Sudo

1.0.2

Public/New-SudoSession.ps1

                                <#

    .SYNOPSIS

        Creates an Elevated (i.e. "Run As Administrator") PSSession for the current user in the current PowerShell Session.

    .DESCRIPTION

        Using WSMan's CredSSP Authentication mechanism, this function creates a New PSSession via the New-PSSession

        cmdlet named "ElevatedPSSessionFor<UserName>". You can then run elevated commands in the Elevated PSSession by

        either entering the Elevated PSSession via Enter-PSSession cmdlet or by using the Invoke-Command cmdlet with

        its -Session parameter.

        This function will NOT run in a PowerShell Session that was launched using "Run As Administrator".

        When used in a Non-Elevated PowerShell session, this function:

        1) Checks to make sure WinRM/WSMan is enabled and configured to allow CredSSP Authentication (if not then

        configuration changes are made)

        2) Checks the Local Group Policy Object...

            Computer Configuration -> Administrative Templates -> System -> Credentials Delegation -> Allow Delegating Fresh Credentials

        ...to make sure it is enabled and configured to allow connections via WSMAN/<LocalHostFQDN>

        3) Creates an Elevated PSSession using the New-PSSession cmdlet

        4) Outputs a PSCustomObject that contains two Properties:

        - ElevatedPSSession - Contains the object [PSSession]ElevatedPSSessionFor<UserName>

        - WSManAndRegistryChanges - Contains another PSCustomObject with the following Properties -

            [bool]WinRMStateChange

            [bool]WSMANServerCredSSPStateChange

            [bool]WSMANClientCredSSPStateChange

            [System.Collections.ArrayList]RegistryKeyCreated

            [System.Collections.ArrayList]RegistryKeyPropertiesCreated

    .NOTES

        Recommend assigning this function to a variable when it is used so that it can be referenced in the companion

        function Remove-SudoSession. If you do NOT assign a variable to this function when it is used, you can always

        reference this function's PSCustomObject output by calling $global:NewSessionAndOriginalStatus, which is a

        Global Scope variable created when this function is run. $global:NewSessionAndOriginalStatus.WSManAndRegistryChanges

        can be used for Remove-SudoSession's -OriginalConfigInfo parameter, and $global:NewSessionAndOriginalStatus.ElevatedPSSesion

        can be used for Remove-SudoSession's -SessionToRemove parameter.

    .PARAMETER UserName

        This is a string that represents a UserName with Administrator privileges. Defaults to current user.

        This parameter is mandatory if you do NOT use the -Credentials parameter.

    .PARAMETER Password

        This can be either a plaintext string or a secure string that represents the password for the -UserName.

        This parameter is mandatory if you do NOT use the -Credentials parameter.

    .PARAMETER Credentials

        This is a System.Management.Automation.PSCredential object used to create an elevated PSSession.

    .EXAMPLE

        PS C:\Users\zeroadmin> New-SudoSession -UserName zeroadmin -Credentials $MyCreds

        ElevatedPSSession                      WSManAndRegistryChanges

        -----------------                      ------------------------------

        [PSSession]ElevatedSessionForzeroadmin 

        PS C:\Users\zeroadmin> Get-PSSession

        Id Name            ComputerName    ComputerType    State         ConfigurationName     Availability

        -- ----            ------------    ------------    -----         -----------------     ------------

        1 ElevatedSess... localhost       RemoteMachine   Opened        Microsoft.PowerShell     Available

        PS C:\Users\zeroadmin> Enter-PSSession -Name ElevatedSessionForzeroadmin

        [localhost]: PS C:\Users\zeroadmin\Documents> 

    .EXAMPLE

        PS C:\Users\zeroadmin> $MyElevatedSession = New-SudoSession -UserName zeroadmin -Credentials $MyCreds

        PS C:\Users\zeroadmin> Get-PSSession

        Id Name            ComputerName    ComputerType    State         ConfigurationName     Availability

        -- ----            ------------    ------------    -----         -----------------     ------------

        1 ElevatedSess... localhost       RemoteMachine   Opened        Microsoft.PowerShell     Available

        PS C:\Users\zeroadmin> Invoke-Command -Session $MyElevatedSession.ElevatedPSSession -Scriptblock {Install-Package Nuget.CommandLine -Source chocolatey}

    .OUTPUTS

        See DESCRIPTION and NOTES sections

#>

function New-SudoSession {

    [CmdletBinding(DefaultParameterSetName='Supply UserName and Password')]

    Param(

        [Parameter(

            Mandatory=$False,

            ParameterSetName='Supply UserName and Password'

        )]

        [string]$UserName = $([System.Security.Principal.WindowsIdentity]::GetCurrent().Name -split "\\")[-1],

        [Parameter(

            Mandatory=$False,

            ParameterSetName='Supply UserName and Password'

        )]

        [securestring]$Password,

        [Parameter(

            Mandatory=$False,

            ParameterSetName='Supply Credentials'

        )]

        [System.Management.Automation.PSCredential]$Credentials

    )

    ##### BEGIN Variable/Parameter Transforms and PreRun Prep #####

    if (GetElevation) {

        Write-Error "The current PowerShell Session is already being run with elevated permissions. There is no reason to use the Start-SudoSession function. Halting!"

        $global:FunctionResult = "1"

        return

    }

    if ($global:SudoCredentials) {

        if (!$Credentials) {

            if ($Username -match "\\") {

                $UserName = $($UserName -split "\\")[-1]

            }

            if ($global:SudoCredentials.UserName -match "\\") {

                $SudoUserName = $($global:SudoCredentials.UserName -split "\\")[-1]

            }

            else {

                $SudoUserName = $global:SudoCredentials.UserName

            }

            if ($SudoUserName -match $UserName) {

                $Credentials = $global:SudoCredentials

            }

        }

        else {

            if ($global:SudoCredentials.UserName -ne $Credentials.UserName) {

                $global:SudoCredentials = $Credentials

            }

        }

    }

    if (!$Credentials) {

        if (!$Password) {

            $Password = Read-Host -Prompt "Please enter the password for $UserName" -AsSecureString

        }

        $Credentials = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $UserName, $Password

    }

    if ($Credentials.UserName -match "\\") {

        $UserName = $($Credentials.UserName -split "\\")[-1]

    }

    if ($Username -match "\\") {

        $UserName = $($UserName -split "\\")[-1]

    }

    $global:SudoCredentials = $Credentials

    $Domain = $(Get-CimInstance -ClassName Win32_ComputerSystem).Domain

    $LocalHostFQDN = "$env:ComputerName.$Domain"

    ##### END Variable/Parameter Transforms and PreRunPrep #####

    ##### BEGIN Main Body #####

    $CurrentUser = $($(whoami) -split "\\")[-1]

    $SudoSessionFolder = "$HOME\SudoSession_$CurrentUser_$(Get-Date -Format MMddyyy)"

    if (!$(Test-Path $SudoSessionFolder)) {

        $SudoSessionFolder = $(New-Item -ItemType Directory -Path $SudoSessionFolder).FullName

    }

    $SudoSessionChangesPSObject = "$SudoSessionFolder\SudoSession_Config_Changes_$CurrentUser_$(Get-Date -Format MMddyyy_hhmmss).xml"

    $TranscriptPath = "$SudoSessionFolder\SudoSession_Transcript_$CurrentUser_$(Get-Date -Format MMddyyy_hhmmss).txt"

    $SystemConfigScriptFilePath = "$SudoSessionFolder\SystemConfigScript.ps1"

    $CredDelRegLocation = "HKLM:\Software\Policies\Microsoft\Windows\CredentialsDelegation"

    $CredSSPServicePath = "WSMan:\localhost\Service\Auth\CredSSP"

    $CredSSPClientPath = "WSMan:\localhost\Client\Auth\CredSSP"

    $AllowFreshValue = "WSMAN/$LocalHostFQDN"

    $SystemConfigScript = @"

    `$CredDelRegLocation = '$CredDelRegLocation'

    `$CredSSPServicePath = '$CredSSPServicePath'

    `$CredSSPClientPath = '$CredSSPClientPath'

    `$AllowFreshValue = '$AllowFreshValue'

    `$SudoSessionChangesPSObject = '$SudoSessionChangesPSObject'

    `$CurrentUser = '$CurrentUser'

    `$TranscriptPath = '$TranscriptPath'

"@ + @'

    Start-Transcript -Path $TranscriptPath -Append

    # Gather output as we go...

    $Output = [ordered]@{}

    [System.Collections.ArrayList]$RegistryKeysCreated = @()

    [System.Collections.ArrayList]$RegistryKeyPropertiesCreated = @()

    if (!$(Test-WSMan)) {

        try {

            Enable-PSRemoting -Force -SkipNetworkProfileCheck -ErrorAction Stop

        }

        catch {

            Write-Error $_

            $global:FunctionResult = "1"

            return

        }

        $Output.Add("WinRMStateChange",$True)

    }

    else {

        $Output.Add("WinRMStateChange",$False)

    }

    ##### BEGIN Registry Tweaks under HKLM:\ #####

    # Create the $CredDelRegLocation Key if it doesn't already exist

    if (!$(Test-Path $CredDelRegLocation)) {

        $CredentialsDelegationKey = New-Item -Path $CredDelRegLocation

        $null = $RegistryKeysCreated.Add($CredentialsDelegationKey)

    }

    # Determine if the $CredDelRegLocation Key itself has a property (DWORD) called 'AllowFreshCredentials'

    # and also if it has a SubKey of the same name (i.e.'AllowFreshCredentials'). Also check if it has a property

    # (DWORD) called 'ConcatenateDefaults_AllowFresh'

    $CredDelRegLocationProperties = Get-ItemProperty -Path $CredDelRegLocation

    $AllowFreshCredsDWORDExists = $($CredDelRegLocationProperties | Get-Member -Type NoteProperty).Name -contains "AllowFreshCredentials"

    $ConcatDefAllowFreshDWORDExsits = $($CredDelRegLocationProperties | Get-Member -Type NoteProperty).Name -contains "ConcatenateDefaults_AllowFresh"

    # The below should be an array of integers

    [array]$AllowFreshCredsSubKeyCheck = $AllowFreshCredsSubKeyPropertyKeys = Get-ChildItem -Path $CredDelRegLocation | Where-Object {$_.PSChildName -eq "AllowFreshCredentials"}

    # If the two $CredDelRegLocation DWORDs don't exist, create them

    if (!$AllowFreshCredsDWORDExists) {

        $NewAllowFreshCredsProperty = Set-ItemProperty -Path $CredDelRegLocation -Name AllowFreshCredentials -Value 1 -Type DWord -Passthru

        $null = $RegistryKeyPropertiesCreated.Add($NewAllowFreshCredsProperty)

    }

    if (!$ConcatDefAllowFreshDWORDExsits) {

        $NewConcatenateDefaultsProperty = Set-ItemProperty -Path $CredDelRegLocation -Name ConcatenateDefaults_AllowFresh -Value 1 -Type DWord -Passthru

        $null = $RegistryKeyPropertiesCreated.Add($NewConcatenateDefaultsProperty)

    }

    if ($AllowFreshCredsSubKeyCheck.Count -eq 0) {

        $AllowCredentialsKey = New-Item -Path $CredDelRegLocation\AllowFreshCredentials

        $null = $RegistryKeysCreated.Add($AllowCredentialsKey)

        # Should be an array of integers

        [array]$AllowFreshCredsSubKeyPropertyKeys = $(Get-Item $CredDelRegLocation\AllowFreshCredentials).Property

    }

    if ($AllowFreshCredsSubKeyPropertyKeys.Count -eq 0) {

        $AllowFreshCredsSubKeyNewProperty = Set-ItemProperty -Path $CredDelRegLocation\AllowFreshCredentials -Name 1 -Value $AllowFreshValue -Type String -Passthru

        $null = $RegistryKeyPropertiesCreated.Add($AllowFreshCredsSubKeyNewProperty)

    }

    else {

        [array]$AllowFreshCredsSubKeyPropertyValues = foreach ($key in $AllowFreshCredsSubKeyPropertyKeys) {

            $(Get-ItemProperty $CredDelRegLocation\AllowFreshCredentials).$key

        }

        if ($AllowFreshCredsSubKeyPropertyValues -notcontains $AllowFreshValue) {

            $AllowFreshCredsSubKeyNewProperty = Set-ItemProperty -Path $CredDelRegLocation\AllowFreshCredentials -Name $($AllowFreshCredsSubKeyPropertyKeys.Count+1) -Value $AllowFreshValue -Type String -Passthru

            $null = $RegistryKeyPropertiesCreated.Add($AllowFreshCredsSubKeyNewProperty)

        }

    }

    $Output.Add("RegistryKeysCreated",$RegistryKeysCreated)

    $Output.Add("RegistryKeyPropertiesCreated",$RegistryKeyPropertiesCreated)

    ##### END Registry Tweaks under HKLM:\ #####

    ##### BEGIN WSMAN Tweaks under WSMAN:\ #####

    try {

        $CredSSPServiceSetting = $(Get-Item $CredSSPServicePath).Value

        if (!$CredSSPServiceSetting) {throw "Unable to get the value of WSMAN:\ path '$CredSSPServicePath'! Halting!"}

    }

    catch {

        Write-Error $_

        $global:FunctionResult = "1"

        return

    }

    try {

        $CredSSPClientSetting = $(Get-Item $CredSSPClientPath).Value

        if ($CredSSPServiceSetting.Count -eq 0) {throw "Unable to get the value of WSMAN:\ path '$CredSSPClientPath'! Halting!"}

    }

    catch {

        Write-Error $_

        $global:FunctionResult = "1"

        return

    }

    if ($CredSSPServiceSetting -eq 'false') {

        Enable-WSManCredSSP -Role Server -Force

        $Output.Add("WSMANServerCredSSPStateChange",$True)

    }

    if ($CredSSPClientSetting -eq 'false') {

        Enable-WSManCredSSP -DelegateComputer localhost -Role Client -Force

        $Output.Add("WSMANClientCredSSPStateChange",$True)

    }

    ##### END WSMAN Tweaks under WSMAN:\ #####

    [pscustomobject]$Output

    # Create a backup of what we did to the system, just in case the current PowerShell Session is interrupted for some reason

    [pscustomobject]$Output | Export-CliXml $SudoSessionChangesPSObject

'@ | Set-Content $SystemConfigScriptFilePath

    # IMPORTANT NOTE: You CANNOT use the RunAs Verb if UseShellExecute is $false, and you CANNOT use

    # RedirectStandardError or RedirectStandardOutput if UseShellExecute is $true, so we have to write

    # output to a file temporarily

    $ProcessInfo = New-Object System.Diagnostics.ProcessStartInfo

    $ProcessInfo.FileName = "powershell.exe"

    $ProcessInfo.RedirectStandardError = $false

    $ProcessInfo.RedirectStandardOutput = $false

    $ProcessInfo.UseShellExecute = $true

    $ProcessInfo.Arguments = "-NoProfile -NonInteractive -WindowStyle Hidden -Command `"& $SystemConfigScriptFilePath`""

    $ProcessInfo.Verb = "RunAs"

    $Process = New-Object System.Diagnostics.Process

    $Process.StartInfo = $ProcessInfo

    $Process.Start() | Out-Null

    $Process.WaitForExit()

    $SystemConfigScriptResult = Import-CliXML $SudoSessionChangesPSObject

    $ElevatedPSSession = New-PSSession -Name "Sudo$UserName" -Authentication CredSSP -Credential $Credentials

    New-Variable -Name "NewSessionAndOriginalStatus" -Scope Global -Value $(

        [pscustomobject]@{

            ElevatedPSSession               = $ElevatedPSSession

            WSManAndRegistryChanges         = $SystemConfigScriptResult

            ConfigChangesFilePath           = $SudoSessionChangesPSObject

        }

    ) -Force

    $(Get-Variable -Name "NewSessionAndOriginalStatus" -ValueOnly)

    # Cleanup 

    Remove-Item $SystemConfigScriptFilePath

    ##### END Main Body #####

}

# SIG # Begin signature block

# MIIMiAYJKoZIhvcNAQcCoIIMeTCCDHUCAQExCzAJBgUrDgMCGgUAMGkGCisGAQQB

# gjcCAQSgWzBZMDQGCisGAQQBgjcCAR4wJgIDAQAABBAfzDtgWUsITrck0sYpfvNR

# AgEAAgEAAgEAAgEAAgEAMCEwCQYFKw4DAhoFAAQUzDY/3GJFgJCzmEWXF6Jc882j

# zDagggn9MIIEJjCCAw6gAwIBAgITawAAAB/Nnq77QGja+wAAAAAAHzANBgkqhkiG

# 9w0BAQsFADAwMQwwCgYDVQQGEwNMQUIxDTALBgNVBAoTBFpFUk8xETAPBgNVBAMT

# CFplcm9EQzAxMB4XDTE3MDkyMDIxMDM1OFoXDTE5MDkyMDIxMTM1OFowPTETMBEG

# CgmSJomT8ixkARkWA0xBQjEUMBIGCgmSJomT8ixkARkWBFpFUk8xEDAOBgNVBAMT

# B1plcm9TQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCwqv+ROc1

# bpJmKx+8rPUUfT3kPSUYeDxY8GXU2RrWcL5TSZ6AVJsvNpj+7d94OEmPZate7h4d

# gJnhCSyh2/3v0BHBdgPzLcveLpxPiSWpTnqSWlLUW2NMFRRojZRscdA+e+9QotOB

# aZmnLDrlePQe5W7S1CxbVu+W0H5/ukte5h6gsKa0ktNJ6X9nOPiGBMn1LcZV/Ksl

# lUyuTc7KKYydYjbSSv2rQ4qmZCQHqxyNWVub1IiEP7ClqCYqeCdsTtfw4Y3WKxDI

# JaPmWzlHNs0nkEjvnAJhsRdLFbvY5C2KJIenxR0gA79U8Xd6+cZanrBUNbUC8GCN

# wYkYp4A4Jx+9AgMBAAGjggEqMIIBJjASBgkrBgEEAYI3FQEEBQIDAQABMCMGCSsG

# AQQBgjcVAgQWBBQ/0jsn2LS8aZiDw0omqt9+KWpj3DAdBgNVHQ4EFgQUicLX4r2C

# Kn0Zf5NYut8n7bkyhf4wGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwDgYDVR0P

# AQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUdpW6phL2RQNF

# 7AZBgQV4tgr7OE0wMQYDVR0fBCowKDAmoCSgIoYgaHR0cDovL3BraS9jZXJ0ZGF0

# YS9aZXJvREMwMS5jcmwwPAYIKwYBBQUHAQEEMDAuMCwGCCsGAQUFBzAChiBodHRw

# Oi8vcGtpL2NlcnRkYXRhL1plcm9EQzAxLmNydDANBgkqhkiG9w0BAQsFAAOCAQEA

# tyX7aHk8vUM2WTQKINtrHKJJi29HaxhPaHrNZ0c32H70YZoFFaryM0GMowEaDbj0

# a3ShBuQWfW7bD7Z4DmNc5Q6cp7JeDKSZHwe5JWFGrl7DlSFSab/+a0GQgtG05dXW

# YVQsrwgfTDRXkmpLQxvSxAbxKiGrnuS+kaYmzRVDYWSZHwHFNgxeZ/La9/8FdCir

# MXdJEAGzG+9TwO9JvJSyoGTzu7n93IQp6QteRlaYVemd5/fYqBhtskk1zDiv9edk

# mHHpRWf9Xo94ZPEy7BqmDuixm4LdmmzIcFWqGGMo51hvzz0EaE8K5HuNvNaUB/hq

# MTOIB5145K8bFOoKHO4LkTCCBc8wggS3oAMCAQICE1gAAAH5oOvjAv3166MAAQAA

# AfkwDQYJKoZIhvcNAQELBQAwPTETMBEGCgmSJomT8ixkARkWA0xBQjEUMBIGCgmS

# JomT8ixkARkWBFpFUk8xEDAOBgNVBAMTB1plcm9TQ0EwHhcNMTcwOTIwMjE0MTIy

# WhcNMTkwOTIwMjExMzU4WjBpMQswCQYDVQQGEwJVUzELMAkGA1UECBMCUEExFTAT

# BgNVBAcTDFBoaWxhZGVscGhpYTEVMBMGA1UEChMMRGlNYWdnaW8gSW5jMQswCQYD

# VQQLEwJJVDESMBAGA1UEAxMJWmVyb0NvZGUyMIIBIjANBgkqhkiG9w0BAQEFAAOC

# AQ8AMIIBCgKCAQEAxX0+4yas6xfiaNVVVZJB2aRK+gS3iEMLx8wMF3kLJYLJyR+l

# rcGF/x3gMxcvkKJQouLuChjh2+i7Ra1aO37ch3X3KDMZIoWrSzbbvqdBlwax7Gsm

# BdLH9HZimSMCVgux0IfkClvnOlrc7Wpv1jqgvseRku5YKnNm1JD+91JDp/hBWRxR

# 3Qg2OR667FJd1Q/5FWwAdrzoQbFUuvAyeVl7TNW0n1XUHRgq9+ZYawb+fxl1ruTj

# 3MoktaLVzFKWqeHPKvgUTTnXvEbLh9RzX1eApZfTJmnUjBcl1tCQbSzLYkfJlJO6

# eRUHZwojUK+TkidfklU2SpgvyJm2DhCtssFWiQIDAQABo4ICmjCCApYwDgYDVR0P

# AQH/BAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMDMB0GA1UdDgQWBBS5d2bhatXq

# eUDFo9KltQWHthbPKzAfBgNVHSMEGDAWgBSJwtfivYIqfRl/k1i63yftuTKF/jCB

# 6QYDVR0fBIHhMIHeMIHboIHYoIHVhoGubGRhcDovLy9DTj1aZXJvU0NBKDEpLENO

# PVplcm9TQ0EsQ049Q0RQLENOPVB1YmxpYyUyMEtleSUyMFNlcnZpY2VzLENOPVNl

# cnZpY2VzLENOPUNvbmZpZ3VyYXRpb24sREM9emVybyxEQz1sYWI/Y2VydGlmaWNh

# dGVSZXZvY2F0aW9uTGlzdD9iYXNlP29iamVjdENsYXNzPWNSTERpc3RyaWJ1dGlv

# blBvaW50hiJodHRwOi8vcGtpL2NlcnRkYXRhL1plcm9TQ0EoMSkuY3JsMIHmBggr

# BgEFBQcBAQSB2TCB1jCBowYIKwYBBQUHMAKGgZZsZGFwOi8vL0NOPVplcm9TQ0Es

# Q049QUlBLENOPVB1YmxpYyUyMEtleSUyMFNlcnZpY2VzLENOPVNlcnZpY2VzLENO

# PUNvbmZpZ3VyYXRpb24sREM9emVybyxEQz1sYWI/Y0FDZXJ0aWZpY2F0ZT9iYXNl

# P29iamVjdENsYXNzPWNlcnRpZmljYXRpb25BdXRob3JpdHkwLgYIKwYBBQUHMAKG

# Imh0dHA6Ly9wa2kvY2VydGRhdGEvWmVyb1NDQSgxKS5jcnQwPQYJKwYBBAGCNxUH

# BDAwLgYmKwYBBAGCNxUIg7j0P4Sb8nmD8Y84g7C3MobRzXiBJ6HzzB+P2VUCAWQC

# AQUwGwYJKwYBBAGCNxUKBA4wDDAKBggrBgEFBQcDAzANBgkqhkiG9w0BAQsFAAOC

# AQEAszRRF+YTPhd9UbkJZy/pZQIqTjpXLpbhxWzs1ECTwtIbJPiI4dhAVAjrzkGj

# DyXYWmpnNsyk19qE82AX75G9FLESfHbtesUXnrhbnsov4/D/qmXk/1KD9CE0lQHF

# Lu2DvOsdf2mp2pjdeBgKMRuy4cZ0VCc/myO7uy7dq0CvVdXRsQC6Fqtr7yob9NbE

# OdUYDBAGrt5ZAkw5YeL8H9E3JLGXtE7ir3ksT6Ki1mont2epJfHkO5JkmOI6XVtg

# anuOGbo62885BOiXLu5+H2Fg+8ueTP40zFhfLh3e3Kj6Lm/NdovqqTBAsk04tFW9

# Hp4gWfVc0gTDwok3rHOrfIY35TGCAfUwggHxAgEBMFQwPTETMBEGCgmSJomT8ixk

# ARkWA0xBQjEUMBIGCgmSJomT8ixkARkWBFpFUk8xEDAOBgNVBAMTB1plcm9TQ0EC

# E1gAAAH5oOvjAv3166MAAQAAAfkwCQYFKw4DAhoFAKB4MBgGCisGAQQBgjcCAQwx

# CjAIoAKAAKECgAAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGC

# NwIBCzEOMAwGCisGAQQBgjcCARUwIwYJKoZIhvcNAQkEMRYEFL3Vcczq2+fYTwHn

# ao6seBnpkiAIMA0GCSqGSIb3DQEBAQUABIIBAF2eN90FOJZqn25YsBZ3vqK9C8sR

# s4fepMFd6DIE7isa5/2ll+uIkuRM+aXbMrVcoyaSXz40/gtapYNL8VvRKO2FBGDz

# BTZlAmrYOgnaocTS1jg1cWYXuT9Krkivxqf0R5VxkCba2x7TYwrIk82n6Z9FmctK

# Sq+zH/fa7kLBljM+pccJ8ciw+K4OG5c4V7CqUNxFfA64S44ZEkZvTnJGSURM4U2m

# BeZ0D54TWHLgnbnf0Ia90F5P2d2RBlJivndyQ/FcExkU8JdSXrg0YfN4ivoYrHEA

# w1b8N7Bk1vJKWEXuXdnG7wBS5UMdRqI6HMTDeEIK8SyXP0v6iGGl2ADCQqg=

# SIG # End signature block