumentException] ("The argument 'invocationContext' is null. Pass the `$PSCmdlet.MyInvocation from PowerShell command.");

        }

        $this.InvocationContext = $invocationContext;

        #Validate if privacy is accepted by user

        #Ensure that AzSKSettings statics are setup at this point (before calling Privacy notice)

        [AzSKSettings]::InitContexts($this.SubscriptionContext, $this.InvocationContext);

        [PrivacyNotice]::ValidatePrivacyAcceptance()

        #Initialize common parameter sets

        if($null -ne $this.InvocationContext.BoundParameters["DoNotOpenOutputFolder"])

        {

            $this.DoNotOpenOutputFolder = $this.InvocationContext.BoundParameters["DoNotOpenOutputFolder"];

        }

        if($null -ne $this.InvocationContext.BoundParameters["Force"])

        {

            $this.Force = $this.InvocationContext.BoundParameters["Force"];

        }

        #Check multiple AzSK* module should not be loaded in same session

        $this.CheckMultipleAzSKModuleLoaded();    

    }

    #EndRegion

    #Region: Command level listerner events 

    [void] CommandStarted() {

        $this.PublishAzSKRootEvent([AzSKRootEvent]::CommandStarted, $this.CheckModuleVersion());

    }

    [void] PostCommandStartedAction()

    {

    }

    [void] CommandError([System.Management.Automation.ErrorRecord] $exception) {

        [AzSKRootEventArgument] $arguments = $this.CreateRootEventArgumentObject();

        $arguments.ExceptionMessage = $exception;

        $this.PublishEvent([AzSKRootEvent]::CommandError, $arguments);

    }

    [void] CommandCompleted([MessageData[]] $messages) {

        $this.PublishAzSKRootEvent([AzSKRootEvent]::CommandCompleted, $messages);

    }

    [void] CommandProgress([int] $totalItems, [int] $currentItem) {

        $this.CommandProgress($totalItems, $currentItem, 1);

    }

    [void] CommandProgress([int] $totalItems, [int] $currentItem, [int] $granularity) {

        if ($totalItems -gt 0) {

            # $granularity indicates the number of items after which percentage progress will be printed

            # Set the max granularity to total items

            if ($granularity -gt $totalItems) {

                $granularity = $totalItems;

            }

            # Conditions for posting progress: 0%, 100% and based on granularity

            if ($currentItem -eq 0 -or $currentItem -eq $totalItems -or (($currentItem % $granularity) -eq 0)) {

                $this.PublishCustomMessage("$([int](($currentItem / $totalItems) * 100))% Completed");

            }

        }

    }

    # Dummy function declaration to define the function signature

    [void] PostCommandCompletedAction([SVTEventContext[]] $arguments)

    { }

    [void] PostCommandCompletedAction([MessageData[]] $messages)

    { }

    #EndRegion

    #Region: Helper function to invoke function based on method name. 

    # This is method called from command(GRS/GSS etc) files and resposinble for printing command start/end messages using listeners  

    [string] InvokeFunction([PSMethod] $methodToCall) {

        return $this.InvokeFunction($methodToCall, @());

    }

    [string] InvokeFunction([PSMethod] $methodToCall, [System.Object[]] $arguments) {

        if (-not $methodToCall) {

            throw [System.ArgumentException] ("The argument 'methodToCall' is null. Pass the reference of method to call. e.g.: [YourClass]::new().YourMethod");

        }

        #if attestation then rescan the controls

        if ($null -eq $arguments)

        {

            $folderPath = $this.GetOutputFolderPath();

            $methodResult = $methodToCall.Invoke(@());

            #$this.CommandCompleted($methodResult); this will update CSV but issue is there will be duplicate entries

            if(-not $this.DoNotOpenOutputFolder) {

                if (Test-Path $folderPath) {

                    Invoke-Item -Path $folderPath;

                }

            }

        }

        else {

        # Publish runidentifier(YYYYMMDD_HHMMSS) used by all listener as identifier for scan,creating log folder 

        $this.PublishRunIdentifier($this.InvocationContext);

        # <TODO Framework: Move command time calculation methods to AIOrgTelmetry Listener>

        [AIOrgTelemetryHelper]::TrackCommandExecution("Command Started",

            @{"RunIdentifier" = $this.RunIdentifier}, @{}, $this.InvocationContext);

        $sw = [System.Diagnostics.Stopwatch]::StartNew();

        # Publish command init events

        $this.CommandStarted();

        $this.PostCommandStartedAction();

        # Invoke method with arguments

        $methodResult = @();

        try {

           $methodResult = $methodToCall.Invoke($arguments);

        }

        catch {

            # Unwrapping the first layer of exception which is added by Invoke function

            [AIOrgTelemetryHelper]::TrackCommandExecution("Command Errored",

                @{"RunIdentifier" = $this.RunIdentifier; "ErrorRecord"= $_.Exception.InnerException.ErrorRecord},

                @{"TimeTakenInMs" = $sw.ElapsedMilliseconds; "SuccessCount" = 0},

                $this.InvocationContext);

            $this.CommandError($_.Exception.InnerException.ErrorRecord);

        }

        $folderPath = $this.GetOutputFolderPath();

        #the next two bug log classes have been called here as we need all the control results at one place for

        #dumping them in json file and auto closing them(to minimize api calls and auto close them in batches)

        #if bug logging is enabled and path is valid, create the JSON file for bugs

        if($this.InvocationContext.BoundParameters["AutoBugLog"] -and [BugLogPathManager]::GetIsPathValid()){

            if (([PartialScanManager]::ControlResultsWithBugSummary| Measure-Object).Count -gt 0)

            {

                $methodResult = [PartialScanManager]::ControlResultsWithBugSummary

            }

            [PublishToJSON]::new($methodResult,$folderPath)

        }

        #auto close passed bugs

        if($this.InvocationContext.BoundParameters["AutoBugLog"]){

            if (([PartialScanManager]::ControlResultsWithBugSummary| Measure-Object).Count -gt 0)

            {

                $methodResult = [PartialScanManager]::ControlResultsWithBugSummary

            }

            #call the AutoCloseBugManager

            $AutoClose=[AutoCloseBugManager]::new($this.SubscriptionContext.SubscriptionName);

            $AutoClose.AutoCloseBug($methodResult)

        }

        # Publish command complete events

        $this.CommandCompleted($methodResult);

        [AIOrgTelemetryHelper]::TrackCommandExecution("Command Completed",

            @{"RunIdentifier" = $this.RunIdentifier},

            @{"TimeTakenInMs" = $sw.ElapsedMilliseconds; "SuccessCount" = 1},

            $this.InvocationContext)

        $this.PostCommandCompletedAction($methodResult);

        # <TODO Framework: Move PDF generation method based on listener>

        #Generate PDF report

        $GeneratePDFReport = $this.InvocationContext.BoundParameters["GeneratePDF"];

        try {

            if (-not [string]::IsNullOrEmpty($folderpath)) {

                switch ($GeneratePDFReport) {

                    None {

                        # Do nothing

                    }

                    Landscape {

                        [AzSKPDFExtension]::GeneratePDF($folderpath, $this.SubscriptionContext, $this.InvocationContext, $true);

                    }

                    Portrait {

                        [AzSKPDFExtension]::GeneratePDF($folderpath, $this.SubscriptionContext, $this.InvocationContext, $false);

                    }

                }

            }

        }

        catch {

            # Unwrapping the first layer of exception which is added by Invoke function

            $this.CommandError($_);

        }

        # 

        $AttestControlParamFound = $this.InvocationContext.BoundParameters["AttestControls"];

        if($null -eq $AttestControlParamFound)

        {

            #If controls are attested then open folder when rescan of attested controls is complete

            $controlAttested = $false

            if( ([FeatureFlightingManager]::GetFeatureStatus("EnableScanAfterAttestation","*"))) { 

                #Global variable "AttestationValue" is set to true when one or more controls are attested in current scan

                #Ignore if variable AttestationValue is not found

                if (Get-Variable AttestationValue -Scope Global -ErrorAction Ignore){

                    if ( $Global:AttestationValue){

                        $controlAttested = $true

                    }

                }

            }

            if ( !$controlAttested){

            if((-not $this.DoNotOpenOutputFolder) -and (-not [string]::IsNullOrEmpty($folderPath)))

            {

                try

                {

                    Invoke-Item -Path $folderPath;

                }

                catch

                {

                    #ignore if any exception occurs

                }

            }

        }

    }

    }

        return $folderPath;

    }

    #EndRegion

    # Function to get output log folder from WriteFolder listener 

    [string] GetOutputFolderPath() {

        return [WriteFolderPath]::GetInstance().FolderPath;

    }

    # <TODO Framework: Move to module helper class>

    # Function to validate module version based on Org policy and showcase warning for update or block commands if version is less than last two minor version

    [void] CheckModuleVersion() {

        $serverVersion = [System.Version] ([ConfigurationManager]::GetAzSKConfigData().GetLatestAzSKVersion($this.GetModuleName()));

        $currentModuleVersion = [System.Version] $this.GetCurrentModuleVersion() 

        if($currentModuleVersion -ne "0.0.0.0" -and $currentModuleVersion -ne "1.0.0.0" -and $serverVersion -gt $currentModuleVersion) {

            $this.RunningLatestPSModule = $false;

            $this.InvokeAutoUpdate()

            $this.PublishCustomMessage(([Constants]::VersionCheckMessage -f $serverVersion), [MessageType]::Warning);

            $this.PublishCustomMessage(([ConfigurationManager]::GetAzSKConfigData().InstallationCommand + "`r`n"), [MessageType]::Update);

            $this.PublishCustomMessage([Constants]::VersionWarningMessage, [MessageType]::Warning);

            $serverVersions = @()

            [ConfigurationManager]::GetAzSKConfigData().GetAzSKVersionList($this.GetModuleName()) | ForEach-Object { 

                #Take major and minor version and ignore build version for comparision

               $serverVersions+= [System.Version] ("$($_.Major)" +"." + "$($_.Minor)")

             }            

            $serverVersions =  $serverVersions | Select-Object -Unique

            $latestVersionList = $serverVersions | Where-Object {$_ -gt $currentModuleVersion}

            if(($latestVersionList | Measure-Object).Count -gt [ConfigurationManager]::GetAzSKConfigData().BackwardCompatibleVersionCount)

            {

                throw ([SuppressedException]::new(("Your version of $([Constants]::AzSKModuleName) is too old. Please update now!"),[SuppressedExceptionType]::Generic))

            }

        }

        $psGalleryVersion = [System.Version] ([ConfigurationManager]::GetAzSKConfigData().GetAzSKLatestPSGalleryVersion($this.GetModuleName()));            

        if($psGalleryVersion -ne $serverVersion)

        {

            $serverVersions = @()

            [ConfigurationManager]::GetAzSKConfigData().GetAzSKVersionList($this.GetModuleName()) | ForEach-Object { 

                #Take major and minor version and ignore build version for comparision

               $serverVersions+= [System.Version] ("$($_.Major)" +"." + "$($_.Minor)")

             }            

            $serverVersions =  $serverVersions | Select-Object -Unique

            $latestVersionAvailableFromGallery = $serverVersions | Where-Object {$_ -gt $serverVersion}

            if(($latestVersionAvailableFromGallery | Measure-Object).Count -gt [ConfigurationManager]::GetAzSKConfigData().BackwardCompatibleVersionCount)

            {

                $this.PublishCustomMessage("Your Org AzSK.ADO version [$serverVersion] is too old. It must be updated to latest available version [$psGalleryVersion].",[MessageType]::Error);

            }

        }

        #Validate if detailed scan results is required in control evaluation

        $this.CheckDetailedScanStatus();

    }

    # <TODO Framework: Move to module helper class>

    # Funtion to execute module auto update flow based on switch

    [void] InvokeAutoUpdate()

    {

        $AutoUpdateSwitch= [ConfigurationManager]::GetAzSKSettings().AutoUpdateSwitch;

        $AutoUpdateCommand = [ConfigurationManager]::GetAzSKSettings().AutoUpdateCommand;

        if($AutoUpdateSwitch -ne [AutoUpdate]::On)

        {

            if($AutoUpdateSwitch -eq [AutoUpdate]::NotSet)

            {

                $AutoUpdateMsg = [Constants]::AutoUpdateMessage 

                Write-Host $AutoUpdateMsg -ForegroundColor Yellow

            }

            return;

        }

        #Step 1: Get the list of active running powershell prcesses including the current running PS Session

        $PSProcesses = Get-Process | Where-Object { ($_.Name -eq 'powershell' -or $_.Name -eq 'powershell_ise' -or $_.Name -eq 'powershelltoolsprocesshost')}

        $userChoice = ""

        if(($PSProcesses | Measure-Object).Count -ge 1)

        {            

            Write-Host([Constants]::ModuleAutoUpdateAvailableMsg) -ForegroundColor Cyan;

        }

        #User choice that captures the decision to close the active PS Sessions

        $secondUserChoice =""

        $InvalidOption = $true;

        while($InvalidOption)

        {

            if([string]::IsNullOrWhiteSpace($userChoice) -or ($userChoice.Trim() -ne 'y' -and $userChoice.Trim() -ne 'n'))

            {

                $userChoice = Read-Host "Continue (Y/N)"

                if([string]::IsNullOrWhiteSpace($userChoice) -or ($userChoice.Trim() -ne 'y' -and $userChoice.Trim() -ne 'n'))

                {

                    Write-Host "Enter the valid option." -ForegroundColor Yellow

                }

                continue;

            }

            elseif($userChoice.Trim() -eq 'n')

            {

                $InvalidOption = $false;

            }

            elseif($userChoice.Trim() -eq 'y')

            {

                #Get the number of PS active sessions

                $PSProcesses = Get-Process | Where-Object { ($_.Name -eq 'powershell' -or $_.Name -eq 'powershell_ise' -or $_.Name -eq 'powershelltoolsprocesshost') -and $_.Id -ne $PID}

                if(($PSProcesses | Measure-Object).Count -gt 0)

                {

                    Write-Host "`nThe following other PS sessions are still active. Please save your work and close them. You can also use Task Manager to close these sessions." -ForegroundColor Yellow

                    Write-Host ($PSProcesses | Select-Object Id, ProcessName, Path | Out-String)

                    $secondUserChoice = Read-Host "Continue (Y/N)"

                }

                elseif(($PSProcesses | Measure-Object).Count -eq 0)

                {

                    Write-Host "`nThe current PS session will be closed now. Have you saved your work?" -ForegroundColor Yellow

                    $secondUserChoice = Read-Host "Continue (Y/N)"

                }

                if(-not [string]::IsNullOrWhiteSpace($secondUserChoice) -and `

                (($PSProcesses | Measure-Object).Count -eq 0 -and $secondUserChoice.Trim() -eq 'y') -or `

                $secondUserChoice.Trim() -eq 'n')

                {

                    $InvalidOption = $false;

                }

            }

        }

        #Check if the first user want to continue with auto-update using userChoice field and then check if user still wants to continue with auto-update after finding the active PS sessions.

        #In either case it is no it would exit the auto-update process

        if($userChoice.Trim() -eq "n" -or $secondUserChoice.Trim() -eq 'n')

        {            

            Write-Host "Exiting auto-update workflow. To disable auto-update permanently, run the command below:" -ForegroundColor Yellow

            Write-Host "Set-AzSKADOPolicySettings -AutoUpdate Off`n" -ForegroundColor Green

            return

        }

        $AzSKTemp = Join-Path $([Constants]::AzSKAppFolderPath) "Temp";

        try

        {

            $fileName = "au_" + $(get-date).ToUniversalTime().ToString("yyyyMMdd_HHmmss") + ".ps1";

            $autoUpdateContent = [ConfigurationHelper]::LoadOfflineConfigFile("ModuleAutoUpdate.ps1");

            if(-not (Test-Path -Path $AzSKTemp))

            {

                New-Item -Path $AzSKTemp -ItemType Directory -Force

            }

            Remove-Item -Path (Join-Path $AzSKTemp "au_*") -Force -Recurse -ErrorAction SilentlyContinue

            $autoUpdateContent = $autoUpdateContent.Replace("##installurl##",$AutoUpdateCommand);

            $autoUpdateContent | Out-File (Join-Path $AzSKTemp $fileName) -Force

            Start-Process -WindowStyle Normal -FilePath "powershell.exe" -ArgumentList (Join-Path $AzSKTemp $fileName)

        }

        catch

        {

            $this.CommandError($_.Exception.InnerException.ErrorRecord);

        }

    }

    [void] CheckMultipleAzSKModuleLoaded(){

        $loadedAzSKModules= Get-Module | Where-Object { $_.Name -like "AzSK*"};

        if($env:AzSKSkipMultiModuleCheck -ne $true -and $null -ne $loadedAzSKModules -and ($loadedAzSKModules| Measure-Object).Count -gt 1){

            throw [SuppressedException]::new("ERROR: Multiple AzSK modules loaded in same session, this will lead to issues when running AzSK cmdlets.",[SuppressedExceptionType]::Generic)

        }

    }

    [void] CheckDetailedScanStatus(){

        if(-not([string]::IsNullOrEmpty($this.InvocationContext.BoundParameters['ControlIds'])) -or -not([string]::IsNullOrEmpty($this.InvocationContext.BoundParameters['DetailedScan'])) -or  -not( [string]::IsNullOrEmpty($this.InvocationContext.BoundParameters['ControlsToAttest']))  )

        {

            [AzSKRoot]::IsDetailedScanRequired = $true

        }

        else {

            [AzSKRoot]::IsDetailedScanRequired = $false

        }

    }

}

# SIG # Begin signature block

# MIIjogYJKoZIhvcNAQcCoIIjkzCCI48CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBukTbDWkNnlj2J

# CoYcdpXwIKILP0NHgyXT+LWcZqA9q6CCDYUwggYDMIID66ADAgECAhMzAAABiK9S

# 1rmSbej5AAAAAAGIMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p

# bmcgUENBIDIwMTEwHhcNMjAwMzA0MTgzOTQ4WhcNMjEwMzAzMTgzOTQ4WjB0MQsw

# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u

# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB

# AQCSCNryE+Cewy2m4t/a74wZ7C9YTwv1PyC4BvM/kSWPNs8n0RTe+FvYfU+E9uf0

# t7nYlAzHjK+plif2BhD+NgdhIUQ8sVwWO39tjvQRHjP2//vSvIfmmkRoML1Ihnjs

# 9kQiZQzYRDYYRp9xSQYmRwQjk5hl8/U7RgOiQDitVHaU7BT1MI92lfZRuIIDDYBd

# vXtbclYJMVOwqZtv0O9zQCret6R+fRSGaDNfEEpcILL+D7RV3M4uaJE4Ta6KAOdv

# V+MVaJp1YXFTZPKtpjHO6d9pHQPZiG7NdC6QbnRGmsa48uNQrb6AfmLKDI1Lp31W

# MogTaX5tZf+CZT9PSuvjOCLNAgMBAAGjggGCMIIBfjAfBgNVHSUEGDAWBgorBgEE

# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQUj9RJL9zNrPcL10RZdMQIXZN7MG8w

# VAYDVR0RBE0wS6RJMEcxLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJh

# dGlvbnMgTGltaXRlZDEWMBQGA1UEBRMNMjMwMDEyKzQ1ODM4NjAfBgNVHSMEGDAW

# gBRIbmTlUAXTgqoXNzcitW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8v

# d3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIw

# MTEtMDctMDguY3JsMGEGCCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDov

# L3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDEx

# XzIwMTEtMDctMDguY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIB

# ACnXo8hjp7FeT+H6iQlV3CcGnkSbFvIpKYafgzYCFo3UHY1VHYJVb5jHEO8oG26Q

# qBELmak6MTI+ra3WKMTGhE1sEIlowTcp4IAs8a5wpCh6Vf4Z/bAtIppP3p3gXk2X

# 8UXTc+WxjQYsDkFiSzo/OBa5hkdW1g4EpO43l9mjToBdqEPtIXsZ7Hi1/6y4gK0P

# mMiwG8LMpSn0n/oSHGjrUNBgHJPxgs63Slf58QGBznuXiRaXmfTUDdrvhRocdxIM

# i8nXQwWACMiQzJSRzBP5S2wUq7nMAqjaTbeXhJqD2SFVHdUYlKruvtPSwbnqSRWT

# GI8s4FEXt+TL3w5JnwVZmZkUFoioQDMMjFyaKurdJ6pnzbr1h6QW0R97fWc8xEIz

# LIOiU2rjwWAtlQqFO8KNiykjYGyEf5LyAJKAO+rJd9fsYR+VBauIEQoYmjnUbTXM

# SY2Lf5KMluWlDOGVh8q6XjmBccpaT+8tCfxpaVYPi1ncnwTwaPQvVq8RjWDRB7Pa

# 8ruHgj2HJFi69+hcq7mWx5nTUtzzFa7RSZfE5a1a5AuBmGNRr7f8cNfa01+tiWjV

# Kk1a+gJUBSP0sIxecFbVSXTZ7bqeal45XSDIisZBkWb+83TbXdTGMDSUFKTAdtC+

# r35GfsN8QVy59Hb5ZYzAXczhgRmk7NyE6jD0Ym5TKiW5MIIHejCCBWKgAwIBAgIK

# YQ6Q0gAAAAAAAzANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNV

# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv

# c29mdCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlm

# aWNhdGUgQXV0aG9yaXR5IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEw

# OTA5WjB+MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYD

# VQQDEx9NaWNyb3NvZnQgQ29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG

# 9w0BAQEFAAOCAg8AMIICCgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+la

# UKq4BjgaBEm6f8MMHt03a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc

# 6Whe0t+bU7IKLMOv2akrrnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4D

# dato88tt8zpcoRb0RrrgOGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+

# lD3v++MrWhAfTVYoonpy4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nk

# kDstrjNYxbc+/jLTswM9sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6

# A4aN91/w0FK/jJSHvMAhdCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmd

# X4jiJV3TIUs+UsS1Vz8kA/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL

# 5zmhD+kjSbwYuER8ReTBw3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zd

# sGbiwZeBe+3W7UvnSSmnEyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3

# T8HhhUSJxAlMxdSlQy90lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS

# 4NaIjAsCAwEAAaOCAe0wggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRI

# bmTlUAXTgqoXNzcitW2oynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTAL

# BgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBD

# uRQFTuHqp8cx0SOJNDBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jv

# c29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf

# MDNfMjIuY3JsMF4GCCsGAQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3

# dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf

# MDNfMjIuY3J0MIGfBgNVHSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEF

# BQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1h

# cnljcHMuaHRtMEAGCCsGAQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkA

# YwB5AF8AcwB0AGEAdABlAG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn

# 8oalmOBUeRou09h0ZyKbC5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7

# v0epo/Np22O/IjWll11lhJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0b

# pdS1HXeUOeLpZMlEPXh6I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/

# KmtYSWMfCWluWpiW5IP0wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvy

# CInWH8MyGOLwxS3OW560STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBp

# mLJZiWhub6e3dMNABQamASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJi

# hsMdYzaXht/a8/jyFqGaJ+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYb

# BL7fQccOKO7eZS/sl/ahXJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbS

# oqKfenoi+kiVH6v7RyOA9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sL

# gOppO6/8MO0ETI7f33VtY5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtX

# cVZOSEXAQsmbdlsKgEhr/Xmfwb1tbWrJUnMTDXpQzTGCFXMwghVvAgEBMIGVMH4x

# CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt

# b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01p

# Y3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMTECEzMAAAGIr1LWuZJt6PkAAAAA

# AYgwDQYJYIZIAWUDBAIBBQCggbAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQw

# HAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIJC5

# FAbeWOQ/T/EG67L8yCVRv0WpX640IavffSt6S7LMMEQGCisGAQQBgjcCAQwxNjA0

# oBSAEgBNAGkAYwByAG8AcwBvAGYAdKEcgBpodHRwczovL3d3dy5taWNyb3NvZnQu

# Y29tIDANBgkqhkiG9w0BAQEFAASCAQAnIlVt9RX3ztor2kaKiGzamZCeBS/lZqiV

# Lkwc7BleffvebK9wP+XwFfEs/xWJIjAZzm/+7ZjdTPnEEYOFRV45kq81U88L2NKE

# vUVA2j46DoiBgwNh58a6anKFGOcCG+NoH0z34Zw9HSbjU3/jSi5S3rpbr8qAasJ5

# MZJukYeWp5l8h0HRbqH4JIVVFXWUZk0XhOFjXYh86FZEapsCmgdnF5BGJxSUDv+d

# 8nX5nB5LX2FraYYJT43gVzni3ej5vtwhqbsLYwcN4iJXR2qrNLf/clgMelWj6gNV

# TdXvcgzD1KYZeQOglCjTw/KwuJCqyARNd3WLcg8v9HtD4GRONTrFoYIS+zCCEvcG

# CisGAQQBgjcDAwExghLnMIIS4wYJKoZIhvcNAQcCoIIS1DCCEtACAQMxDzANBglg

# hkgBZQMEAgEFADCCAVkGCyqGSIb3DQEJEAEEoIIBSASCAUQwggFAAgEBBgorBgEE

# AYRZCgMBMDEwDQYJYIZIAWUDBAIBBQAEIGVyrHtpk/WgHhB6EACF3GbetmTd96wl

# USjTTG+gziqlAgZf3QHy0YwYEzIwMjEwMTE1MTEwNzQ5LjIwMVowBIACAfSggdik

# gdUwgdIxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQH

# EwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xLTArBgNV

# BAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEmMCQGA1UE

# CxMdVGhhbGVzIFRTUyBFU046ODZERi00QkJDLTkzMzUxJTAjBgNVBAMTHE1pY3Jv

# c29mdCBUaW1lLVN0YW1wIFNlcnZpY2Wggg5KMIIE+TCCA+GgAwIBAgITMwAAAT7O

# yndSxfc0KwAAAAABPjANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJVUzETMBEG

# A1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWlj

# cm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFt

# cCBQQ0EgMjAxMDAeFw0yMDEwMTUxNzI4MjVaFw0yMjAxMTIxNzI4MjVaMIHSMQsw

# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u

# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNy

# b3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJjAkBgNVBAsTHVRoYWxl

# cyBUU1MgRVNOOjg2REYtNEJCQy05MzM1MSUwIwYDVQQDExxNaWNyb3NvZnQgVGlt

# ZS1TdGFtcCBTZXJ2aWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA

# vFTEyDzZfpws404gSC0kt4VSyX/vaxwOfri89gQdxvfQNvvQARebKR3plqHz0ZHZ

# W+bmFxyGtTh9zw20LSdpMcWYDFc1rzPuJvTNAnDkKyQP+TqrW7j/lDlCLbqi8ubo

# 4EqSpkHra0Zt15j2r/IJGZbu3QaRY6qYMZxxkkw4Y5ubAwV3E1p+TNzFg8nzgJ9k

# wEM4xvZAf9NhHhM2K/jx092xmKxyFfp0X0tboY9d1OyhdCXl8spOigE32g8zH12Y

# 2NXTfI4141LQU+9dKOKQ7YFF1kwofuGGwxMU0CsDimODWgr6VFVcNDd2tQbGubgd

# fLBGEBfje0PyoOOXEO1m4QIDAQABo4IBGzCCARcwHQYDVR0OBBYEFJNa8534u9Bi

# LWvwtbZUDraGiP17MB8GA1UdIwQYMBaAFNVjOlyKMZDzQ3t8RhvFM2hahW1VMFYG

# A1UdHwRPME0wS6BJoEeGRWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kvY3Js

# L3Byb2R1Y3RzL01pY1RpbVN0YVBDQV8yMDEwLTA3LTAxLmNybDBaBggrBgEFBQcB

# AQROMEwwSgYIKwYBBQUHMAKGPmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kv

# Y2VydHMvTWljVGltU3RhUENBXzIwMTAtMDctMDEuY3J0MAwGA1UdEwEB/wQCMAAw

# EwYDVR0lBAwwCgYIKwYBBQUHAwgwDQYJKoZIhvcNAQELBQADggEBAKaz+RF9Wp+G

# krkVj6cY5djCdVepJFyufABJ1qKlCWXhOoYAcB7w7ZxzRC4Z2iY4bc9QU93sa2YD

# whQwFPeqfKZfWSkmrcus49QB9EGPc9FwIgfBQK2AJthaYEysTawS40f6yc6w/ybo

# tAclqFAr+BPDt0zGZoExvGc8ZpVAZpvSyXbzGLuKtm8K+R73VC4DUp4sRFck1Cx8

# ILvYdYSNYqORyh0Gwi3v4HWmw6HutafFOdFjaKQEcSsn0SNLfY25qOqnu6DL+NAo

# 7z3qD0eBDISilWob5dllDcONfsu99UEtOnrbdl292yGNIyxilpI8XGNgGcZxKN6V

# qLBxAuKlWOYwggZxMIIEWaADAgECAgphCYEqAAAAAAACMA0GCSqGSIb3DQEBCwUA

# MIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH

# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQD

# EylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxMDAeFw0x

# MDA3MDEyMTM2NTVaFw0yNTA3MDEyMTQ2NTVaMHwxCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1w

# IFBDQSAyMDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR0NvHcR

# ijog7PwTl/X6f2mUa3RUENWlCgCChfvtfGhLLF/Fw+Vhwna3PmYrW/AVUycEMR9B

# GxqVHc4JE458YTBZsTBED/FgiIRUQwzXTbg4CLNC3ZOs1nMwVyaCo0UN0Or1R4HN

# vyRgMlhgRvJYR4YyhB50YWeRX4FUsc+TTJLBxKZd0WETbijGGvmGgLvfYfxGwScd

# JGcSchohiq9LZIlQYrFd/XcfPfBXday9ikJNQFHRD5wGPmd/9WbAA5ZEfu/QS/1u

# 5ZrKsajyeioKMfDaTgaRtogINeh4HLDpmc085y9Euqf03GS9pAHBIAmTeM38vMDJ

# RF1eFpwBBU8iTQIDAQABo4IB5jCCAeIwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0O

# BBYEFNVjOlyKMZDzQ3t8RhvFM2hahW1VMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIA

# QwBBMAsGA1UdDwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFNX2

# VsuP6KJcYmjRPZSQW9fOmhjEMFYGA1UdHwRPME0wS6BJoEeGRWh0dHA6Ly9jcmwu

# bWljcm9zb2Z0LmNvbS9wa2kvY3JsL3Byb2R1Y3RzL01pY1Jvb0NlckF1dF8yMDEw

# LTA2LTIzLmNybDBaBggrBgEFBQcBAQROMEwwSgYIKwYBBQUHMAKGPmh0dHA6Ly93

# d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYt

# MjMuY3J0MIGgBgNVHSABAf8EgZUwgZIwgY8GCSsGAQQBgjcuAzCBgTA9BggrBgEF

# BQcCARYxaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL1BLSS9kb2NzL0NQUy9kZWZh

# dWx0Lmh0bTBABggrBgEFBQcCAjA0HjIgHQBMAGUAZwBhAGwAXwBQAG8AbABpAGMA

# eQBfAFMAdABhAHQAZQBtAGUAbgB0AC4gHTANBgkqhkiG9w0BAQsFAAOCAgEAB+aI

# UQ3ixuCYP4FxAz2do6Ehb7Prpsz1Mb7PBeKp/vpXbRkws8LFZslq3/Xn8Hi9x6ie

# JeP5vO1rVFcIK1GCRBL7uVOMzPRgEop2zEBAQZvcXBf/XPleFzWYJFZLdO9CEMiv

# v3/Gf/I3fVo/HPKZeUqRUgCvOA8X9S95gWXZqbVr5MfO9sp6AG9LMEQkIjzP7QOl

# lo9ZKby2/QThcJ8ySif9Va8v/rbljjO7Yl+a21dA6fHOmWaQjP9qYn/dxUoLkSbi

# OewZSnFjnXshbcOco6I8+n99lmqQeKZt0uGc+R38ONiU9MalCpaGpL2eGq4EQoO4

# tYCbIjggtSXlZOz39L9+Y1klD3ouOVd2onGqBooPiRa6YacRy5rYDkeagMXQzafQ

# 732D8OE7cQnfXXSYIghh2rBQHm+98eEA3+cxB6STOvdlR3jo+KhIq/fecn5ha293

# qYHLpwmsObvsxsvYgrRyzR30uIUBHoD7G4kqVDmyW9rIDVWZeodzOwjmmC3qjeAz

# LhIp9cAvVCch98isTtoouLGp25ayp0Kiyc8ZQU3ghvkqmqMRZjDTu3QyS99je/WZ

# ii8bxyGvWbWu3EQ8l1Bx16HSxVXjad5XwdHeMMD9zOZN+w2/XU/pnR4ZOC+8z1gF

# Lu8NoFA12u8JJxzVs341Hgi62jbb01+P3nSISRKhggLUMIICPQIBATCCAQChgdik

# gdUwgdIxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQH

# EwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xLTArBgNV

# BAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEmMCQGA1UE

# CxMdVGhhbGVzIFRTUyBFU046ODZERi00QkJDLTkzMzUxJTAjBgNVBAMTHE1pY3Jv

# c29mdCBUaW1lLVN0YW1wIFNlcnZpY2WiIwoBATAHBgUrDgMCGgMVAKBMFej0xjCT

# jCk1sTdTKa+TzJDUoIGDMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldh

# c2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBD

# b3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIw

# MTAwDQYJKoZIhvcNAQEFBQACBQDjq8ErMCIYDzIwMjEwMTE1MTUyMjE5WhgPMjAy

# MTAxMTYxNTIyMTlaMHQwOgYKKwYBBAGEWQoEATEsMCowCgIFAOOrwSsCAQAwBwIB

# AAICEhUwBwIBAAICEZMwCgIFAOOtEqsCAQAwNgYKKwYBBAGEWQoEAjEoMCYwDAYK

# KwYBBAGEWQoDAqAKMAgCAQACAwehIKEKMAgCAQACAwGGoDANBgkqhkiG9w0BAQUF

# AAOBgQA7l0s5Qr34nnNy+lWpXOE2tu6OO7CqznyY7tuWNY1p7eaMI7OjpMjkIKQO

# 2krKac7G0fZoFO/O9sYOZiic9I7sReRcqMtDb76wLeewATyKlI001v0hYPNrtCPH

# YCD1oF9dpODdXg+Z0XeogKUBzGrycDUtncXhPz11S4jinHrnDzGCAw0wggMJAgEB

# MIGTMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQH

# EwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNV

# BAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAABPs7Kd1LF9zQr

# AAAAAAE+MA0GCWCGSAFlAwQCAQUAoIIBSjAaBgkqhkiG9w0BCQMxDQYLKoZIhvcN

# AQkQAQQwLwYJKoZIhvcNAQkEMSIEICGtt+kQE2yWoH/dCN+Sg/L+/uxYuP78iNHB

# kxdzxtY8MIH6BgsqhkiG9w0BCRACLzGB6jCB5zCB5DCBvQQgi+vOjaqNTvKOZGut

# 49HXrqtwUj2ZCnVOurBwfgQxmxMwgZgwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEG

# A1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWlj

# cm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFt

# cCBQQ0EgMjAxMAITMwAAAT7OyndSxfc0KwAAAAABPjAiBCDr7gRYjhJImidY5pob

# FNN6c02ZvJFwISrvHy3BF9sQyzANBgkqhkiG9w0BAQsFAASCAQC1aMS1JXPDxmOH

# 8YQQ6YJ1xcvmi/DGtBK2jQpBdLjerZR8anFvTr/stEVVWst+eH3k5jI9zSnoA/oG

# sk9t0D6K1vG8EsIXCtUeE6+QGV4SEkrpXT0uACLIiNpGD7NswXYSl9n0A2Uw44t7

# R2djZNgTjwfna4L3a7/O+Y6//BTk23Uu0mtHfkz5f+IdCC/aMND67jeYeWNVO4DJ

# 3PfWXz4Y0q0HqLahdWlPo9wm351JPp176YJ45Ggl/n9ygzw7ktD6Oo9vIgYPQ6/8

# JcFTyPRaWlc2vr6hJNSFVIo3EINaoXDd/Djaew4wz71B3r/JzArkWLhOXUn/haKj

# S05P2XS0

# SIG # End signature block