Az.Migrate

3.2.0

Migrate.Autorest/custom/Helper/AzLocalCommonHelper.ps1

function CheckResourceGraphModuleDependency {
    [Microsoft.Azure.PowerShell.Cmdlets.Migrate.DoNotExportAttribute()]
    param() 

    process {
        $module = Get-Module -ListAvailable | Where-Object { $_.Name -eq "Az.ResourceGraph" }
        if ($null -eq $module) {
            $message = "Az.ResourceGraph Module must be installed to run this command. Please run 'Install-Module -Name Az.ResourceGraph' to install and continue."
            throw $message
        }
    }
}

function CheckResourcesModuleDependency {
    [Microsoft.Azure.PowerShell.Cmdlets.Migrate.DoNotExportAttribute()]
    param() 

    process {
        $module = Get-Module -ListAvailable | Where-Object { $_.Name -eq "Az.Resources" }
        if ($null -eq $module) {
            $message = "Az.Resources Module must be installed to run this command. Please run 'Install-Module -Name Az.Resources' to install and continue."
            throw $message
        }
    }
}

function CheckStorageModuleDependency {
    [Microsoft.Azure.PowerShell.Cmdlets.Migrate.DoNotExportAttribute()]
    param() 

    process {
        $module = Get-Module -ListAvailable | Where-Object { $_.Name -eq "Az.Storage" }
        if ($null -eq $module) {
            $message = "Az.Storage Module must be installed to run this command. Please run 'Install-Module -Name Az.Storage' to install and continue."
            throw $message
        }
    }
}

function CheckConnectedMachineModuleDependency {
    [Microsoft.Azure.PowerShell.Cmdlets.Migrate.DoNotExportAttribute()]
    param()

    process {
        $module = Get-Module -ListAvailable -Name Az.ConnectedMachine
        if ($null -eq $module) {
            $message = "Az.ConnectedMachine Module must be installed to use -MigrateAsArcVM 'true'. Please run 'Install-Module -Name Az.ConnectedMachine' to install and continue."
            throw $message
        }
    }
}

function GetARGQueryForArcResourceBridge {
    [Microsoft.Azure.PowerShell.Cmdlets.Migrate.DoNotExportAttribute()]
    param(
        [Parameter(Mandatory)]
        [System.String]
        # Specifies HCI Cluster Id.
        ${HCIClusterID}
    )

    process {
        $query = @"
resources | where type == 'microsoft.extendedlocation/customlocations'
| mv-expand ClusterId = properties['clusterExtensionIds']
| extend ClusterId = toupper(tostring(ClusterId))
| extend CustomLocation = toupper(tostring(id))
| extend resourceBridgeID = toupper(tostring(properties['hostResourceId']))
| extend customLocationRegion = location
| join (
    kubernetesconfigurationresources
    | where type == 'microsoft.kubernetesconfiguration/extensions'
    | where properties['ConfigurationSettings']['HCIClusterID'] =~ '$HCIClusterID'
    | project ClusterId = id
    | extend ClusterId = toupper(tostring(ClusterId))
) on ClusterId
| join (
    resources
    | where type == 'microsoft.resourceconnector/appliances'
    | where properties['provisioningState'] == 'Succeeded'
    | extend statusOfTheBridge = properties['status']
    | extend resourceBridgeID = toupper(tostring(id))
) on resourceBridgeID
"@
        return $query
    }
}

function IsReservedOrTrademarked {
    [Microsoft.Azure.PowerShell.Cmdlets.Migrate.DoNotExportAttribute()]
    param(
        [Parameter(Mandatory)]
        [System.String]
        # Specifies VM name.
        ${Value}
    )

    $uppercased = $Value.ToUpper();

    # cannot be exactly one of these, but could be slightly different (e.g. hololens2)
    $reservedWords = @(
        "ACCESS",
        "APP_CODE",
        "APP_THEMES",
        "APP_DATA",
        "APP_GLOBALRESOURCES",
        "APP_LOCALRESOURCES",
        "APP_WEBREFERENCES",
        "APP_BROWSERS",
        "AZURE",
        "BING",
        "BIZSPARK",
        "BIZTALK",
        "CORTANA",
        "DIRECTX",
        "DOTNET",
        "DYNAMICS",
        "EXCEL",
        "EXCHANGE",
        "FOREFRONT",
        "GROOVE",
        "HOLOLENS",
        "HYPERV",
        "KINECT",
        "LYNC",
        "MSDN",
        "O365",
        "OFFICE",
        "OFFICE365",
        "ONEDRIVE",
        "ONENOTE",
        "OUTLOOK",
        "POWERPOINT",
        "SHAREPOINT",
        "SKYPE",
        "VISIO",
        "VISUALSTUDIO"
    )

    # The following words can't be used as either a whole word or a substring in the name:
    $microsoft = "MICROSOFT";
    $windows = "WINDOWS";

    # The following words can't be used at the start of a resource name, but can be used later in the name:
    $startLogin = "LOGIN";
    $startXbox = "XBOX";

    if ($uppercased.startsWith($startLogin) -or $uppercased.startsWith($startXbox)) {
        return $true;
    }

    if ($uppercased.contains($microsoft) -or $uppercased.contains($windows)) {
        return $true;
    }

    foreach ($reservedName in $reservedWords) {
        if ($uppercased -eq $reservedName) {
            return $true;
        }
    }

    return $false;
}

function GenerateHashForArtifact {
    [Microsoft.Azure.PowerShell.Cmdlets.Migrate.DoNotExportAttribute()]
    param(
        [Parameter(Mandatory)]
        [System.String]
        # Specifies resource group name.
        ${Artifact}
    )

    $hashCode = 0
    $artifactLength = $Artifact.Length
    $tempItemLength = 0
    if ($artifactLength -gt 0) {
        while ($tempItemLength -lt $artifactLength) {
            $hashCode = ((($hashCode -shl 5) - $hashCode) + $Artifact[$tempItemLength++] -bor 0)
            
            # Treat as Double, then convert to Bytes, then convert back to Int32 to match JavaScript behavior
            $hashCode = [System.BitConverter]::ToInt32([System.BitConverter]::GetBytes($hashCode), 0)
        }
    }

    if ($hashCode -lt 0) {
        return -1 * $hashCode
    }
    else {
        return $hashCode
    }
}

function InvokeAzMigrateGetCommandWithRetries {
    [Microsoft.Azure.PowerShell.Cmdlets.Migrate.DoNotExportAttribute()]
    param(
        [Parameter(Mandatory)]
        [System.String]
        # Specifies the name of Az.Migrate command.
        ${CommandName},

        [Parameter(Mandatory)]
        [System.Collections.Hashtable]
        # Specifies the parameters for Az.Migrate command.
        ${Parameters},

        [Parameter()]
        [System.Int32]
        # Specifies the maximum number of retries.
        ${MaxRetryCount} = 3,

        [Parameter()]
        [System.Int32]
        # Specifies the delay between retries in seconds.
        ${RetryDelayInSeconds} = 30,

        [Parameter()]
        [System.String]
        # Specifies the error message to throw if command fails.
        ${ErrorMessage} = "Internal Az.Migrate commands failed to execute."
    )

    process {
        # Filter out ErrorAction and ErrorVariable from the parameters
        $params = @{}
        foreach ($key in $Parameters.Keys) {
            if ($key -ne "ErrorAction" -and $key -ne "ErrorVariable") {
                $params[$key] = $Parameters[$key]
            }
        }

        # Extract user-specified ErrorAction and ErrorVariable or defaults
        # but do not include them in $params
        if ($Parameters.ContainsKey("ErrorVariable")) {
            $errorVariable = $Parameters["ErrorVariable"]
        }
        else
        {
            $errorVariable = "notPresent"
        }

        if ($Parameters.ContainsKey("ErrorAction")) {
            $errorAction = $Parameters["ErrorAction"]
        }
        else
        {
            $errorAction = "Continue"
        }

        for ($i = 0; $i -le $MaxRetryCount; $i++) {
            try {
                $result = & $CommandName @params -ErrorVariable $errorVariable -ErrorAction $errorAction

                if ($null -eq $result) {
                    throw $ErrorMessage
                }

                break
            }
            catch {
                if ($i -lt $MaxRetryCount) {
                    Start-Sleep -Seconds $RetryDelayInSeconds
                }
                else {
                    throw "Get command failed after $MaxRetryCount retries. Error: $($_.Exception)"
                }
            }
        }

        return $result
    }
}

function Test-ArcMachineReuseEligibility {
    [Microsoft.Azure.PowerShell.Cmdlets.Migrate.DoNotExportAttribute()]
    param(
        [Parameter(Mandatory)]
        [string]
        # Subscription that should contain the target Arc-enabled machine.
        ${TargetSubscriptionId},

        [Parameter(Mandatory)]
        [string]
        # Resource group that should contain the target Arc-enabled machine.
        ${TargetResourceGroupName},

        [Parameter(Mandatory)]
        [string]
        # Name of the Arc-enabled machine to be reused (matches -TargetVMName on the cmdlet).
        ${TargetVMName}
    )

    process {
        $arcMachineId = $IdFormats.HybridComputeMachineArmIdTemplate -f $TargetSubscriptionId, $TargetResourceGroupName, $TargetVMName

        # GET the Arc-enabled machine via Az.ConnectedMachine. The module's presence is
        # validated up-front by CheckConnectedMachineModuleDependency in the calling cmdlet,
        # so reaching this point implies Az.ConnectedMachine is available.
        $getErrors = $null
        $arcMachine = Az.ConnectedMachine\Get-AzConnectedMachine `
            -SubscriptionId    $TargetSubscriptionId `
            -ResourceGroupName $TargetResourceGroupName `
            -Name              $TargetVMName `
            -ErrorAction       SilentlyContinue `
            -ErrorVariable     getErrors

        # 1. Existence: a null result means the lookup failed for any reason (not found,
        # auth, throttling, network, etc.). We deliberately do not distinguish 404 from
        # other failures: the actionable guidance is the same (verify the Arc machine
        # exists at the expected resource group and matches -TargetVMName), and including
        # the underlying exception message preserves diagnostic detail when present.
        if ($null -eq $arcMachine) {
            $underlyingError = if ($getErrors -and $getErrors[0] -and $getErrors[0].Exception) {
                $getErrors[0].Exception.Message
            } else {
                '(no error details available)'
            }
            throw ($ArcMachineReuseValidationMessages.NotFound -f $arcMachineId, $underlyingError)
        }

        # 2. Kind must be unset (any non-empty value blocks reuse).
        if (-not [string]::IsNullOrEmpty($arcMachine.Kind)) {
            throw ($ArcMachineReuseValidationMessages.KindIncompatible -f $arcMachineId, $arcMachine.Kind)
        }

        # Note: status and location checks are intentionally omitted. The DataReplication
        # service will surface those failures at PUT time if they matter.

        Write-Verbose "Arc machine reuse preflight passed: $arcMachineId"
    }
}

function Test-ReplicationPrequisites {
    [Microsoft.Azure.PowerShell.Cmdlets.Migrate.DoNotExportAttribute()]
    param (
        [Parameter(Mandatory)]
        [string]
        ${ResourceGroupName},

        [Parameter(Mandatory)]
        [string]
        ${VaultName},

        [Parameter(Mandatory)]
        [string]
        ${ProtectedItemName},

        [Parameter(Mandatory)]
        [System.String]
        ${MigrationType}
    )

    # Check if the VM is already protected
    $protectedItem = Az.Migrate.Internal\Get-AzMigrateProtectedItem `
        -ResourceGroupName $ResourceGroupName `
        -VaultName $VaultName `
        -Name $ProtectedItemName `
        -ErrorAction SilentlyContinue
    if ($null -ne $protectedItem) {
        throw $VmReplicationValidationMessages.AlreadyInReplication
    }

    # Check the VM power status
    if ($Machine.PowerStatus -eq $PowerStatus.OffVMware -or $Machine.PowerStatus -eq $PowerStatus.OffHyperV) {
        throw $VmReplicationValidationMessages.VmPoweredOff
    }

    # Hyper-V scenario checks
    if ($MigrationType -eq $AzLocalInstanceTypes.HyperVToAzLocal) {
        # Hyper-V VMs with 'otherguestfamily' OS type and missing OS name could also mean Hyper-V Integration Services are not running
        if ([string]::IsNullOrEmpty($Machine.OperatingSystemDetailOSType) -or
            ($Machine.OperatingSystemDetailOSType -eq $OsTypes.OtherGuestFamily -and [string]::IsNullOrEmpty($Machine.GuestOSDetailOsname)))
        {
            throw $VmReplicationValidationMessages.HyperVIntegrationServicesNotRunning
        }

        # Hyper-V VMs on cluster should be highly available
        if (![string]::IsNullOrEmpty($Machine.ClusterId)) {
            if ($Machine.HighAvailability -eq $HighAvailability.NO) {
                throw $VmReplicationValidationMessages.VmNotHighlyAvailable
            }
            elseif ($Machine.HighAvailability -ne $HighAvailability.YES) {
                # Unknown or unexpected value
                throw $VmReplicationValidationMessages.VmUnknownHighlyAvailable
            }
        }
    }

    # VMware scenario checks
    if ($MigrationType -eq $AzLocalInstanceTypes.VMwareToAzLocal) {
        # VMware tools should be running to support static ip migration
        if ($Machine.VMwareToolsStatus -eq $VMwareToolsStatus.NotRunning) {
            Write-Warning $VmReplicationValidationMessages.VmWareToolsNotRunning
        }

        if ($Machine.VMwareToolsStatus -eq $VMwareToolsStatus.NotInstalled) {
            Write-Warning $VmReplicationValidationMessages.VmWareToolsNotInstalled
        }
    }

    # Only OS type of windowsguest and linuxguest are supported for Hyper-V and VMware scenarios
    if ($Machine.OperatingSystemDetailOSType -ne $OsTypes.WindowsGuest -and
        $Machine.OperatingSystemDetailOSType -ne $OsTypes.LinuxGuest)
    {
        Write-Warning $VmReplicationValidationMessages.OsTypeNotSupported
    }
}

function Test-AzureResourceIdFormat {
    [Microsoft.Azure.PowerShell.Cmdlets.Migrate.DoNotExportAttribute()]
    param(
        [Parameter(Mandatory = $true)]
        [string] $Data,
        
        [Parameter(Mandatory = $true)]
        [string] $Format
    )

    try {
        if ([string]::IsNullOrWhiteSpace($Data)) {
            return $false
        }

        # Find where format string starts (after first /)
        $firstTokenEnd = $Format.IndexOf("/", 1)
        if ($firstTokenEnd -eq -1) {
            return $false
        }

        $formatPrefix = $Format.Substring(0, $firstTokenEnd)
        $matchIndex = $Data.ToLower().IndexOf($formatPrefix.ToLower())

        if ($matchIndex -eq -1) {
            return $false
        }

        $processData = $Data.Substring($matchIndex)
        $processFormat = $Format
        $tokens = @()
        
        $counter = 0
        while ($true) {
            $markerPattern = "{$counter}"
            $markerStartIndex = $processFormat.IndexOf($markerPattern)

            if ($markerStartIndex -eq -1) {
                break
            }

            $markerEndIndex = $processData.IndexOf("/", $markerStartIndex)

            if ($markerEndIndex -eq -1) {
                $token = $processData.Substring($markerStartIndex)
                if ([string]::IsNullOrWhiteSpace($token)) {
                    return $false
                }
                $tokens += $token
            }
            else {
                $token = $processData.Substring($markerStartIndex, $markerEndIndex - $markerStartIndex)
                if ([string]::IsNullOrWhiteSpace($token)) {
                    return $false
                }
                $tokens += $token
                $processData = $processData.Substring($markerEndIndex)
                $processFormat = $processFormat.Substring($markerStartIndex + $markerPattern.Length)
            }

            $counter++
        }

        # Verify format matches with the extracted tokens
        $formatWithTokens = $Format
        for ($i = 0; $i -lt $tokens.Count; $i++) {
            $formatWithTokens = $formatWithTokens -replace "\{$i\}", $tokens[$i]
        }

        return $Data.ToLower() -like $formatWithTokens.ToLower()
    }
    catch
    {
        return $false
    }
}

function New-AzMigrateSolutionNotFoundException {
    [Microsoft.Azure.PowerShell.Cmdlets.Migrate.DoNotExportAttribute()]
    param(
        [Parameter(Mandatory)]
        [string]
        ${Name},

        [Parameter(Mandatory)]
        [string]
        ${ResourceGroupName},

        [Parameter(Mandatory)]
        [string]
        ${ProjectName}
    )

    return "No Azure Migrate Solution '$Name' found in resource group '$ResourceGroupName' and project '$ProjectName'. Please verify your appliance setup."
}

function New-ReplicationVaultNotFoundInAMHSolutionException {
    [Microsoft.Azure.PowerShell.Cmdlets.Migrate.DoNotExportAttribute()]
    param(
        [Parameter(Mandatory)]
        [string]
        ${VaultId}
    )

    return "Invalid replication vault ID '$VaultId' found in Azure Migrate Solution 'Servers-Migration-ServerMigration_DataReplication'. Please reach out to Microsoft support for assistance if this issue persists."
}

function New-InvalidResourceIdProvidedException {
    [Microsoft.Azure.PowerShell.Cmdlets.Migrate.DoNotExportAttribute()]
    param(
        [Parameter(Mandatory)]
        [string]
        ${ResourceId},

        [Parameter(Mandatory)]
        [ValidateSet("MigrateProject", "Job", "ProtectedItem", "ResourceGroup", "DiscoveredMachine", "StorageContainer", "LogicalNetwork")]
        [string]
        ${ResourceType},

        [Parameter(Mandatory)]
        [string]
        ${Format}
    )

    return "Invalid '$ResourceType' Id '$ResourceId' provided. Please provide a valid '$ResourceType' ARM id with format '$Format'."
}

function New-AzMigrateSiteNotFoundException {
    [Microsoft.Azure.PowerShell.Cmdlets.Migrate.DoNotExportAttribute()]
    param(
        [Parameter(Mandatory)]
        [string]
        ${Name},

        [Parameter(Mandatory)]
        [string]
        ${ResourceGroupName},

        [Parameter(Mandatory)]
        [string]
        ${SiteType}
    )

    return "Machine site '$Name' with Type '$SiteType' not found. Please verify in your Azure Migrate project resource group '$ResourceGroupName' and re-run this command if exists."
}

function New-AzMigrateProtectedItemNotFoundException {
    [Microsoft.Azure.PowerShell.Cmdlets.Migrate.DoNotExportAttribute()]
    param(
        [Parameter(Mandatory)]
        [string]
        ${Id}
    )

    return "Replication item is not found with Id '$Id'. Re-run this command if exists."
}

function New-AzMigrateDiscoveredMachineNotFoundException {
    [Microsoft.Azure.PowerShell.Cmdlets.Migrate.DoNotExportAttribute()]
    param(
        [Parameter(Mandatory)]
        [string]
        ${Name},

        [Parameter(Mandatory)]
        [string]
        ${ResourceGroupName},

        [Parameter(Mandatory)]
        [string]
        ${SiteName}
    )

    return "Machine '$Name' not found in resource group '$ResourceGroupName' and site '$SiteName'."
}

function New-OffAzureResourceNotFoundException {
    [Microsoft.Azure.PowerShell.Cmdlets.Migrate.DoNotExportAttribute()]
    param(
        [Parameter(Mandatory)]
        [ValidateSet("HyperV", "VMware")]
        [string]
        ${Scenario},

        [Parameter(Mandatory)]
        [string]
        [ValidateSet("Host", "Cluster", "VCenter")]
        ${Type},

        [Parameter(Mandatory)]
        [string]
        ${Name},

        [Parameter(Mandatory)]
        [string]
        ${ResourceGroupName},

        [Parameter(Mandatory)]
        [string]
        ${SiteName}
    )

    return "'$Scenario' '$Name' not found in resource group '$ResourceGroupName' and site '$SiteName'."
}

function Get-AzMigrateSourceSecureBootState {
    [Microsoft.Azure.PowerShell.Cmdlets.Migrate.DoNotExportAttribute()]
    param(
        [Parameter(Mandatory)]
        [string]
        ${MachineId}
    )

    # Returns $true/$false, or $null when the state cannot be determined. Callers must treat $null
    # as unknown and fall through to the service rather than blocking the migration.
    $uri = "{0}?api-version={1}" -f $MachineId, $ApiVersions.OffAzureMachineRead

    try {
        $response = Invoke-AzRestMethod -Path $uri -Method GET -ErrorAction Stop
    }
    catch {
        Write-Verbose "Could not read Secure Boot state from '$MachineId': $($_.Exception.Message)"
        return $null
    }

    if ($null -eq $response -or $response.StatusCode -ne 200) {
        Write-Verbose "Could not read Secure Boot state from '$MachineId'. Status code: $($response.StatusCode)."
        return $null
    }

    try {
        $properties = ($response.Content | ConvertFrom-Json).properties
    }
    catch {
        Write-Verbose "Could not parse the discovered machine response for '$MachineId'."
        return $null
    }

    # Absent on older appliance versions and on clouds still serving the GA contract.
    if ($null -eq $properties -or
        'secureBootEnabled' -notin $properties.PSObject.Properties.Name -or
        $null -eq $properties.secureBootEnabled) {
        Write-Verbose "Discovered machine '$MachineId' does not report Secure Boot state."
        return $null
    }

    return [bool]$properties.secureBootEnabled
}

function Resolve-AzMigrateTargetSecurityOption {
    [Microsoft.Azure.PowerShell.Cmdlets.Migrate.DoNotExportAttribute()]
    param(
        # 'Create' leaves the target inheriting the source unless Secure Boot is explicitly chosen.
        # 'Update' always sends a value, matching how the portal rewrites the field on edit.
        [Parameter(Mandatory)]
        [ValidateSet('Create', 'Update')]
        [string]
        ${Mode},

        [Parameter()]
        [string]
        ${HyperVGeneration},

        [Parameter()]
        [bool]
        ${HasTargetVMSecurityOption},

        [Parameter()]
        [string]
        ${TargetVMSecurityOption},

        [Parameter()]
        [bool]
        ${HasEnableSecureBoot},

        [Parameter()]
        [bool]
        ${SecureBootEnabled}
    )

    # Returns a decision rather than throwing so New- and Set- keep their own error wording, and so
    # the Secure Boot downgrade check stays out of this function and remains network free.
    $decision = [PSCustomObject]@{
        SecurityOption         = $null
        Gen2Required           = $false
        VerifySourceSecureBoot = $false
    }

    if (-not ($HasTargetVMSecurityOption -or $HasEnableSecureBoot)) {
        return $decision
    }

    $securityType = if ($HasTargetVMSecurityOption) { $TargetVMSecurityOption } else { $TargetVMSecurityTypes.Standard }
    $isTrustedLaunch = $securityType -eq $TargetVMSecurityTypes.TrustedLaunch

    if ($Mode -eq 'Create') {
        $enabled = if ($isTrustedLaunch) { $true } elseif ($HasEnableSecureBoot) { $SecureBootEnabled } else { $false }

        if ($HyperVGeneration -eq "1" -and ($isTrustedLaunch -or $enabled)) {
            $decision.Gen2Required = $true
            return $decision
        }

        # '-TargetVMSecurityOption Standard' on its own is not a choice about Secure Boot, so the
        # target keeps inheriting the source and no securityOption is sent.
        if ($isTrustedLaunch) {
            $decision.SecurityOption = $SecurityOptions.TrustedLaunch
        }
        elseif ($HasEnableSecureBoot) {
            $decision.VerifySourceSecureBoot = (-not $enabled) -and $HyperVGeneration -eq "2"
            $decision.SecurityOption = if ($enabled) { $SecurityOptions.SecureBootEnabled } else { $SecurityOptions.None }
        }

        return $decision
    }

    $enabled = if ($isTrustedLaunch -or -not $HasEnableSecureBoot) { $true } else { $SecureBootEnabled }

    if ($HyperVGeneration -eq "1") {
        # Only an explicit request is an error. The inherit-Secure-Boot default above is a Gen 2
        # convention, so on Gen 1 it resolves to None instead of being rejected.
        if ($isTrustedLaunch -or ($HasEnableSecureBoot -and $enabled)) {
            $decision.Gen2Required = $true
            return $decision
        }

        $enabled = $false
    }

    $decision.VerifySourceSecureBoot = (-not $enabled) -and $HyperVGeneration -eq "2"
    $decision.SecurityOption =
        if ($isTrustedLaunch) { $SecurityOptions.TrustedLaunch }
        elseif ($enabled) { $SecurityOptions.SecureBootEnabled }
        else { $SecurityOptions.None }

    return $decision
}
# SIG # Begin signature block
# MIInSQYJKoZIhvcNAQcCoIInOjCCJzYCAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCHEwuUpmbwTQCR
# UOf/RP10w8HKD5jtJoa07h/ONlwMyKCCDLowggX1MIID3aADAgECAhMzAAACHU0Z
# yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD
# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1
# OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD
# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB
# DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8
# o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg
# 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4
# Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R
# X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk
# ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B
# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O
# BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL
# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw
# HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg
# UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0
# JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh
# MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv
# Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy
# dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9
# s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H
# VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3
# w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n
# 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs
# A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo
# Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb
# SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6
# 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z
# V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v
# 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs
# /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA
# AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX
# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg
# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl
# IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow
# VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo
# MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ
# KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh
# emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h
# KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd
# M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp
# yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t
# Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5
# REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs
# 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK
# Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5
# pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW
# eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ
# 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC
# NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB
# gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU
# ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny
# bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx
# MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0
# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx
# MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI
# MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4
# NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh
# ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q
# hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU
# nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb
# H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z
# uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u
# vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW
# 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV
# DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10
# 1cY2L4A7GTQG1h32HHAvfQESWP0xghnlMIIZ4QIBATBuMFcxCzAJBgNVBAYTAlVT
# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv
# c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w
# DQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYK
# KwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIHI2/mFB
# 4T0H609AM2lOVC62E+98RMmlmORBCZwJ7d2VMEIGCisGAQQBgjcCAQwxNDAyoBSA
# EgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20w
# DQYJKoZIhvcNAQEBBQAEggEAQ4aopFvF4yMG2JNTdDNIwW2mqYU+vlDQ23eYqRpn
# wb1kOSJ1fvdCYlP0zW6sSYR7QBq4GHL7VDiT2zufGQMYDx++ltBGDYgzGfShzyRx
# FjRPLP4JXDjRsSEQw/QsQZuPTUZG00SiOwKdWIHsw7NAMklvNe0v040hTnZtOjvc
# nd0SOoFSm4oKzSq63ca2KpDm4uj0CFdWn97X7DvBVgy2jKPzTwT3nq97mv7rDanU
# DzYTLPXsQlI/fm+WmPDu+JA+Pr/ntUbn9Sb6jiy8A+uFBm46nyuFTrumhiwRaLSS
# zZA63zF0JaxvEB+nhRjE0BmBpsjViO2Uajm+dztK0FKlQaGCF5cwgheTBgorBgEE
# AYI3AwMBMYIXgzCCF38GCSqGSIb3DQEHAqCCF3AwghdsAgEDMQ8wDQYJYIZIAWUD
# BAIBBQAwggFSBgsqhkiG9w0BCRABBKCCAUEEggE9MIIBOQIBAQYKKwYBBAGEWQoD
# ATAxMA0GCWCGSAFlAwQCAQUABCCoapELHiI5QLMmeYaH0u52jPma1MBCDrGR31Cj
# yOh6MAIGarf0imf1GBMyMDI2MTAyODAwNDM1MC4xOTlaMASAAgH0oIHRpIHOMIHL
# MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVk
# bW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxN
# aWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRT
# UyBFU046MzMwMy0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0
# YW1wIFNlcnZpY2WgghHtMIIHIDCCBQigAwIBAgITMwAAAiEzwDX70g8hpAABAAAC
# ITANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu
# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv
# cmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDAe
# Fw0yNjAyMTkxOTM5NTRaFw0yNzA1MTcxOTM5NTRaMIHLMQswCQYDVQQGEwJVUzET
# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV
# TWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmlj
# YSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046MzMwMy0wNUUw
# LUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIi
# MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDbcTACqU1YvRocyWL2PL9fyf/+
# ULs2qK7U1aZsRnDZSnlCr7K7jgA3eFCEJL5BZ7dUTC0DeZepf+ZC+7HEbB4IdzmJ
# fQAUDFFerqY5VTHmQvP2XA3lWSFj740idcGUHglP5H/PbCJU7GAHWP2HdcCjdx1l
# YAo0A+zLI7xwnTQeMyOXX212Eg4UmDPPJgxdTMw6WFVWsBPWRBi5gDixy2s+7R8A
# Dk5lbBBFDB5h0CjrNWIN7uCAzF5g7trrL8nXIKp10mj9RxhcGQ+tlht6VIvdygRV
# TUGdzFB2/nBvJqQ9kxxFltQST70fEdx4TyaKow/f5+BSh4z4/9f7NXIVVTLn/8kc
# JAfRqFmRrrFt3IKby7VrzmYuoQWD0lmNFtGQ57BrJkPrPFAPek1ALtcbb7FH3nQp
# vi8ngz/MFX/+cnmNFWFU29VVLmzB9XvLZxbYvkeett0mh5lfteeN2rEwUyrdrKuf
# z9h2S6pbate+C2h02CrXwSka0x6ezpTmGkIJLFt25ub/UYXNLdHdsxGD6EfckOIo
# JYsm4MS9F/vSqLNHK89I0vTLBngQEp6LIFkINanRT3PtNx3pNKRKJRALc6L6mhW4
# hL4aHL749qPfQ72t5qAMm5xiKYMgJ2WanidRLNuI251JIN7raaeA/2vb0XFkZcIb
# TR1pfQGsco4U0g5tjwIDAQABo4IBSTCCAUUwHQYDVR0OBBYEFOYjIs5qa6pfuquP
# yyK1FTr5QDCnMB8GA1UdIwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1Ud
# HwRYMFYwVKBSoFCGTmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3Js
# L01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggr
# BgEFBQcBAQRgMF4wXAYIKwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNv
# bS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIw
# MTAoMSkuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgw
# DgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUAA4ICAQA4I/3bkdnTxD2rFum3
# MF8xVKdEkohAObbePrQ+0fr5bRimjz9sVkKT/7gcj4OMcClSYG+IdX6Mp3EYsLHW
# fjvwfzFoeZE+yTbdBj/1VHZQRuCmw6QqeVCTbw2nnS7nBxnWd9oZXbPUpqEawH5D
# qXQaWFgR9A4KWVK/IvXVDMj1PlPCES1P3JonNbdhkkkz49rJuKOm5b7e/BH8loqA
# mXOXRc22yxWVTMWrEp4pslmv8eT7VoY8X/jdKYTPVEXsfmLbVFcqzMuB8vFGfUyW
# sWROS8wgq7lQYfWcYqh7NymoATX+wWYK3zWG7aRciPGUAzznXdf+aHtIWnQLNa5H
# FmSXkiak3fSuprWYZiHhuYjE16hroApcBHpm+8S/kNqhm9WjQX+2BxnYv+Jejy6l
# qTi8fLBLS069WXVw/ptf5IV+FtYl34GvVoeg31UoUmVVZe1SDUJkm9dDXc8l/qBD
# YiAIT2CCsPTyt9XA9JVuHxdP63n7ChvWAO/47QRuCDsUlFJoWwyBwl7jeYpaRVMt
# Qt0iuJMGGjgEaJX1Q/2j8sXURvTceLHDD9ipWt092ZDWMQciDRmhHNFOX1dnjBvk
# /k1UMcg997j5oYznAnSpJvlg/4BP3aVE0h/YH2KgsKbU4NXZHAjJXj2Slqo1C115
# CG6qBZaFkM8W6vPZCm5qnSezOjCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkA
# AAAAABUwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX
# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg
# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl
# IEF1dGhvcml0eSAyMDEwMB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVow
# fDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl
# ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMd
# TWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUA
# A4ICDwAwggIKAoICAQDk4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX
# 9gF/bErg4r25PhdgM/9cT8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1q
# UoNEt6aORmsHFPPFdvWGUNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8d
# q6z2Nr41JmTamDu6GnszrYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byN
# pOORj7I5LFGc6XBpDco2LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2k
# rnopN6zL64NF50ZuyjLVwIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4d
# Pf0gz3N9QZpGdc3EXzTdEonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgS
# Uei/BQOj0XOmTTd0lBw0gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8
# QmguEOqEUUbi0b1qGFphAXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6Cm
# gyFdXzB0kZSU2LlQ+QuJYfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzF
# ER1y7435UsSFF5PAPBXbGjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQID
# AQABo4IB3TCCAdkwEgYJKwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQU
# KqdS/mTEmr6CkTxGNSnPEP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1
# GelyMFwGA1UdIARVMFMwUQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0
# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0
# bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMA
# QTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbL
# j+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1p
# Y3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0w
# Ni0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3
# Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIz
# LmNydDANBgkqhkiG9w0BAQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwU
# tj5OR2R4sQaTlz0xM7U518JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN
# 3Zi6th542DYunKmCVgADsAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU
# 5HhTdSRXud2f8449xvNo32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5
# KYnDvBewVIVCs/wMnosZiefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGy
# qVvfSaN0DLzskYDSPeZKPmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB6
# 2FD+CljdQDzHVG2dY3RILLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltE
# AY5aGZFrDZ+kKNxnGSgkujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFp
# AUR+fKFhbHP+CrvsQWY9af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcd
# FYmNcP7ntdAoGokLjzbaukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRb
# atGePu1+oDEzfbzL6Xu/OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQd
# VTNYs6FwZvKhggNQMIICOAIBATCB+aGB0aSBzjCByzELMAkGA1UEBhMCVVMxEzAR
# BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1p
# Y3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2Eg
# T3BlcmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjMzMDMtMDVFMC1E
# OTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEw
# BwYFKw4DAhoDFQALbEgZZnyYHXJ1DGb5fGjplXptuaCBgzCBgKR+MHwxCzAJBgNV
# BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w
# HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29m
# dCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA7otLozAiGA8y
# MDI2MTAyNzE2MTExNVoYDzIwMjYxMDI4MTYxMTE1WjB3MD0GCisGAQQBhFkKBAEx
# LzAtMAoCBQDui0ujAgEAMAoCAQACAgm9AgH/MAcCAQACAhGbMAoCBQDujJ0jAgEA
# MDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAI
# AgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBABaQGroQ/qitYtvpjAOfei6OMjn5
# t0UdjCxL+IZwpdKDgVXnl+a+0qn8L+WUW/e3UVeVOCoxl7xxekPg07ks7H5L4cmL
# RWT6/qy6CBWRZ0b39rnW0K5/nS0gQbGRSdJGw+0ZVF9X9ePKNUO4kiYxmhRxZPY8
# BGOuPjZMRS6BzG+Af2utvnkTGEEipieocG0SJrkEPSNSVF+4g7xh0HcgllwQQKUa
# +d/S6hDs0W/sKglxK56wbNkjiljL9ZFyIMdvKuvTKZPqUjmrouoC8WsLhU0MbIfZ
# +3giy6p0pwkEycye8dgAJ1QN3gB4VbewOOl57jEXaz6MTNWdIMr2DbuxrsAxggQN
# MIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQ
# MA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u
# MSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAiEz
# wDX70g8hpAABAAACITANBglghkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0G
# CyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCAdnlE3Y/fNxObUZqbEK6ucuX2p
# DryX33Mg9DewLDWOITCB+gYLKoZIhvcNAQkQAi8xgeowgecwgeQwgb0EIADvIQef
# FVUa4BJy8IZywMAvmGSKdUVqEmy9A++PCj1EMIGYMIGApH4wfDELMAkGA1UEBhMC
# VVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNV
# BAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRp
# bWUtU3RhbXAgUENBIDIwMTACEzMAAAIhM8A1+9IPIaQAAQAAAiEwIgQgyGntfU0/
# YPBG+teNRAXBA8+ohdKFAlJVeO+sCsM5t5AwDQYJKoZIhvcNAQELBQAEggIAwxqD
# mumgnzkBMfOgWWKGx4H5Htn5lqgbJ/+ZOpUmZ+XSU3oWD2fxQ/M6kLcQXpnq0ajF
# Z6nwR5JDzf0OD6ITIwLFlF0gTlYeUcHPQ9Cah2b9wrcZCsdpzoHe1sE8rjPW8pFx
# QCZRHJx4aakKfjBfE4pUNsdzroZNJCijVWOZnJX/i9DVL31p8F9hSzZa4eNccUrS
# DWT31T4ykA2o8e/yqU9erg8zfabIMORhsW/6vieTC2al6U49IAaxR4bKHKYAWejs
# yF2NG7lc5/FywAsNaDr+BIUyA8B218kkihl8jR0Uq9J+haGACET7gCu3t0Vl9ur4
# eyYoZPel5Tau74r2ftG02qhUV9SGtAZ0Aw5ysAlc1T3+3M1hNtqg7N/jsFFkQ/84
# +tuvjNySgCOs4QVASanHXYcn2QOsp/ebw0JSiLEb62t54SpV6KH7Dua4qa7+F1Te
# txD1n8Xb6ZnW58dlgeHgICgkNWtk3OrPGN6eezyu0Way5R3+4NsDOhXJOLnwIxF5
# RIOFwsdgcdvA406GNP31MC0GCGghqq15+cnBvHOx+UeU2pSPzd8rRmSqCqdV7p/b
# GgbGqQ5B5LAnRorfisiciwMAiJu7h39Hw3Wyv/qebFhOoW1zJ66Sletjow+p21Ll
# 8c51ZOGuY1mvUubR65hRM2we7L0oes8tQjQXcW4=
# SIG # End signature block