ScubaGear

2.0.0-rc2

Modules/ScubaConfigApp/ScubaConfigAnalyzerHelpers/ScubaConfigAnalyzerSchemaHelper.psm1

                                <#

.SYNOPSIS

    Analyzer helper: schema loading, shared caches, and small path/parse utilities.

.NOTES

    Imported (Import-Module) by Start-SCuBAConfigAnalyzer alongside the other analyzer

    helpers. Shared analyzer state lives on the synchronized $syncHash ($syncHash.ScA*), so

    every helper module reads/writes the same caches (mirrors how ScubaConfigApp shares

    state). Populated at scan time by Import-ScA*.

    Part of the ScubaGear project - https://github.com/cisagov/ScubaGear

#>

function Resolve-ScASchemaPath {

    <#

    .SYNOPSIS

    Resolves the default location of a schema file inside PowerShell/ScubaGear/schemas.

    #>

    param([Parameter(Mandatory)][string]$FileName)

    # This module lives in Modules/ScubaConfigApp/ScubaConfigAnalyzer, so the schemas

    # folder is three levels up (resolve from the analyzer root, not this helper folder).

    $candidate = Join-Path $syncHash.ScAModuleRoot (Join-Path '..\..\..\schemas' $FileName)

    if (Test-Path $candidate) {

        return (Resolve-Path $candidate).Path

    }

    # Fallback: a copy bundled alongside this module (keeps standalone use working).

    $local = Join-Path $syncHash.ScAModuleRoot $FileName

    if (Test-Path $local) {

        return (Resolve-Path $local).Path

    }

    # Return the candidate path even if it doesn't exist (caller can handle the missing file).

    return $candidate

}

function Resolve-ScAConfigSchemaPath {

    <#

    .SYNOPSIS

    Resolves the canonical ScubaGear config schema (Modules/ScubaConfig/ScubaConfigSchema.json),

    the single source of truth for which policies are configurable via exclusions/allow-lists.

    #>

    # Engine lives in Modules/ScubaConfigApp/ScubaConfigAnalyzer -> config schema is two levels

    # up (resolve from the analyzer root, not this helper folder).

    $candidate = Join-Path $syncHash.ScAModuleRoot '..\..\ScubaConfig\ScubaConfigSchema.json'

    if (Test-Path $candidate) { return (Resolve-Path $candidate).Path }

    # Return the candidate path even if it doesn't exist (caller can handle the missing file).

    return $candidate

}

function Import-ScAConfigurableMap {

    <#

    .SYNOPSIS

    Loads per-policy exclusion mappings + product capabilities from the canonical ScubaGear

    config schema so configurability is JSON-driven (never hardcoded). Populates

    $syncHash.ScAConfigurableMap (control id -> supported exclusion types) and

    $syncHash.ScAProductCapabilities. Safe when the schema is missing (empty maps).

    #>

    param([string]$ConfigSchemaPath)

    $syncHash.ScAConfigurableMap     = @{}

    $syncHash.ScAProductCapabilities = @{}

    # Ensure the config schema path is valid before attempting to import.

    if (-not $ConfigSchemaPath -or -not (Test-Path $ConfigSchemaPath)) {

        Write-Verbose "Config schema not found - configurability tagging disabled."

        return

    }

    try {

        # Read and parse the config schema JSON.

        $meta = (Get-Content $ConfigSchemaPath -Raw | ConvertFrom-Json).schemaMetadata

        if ($meta.policyExclusionMappings) {

            foreach ($p in $meta.policyExclusionMappings.PSObject.Properties) {

                if ($p.Name -notmatch '^_') { $syncHash.ScAConfigurableMap[$p.Name] = @($p.Value) }

            }

        }

        # Read and parse the product capabilities from the config schema JSON.

        if ($meta.productCapabilities) {

            foreach ($p in $meta.productCapabilities.PSObject.Properties) {

                $syncHash.ScAProductCapabilities[$p.Name] = $p.Value

            }

        }

    } catch {

        Write-Warning "Failed to read config schema '$ConfigSchemaPath': $($_.Exception.Message)"

    }

}

function Import-ScAAnalyzerRules {

    <#

    .SYNOPSIS

    Loads the analyzer rules from ScubaConfigAnalyzer_Control_en-US.json into the module caches so

    the engine is a generic interpreter (product-key map, requirement friendly names,

    named Graph operations, and Conditional Access condition rules are all JSON-driven).

    #>

    param([Parameter(Mandatory)]$AnalyzerSchema)

    # Requirement path -> friendly label (supports a 'default' sub-object or a flat map).

    $syncHash.ScAFriendlyNames =

        if ($AnalyzerSchema.RequirementFriendlyNames.default) { $AnalyzerSchema.RequirementFriendlyNames.default }

        elseif ($AnalyzerSchema.RequirementFriendlyNames)     { $AnalyzerSchema.RequirementFriendlyNames }

        else { $null }

    # Product key map (prodLower -> ResultsKey/ConfigKey).

    $syncHash.ScAProductMap = @{}

    if ($AnalyzerSchema.productMap) {

        foreach ($p in $AnalyzerSchema.productMap.PSObject.Properties) {

            if ($p.Name -match '^_') { continue }

            $syncHash.ScAProductMap[$p.Name.ToLower()] = @{ ResultsKey = [string]$p.Value.resultsKey; ConfigKey = [string]$p.Value.configKey; DisplayName = [string]$p.Value.displayName }

        }

    }

    if ($syncHash.ScAProductMap.Count -eq 0) { Write-Warning "Analyzer schema has no 'productMap' - product result/config keys are unavailable." }

    # Named Graph operations (operation name -> definition; resolved to URLs via the API catalog).

    $syncHash.ScAApiOperations = @{}

    if ($AnalyzerSchema.apiOperations) {

        foreach ($op in $AnalyzerSchema.apiOperations.PSObject.Properties) {

            # Skip any internal properties that start with an underscore.

            if ($op.Name -match '^_') { continue }

            $syncHash.ScAApiOperations[$op.Name] = $op.Value

        }

    }

    # Conditional Access interpretation rules.

    $syncHash.ScACaRules = $AnalyzerSchema.conditionalAccessAnalysis

    # Exclusion field metadata; allows future exclusion types to be emitted without

    # hardcoded field arrays in the YAML builder.

    $syncHash.ScAExclusionDefinitions = @{}

    if ($AnalyzerSchema.exclusionDefinitions) {

        foreach ($exclusion in $AnalyzerSchema.exclusionDefinitions.PSObject.Properties) {

            # Skip any internal properties that start with an underscore.

            if ($exclusion.Name -match '^_') { continue }

            $syncHash.ScAExclusionDefinitions[$exclusion.Name] = $exclusion.Value

        }

    }

}

function Import-ScAApiCatalog {

    <#

    .SYNOPSIS

    Loads ScubaGearApiCatalog.json (functionName -> entry) so API resource paths and

    least permissions come from the catalog, never from hardcoded URLs in this module.

    #>

    param([string]$ApiCatalogPath)

    $syncHash.ScAApiCatalog = @{}

    # If no API catalog path is provided, resolve the default path relative to the module.

    if (-not $ApiCatalogPath) { $ApiCatalogPath = Resolve-ScASchemaPath -FileName 'ScubaGearApiCatalog.json' }

    if (-not (Test-Path $ApiCatalogPath)) { Write-Warning "API catalog not found: $ApiCatalogPath"; return }

    try {

        # Read and parse the API catalog JSON file.

        $catalog = Get-Content $ApiCatalogPath -Raw | ConvertFrom-Json

        foreach ($e in @($catalog)) { if ($e.functionName) { $syncHash.ScAApiCatalog[[string]$e.functionName] = $e } }

    } catch {

        Write-Warning "Failed to read API catalog '$ApiCatalogPath': $($_.Exception.Message)"

    }

}

function Resolve-ScAApiResource {

    <#

    .SYNOPSIS

    Builds a Graph request URI for a named analyzer operation by resolving its cmdlet to

    an endpointPath in ScubaGearApiCatalog.json. resultKind: collection (list) | byId

    (single item, {id} substituted) | byAppId (service principal by appId). Returns $null

    when the operation or catalog entry is unknown (caller falls back gracefully).

    #>

    param([Parameter(Mandatory)][string]$Operation, [string]$Id)

    # Ensure that the API operations and catalog are loaded before attempting to resolve the resource.

    if (-not $syncHash.ScAApiOperations.ContainsKey($Operation)) { return $null }

    $op = $syncHash.ScAApiOperations[$Operation]

    $cmd = [string]$op.cmdlet

    if (-not $cmd -or -not $syncHash.ScAApiCatalog.ContainsKey($cmd)) { return $null }

    # Retrieve the catalog entry for the resolved cmdlet and extract the API resource, filter, and selection parameters.

    $entry    = $syncHash.ScAApiCatalog[$cmd]

    $resource = [string]$entry.endpointPath

    if (-not $resource) { return $null }

    # Determine the filter to apply to the API request based on the catalog entry.

    $filter = if ($entry.apiFilter) { [string]$entry.apiFilter } else { '' }

    # Determine the select query parameter to apply to the API request based on the operation definition.

    $select = if ($op.select) { '?$select=' + [string]$op.select } else { '' }

    # Determine the kind of result expected from the API operation (collection, byId, byAppId).

    $kind   = if ($op.resultKind) { [string]$op.resultKind } else { 'collection' }

    # Build the final API request URI based on the kind of result expected.

    # The switch statement below handles different kinds of API request URIs based on the expected result kind.

    switch ($kind) {

        'byId' {

            # For 'byId' results, construct the base URI by substituting the '{id}' placeholder with the provided ID.

            $base = if ($resource -match '\{id\}') { $resource }

                    elseif ($filter -match '\{id\}') { $resource + $filter }

                    else { $resource.TrimEnd('/') + '/{id}' }

            return ($base -replace '\{id\}', $Id) + $select

        }

        'byAppId' {

            # For 'byAppId' results, construct the collection URI by removing the '{id}' placeholder and appending the appId query parameter.

            $collection = ($resource -replace '/\{id\}\s*$', '').TrimEnd('/')

            return "$collection(appId='$Id')" + $select

        }

        default { return $resource + $select }

    }

}

function Get-ScAValueAtPath {

    <#

    .SYNOPSIS

    Navigates a dotted, camelCase path (e.g. conditions.users.excludeUsers) on an object,

    matching property names case-insensitively so both ScubaResults (PascalCase) and raw

    Graph (camelCase) shapes resolve. Returns the value or $null if any segment is missing.

    #>

    param($Object, [Parameter(Mandatory)][string]$Path)

    $cur = $Object

    # Traverse each segment of the dotted path, resolving property names case-insensitively.

    foreach ($part in ($Path -split '\.')) {

        if ($null -eq $cur) { return $null }

        # Attempt to find the property on the current object that matches the current path segment, case-insensitively.

        $prop = $cur.PSObject.Properties | Where-Object { $_.Name -ieq $part } | Select-Object -First 1

        if (-not $prop) { return $null }

        $cur = $prop.Value

    }

    # After traversing all segments, $cur holds the value at the specified path or $null if any segment was missing.

    return $cur

}

function Get-ScAFriendlyName {

    <#

    .SYNOPSIS

    Returns a human-readable label for a requirement path (from the config schema).

    #>

    param([Parameter(Mandatory)][string]$Path)

    # Return the human-readable label for the given requirement path if available; otherwise, return the path itself.

    if ($syncHash.ScAFriendlyNames -and ($syncHash.ScAFriendlyNames.PSObject.Properties.Name -contains $Path)) {

        return $syncHash.ScAFriendlyNames.$Path

    }

    # If no human-readable label is found for the given path, fall back to returning the path itself.

    return $Path

}

function Remove-ScAHtml {

    <#

    .SYNOPSIS

    Strips embedded HTML (e.g. the 'policy-indicators' block ScubaGear results add to the

    Requirement text) and returns clean plain text.

    #>

    param([AllowNull()][string]$Text)

    if ([string]::IsNullOrWhiteSpace($Text)) { return $Text }

    # Drop the trailing indicators/markup block, strip any remaining tags, then decode entities.

    # Split the text at the first occurrence of a <div> tag to remove the trailing indicators/markup block.

    $clean = ($Text -split '<div')[0]

    # Remove any remaining HTML tags from the text.

    $clean = $clean -replace '<[^>]+>', ''

    # Decode any HTML entities to get clean plain text.

    $clean = [System.Net.WebUtility]::HtmlDecode($clean)

    # Trim any leading or trailing whitespace from the cleaned text.

    return $clean.Trim()

}

function Get-ScAValidationSchema {

    <#

    .SYNOPSIS

    Finds the baseline validation entry for a control id across all products.

    #>

    param(

        [Parameter(Mandatory)][string]$ControlId,

        [Parameter(Mandatory)]$BaselineSchema

    )

    # Return $null if the baseline schema or its validations are not available.

    if (-not $BaselineSchema -or -not $BaselineSchema.baselineValidations) { return $null }

    # Iterate through each product in the baseline validations to find a matching control id.

    foreach ($product in $BaselineSchema.baselineValidations.PSObject.Properties.Name) {

        # Check each validation entry for the current product to see if it matches the specified control id.

        $match = $BaselineSchema.baselineValidations.$product | Where-Object { $_.id -eq $ControlId }

        if ($match) { return $match }

    }

    # If no matching validation entry is found for any product, return $null.

    return $null

}

# SIG # Begin signature block

# MIIu9gYJKoZIhvcNAQcCoIIu5zCCLuMCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCi3OGYVrjJQsWv

# gD7mA1loKq6ChUgeZrQAMiGzmAEbnaCCE6MwggWQMIIDeKADAgECAhAFmxtXno4h

# MuI5B72nd3VcMA0GCSqGSIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQK

# EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNV

# BAMTGERpZ2lDZXJ0IFRydXN0ZWQgUm9vdCBHNDAeFw0xMzA4MDExMjAwMDBaFw0z

# ODAxMTUxMjAwMDBaMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ

# bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0

# IFRydXN0ZWQgUm9vdCBHNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB

# AL/mkHNo3rvkXUo8MCIwaTPswqclLskhPfKK2FnC4SmnPVirdprNrnsbhA3EMB/z

# G6Q4FutWxpdtHauyefLKEdLkX9YFPFIPUh/GnhWlfr6fqVcWWVVyr2iTcMKyunWZ

# anMylNEQRBAu34LzB4TmdDttceItDBvuINXJIB1jKS3O7F5OyJP4IWGbNOsFxl7s

# Wxq868nPzaw0QF+xembud8hIqGZXV59UWI4MK7dPpzDZVu7Ke13jrclPXuU15zHL

# 2pNe3I6PgNq2kZhAkHnDeMe2scS1ahg4AxCN2NQ3pC4FfYj1gj4QkXCrVYJBMtfb

# BHMqbpEBfCFM1LyuGwN1XXhm2ToxRJozQL8I11pJpMLmqaBn3aQnvKFPObURWBf3

# JFxGj2T3wWmIdph2PVldQnaHiZdpekjw4KISG2aadMreSx7nDmOu5tTvkpI6nj3c

# AORFJYm2mkQZK37AlLTSYW3rM9nF30sEAMx9HJXDj/chsrIRt7t/8tWMcCxBYKqx

# YxhElRp2Yn72gLD76GSmM9GJB+G9t+ZDpBi4pncB4Q+UDCEdslQpJYls5Q5SUUd0

# viastkF13nqsX40/ybzTQRESW+UQUOsxxcpyFiIJ33xMdT9j7CFfxCBRa2+xq4aL

# T8LWRV+dIPyhHsXAj6KxfgommfXkaS+YHS312amyHeUbAgMBAAGjQjBAMA8GA1Ud

# EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBTs1+OC0nFdZEzf

# Lmc/57qYrhwPTzANBgkqhkiG9w0BAQwFAAOCAgEAu2HZfalsvhfEkRvDoaIAjeNk

# aA9Wz3eucPn9mkqZucl4XAwMX+TmFClWCzZJXURj4K2clhhmGyMNPXnpbWvWVPjS

# PMFDQK4dUPVS/JA7u5iZaWvHwaeoaKQn3J35J64whbn2Z006Po9ZOSJTROvIXQPK

# 7VB6fWIhCoDIc2bRoAVgX+iltKevqPdtNZx8WorWojiZ83iL9E3SIAveBO6Mm0eB

# cg3AFDLvMFkuruBx8lbkapdvklBtlo1oepqyNhR6BvIkuQkRUNcIsbiJeoQjYUIp

# 5aPNoiBB19GcZNnqJqGLFNdMGbJQQXE9P01wI4YMStyB0swylIQNCAmXHE/A7msg

# dDDS4Dk0EIUhFQEI6FUy3nFJ2SgXUE3mvk3RdazQyvtBuEOlqtPDBURPLDab4vri

# RbgjU2wGb2dVf0a1TD9uKFp5JtKkqGKX0h7i7UqLvBv9R0oN32dmfrJbQdA75PQ7

# 9ARj6e/CVABRoIoqyc54zNXqhwQYs86vSYiv85KZtrPmYQ/ShQDnUBrkG5WdGaG5

# nLGbsQAe79APT0JsyQq87kP6OnGlyE0mpTX9iV28hWIdMtKgK1TtmlfB2/oQzxm3

# i0objwG2J5VT6LaJbVu8aNQj6ItRolb58KaAoNYes7wPD1N1KarqE3fk3oyBIa0H

# EEcRrYc9B9F1vM/zZn4wggawMIIEmKADAgECAhAIrUCyYNKcTJ9ezam9k67ZMA0G

# CSqGSIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ

# bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0

# IFRydXN0ZWQgUm9vdCBHNDAeFw0yMTA0MjkwMDAwMDBaFw0zNjA0MjgyMzU5NTla

# MGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UE

# AxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEz

# ODQgMjAyMSBDQTEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDVtC9C

# 0CiteLdd1TlZG7GIQvUzjOs9gZdwxbvEhSYwn6SOaNhc9es0JAfhS0/TeEP0F9ce

# 2vnS1WcaUk8OoVf8iJnBkcyBAz5NcCRks43iCH00fUyAVxJrQ5qZ8sU7H/Lvy0da

# E6ZMswEgJfMQ04uy+wjwiuCdCcBlp/qYgEk1hz1RGeiQIXhFLqGfLOEYwhrMxe6T

# SXBCMo/7xuoc82VokaJNTIIRSFJo3hC9FFdd6BgTZcV/sk+FLEikVoQ11vkunKoA

# FdE3/hoGlMJ8yOobMubKwvSnowMOdKWvObarYBLj6Na59zHh3K3kGKDYwSNHR7Oh

# D26jq22YBoMbt2pnLdK9RBqSEIGPsDsJ18ebMlrC/2pgVItJwZPt4bRc4G/rJvmM

# 1bL5OBDm6s6R9b7T+2+TYTRcvJNFKIM2KmYoX7BzzosmJQayg9Rc9hUZTO1i4F4z

# 8ujo7AqnsAMrkbI2eb73rQgedaZlzLvjSFDzd5Ea/ttQokbIYViY9XwCFjyDKK05

# huzUtw1T0PhH5nUwjewwk3YUpltLXXRhTT8SkXbev1jLchApQfDVxW0mdmgRQRNY

# mtwmKwH0iU1Z23jPgUo+QEdfyYFQc4UQIyFZYIpkVMHMIRroOBl8ZhzNeDhFMJlP

# /2NPTLuqDQhTQXxYPUez+rbsjDIJAsxsPAxWEQIDAQABo4IBWTCCAVUwEgYDVR0T

# AQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUaDfg67Y7+F8Rhvv+YXsIiGX0TkIwHwYD

# VR0jBBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMG

# A1UdJQQMMAoGCCsGAQUFBwMDMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYY

# aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2Fj

# ZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNV

# HR8EPDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRU

# cnVzdGVkUm9vdEc0LmNybDAcBgNVHSAEFTATMAcGBWeBDAEDMAgGBmeBDAEEATAN

# BgkqhkiG9w0BAQwFAAOCAgEAOiNEPY0Idu6PvDqZ01bgAhql+Eg08yy25nRm95Ry

# sQDKr2wwJxMSnpBEn0v9nqN8JtU3vDpdSG2V1T9J9Ce7FoFFUP2cvbaF4HZ+N3HL

# IvdaqpDP9ZNq4+sg0dVQeYiaiorBtr2hSBh+3NiAGhEZGM1hmYFW9snjdufE5Btf

# Q/g+lP92OT2e1JnPSt0o618moZVYSNUa/tcnP/2Q0XaG3RywYFzzDaju4ImhvTnh

# OE7abrs2nfvlIVNaw8rpavGiPttDuDPITzgUkpn13c5UbdldAhQfQDN8A+KVssIh

# dXNSy0bYxDQcoqVLjc1vdjcshT8azibpGL6QB7BDf5WIIIJw8MzK7/0pNVwfiThV

# 9zeKiwmhywvpMRr/LhlcOXHhvpynCgbWJme3kuZOX956rEnPLqR0kq3bPKSchh/j

# wVYbKyP/j7XqiHtwa+aguv06P0WmxOgWkVKLQcBIhEuWTatEQOON8BUozu3xGFYH

# Ki8QxAwIZDwzj64ojDzLj4gLDb879M4ee47vtevLt/B3E+bnKD+sEq6lLyJsQfmC

# XBVmzGwOysWGw/YmMwwHS6DTBwJqakAwSEs0qFEgu60bhQjiWQ1tygVQK+pKHJ6l

# /aCnHwZ05/LWUpD9r4VIIflXO7ScA+2GRfS0YW6/aOImYIbqyK+p/pQd52MbOoZW

# eE4wggdXMIIFP6ADAgECAhAMM6tnPejLgA9WVhXroQvSMA0GCSqGSIb3DQEBCwUA

# MGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UE

# AxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEz

# ODQgMjAyMSBDQTEwHhcNMjYwMTE0MDAwMDAwWhcNMjcwMTEzMjM1OTU5WjBfMQsw

# CQYDVQQGEwJVUzEdMBsGA1UECBMURGlzdHJpY3Qgb2YgQ29sdW1iaWExEzARBgNV

# BAcTCldhc2hpbmd0b24xDTALBgNVBAoTBENJU0ExDTALBgNVBAMTBENJU0EwggIi

# MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCuXYolNHqlh6smLTE592waXheZ

# 8VHzxeds4pMaepGuwmjf8d1jG9wUNuJX9/qb0a1dgGz5D/EAz5NRTIin4SZYQEE8

# qvdl2yQJ5uWxXIjsFbrOyc1fWscUXw0Kt7OPLOafcEkdDoe8K0tO4h2GL3RWRzjp

# uLfQhhnAmD6NT1l+ughnfmarV/ODgIn/RFR4YORlu4YP2xQX6KRxeTDslg7F+z6X

# +t87/U8m8gQ9XTm5kBmteP4GcE/ytnyI+ScIxNRybzGomWIBm848XDE5yYhlYQ2R

# SnCoo6M4CRqp9WFGVyoLkoPP0OlxzryKWaE1/nuPbYG/kf/rUB1OhqxvSSGwmNhs

# vkkjsC0Z9H5Jy6heFdoxOu/+ZQksKoP/fMvHxuCCtkIJbV8tk0oT6MQ8EJbgsWDZ

# TKhui1wxW6JIZyBOMPWoZUOouOzo2h5Cz7LBPKME5FkcUzcs47lpRlDkJco4PLcj

# wJSo4XPnx3G/2DIjNEFNyfKCWfH8uW6nJjmDBiveFZ2j0YvgdQ+7MOjQnw7R/MAD

# DTagrKl3rLV60+X2TY6/onKhCUuU3pMAjVbOwZ3PkzDLZnsEGRfm6hgp6014aXml

# t8h4nu+uC41U8vUSGHl0vqKuzvmShLmnI+Iv0l95pmnqomuCZzRDrjEoaLPx7OxL

# Dy/Id9E7yQDip4jBdQIDAQABo4ICAzCCAf8wHwYDVR0jBBgwFoAUaDfg67Y7+F8R

# hvv+YXsIiGX0TkIwHQYDVR0OBBYEFN30sVU+fpfQQfPQWMhkO1qd+MxoMD4GA1Ud

# IAQ3MDUwMwYGZ4EMAQQBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNl

# cnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwMw

# gbUGA1UdHwSBrTCBqjBToFGgT4ZNaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0Rp

# Z2lDZXJ0VHJ1c3RlZEc0Q29kZVNpZ25pbmdSU0E0MDk2U0hBMzg0MjAyMUNBMS5j

# cmwwU6BRoE+GTWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0

# ZWRHNENvZGVTaWduaW5nUlNBNDA5NlNIQTM4NDIwMjFDQTEuY3JsMIGUBggrBgEF

# BQcBAQSBhzCBhDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29t

# MFwGCCsGAQUFBzAChlBodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNl

# cnRUcnVzdGVkRzRDb2RlU2lnbmluZ1JTQTQwOTZTSEEzODQyMDIxQ0ExLmNydDAJ

# BgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQA77T42YiOx5wWPItgo+kvB+Gzb

# ZFCRHRFfTAZZNQt9o/0CqNmyA2xFklX4t5Z9VNdiIOx14AnmJdQkcRdk3vsU5gby

# jKEup7LTWtvcWrl6hQwGNt3l892BgUbPKsPBE+AriktVqn5yMSXVVzeboqsqAG8e

# Syei0B54/QdgR4whfHvQ/qpCACsJTlJgAykXVgDPJNKnQ7wc17loLQutqF1JUcbO

# XKWt1AA9Zas5q30LDZzZeK4B56yojK68CTQXN7toSRFIuZDMKKDfIZpCX8cmbaaO

# DFOOu44/QWMv+Xc6+ISYGkrTTzqWhOqiXgLVBeXGn/WrOJJ8R29mZMneCpBesCLs

# YII1gCFOo7Vt6mvOKxAPQ3KhJYBFEHkp+GI65koaQkO2xv50iLS0+/j2YC66uviU

# MFe0JEOdXuE7Rn/OmWNSzQ+6kPNYDJQASQ974C3wUejJoMtGZEzoTbly/HufQTrd

# rhcL2aC69CxSN+idTXPLC9UT3xo4sFdOw+hXkmbXtoB1GDsd5p1TWFgRbnTXDkbM

# YMBWYVB6/Tk1bzwj4iTp4g0YrtB628FXPX/ko+JWZlv0Ea865S23w1uGlnDNVxIi

# +8oi74G5DM66Q6ENt6+3WoRGRrdoyE6uCh1haY+oPYSgumb0ozzrp8tw89TRKVrK

# KSXGBxlExEvjQ6dYwjGCGqkwghqlAgEBMH0waTELMAkGA1UEBhMCVVMxFzAVBgNV

# BAoTDkRpZ2lDZXJ0LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2VydCBUcnVzdGVkIEc0

# IENvZGUgU2lnbmluZyBSU0E0MDk2IFNIQTM4NCAyMDIxIENBMQIQDDOrZz3oy4AP

# VlYV66EL0jANBglghkgBZQMEAgEFAKCBhDAYBgorBgEEAYI3AgEMMQowCKACgACh

# AoAAMBkGCSqGSIb3DQEJAzEMBgorBgEEAYI3AgEEMBwGCisGAQQBgjcCAQsxDjAM

# BgorBgEEAYI3AgEVMC8GCSqGSIb3DQEJBDEiBCAwGE4lIMXOZOXiIEUT1yW53qBr

# 6fyF7SQTcJDqGB/cADANBgkqhkiG9w0BAQEFAASCAgBV1g9TbH3tR8xtQ4dYZeMO

# G7JJ1AHPlIn3X0mO8up0RCVZ6EVLYFHhoI7/6rqDnJlPuLhQ1v435yiHqbG7NrT3

# irWlOQiVrAsiXSSd9QqUrmwWVR2I6viGzV9wXIiriXZDl0MZ8G0Pn696DnglE8vd

# 5qtsCDLF5ua+xl6RrBO1RCz04BJv3Cr69GCko1VOWB3d1bz6s0RLpelABHixKew3

# P+TmSvigizDdO2X23reykGPwmA9Sc/Rvb2sFJ4KWy1Qi8JsMTVs1UDGnOAr3BLhl

# 3G2FNGy2wWDbae5a0sYGjE1ao0O5ceWXoccu406e8OgioPksS+hBWYCo5XKksohK

# E26ZY4Z22fNEKHiwWpksbtmM/BuIl3w706g0w4MM1aWj9yOHuft0ph4FJTWaCHC2

# iGi60/uoUWXHxshAgb2jemTi/OuQJx+5sTtZl9Qjw3chF45wgC276EHu696S+iR+

# bUlwOZKUckSiyr1nD6e0n0sJOOy+5f5yFu/XHBa51kXMB/EkB/D1rsv11QMPM5hk

# faqZ2dKdtkPuobYfqmiSVQFSVHCE17nKxLuYNl5/DcRQLo+rIcp2RFKQFpXv77KX

# KelXcgClDsxiTLGf9LmaWKAr1+vr6d0HwwsSmNxu8ZmlMO8LQ9isubFqy0DU53tC

# Z2UoYiKy4U9rL1nT5jMiAqGCF3YwghdyBgorBgEEAYI3AwMBMYIXYjCCF14GCSqG

# SIb3DQEHAqCCF08wghdLAgEDMQ8wDQYJYIZIAWUDBAIBBQAwdwYLKoZIhvcNAQkQ

# AQSgaARmMGQCAQEGCWCGSAGG/WwHATAxMA0GCWCGSAFlAwQCAQUABCBcgXDubJFK

# 5DtTpQhnA27xCI9c/fVJ3bZHtAJeTbg6UwIQdjLhmMa5URJop+j7xzKcYRgPMjAy

# NjEwMDgyMzI5NTBaoIITOjCCBu0wggTVoAMCAQICEAhP3DNPfkVO28MPj/mSGDUw

# DQYJKoZIhvcNAQELBQAwaTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0

# LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2VydCBUcnVzdGVkIEc0IFRpbWVTdGFtcGlu

# ZyBSU0E0MDk2IFNIQTI1NiAyMDI1IENBMTAeFw0yNjA4MDUwMDAwMDBaFw0zNzEx

# MDQyMzU5NTlaMGMxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5j

# LjE7MDkGA1UEAxMyRGlnaUNlcnQgU0hBMjU2IFJTQTQwOTYgVGltZXN0YW1wIFJl

# c3BvbmRlciAyMDI2IDEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC2

# e6byyf7NSvjUm0xls/04xjD4fAkOkbnGQi7+Wpx81iYxfzViaxSIctuH3KSl5YEY

# pMuFgGsA31N2D9ATMbfZdw5uaAhuWevQKhDdZIB4NnqcfpfpWQXJiQnDdAElETC+

# bhSEvNLGbA8DtwUpFMQ4yyYQSPqomT92osQAv6hBi47ATZS6JfVWe6XxhF4jJZ3i

# SAuf2Cros1czRSmWRHqMv9AfGZvp8ygYElhudpQjtcPpwoOl6QrZJUyV3iINvN4c

# O05prGV0fkjG426xDr2d3z9lcSIHkdvGPdGUrXdxfVbgOUVcp2/8ISEzwKPW++Wa

# +E2ujI91EZtukGWDJ/xZ27k3oHKEXBRGfRTqjOU+jE3ba/5++JSE/7oNHnjs5mek

# ExYN96LV/mxUbCKJb8pBNY4r3uD7hEmk/M81XhVgwDA7aMzYC3LZBg9WY5BMmbSa

# y5ecmtJuXaB/0nKWmQmVZeqTVDgsmzHP5MQuhAJkiWNuC9MmCg9TZHXbJ2/yLVSo

# v9p16UDTLtT0+aa1vN71fHeu1qMLlLNB3WOB/ADCxr3S/1hxI92Z6jKgEED/btwI

# vbfuXkNNhg8MtDg43c4tMZae9FvqMOt/9PvmAxF9TNIsIFB8G6yb36ZJZGUL8N/p

# L971DyLXcK6HM5PYnH5X+eVtczhCgHCVQCF6XDAlPQIDAQABo4IBlTCCAZEwDAYD

# VR0TAQH/BAIwADAdBgNVHQ4EFgQUFMljijAu1Er7bpTz5uNAfvXszeIwHwYDVR0j

# BBgwFoAU729TSunkBnx6yuKQVvYv1Ensy04wDgYDVR0PAQH/BAQDAgeAMBYGA1Ud

# JQEB/wQMMAoGCCsGAQUFBwMIMIGVBggrBgEFBQcBAQSBiDCBhTAkBggrBgEFBQcw

# AYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMF0GCCsGAQUFBzAChlFodHRwOi8v

# Y2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkRzRUaW1lU3RhbXBp

# bmdSU0E0MDk2U0hBMjU2MjAyNUNBMS5jcnQwXwYDVR0fBFgwVjBUoFKgUIZOaHR0

# cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0VGltZVN0YW1w

# aW5nUlNBNDA5NlNIQTI1NjIwMjVDQTEuY3JsMCAGA1UdIAQZMBcwCAYGZ4EMAQQC

# MAsGCWCGSAGG/WwHATANBgkqhkiG9w0BAQsFAAOCAgEAjcU6YR6dUgrfmawJgH59

# KECxa9Ji8sEi2g10CBDaMiqsaxWyW5cwlT/6ZF5sFznazqVsoC85U9dqLOYqQwst

# +UQQoNlDHgKRLa3xoc+OReFreFhnTXSG0Vrd2E2CZqUfm+5a+He1MJ/h+tNLuA+0

# Zzhn/Fo+FDYAHWZHx4R79ZsfRFYe9UiXpXBDf6DkUo183Y38NYmR/XfDYf7YZ+oR

# 9t3flbDwK+hgGMs0gNNp1w9Z2CyOyI5or/sSwomAuNQ0hWC9xoU4stD8aWsD7Rkc

# mgVRs6vlIk3zPKQ+ylcheWkMlj+CoVRlFE55pv0ZWCaFt04lwP/rdGHE9qEVQZty

# RE42ox7oNgC/r+Y4bSlZ3dw9K2x1xLtu6PkPKeLBFjzKigwfqm3Hm+k/+lnME8F5

# kPZTgiy2HLEHklpryqs6QHnPXrRNeIzkAMyylnRN8P0wmirS0WkU+ywpEWFZ4QNg

# +9xS43tTuW9x0eXh7NDc1P/sV+zWxHXKH8tFt1ncHdVzqrZaYPyYMLSn2TOXajve

# JW1L3joiQSPsWRGxkbDDW15jERFE4LvjnGu2O9zD1nLJSMdlYZEikl4w2w+q4IN/

# R+TIe0H4ngCI1moJCTbevGH4punIxM1Uoi0nmX3ZK+XbRT01uowE5ViXWHng0Rgs

# mrX/EdYUo80r3TfMlkD0/YMwgga0MIIEnKADAgECAhANx6xXBf8hmS5AQyIMOkmG

# MA0GCSqGSIb3DQEBCwUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2Vy

# dCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lD

# ZXJ0IFRydXN0ZWQgUm9vdCBHNDAeFw0yNTA1MDcwMDAwMDBaFw0zODAxMTQyMzU5

# NTlaMGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8G

# A1UEAxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBUaW1lU3RhbXBpbmcgUlNBNDA5NiBT

# SEEyNTYgMjAyNSBDQTEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC0

# eDHTCphBcr48RsAcrHXbo0ZodLRRF51NrY0NlLWZloMsVO1DahGPNRcybEKq+Ruw

# OnPhof6pvF4uGjwjqNjfEvUi6wuim5bap+0lgloM2zX4kftn5B1IpYzTqpyFQ/4B

# t0mAxAHeHYNnQxqXmRinvuNgxVBdJkf77S2uPoCj7GH8BLuxBG5AvftBdsOECS1U

# kxBvMgEdgkFiDNYiOTx4OtiFcMSkqTtF2hfQz3zQSku2Ws3IfDReb6e3mmdglTca

# arps0wjUjsZvkgFkriK9tUKJm/s80FiocSk1VYLZlDwFt+cVFBURJg6zMUjZa/zb

# CclF83bRVFLeGkuAhHiGPMvSGmhgaTzVyhYn4p0+8y9oHRaQT/aofEnS5xLrfxnG

# pTXiUOeSLsJygoLPp66bkDX1ZlAeSpQl92QOMeRxykvq6gbylsXQskBBBnGy3tW/

# AMOMCZIVNSaz7BX8VtYGqLt9MmeOreGPRdtBx3yGOP+rx3rKWDEJlIqLXvJWnY0v

# 5ydPpOjL6s36czwzsucuoKs7Yk/ehb//Wx+5kMqIMRvUBDx6z1ev+7psNOdgJMoi

# wOrUG2ZdSoQbU2rMkpLiQ6bGRinZbI4OLu9BMIFm1UUl9VnePs6BaaeEWvjJSjNm

# 2qA+sdFUeEY0qVjPKOWug/G6X5uAiynM7Bu2ayBjUwIDAQABo4IBXTCCAVkwEgYD

# VR0TAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQU729TSunkBnx6yuKQVvYv1Ensy04w

# HwYDVR0jBBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGG

# MBMGA1UdJQQMMAoGCCsGAQUFBwMIMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcw

# AYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8v

# Y2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBD

# BgNVHR8EPDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNl

# cnRUcnVzdGVkUm9vdEc0LmNybDAgBgNVHSAEGTAXMAgGBmeBDAEEAjALBglghkgB

# hv1sBwEwDQYJKoZIhvcNAQELBQADggIBABfO+xaAHP4HPRF2cTC9vgvItTSmf83Q

# h8WIGjB/T8ObXAZz8OjuhUxjaaFdleMM0lBryPTQM2qEJPe36zwbSI/mS83afsl3

# YTj+IQhQE7jU/kXjjytJgnn0hvrV6hqWGd3rLAUt6vJy9lMDPjTLxLgXf9r5nWMQ

# wr8Myb9rEVKChHyfpzee5kH0F8HABBgr0UdqirZ7bowe9Vj2AIMD8liyrukZ2iA/

# wdG2th9y1IsA0QF8dTXqvcnTmpfeQh35k5zOCPmSNq1UH410ANVko43+Cdmu4y81

# hjajV/gxdEkMx1NKU4uHQcKfZxAvBAKqMVuqte69M9J6A47OvgRaPs+2ykgcGV00

# TYr2Lr3ty9qIijanrUR3anzEwlvzZiiyfTPjLbnFRsjsYg39OlV8cipDoq7+qNNj

# qFzeGxcytL5TTLL4ZaoBdqbhOhZ3ZRDUphPvSRmMThi0vw9vODRzW6AxnJll38F0

# cuJG7uEBYTptMSbhdhGQDpOXgpIUsWTjd6xpR6oaQf/DJbg3s6KCLPAlZ66RzIg9

# sC+NJpud/v4+7RWsWCiKi9EOLLHfMR2ZyJ/+xhCx9yHbxtl5TPau1j/1MIDpMPx0

# LckTetiSuEtQvLsNz3Qbp7wGWqbIiOWCnb5WqxL3/BAPvIXKUjPSxyZsq8WhbaM2

# tszWkPZPubdcMIIFjTCCBHWgAwIBAgIQDpsYjvnQLefv21DiCEAYWjANBgkqhkiG

# 9w0BAQwFADBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkw

# FwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1

# cmVkIElEIFJvb3QgQ0EwHhcNMjIwODAxMDAwMDAwWhcNMzExMTA5MjM1OTU5WjBi

# MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3

# d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3Qg

# RzQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAi

# MGkz7MKnJS7JIT3yithZwuEppz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnny

# yhHS5F/WBTxSD1Ifxp4VpX6+n6lXFllVcq9ok3DCsrp1mWpzMpTREEQQLt+C8weE

# 5nQ7bXHiLQwb7iDVySAdYyktzuxeTsiT+CFhmzTrBcZe7FsavOvJz82sNEBfsXpm

# 7nfISKhmV1efVFiODCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGYQJB5

# w3jHtrHEtWoYOAMQjdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsD

# dV14Ztk6MUSaM0C/CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1Z

# XUJ2h4mXaXpI8OCiEhtmmnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS0

# 0mFt6zPZxd9LBADMfRyVw4/3IbKyEbe7f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hk

# pjPRiQfhvbfmQ6QYuKZ3AeEPlAwhHbJUKSWJbOUOUlFHdL4mrLZBdd56rF+NP8m8

# 00ERElvlEFDrMcXKchYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8oR7FwI+i

# sX4KJpn15GkvmB0t9dmpsh3lGwIDAQABo4IBOjCCATYwDwYDVR0TAQH/BAUwAwEB

# /zAdBgNVHQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wHwYDVR0jBBgwFoAUReui

# r/SSy4IxLVGLp6chnfNtyA8wDgYDVR0PAQH/BAQDAgGGMHkGCCsGAQUFBwEBBG0w

# azAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEMGCCsGAQUF

# BzAChjdodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVk

# SURSb290Q0EuY3J0MEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9jcmwzLmRpZ2lj

# ZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwEQYDVR0gBAowCDAG

# BgRVHSAAMA0GCSqGSIb3DQEBDAUAA4IBAQBwoL9DXFXnOF+go3QbPbYW1/e/Vwe9

# mqyhhyzshV6pGrsi+IcaaVQi7aSId229GhT0E0p6Ly23OO/0/4C5+KH38nLeJLxS

# A8hO0Cre+i1Wz/n096wwepqLsl7Uz9FDRJtDIeuWcqFItJnLnU+nBgMTdydE1Od/

# 6Fmo8L8vC6bp8jQ87PcDx4eo0kxAGTVGamlUsLihVo7spNU96LHc/RzY9HdaXFSM

# b++hUD38dglohJ9vytsgjTVgHAIDyyCwrFigDkBjxZgiwbJZ9VVrzyerbHbObyMt

# 9H5xaiNrIv8SuFQtJ37YOtnwtoeW/VvRXKwYw02fc7cBqZ9Xql4o4rmUMYIDfDCC

# A3gCAQEwfTBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4x

# QTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgVGltZVN0YW1waW5nIFJTQTQw

# OTYgU0hBMjU2IDIwMjUgQ0ExAhAIT9wzT35FTtvDD4/5khg1MA0GCWCGSAFlAwQC

# AQUAoIHRMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAcBgkqhkiG9w0BCQUx

# DxcNMjYxMDA4MjMyOTUwWjArBgsqhkiG9w0BCRACDDEcMBowGDAWBBRR2avaA0lz

# 2E9CZqykgkjms2nEOTAvBgkqhkiG9w0BCQQxIgQgjNaQyvWlPYhesWKXYjyBR34F

# hP5WqAWoZmH5YMIXAz4wNwYLKoZIhvcNAQkQAi8xKDAmMCQwIgQgLaCdp/QTH5/n

# LbbF5unJZWdVrwQ/HqdCzA0hIOFB6/wwDQYJKoZIhvcNAQEBBQAEggIAYsbKvjQN

# xk17GSx1zoFwPWqCK7RfRVpoqB04KK6fOMQk+NBU3MevnqXIaApr880lkd/C9zsp

# 3DPNVaoKh1psBMV6TugISDrpKto7b2z5oNUG5lnxGbR3HfI2ijypdvYHJIepL3+2

# a9jGwonQTtWBxbccjy9GOPsE9aAhTPJbO++EQXUHDcwSHaCLMKSTGBMYr+1px/If

# va6z9UCIDmcjNY9ZcO/4b4rCqSD8iQ4apRnihZH1dJNiw1bzpptGjSGLiDJfL7TN

# P+Xhfs2/TkN6clzFwlSPFrUdk5JpAaqTyyTwntqXnJaPgwQ9OHeN+KeqY6n1fV0d

# RPaJX5cvyHJi1bwK/CBkpjcKc8QfSoQyGi8aWJbMAzP2+XVKlYkbcdm5hywHwhU+

# PkXcghnORF3XMxijfM7KSN41whyo/SgklPxDm68sNXMRGjV4xCXmTrIgLsv7jkpq

# oP6qqVEBXn4gXr7Jmmf2L4XA8G6W5+uzBe5YrP595Gb+/CtpXrIVmHaOgPcANzA3

# c8sb7Qc2OWi7Ir+joD1dFOk54t/nKh+/z294FVvVBC6BXNOLu3dbj3tSnbdHjCot

# pHoWWMnF+m5WJ2ohO6w+PD9IJwK5DwZJrD93P70NL9UXGCcwOUFTQ8e+2nsf/uTQ

# 4azgqkp2eCQGzU0UuoMpr6Sp9zi+7M/wwIA=

# SIG # End signature block