From 3feeab415415c0b5ae680c80fded4d6ba8ca0eb9 Mon Sep 17 00:00:00 2001
From: Merill Fernando <merill@merill.net>
Date: Wed, 31 Jan 2024 00:54:34 +1100
Subject: [PATCH] Added Export-MsIdAppConsentGraphReport

---
 assets/aadconsentgrantpermissiontable.csv |  42 ++
 report5.xlsx                              | Bin 0 -> 46678 bytes
 src/Export-MsIdAppConsentGrantReport.ps1  | 462 ++++++++++++++++++++++
 src/MSIdentityTools.psd1                  |   2 +
 4 files changed, 506 insertions(+)
 create mode 100644 assets/aadconsentgrantpermissiontable.csv
 create mode 100644 report5.xlsx
 create mode 100644 src/Export-MsIdAppConsentGrantReport.ps1

diff --git a/assets/aadconsentgrantpermissiontable.csv b/assets/aadconsentgrantpermissiontable.csv
new file mode 100644
index 0000000..6952d95
--- /dev/null
+++ b/assets/aadconsentgrantpermissiontable.csv
@@ -0,0 +1,42 @@
+Type,Permission,Privilege,Reason
+Delegated,Mail.ReadBasic,Medium,DataExfiltration
+Delegated,Mail,High,Phishing
+Delegated,Contacts,High,Phishing
+Delegated,MailboxSettings,High,Phishing
+Delegated,People,High,Phishing
+Delegated,Files,High,Phishing
+Delegated,Notes,High,Phishing
+Delegated,Directory.AccessAsUser.All,High,Phishing
+Delegated,user_impersonation,High,Phishing
+Delegated,Application.ReadWrite.All,High,BroadImpact
+Delegated,Directory.ReadWrite.All,High,BroadImpact
+Delegated,Domain.ReadWrite.All,High,BroadImpact
+Delegated,EduRoster.ReadWrite.All,High,BroadImpact
+Delegated,Group.ReadWrite.All,High,BroadImpact
+Delegated,Member.Read.Hidden,High,BroadImpact
+Delegated,RoleManagement.ReadWrite.Directory,High,BroadImpact
+Delegated,User.ReadWrite.All,High,BroadImpact
+Delegated,User.ManageCreds.All,High,BroadImpact
+Application,Mail,High,Phishing
+Application,Contacts,High,Phishing
+Application,MailboxSettings,High,Phishing
+Application,People,High,Phishing
+Application,Files,High,Phishing
+Application,Notes,High,Phishing
+Application,Directory.AccessAsUser.All,High,Phishing
+Application,user_impersonation,High,Phishing
+Application,Application.ReadWrite.All,High,BroadImpact
+Application,Directory.ReadWrite.All,High,BroadImpact
+Application,Domain.ReadWrite.All,High,BroadImpact
+Application,EduRoster.ReadWrite.All,High,BroadImpact
+Application,Group.ReadWrite.All,High,BroadImpact
+Application,Member.Read.Hidden,High,BroadImpact
+Application,RoleManagement.ReadWrite.Directory,High,BroadImpact
+Application,User.ReadWrite.All,High,BroadImpact
+Application,User.ManageCreds.All,High,BroadImpact
+Delegated,User.Read,Low,Common pattern
+Delegated,User.ReadBasic.All,Low,Common pattern
+Delegated,open_id,Low,Common pattern
+Delegated,email,Low,Common pattern
+Delegated,profile,Low,Common pattern
+Delegated,offline_access,Low,Common pattern when used with other low permissions
diff --git a/report5.xlsx b/report5.xlsx
new file mode 100644
index 0000000000000000000000000000000000000000..d6e7f11fc64436013f944ecadf2e284673c46a17
GIT binary patch
literal 46678
zcmb4q2{@Ho^tU+Xd5)5yl6h`YIHp?}LL8z(%2*kqM1~HTle!rW4bGAAsN9NBh9;Dh
zV``8nlA$Z%l$mes_t3rf|K0mN|L^H}ysGu?ckMOpwSH@DYjYNy2oneVS<hy$_vY=8
z^EE4&m>%#kF$ps<G3_(<^9^$M4RWyy@plhApmyrm(U%$TceBU}#JadYxjD3_xjyJ?
zOq}^fCuydGo$K9+8hhWDXSjcreVG+hrgNJ0PkwC|()8woL1j1W?lHx+4o0p1V*ESt
z%WpgNl%Ku$?CWo+MYrJ2KNlNygXww4DIG`0hbmV(_FiZ`eR`MTxR6q8<!y4b*2Y_I
z`YIpJIn@swWutp-*?zsti@%dUOe*@^j?EhGevO`QUQX%;8IsD(j(=eh<9)RA<O3cz
zW5<#qu>mosqYrsr%T%(6PP!_pt~n~tq4Zi}&EvW)iey_Z?W<;dkH42It$yC3>&k4-
z<WjW#d`Mlc@9+9r1EY?jIjwm)qxCOck~0Tv%$cnV;wO5>cL;i~<`a%0yC^=~l=$1w
z3#rxXakq~joI6{s<h6F%eym};yQN$D5wWn<RqM-cM9-OtO}5-yJ8Kxm?0dy)glu2)
zW8uSN&W7$MC3kq;R6h+IE>AAylk`2CA$x2UUgQsnJ?XiZuAV>bQSkZaLhaR`(NjCN
ztsfdb_Gjt)--f*kQr8b1F1U2<onmG6qF=$h%tFiVUH3y*Z5z3FQMXgkeV6XLp;C1j
z&+rvnt)_7tW$a^r9{3P{Q=OQ-ss`^B7Ixl%$=aNq<L^qg{)hTWonMn~f!a5K32?*H
z<+%INKy@|rGr9Q@Uz7$9+eZh-&<rB`A)e?Y%}+kxSA4N&Tk+ccGMC@zdAIGSj?PTZ
zw%u|5lAzZTN4#-H?gf!T$Yno*>*{>*jYGx6yX?xdoHL><?SzoJUG+giGmlu)c~;@*
zn)ihV41a8Sap9uz<xNu4j`cdBPp;Zs*LgM>67g}N?aa;RlBy3k-)DM#i*NCE(O0$@
z&pjy;$L4It(stgVvt2*q-m5;|ch##&h^tCz`pctXUbM}>Z|0xd^i>d^^n@)su`n_5
z!!}PHRS)(%e#Fhs?+CK+<lilQA8QE2l(>bsG#Q9oB#Y&W73~q6f49o>_r2>*9^OXL
z+b6EKr^GrgUW--q#HCZ8C#yrU#@;jx1pQ3+%w;~5XTM^kv@`XLknZnFoL)n{#hO=R
z+OBSTpZt1XZ%5;93%u<>BIhCd+zWy4TUiw%#gAMH95BD6A=R+wp;3|+d;i|@4{Nko
zB!X)$S-Kze?)xdNzHjBni<T?)U)yNEH6t;$O}C@?>{Y$k8|IH=E{SfRu*9>c{^8$v
z;kaMWlyF@j$6!~%_|{P#2j53h1&1RaoSU;#&=elx_mDX8(_`g+;`6+l1D<|8E-EWc
zP71zzU~%i*jl*o5H|EdUMOlPCJM91NFt2^aZ%jF}@oTQOOls|l)P3_w)rg&=y5?NB
z2&;VDDYp@AdXawcg^061UdF#WxGT!j&3)&7k9S?t(jC!XUhb))UPwC`_|4^f9joAv
z$)MnQ;m?JSPfIQoJx*G=SvK;AXPo%T2o|KHziZ;3I&$7N@LdUX6wA)UB+1Yb!y5mt
zDa<lorakg`qQMjEQa4z$W!L*s<rAm(O3?40;CB^TuW9+G>*)g%KPNW5&J$?jdqh9H
z?nSLZ1hMqpfzH?~HmfM>qSqx7$xQ^=!*w4=rsn=&c2mh<^-DEj)02FAY_s}X|F73b
zPC>C-c)eG)zdm`y%+mSL3(H*H)NlEA_xoSR+|Q9}wyHA9st@?>hc%1u#^)4QGQTPF
z=eNOA(#Httat+muJ^NBme&(K`(4V)*zfL%Qfa30NDKQhi?xHQLF5jiyoQIC~Y*8;+
zXK;IT*3ngck91R*8EN;GwD8{DZYg;edcS^2Npj9Itn<2Eek|!>&C4*2cL%1w92?X6
z!!J;}Y4}#y#JwraKm53*Eri(fpI7Nn2BurhwMXzJmG!+HKIOV`f#IZuJj&+Tz*$Zt
z@xROUpAt{|?YjHWJ|-qZ2^`bPzq}&Q%iTRFP#t?{BKNpj-E&8|A;fc9iKm;tlBguY
z6qkGc<eCRnjwg=p2sUZnsJdns&m~=-@n^>k-tTW(`%<|ne?h=;dSBuG{>zyonJ320
zbJG8~EiM$ZIJ!6;89COoFflu-KbyjDFgG>Q(6cx`(I&2*9r^RqWbMM#%ktXA5p{#b
zzJi`Pm-6Pt_azZy1t|t|vnjQ+-#@i^`b~{S&OMNhn4TWh51)C`6F%LaQoHaWZnSn`
zEGZ>&>icZ@Vr1>~)RRe<$k17X$f=PG>Bx!8ev$K^J~X&2j?MDdF4Fs_``u^8<M?~R
z=ZB89!^%JT4I&mYI+~me7Cy!CyF^Y5sD>?ma7mw8`05wAI1N0!EcYv3ES+tRnEHO%
zC1Rn+Dsr-<@7UDbUG>NxNd|q3U*Gdb&fK1vzMH+UZ(*dbA#!nO@zng6jO^NZ@yMB(
zo`r$9QT@4@wz%549>2w(FQyt6rv^smzVc^>Pkh=8j6JYg?CZ;37<y7(JO81eJZ@xs
zAadesO3(b%z~X>sPvmS{^z<}5=d&XhVDa~U`t#p1va_vREZ&SA53O`jD{p(@UKO$M
zu4HkluOOvou_toH?(9fMRsV&r%ma(V%uigv3!Pmn!UJmgGA8Cv-nV%3ses*QpeH4A
zezLE5abbMCE@ZpQH^0TH?bZ7mCcf3y&i&|d8J=z%I=R)Vum7Z!%d0094<6Fru;#;Z
zZ)(;2!&Us}-9jrZ%F7A2-UMtPS)6_EvN%6dJ2g5AYfd(-JvH5{ySr^<{CG|E{(`mz
z(e2f9mN^-V!(0YOPEn<wj`g3cPU(9gV?T8{uE6YRhPs;i<b=Oo&$qtmlX@d1-!}_d
z@e4P<QTJ^N3f-D*RX!9}J$m`n%;m&_xTJy%b?4ak-jdy6Tdsa<o35#S+H-WfUeI=4
zmvc}0b$OrkFKB)68<;N+nYo-&5O-lxeRtoBpc<ON+_-u(M`XmzsmUJ&C7?TL{e_{s
z(h)O@v-gIr4CW@w*}pZ^ZfBn#pOEfZs9k6%agG@4kDQ}hEt<`R3l*r^{JzC6A$S+h
zzFz6ySC&6DkPmn#6e!e|K2@;p*1q123GdUVloDps_kI*SvZh`1!WWxx{+$zlENIKT
z?3+<Pqr?AaE%W%P!?j`BUp$Y!GB^_WDza_+>&TuRTrw|zoMPV@Xt=QA!k5IkL(-YT
zTQ`f3WY0WPmU($%o|>X^MkgbJHMf#JdgOD@U}WbaPm<2@xfg18E*_e4JWo;IA+30(
z^f*&%<BFZiJK$~3t=Ox!Zymx9ugFbfxnO^uqRg(+x<4oKo$03I=L}wG{_G!I%X-0{
z5AU><$s2wTl#|^d9m1MBtv-Xkhpnc0vj2=}r|0<thu1drdu~+=-#W9Cu^f7B=Gm2<
z&sugkukdzBr(axJOYOi`*NgVp8}z%YZ5J+oX<3-n-y<ZEHDAk;JIy=KpKx|{_~F=*
zd&lV)9p3r|I@S)aRhAh^%f9ch=H&Z@S8q)>IV{Xfq}Bc`36oY#c$&tZTRjes(Y4w~
z%d5x3Ka1XbKgT~(tbd2O)p`2JWaAUx_sX?NM{muI3@Ar_b(w~bB`EXnJl!vxpxm>=
z<E`)M{@G{BN6W(%-|eu+cLI%b$lGJ5`-3mOOsicC>mQv5GBde={uSOOVepuJ#`FFd
zd^;p&WE1}+2#^&RnEaL&_u-yHg!sGt(`_%BGZqS7zkTpCO7Y>-jt%+Ma}S^X5O1<L
z?aM3Bq^x<&U7*QqapWfJs@RQWn~|^8;U3CHq8lhGu^i#~Oqb-Cgyrx`+=4Uk0w4TT
z)*LBW@#qG<XN}yI8M%jrKRFL(zf1i7EP2B-Ygwag#fP~Z56^PsY~}LE*Nfwj+a}cZ
znuS45e;}8f=!tU?vwC8T+qwI1#Oh1LnnJ>UuJp{bh4;p1BaCxxWFM>D75#Kk&?;vw
z*Agr7=?WwXl8E7Flg_|>thl?h8=IsAgzwNV%c%<2>YvQKsgiQzl+Xbi4OUVrE9ru1
zsp+Gphq)?p>aEw_Uyvcic*Lm4X<nO2zL?JGh*3A4it-n~L(gQkXq4Nt_9d62$x)oV
zyI|$TpR3h%XPb=f8i~0YrAMUax*Lf}%Uh*rg+#qxrXOC1=(7=h%<n(DzHmKK(NR9U
zLjLejhJ};-;W5<-dVJ=FXVJ3eNG>XJUadDSn69&Q-6JNrF(Khri>H_yWA(XQ_g>a-
zYIoE6TMVqMMU2z+ZO`m-G-1heluarm!>c*bLc+DNGfhSo&zLQqwT|YMT5P{N<rW$t
z(pE10;0{MVlkgpZwnn47y%zS_nZ)O|j^SU@NcU1WJY?l}d#n)Nao73&9hz3amLnPO
z8pjK%o(ic;Oyy7!Q+5Pk%7&2Oy(-alnW>OGccb(J9?Iq?Xtt>ik3?K!w|wQaSp8F{
zK<{OMRbY49>M5NK`m@M*WTUpUc%KiN84q2vMlOC_iNtJ?$Yc>O(^%~4(HRI&u$r%e
zOJ?vwIoZeM$e-H#1lRQc;Nes=8PsMaiL4+A7{XVYN(a!>t+(vAY{#KmJ(EEPf~06O
z$HI*-(>8?W3vZ0hBH0L@;S@9>h+;NrLRc^FykpsHH1lj^qYN@aKr(j~^1<YJChgB2
zuFtT?*;ue@vs{vkcQdn?^BL6Uo-c3s%HjIzrpmmV+4}?+=^D~C={mYfVv#GChN8Ka
zViLTbNdz@$u9uGpr)S21Sz@-JnK$xO`vuaLjYV?~37O`db(ikMyD5QbrkaY_c23Y5
zTYo86GjH+6g*x%JiR+|mrkbJ_E9BjGfyLC>X=rPpk34-^B5Pv-_8^-$ROw>jojJAf
zbJEavg?vAQlkS2*jx37eIA&O<5By6L{?smcT3Q>6yDK0p?SPZlFPUmhi%Iv+cKnH~
z-%S_s0oKf%eU=}17j5DJ%T81rshr=q4zvFp5+CgN#aWda5+5ROuIJ8Y(msDv<>7uO
z$1|Buj^OG|WodcMRYGkGjw&SZB-1d92v9`ltLij&Fd(h%hc&a)HcO{l$-4t@yS|LK
z!hSv6cHdM%X7_XDbyqR4r-|DkW0fJNNXE#DUR<x@>uoAVvgOv0HP_0Zz!#dHo@2aH
z@yICK5lsGR<{OHOr*~$>iztH$-R;AF%Dk$=<O}u<BBp0%k}hD3U9%8wLN5ENif=y3
z95%Di^!2+!MYKW%s61EY;aQdE`)|S89`ava18>d=mF4g@+RBv>sTtM`aR0DJQfpX)
z1y~)HV#WH*RK(F)*n=o(C=b|Eft7ljzS7hyN-duCHdpbbL~V<YQpTif@$7dCY|}>R
z`V(AD?boCQ|Hcr1VAaD9?)UC&=lUkYb!%zUNx&TV<|{caHI0BQXAN!?Jsx4)BzTIs
z_&4l$6h3=fISI&RxixP>Ecqt?+S9{zJi-mJR5ah_2=64GPFx|pS@iT!qtT1fJK#o+
zunUo2yD$~mk43zkkIdR-@UKfBnZ>p|_kpc`$0I4zN0=1~vSvUy>}^s8Gu(pq5V7Cx
zpY$j~J~0-v@n^;2(IXU(wuo~hx!1w+HoN~uzUIqM)^GZE)AH_57gf#{Rn8YFRDdwQ
z@D+X$EBvyi@QZxmbBht~{aB3D+-xKoY!nl>_3%4}loS|J0uez36&yGMe)n|RsWWi)
zw;WfoEYUmhQQLlUs~y|$@ARJjh+bm9Yko!T@oYyg`)6`o-`=WM&^6*z9yHmf|6hCN
zQA2x<=57*c1{<NkwiGH3)qZS!vii=ST7Q=)h!cHXy8@X4yk$Gvec^8msR~E(PG7!v
z9t<OqVHluXOs%Zo;;iDNBma~B&Q#Rt5RtC`5w+77!#&vK{bqVRor#tAMtM1br+~gl
z*WOo)>IWRXGVRmhRDN;&qqE81RR=nTuoK1IRQ7T{YH8PbF8<z`5N^8uKdHZ8K$atd
zjsbsfBtIk}g^Gv!-*>4q!p28uhTqJ6;8#nDIxWaBxg`NbA)|nI-fWuWUXo`<#3MLC
z#3I=y_k>?fo7PvJh_TQ4C?tG`G+L_V;^SV^(HM4<p!MsGX&>dW5B9x0$cXxF{MB<l
zVxAu#We#Vs4brg5Bi1jSVhjrsWSwkX^2?9TYgi}c{$W5Mc?iV&U2lyghb-&&FMh@q
zD#ZU`)38rCV?Qzn9^<~Xq}|g);``AV&N_*x$LjV$T<Pk3U@X+uEhR*nnxeXTxOJwK
zaD9PnWo_e+Oi@xraa$h5F1xUIU)1i--+Q^^D)Qzi@aFQLv!4>YYh~Av=3c$j*KWJ^
z-jnwcMAw=%f=yf&5ffj`9dMEziGMU7H9eL3W>*+@28tNW8nRIeB~h8)&FJ~GG;*BF
zgH_%X9f%zZK5sqm$!(_&ucK1251hck3CocsDi=@XvPhJnDrt<pT#0NV>_AB&)wY(}
zswJCLLTv*z+YvA|yMj;&=tR7OUI|Oz!SH3m)fqw>ijIV<YX~QV2!!QK3SL8*R1TH-
zQqP!b&C4W+9XZt9^Hl68q3%wh>LySbCy&K5Ibh2JODTv6eiK4i8f8N$h#(+~a3K`z
zAY6sx8y$skeh9)x&{0@Oefso>Sb(1sWJUig;_Ry4?ox;`OKd#Nu3P9XZM#n0okLwd
zG~$6JbST>q+&Xb!$dD4+briV}kdO3SJ{fA)u?v%judOn-#vA+e!@ZkUMr9^=`$fx=
z99(;^DMmRGpU1YAP=geE9nKj{gofL7fbYtoj7v_S4a;&!nIwB0rcd#;BvF#U!6$!k
z1SvWR!g<V*LJbwgWQZj=NQR{YKi|Z;IwyF$kbdb?RBnojRxX~3RYl6dxf<b+a@wvL
z!!yCV$6pu>C6T6{uR{$_Ms~6i@+`l%LLfm?CV3M9luV3lg{KJV+1Dt?1Wv)3jj8um
zH*?g)I!kY)E7cq{2R&juv|BThtafYH-o8xO-Y&tJJmK_&6z6X!CCi)mJ8|mnrHpJh
zq;WJ)d)GZ@BkFQh8?>WJNN;x3RT;hF5}a9PLe!SQgy^N8t0Onk!6if}E(+c+WTVtm
z-|V1NB^oJ`n47Bgu9{k$)&=w7$gyUIe9UN<Mb+LvwYfEq1<66`EN<o`?`%C|6cR4d
zSgeq`e4OW4b3ueei8kq!;X5q3vQa3RH`?{$sdkdVBt|{;xdu57<QGZkS7d-=&%@n1
zC-qUXbSK{Go6D@|rF1xKBRA217LtA?ShD$PF&<@iIN%G11yPB^ZTm>&X(>vn?;PAK
z=9Hi2o(*}k!qv?-x^NU$mJjSm@NP~)(YJNiX+B4jp>_G;FXce_r^Z6RX6%*(h5FUs
z*E1Wi1PO|`ejC}A|Fm?Jgtm)b5JWG`iy~_Q5$Sr{#eXy(ICd&t#;o9%=U-j&{Hu^3
zrs&^=SLx;(lDP!oOy)>w4H3?>UDoJdN^<Q@5@lT?J+{^4tvkesWgZwtrMqNQx(VKk
zcA^ZUx~fB+*A7Be-0}t)`Sp+pBflP6C-1EClc7%Fb^BU4B9Wo6Jy-r)?*2DRnVp7Q
z9}2<w#9jON1jFj8^pw6>+F2k$ys^i*`rhQoaYNcP6%Z9Bg(cHG;e@|wXxFr_)(wRz
z1J97tc1@QHNxyWDQM(I@ULu{6VpL5wntrhQi>F6;BgG~b{vWD5mLdRElQPPuR>itg
z+&euPN2yzP-TV$LtvSQ#Xi_JFrO8V2OR7Js(z|edGGYi-eJ;AAAaC*PRB?+HUn2b6
zi6@+$o%WdwqgOiR_H58RXrApD&$;jE4k*r7Lo`&?kL!+$Q|-Mzjy9nB$L>zK&_b}r
zR<Rai2!{p25Dp)UjX6%AuFY)K8Yu>bj=Z>@*<I(^j~LqLdbQNl#1=(cRk<u?VV5Fh
zbO5XNJ{g~k*c;>C%Q2*Xx2#{#eiZ)Y*B2U5z-<+?u_q>!tX}$pH+-Syv6gqzqFB-F
z^_uRwg1<iS8EP%`fm%3*v^PLt{KGVC|3bG_X{kk(?^wdmg`K6r0V`4TFJ*nbYoEz=
zR7iBnNvdj&v6oI&ZPz@Qv?V!oG#C!aqhnH&3xgHGEdjsSKZ_-ys&b!&+U{)yS2_#7
zcF)RYq$fC3E^HZ|7d$@N%Q6AXUvb`jQw?`@-vN_GsOBE<!L!b?!Nru>X+>iBnQ!yf
z=9l>-!V1G@rT=W+G)E6~U}q7H+QX6WwDy8eng;FMKEFH-nzG@T;x3k(9A!>NWq&eH
zen@N~N^0*;ljsd9B61lXX0!2*ExgN?74X$NmZOv-Poj724;)cqo++uVm1ptxOu4d6
zrtJC4l7#{$9s+3|@j^$)66M!C;#VeF&+2yIl?`2gGq~4V`tyVryHC?fCGDrvw!p+Q
zo}5-5n*+Q$eXrYi1f2za7P~jn%mhd+{KZ>TUw&_}u~I+e9vffGro=&%Fv*k1`9so6
zo})?NqA2Cw9Z4_4!uivzl=cD_rvOTOgS4Ao^?s#rlVcmL4LRttN<Rdjci^=R$ti`m
zIQo+=>X*u-&cu)3kGVFqc6ZH5@^9HitvfzDu!x?;OXuv7ZgJ(+5ys8L^CVf<xD6R|
z8x^JOyuEKQQ(vwg(H_Z58N7|y&^O7`mup09&;<{OQNkSC;>6Cv>mKDa?QoN;Blu+f
zax-Z`FJ3zV=J0s4aFe`^Gz)>jwMMFjhlYW6b;eBm-Uq-0%RZl;Eq?;}q?vR8{WYFd
zmeydhFL#gh#bcbz;U*RRSIhhDZMgX?h);KQsnRWEE}q&(vnShjoa%}Awn$JT8`0jI
z&)Cc4cBX_2i1rwGkR>QTS3TpQn^|viUU8EnMq<@qf<(}P$LGQeHLv?rZD>2iYR4g`
z9dD*>(I*O8Pbm;vQ7tDDna1t49%P!FkzaQt{Xb}};GMdw<?L5Q%7j>b;~UMlHGA?d
z&f6BWSyvuZDmlYt_?gXSD7L7I87u@nD<-A_JFS&%KE@7K{b60R_d}fIX6mccT2~$L
ztdxv>6^8A4T^jHgZNrbTLsd+54ptIgj{?T_q><Zq1UWk?WIN4?TVLHx7|_dnrA&?z
z7&NvUKBQZ6#v=+Z-4?PUQT@6WEvj!1{BD&q(P~uGOnh~ksyq5T$a%$*Lfb-EkwQtY
zxCQ3&7=kCgIxTcHL(D9EPSw?_fI4x_VnB4sRx~kQ$SH`IjH8mkOA-9Op(Vtd((Wnl
zLofRGwau*;Hh#biV2P3G4du0u9uL`_=)N>m#k^!M`4e2oUNo;}kmvf>f4g_adiapi
z=q@|7&u~7w?m$8a==AGaa+LLOv>j}9a4k6#1c5K%sFUtzb`szU=imz8L=z78qMZ8q
zE>1F>DiS7Eeo$kXdBwe$q3?QxtGk>E^k(5t^(5|rL0YJHBWmZcP1SqxG32(P^>kTk
z_34d!V0U$;KiV7UZfC~T)xliAxy0IP`X*cT+ew;s9`TnoRu;<OkS~**RLGe!8c*8Y
zqIwCp&xoBJPcZGeaFAQCtzq?QY<Y6nCPPPLz;T7`4LJ7|FL6YDc?IEAE0u6BLxmrj
zhSMrhTB@nd`s`8Tm0XRU!l|rF-eF-ahP>lYl$PN%wSr%jBM)B8Hnq-=8Gna~J!<?N
zEV!gncn?!4*}}R;Ni5hO|JT|xtG8?kyA?I=*mdL$+Gx@I?|k{4B||bwR?eJWzbWi?
z<{T82J{vaD7H1#zk#O6qPDl0S7JvDv{bjw{CXaQl^NU99F4$sBw7Wu)QOe$Hp`3qn
zKsd>}4wokpj`@cKDL+qwUF&;g<3rDYXtw3(b&1G|MXyUl&PMSn25C%2e*ckoEHS}_
zT%+%s!?kgC9L(AmxU}QBv~fWEga`Rui92hlP^!mK@&*rD>8V$5<0Q4Ir?!y-!D?_9
zQLvNm=JKk)SpZKV5p`Q2#(Bi6nYXo`V>xiL@cy4NzN8~yFy_^VsPpNEa>hjq&v=~e
zg`duxjc+8t2oeokIUxR2<;CpDX4xFHGS*Bwu-yR(N3mPfNU2*?4(+oF+Qq_23FWx{
zk}LY~4J(zL7p<i_efSJ1s@k@Azm?k7vhhtaN-s4I*yFW*_28LKK9#9NPLt6vUgwY{
zrfxe)sXwPw$=9pgz+=auTb44qEk7qy5De$D***vy$Lp>(NcbDyG$F3aDR^u&J$5F%
zFyQ)dQS_9U7Lp=wPAhMlEha^H1`Lcj+GE6W>8-COLi!#Ky{9DRMJMEeT&{NZgpHCK
z4cwZB_N{nX@gwNTm74VmF4U~OTmmFnH$}@AZzS2>hOFyaAFaLtu3flsO3HS6$2oX8
zi<4Q~LZ$BNKu>v;lfUair{<0$>@9ZQlrW#M@+v)Ef~{0jixaXmnVdZ`ZFb1gm^1Se
zx7Ehs(F<IM`QGr!Rks=`(uj0j`=K8r12uSX@I3s^7`#ag9zI}3#L*M`Vl(Vzj8(U2
z;N%o=op>u;PK*&byil-Esr33*XB5gfOzgN0bKOLtOvcvByGx+Nm#6IGLy>2z|By0$
z2HGOCZ2llsd|_MGg<s@+Z&3unX|W&m-XC$N(;6KM7L8J-jTrfWe*;D6*_9_KnBnA<
zShW;UV3oPBtCFcdZWU|k$BOobD^H|MM}b;;@q<^v?cwU{TjPGk)zGE5dU{18%L22L
z|Nh}auRfiZ<7z{3Rbjim%_*G$|6eXE!f@FfjpQSjn;a4`+3fB;pR>9R$!6cSbA+vH
zUhdkzEK1w+3{f7p=o^166N{0*>OC)~j*(Yww+{)?*&Hme%zB6;#`^OYI(!k)oIa0;
ziWe%YpC~BlsHQSYRa8IOOBigi^THM<P!i0D7BOrf7g0&FV)mIC#*skY(L#o>J%Ep1
zQ_QB9#iokRkL!{;Hbp7kG$x{cz9EDrgD*e%aC!Rq_>>$xwom5pA}%_3YdFph;^zgf
z@OZ9poQ`nn49B1-<rKFCp4*7RZ%Aoo3(etI74f5dGfvhgMAncNRIue|v|;(7X0*J4
zun7A!4y7BUnJ~d0nQ-9ntzKJW_hZ`4cT@(>?IK>!QIc7>MYtFo!&dN=SLm)5pqW`;
zdsz{G!veYZhO_F%?y=7s!NPb0_(Y1fu$$Rs9lWE3cZGjs>VGeU)TDo#bR$gAF;grt
zW8<v#b*r>Ab$MlO2-`CPX)~l7C~VUj4!fVZGt7Y<XwMtPFQ#FVv9GanoOZi&=M0w-
znI9O34}pV(TiCNHTt0sWB`KuBFhLuPb(4N`QCL{%*TRL2g-zVgjO*E~P~D>TLvz=(
z-0u+KXIAfQ%urHvvDhQFd^GJs`Xs09YQ*&y_hLC1i5w<qm?_qn@rwQYMi(kMO!Hq3
zkG2X;K2b?b{kwqcRPfV<trt?&343Ztxk%!e7yW(*^P)?s-d!ZCB{$6(H#Kp0Qef2;
zNGniMs-5o=-w7#)2uG1Xe4)TjU`Fx68Rvkmm66q}V0l>qLs=SIsGNYR2=j<>GM-?6
z&B7irkNJ_~k})>wsMTI>Wq94*YbJa1k&`xL6)34#ec5{#geW6mqj-Vy1rj3BVsC!H
zA+B|WtnB&tFMB7}&1fUj-ST=nZyG+|07;R#Xu$$vz>GFt=E6|3j_<iBFN``LZ-tBz
zyogzkz#6K>>I8?Xz)n#wh)A~N6|giBmew&r;e}O;H&lo>OU#VOr!!dOL%ZZnL+J*d
zYABq>oXN&3z;Reo$8g9>8f60((br6(f$3}(-cYI}{jg*yQhbUJ4U*Y>Ll(%A*etED
zGzrik0XZZ|Uni-fDk2yl4QbDR5_1dxjTjW~MYHW7ZwQojTLA~@$ox#VrYQSq$bT)O
z^KTX)mlI*NfifWE4^N?hOmvcdGu}=J2+^996<a=F0zlg6fC<PXhdCblX3PUIovLa1
z!a;?dI#x!l_cNG$DPS$j(S%om0|~f2w~t>NLaud{n;<w()@|Z7l3`o#)<e=hO@+t5
zcXY);&Lg80U8wWqvnx6-&@-yHF8+*t)I%Of?VPd#J~EA!4Ock?p25<imFl(^6ElkN
z{o(PfI%`FMH>isyw|K9`PCMNG`)c0xM3$#-C|Xat+?E$#tEh3E|0N_);e(>V*MjRc
z+s#BOWII(3WS+{q&A-vt?$}QsUo91~kwB%P-Ti}|H_mu;g)Zo89!sw$u8ML>VBTzU
zGVf}^D)u{H%NlPv1YSM}BE(L`O9vRI;-v!+^~WD#>9iNMbRwt^Z(D6|`NPLo``5Br
zRJ82<gIP-W5S9ISWh3v{XL+TgI(-i>emIh5ULv2tRVWjbu*!O^=w`A!9OsoHkkftM
z6E!ZLxb=>?HN=wrp`w+kVvXX(?8k@78uJ_i52Iw=Jd7f}XDlWH|0t<LUuSKqy8SE&
zh0HLlCgO);;K+J7kX+<koFBT8{p9jF@jG+)4DFmX)I83Djry%|VvxB9?w?e8tb9zd
zM(?0>=Wt;0<FD_V=QB2<lU*$!E-bf~Z`z~|(oxXWRR4OiL)5r?@)`THkI(VapYn7D
zSKWZzSDX4hRQnTQS+i#y7@9rn5Y>7PB`_ZG-_1}2Wk2diI8~kbT?quAX$Zj+ouMe7
z`f^6qaLfbN1tSo2_I9dTiB^qm<PmmWE|8j@J2F<ia%H`O^EnPI0eqK+%(mwJh`sxp
z%g=B9O4A-JrD+eCQ{62w!N=b!9i2ONT;_f^bud)B<rl9eOT3ymoEbkU#q1<#rfqUO
zFT6m4{r9go&2DYJw11fai{q$5L&+1Xf?u8tS(Ks!$yR4@R)9=pH}!L<cF$M&<$e8L
zj5MEh@ONdymL?n~fh@DO@e}pLtk7bg;g_rRMVCD+&We$&22P2<d8s{vYHe8~MU~XN
zBgkirhW>*%_?i!g&w8#d0nyZx*J`c!RvT11h|>9zRl1NrcHxz}WR$uvf830tH*QPG
zJy@7l7<7n5FChBl8s9&SlUEVgt1t5*Ra8=R6`)caB9}t;7G&KOV#3Qv4bQf|YD;EW
zPj^nEJy4_|>8_%l6-x6Z2|*UQ*@Cm~YR?m1LoADo!AOGzEBMn^<;QRV=HOc>W(L0H
zq;O2{gNABqy*tlF%nN-KMz(+0;?MEJxr6qgXld10w5lYwDsNsu2uBB_PNiUu#b529
zNB0daL?vzPFvTQqReoIS>o(ptWA84J^6%Q%vWeKT)+VC_!RpI$jBO>NZ7JrUZHd@O
zX58*#xN8o!s&KV~CEYiRv8qoFS~US%)x^6iwbmAgRn<yn+pIS8g*Csersf3Onj%}+
zY$v*2>4OF#_1-mKl9E|p{;Am|Zn1SAO1X>@#H%l>F<7{dNfu)v$VPH=-N-l(wy+vn
zI80oxcKiK7D}&$<8rHH3A6%&?Sc+crvVgC_&+6WasVF1Un<g=<_QijAc(vR&h+Lm+
z+aEia!-iCmpCp&&8?TlKsxT3+3$Q(nx3huj{<qqs-dAnBJ*Lg-1C6{bro4z}3vpAW
z4*~~7%CDg}`g)J;g>{Lm=G79H*x*T9m6L>^B43hPqTPMj`wG5#=!FK}V?EYLz%8RW
z6%#>Ef?FnD?5&i&UkC`)=h&f~oq6zHFDRqMG@z@!hQGKlO~L<qk7>ZbQ0!>VK!*8$
zvO61*m}8&wFgZfJ4kB$$(lwX-|6(`)XZSL|X54j^C4B7_0XMq@4zxqWIsPQbCbt!R
z9zc%4oGrJ)MQZl^VmPe(`vLmg@#6m={+3l@%8K+sf1vPf`v;7+<iBV;YqE3x+Fd<S
zEtGnHQ1P;3SI{Gf$w4ed{?Ud0#*obn#h!5%<k|@7W_wM4l=a|U;<Z6z?lS2;g8(fN
zboCNSDzs28W;2uu#d)sn8N4)%r6wL%A_H=^BkWO!SZIDqQ87v%2@Y1h+_!j8X>NC5
zz0wcO6QYnmwiBY{e&;}Syr7F;8A8wWb9;!A;ZRPF{jkR%F{Ot>kZ&?^Lm|(sV%TDX
z<-YOi<()>&biwS;qllC1dI{>~3{H~MffF4k;G_-8pE5o394!0keQ^^Y3!=p{z>0{}
z3#Wx#eBDu^musYklB-H4B3}M8v&iJgCM?Y#>$gYn+#lBZi+>uy2fqIGftwldfl_Dm
zfl%~;l3d0IzG5GEYWR+?ox_gx)1?ZRVj|>j7q}jq<l*HxSfJpOvFN)MQ1~26^`1)Y
z15l4>u@OKHBGo5MDEKIX7IAwzNQENL><*oQ`YqXef0vF81E$kskUL@IrC~yoOXS{}
zK%VOk<d@P{B%Z#<K$j{!zar6BcphPgqwv=7#DCNt4F~$B8-O1kA_o@{Fd!meKnrkU
z5vdDdo8}ShBCzv^C#qSqQHB_qAMj>MxQUUg67`dqExGgX>|FFpC7P!#86D0<JEA<)
zh^&$_0?$OeB!iQ2#~9hCVYVqs63HxaXPS-IU--9#GWkKhIab}WYKhLMFp9D*iea~u
z=<oieD9frp&}WxH5nD}S&g2Rg6UDMsyTL#Lr8(b-kqC2HLL#iB1Bq}EP3N1~j#@@3
z95i@$koJf5g6KW|jm!k8nWMTWW0kou3>hmv-xz6%&$7=qfa4isqjCC4e7xL5JUgF!
zb}?W0CMibdd;(?8Z4@Mzxcq?fQ)@f^N&dikt#t=5W6WTN4>6;Qm>Hrm^|SjkDrdXF
zyM?qr1P1&3;!o>4h|U~UVr0)$EPFOW*)tcfb;Rr4c<%G&;TAFaNnF5+KD!d#nlM<N
zJv+lu2&JHm=!}5q42PFI_z~n!(*fI2<wTcNpufXg(TR|ohZnXK_|T#mV%JA`Jf!8k
z;8T)1$q(u@`IfVO0bWTlX5vZ8Z)B<=f4(7ubvDGhBx2ng$+2MzLykIwhB{t*IdGjZ
zlEhdunYJYZh(-p$iwr;q3?S)EGovh*q{~R^sNk4KjGz#TUSkoB6+(M>v%r3Jyug0j
z$lhJ5-M?*Yk7BWfzp%HE56TL7iTmK7sBp!K3YiP2sKBG50;&*D(bxtO!vNUy;@K>@
z>n^XHMM5XD{~Ir7#(#z}@CPos3>TFA0PAt;*|COdV5Jak2P%c6Q7IITN}=+(RnAL>
zzQ%-zneGNk92L)>k7r1Q8A*i;NktJ!W%MyB`4mA!(O$GtYp$S=>*&@S2OsG$@PrOB
z!V{tqp1><f-d-n5W^F+A5r2*$h7ip9pCd#^%vP49fGrmB@1gM9P*R`(-6OrCT1ce4
zYBR(oBk3rkY+kyF^j?L<g-(RM{yPG}lA7Hoh{Z8m@(vq-E0%CwX1y$C242C1@Cro?
zufVg2^jIBZaAS~?V}Nm^P3yBBIy8f-Pjbp|GpghakS#8p+m<43z)<MSgu+tw$)aaJ
zAENWG;UZ*%IK#B&Lqz7G;wSQ5A+9N2*q((U8yvZSY$!sR3gI{3psiv`(#RAmKYvlv
z2W}5HUmt2_l%EEu{9NFH@^eO8pCcf?ds#uI3<a@<-r%BpaWULk39}VEvK3~_zFux#
zQ49zZ8MG1cLM6O4xq*sL`8RD&$$T!+FvJ*P4HaR<B8$l2Z6(@u#icqJj~HP_bugEX
zKF63M&$9oBELY9u9b|yrxz_=T%5~Nb00oY90K1Fq#Fxy;JT<gO^#2pYqte7}DU2W*
zgM3I7`H-F0nb=dzLJVzE)N_n5{cwdBDbec~QBfK}RS+83pa~!<DSh@7=TgWub}@;=
z>{e<<%MM~1Qawkmt`3qos2)OHU$lT<v;=0hLp1RgiZ?}M5Fb}#CpF{tFEKHh->6E^
zgAvaEw)UPAgGob6axq47;X`uK)k!{5D?Omh(5KXloGu2k4bn2G#x53d4Cj|Z&L4z1
zKLxPa-Amrg7cMA;2|Z}gyn~|tuMyNeR_uQ(ldSsWG5w{bxxxjPPYQDaEd6gMh3~m?
zO-6*X8%!$1e3@)yMTi0KRKEZop(wCNR=`H~0`g9o6_DI&D&;^JTFERZ!hDRpfw{#<
zmZlF$0AcX?zn)vwPkUS$E~HCew=5Rh4$6kMCGE!{?Mor;2YE?u&R@cw{zlwp&3X7=
z6lB>~Kecx0bdI~Wto%@_F8x2KPpy5jbY}g78aF+*hWQ7@h&Hq!#4LD%3l2C8OoS(!
zLQjG?EzvqlmRWmb+siEiqyi-kE1GEAIsN7SpDRYIZQ;tMFiVC48=A1^y?X%LIKG|G
ze=6!Q$%9T=s+t>bGpfr*P5iXP9;{IWz;I35ITo8!)ST})RgIT}#!D!R$w5ZdY;y3-
zcprsP-;QAQt<R`kM>nUOOIAzVQZu=z8np_&V~eVBrhkfJg{YRAWs>^l?znp%`-{)b
z{tWEl0U+cdPwr!$T&G`+lirH3wa=ln8meat?PVL;er@AVN_{ew<}BNkw<;Xf6arA)
z87ZUoGd#_$t6BkBg)+BQ+0tB_FZa!nH0KiQF2D+wg%P?`YKN{@@Lj8jAw4>TEU{WE
zSoj=8i)D|~UtD`r8C-i)adnjnD{evy9NHA6I)}uee0CcWm2~`z7BwBv4ioZp)T~yo
z#Oh}$M*SQ_JJMlTk{`_|UHKC2Dh}#mrK?nGeg8q`e-^|}X|&>B1+kpyuYwp#*WF8)
z5TkVEuC`aD`#3EXnUtL|P#j}LrcuCteLqG4zY!SlU0q0dLydK|<VC<hm-R-GBL64t
z)}4SJ`6wj6=#!1bKq-C<lnNaz8>Tq488fO;ep96`4Lz(HU1Qca{yB~URTZy|iTA)z
zJu&)bIW@kUoF20Zs(0cl`2Nl^Uk<=r;#M(-)&+zVKKYy8x}f2;nJO2m?P-tV>1I1Y
zw6v*+j6ammXU3~y0fiP<--S9@o1krx&GL?J@7{KK>un_rZoi|rhm!I<AK-TR%gm{9
zx;RFY!=XCio*8$ZKKrZUZq)B`CZM+Djxs{7k#w6qN*ngEDp*A@;P9<CLxoqQBXs_X
zeKldlPmkTjfRW*53Yn7ZP$h#Wr*Qtk)ITP`z_>jLemN~ztNFLn#gZd0yR;3l#Wy;k
z#l6tt*VikIS3`$%k91(e*~`x=O0BEr@A7Y)v6Gne_(qb!IM-4`oL3;u`-D<!tDtEC
zpzF5`f8o3gu}05qmb^*(wC>B5E>YOYu2j7<Mn9j<3@3Z5x%HJT42%|$YmyN80mvE?
zA8ih-#bI4i(ddg@;TAmTpwT3ex1`IUGOwXa^^<(4CZtnXrKDby`CvUHrLa@ybFkA;
zP1xyB9a!lu2I5}1@3AGq&?Cd8;u|Ob38Hfp*~>tKHxG}gbgB-5)88r+0WWDt1{)_n
zT&V-w8Vr&)lF6wTc$Vsk0)q%Vqgt~8q)Q#$)n#gz?>+Xw8{tkl;~z{=llNPOMs%TK
zlZFj~-Cbi78nNc9p#roi?P`(=Es$dQ{_Ku3lNL@xMuX-nEbNxrQCfy$!IhZoh0{jm
zl-i7@PY>bkY8-5)eRF>GITDuo9Cq>w3u@w+<a5RkpuJ{?Lq?sgq|{?+_p5h-@j*@j
zKI(c<8y<aanU9?D>cqz2f8zr`eZFwHg(40ultve4_WwOKvPO;n;+jptDw-2(<s>u)
z3u3LDhq9kfi>8hKdwWKQ#9$;hOnevW<%I27<Gg0qbU}7sPnjtVwSudsi~FQ(UnaeX
zbfva50RCRx(SR?(0SJp`fjo}NZep4IkhL@mlq0%odA`T~C}Y0I{+#tb94`VL>H9Qy
zA6axB#wSY*H1Y)W{OXXmBr@iES`s-EM=iCm`JU#7rL<H0+9$CHYur`-XbH|WKJ1DB
zDIIu5<=^X*K)~yuxU&;S)7uzH?fT_)cTb)s8EXDm-y{(82Cv=Bt!?tjwD6b;n-es7
zXU4<|`oHo-%AGn@33Ch&HmyWFTW_$`HmTZ3Ynph>Bj_jCIKaS)=?_$Pzjz~2^MX&^
z);+euGa8$9T2Iq44sv99xm~?U;DA^|S;}K*a{^93(*gj0v!wogKJ_<^yaCPF7I}v+
z55>mcV#^9~u8_@9KEJB-ZV-do6sUcta&)V@lr}%rTLsN=xy=gB`KxjYCB43ce2P_|
z;>uJ<m08d!GQT%*_EnF<0`A-Q<0VZ3!AAk3i*F*UWqQQ#^&w{t#K1WtB;q1*44qHc
zdknp0r)Cd}cV-1pbq6_>97(bOt&$AQ^CT+lkHntwxb`MXmh2EK7cAie_~Bc;RTnv6
zZ1%9UPgkMY;PX^#tizCa9so-UGh+Op83g_tfZ8hf8<$#lhTQ+;SFdq}Di*4xYKL&I
z=sSl1U4;pQYvR5nF)r(xNI49X2HN1PPosA=t^j`CW`x1l3fuA}0F{L;9*p&-;QG~5
z8L+&VSz9k*5XMVv%Ai|?VX+d_m|iDDwMD&2Lsf+G^I05%>3D67z4z-Mfn%zG8hg#+
z*D>{mYqJG!9Z0T-!cjK4$_~R~Llu(EH_z!EjkE1Aw#tuV9I0y(kHF~{*IVWPgl>Jd
z^R7Oo5flEr063@Cgi=EXpVL7IXPr9_xtd(<O?HUd!+Xg%z?KsGoWfKmYXruhw^A;)
zwZ`@wizeN!j&>;l80H|ZwAQdi`_!4pH-hJi#6BV$!1$Ub+>qw1T=+QXPjwo6UW%5+
z^Kg(9V|O9>+RDO{sV;5}PpMq0TfB(b>~2lI)tq_`igcb#m8a1AR;XiAs*_Q8DnM(x
z>{BNI0D+?pu2fFM4aP&<Xf?(#!zFlqnC#hRh~l0mSvY^Cd^CvIG6tSPB8JA$T9b*5
zC+nz2)$6y%+nCbsCXg8ns{zCKC5G{wi7xAz!AmsZUYz&zxd1ZpTAUgBf3&L1epr>b
zv?@_ZWb`s>d^{E4OwI4tt|#I`ZwU>)TgTYjV7g+gBAKx_MKZ2T`t2rg?0DIk4VLDb
zb33Nv0y_+v^CRIrrEA5kG&%6(TyDK$)1a}o(HrQNRrkJ{F#Sy$xvR;1t~Vr}ZR7!J
z#5K!#5dhfGw8>5`jM)1(X-LZ!T}82cwsV6XX<DfdKfB#wWa4ON0UVI(<#1%2CLQc8
zK(^^Yn&Py+HY|iCe7ze~QVZ^*Bu)udo?Bj7<A*I4GA!oTDM0E9lZml~**dD(+I;QJ
zfdpVW0wn?1;M1HU=6UjwLaC8ibPAey`D~SyUIKCJri5{t0ej)0gR#JbH`|_rY}Vet
z{O)Y8pD^TxdDsM=j%pJ&+q1Bhw4ewX015S?m@!xKATgQI6!in$Fuz-8Eh&yAoykf>
zKF|Yjf#tGnN{EY9`NY-=^Eo3%cTtJafG~`s9DibmH1ZHl(OfbFJ%h;~hLw7Rso1J#
zF>f9X)8!#>NLg^85fNzCe9%~Lhok^~mArsy2?s{T$>^(i8pcs$_)uSEiGjOF&k!SC
zMfFx}>2SxEg>*6Ge!xeSLF*3MqxN4M1d1`1ZE{2`sNcY7=@>0Jj*q}EWx<beV67*j
zfL!wmgcC?4^XIP0VWc89dlix(MpW2{wmcHC!8S%PAu?~a5JY~jn1j38%e#reZ9;2B
zSoap1NgOqSuh*W@rl2OYJ`8%IV}sU}H?v+aLzA2ZVU|XAT<cmDZ=yc@Rv6x)Glq9?
zL^Qmkqk$8GbHNEs?^x?Vvd5U|Sv8!1FWn>Z8k^m@u{K<5J8l>X9ig3~_L6{SK2Dr4
zlCj+j4z-)vX{8x4-i&Axo0kUY=?0qyr6=cmkK8~3pJ*4G2Z+=2Kenjjv?S8&%O(pJ
z%m6ON#l)M%nB2@u>&<wp->#rz$CXfWM+;)U$eyxvwtS=f*S%HN&)S{BppZo{2d|Ke
z2Y~OKhkyTu>elriY{D|r;ILYE!R)>c3<K;EABe%r5A{Y1ynBV!i%;J;9;0|NXMTHt
z5Y!LBA}*fpa7J+E-dE>^*`dk05ZMbuH9Bge#~8B*z1$4+9ZmERsav)us+S^maC-ts
zZ25S3zP>7fXHO4GzF9LqkNAhFR0k*Yfk(SO7M?|r9^t}{u{7uh;4b2+GHo!<By#wQ
zICEwcjQ#vkhCzS{>SfRoz-a|bfkP0fP4JB}#y2uE(KocwHx7G5?GE_-$eMeP;)N-v
zVl?>LmNSXKPSccpQ*JoRnTy0M5&W1F;LLH@Nyo4tj7_LL3KU%P)`we9_*v;-xR)|5
z&!+|E1z3fkKZ!F^!sQSV7;x<k*E+Jp>Ws~;S^!}h%S0KG0jra7f=MmJkyyB<suLV{
zLOaX6kdDQYLC0-5-d!s-86#IrpyVVBuh|i$PDrXDiK${Tb<#mHO{xc(dbhwlhe01N
z0<t&&OiE<{Svl%}s4KRhwkDoxg2a>Rg~TJoOIw+3!axGs06Q{nOYcpYLQwE9O&oy@
z9CG1yars1;Euw8vr)x?{k^%HwLYiyhxh%Q+?=}<v!kVIX0@md13iG8puecH7q)^*$
z!yu2YiD%>Gess54t$omT<6sg3nsFBaXl{E5?HJ$&!Ob*MWW)~&hI`^&5T@EI)1VLZ
zqJv2YSVQ!9L@$ETGXvgKb4m<@gKf#`Xn1A%>sLIn#*THy4Pks>pGq`jpRAH#pZWN<
zimLT@7<e#qxZpBuXHFoiBajd2mKo{RmW*@@z-@?w1f%$xpO%}^R>74-@`X{}+Wi<{
z;OYW6gsamY(sn>FJA#09qmk?1({jXejh1!0SAiAN?ZWm<z%!8p%xEKJMIvPlHA6fR
zh@*(*qV~y#mh1qlat*I+9}y}S{V>LVF2=to#=lWMURb2|G3sss#JN3T!GgO^8D{%h
zJPYZX0IkNzwC?!fDM>;Y>;#mA*((~iJ>q7J5;tEOY(`@eA6L_X`{#5|$iQ|=cVr_~
z&1fT4MamamokXmoS)UCE5(c1;c#X=emkEe4Vw?-JG9qGJk%lX4hoqDQz|Ycb51D0v
zTtGFnLLC7lNH)w#FhRl~&~%8Av8n~Az{m>WlQ3em&D(+ybIl?Kjo;w*h-QHY<{Kdo
zwDXe82zJzDD3!9oh5<RoT%&U7WpXh%QNlQhL7WuPaQ!{s8FRjjiKN8fM?ayI`o+pj
zA!0?k4Oqc?883ouFz<L~H@M3Vydyi3?@CmSz39w;1!b5UyoA6w4ijsRQsOlZ6Ydy1
z7I7#g2pmM4<-)9nf~-bK=X_H6uP+ocz`>6q^fDis1L`@Tm>ivtbpcRJ=FO__=iR-`
z&=NV>$R*B91|hwOItEb}f%~C3L+P_3JC^{tnndV1^{*<z8XCY0bdeA*e3;-dUI1Zz
zvF|RU=`cidK<I54n=Xw~LWrx$0<afpRTq<G9A=In%Sru}K86TeoKafF9p3;PYZ=GT
zlN6>WW2C1buP8ZVZfw9>bVdn!aU!BnebWJT?m(F4|BM9r0md_H8OX4ai)jo@SWge&
zW02f^lo*~$#XMCM^Hd|2pp@v<j9!cqov@@QyTK!bWuea$BB4v$!bS%n+9bcY?8870
zif9hVW?){=n&S5hk~Ne;kSs3`5eF#>KnT@x?an_+M9MTexc)D-`u(d~lUMZ~TLSS#
zXXF{Z$3j{;)u;zE;=!&3_S!=}JTMUo=;j1?5rs3+fyV4KrO5$PXf+9_`}E6Qc~P8i
zMf2*={CT-W{f8!R7I_QXI&zG3G_65o@UjAc%KEd=ehM$<qQ4Yj2o!5R!3a$i3V=~^
zcy6yx4Km>S)AFdz(yadgy67F*erU>1zyuq@gqR~SfLb%cB9kkGXpd722M-NTShjmQ
zDg1aB1MQ)iFl`r61!zIcKAk^bq)6BN0pQ0g=p%;b2ZY2o0b(|t=Cb)>y7$2J<)Mcw
z2KJ?;`+X^9MhW}oc(ctGPH3}``lWmCzsAp)PN8a|p%?39Kf=bE%n~k?_+lwv2iy{P
zWxm;BBb$Q3!Un8<!yQC3MIT?UELY;_A+zL5gfHj5G8p3$&=pTDw-?0HZ!>iSCtHV(
z5{ANOEB*eN`CbwCfI-=Ye#=1KGMKM{y2Y3F>Pa#h^-in^_6i>QO&aQ_RWSJ?-wOj%
zAw#hV6_9;AJH|*69Z@<-ZtgDDKOLu$;Y+7P2~?nIxfz(2yOQBc(l-a-JdKekKXt%z
zPp0qTg<WTc)Bhswg-IwxJO$9CekTLPbi`21#^GwE;^3V=e{qq2gTaMjF|PkbGNVHE
zGHc5Tg(*-8f=;!us=4;eQZb^@0$J@Vb8QP9R)x_BRZMb_)CTK&uHKS-x+HY)16E8v
z<moUb!jw6GUWj+>5JgALpxy5u32=Aun$XR9c7PiC8~?B-KSV=C&i4<7D&Rw2nP8J+
zg%mWhhv%(!*hu$%MT25C$hW69tf5`CNn_&@6EL&%o!iu!+ki{<!dBDM;w`DDXJ^uO
zTGVp%i^xrM=%Q)VgnWRXow*L@DB`D&sWIH3Nuu+CLUC!{lt`a`X^UrANNPuR#JAx?
zWFzb0Cw9gBd`Ew1f;l;bqgzB_QgKAF2p-9B0iPf5jBdct^Gp!jgtE;`*<yGELe~&n
z$ywW5Oazh7#7~)7cfIVwa~rTxQnnbN`%Rai2M+$wT-mzgO7=!LWUwn);jc04HpyPE
zpdamrc^mxq2Q(<cS<bR?h9^zGckTuxwz+65d1nROICCCeE2K8MeO|ErF?8s5(|jT8
zOnCL4C`qh0lL?4=jS{x_LXn+8&Me@_tZ>68xVwg(To_X%u=5H9mc|K9`olB~J_E>O
zf02I%qzRF4B>}nZ5_t|r-ciA_k=Zg0-@Aqn%V(jXog=vlj8^eNVLb=$G|#%i80i>+
zon3Ws3r2WnZa>VE1l`051qUG122BnNdA~#ZB$_zMd-+(^uEgSm;H3Xsw9)xW*k~8r
zREyk%#G*Mb!Je<5V*pWQ2i@~*XP6g5EbRl3{7MJ#$MLlf2A0qTf4oB>tD)U<HEAY(
z1|poaO}1d;0$gp1;4y;V(FL@pmEC-$9Rqe9|B@g<l7T9mS<c^BROeQf&IpLifS1nD
zjK==NFzO%E>&`Do7Rt1DKNym-9iXwh4T{XrDH4<;gD}Ghy}yPGn3?Q7_CuB4#6wE=
z04!O8uvb4Jx_0?`p1cY-2x<DM+heWd2W9M$qS*AA4-a?$WxiSKzIy9QSw8FwC{k1B
zyR_kYSW&%>`Ui~;Qhi<cDC2UOj0H5X*8%-+qGzpoKbF9V&PQ~)jPo%v==%qwG?E|m
zD+@730e@hlfHx=Y%DOLkS3`n&^}Vs#D9ML^>=P7%rOsIp4qn4_>oGcol`>a$$ZT|1
zDqOpA`F(13{kZ}v{hGxPYJwo!)Xalh6DaZytyfq8R2jkYx}&?W+i2l@LEW|;Ay#mc
zYdNyRwKOcUPXLHdVu1L+s1cOBbiHh8ZFId1tv#?_0dBFO4#EGpxwfk-3r%*(8cW$o
z48y%Nbc6v7+~v_nmx`Q4lg^^MKL@;y)K{8SFh-#by(-E*1Ue#`=+bbj53UwfX&B>6
zwy5<y+|&-^kT4HjVYn^jjS7-whi7wsGgi`Dt6FSs8iIl7Eg<-UXwF1WUaXOo)7%>^
z;jwz~?f|v<nq@Ys)0@cKN&(DkMxhcy+FhnPOESW+JmPiDXI~ARWAO}ahHDB%cM;Si
zfhS7jzhaOU-PQ3;GzemhAL^Q;xyJT)fdtRyFBP}2%Yq-)$$Zc_0XK@!fpm4ff>0s|
zr8i||*cM}HL4WLy!b3fW6_ZDq5q&Oy+GDs`wx4lQugD;Wc`&YMa#nZ>`i}|nhx6gO
z0!96s<v(Kjp-qOuMY4~Gm!cHT3Y@7CR9K)+=5LO;{b5gyr58^e>8s?b@Dzq?El^<<
zisb)|Tt}_v<R&crz2x64_o)@tG!Jb)1g7~n_tsZ}v6q!chV5t{TK}q40D9?X%^$$n
z$YWLo-xMG0XlQrDK+zSN*NSydZ-Py-%4)Fuu0%RGj7Gl+SqFzz@BybK5XLBx^Qsl~
zQrVBjQD4=}cWpKX8_;1<08k55sr?O2xhoq61S4X`h0fAZ4Q#%>^G{cpB<C`6W&2>i
z>7~Xo5al<R>OLk$R`F+aUN580>q35IpLN;0N2QJkOX1<5y2g6n1wV4|h9|D>s~to2
zFMEyGcub8duZn}w_9a@cjK9<BsQG4M^OnY?a8?62>vh+-!-GBWINF{+OO#RtW3rt9
z6YeU>N&D!^Si|#E8tON4lo*RTvj?>8hugLfc?<JC#&VV*CcvpnVBsgXuw&AWfSv1X
z9L59!d%$}J@lFcF2-I~2;vy=p-$j9O$L>)on#SH;#YfPPdJ0Jg<U`sr3Q-dBB+&W+
zxIIS_67hS(nA~13B0a9r_we9riV`In5N~9xXtvk`W{V%dby&{z3f&2Cg#fz5W(xYB
z57rX{sm25&c3S|nVOcxQ^&r{xsVC73iQ7`%Qy9%$RYo(nly=*PvNrV&jANq7Oa*_&
zWac+C5v_baNnM5TmoxHj#=6z9=ksGRUo4bFW6Ln542ayu)cQK{bR|q|dRUuwkaDQQ
zcn9jeq6R5HngoXbfc7>(X1z&zjBqK3O$}eMmx^oT4P=KKY;bpgV3Gi-p<vztm@|%N
zP91%Ys!%}#)J)aEnyD>8H*$u&_)0NvDfBXf%e6U*BM<{yM95)%41A%9_}V6j0D0<G
z8liz&eEti*7`bA~Fcr-j6}R4k_(WLI7(B@slUwa2Wg3btK6K(n>(^h4)6wFs%4qQ+
zQSx?X=t#m;)ffC%g&7qz;5B&nP>1J^Kr)(=hx*wOa_lxwZwCN8z&=++U~RXifY&xA
z`>WI_&BXX^_JYAW!Ruh~Jf3bNh$cNv_IDD756P(+PQNI|u8@8?kGrl=&B)&;bnWwi
z{u&nLZSoL(sxzWDQ#Ty@c7f5X9e8K+)D>I)z1V*0%DJC`F47=KytI?j4_PI;Ann`(
zxD1AFn#8Olvr=erWSS?7UJHAPd2usBM}G8j6S@PZ))pGI54rOY<L{rvf9bwk3d3jL
z^pp|cG+C|DKCAlU&&QWnR`G8XuSt9)ZdMWUiIotqTjsK9`h3yp{iiA<e4I~RiuTT{
z`W`-*MxMLA4?kK?yZgddcT~T9|4+*OKkYmx?r>8DPWWV>?9n`t_`=r=F79=mUU;mL
zCr++XC7$W_qj+ZMi8t<J9W{RGUNZA%4AsZ^q@ife;2q(#j1MAC(1x9?`ZJ%#tWzgl
z$sAf6bM3&-{TynuYVZMSv2$VU7k6<x*+jK%HX-jU9pMl<-TcD0QAwXG!2Y52XnFfx
zZofo;XZKH0<DCl+eTl({x7&n#vJ}RMx&5*f@YCVXel5K)S;M_Cqgp9b+-z^iJJ@f|
zi`{n4C)>23it3)Yb2)uipYQY}ncVGH<SE`AmK!1MqZZa7qi)AH@ffyhD*k`kd&{6Y
zm#tek5ZoPt26uONg1ZHW1b26L2`<4UKyY_=2n6@wkl^k?zXjRn1akJS_q^Y)TXpZE
zC{|MI8LNBr9FL5iJv%M0=`dFSpy}ofe^%7!o`vIKHvZ-%`C%Hj5|I1QCI2L7?a5AP
z{ZCDYJ`_Tu{-hMNO<RG0^Th$6QM@2zt@RqeXiS4{*I)9lNpLSHSQ4ryrD@EBlCzqP
z3IVi7!{LFKy4{B<?OIpY1=uqW3GVvCs(h!cr9c4wS%cUahaiB(4&*rW#gs#o2VS5p
zrJcs=ZbV)SKDLHSsOwVu=8>9dse<WO|7!dCW$wcmX*t=t#Q@S_6BqwQ<HF--XQT>d
z9zUyv%9(ZCk*xRT0XYPRPoXIredL<@bhjc|uNMA+LWdX%hX6nq^;NpV^8kZ5Gx|WF
z-kUXxC<~Z}7B?Q|&h7~g`j;jxWGAHpx@WhdR7nWn!`Pwf0>I)dP^@PM^yV#^i^Hr`
z`CMSqfEH?_7%HbAYVPU>)oj3T#_|K;$?+rXaZ5;mOKVP=rjzZJ)#I@2l1%QxC`I-k
z5b;yA#DI|10We3Kej(>8|C{FVo5yha)ipZiZhg{iOhE8)K3u(N8_6AB{NS|t6(A1d
zJLj3}6)MdZ^36lC{&@<nve!5YfY2*N{uO#IIDA&K*MIS#RSR!UdtJS4uhPfuJPWJz
zF=U)YwA&af<GAACzSDXZ6!6rd<p9*YBp^e>Nfn#m4rsNj(oRXi)T;uzxP;UP)}|l<
z9|e3v@h5AAChB*27wX%y{;Z!L+R>p>y<cDgAWp$~CAc5j(j@iaaT0xTf&(+5cjsRe
zPd!p>vY<5i5E9ZCm+R))tI4%dA%FvL_PA-A^6i;uhQ~3tZ{uAYRt8BkE*_AZ_X}Je
zhQuljE&oQlY0Lhv2rd0&{qv$R^RMuCaDL<&(Bg*xvTx{JIuPxC`1NOP4nI#rUp(dT
zIu<Jam(G0>92#Y9XA89)l^*CLYuFX~q0ibZ4Y(EHrfuA^f1zK4_!oD`4%ZK#RC83S
zekA((OPZska4s<gZDYPYAUXiV0L5<5fSh_jb2sj;yFEnbdBK#XQZb{VE=2{be3ZFY
zgT`7#vf3NUh1H6SOckHy14o6OlB}tAfy37Gm(}}flMRIh_J9cGFBYVrb(ObzAUW>%
z;j@d*T8_U&+f?5TSOwaASX(f?z;M~-&#H(IMZ+a;z2e;uEhEwG|2b~;SBTn_Z$^cL
zRs&9!g#~7;O0zJ4Q%9(<qE=D%vR-1p2<4CNZNZ1rW2k;VU;;&>s32@X@fD*Y{<cTB
zDd-470tJ4ZVs7ZDxO4v1BL(t_@c^)d0+Y9_lNA6kpXmnCZd1(+09w586SS*wp3{WT
zGeDW?hXT}%rM&L9=fgaAcgdE#?$<|vGSe3kc%GMcJ2L4lx3`wO*GHcBhbyd>(}$;y
z_iiq)EE8I9eq1HrAN3yaxSa>$wcK8I)~4SL)AD*=ryqX4KM90yy}6mjYq{P(>mBC3
zz6^xtb-UeKn-k%=IpFoUUDyCrh)!>HzFq&kaI=lx>a2bn0jOJDI1H!(y>z#KqV4vx
z_Ws&j+fxgDig)fz=IrW#*X?8vuhkJ5jB`apMwRytGT|Nx@2mFhsv};@-Fhed{pHcx
zXTZ0d|G>I<tgW41+Fp9+`A{zWX;JX!<-!-}@9xS01=?*uU%Y_*RW97t&e=@g_Mt}j
zf})f}7ahVaCBCD%qi|Ht9xfV`mXIpE);P-^*s)x6{_fQ@*JaENv~+aCURIe8c)OOt
zF~@-viSyp|j(W`^rC3_MeaB`B4UK|$U5ON-UBWofw@~#48U}FiFSVRQ-a5?=><d7r
zg+$h8;gst%Qp3zG#vhbmtc)AG&f+V3oTH<^Fi2S<b^GNC=YlIySY@;L2Bhc>WcR6k
zA~oVC^h(w4V~h!+5{NShd85;romT{5gk&mc)rTUFn-k9jEIh^d!oofnnqfU6Fl|E-
z3s7cG)+x8Ca<@!XYxotu&PM+X*su+ch+l~0F&bBAhy^+lT{C<f5M96F2c6VWNw5W(
zZyz%p26N`GT%Am0Fn86F;7>~+4Y%NRC7VZ5(1eE$-!2Vw-eyo(3|OVMn3Z5ci6j4f
zzcjQ0Zt69SFvw)SJj1#BJ^L1s_|C%C<-oN+(SjKQQoxfHDTL+PIEgaWR5?f}rX*=;
zmMN(K^A=qV-nzWIR8VAKLIhL7Oyx%vPI^6Yt12XD;~+U{H>r*EHcv4s$<<o>nBBMU
z!{G0x@9pS@IeArAn}c<)oYC+e#`@`qJ|AmV>^S6Iz!-Y~#`_;i!!tbYoFFS9-ARYg
z9P)$PK2OL$i)cYnsZsECx#OCc+2py<npo$8sufX*R}6$-SHJ?-@O9YI#`T+OPiU=q
zujo$Ifomyz&@QwOq3+ag_V;mrwB(ayn^wG_V&Kk=HZe{Nl+T|~gWxc?^7`nABR`UY
ze+Jb!RBhGf0E6(>JXG&9MAJHUToG2Z#=_lN92l^9JhG2=v5$is%jEI-wvKqK0X?1@
zf78&inMq=6_th~lu37+UVXnMqS1<8Nu%EYdL|VEvhxZQkh6OI#pa7@Q)Y7qi%}=fj
zLV}lrOoA@`I8YRt;h!pJOM-c&ShOD)d&<jm#uVdfWCs9@wF4L<{EuS#zjiWsEUEv<
z+v7e4#gXj~+fE31c7NksBnpJWhe1~iHjVRW)3Zc^?yWIP=vZ2VHjiXG9a$UNZ+SK7
z;F+3QXVuT*1X^syS2o?Q%1d#%yQE@@P#?+q-Nz7=b*OB~oOebppVqm8KD7VvZM&lQ
z{A&a5BgwY`eJvINkp>j@l7u2-hM2D!bDcY@-nTI-V1MwjW1<eaL;Fd)O9!KTg1=ds
z=<clRJ*p+Jwe`JDp8SIb%JL-j=?^K&LZIaxjRntjhTs;{rPj=BHzVGG{V1^Xf~5tZ
z2X3A+@SK~t#C#zQ;1@3npkBPd{l$%yv4f?ZqOKm`^g;Xk{o{56d&*L#b9@NR=vR1M
zi|Vu1V#x%c*jTLIx%40A1T0OBiKur2XK*HuS`Un-YpCWx1>s?d(bt?APu7jkO{3Lr
z80wZKAQi~`(8$8V(_$xR^ilP0>BBXZy;t{(^Z8>w(<xgMjmMW4QXkGMy~um-MvtM<
z69PR*Fo>FM2B!?U5j3_?)XH8))z4PG@Pizyf^4G??^LDIX7Rf{^|Ur-H3%m(vpma8
z8*9%x>2l(z6UY!dfvUS-L=IWC5ArKsq3}uSpo(obEO%tBT57S`SeR&;rO-%E@ExwJ
zaN!b$LRTZDVe0C>RTunizC|_+RwH0iC`}hN?~HY2BMpdH1aZjJ7`pV>S4t;E7p=v6
zdt)JP;z}Nv&0<vsXJ2emX<=+$Wqj>>xp{R~NG6{BrA}K5TDZT55Dm41qbUa!M51sx
zhI?X)6PQHA<u#m{$J$qrzInOsTvXmBm^c@$rS$UH%sCk!km}a18ra;!8e$x&jhQ+E
z0b4RBLTmM<YrXW^;#ZEs!}0VR#5bHcN1j<Hmbb${IOkp-j5dF`yHQFnjTt%}$aJmu
zmEKLe_2Y{k8K^KslD(WKMVf2|w&tbCtlf|i`_!D;Ab0_Cst}XZF!uQyzTAooS#xvT
zi{uK{=FV>s4IHGKx9t3#wmu?;^qSajMuAUx*=99G8o_oW`A)nIA`F7}DAO5QwQFpr
zvzZALgce>*O|mabH9#IBP9yEx>DH{N?;I_2f6tOr(VfXuC;AGbJ8y)~Ar^=r%$<eG
z>?dc0Y!BhS4hLxwyQo>8T<k;_qjeAVc!hfsjnCt>N|XY;4iKLr01cD>XPo{L@gLFp
zsARxiIZz#sd*zVVH=5xJy-x)fKBTyMkvUMa8XsR1($aiZ;|(6Ma)07KaXrmcKpJS2
zYLpj(gc5399H-T}=b~oL-z_vYw&};*#NN@8Ps=6WPibAoQ(z`KL6`mAF=!NqOO7hV
z@Qc_+hY)#0<{O!HY3{WKDprhjFe)i~3uZrCb?=52?)!I*C6xgYLtG^Br)wZC*LGWc
ziEK88-5xQ!3Y+Z4ZPRR~H&iOZEs!%4b(gI_A2$bj+Ue(XaC${CjsmFQg#>I6^n?yU
z-FHU%zf}A9R!HB#*uvP(*wW%rzuobcmg95?Jxhc~I8>fq?0esg3zEdt3$w)eKEs_a
z&Ls3u-4Uj9Zq{y$6&dphu7ZAa{9?Oty<l7O>8r2vxiP*HtVCWI;}@simbo6?FFUav
zk`UP$aZW2Q*+LX~)DkzD_dx<6<ln(Yni2L0TN4*Cg*&1e9Lbnm7BE1?Ywc0jO`ryk
z^wl62N%0M>e%*}jt;QW?R75OWth>;Pc2eeB!V$k)rgjqvdg)A#9P1`88TzIB)P;+j
z=FOV1+=#gF0_jKuLX-|K`cC(NvLes6|5BskF}dM&S*Uzxk9p&+!;ir^*04b(&M)At
z5m2feAgdlHM_X(eG`==2KZqkDiCb|7_erO_I7Gx-UY`J3C)XeZMr4>p7zCu(rt!*%
ziDB}Ltzp}EgUohJUho2;xP5Al)FhIzww5w^ifLfADkxr;nsCz|cn-}z*a7tbb1N-e
z0qOJhs>WSy8#*Pmxqi~b{$Q&iOF(2Ytu{X*36_;H9n<k)R5r|4>g6Mh_f<bB8Ri1g
z+U^ZIUYfA<Zn!3)#t&;VNhiKe4(qKoT;~?S3k$(@kE<zT6kP*daHq8p>|48<Whxuc
ztv1xZVGzC9aePnqn%ws2Tg2EP{DWwo#=`R`VcAZEeGm;FAW|6qBTAlV=I>(VU+Mu|
z2OoBt3U<?8*!My(>Gy^VrqqMiA-2FO{_u(IwbS(v2)#g@;-x!}`lY4m?s+!TNTW<s
zH9G9nO9WErrG&L!v@o=gG_+u|m3FA>Ox_cLoU~2s=p+-NYPy7IhoEf(Eio)HY*Pkt
zt^5gknU8(9BVCuXHCSJV!J3lRzf*sYIcU?s4ZeRjzy{W<y;?%qd;A78*DA&)Lp)_x
z>|D*d9~m9mNjq)zVz4CN+)FTmHXXk8ftRPff6j~Y{=%sffR9qZFVTPS@^}_`WJF&7
zou$ot+ehhq_}UH$*x870R4EKRPZFNnFE_!#$3h3Yo<%jfJa**Bv=5lugQv;0G;oG7
z*T+(lfyG|iq^OYAz#VABnQU8_<CyC$m~b*XPlmhBeAR1A=DGl@mmzVt<Wy^Tf;J_P
z+R+XIHOQ}KvXpeGs|y{)9BL-P50;M}cV>Fp-se4OXnYM)0~lR3z>WW3H-qnObRCT?
z3~g!udh>WwQ>^%SGq^x#4L;y%HJ~kr45Ij&Wdszv&4%Pd&P;euuGDak51}>aZdY;i
zu~Iilf72^o-qu&ww`b-yvw0y@FN&Esa@IN#i8K7a<fMH*{ke6%?1QvZH{`6(lx+tZ
zuVrxU8bi|i-uSa9mv>Dtyn-5s3TfC|IiJ<@k%<iV8oIo?6a1mK;ci>`O5NcipBN2H
zLDJ@s+N2s`KDfDovvlX=YGL6QbJQ}i$||X-#e%7`kw7s~^dKVU_V<t?*W4{h^PmZ{
ze9IPO%Hym2y1ISXn7UIOE{D=tGhtUTXlUO1hS!vno%;grhQP|uA4@of{kS1^6|EjP
ztBx;bY^MBv>rOUNYyONSWrd`X=eAQXKxm!(>|LR|n7E~QxCK~VHY}lesmd@~B+_~J
zH+<*PY|iuA#@d}^V5RgJ(p)mpaq+j++VP+$m~Vu@Lzx$k;4$3vnH)ti+sPeMnlk3w
z^%1c%xs``0qtQM%O6`8dguJsmYvz`3n+QS&{bo-Ef$Eqkl~Y7b{LxQq)t$#;0r~?5
zTO@4cVA%O*8`u!>D^0bzJ8Q1BurAZ`vlcreC*;aUbw3^9=VPBN4y^F7K^!4q{QtVG
z{rA}a()QB`_)E@GfQuml=yIXoY;qNiP<B2RVndvZ7k(;9_j({vNOLogrmEG7&H7P`
zZqnNL&@Ml{)S_6PGiX@Kap(6cKU2@eUGJPQi?&(L=rUQKcXJv>JsK2WB=O7j>WJFE
zW5Wp$>G$ca@<dX8+5FV4(UT|4XD=wFr>?|_*b1wfT!cl`Ws&E7CXwN3#v2}!6{F%P
zL37WBAKU&BI!I0-zU`;$38aY@AA&id@^CfngNUDY@_F}Ha53Il05*+FfqC%)<(G)x
z8R^;pw#Rz>^Xq!2GGH-5hq6F;1dlJECp_-sl$S)F1V<r&lJ~I#xC<~plt^#C+vkwW
zc!LSe6Rh19K{VJUMxKXMICWv|c2FPT<Z*k+?p#i;S|yU7w>*BSW62vHi5w-@lG1}W
zEQ8AvL73xh*ap&T+$4<J%GTg&C;;~bDqAa-kB;HB22Qkb(^vzSB$BYQs@FGUVw+C`
z{#1O)pEO7SvrsR!%D#`@-Hms7cQL=XdC3P9%X)WAaz`*s-k#v22x_y(PsA`1092io
z6C&jz$3(uRw&|buK4yv6aN`h$fc?Ad@@PV-AsKW5)sJnbYq`uObWsv9^M$K*e~(mQ
zQ=Rb{6!If}l2o$h>=KE!jZ;#8<=PnE#*B6|eQEJZDcS~QC9fvF*(mn>Z)o{Ci-F1O
z+x5iW>8NM>C6Hy1TJ%Z`nTAN2Sd6~Kd3GCMgcAHioEn;9+VWeS1U{f&sB-eeJ0oi8
zD*0*Xpo^wn*V?xGDRyRmL|Rf7zH4h$fJ)57R@oU0?@D+x0RQpgdkeClE(4kUYg@Wt
zP!4S}ZgkXXo)TXV4cJ2nk>c%MqwZ!qD)#wZwp$L*Kncc8Q|!+^UU2nf6uDblNz^4P
z-}&h};rAEP7d*MTKA7%XOBU|;uDFEwXC4(?Hb#aA3YxTWO_oM}0$Hz-C4^SMsGAFM
zTuUJ`F+3k+o;B`Q<mIeJO88tSl-At7=j2{AOR6)C^_9Psap1(|6KFp#)+;bb7HSRy
zJB=LjPSD#$P+M^-ejhXz&*{>=dMS*rI%)FZ3*5R=*Vwc8EZko+ihA{V=PS#MTM)pf
zH*xLl&kJ<mujoITTZETD&{bx3R13m7?~iYDL-#Lrkj$TEwwfcq&kNjH>tIJ_Ha5<f
zh}FOVR)-G9a;E`iB=DE79DG5mvYpEyYkc%dA3_iHT~k@?;7o;dni2c^L!M#O?e>DH
z&<q90R<IrkWRfFK31kmm=u49ClwyqQ4R>fz=wlw09qfhgCK7^}!Si`fB}Vk;xdj~X
zFlxdqtoOLsQnCl%eLf~UK;&Io*{@XD*N|<s=8-!~t2B=QnP%K$Q&$kH*UFg64M|lQ
z>n~12#;<aIMTGNSbyYo5qF*UCiS0a%JD70&E|~D`{p5#^Pc!3dZ2dT@?wkBcFA6G<
z^>_<d%q~J#H(4L_`c#$A_4@Sr{I5&Z!}ftsx3pvYf4;@j4PaF@5HtQO-{O(CKYa_=
zX8gDUC|w)=xH{!6aH?~Xax1d|2l5+t_e_xBmw~vB4i|$)EDO#Kt6k)C%cw=~U-~q|
z^<2rdtK1(Q!x5k#2WT7?EqA<X*jtamiMxs>#j4DMNk^5;>0;KKLLQFQ58B-^fH2OL
z?`6^>a?g$`H&0@flmMG&>|P`jb*%&*)h6KWgzMB{KJd9qn@s>m!`LH_O@j-kj2r6{
z21;8H&|a*nz<j|oG<j!86SMjG+#Q<uhtjori`MwE=Gok%r}LD7=h3uRjgzMf@GYwU
zC*R`n_GeFdNoI}?!6UuuzWw+b4GI}c!AFq~Cc9io)_iPH(pHS>=bQK1UUwIqbLL}J
zlG|94t2qU&jn^$FKe4qJ`@utPtxK1IDU6B4O=n`1d(fNs%~}l-wV5*f?~T;y-scyM
z0~>E`f31ZR+QND<LBYwz#x_(H8Nf)$gyIG!EpZS$mQHOb%_9oRJP#F{yKaUbblE_4
ziEo(0cQii#?M-y570EYcYEQc>+<E<I%FA{rp2`w8u$C$?$F@X15JQK<{OIb@L&+}7
zw|cgq6&7G~L_Zv9zR9NgXpi`eeJ&=9ZEgD*<gxmd_527-V2bh0q)lDQ085l3ZZ6KZ
zu2<)H#>76k4HzjBijmpb<mBZTRb>sRp`-U1IMdZJKS1+u$_-FAch^`+CE07q6n)T?
z&G|ncEYZhPHX<Bl<0yir<60|=Z5)NbA!DZsz=X?=%mED*hw#PE=)r4>%jS@F(-85p
zON$el77Z)rEAEksLHcX!sdL7-l6~Q0#84&?F@lWSL@7D@L>+2vI%tNl!1*CDZ{^2v
zpB7*;z+3uykFCQ!VpAl&^{(hXflFH(*HUV!cG!TA;LDc&tSXXh_YA4{w$Y~@ms6)@
z%)s^2*SEgLf}XpvwTiLUvJqtzi?S{*Sdb;lcp?e*yY>|k;~VZNB(Cgx8}@ZO!r*j^
z){CAWuAojuvwjLxzHy9LiKBJeO*n&az(xD2Z1%AmER}lE4Fl}JDu4N#q67CAPzeyr
zjM!8ju}(P6WG2RJYeK%$Bul~X_JPthks_IK(=4Z&PDFL%x%cZOYSyM)+_%sVr@p5l
z`8-%tR+zLOp2Pl2^WwJ+`OLidiu0#=5&rXhD%s~>=7m1y<X3z(Qp_n~$dK;3De=-3
z2kzpU3_Sv4W4jK_G;H0a33OcYA8~A|cuFipCK&R^oLxp>X=G?amEW^%b+cl7M?R6-
zeoiZ=7=R6sdD-&Iyl4cocXzq#b<i|~#Y=UTq}u9*JausR%e-j$%e>IPG5VKzae3x>
z0{lS7(@sC9<LLwIe`j7iGV=e-i~p<43tYiKrFwv9{<r4EGxhv7FEm~Fj7<80{JK!f
z!OM_pKTP$=VIwr%+JKn<%e>&7>Yir@m>0U^RXS`ONBGicEhV2La4@J*xT%q5J7Q4J
z1wB{%#koh>iI^vYOmu08-3bbkor%qftc$*oIp@gta_JIWNFl$Qu2KJ53f7dozDxbR
za>=Wn2l>7?-Wn!6V%6d=^CAIYUTDnx%e=T$)mmLj)>N2#5s16QgXi(+{XOmebNM`V
z1O5y5;*pR4Gu;a{yc~>Hz|-sde|9e(Z*88t7e7DcK>|}C02a4Dx);QrS>?v#mF3H#
z8bGAhh1qUO<-uH*J;St?JszI!SlSb6QS2EpQ`x6Fo<fiqy0*p!<nA5~vz(v1oGolh
zio9cK+DAjp91S%#K2ptth`pwxfz%b3I4Ja^Clw!=-<yMy>_bCizQFH#H4sG$T&=uo
z#l)dsBCuRf33QV^Fw)mst23^FiCKj>R&WCC3M;OODW_((@{w$08{>_TYFujAtVw;M
zD_MwHl{D*U2JjvM=l<BB4de72&Zj(o^Pnxox#2Om2#+ZTHybpVOX1}ysOgX%#_vkx
z-LN*WLbl#4Ipw<d<2RWMjIDb(Y~A(_XBQVI<VcBu^*LRB(Xm<y*nnlY64R1ZjcU?z
zLpeULxNMe&(64<AoTN*$ZI{*Y_wE|_7B;>IQ$xvrW}45@zt(^2E3g;5sZ-v;c?Tqz
z7sdlGM##337K0wEjzNQIYZSqJ7?Lf#R*bA(DdNM+4cv}PuA|o-3bw|H27-Ep%%R-h
zFXtmRuG};LuXd3n0)yQL*5{&e{jverKYAs0s>U;Af{pMfz^sW0=UY?wEcnCK;OS65
z59i7?Z0H9g?tio~e&6MO7=CJFXa<RnTL^6`ZvzF`C7~tbMU$PMgW2h}`wt}cUI*mQ
zeSSORE0B^JCwmNx@%Bf+tO?}wT@&YvP{=*6&`KiR90+p-ZKL*BO6w%|_p@bk9kJ28
zP>7R4V1$loX3`?)Fu7b{)LaEvCP+$hyTX?&I;IsCkq8Z$AXBAjcjXIgLm|@A3$U}N
zYksoG0kQlrNzoufOUW{_M=(A{Cgsj0&W|&2PkZ^i|Jp~mZY}^Hqwnv1j9-^Nl|hSn
z7K9e?O-?cauN0G6$m5sqrrTX!g7fcn_2sfxZR!ers460tf1Q73p<NuvC9jQt6ZO8B
z%p9hZPlm-X0I&6@0o&@`#lgjFqxqLCSaD&{^j^|8z1DsyL1D*wxc7HwtJAgC*-VEp
zAD7u89P?Hk4O_VqqZBH@@>Ng~!eAg&KEKB;tuB#{5sG4t&j=UtpTD%hml!c14<(AR
zGHsKHZ(`%|NM(zx1M&iY5zFV?sJ&>|+Gi_%*!<c)Si=<|7^X^&uh=+8FGdSxkfH(6
zh1g_v{bG3+JB^>{GqyO_^+~B|EU}WZjeSdFyq(}HG(fSE<?eC8p|@i?c0tbhyauCS
zGh8e=5?p85y$k9|Ce_y|_gNF$)(p1bRUcCa-x}B8l<jB`_hH3yCs!6|CPJ-WSdH8G
znv0bUCxIEV0?&XP#1?!Ufes$o_^Lx{vcTCsBOf`CrtCO%q3EI}RQ5ViAf$oe>Jq~C
zT_3Cg{{+}~3-XVVCK@RI$K@2q$hWBqeK0?&)GaTlTDa6a+TC<6QZX=N<O*ND^%0{w
z{3)=NlUIM<BpuMCwhS58!~ET7(ATbrZC;Y+mj2$)zg`O~B_3dERFj$JZv6--hBG?8
z8L{`cJDpvf9iUItNSEnUzle-BrA4dwZvRuqVPkDqO+(uYzE2L=wlcrke>QBSY~8)T
zQfN;K#8%QFk%3uKvABCL2fx2^$%<8z8S5N&X2pwmQ^p`07fvnn#yJu(MrW>0fq%n3
zi9uu3^GatZ7*%wnWBs6^PTdjGx4tAH_MNB8%t)rlxk>Vnfh=>vCR<8NnRzP~DYzT$
z6_2YT9nS3!RkMQ#fT=OAwL+IA!gcZLoKvE|R0nJ5-s;iR=-pY{)Cd)+VzM$3w+Qpn
z1nDilqwt{vm>QvbK{Ss0H4L(*N8tSkT^zY~y5#C*Sz-WF1MQF<U}}sOurOw-K=LBy
zKA0N!@gz3|@rSjMctnFAcdp)$X^>stLTzLX$t@AEU}k&JQ}JtCUog#jI?OOMv{zri
zSjW>uH22Fi$=}?<8K!gF9C)q&IQdX8oU#W-P?xq<QVAOuyMt=NdGBiZxf+WbUBKu>
zOVp)Lb{VzL#|AYgpm#J`#ky;r*P1A~wZYyArP1ZpoBEfgXfH(tGfG@g0*g4l?N9g4
zK3cF(75ZGe|AnW)^#44Kr=A82ykpCM<!L<f_HR!Em>x#RllZv#NT3i3zd{26Y1-r(
zh~#Kr<b4d87{Jr8&D11<!*)5H@nB3EJZE6HUXL|DghHzTYS#jPcbl<XIoDdm_g!Ey
z5;_f4gT1q6!L96*y!NrtJG8i!N}uxBI+3p~--9b)qTClw@ud{EKZ1p2%P`T=B(LL)
zrvP0@TGK&|wNvrgP4^9#2`;G*HfFSvod56!6>){j`SfW`Jcr3j&I_G&e1o<0(bK5D
z8P*^fb=<qAjg4j9bNuNb;p;eA%lmL8e9FM{XyUQkBGCqT8ma%2r}20t1mt2^egouU
zsBC+doiAcWhp@!q1bZ0~FjI@mQl8b!ylWcsP;FcTzHeF6ETfkVR=4Q`Ew?mS#2Vi1
zC5pQ=wQ5g5%9Vwnmc_s^e@Mk3);nVcq+<B2?tjYXi^&0`Vr1uNc9&GN*{T3%L?2D+
z(1oC)CkZD}iq2veAq^qsG|usOGgc3J3BMxk3FOkBrs`)uPQUt6Bxc!1prvGU{YhD(
ztTH2}q8+Y<k%jl=a99tr)evI)HnJO4w>Tvm@{#&?)kR;x9g;c5aq?jSxkP_%RmSO7
zGUBnePU;)p^1e8OTL`HsTM7M&I?W)8$Z5D9=A^b@fl{twK3Q8zCK?cN2zh~x*pKl2
zVFgZ8*Gop%XZ?VL3<}S%MNqZMJA?Wmbg+6DS%dG0cGq{BD8ys$=WAyKqAKW_GZ3a$
zxa|?C?AyUz^F}#={>sNVdC13z(pw<n#Rknuo18YJ($6~=krf!EE#FK1(o8P)X8e^y
zZqNuel$ON&j;s3a+If;Ssf#tHZHrIB0HKGjs|xt`xjJXk$^NLX``vb^qjM6i`uuc4
z?;PrcMS7<fAR(jEri>`#usk{T100Jc^rD^OZJ%G-r+Wn0(qVcWqDgouiUP&-0^zKV
zbTyZ72_P1IJQwh~gR`GVpI3yX6Pz_uUF6!Y@nWhHWUj5Lk&IeK^5kgCohKC5FM2&D
zl9)pKP~=!`?K$2wiLst?uPJx<(tP#MGo`|H^V68vCi%)@*XWOkFNqE-M7n`NP-<9}
z<wN&#w<$dHU>?7{dTbB1an9w<yUo4FP<<MZ&qKA*4{`B-;b=U)b$gPIAqk53c7q?$
z0oC1WL|@%nLP9+dkdBeN-2U$J-VJ~9j{bwmIzllr>_8Ssx1NS+&a_o?3YxkseN+__
zhc2v4cv)#7V?^w+ICfD41r`!B4EawSJ*Jm3D9{^kZN}>9<oe%jj>go>4cGn4(U`2l
z6d0%B*Gx;hFV~!Y+xf<DA6eqc8n`)ClS7syeEx0u0ns&zi!|mTy$6#={4^jPLsbRf
zXxu(J8c#d@oR0s!qw&bd|8q3{uW~flNwOyX|2P`Y)bqsA;7iKQCkIDBQt85N6Q5_v
z0;FRI9-a>%GQnX#ren-4#?NXzIvSI|9F1@^kD<T_S~@i{mn7l}e@;rX>-{dqIF~F1
zQIi71$qq&FD-lK3BY|(CtEw^l#{xOw&Rs(L0)%S~=DhU0n1^ObpK2o`JV4joWNyN#
zI}xxCx^HQ)2STAFS19z~#Icpf>{hSFzM(-oWZ~_)XJwT#f4R%)cGYzMn8on4`_JX`
zzjQPn`S?H6(XcEJvwm<iwEo%Ac)YOzI2sm!35f;tO`M=v)~bbUY7hy2OhSIvV#F%&
z*LhLGd_?~E<^zU1S#P#c#l@@e>s#CUL`Iqto!wI4Jw5KroA&HF9Ym$y#&q78fWdsI
z%3(;xZgF>aIsy84(h-|g4ra@i;XAi_R;aHcU*kxr=iOFE^^tvIvG&!5^i-aIV+D26
zaxs<himw=!R`d+G$--f`*?D+lyliZV$Z28w%U~Iewp@P(gev-}!V_252q{~`_vZP5
zF`ozuV^R@}ll45BzxUqTZX^^?7?3(vks!Xm5bh6e-Dr_>sEEe!$Tf&G_nba=II=XK
zW<3xDy(2u-^CuM^fDNuuKKAw#$@M2n7Tlg0u=6bVx{Lb;ykzS;_u}1&g_L9*JC#==
zLUgA)bzf;zm5p`wLT@KBM<a1?+a=!dXYeqAfWmtv{`4iK?A{cDN~P`w><%=XD_UBD
zkW@n(uOEnbm!vTG45&`xNo{e5KIUSYvc|6pfeEMDC@XQLu1RPOq(Fw%?qzX_t@VE>
ze>!>ztxM=;rc|s39#%0UbEP<Rz1=M$Ng*p4Ii3<udIHfe;;(R3(Yzd#`%0|P`n(6m
z$PGR8ac=7AP(Kgn*Z}sB|H{$$eUJOp=%2HIBB-!HM|6n$3CL2MTAc!9DZ08syI29P
zi^nIP_(~@!q~{q3A1aZ=wO$YwYFO@)t$a&m1=pd^+_SccC!#{h%rAtN`e;LJvPL)%
z@BztA{EkdWG07lo-noMPmBvT<AM{}zpBh#~_0&;Z5nCP-Gxmu6YG}RfLqB_(vBHRq
ze#yU<WVr<-X7ofd1nFiId7oUYBkwwa@lV95a;vmH8kA3a`Mm$pVBnzE07s+f?;VX_
zmp+v_KxPJl`<qof0lzL}Dd^QKlUk$3JP0`&JqbKMF3FTHCHe2()Ko6~n08u@xde3+
z8#7CZ^`SVLa4~RmTmR~`dV99E@x41&XB0Ch%SUF-xA~S$Kw3!Trwyhj2dDETS9mN~
z8W1w}=OZ+wo7K(zR7iFr%19SE;PyT*D|^x0Bk`SMIx&>Dx<Do}v3(zC(JNk<$J->n
zN1}msYL9+%eJz6wjx_z^5dH<I?BZ?$>n!bY3X&VSsM70cTp@y&<|wk1Y6Uad=)y74
zCH`7L;w(RJZ5`l-Uq=hVf#SOVyaLkakBig5vE<FN37p5Ol8$y!35`O(vPUcSmU^d9
z)D<JeVb+{eB2zj1QwFNof)w46&v*7)N}NG5ZsXKraz;6O;X`tU2Ry6P)LcBsby2>f
z1GSgbp?H2YBzFvi<`7Ix)>tZX7&R#SfswtwyI9U=VG!u(x8ibfB6xVZ`w;bQR6%OK
z^FyG>^01*<vWtM^jEq*>hvW=LKypSmAUPxA<Har@IpZCJ(XZqTo?posY191aDlfTw
z<QlKAi|Z4@Q3I3Te%9VNurj8(!R!U>a3n|_5@PJqU=V7`<V@!jfj8gC+j#FJiZ{Ky
zRyVb<v3eEaf9j-k!(F_ls|K5qaD!?S+cwW+Vy27vazp)uW?C%E!N7~1gi|VU+b~ag
z^%y0guadP6r!)qZ6WqbQ4f~XnQK%GNE#t;EQZ7noyx<*wuM)t=7&*|S+vq|fGSWS9
zbe}7k^J~`_QRpw{q%||rCUi}dqGcr8F|EWKQlDYc4)Ha0i)eW8G2n0Q|4Pna%<ni7
z{NS{&u;Yjp+v+dHcGP)WBNds6TN3f<gnuF{$6G<cMi<14kj>&W5uyW7`*D!vWrIe2
zaz9^Aw_z-PkbT%zhdj%>0S@P^AF^$L%7%I1g=+A=(!@7p7_?F!yY8u_E^(-rlOszX
zeGK&nA7c>UV}#3T6HEboj8R&C73&L(S$CsHALHcEDxM`GwLhXs;x8X#!|STpR(jHP
zsD>L+W4LO1HbA`p47i#_X}2j}+2S+>B6AQLf9rK8(vpvcd`Z^C;f(7!QTWGe((w1U
zDy(o3dMXiXWR5y#S>VPHiu!?i=}HoFw;gO(un&)(PlfqhvWV9ESS^6-mJ&d=|B#%)
z{Agq-NLhY*SW6UtfaQCF1Eln+z{FBX<r{Y+9Y`TdZVlv?<y_}o_AN9g3w1~mwhItE
z<H6v`*R`ee*4aTZN*j=!Y-8J`Atdn(YAND5L1|a*`<ans0<181dsr`0)y0O?LE|;|
z+IL^$V2xG`a(&TktIO4#VD`Kd8{&!Q6Dy`iTzX>OcT<tAl*gIA-`MOs$Dx^ii=Y&n
zF)5nkZ)O~&gf#2xqL(?eW!^AnE3O*Vy{e4_=IB7OLPFcq6tG<0Prf)EnvkB6aZ1+{
zq>sLQO}73e8p>pp^4=@}JTkCnZ6qF10rSUdjL|C*v0${%m$>hLB&Qs|uaT^AYgtd;
z^Rb-zNbb7v;f{M<p?~P`=H)QyjYB+5G^)0iZ+W?EtP5!q8G|X9o*)`~=L*_f{ZR|M
z{pFczwsB85(6wAet2{%xI0l1sm0Q*ibPS$*0oS(`Gai}xhW!%b$_yWc@~pRU2Sw-A
z=MQi%l1V}bZJMEwwl}nZwu+dPuP)fk?-%){C1ke|aRRg|I<R7aESqIx6+gSoyGDWf
zo{6KJ0-=jBp1=B3(udXSA}kTbY$Q^4(c@G$N;?iOfAeU>KOO1kF+fpn?1Tpxe_FVI
zi~*L%7)V&MNTx&S(FXnL0d$fMk(VT_<jQJ4<{;J1l;@?e#<W+trx#JB^3fYkKK;`W
zD<s^~&&yex8|%B9t5mIKhvKu2u8~6?Lc2AD&@<xFq&s>-(zl+$UzF0)>YXs*!o(!L
zT<cOY*hC)JRqthTm6c$y-1NEFm#$|~W@CoDNuIV>sNklR!P&{#<B&Fjo<fu7HeqAx
z_5Nx>qSYx^mX(Ci;83$2l1u8W#@z3oT?<mkXd_kYiitchG%j}gNq1vq^&95r<F=pU
zY;}bUStL}Ufd@tUIqy$YC%<J}8f5(>DGHhF&X2peaT`eL^;IlHlVm2g4BQ&uPO_#B
zo<uDjzo^guj!&pn7W^{dN({+G3x!l#wCI>gbn!L?G<F6ZY`@XF5rYV8n==#3O>Mn7
z!CB&!6pL1@P}BjD)}}~s;N%?R9n-Wsekd2}jal$f2?HK&$)sd}b2|e=p0>6PZMAmK
zm}55_MIOmdC}N9cw~1XuEXSys5L0hkbT;%Wm+}B`W{<2Dd={X|LmFoIn4b2nCjTK{
zMw_a)2N_@^{E*ovl3O?aLxFa|Ee^6TH#0!Se&*V>3!uMFrWo7&^$BRntqy-0KN&bC
zHleIeen>xPsg*2H8lM`SIeyp-L9-W{@5Rw+?dXqLr_CIHVRYx(eGy1_F{ip@FAKb!
z0n$O7Yc=t9SPz{2K;r{EA`stK2m}uV_i!gf^gg+R9f_cz*97seUPNIMmSplrt!a7Q
zz#;Mr#mr~)wDV7Y&*)1$cp>Dw+ZOgZ%i3jxnTISI56Fp`4gx{Q_ci7l2u(&m0{qp@
z4JHDgAQF0k54L_K`~p!hR%a+8LI|Tol6lriBh1odFu<5zN=y(aj|V|%GWru_u6o&y
zzE(nj^|`#)D5qV_lUP(4oVi2Uo0k@yG<e&2GEu*~sf;t@fh{zimUkdST^XLWk`-mC
zfQ7#lPDMy;I>$N5nNK5z5={wn?na@er&M}2Kk|KRh9mVG0cmZ4Ab$R>Wl<f;(w04*
z?w4_2lgf{ED;f;+%mNZS3HP86C)%e{dM+|WL;0*}z-*Ta;AHy`CtB8Dj`6_5>b)D(
z0mp4wNWTK2W<}Iye7Je3ityr|MI*=YLrd&SA`hTxM2KMMTKBI*Uxxsz_nJLJKQ+9t
zZkyPglgdHOhP#do5E)*zz&&j#M$cw+eIfTM&FRgDbAs_9jD0Sl0j!kQKT-ullx-w@
z`8Nc>!FSgo#J<)P?8CMj5lfWABk#oR@oI1(&a|iot%;+Wi#8Mw>=L(iw3^s6--I}|
zuzYSA{YgDOwGMx&%9JL0w!F*L&qx!207lCm+GwMo15SB<?N;nw^U_WTB}3pAS?>Cg
zoTn5#C&%?`8X5&){c1Pazf*c`0V%!u?-lH99#YyLiBX%inHQ<JMFmM;=ZRIkwh<f?
zN{;1%N=6gR-U~_$3|6ZU4IANu_sW&@yd`QdrqSe!p@o8qtN!64t=xKjjklBA;O~*w
zczz4%Dkwu?^e$oh{Oa~gsY-efcYeTV?H5)}=mVL39k%?tyOjmHFjQ&tzzb5=wYs18
zwU&WSFHL!ywpd11Mfb0&@s3(=&*pT;ePudf+v+S9ZN$&!s!Qhp3;*XF+&nu_dGl+`
zZ<nZ3cs$yrw&4$Y;L%4)cXT<HCl|mLn{jxXTsc4NzL9Bk@N!5A;F%nRaK|5+V7nu}
z0bjjjAB;$w?94rKY`wHEzf-|zFvrt1_U=6TDR@JC7V;r2=xga&Uc`?m|3vqN9+$P`
zoB=KfZ1xRjoNJ5C<4e?%9Uw>VDwS1}%EY$^H5SVas^4{W#56s~N*%%2IwK<cI@#fc
z^H9j&A_m1E21$m+WW0YZPy8;$I+4PY?Xxucg5zdsLt`ev<km)~^`5>?66NYkG6G+g
zu5z;=AQB9jud+YT;uLRZt_KHK4ohF2S{_FG1EC<l&2EE?V?g=>jF6s4BwrR;e8v?t
z_IhMmO2OTyrJHRJF3@wo1<xZ%po-@Fu6ob?8aCu0xn;npP%kPaxxwG_8bcQ&-n`l*
z3EUP{PjU472Sg$h-QcPeWEp!RkqoVR`5{Bwc`ZXLSF*B(eW0n$C{EPY_Ltb=C~seU
zVAcTIw!E3&XG8}ZwYY-!$XlDoG_;SPpEz?2ZPc)n!bu3sujLp2A(|0|{K}WOUGTM>
z$dBq;ql>a#l|o&<YMI(1D_=HTaR$VZrNq~<?5EkAR`$e9-a09@Vg_j;qN*Q0^q#JS
z_JxwW>Pr$09fl2UVp~tScD(L?LE@UKnvYkvUogNi1zVzu2luWx4?2#HI8Iz1@su2<
zI+o52w83{3oA%S&_vKcBq32l~7saiMiA@bn-tv=aY7+%?LO%SgCt*m*Sp;B&Y{x`(
zP*+w%2h3pO7ny3e^?R9W-Q_L*+wGeJi)G)sJ56S~FT-Z<<+Ra%wpnGQta_U{j5pIe
zf|{a0M$5kv(CI+G@bGAn*tFb%kYO%wAd{a(8$La7X>NB}s^-MwjqMW;4!Yw9k(DAs
zPni*A%tVw7N*YL6TS=j1mr;i<hO43NxV?+Lf3XzCS_x_OdBdgY8YI#H6owIzkThCn
zg!4T^qUxI02nvdk&it1S)O75_<DLtv(MhK^+P&CTIQ`PH0Ie*1-P-E|ckYf9)T41?
zI9N*_^JFmkz8OdVuY&Q~TKbjjXM_TUJ8L$LaXhuP(4E@4<7YwD@eG3z?zIcpODoPS
z>L{GO8Sb$kahm;V=)P_E;d(1KZ#K?xG-t<+V=dK;q`bq(WE`Y%0`=g|I1i_-ifK4r
zQJT~2U?bSZ(b76Ti{2=MD{a{u$nspcvJH)FGR6&^u;}?*l792vVk}t!WI3m~<mS*^
zm4!4x!&@(etdl%yf^M|}JUS*TQ8z84g$h3z7V~FBBcrM#uj42y>w@eANw`;tYnxrs
zkJxbQK|W(5HPMYY<=_E=FK!yCD&tu{)aWUasaBK;q-{j>41$8K(25fReBgvp-9uiN
zeOqhjtSzS;p#-OW^=8@7L5WabgzLRu9EU38mwH*W&E6Xy`>nyDB~q^NeFo<pTs;(9
zIOH!Wdlv!{h%_T89C`xp7YV=pU`HJGCs4Ew5T=nJzC@%(8OX<Yq4ydHVEpYeO}XwN
zNRY+s`r+8gMI1VH4}y@q&jH%YVp2xlBF9t{UVXKO;$1n(k9xF>1>>}&lGoH7))3V1
zcl4SoP2;UU&rTab#@F~RK6_;dW@1WdkL|g+jwt`yo`UbewwMwXh>1>t5J817?7}My
zU**^^3YWGQStso#fHL3uoEe0SZ`+)%0T$y(j_Lccg%|n-#2B#|d%uv77X6aA-0gf1
z>8=7u>s=v-q5`^9G{)PZZ&*US5aZxLV-y=BXjuc(WdkOGaWvF~K#1as>uNMD&|bc#
z@hQo8)#E{f<+g{}rZ6?V_mY5D84i&iFT0wZKR*s61j_c+QKirVqQod08ZbIaDop?|
z2-jy=?Wpw2%(9FyMTo!|g=<Jn5K4rYPg`+)JdIRY8N$@x=$lN^`t+ii@Ighgz%^t*
z#Idbje=#ZWQ$YM=M((c+5mTm|WiikuACAv60i$b{)-*1~H!I<j=2ry#%96(WI6s2*
zV<63~i!TZJmj)>75GA6T#Vbg1Mx>EB#CtJ>&HLypBqBj4J*Ky^hTC<0Uy&*=3K8fq
zqZWXTlCnVz#F?Bu94Fm<9U9KQ;#a?jx2A!N>Lp)rMPewJ;*T5^DIwR~S5>@jR51*y
zFM!5tMO_I}_9H|+V$Y%+%B@yGV+hvMqm3NJXD^7p_Nqo=Ok?qvOIsdYI@hc-*`FHS
zbwXR@$ZDnhlB>=bJu7r#l#v(I@!`Db$F6Aj<(M`h<Mj#svOzmB*x@_O*-+}Sj7|tG
zkV;y?$yovj>(HduYp2jRZ>0^#;R^Sh7`=yXb%%7Dw#HWdCRrxehA+t6r1?nUSn$28
zu#Fqu2Wd8?=OqalkdVK`+J&KC&`)_QV)8M!Lr-rxUe`Y-rqn3hBdlovawl)NDlE*i
z<>UInD>UF>4O;CDt0^tFIXu?+m7-GKBI$^R!FP+TVXToguuaQ6<Jl2X?wWxO{EV$O
zQ-X~2)I$rPo!e#`n*QW4ofL*-BFK`d0z#2Pj1k1I89#B=c5HOA^D^BHm+&sJyyFHJ
zFCI~)5+eHY&Ny0ur&^5^gjbSc8IFN=drR95ccrsV_=PpRc;V#FUK{6hy{cG<2n-nl
zY<!vmKGms@uuKXQXkWGn2?iRsKQ~~tpbqFKgXTDi_}+`A(hn2)MM3a+i8VoKQ@G&W
z&oGI`g;s3jNsPWA7GeCV!f)b}H;Ry(g5qSA9IZMuc3qwDZey*BI5`y>mnc`b?T{;&
z+x#oeS$Ag>YvnOjbt<w3&sn+tXT|gUtrptPC85I@&3pTB1Fx)?Vy{AgU<M?(l?K)n
zfYm+~VMpNCYX20Ay*&$;o0uZBRW^JxRKZH2g=EW=*2`Kr8*Xdet-{fXJo{sRk$-*e
zKJGj{kTrt!y29HX31^+<ZcOX6%wy)qamfc(_X|DHMg3yZTkjw9O=kBSA981Ty0{NG
zfISU_7I$Ar{wz9g@~^Dhur1#j)iIdf5WpLS6{i^s=Lzo(*Ak^lxp@IZ!`v=#@n#l`
z1LY<MOIyv9mSHKa-pgW~iW1)4*y}uK6i*#2bnZa-e4mSTKl+$HP}C>9Zxy-1*DEqj
zr}|KlXw8=D3aawd?k;Ctwb>J&h+BbN4Ii?4TtZtq{<S7J0gNNNA+!LRlB<d;F5?``
z$hmw$HY(}tArq>FM2ejcMndGZFbxvr();~_N*ZNefl<i|EkbBf??a(-={EyG>3uml
z^Z3GoVH?m_wxh6X4Q}2?!NUG@G4FQ}y#l!C?Y4u^)5bBH`dc=$Qyf(zzHMKW+}9Yp
z`9b-<o*GFQE)VUqsMl_q&~iEpL$YmgF@dx}{|r|A^R!1WWz3<2r7wl)B@(Jn+V|H$
zC`HT}26CSuREiQCl+l95@sU&WtEe~<20m8~JH?`DI>Et;5W&-sNxYU^U@9d`l2RoQ
za`^IzkW;0u9rtBBcT2(Dl#~nxb4Ldd?UiTgvT!ISImHgP0!Io6#7n|7JAo7nmkfc1
z4s3)Nfo1t#B6~#iLcgu1tHD}E)n#X5@;&!^CpRwvt)DFAY-Kx`XrCgt_pX%Gwy&<`
zZz+syc`bpKn&{pk3gi5!3G4{w0K>(GOp!mm%a;i-3+VdD91#hF>QCyLUP8K|uB|<M
zYlm+=%-!Lt7rWjUA6Z9$C_<6Nn2jCwsa~f8*;?~<N4r~|!Qe|V2^09t1&?o6S8m(|
zmtK>JoZXQ@1LovXu9h4kvOlOJ@s`5D^dS!8YUbt1X!<hTz_qof#JBH8k^ZAx)vnpc
zdBGop`C0r|_7%ONJ9r~gLX$0ap>}+f0|LB^d4S~U+i}XV*;de$ENn+|-5?edgNf?=
za|JKOSQJhoVH%aEzk>DH#FtrFg#dQF7ugO{nlPee8<+R1Fr#5)EZW|T$cJ*AJpHQZ
zZb2we!12{ArQFY8gUn_pzq0@P=|D<Kko~4$U!49iD6tUl!PLp{L_8SPh0mec=L@*h
z;Pi$~r)na9`S>J(3mFWdYIqJVCJIPoDQC4HOyDdWNtcfmgmFPHeTW2B(lOz2?Y&*o
zPFu80LigOa2QJXY;6W?objWqQU;F5v0u{03F_H!w<P}DKoGv%Qm5iXBG{CY-pxF2L
zpk!Ajz#_*;w2CGN5`DxL<<`X(;yYFsL!KP7Awc=P+Pv1>lY+li1f!Eo*@vs0XhK@#
zoxz(iKWKL=mVm4(Ez6?}4__J=&N&U7b814-#w8#$6SJh$k+qB3PCAcEyoU$Tr%zO}
z5<tMzfTfZUfFEKoUe)4q=kN#5uMyz)AOjvrpTE=vEiLTyE$p-vovrk3H6I?m{sj2=
zZ71|$0V*i~1p3+0_kjQTwFLDsgXhl!Ey$2B3;`ce1Gr7_&kkG%q`x?s(LO8;)3dZR
z{kw0~;@mi-02~|u{^AAZvx7rG9uNNY#ZMvrwh>RODLp)i|9;&7Chz`g#M9Mjk1I<5
z?8?(RJr9+ae!nR79#MYRVfypXKa<CPABz6|ZyWHK3i>C?)6y=4zaaqc#Pt6}`Nhm1
zrEdNN{Iep=Z%loIN5J1zHvXeN%%50K3s^i<?fCtIHU1B*U#<I%{>b;=4&9&W7QbP!
zO@71v54AA<Z0pl<0T0Cze!m3F{seu})PF3U@F)JClia`Y)y)6I|N9aIe<D6z8vZ<j
zi7Xxw|Ggai=|b>7QJ$`_ejY%tt)8R&>h)8sza5>YOF$nMX8(TSSw8~)$1?3doAl4h
z7`A&v_}hh}f1*5HJovn0Kn{PRJW<B)Y>PhupDyrvsFn2lh2!`L_&au=D&ucu`*d~G
zb7k~9{|DBSaC@xF^oaPk-2byOW?g>6{<AXvwyjT>qC8i|z1yFlPn!CNGXA;I|EvrQ
zk3aGMLm7YD;-{+(o-1SZ7vi7FcpUUU$NOo{{__CZ@Oo_5zfqnk<DUcQX(I7+Wo&pq
z0zOs7-*)VumGQ~{5#di|Jf;}@*|Dc7sLwk#8Sp2{6J`8PSNId~X`<kBWgG=Q0{*=+
z{+9KpS$5BrkrMJBSWm+3Q5pZt{XZ+CF!VR<KP%&J+xj%6>A5mSKl};$q^W-><DVP-
z&&t>i{}cZ|l<~JMewwxNTp3jnkBI+{>A&9mZ2&#Z{dgWg^-<4Jo+;y>1L*0@^mAp@
zM?V5SRmR_T?CHGb^NyLtKO+38jK}%xKLh#c#LaUQtB-$+@;D><C(6?qj^`+o$$yLT
pIOX#v%F}!I=bRj;Jfi%^+=#3MDA>bAi45?w3b-TJDtP$U{|8Auyea?y

literal 0
HcmV?d00001

diff --git a/src/Export-MsIdAppConsentGrantReport.ps1 b/src/Export-MsIdAppConsentGrantReport.ps1
new file mode 100644
index 0000000..f8dc0ca
--- /dev/null
+++ b/src/Export-MsIdAppConsentGrantReport.ps1
@@ -0,0 +1,462 @@
+<#
+.SYNOPSIS
+    Lists and categorizes privilege for delegated permissions (OAuth2PermissionGrants) and application permissions (AppRoleAssignments).
+
+.DESCRIPTION
+    This cmdlet requires the ImportExcel module to be installed.
+    This module can be installed from the PowerShell Gallery with the following command:
+
+    Install-Module ImportExcel
+
+.EXAMPLE
+    PS > Install-Module ImportExcel
+
+    PS > Connect-MgGragh -Scopes Application.Read.All
+
+    PS > Export-MsIdAppConsentGrantReport -ReportOutputType ExcelWorkbook -ExcelWorkbookPath .\report.xlsx
+
+    Output a report in Excel format
+
+.EXAMPLE
+    PS > Export-MsIdAppConsentGrantReport -ReportOutputType ExcelWorkbook -ExcelWorkbookPath .\report.xlsx -PermissionsTableCsvPath .\table.csv
+
+    Output a report in Excel format and specify a local path for a customized CSV containing consent privilege categorizations
+
+#>
+function Export-MsIdAppConsentGrantReport {
+    [CmdletBinding(DefaultParameterSetName = 'Download Permissions Table Data',
+        SupportsShouldProcess = $true,
+        PositionalBinding = $false,
+        HelpUri = 'http://www.microsoft.com/',
+        ConfirmImpact = 'Medium')]
+    [Alias()]
+    [OutputType([String])]
+    Param (
+
+        # Output type for the report.
+        [ValidateSet("ExcelWorkbook", "PowerShellObjects")]
+        [string]
+        $ReportOutputType = "ExcelWorkbook",
+
+        # Output file location for Excel Workbook
+        [Parameter(ParameterSetName = 'Excel Workbook Output')]
+        [Parameter(Mandatory = $false)]
+        [string]
+        $ExcelWorkbookPath,
+
+        # Path to CSV file for Permissions Table
+        # If not provided the default table will be downloaded from GitHub https://raw.githubusercontent.com/AzureAD/MSIdentityTools/main/assets/aadconsentgrantpermissiontable.csv
+        [string]
+        $PermissionsTableCsvPath
+    )
+
+    begin {
+
+        Set-StrictMode -Off
+
+        function GenerateExcelReport {
+            param (
+                $evaluatedData,
+                $Path
+            )
+
+            # Delete the existing output file if it already exists
+            $OutputFileExists = Test-Path $Path
+            if ($OutputFileExists -eq $true) {
+                Get-ChildItem $Path | Remove-Item -Force
+            }
+
+            $count = 0
+            $highprivilegeobjects = $evaluatedData | Where-Object { $_.Privilege -eq "High" }
+            $highprivilegeobjects | ForEach-Object {
+                $userAssignmentRequired = @()
+                $userAssignments = @()
+                $userAssignmentsCount = @()
+                $userAssignmentRequired = Get-MgServicePrincipal -ServicePrincipalId $_.ClientObjectId
+
+                if ($userAssignmentRequired.AppRoleAssignmentRequired -eq $true) {
+                    $userAssignments = Get-MgServicePrincipalAppRoleAssignment -ServicePrincipalId $_.ClientObjectId -All:$true
+                    $userAssignmentsCount = $userAssignments.count
+                    Add-Member -InputObject $_ -MemberType NoteProperty -Name UsersAssignedCount -Value $userAssignmentsCount
+                }
+                elseif ($userAssignmentRequired.AppRoleAssignmentRequired -eq $false) {
+                    $userAssignmentsCount = "AllUsers"
+                    Add-Member -InputObject $_ -MemberType NoteProperty -Name UsersAssignedCount -Value $userAssignmentsCount
+                }
+
+                $count++
+                Write-Progress -Activity "Counting users assigned to high privilege apps . . ." -Status "Apps Counted: $count of $($highprivilegeobjects.Count)" -PercentComplete (($count / $highprivilegeobjects.Count) * 100)
+            }
+            $highprivilegeusers = $highprivilegeobjects | Where-Object { $null -ne $_.PrincipalObjectId } | Select-Object PrincipalDisplayName, Privilege | Sort-Object PrincipalDisplayName -Unique
+            $highprivilegeapps = $highprivilegeobjects | Select-Object ClientDisplayName, Privilege, UsersAssignedCount, MicrosoftRegisteredClientApp | Sort-Object ClientDisplayName -Unique | Sort-Object UsersAssignedCount -Descending
+
+            # Pivot table by user
+            $pt = New-PivotTableDefinition -SourceWorkSheet ConsentGrantData `
+                -PivotTableName "PermissionsByUser" `
+                -PivotFilter PrivilegeFilter, PermissionFilter, ResourceDisplayNameFilter, ConsentTypeFilter, ClientDisplayName, MicrosoftRegisteredClientApp `
+                -PivotRows PrincipalDisplayName `
+                -PivotColumns Privilege, PermissionType `
+                -PivotData @{Permission = 'Count' } `
+                -IncludePivotChart `
+                -ChartType ColumnStacked `
+                -ChartHeight 800 `
+                -ChartWidth 1200 `
+                -ChartRow 4 `
+                -ChartColumn 14
+
+            # Pivot table by resource
+            $pt += New-PivotTableDefinition -SourceWorkSheet ConsentGrantData `
+                -PivotTableName "PermissionsByResource" `
+                -PivotFilter PrivilegeFilter, ResourceDisplayNameFilter, ConsentTypeFilter, PrincipalDisplayName, MicrosoftRegisteredClientApp `
+                -PivotRows ResourceDisplayName, PermissionFilter `
+                -PivotColumns Privilege, PermissionType `
+                -PivotData @{Permission = 'Count' } `
+                -IncludePivotChart `
+                -ChartType ColumnStacked `
+                -ChartHeight 800 `
+                -ChartWidth 1200 `
+                -ChartRow 4 `
+                -ChartColumn 14
+
+            # Pivot table by privilege rating
+            $pt += New-PivotTableDefinition -SourceWorkSheet ConsentGrantData `
+                -PivotTableName "PermissionsByPrivilegeRating" `
+                -PivotFilter PrivilegeFilter, PermissionFilter, ResourceDisplayNameFilter, ConsentTypeFilter, PrincipalDisplayName, MicrosoftRegisteredClientApp `
+                -PivotRows Privilege, ResourceDisplayName `
+                -PivotColumns PermissionType `
+                -PivotData @{Permission = 'Count' } `
+                -IncludePivotChart `
+                -ChartType ColumnStacked `
+                -ChartHeight 800 `
+                -ChartWidth 1200 `
+                -ChartRow 4 `
+                -ChartColumn 5
+
+            $excel = $data | Export-Excel -Path $Path -WorksheetName ConsentGrantData `
+                -PivotTableDefinition $pt `
+                -AutoSize `
+                -Activate `
+                -HideSheet "None" `
+                -UnHideSheet "PermissionsByPrivilegeRating" `
+                -PassThru
+
+            # Create temporary Excel file and add High Privilege Users sheet
+            $xlTempFile = "$env:TEMP\ImportExcelTempFile.xlsx"
+            Remove-Item $xlTempFile -ErrorAction Ignore
+            $exceltemp = $highprivilegeusers | Export-Excel $xlTempFile -PassThru
+            Add-Worksheet -ExcelPackage $excel -WorksheetName HighPrivilegeUsers -CopySource $exceltemp.Workbook.Worksheets["Sheet1"]
+
+            # Create temporary Excel file and add High Privilege Apps sheet
+            $xlTempFile = "$env:TEMP\ImportExcelTempFile.xlsx"
+            Remove-Item $xlTempFile -ErrorAction Ignore
+            $exceltemp = $highprivilegeapps | Export-Excel $xlTempFile -PassThru
+            Add-Worksheet -ExcelPackage $excel -WorksheetName HighPrivilegeApps -CopySource $exceltemp.Workbook.Worksheets["Sheet1"] -Activate
+
+            $sheet = $excel.Workbook.Worksheets["ConsentGrantData"]
+            Add-ConditionalFormatting -Worksheet $sheet -Range "A1:N1048576" -RuleType Equal -ConditionValue "High" -ForeGroundColor White -BackgroundColor Red -Bold -Underline
+            Add-ConditionalFormatting -Worksheet $sheet -Range "A1:N1048576" -RuleType Equal -ConditionValue "Medium" -ForeGroundColor Black -BackgroundColor Orange -Bold -Underline
+            Add-ConditionalFormatting -Worksheet $sheet -Range "A1:N1048576" -RuleType Equal -ConditionValue "Low" -ForeGroundColor Black -BackgroundColor Yellow -Bold -Underline
+
+            $sheet = $excel.Workbook.Worksheets["HighPrivilegeUsers"]
+            Add-ConditionalFormatting -Worksheet $sheet -Range "B1:B1048576" -RuleType Equal -ConditionValue "High" -ForeGroundColor White -BackgroundColor Red -Bold -Underline
+            Set-ExcelRange -Worksheet $sheet -Range A1:C1048576 -AutoSize
+
+            $sheet = $excel.Workbook.Worksheets["HighPrivilegeApps"]
+            Add-ConditionalFormatting -Worksheet $sheet -Range "B1:B1048576" -RuleType Equal -ConditionValue "High" -ForeGroundColor White -BackgroundColor Red -Bold -Underline
+            Set-ExcelRange -Worksheet $sheet -Range A1:C1048576 -AutoSize
+
+            Export-Excel -ExcelPackage $excel | Out-Null
+            Write-Verbose ("Excel workbook {0}" -f $ExcelWorkbookPath)
+        }
+
+        function Get-MSCloudIdConsentGrantList {
+            [CmdletBinding()]
+            param(
+                [int] $PrecacheSize = 999
+            )
+            # An in-memory cache of objects by {object ID} andy by {object class, object ID}
+            $script:ObjectByObjectId = @{}
+            $script:ObjectByObjectClassId = @{}
+            $script:KnownMSTenantIds = @("f8cdef31-a31e-4b4a-93e4-5f571e91255a", "72f988bf-86f1-41af-91ab-2d7cd011db47")
+
+            # Get Microsoft Graph SPN, appRoles, appRolesAssignedTo and generate hashtable for quick lookups
+            $servicePrincipalMsGraph = Get-MgServicePrincipal -Filter "AppId eq '00000003-0000-0000-c000-000000000000'"
+            [array] $msGraphAppRoles = $servicePrincipalMsGraph.AppRoles
+            $script:msGraphAppRolesHashTableId = $msGraphAppRoles | Group-Object -Property Id -AsHashTable
+
+            # Get Azure AD Graph SPN, appRoles, appRolesAssignedTo and generate hashtable for quick lookups
+            $servicePrincipalAadGraph = Get-MgServicePrincipal -Filter "AppId eq '00000002-0000-0000-c000-000000000000'"
+            [array] $aadGraphAppRoles = $servicePrincipalAadGraph.AppRoles
+            $script:aadGraphAppRolesHashTableId = $aadGraphAppRoles | Group-Object -Property Id -AsHashTable
+
+            # Function to add an object to the cache
+            function CacheObject($Object) {
+                if ($Object) {
+                    if (-not $script:ObjectByObjectClassId.ContainsKey($Object.GetType().name)) {
+                        $script:ObjectByObjectClassId[$Object.GetType().name] = @{}
+                    }
+                    $script:ObjectByObjectClassId[$Object.GetType().name][$Object.Id] = $Object
+                    $script:ObjectByObjectId[$Object.Id] = $Object
+                }
+            }
+
+            # Function to retrieve an object from the cache (if it's there), or from Entra ID (if not).
+            function GetObjectByObjectId($ObjectId) {
+                if (-not $script:ObjectByObjectId.ContainsKey($ObjectId)) {
+                    Write-Verbose ("Querying Entra ID for object '{0}'" -f $ObjectId)
+                    try {
+                        $object = (Get-MgDirectoryObjectById -Ids $ObjectId).AdditionalProperties
+                        CacheObject -Object $object
+                    }
+                    catch {
+                        Write-Verbose "Object not found."
+                    }
+                }
+                return $script:ObjectByObjectId[$ObjectId]
+            }
+
+            # Get all ServicePrincipal objects and add to the cache
+            Write-Verbose "Retrieving ServicePrincipal objects..."
+            $servicePrincipals = Get-MgServicePrincipal -ExpandProperty "appRoleAssignedTo" -All:$true
+            $Oauth2PermGrants = @()
+
+            $count = 0
+            foreach ($sp in $servicePrincipals) {
+                CacheObject -Object $sp
+                $spPermGrants = Get-MgServicePrincipalOauth2PermissionGrant -ServicePrincipalId $sp.Id -All:$true
+                $Oauth2PermGrants += $spPermGrants
+                $count++
+                Write-Progress -Activity "Caching Objects from Entra ID . . ." -Status "Cached: $count of $($servicePrincipals.Count)" -PercentComplete (($count / $servicePrincipals.Count) * 100)
+            }
+
+            # Get one page of User objects and add to the cache
+            Write-Verbose "Retrieving User objects..."
+            Get-MgUser -Top $PrecacheSize | ForEach-Object { CacheObject -Object $_ }
+
+            # Get all existing OAuth2 permission grants, get the client, resource and scope details
+            Write-Progress -Activity "Processing Delegated Permission Grants..."
+            foreach ($grant in $Oauth2PermGrants) {
+                if ($grant.Scope) {
+                    $grant.Scope.Split(" ") | Where-Object { $_ } | ForEach-Object {
+                        $scope = $_
+                        $client = GetObjectByObjectId -ObjectId $grant.ClientId
+
+                        # Determine if the object comes from the Microsoft Services tenant, and flag it if true
+                        $MicrosoftRegisteredClientApp = @()
+                        $appOwnerTenantId = Get-ObjectPropertyValue $client 'AppOwnerTenantId'
+                        if ($appOwnerTenantId -in $script:KnownMSTenantIds) {
+                            $MicrosoftRegisteredClientApp = $true
+                        }
+                        else {
+                            $MicrosoftRegisteredClientApp = $false
+                        }
+
+                        $resource = GetObjectByObjectId -ObjectId $grant.ResourceId
+                        $principalDisplayName = ""
+                        if ($grant.PrincipalId) {
+                            $principal = GetObjectByObjectId -ObjectId $grant.PrincipalId
+                            $principalDisplayName = $principal.DisplayName
+                        }
+
+                        if ($grant.ConsentType -eq "AllPrincipals") {
+                            $simplifiedgranttype = "Delegated-AllPrincipals"
+                        }
+                        elseif ($grant.ConsentType -eq "Principal") {
+                            $simplifiedgranttype = "Delegated-Principal"
+                        }
+
+                        New-Object PSObject -Property ([ordered]@{
+                                "PermissionType"               = $simplifiedgranttype
+                                "ConsentTypeFilter"            = $simplifiedgranttype
+                                "ClientObjectId"               = $grant.ClientId
+                                "ClientDisplayName"            = $client.DisplayName
+                                "ResourceObjectId"             = $grant.ResourceId
+                                "ResourceObjectIdFilter"       = $grant.ResourceId
+                                "ResourceDisplayName"          = $resource.DisplayName
+                                "ResourceDisplayNameFilter"    = $resource.DisplayName
+                                "Permission"                   = $scope
+                                "PermissionFilter"             = $scope
+                                "PrincipalObjectId"            = $grant.PrincipalId
+                                "PrincipalDisplayName"         = $principalDisplayName
+                                "MicrosoftRegisteredClientApp" = $MicrosoftRegisteredClientApp
+                            })
+                    }
+                }
+            }
+
+            # Iterate over all ServicePrincipal objects and get app permissions
+            Write-Progress -Activity "Processing Application Permission Grants..."
+            $script:ObjectByObjectClassId['MicrosoftGraphServicePrincipal'].GetEnumerator() | ForEach-Object {
+                $sp = $_.Value
+
+                Get-MgServicePrincipalAppRoleAssignedTo -ServicePrincipalId $sp.Id -All:$true `
+                | Where-Object { $_.PrincipalType -eq "ServicePrincipal" } | ForEach-Object {
+                    $assignment = $_
+
+                    $client = GetObjectByObjectId -ObjectId $assignment.PrincipalId
+
+                    # Determine if the object comes from the Microsoft Services tenant, and flag it if true
+                    $MicrosoftRegisteredClientApp = @()
+                    if ($client.AppOwnerTenantId -in $script:KnownMSTenantIds) {
+                        $MicrosoftRegisteredClientApp = $true
+                    }
+                    else {
+                        $MicrosoftRegisteredClientApp = $false
+                    }
+
+                    $resource = GetObjectByObjectId -ObjectId $assignment.ResourceId
+                    #$appRole = $resource.AppRoles | Where-Object { $_.Id -eq $assignment.Id }
+
+                    # Lookup appRole for MS Graph
+                    $appRole = $script:msGraphAppRolesHashTableId["$($assignment.AppRoleId)"]
+                    if ($null -eq $appRole) {
+                        # Lookup appRole for AAD Graph
+                        $appRole = $script:aadGraphAppRolesHashTableId["$($assignment.AppRoleId)"]
+                    }
+
+                    New-Object PSObject -Property ([ordered]@{
+                            "PermissionType"               = "Application"
+                            "ClientObjectId"               = $assignment.PrincipalId
+                            "ClientDisplayName"            = $client.DisplayName
+                            "ResourceObjectId"             = $assignment.ResourceId
+                            "ResourceObjectIdFilter"       = $grant.ResourceId
+                            "ResourceDisplayName"          = $resource.DisplayName
+                            "ResourceDisplayNameFilter"    = $resource.DisplayName
+                            "Permission"                   = $appRole.Value
+                            "PermissionFilter"             = $appRole.Value
+                            "ConsentTypeFilter"            = "Application"
+                            "MicrosoftRegisteredClientApp" = $MicrosoftRegisteredClientApp
+                        })
+                }
+            }
+
+
+        }
+
+        function EvaluateConsentGrants {
+            param (
+                $data
+            )
+
+
+            # Process Privilege for gathered data
+            $count = 0
+            $data | ForEach-Object {
+
+                try {
+
+                    $count++
+                    Write-Progress -Activity "Processing privilege for each permission . . ." -Status "Processed: $count of $($data.Count)" -PercentComplete (($count / $data.Count) * 100)
+
+                    $scope = $_.Permission
+                    if ($_.PermissionType -eq "Delegated-AllPrincipals" -or "Delegated-Principal") {
+                        $type = "Delegated"
+                    }
+                    elseif ($_.PermissionType -eq "Application") {
+                        $type = "Application"
+                    }
+
+                    # Check permission table for an exact match
+                    $privilege = $null
+                    $scoperoot = @()
+                    Write-Debug ("Permission Scope: $Scope")
+
+                    if ($scope -match '.') {
+                        $scoperoot = $scope.Split(".")[0]
+                    }
+                    else {
+                        $scoperoot = $scope
+                    }
+
+                    $test = ($permstable | Where-Object { $_.Permission -eq "$scoperoot" -and $_.Type -eq $type }).Privilege # checking if there is a matching root in the CSV
+                    $privilege = ($permstable | Where-Object { $_.Permission -eq "$scope" -and $_.Type -eq $type }).Privilege # Checking for an exact match
+
+                    # Search for matching root level permission if there was no exact match
+                    if (!$privilege -and $test) {
+                        # No exact match, but there is a root match
+                        $privilege = ($permstable | Where-Object { $_.Permission -eq "$scoperoot" -and $_.Type -eq $type }).Privilege
+                    }
+                    elseif (!$privilege -and !$test -and $type -eq "Application" -and $scope -like "*Write*") {
+                        # Application permissions without exact or root matches with write scope
+                        $privilege = "High"
+                    }
+                    elseif (!$privilege -and !$test -and $type -eq "Application" -and $scope -notlike "*Write*") {
+                        # Application permissions without exact or root matches without write scope
+                        $privilege = "Medium"
+                    }
+                    elseif ($privilege) {
+
+                    }
+                    else {
+                        # Any permissions without a match, should be primarily Delegated permissions
+                        $privilege = "Unranked"
+                    }
+
+                    # Add the privilege to the current object
+                    Add-Member -InputObject $_ -MemberType NoteProperty -Name Privilege -Value $privilege
+                    Add-Member -InputObject $_ -MemberType NoteProperty -Name PrivilegeFilter -Value $privilege
+                    Add-Member -InputObject $_ -MemberType NoteProperty -Name Reason -Value $reason
+                }
+                catch {
+                    Write-Error "Error Processing Permission for $_"
+                }
+                finally {
+                    Write-Output $_
+                }
+            }
+
+        }
+
+        function loadPermisionsTable {
+            param (
+                $PermissionsTableCsvPath
+            )
+
+            if ($null -like $PermissionsTableCsvPath) {
+                # Create hash table of permissions and permissions privilege
+                Invoke-WebRequest -Uri 'https://raw.githubusercontent.com/AzureAD/MSIdentityTools/main/assets/aadconsentgrantpermissiontable.csv' -OutFile .\aadconsentgrantpermissiontable.csv
+                $permstable = Import-Csv .\aadconsentgrantpermissiontable.csv -Delimiter ','
+            }
+            else {
+
+                $permstable = Import-Csv $PermissionsTableCsvPath -Delimiter ','
+            }
+
+            Write-Output $permstable
+
+        }
+
+        if ("ExcelWorkbook" -eq $ReportOutputType) {
+            # Determine if the ImportExcel module is installed since the parameter was included
+            if ($null -eq (Get-Module -Name ImportExcel -ListAvailable)) {
+                throw "The ImportExcel module is not installed.   This is used to export the results to an Excel worksheet.  Please install the ImportExcel Module before using this parameter or run without this parameter."
+            }
+        }
+
+    }
+    process {
+
+        $permstable = loadPermisionsTable -PermissionsTableCsvPath $PermissionsTableCsvPath
+
+        Write-Verbose "Retrieving Permission Grants from Entra ID..."
+        $data = Get-MSCloudIdConsentGrantList
+        if ($null -ne $data) {
+            $evaluatedData = EvaluateConsentGrants -data $data
+        }
+
+    }
+    end {
+
+        if ("ExcelWorkbook" -eq $ReportOutputType) {
+
+            Write-Verbose "Generating Excel Workbook at $ExcelWorkbookPath"
+            GenerateExcelReport -evaluatedData $evaluatedData -Path $ExcelWorkbookPath
+
+        }
+        else {
+            Write-Output $evaluatedData
+        }
+
+        Set-StrictMode -Version Latest
+    }
+}
diff --git a/src/MSIdentityTools.psd1 b/src/MSIdentityTools.psd1
index 9968a58..c97aae7 100644
--- a/src/MSIdentityTools.psd1
+++ b/src/MSIdentityTools.psd1
@@ -105,6 +105,7 @@
         '.\ConvertFrom-MsIdJwtToken.ps1'
         '.\ConvertFrom-MsIdSamlMessage.ps1'
         '.\Expand-MsIdJwtTokenPayload.ps1'
+        '.\Export-MsIdAppConsentGrantReport.ps1'
         '.\Find-MsIdUnprotectedUsersWithAdminRoles.ps1'
         '.\Get-MsIdProvisioningLogStatistics.ps1'
         '.\Get-MsIdAdfsSamlToken.ps1'
@@ -160,6 +161,7 @@
         'ConvertFrom-MsIdJwtToken'
         'ConvertFrom-MsIdSamlMessage'
         'Expand-MsIdJwtTokenPayload'
+        'Export-MsIdAppConsentGrantReport'
         'Find-MsIdUnprotectedUsersWithAdminRoles'
         'Get-MsIdProvisioningLogStatistics'
         'Get-MsIdAdfsSamlToken'