AzSK.ADO

1.7.0

Framework/Abstracts/CommandBase.ps1

                                <#

.Description

    Base class for all command classes.

    Provides functionality to fire events/operations at command levels like command started,

    command completed and perform operation like generate run-identifier, invoke auto module update,

    open log folder at the end of commmand execution etc

#>

using namespace System.Management.Automation

Set-StrictMode -Version Latest

class CommandBase: AzSKRoot {

    #Region: Properties

    [string[]] $FilterTags = @();

    [bool] $DoNotOpenOutputFolder = $false;

    [bool] $Force = $false

    #EndRegion

    #Region: Constructor

    CommandBase([string] $organizationName, [InvocationInfo] $invocationContext):

    Base($organizationName) {

        [Helpers]::AbstractClass($this, [CommandBase]);

        if (-not $invocationContext) {

            throw [System.ArgumentException] ("The argument 'invocationContext' is null. Pass the `$PSCmdlet.MyInvocation from PowerShell command.");

        }

        $this.InvocationContext = $invocationContext;

        #Validate if privacy is accepted by user

        #Ensure that AzSKSettings statics are setup at this point (before calling Privacy notice)

        [AzSKSettings]::InitContexts($this.OrganizationContext, $this.InvocationContext);

        [PrivacyNotice]::ValidatePrivacyAcceptance()

        #Initialize common parameter sets

        if($null -ne $this.InvocationContext.BoundParameters["DoNotOpenOutputFolder"])

        {

            $this.DoNotOpenOutputFolder = $this.InvocationContext.BoundParameters["DoNotOpenOutputFolder"];

        }

        if($null -ne $this.InvocationContext.BoundParameters["Force"])

        {

            $this.Force = $this.InvocationContext.BoundParameters["Force"];

        }

        #Check multiple AzSK* module should not be loaded in same session

        $this.CheckMultipleAzSKModuleLoaded();

    }

    #EndRegion

    #Region: Command level listerner events

    [void] CommandStarted() {

        $this.PublishAzSKRootEvent([AzSKRootEvent]::CommandStarted, $this.CheckModuleVersion());

    }

    [void] PostCommandStartedAction()

    {

    }

    [void] CommandError([System.Management.Automation.ErrorRecord] $exception) {

        [AzSKRootEventArgument] $arguments = $this.CreateRootEventArgumentObject();

        $arguments.ExceptionMessage = $exception;

        $this.PublishEvent([AzSKRootEvent]::CommandError, $arguments);

    }

    [void] CommandCompleted([MessageData[]] $messages) {

        $this.PublishAzSKRootEvent([AzSKRootEvent]::CommandCompleted, $messages);

    }

    [void] CommandProgress([int] $totalItems, [int] $currentItem) {

        $this.CommandProgress($totalItems, $currentItem, 1);

    }

    [void] CommandProgress([int] $totalItems, [int] $currentItem, [int] $granularity) {

        if ($totalItems -gt 0) {

            # $granularity indicates the number of items after which percentage progress will be printed

            # Set the max granularity to total items

            if ($granularity -gt $totalItems) {

                $granularity = $totalItems;

            }

            # Conditions for posting progress: 0%, 100% and based on granularity

            if ($currentItem -eq 0 -or $currentItem -eq $totalItems -or (($currentItem % $granularity) -eq 0)) {

                $this.PublishCustomMessage("$([int](($currentItem / $totalItems) * 100))% Completed");

            }

        }

    }

    # Dummy function declaration to define the function signature

    [void] PostCommandCompletedAction([SVTEventContext[]] $arguments)

    { }

    [void] PostCommandCompletedAction([MessageData[]] $messages)

    { }

    #EndRegion

    #Region: Helper function to invoke function based on method name.

    # This is method called from command(GRS/GSS etc) files and resposinble for printing command start/end messages using listeners

    [string] InvokeFunction([PSMethod] $methodToCall) {

        return $this.InvokeFunction($methodToCall, @());

    }

    [string] InvokeFunction([PSMethod] $methodToCall, [System.Object[]] $arguments) {

        if (-not $methodToCall) {

            throw [System.ArgumentException] ("The argument 'methodToCall' is null. Pass the reference of method to call. e.g.: [YourClass]::new().YourMethod");

        }

        #if attestation then rescan the controls

        if ($null -eq $arguments)

        {

            $folderPath = $this.GetOutputFolderPath();

            $methodResult = $methodToCall.Invoke(@());

            #$this.CommandCompleted($methodResult); this will update CSV but issue is there will be duplicate entries

            if(-not $this.DoNotOpenOutputFolder) {

                if (Test-Path $folderPath) {

                    Invoke-Item -Path $folderPath;

                }

            }

        }

        else {

        # Publish runidentifier(YYYYMMDD_HHMMSS) used by all listener as identifier for scan,creating log folder

        $this.PublishRunIdentifier($this.InvocationContext);

        # <TODO Framework: Move command time calculation methods to AIOrgTelmetry Listener>

        [AIOrgTelemetryHelper]::TrackCommandExecution("Command Started",

            @{"RunIdentifier" = $this.RunIdentifier}, @{}, $this.InvocationContext);

        $sw = [System.Diagnostics.Stopwatch]::StartNew();

        # Publish command init events

        $this.CommandStarted();

        $this.PostCommandStartedAction();

        # Invoke method with arguments

        $methodResult = @();

        try {

           $methodResult = $methodToCall.Invoke($arguments);

        }

        catch {

            # Unwrapping the first layer of exception which is added by Invoke function

            [AIOrgTelemetryHelper]::TrackCommandExecution("Command Errored",

                @{"RunIdentifier" = $this.RunIdentifier; "ErrorRecord"= $_.Exception.InnerException.ErrorRecord},

                @{"TimeTakenInMs" = $sw.ElapsedMilliseconds; "SuccessCount" = 0},

                $this.InvocationContext);

            $this.CommandError($_.Exception.InnerException.ErrorRecord);

        }

        $folderPath = $this.GetOutputFolderPath();

        #the next two bug log classes have been called here as we need all the control results at one place for

        #dumping them in json file and auto closing them(to minimize api calls and auto close them in batches)

        #if bug logging is enabled and path is valid, create the JSON file for bugs

        if($this.InvocationContext.BoundParameters["AutoBugLog"] -and [BugLogPathManager]::GetIsPathValid()){

            if (([PartialScanManager]::ControlResultsWithBugSummary| Measure-Object).Count -gt 0)

            {

                $methodResult = [PartialScanManager]::ControlResultsWithBugSummary

            }

            [PublishToJSON]::new($methodResult,$folderPath)

        }

        #auto close passed bugs

            if ($this.InvocationContext.BoundParameters["AutoBugLog"] -or $this.InvocationContext.BoundParameters["AutoCloseBugs"]) {

            if (([PartialScanManager]::ControlResultsWithBugSummary| Measure-Object).Count -gt 0)

            {

                $methodResult = [PartialScanManager]::ControlResultsWithBugSummary

            }

            #call the AutoCloseBugManager

            $AutoClose=[AutoCloseBugManager]::new($this.OrganizationContext.OrganizationName);

            $AutoClose.AutoCloseBug($methodResult)

        }

        # Publish command complete events

        $this.CommandCompleted($methodResult);

        [AIOrgTelemetryHelper]::TrackCommandExecution("Command Completed",

            @{"RunIdentifier" = $this.RunIdentifier},

            @{"TimeTakenInMs" = $sw.ElapsedMilliseconds; "SuccessCount" = 1},

            $this.InvocationContext)

        $this.PostCommandCompletedAction($methodResult);

        # <TODO Framework: Move PDF generation method based on listener>

        #Generate PDF report

        $GeneratePDFReport = $this.InvocationContext.BoundParameters["GeneratePDF"];

        try {

            if (-not [string]::IsNullOrEmpty($folderpath)) {

                switch ($GeneratePDFReport) {

                    None {

                        # Do nothing

                    }

                    Landscape {

                        [AzSKPDFExtension]::GeneratePDF($folderpath, $this.OrganizationContext, $this.InvocationContext, $true);

                    }

                    Portrait {

                        [AzSKPDFExtension]::GeneratePDF($folderpath, $this.OrganizationContext, $this.InvocationContext, $false);

                    }

                }

            }

        }

        catch {

            # Unwrapping the first layer of exception which is added by Invoke function

            $this.CommandError($_);

        }

        #

        $AttestControlParamFound = $this.InvocationContext.BoundParameters["AttestControls"];

        if($null -eq $AttestControlParamFound)

        {

            #If controls are attested then open folder when rescan of attested controls is complete

            $controlAttested = $false

            if( ([FeatureFlightingManager]::GetFeatureStatus("EnableScanAfterAttestation","*"))) {

                #Global variable "AttestationValue" is set to true when one or more controls are attested in current scan

                #Ignore if variable AttestationValue is not found

                if (Get-Variable AttestationValue -Scope Global -ErrorAction Ignore){

                    if ( $Global:AttestationValue){

                        $controlAttested = $true

                    }

                }

            }

            if ( !$controlAttested){

            if((-not $this.DoNotOpenOutputFolder) -and (-not [string]::IsNullOrEmpty($folderPath)))

            {

                try

                {

                    Invoke-Item -Path $folderPath;

                }

                catch

                {

                    #ignore if any exception occurs

                }

            }

        }

    }

    }

        return $folderPath;

    }

    #EndRegion

    # Function to get output log folder from WriteFolder listener

    [string] GetOutputFolderPath() {

        return [WriteFolderPath]::GetInstance().FolderPath;

    }

    # <TODO Framework: Move to module helper class>

    # Function to validate module version based on Org policy and showcase warning for update or block commands if version is less than last two minor version

    [void] CheckModuleVersion() {

        $serverVersion = [System.Version] ([ConfigurationManager]::GetAzSKConfigData().GetLatestAzSKVersion($this.GetModuleName()));

        $currentModuleVersion = [System.Version] $this.GetCurrentModuleVersion()

        if($currentModuleVersion -ne "0.0.0.0" -and $currentModuleVersion -ne "1.0.0.0" -and $serverVersion -gt $currentModuleVersion) {

            $this.RunningLatestPSModule = $false;

            $this.InvokeAutoUpdate()

            $this.PublishCustomMessage(([Constants]::VersionCheckMessage -f $serverVersion), [MessageType]::Warning);

            $this.PublishCustomMessage(([ConfigurationManager]::GetAzSKConfigData().InstallationCommand + "`r`n"), [MessageType]::Update);

            $this.PublishCustomMessage([Constants]::VersionWarningMessage, [MessageType]::Warning);

            $serverVersions = @()

            [ConfigurationManager]::GetAzSKConfigData().GetAzSKVersionList($this.GetModuleName()) | ForEach-Object {

                #Take major and minor version and ignore build version for comparision

               $serverVersions+= [System.Version] ("$($_.Major)" +"." + "$($_.Minor)")

             }

            $serverVersions =  $serverVersions | Select-Object -Unique

            $latestVersionList = $serverVersions | Where-Object {$_ -gt $currentModuleVersion}

            if(($latestVersionList | Measure-Object).Count -gt [ConfigurationManager]::GetAzSKConfigData().BackwardCompatibleVersionCount)

            {

                throw ([SuppressedException]::new(("Your version of $([Constants]::AzSKModuleName) is too old. Please update now!"),[SuppressedExceptionType]::Generic))

            }

        }

        $psGalleryVersion = [System.Version] ([ConfigurationManager]::GetAzSKConfigData().GetAzSKLatestPSGalleryVersion($this.GetModuleName()));

        if($psGalleryVersion -ne $serverVersion)

        {

            $serverVersions = @()

            [ConfigurationManager]::GetAzSKConfigData().GetAzSKVersionList($this.GetModuleName()) | ForEach-Object {

                #Take major and minor version and ignore build version for comparision

               $serverVersions+= [System.Version] ("$($_.Major)" +"." + "$($_.Minor)")

             }

            $serverVersions =  $serverVersions | Select-Object -Unique

            $latestVersionAvailableFromGallery = $serverVersions | Where-Object {$_ -gt $serverVersion}

            if(($latestVersionAvailableFromGallery | Measure-Object).Count -gt [ConfigurationManager]::GetAzSKConfigData().BackwardCompatibleVersionCount)

            {

                $this.PublishCustomMessage("Your Org AzSK.ADO version [$serverVersion] is too old. It must be updated to latest available version [$psGalleryVersion].",[MessageType]::Error);

            }

        }

        #Validate if detailed scan results is required in control evaluation

        $this.CheckDetailedScanStatus();

    }

    # <TODO Framework: Move to module helper class>

    # Funtion to execute module auto update flow based on switch

    [void] InvokeAutoUpdate()

    {

        $AutoUpdateSwitch= [ConfigurationManager]::GetAzSKSettings().AutoUpdateSwitch;

        $AutoUpdateCommand = [ConfigurationManager]::GetAzSKSettings().AutoUpdateCommand;

        if($AutoUpdateSwitch -ne [AutoUpdate]::On)

        {

            if($AutoUpdateSwitch -eq [AutoUpdate]::NotSet)

            {

                $AutoUpdateMsg = [Constants]::AutoUpdateMessage

                Write-Host $AutoUpdateMsg -ForegroundColor Yellow

            }

            return;

        }

        #Step 1: Get the list of active running powershell prcesses including the current running PS Session

        $PSProcesses = Get-Process | Where-Object { ($_.Name -eq 'powershell' -or $_.Name -eq 'powershell_ise' -or $_.Name -eq 'powershelltoolsprocesshost')}

        $userChoice = ""

        if(($PSProcesses | Measure-Object).Count -ge 1)

        {

            Write-Host([Constants]::ModuleAutoUpdateAvailableMsg) -ForegroundColor Cyan;

        }

        #User choice that captures the decision to close the active PS Sessions

        $secondUserChoice =""

        $InvalidOption = $true;

        while($InvalidOption)

        {

            if([string]::IsNullOrWhiteSpace($userChoice) -or ($userChoice.Trim() -ne 'y' -and $userChoice.Trim() -ne 'n'))

            {

                $userChoice = Read-Host "Continue (Y/N)"

                if([string]::IsNullOrWhiteSpace($userChoice) -or ($userChoice.Trim() -ne 'y' -and $userChoice.Trim() -ne 'n'))

                {

                    Write-Host "Enter the valid option." -ForegroundColor Yellow

                }

                continue;

            }

            elseif($userChoice.Trim() -eq 'n')

            {

                $InvalidOption = $false;

            }

            elseif($userChoice.Trim() -eq 'y')

            {

                #Get the number of PS active sessions

                $PSProcesses = Get-Process | Where-Object { ($_.Name -eq 'powershell' -or $_.Name -eq 'powershell_ise' -or $_.Name -eq 'powershelltoolsprocesshost') -and $_.Id -ne $PID}

                if(($PSProcesses | Measure-Object).Count -gt 0)

                {

                    Write-Host "`nThe following other PS sessions are still active. Please save your work and close them. You can also use Task Manager to close these sessions." -ForegroundColor Yellow

                    Write-Host ($PSProcesses | Select-Object Id, ProcessName, Path | Out-String)

                    $secondUserChoice = Read-Host "Continue (Y/N)"

                }

                elseif(($PSProcesses | Measure-Object).Count -eq 0)

                {

                    Write-Host "`nThe current PS session will be closed now. Have you saved your work?" -ForegroundColor Yellow

                    $secondUserChoice = Read-Host "Continue (Y/N)"

                }

                if(-not [string]::IsNullOrWhiteSpace($secondUserChoice) -and `

                (($PSProcesses | Measure-Object).Count -eq 0 -and $secondUserChoice.Trim() -eq 'y') -or `

                $secondUserChoice.Trim() -eq 'n')

                {

                    $InvalidOption = $false;

                }

            }

        }

        #Check if the first user want to continue with auto-update using userChoice field and then check if user still wants to continue with auto-update after finding the active PS sessions.

        #In either case it is no it would exit the auto-update process

        if($userChoice.Trim() -eq "n" -or $secondUserChoice.Trim() -eq 'n')

        {

            Write-Host "Exiting auto-update workflow. To disable auto-update permanently, run the command below:" -ForegroundColor Yellow

            Write-Host "Set-AzSKADOPolicySettings -AutoUpdate Off`n" -ForegroundColor Green

            return

        }

        $AzSKTemp = Join-Path $([Constants]::AzSKAppFolderPath) "Temp";

        try

        {

            $fileName = "au_" + $(get-date).ToUniversalTime().ToString("yyyyMMdd_HHmmss") + ".ps1";

            $autoUpdateContent = [ConfigurationHelper]::LoadOfflineConfigFile("ModuleAutoUpdate.ps1");

            if(-not (Test-Path -Path $AzSKTemp))

            {

                New-Item -Path $AzSKTemp -ItemType Directory -Force

            }

            Remove-Item -Path (Join-Path $AzSKTemp "au_*") -Force -Recurse -ErrorAction SilentlyContinue

            $autoUpdateContent = $autoUpdateContent.Replace("##installurl##",$AutoUpdateCommand);

            $autoUpdateContent | Out-File (Join-Path $AzSKTemp $fileName) -Force

            Start-Process -WindowStyle Normal -FilePath "powershell.exe" -ArgumentList (Join-Path $AzSKTemp $fileName)

        }

        catch

        {

            $this.CommandError($_.Exception.InnerException.ErrorRecord);

        }

    }

    [void] CheckMultipleAzSKModuleLoaded(){

        $loadedAzSKModules= Get-Module | Where-Object { $_.Name -like "AzSK*"};

        if($env:AzSKSkipMultiModuleCheck -ne $true -and $null -ne $loadedAzSKModules -and ($loadedAzSKModules| Measure-Object).Count -gt 1){

            throw [SuppressedException]::new("ERROR: Multiple AzSK modules loaded in same session, this will lead to issues when running AzSK cmdlets.",[SuppressedExceptionType]::Generic)

        }

    }

    [void] CheckDetailedScanStatus(){

        if(-not([string]::IsNullOrEmpty($this.InvocationContext.BoundParameters['ControlIds'])) -or -not([string]::IsNullOrEmpty($this.InvocationContext.BoundParameters['DetailedScan'])) -or  -not( [string]::IsNullOrEmpty($this.InvocationContext.BoundParameters['ControlsToAttest']))  )

        {

            [AzSKRoot]::IsDetailedScanRequired = $true

        }

        else {

            [AzSKRoot]::IsDetailedScanRequired = $false

        }

    }

}

# SIG # Begin signature block

# MIIjkwYJKoZIhvcNAQcCoIIjhDCCI4ACAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBMwgJkmRj1pT4A

# yemRxZJ1pkoe8lFOFVto7pr8BOpMSqCCDYEwggX/MIID56ADAgECAhMzAAAB32vw

# LpKnSrTQAAAAAAHfMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p

# bmcgUENBIDIwMTEwHhcNMjAxMjE1MjEzMTQ1WhcNMjExMjAyMjEzMTQ1WjB0MQsw

# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u

# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB

# AQC2uxlZEACjqfHkuFyoCwfL25ofI9DZWKt4wEj3JBQ48GPt1UsDv834CcoUUPMn

# s/6CtPoaQ4Thy/kbOOg/zJAnrJeiMQqRe2Lsdb/NSI2gXXX9lad1/yPUDOXo4GNw

# PjXq1JZi+HZV91bUr6ZjzePj1g+bepsqd/HC1XScj0fT3aAxLRykJSzExEBmU9eS

# yuOwUuq+CriudQtWGMdJU650v/KmzfM46Y6lo/MCnnpvz3zEL7PMdUdwqj/nYhGG

# 3UVILxX7tAdMbz7LN+6WOIpT1A41rwaoOVnv+8Ua94HwhjZmu1S73yeV7RZZNxoh

# EegJi9YYssXa7UZUUkCCA+KnAgMBAAGjggF+MIIBejAfBgNVHSUEGDAWBgorBgEE

# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQUOPbML8IdkNGtCfMmVPtvI6VZ8+Mw

# UAYDVR0RBEkwR6RFMEMxKTAnBgNVBAsTIE1pY3Jvc29mdCBPcGVyYXRpb25zIFB1

# ZXJ0byBSaWNvMRYwFAYDVQQFEw0yMzAwMTIrNDYzMDA5MB8GA1UdIwQYMBaAFEhu

# ZOVQBdOCqhc3NyK1bajKdQKVMFQGA1UdHwRNMEswSaBHoEWGQ2h0dHA6Ly93d3cu

# bWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY0NvZFNpZ1BDQTIwMTFfMjAxMS0w

# Ny0wOC5jcmwwYQYIKwYBBQUHAQEEVTBTMFEGCCsGAQUFBzAChkVodHRwOi8vd3d3

# Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01pY0NvZFNpZ1BDQTIwMTFfMjAx

# MS0wNy0wOC5jcnQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQsFAAOCAgEAnnqH

# tDyYUFaVAkvAK0eqq6nhoL95SZQu3RnpZ7tdQ89QR3++7A+4hrr7V4xxmkB5BObS

# 0YK+MALE02atjwWgPdpYQ68WdLGroJZHkbZdgERG+7tETFl3aKF4KpoSaGOskZXp

# TPnCaMo2PXoAMVMGpsQEQswimZq3IQ3nRQfBlJ0PoMMcN/+Pks8ZTL1BoPYsJpok

# t6cql59q6CypZYIwgyJ892HpttybHKg1ZtQLUlSXccRMlugPgEcNZJagPEgPYni4

# b11snjRAgf0dyQ0zI9aLXqTxWUU5pCIFiPT0b2wsxzRqCtyGqpkGM8P9GazO8eao

# mVItCYBcJSByBx/pS0cSYwBBHAZxJODUqxSXoSGDvmTfqUJXntnWkL4okok1FiCD

# Z4jpyXOQunb6egIXvkgQ7jb2uO26Ow0m8RwleDvhOMrnHsupiOPbozKroSa6paFt

# VSh89abUSooR8QdZciemmoFhcWkEwFg4spzvYNP4nIs193261WyTaRMZoceGun7G

# CT2Rl653uUj+F+g94c63AhzSq4khdL4HlFIP2ePv29smfUnHtGq6yYFDLnT0q/Y+

# Di3jwloF8EWkkHRtSuXlFUbTmwr/lDDgbpZiKhLS7CBTDj32I0L5i532+uHczw82

# oZDmYmYmIUSMbZOgS65h797rj5JJ6OkeEUJoAVwwggd6MIIFYqADAgECAgphDpDS

# AAAAAAADMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMK

# V2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0

# IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0

# ZSBBdXRob3JpdHkgMjAxMTAeFw0xMTA3MDgyMDU5MDlaFw0yNjA3MDgyMTA5MDla

# MH4xCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS

# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMT

# H01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMTEwggIiMA0GCSqGSIb3DQEB

# AQUAA4ICDwAwggIKAoICAQCr8PpyEBwurdhuqoIQTTS68rZYIZ9CGypr6VpQqrgG

# OBoESbp/wwwe3TdrxhLYC/A4wpkGsMg51QEUMULTiQ15ZId+lGAkbK+eSZzpaF7S

# 35tTsgosw6/ZqSuuegmv15ZZymAaBelmdugyUiYSL+erCFDPs0S3XdjELgN1q2jz

# y23zOlyhFvRGuuA4ZKxuZDV4pqBjDy3TQJP4494HDdVceaVJKecNvqATd76UPe/7

# 4ytaEB9NViiienLgEjq3SV7Y7e1DkYPZe7J7hhvZPrGMXeiJT4Qa8qEvWeSQOy2u

# M1jFtz7+MtOzAz2xsq+SOH7SnYAs9U5WkSE1JcM5bmR/U7qcD60ZI4TL9LoDho33

# X/DQUr+MlIe8wCF0JV8YKLbMJyg4JZg5SjbPfLGSrhwjp6lm7GEfauEoSZ1fiOIl

# XdMhSz5SxLVXPyQD8NF6Wy/VI+NwXQ9RRnez+ADhvKwCgl/bwBWzvRvUVUvnOaEP

# 6SNJvBi4RHxF5MHDcnrgcuck379GmcXvwhxX24ON7E1JMKerjt/sW5+v/N2wZuLB

# l4F77dbtS+dJKacTKKanfWeA5opieF+yL4TXV5xcv3coKPHtbcMojyyPQDdPweGF

# RInECUzF1KVDL3SV9274eCBYLBNdYJWaPk8zhNqwiBfenk70lrC8RqBsmNLg1oiM

# CwIDAQABo4IB7TCCAekwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFEhuZOVQ

# BdOCqhc3NyK1bajKdQKVMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMAsGA1Ud

# DwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFHItOgIxkEO5FAVO

# 4eqnxzHRI4k0MFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9jcmwubWljcm9zb2Z0

# LmNvbS9wa2kvY3JsL3Byb2R1Y3RzL01pY1Jvb0NlckF1dDIwMTFfMjAxMV8wM18y

# Mi5jcmwwXgYIKwYBBQUHAQEEUjBQME4GCCsGAQUFBzAChkJodHRwOi8vd3d3Lm1p

# Y3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jvb0NlckF1dDIwMTFfMjAxMV8wM18y

# Mi5jcnQwgZ8GA1UdIASBlzCBlDCBkQYJKwYBBAGCNy4DMIGDMD8GCCsGAQUFBwIB

# FjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2RvY3MvcHJpbWFyeWNw

# cy5odG0wQAYIKwYBBQUHAgIwNB4yIB0ATABlAGcAYQBsAF8AcABvAGwAaQBjAHkA

# XwBzAHQAYQB0AGUAbQBlAG4AdAAuIB0wDQYJKoZIhvcNAQELBQADggIBAGfyhqWY

# 4FR5Gi7T2HRnIpsLlhHhY5KZQpZ90nkMkMFlXy4sPvjDctFtg/6+P+gKyju/R6mj

# 82nbY78iNaWXXWWEkH2LRlBV2AySfNIaSxzzPEKLUtCw/WvjPgcuKZvmPRul1LUd

# d5Q54ulkyUQ9eHoj8xN9ppB0g430yyYCRirCihC7pKkFDJvtaPpoLpWgKj8qa1hJ

# Yx8JaW5amJbkg/TAj/NGK978O9C9Ne9uJa7lryft0N3zDq+ZKJeYTQ49C/IIidYf

# wzIY4vDFLc5bnrRJOQrGCsLGra7lstnbFYhRRVg4MnEnGn+x9Cf43iw6IGmYslmJ

# aG5vp7d0w0AFBqYBKig+gj8TTWYLwLNN9eGPfxxvFX1Fp3blQCplo8NdUmKGwx1j

# NpeG39rz+PIWoZon4c2ll9DuXWNB41sHnIc+BncG0QaxdR8UvmFhtfDcxhsEvt9B

# xw4o7t5lL+yX9qFcltgA1qFGvVnzl6UJS0gQmYAf0AApxbGbpT9Fdx41xtKiop96

# eiL6SJUfq/tHI4D1nvi/a7dLl+LrdXga7Oo3mXkYS//WsyNodeav+vyL6wuA6mk7

# r/ww7QRMjt/fdW1jkT3RnVZOT7+AVyKheBEyIXrvQQqxP/uozKRdwaGIm1dxVk5I

# RcBCyZt2WwqASGv9eZ/BvW1taslScxMNelDNMYIVaDCCFWQCAQEwgZUwfjELMAkG

# A1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQx

# HjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9z

# b2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAxMQITMwAAAd9r8C6Sp0q00AAAAAAB3zAN

# BglghkgBZQMEAgEFAKCBsDAZBgkqhkiG9w0BCQMxDAYKKwYBBAGCNwIBBDAcBgor

# BgEEAYI3AgELMQ4wDAYKKwYBBAGCNwIBFTAvBgkqhkiG9w0BCQQxIgQgpiU/qNWN

# BoLTHeoF3BsQcfZ8L17uAHj37vtKNuHtRUwwRAYKKwYBBAGCNwIBDDE2MDSgFIAS

# AE0AaQBjAHIAbwBzAG8AZgB0oRyAGmh0dHBzOi8vd3d3Lm1pY3Jvc29mdC5jb20g

# MA0GCSqGSIb3DQEBAQUABIIBAB+L7leDDSCyfa0bK8t7UoB6ZBoERPJDiT3z4UYT

# oACDTd7nROLfexNy2FYgrMO+0qP/9nJEUf3wCpt0RGXYootBmkmS7YoP80vlIJM2

# LKnA0GuBr44Yaw1Sl3/db6Xu0amrFYIlm8yqdPOs3E03A+QUAWZ99u4ZVlpK4Cfs

# dooXHvIleHRgB16HSKh8VTnwEmXDvK0oY4jx6UqAGSaGEUSYuV+rraMsLRE9ZUb0

# j2yhS/9KoT93Zs5PnBFqdSCLkGCYRw65zpHZE6aKGLO8uDLDmd8JYqz0QMxARX+E

# jyw00SPyhwdm6IfU/c1dDIqDA9qp3+MrnIV5Jl8BpHXXoMmhghLwMIIS7AYKKwYB

# BAGCNwMDATGCEtwwghLYBgkqhkiG9w0BBwKgghLJMIISxQIBAzEPMA0GCWCGSAFl

# AwQCAQUAMIIBVAYLKoZIhvcNAQkQAQSgggFDBIIBPzCCATsCAQEGCisGAQQBhFkK

# AwEwMTANBglghkgBZQMEAgEFAAQgpVZFLL+8mM+gqYf83NsEF81NoGHaPyGcj+0q

# GihrI2cCBmCJ+dzUexgSMjAyMTA1MTcwNjM2NTguMzlaMASAAgH0oIHUpIHRMIHO

# MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVk

# bW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSkwJwYDVQQLEyBN

# aWNyb3NvZnQgT3BlcmF0aW9ucyBQdWVydG8gUmljbzEmMCQGA1UECxMdVGhhbGVz

# IFRTUyBFU046NjBCQy1FMzgzLTI2MzUxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1l

# LVN0YW1wIFNlcnZpY2Wggg5EMIIE9TCCA92gAwIBAgITMwAAAVosuW5ENMtvKAAA

# AAABWjANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz

# aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv

# cnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAx

# MDAeFw0yMTAxMTQxOTAyMTZaFw0yMjA0MTExOTAyMTZaMIHOMQswCQYDVQQGEwJV

# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE

# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSkwJwYDVQQLEyBNaWNyb3NvZnQgT3Bl

# cmF0aW9ucyBQdWVydG8gUmljbzEmMCQGA1UECxMdVGhhbGVzIFRTUyBFU046NjBC

# Qy1FMzgzLTI2MzUxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZp

# Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwvVwcVw2tJwiu9B3/

# hooejcUZdZgIcxSXaJPG7N8aSfO0zNvKxHh5GQGhPim/RovVL06UN86xFslkqSEJ

# Msb/1n9HCIQNZiTqsrttEzd5femb4M2K8zv60JT72ylu/aADuPmBbHpEAra8zPYU

# KEuQWBsD4fUM+ugbksR/UMHssDQULI5FaIpKQcZEvhF0iM6W2tmn750TF+yy3tnq

# 8nPj5T15k0jnx9VjcpHNubvc6OmV9IAHeI1KQc3TC5xwrROtmy9jztNHJgCbIrao

# GqL/t5Ra33dLDwAsExjvYsppSZW9rGr8I6kp4+UcxuEcRuq1Nou3rW50E6M0e9zh

# zBjlAgMBAAGjggEbMIIBFzAdBgNVHQ4EFgQUZHMlP/Ucj5J+0AaF2Tk0PMDeMWcw

# HwYDVR0jBBgwFoAU1WM6XIoxkPNDe3xGG8UzaFqFbVUwVgYDVR0fBE8wTTBLoEmg

# R4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWlj

# VGltU3RhUENBXzIwMTAtMDctMDEuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggrBgEF

# BQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNUaW1T

# dGFQQ0FfMjAxMC0wNy0wMS5jcnQwDAYDVR0TAQH/BAIwADATBgNVHSUEDDAKBggr

# BgEFBQcDCDANBgkqhkiG9w0BAQsFAAOCAQEAAABt7HxYG1IsOIFjFfFTsZWyBvwi

# DEonIg7SGZzy/ODjDeJSXleS3ia/h2AXKMea7lmZuPStvYgZib+lYlzLT/NaWGdR

# BTO99OmPsyyIf7Uue+D3lrB7zw9EDsUOBzjNhjT7xQHVL6PM+aYFf+RPpT7utblA

# iAUwxEohzvje62oKm9zBEz6kSjyzQCXCjw3GpSs55hj5Z82Oj9c6Kf+2vdFXAR0S

# ikP4U75//AvGOm/jL5OZGCYeuyjW1VXLrgVshUjGUxxnpx57h1YPbLx+/pZv1f8C

# G2VCiiSTtB0JsqHckng/ySwuzTbA2EaRTftvXS0bcdHlsmaLCZk/KimwSDCCBnEw

# ggRZoAMCAQICCmEJgSoAAAAAAAIwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNVBAYT

# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS

# b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEwMB4XDTEwMDcwMTIxMzY1NVoX

# DTI1MDcwMTIxNDY1NVowfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0

# b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3Jh

# dGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwggEi

# MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpHQ28dxGKOiDs/BOX9fp/aZRr

# dFQQ1aUKAIKF++18aEssX8XD5WHCdrc+Zitb8BVTJwQxH0EbGpUdzgkTjnxhMFmx

# MEQP8WCIhFRDDNdNuDgIs0Ldk6zWczBXJoKjRQ3Q6vVHgc2/JGAyWGBG8lhHhjKE

# HnRhZ5FfgVSxz5NMksHEpl3RYRNuKMYa+YaAu99h/EbBJx0kZxJyGiGKr0tkiVBi

# sV39dx898Fd1rL2KQk1AUdEPnAY+Z3/1ZsADlkR+79BL/W7lmsqxqPJ6Kgox8NpO

# BpG2iAg16HgcsOmZzTznL0S6p/TcZL2kAcEgCZN4zfy8wMlEXV4WnAEFTyJNAgMB

# AAGjggHmMIIB4jAQBgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQU1WM6XIoxkPND

# e3xGG8UzaFqFbVUwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQD

# AgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb

# 186aGMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29t

# L3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoG

# CCsGAQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQu

# Y29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwgaAGA1Ud

# IAEB/wSBlTCBkjCBjwYJKwYBBAGCNy4DMIGBMD0GCCsGAQUFBwIBFjFodHRwOi8v

# d3d3Lm1pY3Jvc29mdC5jb20vUEtJL2RvY3MvQ1BTL2RlZmF1bHQuaHRtMEAGCCsG

# AQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAFAAbwBsAGkAYwB5AF8AUwB0AGEAdABl

# AG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQAH5ohRDeLG4Jg/gXEDPZ2j

# oSFvs+umzPUxvs8F4qn++ldtGTCzwsVmyWrf9efweL3HqJ4l4/m87WtUVwgrUYJE

# Evu5U4zM9GASinbMQEBBm9xcF/9c+V4XNZgkVkt070IQyK+/f8Z/8jd9Wj8c8pl5

# SpFSAK84Dxf1L3mBZdmptWvkx872ynoAb0swRCQiPM/tA6WWj1kpvLb9BOFwnzJK

# J/1Vry/+tuWOM7tiX5rbV0Dp8c6ZZpCM/2pif93FSguRJuI57BlKcWOdeyFtw5yj

# ojz6f32WapB4pm3S4Zz5Hfw42JT0xqUKloakvZ4argRCg7i1gJsiOCC1JeVk7Pf0

# v35jWSUPei45V3aicaoGig+JFrphpxHLmtgOR5qAxdDNp9DvfYPw4TtxCd9ddJgi

# CGHasFAeb73x4QDf5zEHpJM692VHeOj4qEir995yfmFrb3epgcunCaw5u+zGy9iC

# tHLNHfS4hQEegPsbiSpUObJb2sgNVZl6h3M7COaYLeqN4DMuEin1wC9UJyH3yKxO

# 2ii4sanblrKnQqLJzxlBTeCG+SqaoxFmMNO7dDJL32N79ZmKLxvHIa9Zta7cRDyX

# UHHXodLFVeNp3lfB0d4wwP3M5k37Db9dT+mdHhk4L7zPWAUu7w2gUDXa7wknHNWz

# fjUeCLraNtvTX4/edIhJEqGCAtIwggI7AgEBMIH8oYHUpIHRMIHOMQswCQYDVQQG

# EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG

# A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSkwJwYDVQQLEyBNaWNyb3NvZnQg

# T3BlcmF0aW9ucyBQdWVydG8gUmljbzEmMCQGA1UECxMdVGhhbGVzIFRTUyBFU046

# NjBCQy1FMzgzLTI2MzUxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNl

# cnZpY2WiIwoBATAHBgUrDgMCGgMVAMyABZi9xhx1nACWIt4WhsJaZRouoIGDMIGA

# pH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT

# B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UE

# AxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwDQYJKoZIhvcNAQEFBQAC

# BQDkTDLRMCIYDzIwMjEwNTE3MDQwOTUzWhgPMjAyMTA1MTgwNDA5NTNaMHcwPQYK

# KwYBBAGEWQoEATEvMC0wCgIFAORMMtECAQAwCgIBAAICIn8CAf8wBwIBAAICEPUw

# CgIFAORNhFECAQAwNgYKKwYBBAGEWQoEAjEoMCYwDAYKKwYBBAGEWQoDAqAKMAgC

# AQACAwehIKEKMAgCAQACAwGGoDANBgkqhkiG9w0BAQUFAAOBgQBPXZzbf9FZLkz4

# VLoSciGTn1kOUYxG9/XLqFjVo1aF9/veYtcQ2C23X9m20RwoPyoZcmL/ctiJqmuo

# 51kWjAjTU4YSHnEAWXqcyQrIpGfz6LwKeL6tWQe0f1MHiKSrTtQ3fOA42Wx1OsAV

# lM1F6SSDxsWlcEFfnofqMEenPV2DYDGCAw0wggMJAgEBMIGTMHwxCzAJBgNVBAYT

# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBU

# aW1lLVN0YW1wIFBDQSAyMDEwAhMzAAABWiy5bkQ0y28oAAAAAAFaMA0GCWCGSAFl

# AwQCAQUAoIIBSjAaBgkqhkiG9w0BCQMxDQYLKoZIhvcNAQkQAQQwLwYJKoZIhvcN

# AQkEMSIEIPtbTrW0de0CxmS/Q+ReV2cEp8iJOWBpHoiVzpWJrrl2MIH6BgsqhkiG

# 9w0BCRACLzGB6jCB5zCB5DCBvQQgk/yoJnTEsuRdMMOCGq/XJn+SLN6TNIVLiCJy

# +W2xf7AwgZgwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv

# bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0

# aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAA

# AVosuW5ENMtvKAAAAAABWjAiBCA5u65ZdfIs12NjIcshLwRRmF2qvwlEi+M03e+T

# u8d9mDANBgkqhkiG9w0BAQsFAASCAQA/TIGxZSCe9NaYOyPiG5rGdch0bsHrReHc

# O4PQzjLu2pG5N+tHphBXqliLARkQg1rDHH4tjzuYLQvQ6Kb+PJz8qAg9tMhUT4BH

# DcVMxCctdFzpfwLOOyN0vEPoIm4eAr4xYoGnVb1SoI5RHTG0WLHMRvIAdPoF7M2N

# +z7DgN00wVMpYoqEIlJyMhMsN0tTj5QvBLX+IDpuNVGmLiRHRDZvbm3C8RrAfbIj

# DZ5imLd57MaICZdxEGF28BwbWlSQ6r6f1dwNDEZH1ob3kjU8t+O5+1S4/yeaF0ok

# wWPjzC+EKP/4SYt2RCzlZWS52NF/y3iKCPpTGMzToSi67rGRqkwI

# SIG # End signature block