BaselineManagement

3.1.4-prerelease

Parsers/GPO/Registry.ps1

                                $ParsersRoot = Get-Item $PsScriptRoot | ForEach-Object {$_.Parent} | ForEach-Object {$_.FullName}

$ModuleRoot = Get-Item $ParsersRoot | ForEach-Object {$_.Parent} | ForEach-Object {$_.FullName}

$Helpers = Join-Path $ModuleRoot 'Helpers'

# Create a variable so we can set DependsOn values between passes.

New-Variable -Name GlobalDependsOn -Value @() -Option AllScope -Scope Script -Force

$GlobalDependsOn = @()

Function Resolve-RegistrySpecialCases

{

    [CmdletBinding()]

    param

    (

        [Parameter(Mandatory=$true)]

        $regHash

    )

    # Special Cases.

    switch -regex ((Join-Path -Path $regHash.Key -ChildPath $regHash.ValueName))

    {

        "HKLM:\\System\\CurrentControlSet\\Control\\SecurePipeServers\\Winreg\\(AllowedExactPaths|AllowedPaths)\\Machine"

        {

            # $regHash.ValueData = $regHash.ValueData -split ","

        }

        "HKLM:\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\LegalNoticeText"

        {

            #Special case LegalNoticeText, written as a REG_MULTI_SZ by Group Policy Editor but written to registry as REG_SZ

            #Replacing comma with LF (line feed) and CR (Carriage Return)

            $values = $regHash.ValueData -split ","

            $regHash.ValueData = ""

            $values[0..($values.count-2)] | ForEach-Object{$regHash.ValueData += $_ +"`r`n"}

            $regHash.ValueData += $values[($values.count-1)]

            #Change the type to REG_SZ

            $regHash.ValueType = "String"

        } 

    }

}

Function Add-RegistryDELVALDependsOn

{

    [CmdletBinding()]

    param

    (

        [Parameter(Mandatory = $true)]

        $regHash

    )

    $DependsOn = @()

    $delVals = "DELVALS_$($regHash.Key.TrimStart("HKLM:"))"

    if ($script:GlobalDependsOn -contains $delVals -and $ExclusiveFlagAvailable)

    {

        $DependsOn += "[Registry]$delVals"

    }

    $delVal_ValueName = "DEL_$((Join-Path -Path $regHash.Key -ChildPath $regHash.ValueName).TrimStart("HKLM:"))"

    if ($script:GlobalDependsOn -contains $delVal_ValueName)

    {

        $DependsOn += "[Registry]$delVal_ValueName"

    }

    $deleteKeys = "DELETEKEY_$($regHash.Key.TrimStart("HKLM:"))"

    if ($script:GlobalDependsOn -contains $deleteKeys)

    {

        $DependsOn += "[Registry]$deleteKeys"

    }

    $deleteValue = "DELETEVALUES_$((Join-Path -Path $regHash.Key -ChildPath $regHash.ValueName).TrimStart("HKLM:"))"

    if ($script:GlobalDependsOn -contains $deleteValue)

    {

        $DependsOn += "[Registry]$deleteValue"

    }

    if ($DependsOn.count -gt 0)

    {

        $regHash.DependsOn = $DependsOn

    }

}

Function Register-RegistryDELVALDependsOn

{

    [CmdletBinding()]

    param

    (

        [Parameter(Mandatory = $true)]

        $regHash

    )

    $CommentOUT = $false

    # Process any pol instructions.

    switch -regex ($regHash.ValueName)

    {

        "\*\*del\.(?<ValueName>.*)$" 

        {

            $regHash.ValueName = $Matches.ValueName

            $regHash.Ensure = "Absent"

            $Name = "DEL_$((Join-Path -Path $regHash.Key -ChildPath $regHash.ValueName).TrimStart("HKLM:"))"

            $script:GlobalDependsOn += $Name

            # This is only a delete so return from here.

            return Write-DSCString -Resource -Name $Name -Type 'RegistryPolicyFile' -Parameters $regHash -CommentOUT:$CommentOUT

        }

        "\*\*delvals\."

        {

            $regHash.Ensure = "Present"

            $regHash.ValueName = ""

            $regHash.Exclusive = $true

            $Name = "DELVALS_$($regHash.Key.TrimStart("HKLM:"))"

            $script:GlobalDependsOn += $Name

            # This is only a delete so return from here.

            return Write-DSCString -Resource -Name $Name -Type 'RegistryPolicyFile' -Parameters $regHash -CommentOUT:(!$ExclusiveFlagAvailable)

        }

        "\*\*DeleteValues"

        {

            $Data.ValueData = $Data.ValueData -replace "[^\u0020-\u007E]", ""

            foreach ($ValueName in ($Data.ValueData -split ";"))

            {          

                $regHash.Ensure = "Absent"

                $Name = "DELETEVALUES_$((Join-Path -Path $regHash.Key -ChildPath $regHash.ValueName).TrimStart("HKLM:"))"

                $script:GlobalDependsOn += $Name

                # This is only a delete so return from here.

                Write-DSCString -Resource -Name $Name -Type 'RegistryPolicyFile' -Parameters $regHash -CommentOUT:$CommentOUT

            }

            return

        }

        "\*\*DeleteKeys"

        {

            $Data.ValueData = $Data.ValueData -replace "[^\u0020-\u007E]", ""

            foreach ($Key in ($Data.ValueData -split ";"))

            {          

                $regHash.Ensure = "Absent"

                $Name = "DELETEKEYS_$($regHash.Key.TrimStart("HKLM:"))"

                $script:GlobalDependsOn += $Name

                # This is only a delete so return from here.

                Write-DSCString -Resource -Name $Name -Type 'RegistryPolicyFile' -Parameters $regHash -CommentOUT:$CommentOUT

            }

            return

        }

        "\*\*SecureKey"

        {

            $Name = "SECUREKEY_$($regHash.Key)"

            # This is only a delete so return from here.

            return Write-DSCString -Resource -Name $Name -Type 'RegistryPolicyFile' -Parameters $regHash -CommentOUT:$true

        }

    }

    return $null

}

Function Update-RegistryHashtable

{

    [CmdletBinding()]

    param

    (

        [Parameter(Mandatory = $true)]

        $regHash

    )

    $regHash.ValueName = $regHash.ValueName -replace "[^\u0020-\u007E]", ""

    if ([string]::IsNullOrEmpty($regHash.ValueName))

    {

        $regHash.Remove("ValueData")

    }

    $typeHash = @{"REG_SZ" = "String"; "REG_NONE" = "None"; "REG_DWORD" = "Dword"; "REG_EXPAND_SZ" = "ExpandString"; "REG_QWORD" = "Qword"; "REG_BINARY" = "Binary"; "REG_MULTI_SZ" = "MultiString"}

    if ($regHash.ValueType -in $typeHash.Keys)

    {

        $regHash.ValueType = $typeHash[$regHash.ValueType.ToString()]

    }

    else

    {

        $regHash.ValueType = "None"

    }

    if ($regHash.ContainsKey("ValueData") -and $regHash.ValueData -ne $null)

    {

        switch ($regHash.ValueType)

        {

            "String"

            {

                [string]$regHash.ValueData = "'$($regHash.ValueData)'"# -replace "[^\u0020-\u007E]", ""

            }

            "None" 

            { 

                $regHash.Remove("ValueData") | Out-Null

            }

            "ExpandString" 

            { 

                # Contains unexpanded Environment Paths. Should I expand them?

                [string]$regHash.ValueData = "'$($regHash.ValueData)'"# -replace "[^\u0020-\u007E]", ""

            }

            "Dword" 

            { 

                $ValueData = 1

                if ($regHash.ValueData -match "(Disabled|Enabled|Not Defined|True|False)" -or $ValueData -eq "''")

                {

                    # This is supposed to be an INT and it's a String

                    [int]$regHash.ValueData = @{"Disabled" = 0; "Enabled" = 1; "Not Defined" = 0; "True" = 1; "False" = 0; '' = 0}.$ValueData

                }

                elseif (([int]::TryParse($regHash.ValueData, [ref]$ValueData)))

                {

                    [int]$regHash.ValueData = $ValueData

                }

                else

                {

                    # If it doesn't parse as an integer, try parsing as hexadecimal.

                    Try 

                    {

                        [int]$regHash.ValueData = [Convert]::ToInt32($regHash.ValueData, 16)

                    }

                    Catch

                    {

                        # Other wise fail over for now until a better option comes along.

                        $regHash.Remove("ValueData") | Out-Null

                    }

                }

            }

            "Qword"

            { 

            }    

            "Binary" 

            { 

                $reghash.ValueType = "Binary" 

                if ($regHash.ContainsKey("ValueData"))

                {

                    if ($regHash.ValueData.Count -gt 1)

                    {

                        Try

                        {

                            [string]$hexified = ($regHash.ValueData | ForEach-Object ToString X2) -join ''

                            [string]$regHash.ValueData = $hexified

                        }

                        Catch

                        {

                            Write-Error "Error Processing Binary Data for Key ($(Join-Path -Path $regHash.Key -ChildPath $regHash.ValueName))"

                            $regHash.CommentOut = $true

                            Add-ProcessingHistory -Type 'RegistryPolicyFile' -Name "Registry(INF): $(Join-Path -Path $regHash.Key -ChildPath $regHash.ValueName)" -ParsingError

                        }

                    }

                    else

                    {

                        $regHash.ValueData = "$($regHash.ValueData)"

                    }

                }

                $regHash.ValueType = "Binary"

            }  

            "MultiString" 

            { 

                if ($regHash.ValueData -isnot [System.Array])

                {

                     # Does this have to be done in the Calling Function instead?

                    $regHash.ValueData = @"

$($regHash.ValueData)

"@# -replace "[^\u0020-\u007E]", ""

                }

                $reghash.ValueType = "MultiString" 

            }

            Default { $regHash.ValueType = "None" }

        }

    }

    if ($regHash.ValueType -eq "None")

    {

        # The REG_NONE is not allowed by the Registry resource.

        $regHash.Remove("ValueType")

    }

    if ([string]::IsNullOrEmpty($regHash.ValueName))

    {

        $regHash.Remove("ValueData")

    }

    Resolve-RegistrySpecialCases $reghash

}

Function Write-GPORegistryPOLData

{

    [CmdletBinding()]

    [OutputType([String])]

    param

    (

        [Parameter(Mandatory = $true, ValueFromPipeline = $true)]

        [psobject]$Data,

        [Parameter()]

        [ValidateSet("HKLM", "HKCU")]

        [string]$Hive = "HKLM"

    )

    $regHash = @{}

    $regHash.ValueName = ""

    $regHash.Key = "$($Hive):\"

    $CommentOUT = $false

    if ($Hive -eq "HKCU")

    {

        Write-Verbose "Write-GPORegistryPOLData: CurrentUser settings are currently not supported"

        $CommentOut = $true

    }

    $regHash.ValueName = $Data.ValueName

    $regHash.Key = Join-Path -Path $regHash.Key -ChildPath $Data.KeyName

    $regHash.ValueType = $Data.ValueType.ToString()

    # TODO this likely will need additional types in the future

    $regHash.TargetType = 'ComputerConfiguration'

    if ($Data.ValueData -eq "$([char]0)")

    {

        $regHash.ValueData = $null

    }

    else

    {

        $regHash.ValueData = $Data.ValueData

    }

    Update-RegistryHashtable $regHash

    $output = Register-RegistryDELVALDependsOn $regHash

    if ($output -ne $null)

    {

        return $output

    }

    Add-RegistryDELVALDependsOn $regHash

    $comment = ""

    if ($regHash.ValueData -eq $null)

    {

        $Comment = "`tThis MultiString Value has a value of `$null, `n`tSome Security Policies require Registry Values to be `$null`n`tIf you believe ' ' is the correct value for this string, you may change it here."

    }  

    Write-DSCString -Resource -Name "Registry(POL): $(Join-Path -Path $regHash.Key -ChildPath $regHash.ValueName)" -Type 'RegistryPolicyFile' -Parameters $regHash -CommentOUT:$CommentOUT -Comment $Comment

}

Function Write-GPORegistryINFData

{

    [CmdletBinding()]

    [OutputType([String])]

    param

    (

        [Parameter(Mandatory = $true)]

        [ValidateNotNullOrEmpty()]

        [string]$Key,

        [Parameter(Mandatory = $true)]

        [ValidateNotNullOrEmpty()]

        [string]$ValueData

    )

    # Regsitry keys set by Security Policy (secedit.exe) should not be set directly

    # The info from gpttmpl.inf is the path to the key and the data

    # SecurityOption resource takes each setting by name, not path (so this is sort of a reverse of SecurityOption resource) 

    # There is no need to use seperate entries per key, but it is the easiest to support at first

    # Loading SecurityOptionData (this file was copied from SecurityPolicyDSC module)

    $securityOptionData = Import-PowerShellDataFile (Join-Path $Helpers 'SecurityOptionData.psd1')

    $securityOptionRegistry = $securityOptionData.GetEnumerator() | Where-Object {$_.Value.Section -eq 'Registry Values'}

    $securityOption = $securityOptionRegistry | Where-Object {$_.Value.Value -eq $Key}

    $Name = $securityOption.Name

    if ($null -eq $Name) {

        throw "The GptTmpl.inf file contains an entry '$Key' in the Registry section that is an unknown value in the module file Helpers\SecurityOptionData.psd1."

    }

    # Create a hash table containing the DSC resource parameters

    $resHash = @{}

    $resHash.Name = $Name

    $resHash.$Name = ""

    $CommentOUT = $false

    Try

    {

        # if valid data, lookup the name for the value used by securityoption resource

        if ($ValueData -match "^(\d),")

        {

            $valueType = $Matches.1

            $value = $securityOption.value.option.getenumerator() | Where-Object {$_.value -eq $ValueData}

            $resHash.$Name = $value.Name

        }

        else

        {

            throw "Malformed data"

        }

    }

    catch

    {

        $resHash.$Name = $null

        continue    

    }

    if (!$Key.StartsWith("MACHINE"))

    {

        Write-Verbose "Write-GPORegistryINFData: Current User Registry settings are not yet supported."

        $CommentOUT = $true

    }

    $typeHash = @{"1" = "REG_SZ"; "7" = "REG_MULTI_SZ"; "4" = "REG_DWORD"; "3" = "REG_BINARY"}

    if (!$typeHash.ContainsKey($valueType))

    {

        Write-Verbose "Write-GPORegistryINFData: $($values[0]) ValueType is not yet supported"

        # Add this resource to the processing history.

        Add-ProcessingHistory -Type 'SecurityOption' -Name "SecurityRegistry(INF): $Name" -ParsingError

        $CommentOUT = $true

    }

    Write-DSCString -Resource -Name "SecurityRegistry(INF): $Name" -Type 'SecurityOption' -Parameters $resHash -CommentOUT:$CommentOUT

}

# SIG # Begin signature block

# MIIjkQYJKoZIhvcNAQcCoIIjgjCCI34CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDvNCUJshW0PnXP

# zx0CvS9h4VoqR1QAf6FbYDJEHqM76aCCDYEwggX/MIID56ADAgECAhMzAAABh3IX

# chVZQMcJAAAAAAGHMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p

# bmcgUENBIDIwMTEwHhcNMjAwMzA0MTgzOTQ3WhcNMjEwMzAzMTgzOTQ3WjB0MQsw

# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u

# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB

# AQDOt8kLc7P3T7MKIhouYHewMFmnq8Ayu7FOhZCQabVwBp2VS4WyB2Qe4TQBT8aB

# znANDEPjHKNdPT8Xz5cNali6XHefS8i/WXtF0vSsP8NEv6mBHuA2p1fw2wB/F0dH

# sJ3GfZ5c0sPJjklsiYqPw59xJ54kM91IOgiO2OUzjNAljPibjCWfH7UzQ1TPHc4d

# weils8GEIrbBRb7IWwiObL12jWT4Yh71NQgvJ9Fn6+UhD9x2uk3dLj84vwt1NuFQ

# itKJxIV0fVsRNR3abQVOLqpDugbr0SzNL6o8xzOHL5OXiGGwg6ekiXA1/2XXY7yV

# Fc39tledDtZjSjNbex1zzwSXAgMBAAGjggF+MIIBejAfBgNVHSUEGDAWBgorBgEE

# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQUhov4ZyO96axkJdMjpzu2zVXOJcsw

# UAYDVR0RBEkwR6RFMEMxKTAnBgNVBAsTIE1pY3Jvc29mdCBPcGVyYXRpb25zIFB1

# ZXJ0byBSaWNvMRYwFAYDVQQFEw0yMzAwMTIrNDU4Mzg1MB8GA1UdIwQYMBaAFEhu

# ZOVQBdOCqhc3NyK1bajKdQKVMFQGA1UdHwRNMEswSaBHoEWGQ2h0dHA6Ly93d3cu

# bWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY0NvZFNpZ1BDQTIwMTFfMjAxMS0w

# Ny0wOC5jcmwwYQYIKwYBBQUHAQEEVTBTMFEGCCsGAQUFBzAChkVodHRwOi8vd3d3

# Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01pY0NvZFNpZ1BDQTIwMTFfMjAx

# MS0wNy0wOC5jcnQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQsFAAOCAgEAixmy

# S6E6vprWD9KFNIB9G5zyMuIjZAOuUJ1EK/Vlg6Fb3ZHXjjUwATKIcXbFuFC6Wr4K

# NrU4DY/sBVqmab5AC/je3bpUpjtxpEyqUqtPc30wEg/rO9vmKmqKoLPT37svc2NV

# BmGNl+85qO4fV/w7Cx7J0Bbqk19KcRNdjt6eKoTnTPHBHlVHQIHZpMxacbFOAkJr

# qAVkYZdz7ikNXTxV+GRb36tC4ByMNxE2DF7vFdvaiZP0CVZ5ByJ2gAhXMdK9+usx

# zVk913qKde1OAuWdv+rndqkAIm8fUlRnr4saSCg7cIbUwCCf116wUJ7EuJDg0vHe

# yhnCeHnBbyH3RZkHEi2ofmfgnFISJZDdMAeVZGVOh20Jp50XBzqokpPzeZ6zc1/g

# yILNyiVgE+RPkjnUQshd1f1PMgn3tns2Cz7bJiVUaqEO3n9qRFgy5JuLae6UweGf

# AeOo3dgLZxikKzYs3hDMaEtJq8IP71cX7QXe6lnMmXU/Hdfz2p897Zd+kU+vZvKI

# 3cwLfuVQgK2RZ2z+Kc3K3dRPz2rXycK5XCuRZmvGab/WbrZiC7wJQapgBodltMI5

# GMdFrBg9IeF7/rP4EqVQXeKtevTlZXjpuNhhjuR+2DMt/dWufjXpiW91bo3aH6Ea

# jOALXmoxgltCp1K7hrS6gmsvj94cLRf50QQ4U8Qwggd6MIIFYqADAgECAgphDpDS

# AAAAAAADMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMK

# V2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0

# IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0

# ZSBBdXRob3JpdHkgMjAxMTAeFw0xMTA3MDgyMDU5MDlaFw0yNjA3MDgyMTA5MDla

# MH4xCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS

# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMT

# H01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMTEwggIiMA0GCSqGSIb3DQEB

# AQUAA4ICDwAwggIKAoICAQCr8PpyEBwurdhuqoIQTTS68rZYIZ9CGypr6VpQqrgG

# OBoESbp/wwwe3TdrxhLYC/A4wpkGsMg51QEUMULTiQ15ZId+lGAkbK+eSZzpaF7S

# 35tTsgosw6/ZqSuuegmv15ZZymAaBelmdugyUiYSL+erCFDPs0S3XdjELgN1q2jz

# y23zOlyhFvRGuuA4ZKxuZDV4pqBjDy3TQJP4494HDdVceaVJKecNvqATd76UPe/7

# 4ytaEB9NViiienLgEjq3SV7Y7e1DkYPZe7J7hhvZPrGMXeiJT4Qa8qEvWeSQOy2u

# M1jFtz7+MtOzAz2xsq+SOH7SnYAs9U5WkSE1JcM5bmR/U7qcD60ZI4TL9LoDho33

# X/DQUr+MlIe8wCF0JV8YKLbMJyg4JZg5SjbPfLGSrhwjp6lm7GEfauEoSZ1fiOIl

# XdMhSz5SxLVXPyQD8NF6Wy/VI+NwXQ9RRnez+ADhvKwCgl/bwBWzvRvUVUvnOaEP

# 6SNJvBi4RHxF5MHDcnrgcuck379GmcXvwhxX24ON7E1JMKerjt/sW5+v/N2wZuLB

# l4F77dbtS+dJKacTKKanfWeA5opieF+yL4TXV5xcv3coKPHtbcMojyyPQDdPweGF

# RInECUzF1KVDL3SV9274eCBYLBNdYJWaPk8zhNqwiBfenk70lrC8RqBsmNLg1oiM

# CwIDAQABo4IB7TCCAekwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFEhuZOVQ

# BdOCqhc3NyK1bajKdQKVMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMAsGA1Ud

# DwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFHItOgIxkEO5FAVO

# 4eqnxzHRI4k0MFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9jcmwubWljcm9zb2Z0

# LmNvbS9wa2kvY3JsL3Byb2R1Y3RzL01pY1Jvb0NlckF1dDIwMTFfMjAxMV8wM18y

# Mi5jcmwwXgYIKwYBBQUHAQEEUjBQME4GCCsGAQUFBzAChkJodHRwOi8vd3d3Lm1p

# Y3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jvb0NlckF1dDIwMTFfMjAxMV8wM18y

# Mi5jcnQwgZ8GA1UdIASBlzCBlDCBkQYJKwYBBAGCNy4DMIGDMD8GCCsGAQUFBwIB

# FjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2RvY3MvcHJpbWFyeWNw

# cy5odG0wQAYIKwYBBQUHAgIwNB4yIB0ATABlAGcAYQBsAF8AcABvAGwAaQBjAHkA

# XwBzAHQAYQB0AGUAbQBlAG4AdAAuIB0wDQYJKoZIhvcNAQELBQADggIBAGfyhqWY

# 4FR5Gi7T2HRnIpsLlhHhY5KZQpZ90nkMkMFlXy4sPvjDctFtg/6+P+gKyju/R6mj

# 82nbY78iNaWXXWWEkH2LRlBV2AySfNIaSxzzPEKLUtCw/WvjPgcuKZvmPRul1LUd

# d5Q54ulkyUQ9eHoj8xN9ppB0g430yyYCRirCihC7pKkFDJvtaPpoLpWgKj8qa1hJ

# Yx8JaW5amJbkg/TAj/NGK978O9C9Ne9uJa7lryft0N3zDq+ZKJeYTQ49C/IIidYf

# wzIY4vDFLc5bnrRJOQrGCsLGra7lstnbFYhRRVg4MnEnGn+x9Cf43iw6IGmYslmJ

# aG5vp7d0w0AFBqYBKig+gj8TTWYLwLNN9eGPfxxvFX1Fp3blQCplo8NdUmKGwx1j

# NpeG39rz+PIWoZon4c2ll9DuXWNB41sHnIc+BncG0QaxdR8UvmFhtfDcxhsEvt9B

# xw4o7t5lL+yX9qFcltgA1qFGvVnzl6UJS0gQmYAf0AApxbGbpT9Fdx41xtKiop96

# eiL6SJUfq/tHI4D1nvi/a7dLl+LrdXga7Oo3mXkYS//WsyNodeav+vyL6wuA6mk7

# r/ww7QRMjt/fdW1jkT3RnVZOT7+AVyKheBEyIXrvQQqxP/uozKRdwaGIm1dxVk5I

# RcBCyZt2WwqASGv9eZ/BvW1taslScxMNelDNMYIVZjCCFWICAQEwgZUwfjELMAkG

# A1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQx

# HjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9z

# b2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAxMQITMwAAAYdyF3IVWUDHCQAAAAABhzAN

# BglghkgBZQMEAgEFAKCBrjAZBgkqhkiG9w0BCQMxDAYKKwYBBAGCNwIBBDAcBgor

# BgEEAYI3AgELMQ4wDAYKKwYBBAGCNwIBFTAvBgkqhkiG9w0BCQQxIgQgZsLSV+5s

# B2NvS3jC9vC6MnqCBV6MAzPhrPh3xvNzS6UwQgYKKwYBBAGCNwIBDDE0MDKgFIAS

# AE0AaQBjAHIAbwBzAG8AZgB0oRqAGGh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbTAN

# BgkqhkiG9w0BAQEFAASCAQAMFdSI201RjBTqj1gkvsFhH2VAp5Ox5Uz4l68MB9pi

# IjramZUJcuiyQ/s6TaUPtgOnaFUnBugp/Be3I0RJQsHMMk+1NZF5yfh+QoY1d+tS

# ZJizhR3XyRbb56aWMxG7x9wdhOcUDu4OnJsXmPk+z2qssgA1nAa9NQ6kTxB7OpN9

# L4j4VWq4DLfwAAn0HNAAzEJj0xkQSt3NflAcxKC52qTTumDVIa8GQbG3hvJQbjka

# cTK6LD/rkcqGwtW9LRrU62u7UYS4U9O3kjV3QT3ZpJj11ZKqciktm045W/iaYXpS

# p0Wpj34w1WsS3Aqp2k1brOZY/ATxtxYbBcXC4bAH7vEjoYIS8DCCEuwGCisGAQQB

# gjcDAwExghLcMIIS2AYJKoZIhvcNAQcCoIISyTCCEsUCAQMxDzANBglghkgBZQME

# AgEFADCCAVQGCyqGSIb3DQEJEAEEoIIBQwSCAT8wggE7AgEBBgorBgEEAYRZCgMB

# MDEwDQYJYIZIAWUDBAIBBQAEIEZo5aYYFakF2dWmm7v1d5H+ZR3D4FpbAgCffle4

# qWX1AgZf25kzT+8YEjIwMjEwMTA1MjM1NjAwLjU0WjAEgAIB9KCB1KSB0TCBzjEL

# MAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1v

# bmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEpMCcGA1UECxMgTWlj

# cm9zb2Z0IE9wZXJhdGlvbnMgUHVlcnRvIFJpY28xJjAkBgNVBAsTHVRoYWxlcyBU

# U1MgRVNOOjg5N0EtRTM1Ni0xNzAxMSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1T

# dGFtcCBTZXJ2aWNloIIORDCCBPUwggPdoAMCAQICEzMAAAEsIq9Fl3X5G+4AAAAA

# ASwwDQYJKoZIhvcNAQELBQAwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp

# bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw

# b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAw

# HhcNMTkxMjE5MDExNTAzWhcNMjEwMzE3MDExNTAzWjCBzjELMAkGA1UEBhMCVVMx

# EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoT

# FU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEpMCcGA1UECxMgTWljcm9zb2Z0IE9wZXJh

# dGlvbnMgUHVlcnRvIFJpY28xJjAkBgNVBAsTHVRoYWxlcyBUU1MgRVNOOjg5N0Et

# RTM1Ni0xNzAxMSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNl

# MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rXOBJKr4zEBijeqkK1A

# PFIw88nLqab/B8Qk2M1Sdi0sUHCXUFRLm2sST+3jWV3EhMp6Gz4AHFiqjhDGyDcb

# LW6AqLAcCdiKJ6R8L5mGm00WC2cNkifjnMLQCVWv/pR8u2wtwcKHVcSUtQd8QLSc

# G5Bwz9Klij17eXWpjk10yAMbEKyYIp2Jl9hci75TRRggGF3OZIecHd/Fk4FVyvmG

# 0UcQEE23+sUmWb8DjJvygGyn5R/SnlDCY79sJx2oHXkmnKU6FmZazSxR8kqUr0Ss

# CEHAaSLZ4hEUqxAF2RdL09akXXDaAglG9KQMRoJ/6VsZM91LMdJt9ERY4X3BjeJi

# PwIDAQABo4IBGzCCARcwHQYDVR0OBBYEFFFqFlIZ+sJCELIjIYf0OSJpbsvTMB8G

# A1UdIwQYMBaAFNVjOlyKMZDzQ3t8RhvFM2hahW1VMFYGA1UdHwRPME0wS6BJoEeG

# RWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kvY3JsL3Byb2R1Y3RzL01pY1Rp

# bVN0YVBDQV8yMDEwLTA3LTAxLmNybDBaBggrBgEFBQcBAQROMEwwSgYIKwYBBQUH

# MAKGPmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljVGltU3Rh

# UENBXzIwMTAtMDctMDEuY3J0MAwGA1UdEwEB/wQCMAAwEwYDVR0lBAwwCgYIKwYB

# BQUHAwgwDQYJKoZIhvcNAQELBQADggEBAE8XEcjCLi8Afj3D1K+bPore0znlGVbm

# k95Qtd263ZGrLpizT5Wlmxu5oSjGzpnULeExuSKpkXHHKW3Emm4dPIZODrXN80gX

# mfpGxgXezsgSUNc19nOcXX/aJZzq5E9kryvHFQn/t6ZhdkJjC5RjReOwKk/2ltFE

# p4mLqvlqtLIj418rG+CgzbUk23UFx2Ve4B5x13+TxSPEKxx99qegrafosXDU9xmU

# Q7s0h3uj6ygzYLRBjkFh2CGmfu6qikHqLHIUgiQNcW5v7UTsaYATB9TpXAQcvvL2

# s0Txt34mtCz7IC2SQfL0WZeD8+warV1pXNfVKjsInqfKmGm4dI3dV9MwggZxMIIE

# WaADAgECAgphCYEqAAAAAAACMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJV

# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE

# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUm9v

# dCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxMDAeFw0xMDA3MDEyMTM2NTVaFw0y

# NTA3MDEyMTQ2NTVaMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u

# MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp

# b24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMIIBIjAN

# BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR0NvHcRijog7PwTl/X6f2mUa3RU

# ENWlCgCChfvtfGhLLF/Fw+Vhwna3PmYrW/AVUycEMR9BGxqVHc4JE458YTBZsTBE

# D/FgiIRUQwzXTbg4CLNC3ZOs1nMwVyaCo0UN0Or1R4HNvyRgMlhgRvJYR4YyhB50

# YWeRX4FUsc+TTJLBxKZd0WETbijGGvmGgLvfYfxGwScdJGcSchohiq9LZIlQYrFd

# /XcfPfBXday9ikJNQFHRD5wGPmd/9WbAA5ZEfu/QS/1u5ZrKsajyeioKMfDaTgaR

# togINeh4HLDpmc085y9Euqf03GS9pAHBIAmTeM38vMDJRF1eFpwBBU8iTQIDAQAB

# o4IB5jCCAeIwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFNVjOlyKMZDzQ3t8

# RhvFM2hahW1VMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMAsGA1UdDwQEAwIB

# hjAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFNX2VsuP6KJcYmjRPZSQW9fO

# mhjEMFYGA1UdHwRPME0wS6BJoEeGRWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9w

# a2kvY3JsL3Byb2R1Y3RzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNybDBaBggr

# BgEFBQcBAQROMEwwSgYIKwYBBQUHMAKGPmh0dHA6Ly93d3cubWljcm9zb2Z0LmNv

# bS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3J0MIGgBgNVHSAB

# Af8EgZUwgZIwgY8GCSsGAQQBgjcuAzCBgTA9BggrBgEFBQcCARYxaHR0cDovL3d3

# dy5taWNyb3NvZnQuY29tL1BLSS9kb2NzL0NQUy9kZWZhdWx0Lmh0bTBABggrBgEF

# BQcCAjA0HjIgHQBMAGUAZwBhAGwAXwBQAG8AbABpAGMAeQBfAFMAdABhAHQAZQBt

# AGUAbgB0AC4gHTANBgkqhkiG9w0BAQsFAAOCAgEAB+aIUQ3ixuCYP4FxAz2do6Eh

# b7Prpsz1Mb7PBeKp/vpXbRkws8LFZslq3/Xn8Hi9x6ieJeP5vO1rVFcIK1GCRBL7

# uVOMzPRgEop2zEBAQZvcXBf/XPleFzWYJFZLdO9CEMivv3/Gf/I3fVo/HPKZeUqR

# UgCvOA8X9S95gWXZqbVr5MfO9sp6AG9LMEQkIjzP7QOllo9ZKby2/QThcJ8ySif9

# Va8v/rbljjO7Yl+a21dA6fHOmWaQjP9qYn/dxUoLkSbiOewZSnFjnXshbcOco6I8

# +n99lmqQeKZt0uGc+R38ONiU9MalCpaGpL2eGq4EQoO4tYCbIjggtSXlZOz39L9+

# Y1klD3ouOVd2onGqBooPiRa6YacRy5rYDkeagMXQzafQ732D8OE7cQnfXXSYIghh

# 2rBQHm+98eEA3+cxB6STOvdlR3jo+KhIq/fecn5ha293qYHLpwmsObvsxsvYgrRy

# zR30uIUBHoD7G4kqVDmyW9rIDVWZeodzOwjmmC3qjeAzLhIp9cAvVCch98isTtoo

# uLGp25ayp0Kiyc8ZQU3ghvkqmqMRZjDTu3QyS99je/WZii8bxyGvWbWu3EQ8l1Bx

# 16HSxVXjad5XwdHeMMD9zOZN+w2/XU/pnR4ZOC+8z1gFLu8NoFA12u8JJxzVs341

# Hgi62jbb01+P3nSISRKhggLSMIICOwIBATCB/KGB1KSB0TCBzjELMAkGA1UEBhMC

# VVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNV

# BAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEpMCcGA1UECxMgTWljcm9zb2Z0IE9w

# ZXJhdGlvbnMgUHVlcnRvIFJpY28xJjAkBgNVBAsTHVRoYWxlcyBUU1MgRVNOOjg5

# N0EtRTM1Ni0xNzAxMSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2

# aWNloiMKAQEwBwYFKw4DAhoDFQAMTk4pIyg3H+ZjFhZqnVFM6iFsnaCBgzCBgKR+

# MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS

# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMT

# HU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3DQEBBQUAAgUA

# 458jpDAiGA8yMDIxMDEwNTIxNDMwMFoYDzIwMjEwMTA2MjE0MzAwWjB3MD0GCisG

# AQQBhFkKBAExLzAtMAoCBQDjnyOkAgEAMAoCAQACAif7AgH/MAcCAQACAhGMMAoC

# BQDjoHUkAgEAMDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKgCjAIAgEA

# AgMHoSChCjAIAgEAAgMBhqAwDQYJKoZIhvcNAQEFBQADgYEAMeoa/lbDc+Ilp33K

# yQ+ujtVS/gNLVEOFtZBcIzRFb1mWH1JOhoab9gckLU0bZDDJkWm5PPUYUecjBFav

# SsyAC3v3YpniQB6tL2HxH6rz4HLRRu3el+bdwgh87hLo8RlmGISKj0t0VvfBynZz

# hS0jm2CYCd7PUs1i5xTjOuMCeF0xggMNMIIDCQIBATCBkzB8MQswCQYDVQQGEwJV

# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE

# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGlt

# ZS1TdGFtcCBQQ0EgMjAxMAITMwAAASwir0WXdfkb7gAAAAABLDANBglghkgBZQME

# AgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJ

# BDEiBCAIZfILXT87B1MYMGXzNqtFa6JWA4JIPr2D4A0qKaWANjCB+gYLKoZIhvcN

# AQkQAi8xgeowgecwgeQwgb0EIFuf/S4UWHjaFMzlc6gp1d68FqJLGZgr0iVyf2e7

# lkfhMIGYMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x

# EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv

# bjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAEs

# Iq9Fl3X5G+4AAAAAASwwIgQg0IOh9l1IwELIcV4DA40R6I11mtqa66NdNsStfXVb

# zjYwDQYJKoZIhvcNAQELBQAEggEAEiXgTywDNQkhR9E1pB8Qux/mIbKBAxDXjWS2

# rlgTWo20Io1g2VatXvI9fiIVYYUqa9Pj5st5FR4lk52ytRs/j1Vk1EYCy0lVOKxr

# sgiD3HXIZW41OBdvCsNB5WhYFp7yCWY9rPlgJevicEYnPcxEBnkpO+2sFzIpa6Uu

# X38k3A397Anqm5s09g3T0MCtK0BTmoA20cA7NUsqZiL01ZLv67xKwoHCHHBgslHH

# 2eRXkm27WzOn9LomMlKG3bzak2Kb+baGUAzOV5K6sGcb39N+7ChfOphG/3tcDmdn

# Qf5nEo2FKKLoB9E/x1m6QZG7R6hOzrcTgSvjAxADy0LdliWBog==

# SIG # End signature block