$logfile = "c:\programdata\installs.txt"
$logfile_verbose = "c:\programdata\verbose.txt"

function log($s, $verbose=$false)
{
    $t = Get-Date -Format "dd.MM.yyyy - HH:mm:ss.ff"
    if (!$verbose) {
        Add-Content $logfile -Value "$t - $s"
    }
    Add-Content $logfile_verbose -Value "$t - $s"
    Write-Host "$t - $s"
}

# Change to the script directory in case this script was called from somewhere else
cd $PSScriptRoot\customization

log "Performing customization"

log "  Importing Security baselines"

log "    BitLocker"
.\lgpo /t .\bitlocker.txt | Out-Null
log "      Result $LASTEXITCODE"

log "    Computer"
.\lgpo /t .\computer.txt | Out-Null
log "      Result $LASTEXITCODE"

log "    IE (Computer)"
.\lgpo /t .\ie_computer.txt | Out-Null
log "      Result $LASTEXITCODE"

log "    Credential Guard"
.\lgpo /t .\credentialguard.txt | Out-Null
log "      Result $LASTEXITCODE"

log "    Windows Defender"
.\lgpo /t .\defender.txt | Out-Null
log "      Result $LASTEXITCODE"

log "    Edge"
.\lgpo /t .\edge.txt | Out-Null
log "      Result $LASTEXITCODE"

log "    CIS"
.\lgpo /t .\cis.txt | Out-Null
log "      Result $LASTEXITCODE"

log "    Custom"
.\lgpo /t .\custom.txt | Out-Null
log "      Result $LASTEXITCODE"

log "    IE (User)"
.\lgpo /t .\ie_user.txt | Out-Null
log "      Result $LASTEXITCODE"

log "    User"
.\lgpo /t .\user.txt | Out-Null
log "      Result $LASTEXITCODE"

log "  Set additional hardening rules" $true
New-Item HKLM:\SYSTEM\CurrentControlSet\Control\Network\NewNetworkWindowOff

log "  Set hardening rules from Swiss Post" $true
log "    Registry keys" $true

[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer", "NoAddPrinter", 1)
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers", "AddPrinterDrivers", 1)
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry", "Start", 4)
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Setup\RecoveryConsole", "SecurityLevel", 0)
#[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer", "NoRun", 1)
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile", "DefaultInboundAction", 1)
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile", "DoNotAllowExceptions", 1)
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile", "DefaultInboundAction", 1)
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile", "DoNotAllowExceptions", 1)
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile", "DefaultInboundAction", 1)
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile", "DoNotAllowExceptions", 1)
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPIP6\Parameters", "DisabledComponents", 0xffffffff)
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections", "NC_ShowSharedAccessUI", 0)
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters", "EnableICMPRedirect", 0)
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System", "NoConnectedUser", 3)
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Settings\AllowYourAccount", "value", 0)
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System", "EnableLUA", 1)
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System", "ConsentPromptBehaviorAdmin", 2)

log "    Disable Teredo" $true
netsh interface teredo set state disabled
log "      Result $LASTEXITCODE" $true

log "    Configure Sleep Mode" $true
powercfg /x standby-timeout-ac 0 | Out-Null
log "      Standby AC $LASTEXITCODE" $true
powercfg /x standby-timeout-dc 0 | Out-Null
log "      Standby DC $LASTEXITCODE" $true
powercfg /x hibernate-timeout-ac 0 | Out-Null
log "      Hibernate AC $LASTEXITCODE" $true
powercfg /x hibernate-timeout-dc 0 | Out-Null
log "      Hibernate DC $LASTEXITCODE" $true
powercfg /x monitor-timeout-ac 2700 | Out-Null
log "      Monitor $LASTEXITCODE" $true

log "    Set maximum password age"
net accounts /maxpwage:120 | Out-Null
log "      Result $LASTEXITCODE"

log "    Disable Guest User" $true
net user Gast /active:no | Out-Null
log "      Result $LASTEXITCODE" $true

log "    Changing Audit Policy" $true
auditpol /set /subcategory:"Authentifizierungsrichtlinienänderung" /success:enable /failure:disable | Out-Null
log "      Authentication: $LASTEXITCODE" $true
auditpol /set /subcategory:"Autorisierungsrichtlinienänderung" /success:enable /failure:enable | Out-Null
log "      Authorization: $LASTEXITCODE" $true
auditpol /set /subcategory:"Richtlinienänderungen überwachen" /success:enable /failure:enable | Out-Null
log "      Policy Change: $LASTEXITCODE" $true
auditpol /set /subcategory:"Überprüfung der Anmeldeinformationen" /success:enable /failure:enable | Out-Null
log "      Logon: $LASTEXITCODE" $true
auditpol /set /subcategory:"Anwendungsgruppenverwaltung" /success:enable /failure:enable | Out-Null
log "      Application Group: $LASTEXITCODE" $true
auditpol /set /subcategory:"Plug & Play-Ereignisse" /success:enable /failure:enable | Out-Null
log "      PnP: $LASTEXITCODE" $true
auditpol /set /subcategory:"Prozesserstellung" /success:enable /failure:enable | Out-Null
log "      Process Creation: $LASTEXITCODE" $true
auditpol /set /subcategory:"Kontosperrung" /success:enable /failure:enable | Out-Null
log "      Account Lock: $LASTEXITCODE" $true
auditpol /set /subcategory:"Gruppenmitgliedschaft" /success:enable /failure:enable | Out-Null
log "      Group Membership: $LASTEXITCODE" $true
auditpol /set /subcategory:"Andere Anmelde-/Abmeldeereignisse" /success:enable /failure:enable | Out-Null
log "      Other Logon: $LASTEXITCODE" $true
auditpol /set /subcategory:"Detaillierte Dateifreigabe" /success:enable /failure:enable | Out-Null
log "      Detailed Share: $LASTEXITCODE" $true
auditpol /set /subcategory:"Dateifreigabe" /success:enable /failure:enable | Out-Null
log "      File Share: $LASTEXITCODE" $true
auditpol /set /subcategory:"Andere Objektzugriffsereignisse" /success:enable /failure:enable | Out-Null
log "      Object Access: $LASTEXITCODE" $true
auditpol /set /subcategory:"Wechselmedien" /success:enable /failure:enable | Out-Null
log "      Media: $LASTEXITCODE" $true
auditpol /set /subcategory:"MPSSVC-Richtlinienänderung auf Regelebene" /success:enable /failure:enable | Out-Null
log "      MPSSVC: $LASTEXITCODE" $true
auditpol /set /subcategory:"Andere Richtlinienänderungsereignisse" /success:disable /failure:enable | Out-Null
log "      Other Policies: $LASTEXITCODE" $true
auditpol /set /subcategory:"Sensible Verwendung von Rechten" /success:enable /failure:enable | Out-Null
log "      Sensitive Permissions: $LASTEXITCODE" $true
auditpol /set /subcategory:"IPSEC-Treiber" /success:enable /failure:enable | Out-Null
log "      IPSEC: $LASTEXITCODE" $true
auditpol /set /subcategory:"Sicherheitssystemerweiterung" /success:enable /failure:enable | Out-Null
log "      Security System: $LASTEXITCODE" $true

log "    Disable WinRE"
reagentc.exe /disable | Out-Null
log "    Result $LASTEXITCODE"

log "    Block ICMP" $true
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\FirewallRules", "Custom-Block-ICMPv4", `
    "v2.30|Action=Block|Active=TRUE|Dir=Out|Protocol=1|Name=Block ICMPv4|")
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\FirewallRules", "Custom-Block-ICMPv6", `
    "v2.30|Action=Block|Active=TRUE|Dir=Out|Protocol=58|Name=Block ICMPv6|")

log "  Allow time change for users" $true
secedit /configure /db c:\windows\system32\customsecedit.sdb /cfg timechangeforusers.inf /areas USER_RIGHTS /overwrite /quiet | Out-Null
log "    Result $LASTEXITCODE" $true

log "  Modify default user profile"
reg load "HKU\Default" "C:\Users\Default\NTUSER.DAT" | Out-Null
log "    Loading $LASTEXITCODE"
[Microsoft.Win32.Registry]::SetValue("HKEY_USERS\Default\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer", "EnableAutoTray", 0)
[Microsoft.Win32.Registry]::SetValue("HKEY_USERS\Default\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "HideFileExt", 0)
[Microsoft.Win32.Registry]::SetValue("HKEY_USERS\Default\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "Hidden", 1)
[Microsoft.Win32.Registry]::SetValue("HKEY_USERS\Default\SOFTWARE\Microsoft\Windows\CurrentVersion\Search", "SearchboxTaskbarMode", 0)
[Microsoft.Win32.Registry]::SetValue("HKEY_USERS\Default\SOFTWARE\Sysinternals\SDelete", "EulaAccepted", 1)
reg unload "HKU\Default" | Out-Null
log "    Saving $LASTEXITCODE"

log "  Configuring start menu layout"
cp .\LayoutModification.xml C:\Users\Default\AppData\Local\Microsoft\Windows\Shell
log "    Done"

log "  Set file type associations"
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NotepadPP_file", "", "Notepad++ Document")
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NotepadPP_file", "DefaultIcon", '"C:\Program Files\Notepad++\notepad++.exe",0')
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NotepadPP_file\shell\open\command", "", '"C:\Program Files\Notepad++\notepad++.exe" "%1"')
$fileTypes = @('.ini', '.config', '.properties', '.xml', '.xconf', '.log', '.inf', '.manifest', '.java', '.nfo', '.conf', '.cnf')
foreach ($fileType in $fileTypes) {
    [Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SOFTWARE\Classes\$fileType", "", "NotepadPP_file")
}
log "    Done"

log "  Adjust PowerShell file type association" $true
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.ps1\Shell\0\Command", "", `
    '"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "-Command" "& ''%1''"')
log "    Done" $true

log "  Block outbound network connections on firewall"
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce", `
    "!Firewall", "netsh.exe advfirewall set allprofiles firewallpolicy blockinbound,blockoutbound")

log "  Remove Windows User Experience Pack"
dism /online /remove-package /packagename:Microsoft-Windows-UserExperience-Desktop-Package~31bf3856ad364e35~amd64~~10.0.19041.1266 | Out-Null
log "    Result $LASTEXITCODE"

log "  Staging postcustomization scripts" $true
cp .\bitlocker.ps1 C:\Windows
cp .\postcustomization.ps1 C:\Windows
cp .\check-biosupdatestatus.ps1 C:\Windows
[Microsoft.Win32.Registry]::SetValue("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce", `
    "!PostCustomization", "powershell.exe -file c:\windows\postcustomization.ps1")

sleep 15

# SIG # Begin signature block
# MIIpZwYJKoZIhvcNAQcCoIIpWDCCKVQCAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDWvOe8Map55rVL
# mrKqpXpKjiB/qGoRR7nab6BBA8yevKCCDh0wggawMIIEmKADAgECAhAIrUCyYNKc
# TJ9ezam9k67ZMA0GCSqGSIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQK
# EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNV
# BAMTGERpZ2lDZXJ0IFRydXN0ZWQgUm9vdCBHNDAeFw0yMTA0MjkwMDAwMDBaFw0z
# NjA0MjgyMzU5NTlaMGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwg
# SW5jLjFBMD8GA1UEAxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcg
# UlNBNDA5NiBTSEEzODQgMjAyMSBDQTEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
# ggIKAoICAQDVtC9C0CiteLdd1TlZG7GIQvUzjOs9gZdwxbvEhSYwn6SOaNhc9es0
# JAfhS0/TeEP0F9ce2vnS1WcaUk8OoVf8iJnBkcyBAz5NcCRks43iCH00fUyAVxJr
# Q5qZ8sU7H/Lvy0daE6ZMswEgJfMQ04uy+wjwiuCdCcBlp/qYgEk1hz1RGeiQIXhF
# LqGfLOEYwhrMxe6TSXBCMo/7xuoc82VokaJNTIIRSFJo3hC9FFdd6BgTZcV/sk+F
# LEikVoQ11vkunKoAFdE3/hoGlMJ8yOobMubKwvSnowMOdKWvObarYBLj6Na59zHh
# 3K3kGKDYwSNHR7OhD26jq22YBoMbt2pnLdK9RBqSEIGPsDsJ18ebMlrC/2pgVItJ
# wZPt4bRc4G/rJvmM1bL5OBDm6s6R9b7T+2+TYTRcvJNFKIM2KmYoX7BzzosmJQay
# g9Rc9hUZTO1i4F4z8ujo7AqnsAMrkbI2eb73rQgedaZlzLvjSFDzd5Ea/ttQokbI
# YViY9XwCFjyDKK05huzUtw1T0PhH5nUwjewwk3YUpltLXXRhTT8SkXbev1jLchAp
# QfDVxW0mdmgRQRNYmtwmKwH0iU1Z23jPgUo+QEdfyYFQc4UQIyFZYIpkVMHMIRro
# OBl8ZhzNeDhFMJlP/2NPTLuqDQhTQXxYPUez+rbsjDIJAsxsPAxWEQIDAQABo4IB
# WTCCAVUwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUaDfg67Y7+F8Rhvv+
# YXsIiGX0TkIwHwYDVR0jBBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0P
# AQH/BAQDAgGGMBMGA1UdJQQMMAoGCCsGAQUFBwMDMHcGCCsGAQUFBwEBBGswaTAk
# BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAC
# hjVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9v
# dEc0LmNydDBDBgNVHR8EPDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5j
# b20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNybDAcBgNVHSAEFTATMAcGBWeBDAED
# MAgGBmeBDAEEATANBgkqhkiG9w0BAQwFAAOCAgEAOiNEPY0Idu6PvDqZ01bgAhql
# +Eg08yy25nRm95RysQDKr2wwJxMSnpBEn0v9nqN8JtU3vDpdSG2V1T9J9Ce7FoFF
# UP2cvbaF4HZ+N3HLIvdaqpDP9ZNq4+sg0dVQeYiaiorBtr2hSBh+3NiAGhEZGM1h
# mYFW9snjdufE5BtfQ/g+lP92OT2e1JnPSt0o618moZVYSNUa/tcnP/2Q0XaG3Ryw
# YFzzDaju4ImhvTnhOE7abrs2nfvlIVNaw8rpavGiPttDuDPITzgUkpn13c5Ubdld
# AhQfQDN8A+KVssIhdXNSy0bYxDQcoqVLjc1vdjcshT8azibpGL6QB7BDf5WIIIJw
# 8MzK7/0pNVwfiThV9zeKiwmhywvpMRr/LhlcOXHhvpynCgbWJme3kuZOX956rEnP
# LqR0kq3bPKSchh/jwVYbKyP/j7XqiHtwa+aguv06P0WmxOgWkVKLQcBIhEuWTatE
# QOON8BUozu3xGFYHKi8QxAwIZDwzj64ojDzLj4gLDb879M4ee47vtevLt/B3E+bn
# KD+sEq6lLyJsQfmCXBVmzGwOysWGw/YmMwwHS6DTBwJqakAwSEs0qFEgu60bhQji
# WQ1tygVQK+pKHJ6l/aCnHwZ05/LWUpD9r4VIIflXO7ScA+2GRfS0YW6/aOImYIbq
# yK+p/pQd52MbOoZWeE4wggdlMIIFTaADAgECAhAFEg3W08Ss3uSAihKAChYEMA0G
# CSqGSIb3DQEBCwUAMGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwg
# SW5jLjFBMD8GA1UEAxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcg
# UlNBNDA5NiBTSEEzODQgMjAyMSBDQTEwHhcNMjUwNjEyMDAwMDAwWhcNMjgwNjI5
# MjM1OTU5WjBtMQswCQYDVQQGEwJDSDEQMA4GA1UECBMHWnVlcmljaDEWMBQGA1UE
# BxMNQnJ1ZXR0aXNlbGxlbjESMBAGA1UEChMJT250cmV4IEFHMQwwCgYDVQQLEwND
# VE8xEjAQBgNVBAMTCU9udHJleCBBRzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
# AgoCggIBAOeaXMlEzCcl/YFheOTiqcGlcahquUGqGwoqChBXqGeoKL8nB46vNgMd
# eKm6ivXxGf7uvlOdfcIVn0PB74qeqdRtnzG/E6mGTV+UaNsvaEaRNT7vUFQQ9o+y
# oYgwGJGtrlt9O58+i+A2fUkG/yZnXPSD3RdTLECoyuiYl5taxrcUEII5V00lH3kQ
# Ah88or51ET7Pxv7rY4ZQ9ikfaG4uvTpTqqqjYP1z+3PyLlBPQjgAMvOxM8IWjNfC
# TB38Fd+Eo8D1sMTXOs4Ts27KL0rPns/awzlDBNuDWBJGxLtl2bb9VizgLVHEHuPr
# TPaTTR5arhSQdU+x9oX0kX8jjUWQE+HDVqexqoi+X+JJGHCX4S+rEGokOlcqq0L6
# fMWeD2HpFVIMq131ibMT0vlM0t3X0twotGTm5S28tubyT19u7+JQ9Rta4PDu5+JW
# iZiulV5aSIjkCjIan/RMKAGzTee6wZnI0eeHKSnliZr1nqhEt4d4NQrLP35EHsxx
# Ss/DC4gf/gIQknh7u1c/SsWn4RJf65fMUhERjqInybek+0FiNM/IHb0Wy0mciuBK
# aolqUPuwCt4A36sCEuyE5Vw9Ic2jhLMHXhzo/LiH8gpFveFU6mwpOl/xyTdGRnPj
# V+Kia16yfQlSdSXgkWH5oexILdWHwRaQ/H5xQF4VHrLdCM/shWE9AgMBAAGjggID
# MIIB/zAfBgNVHSMEGDAWgBRoN+Drtjv4XxGG+/5hewiIZfROQjAdBgNVHQ4EFgQU
# MGoSLq8bMCN/OIbK12YRP+XXyl8wPgYDVR0gBDcwNTAzBgZngQwBBAEwKTAnBggr
# BgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQE
# AwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzCBtQYDVR0fBIGtMIGqMFOgUaBPhk1o
# dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkRzRDb2RlU2ln
# bmluZ1JTQTQwOTZTSEEzODQyMDIxQ0ExLmNybDBToFGgT4ZNaHR0cDovL2NybDQu
# ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0Q29kZVNpZ25pbmdSU0E0MDk2
# U0hBMzg0MjAyMUNBMS5jcmwwgZQGCCsGAQUFBwEBBIGHMIGEMCQGCCsGAQUFBzAB
# hhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wXAYIKwYBBQUHMAKGUGh0dHA6Ly9j
# YWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRHNENvZGVTaWduaW5n
# UlNBNDA5NlNIQTM4NDIwMjFDQTEuY3J0MAkGA1UdEwQCMAAwDQYJKoZIhvcNAQEL
# BQADggIBAHs0iImarS84t4jRD/4IttOIYGtvJGCe5AAqCvInI42VLeUkeq6IfNI8
# 6y5YsgrYm0WBnl+AN5IX/QZJtzX75N347jjVawZbmcs0JXKmmQyEgUaAuhfpIn8Z
# WB1+UZ8/dhSJD9FcgR6G/mzJh5uEEkGHxJMp1K3AbpJYWm1XqpJHlFYEEN/Te2RZ
# ek7V+W9NnCJKeSSWksvKbHXoXphm3Y6+8gSkMJw3TxR44R/MsrNRJwUABMmaTBOa
# xRkLlHYaOcZ1nyPnD25dy80WBKjnNP/QifKJtKVy9kkxy8BH3w2Q5gdqJB4Y74xf
# zqHAQxEqBasnf1gWVxeWMNW//Ct0SUI60vyrspmhSNJ830omaogy/6g/pzQ0AxWl
# oPlyvV6ipoJZ5KDZkD8iGNS59PmUwNv/rL/0/O50ggUdC4QfLBiLUavMbYbI685f
# sYK/RrV1bt0C8ux2oVigDrQLaGriLq2/wU0ywuV9FUDWurlXHSALcFnHMbmbmw9t
# a4+XcJiZ3F7qlTvwYUXW0SO2O8C7XKu47TwFFNeWe8glUKeSm60oSGcFA0GXtGCo
# asIlrlR3FTaJgfmkyiughotZtlFO3O7WPbbIiPmY66nLQcJP7rQ5F7gXSBN4abIB
# fCDOaEZZwFhycRGS+5wMSPR3l3wS9R49Gec/gu+N1o6df716shRmMYIaoDCCGpwC
# AQEwfTBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/
# BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgQ29kZSBTaWduaW5nIFJTQTQwOTYg
# U0hBMzg0IDIwMjEgQ0ExAhAFEg3W08Ss3uSAihKAChYEMA0GCWCGSAFlAwQCAQUA
# oHwwEAYKKwYBBAGCNwIBDDECMAAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQw
# HAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEILO+
# VxcgVZO0YJI3hnlCDyhymL+LDj6z8ilx6SY0X4JIMA0GCSqGSIb3DQEBAQUABIIC
# ABbIOvt1JHJJJpcpuVb4z7DXuE+PXxpw/+ytAYUui6IEqGDlna+xs0lNf+XDLGLu
# 89H3zznF9TG909gFGPt5IU7QX2mfFpIO2U41QzgAKVql3VtyxrHq52/1sRFMLP7L
# TOVrovKdqLSywP7fkGNMfZwiNEeX2LiQGaOo9/MPz4GX+6XKnhq9EtnxWXhtwaF/
# 4UiQHKtCBuxtjJRDY1fnPHH7CDk+jrGdjGYYYahiD72Hhwg+bC0Q/lu9dfN7Z4Nv
# Dw5WsgPHI7WxVCgG29RbALIQcQw1g9rFduBsZCpWU41XCFKcDUFYpQMTn8WduDTD
# Hz1Vh4/c0BK9PMACXhfPkjCaZz4Gdp7PsPFGPJM2ijY6PbdC2QhaJQRWeuFRijY6
# Bu+icuiQNDuR7ZAXkcoIGGj76/FzFoAUqBblSqaRYpHxIE6VolNOi6pBqcJf7vfa
# XV58OIGUQaJliqvTHMgbRGj9MOnS9zYRZO65xluZXWgF7wCnsQ1uebF5jzlHqrZm
# 8T708PAf1+Ic3ZrlvhuwSfzsDbJerWBMaqnNZtjTt4sNllKB1gZNeJQ5DNhpoVfU
# wyqC3HWv5q/c6N0sskr0SymUzVKQWe4WyZe5H8f8vxbhNHO/Y2nKZ9g9sAXVn1Nm
# JM71+tHvNJIcLuYtZWnwbUqADDsvEmJXaHc4J1PKWfzVoYIXdjCCF3IGCisGAQQB
# gjcDAwExghdiMIIXXgYJKoZIhvcNAQcCoIIXTzCCF0sCAQMxDzANBglghkgBZQME
# AgEFADB3BgsqhkiG9w0BCRABBKBoBGYwZAIBAQYJYIZIAYb9bAcBMDEwDQYJYIZI
# AWUDBAIBBQAEIMDodHHQk6pph3IkUN6lRZgksaPIftK8TbCeDXkdmrdaAhBLEO74
# GABnIuTaCvsuCCaYGA8yMDI1MDkxMjEzMjYyNFqgghM6MIIG7TCCBNWgAwIBAgIQ
# CoDvGEuN8QWC0cR2p5V0aDANBgkqhkiG9w0BAQsFADBpMQswCQYDVQQGEwJVUzEX
# MBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0
# ZWQgRzQgVGltZVN0YW1waW5nIFJTQTQwOTYgU0hBMjU2IDIwMjUgQ0ExMB4XDTI1
# MDYwNDAwMDAwMFoXDTM2MDkwMzIzNTk1OVowYzELMAkGA1UEBhMCVVMxFzAVBgNV
# BAoTDkRpZ2lDZXJ0LCBJbmMuMTswOQYDVQQDEzJEaWdpQ2VydCBTSEEyNTYgUlNB
# NDA5NiBUaW1lc3RhbXAgUmVzcG9uZGVyIDIwMjUgMTCCAiIwDQYJKoZIhvcNAQEB
# BQADggIPADCCAgoCggIBANBGrC0Sxp7Q6q5gVrMrV7pvUf+GcAoB38o3zBlCMGMy
# qJnfFNZx+wvA69HFTBdwbHwBSOeLpvPnZ8ZN+vo8dE2/pPvOx/Vj8TchTySA2R4Q
# KpVD7dvNZh6wW2R6kSu9RJt/4QhguSssp3qome7MrxVyfQO9sMx6ZAWjFDYOzDi8
# SOhPUWlLnh00Cll8pjrUcCV3K3E0zz09ldQ//nBZZREr4h/GI6Dxb2UoyrN0ijtU
# DVHRXdmncOOMA3CoB/iUSROUINDT98oksouTMYFOnHoRh6+86Ltc5zjPKHW5KqCv
# pSduSwhwUmotuQhcg9tw2YD3w6ySSSu+3qU8DD+nigNJFmt6LAHvH3KSuNLoZLc1
# Hf2JNMVL4Q1OpbybpMe46YceNA0LfNsnqcnpJeItK/DhKbPxTTuGoX7wJNdoRORV
# bPR1VVnDuSeHVZlc4seAO+6d2sC26/PQPdP51ho1zBp+xUIZkpSFA8vWdoUoHLWn
# qWU3dCCyFG1roSrgHjSHlq8xymLnjCbSLZ49kPmk8iyyizNDIXj//cOgrY7rlRyT
# laCCfw7aSUROwnu7zER6EaJ+AliL7ojTdS5PWPsWeupWs7NpChUk555K096V1hE0
# yZIXe+giAwW00aHzrDchIc2bQhpp0IoKRR7YufAkprxMiXAJQ1XCmnCfgPf8+3mn
# AgMBAAGjggGVMIIBkTAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTkO/zyMe39/dfz
# kXFjGVBDz2GM6DAfBgNVHSMEGDAWgBTvb1NK6eQGfHrK4pBW9i/USezLTjAOBgNV
# HQ8BAf8EBAMCB4AwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwgZUGCCsGAQUFBwEB
# BIGIMIGFMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wXQYI
# KwYBBQUHMAKGUWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRy
# dXN0ZWRHNFRpbWVTdGFtcGluZ1JTQTQwOTZTSEEyNTYyMDI1Q0ExLmNydDBfBgNV
# HR8EWDBWMFSgUqBQhk5odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRU
# cnVzdGVkRzRUaW1lU3RhbXBpbmdSU0E0MDk2U0hBMjU2MjAyNUNBMS5jcmwwIAYD
# VR0gBBkwFzAIBgZngQwBBAIwCwYJYIZIAYb9bAcBMA0GCSqGSIb3DQEBCwUAA4IC
# AQBlKq3xHCcEua5gQezRCESeY0ByIfjk9iJP2zWLpQq1b4URGnwWBdEZD9gBq9fN
# aNmFj6Eh8/YmRDfxT7C0k8FUFqNh+tshgb4O6Lgjg8K8elC4+oWCqnU/ML9lFfim
# 8/9yJmZSe2F8AQ/UdKFOtj7YMTmqPO9mzskgiC3QYIUP2S3HQvHG1FDu+WUqW4da
# IqToXFE/JQ/EABgfZXLWU0ziTN6R3ygQBHMUBaB5bdrPbF6MRYs03h4obEMnxYOX
# 8VBRKe1uNnzQVTeLni2nHkX/QqvXnNb+YkDFkxUGtMTaiLR9wjxUxu2hECZpqyU1
# d0IbX6Wq8/gVutDojBIFeRlqAcuEVT0cKsb+zJNEsuEB7O7/cuvTQasnM9AWcIQf
# VjnzrvwiCZ85EE8LUkqRhoS3Y50OHgaY7T/lwd6UArb+BOVAkg2oOvol/DJgddJ3
# 5XTxfUlQ+8Hggt8l2Yv7roancJIFcbojBcxlRcGG0LIhp6GvReQGgMgYxQbV1S3C
# rWqZzBt1R9xJgKf47CdxVRd/ndUlQ05oxYy2zRWVFjF7mcr4C34Mj3ocCVccAvlK
# V9jEnstrniLvUxxVZE/rptb7IRE2lskKPIJgbaP5t2nGj/ULLi49xTcBZU8atufk
# +EMF/cWuiC7POGT75qaL6vdCvHlshtjdNXOCIUjsarfNZzCCBrQwggScoAMCAQIC
# EA3HrFcF/yGZLkBDIgw6SYYwDQYJKoZIhvcNAQELBQAwYjELMAkGA1UEBhMCVVMx
# FTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNv
# bTEhMB8GA1UEAxMYRGlnaUNlcnQgVHJ1c3RlZCBSb290IEc0MB4XDTI1MDUwNzAw
# MDAwMFoXDTM4MDExNDIzNTk1OVowaTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRp
# Z2lDZXJ0LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2VydCBUcnVzdGVkIEc0IFRpbWVT
# dGFtcGluZyBSU0E0MDk2IFNIQTI1NiAyMDI1IENBMTCCAiIwDQYJKoZIhvcNAQEB
# BQADggIPADCCAgoCggIBALR4MdMKmEFyvjxGwBysddujRmh0tFEXnU2tjQ2UtZmW
# gyxU7UNqEY81FzJsQqr5G7A6c+Gh/qm8Xi4aPCOo2N8S9SLrC6Kbltqn7SWCWgzb
# NfiR+2fkHUiljNOqnIVD/gG3SYDEAd4dg2dDGpeZGKe+42DFUF0mR/vtLa4+gKPs
# YfwEu7EEbkC9+0F2w4QJLVSTEG8yAR2CQWIM1iI5PHg62IVwxKSpO0XaF9DPfNBK
# S7Zazch8NF5vp7eaZ2CVNxpqumzTCNSOxm+SAWSuIr21Qomb+zzQWKhxKTVVgtmU
# PAW35xUUFREmDrMxSNlr/NsJyUXzdtFUUt4aS4CEeIY8y9IaaGBpPNXKFifinT7z
# L2gdFpBP9qh8SdLnEut/GcalNeJQ55IuwnKCgs+nrpuQNfVmUB5KlCX3ZA4x5HHK
# S+rqBvKWxdCyQEEGcbLe1b8Aw4wJkhU1JrPsFfxW1gaou30yZ46t4Y9F20HHfIY4
# /6vHespYMQmUiote8ladjS/nJ0+k6MvqzfpzPDOy5y6gqztiT96Fv/9bH7mQyogx
# G9QEPHrPV6/7umw052AkyiLA6tQbZl1KhBtTasySkuJDpsZGKdlsjg4u70EwgWbV
# RSX1Wd4+zoFpp4Ra+MlKM2baoD6x0VR4RjSpWM8o5a6D8bpfm4CLKczsG7ZrIGNT
# AgMBAAGjggFdMIIBWTASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdDgQWBBTvb1NK
# 6eQGfHrK4pBW9i/USezLTjAfBgNVHSMEGDAWgBTs1+OC0nFdZEzfLmc/57qYrhwP
# TzAOBgNVHQ8BAf8EBAMCAYYwEwYDVR0lBAwwCgYIKwYBBQUHAwgwdwYIKwYBBQUH
# AQEEazBpMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQQYI
# KwYBBQUHMAKGNWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRy
# dXN0ZWRSb290RzQuY3J0MEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9jcmwzLmRp
# Z2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRSb290RzQuY3JsMCAGA1UdIAQZMBcw
# CAYGZ4EMAQQCMAsGCWCGSAGG/WwHATANBgkqhkiG9w0BAQsFAAOCAgEAF877FoAc
# /gc9EXZxML2+C8i1NKZ/zdCHxYgaMH9Pw5tcBnPw6O6FTGNpoV2V4wzSUGvI9NAz
# aoQk97frPBtIj+ZLzdp+yXdhOP4hCFATuNT+ReOPK0mCefSG+tXqGpYZ3essBS3q
# 8nL2UwM+NMvEuBd/2vmdYxDCvwzJv2sRUoKEfJ+nN57mQfQXwcAEGCvRR2qKtntu
# jB71WPYAgwPyWLKu6RnaID/B0ba2H3LUiwDRAXx1Neq9ydOal95CHfmTnM4I+ZI2
# rVQfjXQA1WSjjf4J2a7jLzWGNqNX+DF0SQzHU0pTi4dBwp9nEC8EAqoxW6q17r0z
# 0noDjs6+BFo+z7bKSBwZXTRNivYuve3L2oiKNqetRHdqfMTCW/NmKLJ9M+MtucVG
# yOxiDf06VXxyKkOirv6o02OoXN4bFzK0vlNMsvhlqgF2puE6FndlENSmE+9JGYxO
# GLS/D284NHNboDGcmWXfwXRy4kbu4QFhOm0xJuF2EZAOk5eCkhSxZON3rGlHqhpB
# /8MluDezooIs8CVnrpHMiD2wL40mm53+/j7tFaxYKIqL0Q4ssd8xHZnIn/7GELH3
# IdvG2XlM9q7WP/UwgOkw/HQtyRN62JK4S1C8uw3PdBunvAZapsiI5YKdvlarEvf8
# EA+8hcpSM9LHJmyrxaFtoza2zNaQ9k+5t1wwggWNMIIEdaADAgECAhAOmxiO+dAt
# 5+/bUOIIQBhaMA0GCSqGSIb3DQEBDAUAMGUxCzAJBgNVBAYTAlVTMRUwEwYDVQQK
# EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJDAiBgNV
# BAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQgUm9vdCBDQTAeFw0yMjA4MDEwMDAwMDBa
# Fw0zMTExMDkyMzU5NTlaMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2Vy
# dCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lD
# ZXJ0IFRydXN0ZWQgUm9vdCBHNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
# ggIBAL/mkHNo3rvkXUo8MCIwaTPswqclLskhPfKK2FnC4SmnPVirdprNrnsbhA3E
# MB/zG6Q4FutWxpdtHauyefLKEdLkX9YFPFIPUh/GnhWlfr6fqVcWWVVyr2iTcMKy
# unWZanMylNEQRBAu34LzB4TmdDttceItDBvuINXJIB1jKS3O7F5OyJP4IWGbNOsF
# xl7sWxq868nPzaw0QF+xembud8hIqGZXV59UWI4MK7dPpzDZVu7Ke13jrclPXuU1
# 5zHL2pNe3I6PgNq2kZhAkHnDeMe2scS1ahg4AxCN2NQ3pC4FfYj1gj4QkXCrVYJB
# MtfbBHMqbpEBfCFM1LyuGwN1XXhm2ToxRJozQL8I11pJpMLmqaBn3aQnvKFPObUR
# WBf3JFxGj2T3wWmIdph2PVldQnaHiZdpekjw4KISG2aadMreSx7nDmOu5tTvkpI6
# nj3cAORFJYm2mkQZK37AlLTSYW3rM9nF30sEAMx9HJXDj/chsrIRt7t/8tWMcCxB
# YKqxYxhElRp2Yn72gLD76GSmM9GJB+G9t+ZDpBi4pncB4Q+UDCEdslQpJYls5Q5S
# UUd0viastkF13nqsX40/ybzTQRESW+UQUOsxxcpyFiIJ33xMdT9j7CFfxCBRa2+x
# q4aLT8LWRV+dIPyhHsXAj6KxfgommfXkaS+YHS312amyHeUbAgMBAAGjggE6MIIB
# NjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTs1+OC0nFdZEzfLmc/57qYrhwP
# TzAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYunpyGd823IDzAOBgNVHQ8BAf8EBAMC
# AYYweQYIKwYBBQUHAQEEbTBrMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdp
# Y2VydC5jb20wQwYIKwYBBQUHMAKGN2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNv
# bS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcnQwRQYDVR0fBD4wPDA6oDigNoY0
# aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENB
# LmNybDARBgNVHSAECjAIMAYGBFUdIAAwDQYJKoZIhvcNAQEMBQADggEBAHCgv0Nc
# Vec4X6CjdBs9thbX979XB72arKGHLOyFXqkauyL4hxppVCLtpIh3bb0aFPQTSnov
# Lbc47/T/gLn4offyct4kvFIDyE7QKt76LVbP+fT3rDB6mouyXtTP0UNEm0Mh65Zy
# oUi0mcudT6cGAxN3J0TU53/oWajwvy8LpunyNDzs9wPHh6jSTEAZNUZqaVSwuKFW
# juyk1T3osdz9HNj0d1pcVIxv76FQPfx2CWiEn2/K2yCNNWAcAgPLILCsWKAOQGPF
# mCLBsln1VWvPJ6tsds5vIy30fnFqI2si/xK4VC0nftg62fC2h5b9W9FcrBjDTZ9z
# twGpn1eqXijiuZQxggN8MIIDeAIBATB9MGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQK
# Ew5EaWdpQ2VydCwgSW5jLjFBMD8GA1UEAxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBU
# aW1lU3RhbXBpbmcgUlNBNDA5NiBTSEEyNTYgMjAyNSBDQTECEAqA7xhLjfEFgtHE
# dqeVdGgwDQYJYIZIAWUDBAIBBQCggdEwGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJ
# EAEEMBwGCSqGSIb3DQEJBTEPFw0yNTA5MTIxMzI2MjRaMCsGCyqGSIb3DQEJEAIM
# MRwwGjAYMBYEFN1iMKyGCi0wa9o4sWh5UjAH+0F+MC8GCSqGSIb3DQEJBDEiBCBb
# MjwvnQjAtwsBE8GzRLoIHfYRSeiwO/bYjcgxRkMCsjA3BgsqhkiG9w0BCRACLzEo
# MCYwJDAiBCBKoD+iLNdchMVck4+CjmdrnK7Ksz/jbSaaozTxRhEKMzANBgkqhkiG
# 9w0BAQEFAASCAgCkacxEgHqtJRutvTVI3SdwAP3vVE2GHzIllA8gkNk1nZeCwaIA
# WhmziW85X3lgKpRjt23i0Pgw+qPKIWorsumg2ORbPguivwPFUVUNvDDTlH7qmmw2
# FCOEllzGTIwI+eE98cA2Ph6fV59CGLcGZT8N1yI7JTYE02s97mh/msWOVgxKT2jW
# 469Zrb1bS6ofcevNejpVkkZXRzDksA1q7JjB/N7UtYbyaokRiSUGQ9K3iGLK1rMQ
# ZTu2GLPORfdZP35hQ6FeBMj+7uYeNMN0LfwywZm7Jiiveh/9McaTlWKcTkkPcYLx
# XYnXrnB8c8eAnMP6p7XkjHk4AZXnVfmQNRYhqY2vului9usV9CULoCESmG9+TtKp
# bFqpn40gygofu4j+QukhmbQXSRj3naY9VGcIuZsUph+qN9bU9szobEMCAXkjDf2j
# YwTDo/70Nh4+XEBi5kVlp5lK+Ao8PVFkB3+JdLLAuROUSgVDVwD5JfiWy4RwgFiw
# Ibmf/8LPgZcPq7pa0s5oFSk3Y5J5HBszQLORRhhiTI+tAlZxKkzjT5m4+dt6d8FD
# IFzBxz3Go8PfgHG+dpjpCvRx8unI1p84xFSPExl0tPiFsofP1TvucoZqnh9yqOCW
# B/z3yRHvjiqerg/JSbTTsjr8YNCKVFYoS69wfGpJ/ewvvKkB6UOZpblyaA==
# SIG # End signature block
