Microsoft.AzLocal.CSSTools

1.2607.29.1310

modules/AzStack.Insights/remediations/ReplaceIgvmAgentBinary.ps1

                                <#

.SYNOPSIS

    Replaces AszIgvmAgent.exe from the bundled package and restarts the IgvmAgent service.

.DESCRIPTION

    Stops the IgvmAgent service, copies AszIgvmAgent.exe from

    packages\Microsoft.AzureStack.IgvmAgentDeployment into the configured IGVM installation

    directory, and starts the service again.

.PARAMETER Force

    If specified, the remediation will proceed without prompting the user for confirmation.

    Use with caution as this applies changes without user review.

.PARAMETER SkipEnvironmentCheck

    If specified, the remediation will proceed even if the environment requirements are not met.

    Use with caution as applying the remediation in an unsupported environment could cause issues.

#>

[CmdletBinding()]

param(

    [Parameter(Mandatory = $false, Position = 0)]

    [switch]$Force,

    [Parameter(Mandatory = $false, Position = 1)]

    [switch]$SkipEnvironmentCheck

)

if (-not (Get-Command -Name 'Get-InsightModulePaths' -ErrorAction Ignore) -or

    -not (Get-Command -Name 'Get-ParsedFileVersion' -ErrorAction Ignore)) {

    Import-Module -Name $PSScriptRoot\..\AzStack.Insights.Helper.psm1 -DisableNameChecking

}

Import-LocalizedData -BindingVariable 'localizedData' -BaseDirectory "$PSScriptRoot\locale" -UICulture $PSUICulture

$remediationObject = Initialize-RemediationObject -Properties $localizedData.Remediation -SkipEnvironmentCheck:$SkipEnvironmentCheck

# if $remediationObject.Status is set to 'NOT_APPLICABLE' at this point,

# it means that environment requirements are not met and user did not choose to SkipEnvironmentCheck,

# so we should exit without applying the remediation

if ($remediationObject.Status -eq [RemediationStatus]::NOT_APPLICABLE) {

    return $remediationObject

}

# if force is not specified, confirm that user wants to proceed with remediation

# confirm with the user before applying the remediation, if user cancels then update remediation status and exit

if (-not $Force) {

    if (-not (Confirm-RemediationAction -Properties $localizedData.Remediation)) {

        $remediationObject.Status = [RemediationStatus]::USER_CANCELLED

        return $remediationObject

    }

}

$changesApplied = $false        # tracks whether changes applied in the remediation logic

$ensureServiceRunning = $false  # once we commit to the repair, IgvmAgent must be RUNNING on exit

$serviceName = 'IgvmAgent'

try {

    <# START REPAIR LOGIC #>

    $modulePaths = Get-InsightModulePaths

    $igvmSourceBinaryPath = Join-Path -Path $modulePaths.PackagesPath -ChildPath 'Microsoft.AzureStack.IgvmAgentDeployment\AszIgvmAgent.exe'

    $igvmRecoveryRegPath = 'HKLM:\SOFTWARE\Microsoft\AszIGVmAgentRecovery'

    if (-not (Test-Path -Path $igvmSourceBinaryPath -PathType Leaf)) {

        throw "IGVM source binary was not found at '$igvmSourceBinaryPath'."

    }

    # The recovery registry key and installation path describe an IGVM-configured node. When they

    # are absent the node is not running IGVM/Trusted Launch, so the remediation does not apply

    # rather than failing.

    if (-not (Test-Path -Path $igvmRecoveryRegPath)) {

        Write-InsightLog -Level 'Warning' -Message "Registry path '$igvmRecoveryRegPath' was not found. Remediation is not applicable to this node."

        $remediationObject.Status = [RemediationStatus]::NOT_APPLICABLE

        return $remediationObject

    }

    $igvmExeDir = (Get-ItemProperty -Path $igvmRecoveryRegPath -ErrorAction Stop).IgvmInstallationPath

    if ([string]::IsNullOrWhiteSpace($igvmExeDir)) {

        Write-InsightLog -Level 'Warning' -Message "IgvmInstallationPath is missing or empty at '$igvmRecoveryRegPath'. Remediation is not applicable to this node."

        $remediationObject.Status = [RemediationStatus]::NOT_APPLICABLE

        return $remediationObject

    }

    if (-not (Test-Path -Path $igvmExeDir -PathType Container)) {

        Write-InsightLog -Level 'Warning' -Message "IGVM destination directory '$igvmExeDir' was not found. Remediation is not applicable to this node."

        $remediationObject.Status = [RemediationStatus]::NOT_APPLICABLE

        return $remediationObject

    }

    $igvmDestinationBinaryPath = Join-Path -Path $igvmExeDir -ChildPath 'AszIgvmAgent.exe'

    if (Test-Path -Path $igvmDestinationBinaryPath -PathType Leaf) {

        $packagedVersion = Get-ParsedFileVersion -FilePath $igvmSourceBinaryPath

        $installedVersion = Get-ParsedFileVersion -FilePath $igvmDestinationBinaryPath

        if ($null -ne $packagedVersion -and $null -ne $installedVersion) {

            Write-InsightLog -Level 'Informational' -Message "Installed AszIgvmAgent.exe version: $installedVersion; packaged version: $packagedVersion."

            if ($installedVersion -ge $packagedVersion) {

                Write-InsightLog -Level 'Informational' -Message 'Installed AszIgvmAgent.exe version is greater than or equal to packaged version. Skipping remediation.'

                $remediationObject.ChangesApplied = $false

                $remediationObject.Status = [RemediationStatus]::NO_CHANGE_APPLIED

                return $remediationObject

            }

        }

        else {

            Write-InsightLog -Level 'Informational' -Message 'Unable to parse installed or packaged AszIgvmAgent.exe version. Proceeding with remediation.'

        }

    }

    # We are committed to replacing the binary. IgvmAgent must be RUNNING when we exit, because a

    # stopped IgvmAgent prevents Trusted Launch VMs from starting. The finally block enforces this

    # on every exit path from here on, including the already-stopped-on-entry case.

    $ensureServiceRunning = $true

    # Check current service state

    Write-InsightLog -Level 'Informational' -Message "Checking $serviceName service state."

    $service = Get-Service -Name $serviceName -ErrorAction Stop

    Write-InsightLog -Level 'Informational' -Message "$serviceName service state: $($service.Status)."

    if ($service.Status -ne 'Stopped') {

        # Stop-Service blocks until the service reaches Stopped (or throws), so by the time it

        # returns the Service Control Manager has reported the service stopped and its file handles

        # are released. This replaces the previous asynchronous sc.exe call plus fixed sleep.

        # -Force is intentionally omitted so a running dependent service surfaces as a failure

        # (matching the prior sc.exe behavior) rather than being silently stopped as well.

        Write-InsightLog -Level 'Informational' -Message "Stopping service '$serviceName'."

        Stop-Service -Name $serviceName -ErrorAction Stop

        Write-InsightLog -Level 'Informational' -Message "Service '$serviceName' stopped."

    }

    else {

        Write-InsightLog -Level 'Informational' -Message "$serviceName service is already stopped."

    }

    # Attempt to copy the file with retry logic to handle file locks

    $maxRetries = 6

    $retryCount = 0

    $copied = $false

    while ($retryCount -lt $maxRetries -and -not $copied) {

        try {

            Write-InsightLog -Level 'Informational' -Message "Copying AszIgvmAgent.exe to '$igvmExeDir' (attempt $($retryCount + 1) of $maxRetries)."

            Copy-Item -Path $igvmSourceBinaryPath -Destination $igvmExeDir -Force -ErrorAction Stop

            $copied = $true

            $changesApplied = $true

        }

        catch [System.IO.IOException] {

            $retryCount++

            if ($retryCount -lt $maxRetries) {

                Write-InsightLog -Level 'Informational' -Message "File is still locked. Retrying in 10 seconds... (Error: $($_.Exception.Message))"

                Start-Sleep -Seconds 10

            }

            else {

                # File remains locked after all retries. Rather than attempting blind system commands like

                # openfiles /disconnect (which cannot target the specific file without querying, and is risky

                # on a critical security service), fail cleanly and let the finally block restart the service.

                throw "Unable to replace file after $maxRetries attempts. File remains locked. Service will be restarted by finally block."

            }

        }

        catch {

            # Any other exception should be rethrown immediately

            throw

        }

    }

    <# END REPAIR LOGIC #>

    if ($changesApplied) {

        $remediationObject.ChangesApplied = $true

        $remediationObject.Status = [RemediationStatus]::SUCCESS

        Write-InsightLog -Level 'Informational' -Message $localizedData.ChangesApplied

    }

    else {

        $remediationObject.ChangesApplied = $false

        $remediationObject.Status = [RemediationStatus]::NO_CHANGE_APPLIED

        Write-InsightLog -Level 'Informational' -Message $localizedData.ChangesNotApplied

    }

}

catch {

    # ensure that any exceptions are caught and the remediation status is updated accordingly

    # but do not rethrow the exception so the finally block can still restore the service state

    $_ | Write-InsightLog -Level 'Exception'

    $remediationObject.ExceptionMessage = $localizedData.ChangesFailed -f $_.Exception.Message

    $remediationObject.Status = [RemediationStatus]::FAILURE

}

finally {

    # CRITICAL: IgvmAgent must be RUNNING when we exit. A stopped IgvmAgent prevents Trusted Launch

    # VMs from starting, so leaving it stopped -- after a failed copy, or when it was already stopped

    # on entry -- is worse than the original mismatched-binary state. This runs on every exit path

    # once we have committed to the repair ($ensureServiceRunning), guaranteeing RUNNING is the

    # healthy end state regardless of how the service was found.

    if ($ensureServiceRunning) {

        try {

            $currentService = Get-Service -Name $serviceName -ErrorAction Stop

            if ($currentService.Status -ne 'Running') {

                # Start-Service blocks until the service reaches Running (or throws), so a clean

                # return here confirms RUNNING -- no separate exit-code check or poll is needed.

                Write-InsightLog -Level 'Informational' -Message "$serviceName service state is '$($currentService.Status)'; starting service to reach the healthy RUNNING state."

                Start-Service -Name $serviceName -ErrorAction Stop

                Write-InsightLog -Level 'Informational' -Message "$serviceName service confirmed RUNNING."

            }

            else {

                Write-InsightLog -Level 'Informational' -Message "$serviceName service is running."

            }

        }

        catch {

            # The binary may have been replaced, but the service could not be confirmed running.

            # Do not report success when the node is left in an unhealthy state.

            $_ | Write-InsightLog -Level 'Exception'

            Write-InsightLog -Level 'Warning' -Message "Exception while ensuring $serviceName is running: $($_.Exception.Message)"

            if ($remediationObject.Status -in @([RemediationStatus]::SUCCESS, [RemediationStatus]::NO_CHANGE_APPLIED)) {

                $remediationObject.Status = [RemediationStatus]::FAILURE

                $remediationObject.ExceptionMessage = $localizedData.ServiceRestartFailed

            }

        }

    }

}

return $remediationObject

# SIG # Begin signature block

# MIInRAYJKoZIhvcNAQcCoIInNTCCJzECAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCA49O3gEFFaEIsS

# qdljE6HvgAg2vdVWV+OiMzKsEeM4MaCCDLowggX1MIID3aADAgECAhMzAAACHU0Z

# yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD

# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1

# OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD

# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB

# DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8

# o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg

# 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4

# Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R

# X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk

# ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B

# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O

# BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw

# HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg

# UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0

# JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh

# MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv

# Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy

# dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9

# s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H

# VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3

# w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n

# 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs

# A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo

# Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb

# SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6

# 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z

# V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v

# 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs

# /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA

# AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX

# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg

# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl

# IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow

# VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo

# MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ

# KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh

# emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h

# KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd

# M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp

# yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t

# Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5

# REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs

# 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK

# Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5

# pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW

# eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ

# 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC

# NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB

# gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU

# ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny

# bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx

# MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0

# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx

# MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI

# MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4

# NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh

# ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q

# hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU

# nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb

# H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z

# uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u

# vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW

# 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV

# DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10

# 1cY2L4A7GTQG1h32HHAvfQESWP0xghngMIIZ3AIBATBuMFcxCzAJBgNVBAYTAlVT

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv

# c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w

# DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ

# KoZIhvcNAQkEMSIEIHpF62BsFjPJIUQxRFlhv4oRbO0Nuzbc2UH3+KwmGC+NMEIG

# CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v

# d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAT9Yn1CHFaHTN5k/2

# O3XZADLW9xapUMe9DtaB9W6iovz50pZkVvh0cAbQ8ZzzNcaOUzVkZ+zsLEd0rSF5

# 1xB4dOPeWHeJkThZJxi0kRjB1jHx99+ClYJ5fp2VfF3MuovbKpeYjuHH97ea9C+c

# SRhXm73BN99JYbXRHDh5TeCuf0xX5xz6jIri4/x2FWVGMOtRJR0uc+BORJFId4kU

# Ntz3viN0xBIfhuWOyexw+tbPhhPvpEJbp7nK/5dls4BNHyRFk4XFRLz/IRYQj4Ji

# zWtnXVdNtR/gsCHZP6fL43lhJ+OT88UNirYzT21A1u6oPEEGR5PP/rlONv5F52mC

# HJY6YKGCF7AwghesBgorBgEEAYI3AwMBMYIXnDCCF5gGCSqGSIb3DQEHAqCCF4kw

# gheFAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsqhkiG9w0BCRABBKCCAUkEggFF

# MIIBQQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCACEa8SiKIDmcER

# LXUCwdUOcDnc5ItL3HFUiajSZ/j9egIGal4fDDSlGBMyMDI2MDcyOTEzMTc1My4y

# ODVaMASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu

# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv

# cmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExp

# bWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjoyRDFBLTA1RTAtRDk0NzEl

# MCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEf4wggcoMIIF

# EKADAgECAhMzAAACEtEIBjzKGE+qAAEAAAISMA0GCSqGSIb3DQEBCwUAMHwxCzAJ

# BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jv

# c29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI1MDgxNDE4NDgxNVoXDTI2MTEx

# MzE4NDgxNVowgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw

# DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x

# LTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEn

# MCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjJEMUEtMDVFMC1EOTQ3MSUwIwYDVQQD

# ExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEF

# AAOCAg8AMIICCgKCAgEAr0zToDkpWQtsZekS0cV0quDdKSTGkovvBaZH0OAIEi0O

# 3CcO77JiX8c4Epq9uibHVZZ1W/LoufE172vkRXO+QYNtWWorECJ2AcZQ10bpAltk

# hZNiXlVJ8L3QzhKgrXrmMkm2J+/g81U23JPcO4wXHEftonT3wpd//936rjmwxMm7

# NkbsygbJf+4AVBMNr4aMPQhBd76od0KMB6WrvyEGOOU0893OFufS5EDey4n44Wga

# xJE0Vnv3/OOvuOw5Kp1KPqjjYJ+L9ywLuBMtcDfLpNQO/h1eFEoMrbiEM67TOfNl

# XfxbDz4MlsYvLioxgd2Xzey1QxrV1+i+JyVDJMiSe9gKOuzpiQQFE19DUPgsidyj

# LTzXEhSVLBlRor0eCVf7gC6Rfk8NY3rO2sggOL79vU5FuDKTh/sIOtcUHeHC42jB

# GB+tfdKC1KOBR+UlN9aOzg8mpUNI2FgqQvirVP9ppbeMUfvp2wA9voyTiRWvDgzC

# xo8xlJ1nscYTHIQrmkF9j/Ca0IDmt8fvOn64nnlJOGUYZYHMC1l0xtgkYTE1ESUq

# qkawKk7iqbxdnLyycS+dR+zaxPudMDLrQFz8lgfy9obk0D8HC2dzhWpYNn5hdkoP

# EzgCqQUOp8v3Qj/sd4anyupe5KoCkjABOP3yhSQ4W9Z+DrJnhM/rbsXC7oTv26cC

# AwEAAaOCAUkwggFFMB0GA1UdDgQWBBRSBblSxb5cYKYOwvd/VfoXOfu33jAfBgNV

# HSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5o

# dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBU

# aW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwG

# CCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRz

# L01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNV

# HRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIH

# gDANBgkqhkiG9w0BAQsFAAOCAgEAXnSAkmX79Rc7lxS1wOozXJ7V0ou5DntVcOJp

# lIkDjvEN8BIQph4U+gSOLZuVReP/z9YdUiUkcPwL1PM245/kEX1EegpxNc8HDA6h

# KCHg0ALNEcuxnGOlgKLokXfUer1D5hiW8PABM9R+neiteTgPaaRlJFvGTYvotc0u

# qGiES5hMQhL8RNFhpS9RcIWHtnQGEnrdOUvCAhs4FeViawcmLTKv+1870c/MeTHi

# 0QDdeR+7/Wg4qhkJ2k1iEHJdmYf8rIV0NRBZcdRTTdHee35SXP5neNCfAkjDIuZy

# cRud6jzPLCNLiNYzGXBswzJygj4EeSORT7wMvaFuKeRAXoXC3wwYvgIsI1zn3DGY

# 625Y+yZSi8UNSNHuri36Zv9a+Q4vJwDpYK36S0TB2pf7xLiiH32nk7YK73Rg98W6

# fZ2INuzYzZ7Ghgvfffkj4EUXg1E0EffY1pEqkbpDTP7h/DBqtzoPXsyw2MUh+7yv

# Wcq2BGZSuca6CY6X4ioMuc5PWpsmvOOli7ARNA7Ab8kKdCc2gNDLacglsweZEc9/

# VQB6hls/b6Kk32nkwuHExKlaeoSVrKB5U9xlp1+c8J/7GJj4Rw7AiQ8tcp+WmfyD

# 8KxX2QlKbDi4SUjnglv4617R8+a/cDWJyaMt8279Wn7f2yMedN7kfGIQ5SZj66Rd

# hdlZOq8wggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3

# DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4G

# A1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIw

# MAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAx

# MDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVT

# MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1l

# LVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA

# 5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/

# XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1

# hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7

# M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3K

# Ni1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy

# 1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF80

# 3RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQc

# NIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahha

# YQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkL

# iWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV

# 2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIG

# CSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUp

# zxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBT

# MFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jv

# c29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYI

# KwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGG

# MA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186a

# GMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3Br

# aS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsG

# AQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29t

# L3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcN

# AQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1

# OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYA

# A7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbz

# aN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6L

# GYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3m

# Sj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0

# SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxko

# JLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFm

# PWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC482

# 2rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7

# vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDWTCC

# AkECAQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu

# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv

# cmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExp

# bWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjoyRDFBLTA1RTAtRDk0NzEl

# MCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsO

# AwIaAxUA5VHBr4h00EN7jUdQ33SE+qbk/8CggYMwgYCkfjB8MQswCQYDVQQGEwJV

# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE

# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGlt

# ZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIFAO4UekQwIhgPMjAyNjA3

# MjkxMzEwMjhaGA8yMDI2MDczMDEzMTAyOFowdzA9BgorBgEEAYRZCgQBMS8wLTAK

# AgUA7hR6RAIBADAKAgEAAgIXuwIB/zAHAgEAAgISjTAKAgUA7hXLxAIBADA2Bgor

# BgEEAYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAID

# AYagMA0GCSqGSIb3DQEBCwUAA4IBAQBt25dXnnLAsTt3VcLpD0wmIBz7Irq4UkJn

# x1+QIoBSnXlgVKegECanUWqi0pX5Bz6TS2Qncstj/rxB6Q5azxAmeiLRkl9YHRV3

# 1O71pZcR5PKJt3E6lGOBQQBQEAcTXEIMHxT7Y5wpgasO6UpcI6Xq5KVaCA1BrO0q

# ClPDl1Joh0RI2GFrZI0BW2Xxk6tpRY2gzr4W2wBxO4ifbb1re9wh4D4KXghfQCi0

# ExYy7azyuKIjWB2CvsPsqA3I2hl3L81q03QfCoANnuo9hpaQJ+3eHbiM2PNz9Q3i

# cmNxvttonAXOo0bPcjVKzEZkX/nva3NqyEHOQp6dHdzqIfN2Sa6RMYIEDTCCBAkC

# AQEwgZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNV

# BAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQG

# A1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIS0QgGPMoY

# T6oAAQAAAhIwDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG

# 9w0BCRABBDAvBgkqhkiG9w0BCQQxIgQgfPgcK+X6tetbJi7EGFurMZdQnedLUJ/x

# QUEgHp0jZ5YwgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9BCBz+X5GvO7Wngkn

# H4BZeYU+BzBL1Jy5oJ8wVlTNIxfYgzCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMw

# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN

# aWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0

# YW1wIFBDQSAyMDEwAhMzAAACEtEIBjzKGE+qAAEAAAISMCIEIJ+sfu/3nm4Xil+m

# EFlkRHT4geUhqAKX/enW1iBeY3qDMA0GCSqGSIb3DQEBCwUABIICAAv06T17h6hz

# p6E2zXJIMaWfu7jPnscxKnTs8B0Tw8p506zviNC5VlZRBtu8FiNnpxONRORf2FnU

# w3N6pqwnRhQom+k0y06+HqtfvDeIBCOGyWEmpZKGmNpVvNyi99QkFVRfWfzQwi6s

# cmD0htReypFHAr0AWnkgxV3a4V5LbnL6sgf7KrDcazodNb2J90LALg7zxEYLnCu3

# UJ74ePJm+PbL5nG39ctsx6lehheVGpejDixFY9CSMbLrwDrzFJcpZT0n+Gfqhlus

# zB7wRze9ct0ZVbQbL4Iwj1Mb685ECb6fTgawfAMFmsGE1tIgW8aMYtI9vmhJ1BBl

# CeafgSjPEu74i+5zAbpHiRlKbbL8feWPkFkf8jAJ/9tPdZ5+jRj/JCKbynwyFtqM

# 3sWLg+RE96S2cbDhcpzT273srfovcwakLz+qyRtuIzjcMazxaWuKFhRVFpgfS6zz

# XgOtacKi7UnMteaA5oO/VrMkARes+lJw9l5ErKySGM5RVM3rWV+RmhCbMQcd5+bv

# CIIHvV23RlofdS8BatKo1aceHL0+tbf3iAJ45JjiNsisx06PIqsy0mdjdWST6KOM

# hXxXbPBFNRAIXZgwVCuP/gnihiVIvl2ppMdb7stobpXDGM7M0QNcBh0PZXiR6C0s

# IBnYD4lK69xBvT6nhFNDpdvtGSWnZi3d

# SIG # End signature block