Microsoft.WindowsSandbox.DSC.psm1

# Copyright (c) Microsoft Corporation. All rights reserved.
# Licensed under the MIT License.
enum Ensure {
    Absent
    Present
}

$global:WindowsSandboxExePath = 'C:\Windows\System32\WindowsSandbox.exe'

if (-not(Test-Path -Path $global:WindowsSandboxExePath)) {
    throw 'Windows Sandbox feature is not enabled.'
}

#region DSCResources
[DSCResource()]
class WindowsSandbox {
    [DscProperty(Key)]
    [Ensure]$Ensure = [Ensure]::Present

    [DscProperty()]
    [string]$WsbFilePath

    [DscProperty()]
    [string]$HostFolder

    [DscProperty()]
    [string]$SandboxFolder

    [DscProperty()]
    [string]$ReadOnly

    [DscProperty()]
    [string]$LogonCommand

    [DscProperty()]
    [nullable[Int64]]$MemoryInMB

    [DscProperty()]
    [nullable[bool]]$vGPU

    [DscProperty()]
    [nullable[bool]]$AudioInput

    [DscProperty()]
    [nullable[bool]]$ClipboardRedirection

    [DscProperty()]
    [nullable[bool]]$Networking

    [DscProperty()]
    [nullable[bool]]$PrinterRedirection

    [DscProperty()]
    [nullable[bool]]$ProtectedClient

    [DscProperty()]
    [nullable[bool]]$VideoInput

    [WindowsSandbox] Get() {
        $currentState = [WindowsSandbox]::new()
        $currentState.WsbFilePath = $this.WsbFilePath
        $windowsSandboxProcess = Get-Process WindowsSandbox -ErrorAction SilentlyContinue
        $currentState.Ensure = $windowsSandboxProcess ? [Ensure]::Present : [Ensure]::Absent

        return $currentState
    }

    [bool] Test() {
        $currentState = $this.Get()
        return $currentState.Ensure -eq $this.Ensure
    }

    [void] Set() {
        # If ensure absent, stop the current Windows Sandbox process.
        if ($this.Ensure -eq [Ensure]::Absent) {
            Stop-Process -Name 'WindowsSandboxClient' -Force
            return
        }

        # Load the existing WSB file if it exists or create a new one.
        if ($this.WsbFilePath) {
            if (-not(Test-Path -Path $this.WsbFilePath)) {
                throw 'The provided WSB file does not exist.'
            }

            $xml = [xml](Get-Content -Path $this.WsbFilePath)
            $root = $xml.Configuration
        } else {
            $xml = New-Object -TypeName System.Xml.XmlDocument
            $root = $xml.CreateElement('Configuration')
            $xml.AppendChild($root)
        }

        <# Example Windows Sandbox configuration file (xml):
            <Configuration>
            <VGpu>Disable</VGpu>
            <Networking>Disable</Networking>
            <MappedFolders>
                <MappedFolder>
                <HostFolder>C:\Users\Public\Downloads</HostFolder>
                <SandboxFolder>C:\Users\WDAGUtilityAccount\Downloads</SandboxFolder>
                <ReadOnly>true</ReadOnly>
                </MappedFolder>
            </MappedFolders>
            <LogonCommand>
                <Command>explorer.exe C:\users\WDAGUtilityAccount\Downloads</Command>
            </LogonCommand>
            <AudioInput>Enable</AudioInput>
            <VideoInput>Enable</VideoInput>
            <ProtectedClient>Enable</ProtectedClient>
            <PrinterRedirection>Disable</PrinterRedirection>
            <ClipboardRedirection>Enable</ClipboardRedirection>
            <MemoryInMB>2048</MemoryInMB>
            </Configuration>
        #>


        # Override existing configurations if exists.
        if ($this.HostFolder) {
            if (-not(Test-Path -Path $this.HostFolder)) {
                throw 'Specified host folder path does not exist.'
            }

            # Remove existing mapped folder
            if ($root.MappedFolders) {
                $existingMappedFolders = $root.SelectSingleNode('MappedFolders')
                $root.RemoveChild($existingMappedFolders)
            }

            # Create Mapped Folders element
            $mappedFoldersElement = $xml.CreateElement('MappedFolders')
            $mappedFolderElement = $xml.CreateElement('MappedFolder')
            $hostFolderElement = $xml.CreateElement('HostFolder')
            $mappedFolderElement.AppendChild($hostFolderElement)
            $mappedFoldersElement.AppendChild($mappedFolderElement)
            $root.AppendChild($mappedFoldersElement)
            $root.MappedFolders.MappedFolder.HostFolder = $this.HostFolder

            if ($this.SandboxFolder) {
                $sandboxFolderElement = $xml.CreateElement('SandboxFolder')
                $mappedFolderElement.AppendChild($sandboxFolderElement)
                $root.MappedFolders.MappedFolder.SandboxFolder = $this.SandboxFolder
            }

            if ($this.ReadOnly) {
                $readOnlyElement = $xml.CreateElement('ReadOnly')
                $mappedFolderElement.AppendChild($readOnlyElement)
                $root.MappedFolders.MappedFolder.ReadOnly = 'true'
            }
        }

        if ($this.LogonCommand) {
            if ($root.LogonCommand) {
                $existingLogonCommand = $root.SelectSingleNode('LogonCommand')
                $root.RemoveChild($existingLogonCommand)
            }

            $logonCommandElement = $xml.CreateElement('LogonCommand')
            $commandElement = $xml.CreateElement('Command')
            $logonCommandElement.AppendChild($commandElement)
            $root.AppendChild($logonCommandElement)
            $root.LogonCommand.Command = $this.LogonCommand
        }

        if ($this.MemoryInMB) {
            if ($null -eq $root.MemoryInMB) {
                $memoryElement = $xml.CreateElement('MemoryInMB')
                $root.AppendChild($memoryElement)
            }

            $root.MemoryInMB = $this.MemoryInMB
        }

        if ($null -ne $this.vGPU) {
            if ($null -eq $root.vGPU) {
                $vGPUElement = $xml.CreateElement('vGPU')
                $root.AppendChild($vGPUElement)
            }

            $root.vGPU = ConvertBoolToEnableDisable($this.vGPU)
        }

        if ($null -ne $this.AudioInput) {
            if ($null -eq $root.AudioInput) {
                $audioInputElement = $xml.CreateElement('AudioInput')
                $root.AppendChild($audioInputElement)
            }

            $root.AudioInput = ConvertBoolToEnableDisable($this.AudioInput)
        }

        if ($null -ne $this.ClipboardRedirection) {
            if ($null -eq $root.ClipboardRedirection) {
                $clipboardRedirectionElement = $xml.CreateElement('ClipboardRedirection')
                $root.AppendChild($clipboardRedirectionElement)
            }

            $root.ClipboardRedirection = ConvertBoolToEnableDisable($this.ClipboardRedirection)
        }

        if ($null -ne $this.Networking) {
            if ($null -eq $root.Networking) {
                $networkingElement = $xml.CreateElement('Networking')
                $root.AppendChild($networkingElement)
            }

            $root.Networking = ConvertBoolToEnableDisable($this.Networking)
        }

        if ($null -ne $this.PrinterRedirection) {
            if ($null -eq $root.PrinterRedirection) {
                $printerRedirectionElement = $xml.CreateElement('PrinterRedirection')
                $root.AppendChild($printerRedirectionElement)
            }

            $root.PrinterRedirection = ConvertBoolToEnableDisable($this.PrinterRedirection)
        }

        if ($null -ne $this.ProtectedClient) {
            if ($null -eq $root.ProtectedClient) {
                $protectedClientElement = $xml.CreateElement('ProtectedClient')
                $root.AppendChild($protectedClientElement)
            }

            $root.ProtectedClient = ConvertBoolToEnableDisable($this.ProtectedClient)
        }

        if ($null -ne $this.VideoInput) {
            if ($null -eq $root.VideoInput) {
                $videoInputElement = $xml.CreateElement('VideoInput')
                $root.AppendChild($videoInputElement)
            }

            $root.VideoInput = ConvertBoolToEnableDisable($this.VideoInput)
        }

        # Export WSB file and run.
        $windowsSandboxDscTempDir = "$($env:Temp)\WindowsSandboxDsc"
        if (-not (Test-Path -Path $windowsSandboxDscTempDir)) {
            New-Item -ItemType Directory -Path $windowsSandboxDscTempDir
        }

        $sandboxId = (New-Guid).ToString()
        $tempSandboxWsbFilePath = Join-Path -Path $windowsSandboxDscTempDir -ChildPath "${sandboxId}.wsb"
        $xml.save($tempSandboxWsbFilePath)
        Invoke-Item $tempSandboxWsbFilePath
    }
}

#endregion DSCResources

#region Functions

function ConvertBoolToEnableDisable() {
    param (
        [Parameter()]
        [bool]$value
    )

    return $value ? 'Enable' : 'Disable'
}

#endregion Functions

# SIG # Begin signature block
# MIIoLQYJKoZIhvcNAQcCoIIoHjCCKBoCAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBzrVbsg3gWod0U
# scJZRn6m9SGbbWnECFsPO+DRkgAlDKCCDXYwggX0MIID3KADAgECAhMzAAAEBGx0
# Bv9XKydyAAAAAAQEMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD
# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p
# bmcgUENBIDIwMTEwHhcNMjQwOTEyMjAxMTE0WhcNMjUwOTExMjAxMTE0WjB0MQsw
# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u
# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
# AQC0KDfaY50MDqsEGdlIzDHBd6CqIMRQWW9Af1LHDDTuFjfDsvna0nEuDSYJmNyz
# NB10jpbg0lhvkT1AzfX2TLITSXwS8D+mBzGCWMM/wTpciWBV/pbjSazbzoKvRrNo
# DV/u9omOM2Eawyo5JJJdNkM2d8qzkQ0bRuRd4HarmGunSouyb9NY7egWN5E5lUc3
# a2AROzAdHdYpObpCOdeAY2P5XqtJkk79aROpzw16wCjdSn8qMzCBzR7rvH2WVkvF
# HLIxZQET1yhPb6lRmpgBQNnzidHV2Ocxjc8wNiIDzgbDkmlx54QPfw7RwQi8p1fy
# 4byhBrTjv568x8NGv3gwb0RbAgMBAAGjggFzMIIBbzAfBgNVHSUEGDAWBgorBgEE
# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQU8huhNbETDU+ZWllL4DNMPCijEU4w
# RQYDVR0RBD4wPKQ6MDgxHjAcBgNVBAsTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEW
# MBQGA1UEBRMNMjMwMDEyKzUwMjkyMzAfBgNVHSMEGDAWgBRIbmTlUAXTgqoXNzci
# tW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vd3d3Lm1pY3Jvc29mdC5j
# b20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3JsMGEG
# CCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQu
# Y29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3J0
# MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIBAIjmD9IpQVvfB1QehvpC
# Ge7QeTQkKQ7j3bmDMjwSqFL4ri6ae9IFTdpywn5smmtSIyKYDn3/nHtaEn0X1NBj
# L5oP0BjAy1sqxD+uy35B+V8wv5GrxhMDJP8l2QjLtH/UglSTIhLqyt8bUAqVfyfp
# h4COMRvwwjTvChtCnUXXACuCXYHWalOoc0OU2oGN+mPJIJJxaNQc1sjBsMbGIWv3
# cmgSHkCEmrMv7yaidpePt6V+yPMik+eXw3IfZ5eNOiNgL1rZzgSJfTnvUqiaEQ0X
# dG1HbkDv9fv6CTq6m4Ty3IzLiwGSXYxRIXTxT4TYs5VxHy2uFjFXWVSL0J2ARTYL
# E4Oyl1wXDF1PX4bxg1yDMfKPHcE1Ijic5lx1KdK1SkaEJdto4hd++05J9Bf9TAmi
# u6EK6C9Oe5vRadroJCK26uCUI4zIjL/qG7mswW+qT0CW0gnR9JHkXCWNbo8ccMk1
# sJatmRoSAifbgzaYbUz8+lv+IXy5GFuAmLnNbGjacB3IMGpa+lbFgih57/fIhamq
# 5VhxgaEmn/UjWyr+cPiAFWuTVIpfsOjbEAww75wURNM1Imp9NJKye1O24EspEHmb
# DmqCUcq7NqkOKIG4PVm3hDDED/WQpzJDkvu4FrIbvyTGVU01vKsg4UfcdiZ0fQ+/
# V0hf8yrtq9CkB8iIuk5bBxuPMIIHejCCBWKgAwIBAgIKYQ6Q0gAAAAAAAzANBgkq
# hkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x
# EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv
# bjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5
# IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEwOTA5WjB+MQswCQYDVQQG
# EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG
# A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYDVQQDEx9NaWNyb3NvZnQg
# Q29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
# CgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+laUKq4BjgaBEm6f8MMHt03
# a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc6Whe0t+bU7IKLMOv2akr
# rnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4Ddato88tt8zpcoRb0Rrrg
# OGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+lD3v++MrWhAfTVYoonpy
# 4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nkkDstrjNYxbc+/jLTswM9
# sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6A4aN91/w0FK/jJSHvMAh
# dCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmdX4jiJV3TIUs+UsS1Vz8k
# A/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL5zmhD+kjSbwYuER8ReTB
# w3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zdsGbiwZeBe+3W7UvnSSmn
# Eyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3T8HhhUSJxAlMxdSlQy90
# lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS4NaIjAsCAwEAAaOCAe0w
# ggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRIbmTlUAXTgqoXNzcitW2o
# ynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYD
# VR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBDuRQFTuHqp8cx0SOJNDBa
# BgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2Ny
# bC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3JsMF4GCCsG
# AQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3dy5taWNyb3NvZnQuY29t
# L3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3J0MIGfBgNV
# HSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEFBQcCARYzaHR0cDovL3d3
# dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1hcnljcHMuaHRtMEAGCCsG
# AQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkAYwB5AF8AcwB0AGEAdABl
# AG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn8oalmOBUeRou09h0ZyKb
# C5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7v0epo/Np22O/IjWll11l
# hJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0bpdS1HXeUOeLpZMlEPXh6
# I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/KmtYSWMfCWluWpiW5IP0
# wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvyCInWH8MyGOLwxS3OW560
# STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBpmLJZiWhub6e3dMNABQam
# ASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJihsMdYzaXht/a8/jyFqGa
# J+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYbBL7fQccOKO7eZS/sl/ah
# XJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbSoqKfenoi+kiVH6v7RyOA
# 9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sLgOppO6/8MO0ETI7f33Vt
# Y5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtXcVZOSEXAQsmbdlsKgEhr
# /Xmfwb1tbWrJUnMTDXpQzTGCGg0wghoJAgEBMIGVMH4xCzAJBgNVBAYTAlVTMRMw
# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
# aWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNp
# Z25pbmcgUENBIDIwMTECEzMAAAQEbHQG/1crJ3IAAAAABAQwDQYJYIZIAWUDBAIB
# BQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEO
# MAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIJvCcjXezn06Vs2DuHmhdZZO
# ot2eNxOg45yeQZ7hCqtyMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8A
# cwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEB
# BQAEggEAeDeWcoCP4rqNuFPQimtv9ThWKukXSv8xK/4wrhlBj+c8KmQfq5cJCaV2
# 6UdP9AuU4EA6oJFlZXHIHEX9HzdNc1pckby0q5nE7vAIZcrysvJ0a67XkxRPzv0F
# UXZOzkIgrOZx3RPPNDkwOvYmXvqC0auqy8GQm18FEHfJ+lBD74qxbC1YOQ7pyGb7
# kNOHY75awKY4C2HBdwJ/Yb/yxZ2ntBjUxu5W/e/rcWD3qkfO6ktCTlT1BoBangOn
# omPvdRk0cyBbG+bdxrcFq1nvOkzjcbqXiZClm4D8vg7c/5KXX+zxaqmmK5Un33NL
# jUrXgCqAM4ib6xwOdciaSsMNX3hK3qGCF5cwgheTBgorBgEEAYI3AwMBMYIXgzCC
# F38GCSqGSIb3DQEHAqCCF3AwghdsAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFSBgsq
# hkiG9w0BCRABBKCCAUEEggE9MIIBOQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFl
# AwQCAQUABCDNicPgdES1ZKgt2hEJVQUT4sxWyaO8uN+jGl34LYbj8QIGaCY44D0B
# GBMyMDI1MDUyODIwMjcyMS43NTdaMASAAgH0oIHRpIHOMIHLMQswCQYDVQQGEwJV
# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE
# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1l
# cmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046ODkwMC0w
# NUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2Wg
# ghHtMIIHIDCCBQigAwIBAgITMwAAAg4syyh9lSB1YwABAAACDjANBgkqhkiG9w0B
# AQsFADB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYD
# VQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDAeFw0yNTAxMzAxOTQz
# MDNaFw0yNjA0MjIxOTQzMDNaMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz
# aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv
# cnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25z
# MScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046ODkwMC0wNUUwLUQ5NDcxJTAjBgNV
# BAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEB
# AQUAA4ICDwAwggIKAoICAQCs5t7iRtXt0hbeo9ME78ZYjIo3saQuWMBFQ7X4s9vo
# oYRABTOf2poTHatx+EwnBUGB1V2t/E6MwsQNmY5XpM/75aCrZdxAnrV9o4Tu5sBe
# pbbfehsrOWRBIGoJE6PtWod1CrFehm1diz3jY3H8iFrh7nqefniZ1SnbcWPMyNIx
# uGFzpQiDA+E5YS33meMqaXwhdb01Cluymh/3EKvknj4dIpQZEWOPM3jxbRVAYN5J
# 2tOrYkJcdDx0l02V/NYd1qkvUBgPxrKviq5kz7E6AbOifCDSMBgcn/X7RQw630Qk
# zqhp0kDU2qei/ao9IHmuuReXEjnjpgTsr4Ab33ICAKMYxOQe+n5wqEVcE9OTyhmW
# ZJS5AnWUTniok4mgwONBWQ1DLOGFkZwXT334IPCqd4/3/Ld/ItizistyUZYsml/C
# 4ZhdALbvfYwzv31Oxf8NTmV5IGxWdHnk2Hhh4bnzTKosEaDrJvQMiQ+loojM7f5b
# gdyBBnYQBm5+/iJsxw8k227zF2jbNI+Ows8HLeZGt8t6uJ2eVjND1B0YtgsBP0cs
# BlnnI+4+dvLYRt0cAqw6PiYSz5FSZcbpi0xdAH/jd3dzyGArbyLuo69HugfGEEb/
# sM07rcoP1o3cZ8eWMb4+MIB8euOb5DVPDnEcFi4NDukYM91g1Dt/qIek+rtE88VS
# 8QIDAQABo4IBSTCCAUUwHQYDVR0OBBYEFIVxRGlSEZE+1ESK6UGI7YNcEIjbMB8G
# A1UdIwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCG
# Tmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUy
# MFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4w
# XAYIKwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2Vy
# dHMvTWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwG
# A1UdEwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQD
# AgeAMA0GCSqGSIb3DQEBCwUAA4ICAQB14L2TL+L8OXLxnGSal2h30mZ7FsBFooiY
# kUVOY05F9pnwPTVufEDGWEpNNy2OfaUHWIOoQ/9/rjwO0hS2SpB0BzMAk2gyz92N
# GWOpWbpBdMvrrRDpiWZi/uLS4ZGdRn3P2DccYmlkNP+vaRAXvnv+mp27KgI79mJ9
# hGyCQbvtMIjkbYoLqK7sF7Wahn9rLjX1y5QJL4lvEy3QmA9KRBj56cEv/lAvzDq7
# eSiqRq/pCyqyc8uzmQ8SeKWyWu6DjUA9vi84QsmLjqPGCnH4cPyg+t95RpW+73sn
# hew1iCV+wXu2RxMnWg7EsD5eLkJHLszUIPd+XClD+FTvV03GfrDDfk+45flH/eKR
# Zc3MUZtnhLJjPwv3KoKDScW4iV6SbCRycYPkqoWBrHf7SvDA7GrH2UOtz1Wa1k27
# sdZgpG6/c9CqKI8CX5vgaa+A7oYHb4ZBj7S8u8sgxwWK7HgWDRByOH3CiJu4LJ8h
# 3TiRkRArmHRp0lbNf1iAKuL886IKE912v0yq55t8jMxjBU7uoLsrYVIoKkzh+sAk
# gkpGOoZL14+dlxVM91Bavza4kODTUlwzb+SpXsSqVx8nuB6qhUy7pqpgww1q4SNh
# AxFnFxsxiTlaoL75GNxPR605lJ2WXehtEi7/+YfJqvH+vnqcpqCjyQ9hNaVzuOEH
# X4MyuqcjwjCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZI
# hvcNAQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw
# DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x
# MjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAy
# MDEwMB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMC
# VVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNV
# BAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRp
# bWUtU3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
# AQDk4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25Phdg
# M/9cT8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPF
# dvWGUNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6
# GnszrYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBp
# Dco2LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50Zu
# yjLVwIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3E
# XzTdEonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0
# lBw0gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1q
# GFphAXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ
# +QuJYfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PA
# PBXbGjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkw
# EgYJKwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxG
# NSnPEP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARV
# MFMwUQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWlj
# cm9zb2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAK
# BggrBgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMC
# AYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvX
# zpoYxDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20v
# cGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYI
# KwYBBQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5j
# b20vcGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG
# 9w0BAQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0x
# M7U518JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmC
# VgADsAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449
# xvNo32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wM
# nosZiefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDS
# PeZKPmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2d
# Y3RILLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxn
# GSgkujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+Crvs
# QWY9af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokL
# jzbaukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL
# 6Xu/OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNQ
# MIICOAIBATCB+aGB0aSBzjCByzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp
# bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw
# b3JhdGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEn
# MCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjg5MDAtMDVFMC1EOTQ3MSUwIwYDVQQD
# ExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQBK
# 6HY/ZWLnOcMEQsjkDAoB/JZWCKCBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYD
# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1w
# IFBDQSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA6+HZ1zAiGA8yMDI1MDUyODE4NTIw
# N1oYDzIwMjUwNTI5MTg1MjA3WjB3MD0GCisGAQQBhFkKBAExLzAtMAoCBQDr4dnX
# AgEAMAoCAQACAg6/AgH/MAcCAQACAhSFMAoCBQDr4ytXAgEAMDYGCisGAQQBhFkK
# BAIxKDAmMAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJ
# KoZIhvcNAQELBQADggEBAA1wawBX8U9nUMvtZnOYTOJtNTXVXOVVRmU9PhRTyv5N
# zkPqu3a5cZgF48XfaAYL2Xw2gdQMvEK4mWjr0Aia28UVcx01ynWbraUdW/W/1Upe
# Q0hcZIUVkdA243bwDALr8PV5DrfDL8NJ+seepxnU59FwpwA967bpwvD5rFVli/c7
# ufVeDuNHx2eKLbj/g5AC4QZqSg/J8mz1hIppsQfjnMIxAPT7helfbayau+T2yQvA
# EjejuWyulCyBJuTGTh1G8TBXcb7aAMgJv8W0Yf2TU6VFlG/JTczSHfhVRxPh3g/Z
# yGE31HnLml/WFIzk+do0rvDVLluHEFWHuOh6JrMjDWQxggQNMIIECQIBATCBkzB8
# MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVk
# bW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1N
# aWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAg4syyh9lSB1YwABAAAC
# DjANBglghkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEE
# MC8GCSqGSIb3DQEJBDEiBCCfuL7qiPxngOg/ZgB7f9UFaOdQ0C80atcgxUR7eQUa
# ZzCB+gYLKoZIhvcNAQkQAi8xgeowgecwgeQwgb0EIAF0HXMl8OmBkK267mxobKSi
# hwOdP0eUNXQMypPzTxKGMIGYMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgT
# Cldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29m
# dCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENB
# IDIwMTACEzMAAAIOLMsofZUgdWMAAQAAAg4wIgQgRoFbqk7KwP3OdoyrfvILiRgQ
# 5m2t3/s15AkVq0rUMk0wDQYJKoZIhvcNAQELBQAEggIAYRgW2LYfZF6LPTsABfaG
# Iq/G4rwuWPv1t6ar0QjnxDQbdSotMDYX+E+JK8RcfLsf4Kt6qVcyyPz2nQEN4jW4
# xEjoFYS41TimE1rR10sUctiBTiKtx3CoBw1SpXCWdBMnpX77349EzdsHf5cex7tm
# 2pAg2NxcVCMPZBw4OLDsBpdi2TuTuyk+0WZYuo2p1m53RRxAFex9ouszEtHu6gbL
# xgjqAtuorbpc70oyd6wxU4M14Vp9NL6vsmgXaTRZUDMsYZtkAqw+mX9K2ueUTXoM
# U/RF+jfhH8wt2+GqPELji6gAaF4BzAmrsWf3TI8kK+TEy29sMXKB1yWFTxhYO92F
# fy40m6HiSMydPtUmdc4K4NJ7C/YKN//aljlSuYDNCqpPCW+pbKbPLYnmgFWCmg5J
# v6S05kDXiHdaCz0WyHfbq8E4IGpNpHdCrTdj7fMyuB2F4I9iUOu0UgF6gM/ese+m
# iNnr4+I/Dhj2vMvOjP+IhMuBwvOpiraHRh1rCW9Nhbcm8dZDuH9o7LNRzy4ZqLMc
# nclDHsKHi3UHXQfmhu5anHvHq/Jp5roPovdEOrbWC/1g/xTB/AWrXDDEHY4FHyiJ
# l2cSmvtmw5lkIG9kWOOMOREhUHiDZg2V0I3d/IzdOIVCLI2vVrkTl26UrUOuSqlu
# /uASfEbl5fJeGKDFDeHPhzU=
# SIG # End signature block