From dba9e5c39dd889eb2bb20711c50999786d38a702 Mon Sep 17 00:00:00 2001
From: "omer.roth" <omer.roth@cycode.com>
Date: Mon, 7 Sep 2026 07:37:43 +0300
Subject: [PATCH 1/5] CM-72131 add windows resources information

---
 cycode/cli/utils/host_info.py     |  64 ++++++++++------
 images/cycode.ico                 | Bin 0 -> 121293 bytes
 pyinstaller.spec                  |  51 ++++++++++++-
 tests/cli/utils/__init__.py       |   0
 tests/cli/utils/test_host_info.py | 119 ++++++++++++++++++++++++++++++
 5 files changed, 207 insertions(+), 27 deletions(-)
 create mode 100644 images/cycode.ico
 create mode 100644 tests/cli/utils/__init__.py
 create mode 100644 tests/cli/utils/test_host_info.py

diff --git a/cycode/cli/utils/host_info.py b/cycode/cli/utils/host_info.py
index 60a36bed..18ea2e80 100644
--- a/cycode/cli/utils/host_info.py
+++ b/cycode/cli/utils/host_info.py
@@ -5,16 +5,19 @@
 import socket
 import subprocess
 import tempfile
+import uuid
 from pathlib import Path
 from typing import Optional
 
+from cycode.cli.consts import CYCODE_CONFIGURATION_DIRECTORY
 from cycode.logger import get_logger
 
 logger = get_logger('HOST INFO')
 
 _SUBPROCESS_TIMEOUT_SEC = 5
 
-_SERIAL_NUMBER_CACHE_FILE_NAME = '.cycode-device-serial'
+_DEVICE_ID_CACHE_FILE_NAME = 'device-id'
+_LEGACY_SERIAL_NUMBER_CACHE_FILE_NAME = '.cycode-device-serial'
 
 _PLATFORM_NAMES = {'Darwin': 'macOS', 'Windows': 'Windows', 'Linux': 'Linux'}
 
@@ -98,13 +101,18 @@ def get_last_login_user() -> Optional[str]:
 
 
 def get_serial_number() -> Optional[str]:
-    # The serial is immutable hardware info, but resolving it shells out (ioreg/WMI)
+    # The serial is immutable host info, but resolving it costs a syscall chain (ioreg/registry)
     # and this runs in a fresh process per AI hook event - cache it on disk.
     cached = _read_serial_number_cache()
     if cached:
         return cached
 
     serial = _resolve_serial_number()
+    if not serial and platform.system() == 'Windows':
+        # MachineGuid is missing only on stripped/preinstallation images. Mint our own stable id
+        # rather than reporting no device at all; the cache write below makes it persistent.
+        serial = str(uuid.uuid4())
+
     if serial:
         _write_serial_number_cache(serial)
     return serial
@@ -116,15 +124,22 @@ def _resolve_serial_number() -> Optional[str]:
         if system == 'Darwin':
             return _get_macos_serial_number()
         if system == 'Windows':
-            return _get_windows_serial_number()
+            return _get_windows_machine_guid()
     except Exception as e:
         logger.debug('Failed to resolve serial number', exc_info=e)
     return None
 
 
 def _serial_number_cache_path() -> Path:
-    # The username suffix avoids collisions on OSes with a shared temp dir
-    return Path(tempfile.gettempdir()) / f'.cycode-device-serial-{getpass.getuser()}'
+    return Path.home() / CYCODE_CONFIGURATION_DIRECTORY / _DEVICE_ID_CACHE_FILE_NAME
+
+
+def _remove_legacy_serial_number_cache() -> None:
+    try:
+        legacy_path = Path(tempfile.gettempdir()) / f'{_LEGACY_SERIAL_NUMBER_CACHE_FILE_NAME}-{getpass.getuser()}'
+        legacy_path.unlink(missing_ok=True)
+    except Exception as e:
+        logger.debug('Failed to remove legacy serial number cache', exc_info=e)
 
 
 def _read_serial_number_cache() -> Optional[str]:
@@ -137,18 +152,18 @@ def _read_serial_number_cache() -> Optional[str]:
 def _write_serial_number_cache(serial: str) -> None:
     try:
         cache_path = _serial_number_cache_path()
+        cache_path.parent.mkdir(parents=True, exist_ok=True)
 
-        # The serial identifies the machine, and the temp dir is shared, so the cache is created
-        # readable by its owner alone (what mkstemp does) and moved into place atomically - a hook
-        # racing another one never reads a half-written cache, and the rename can't be redirected
-        # by a symlink planted at the destination the way an in-place write could.
-        file_descriptor, temp_path = tempfile.mkstemp(
-            dir=cache_path.parent, prefix=f'{_SERIAL_NUMBER_CACHE_FILE_NAME}.'
-        )
+        # The serial identifies the machine, so the cache is created readable by its owner alone
+        # (what mkstemp does) and moved into place atomically - a hook racing another one never
+        # reads a half-written cache, and the rename can't be redirected by a symlink planted at
+        # the destination the way an in-place write could.
+        file_descriptor, temp_path = tempfile.mkstemp(dir=cache_path.parent, prefix=f'{_DEVICE_ID_CACHE_FILE_NAME}.')
         try:
             with os.fdopen(file_descriptor, 'w', encoding='utf-8') as temp_file:
                 temp_file.write(serial)
             os.replace(temp_path, cache_path)
+            _remove_legacy_serial_number_cache()
         except Exception:
             Path(temp_path).unlink(missing_ok=True)
             raise
@@ -164,16 +179,17 @@ def _get_macos_serial_number() -> Optional[str]:
     return match.group(1) if match else None
 
 
-def _get_windows_serial_number() -> Optional[str]:
-    import pythoncom  # from pywin32
-    import win32com.client  # from pywin32
+def _get_windows_machine_guid() -> Optional[str]:
+    """Read the per-installation machine GUID from the registry.
+    """
+    import winreg  # Windows-only stdlib module
 
-    pythoncom.CoInitialize()
-    try:
-        wmi_service = win32com.client.GetObject('winmgmts:')
-        for bios in wmi_service.InstancesOf('Win32_BIOS'):
-            serial = bios.SerialNumber
-            return serial.strip() if serial else None
-    finally:
-        pythoncom.CoUninitialize()
-    return None
+    with winreg.OpenKey(
+        winreg.HKEY_LOCAL_MACHINE,
+        r'SOFTWARE\Microsoft\Cryptography',
+        0,
+        winreg.KEY_READ | winreg.KEY_WOW64_64KEY,
+    ) as key:
+        machine_guid, _ = winreg.QueryValueEx(key, 'MachineGuid')
+
+    return machine_guid.strip() if machine_guid else None
diff --git a/images/cycode.ico b/images/cycode.ico
new file mode 100644
index 0000000000000000000000000000000000000000..7e91205402e07a48b254e5d6c29e8b28768a895d
GIT binary patch
literal 121293
zcmeEP1zc2F7su{eJ8^9V>{Tr6UUS!VO>7LxMn$k|?OYYR8@mO?4(txVLd8}T5P0AD
z-#cgKF%B>T=;D6+e!rRb=FNNeo<8TETV`fS%u<<U&TK~Kf@Zywo0$zUGc(JTOa7je
z#?0&i-78p7{$5Yd^~z{wR<^9>cTqF5jOJ!$wQ9-VCF+=&?Wt#GHfogScj_c&4<=B7
zbfElGP0Y+v&PZZbf__s`bVuH&lUXgQ$IzkR5zV1ETU1j9SglZ;tpXJ1GGF9}uEjlz
zYTD;C?<k6VSFtrutvFlGQ~FzdQ3jV&=vq;F6i}4z`Q-KBvWoZ*&(O0d2k$Cv+9VV2
zI$0i3hL=|qr_zy1PxEl4Pq9d4>tsdQHA_((ts<4)MZ(2@;u(4t_0hYc9DB?8$}p<4
zcacz~C)GK(hoZa)P?U&pMcF(-QTh~Blrc>d#jY?tQ#e#SOYewxok~|$`cs|uCBl`_
zjTGhDQAHd+>lLM62}N<KrYQH$%X`<n6=hUIMLdgl@UElPYGt4m;0{;bzf_dRw-m*_
zKAuq&?^W`>i~AL2dV58AdRI~2y#PMp;vKx}X!%%iETt%eeu-4VzbMMoKNV%%uZr^V
zjiS7Iq9_Y`E6UoDiZZ^rqRi~9C|^PqWnhI!@s4=cGF-7QN$*#b|Dm3J3l!z`Q{YN)
zP}w+u*SwyJ68c$D1`wTb-;v(MN4)=wqJ)Jg%A9VBa_f|Qr*APyJHWhaj-t%6r8?-D
zsPF6G{}QGs)7mM@Uu_j-!x)0yPT~Mu#x_xu86D|;dL|0|D*AnRttgLf$oD}r9H1fK
z15KaY{+fPj{(;9gkIVPKGw`loaYX?yaexNkF?g-vUljSVD-=pHM6foMctds|LqQLT
zb|h0h&83V%)>wYNl3&PbVJWM7=PSy#DT>mUWEnCI+18U^!}>$I0{wyRK!<P*oq}%Z
z>5qUv9{P*-<8#2ykSQ}Gb0zE#%IZQkEw+Po7tbjJOIs3dW60*5P@F7ZYUL8wxQGAf
z87@=(F5gq1`G3W+WKnv5711nM8C06&mOf6TtIl-B2iLfV|L_c+rFT#km!U3K+~3GH
z$Epj#^+6d@26{vv3-C8W@YwEWvNiN^w2V|7EF;8!cm~hn9eb-T>aw^F#l5Dm(27H;
zq2gI5ddI=yi-5B~$wVKL&0bXQ?5<K59V}$s&QvaN5zlJsp)y1rT&C7mT6C5$Q@MZ*
z<wC!D<d-(`!XBY2;tO^Mwi9*)wh+%se7=Y>>@7NrI-mov<pWFqtn?>3Iss=Zd}O(U
zE0In5Tj~-DhK*cguPb|Y7eyIXUCKM~z`G~|JVBZ4V;n5kO4u#GkWNXMR*z7WH-Qr7
zk8c&>Ghll=WG0*0Oi?Z!l>fmVu5=+?Bzu65Bb5PuP?-V;CySDFFO=jWl59q#us42}
z<h%Gjww7S5p(yP#5+AJ<<;Zf~f6x7O*Y__d%E&sfJMa%=r>RU?_E;%rWx|DCdrp<_
z+&!x(lUgfEr>v458^@B33zGlApR5=v`99@$MM2p(Hc!;}RVoXz>u5Qacz;^RvU8aT
z!OJc5Ok{+_xqT)@ncquM9+GY4<M1-Vqq3q*X+!>o=+rK~qO5b1?`$O74S7IW&<~XD
zXz^O=PMJtq{v=rv?0o0!io&$I>P7gplJtlD#PR99^cfpQ%iq9JmQOUYBKWCnAy<~D
zQ~tL_Q~vr<iqbKQ^hv;HL@jBDp$i8VOL*baz!SiaLsvd%BV{(a@*xw$$WMfRBKf59
zcg~c20DPkw$nvirC42}5&^@~HqodF2;fgY}sv>;5cz2wn4R{V(;kbKF@_!4(J2-Uk
ztLUT0U%<lrZI?m%%$c1e9l%>Y;7{TAA-6H|mt;uTK|T4reOgf_v><y{h-7hyqP%}4
zONNXBPS}S|*`y5LBRp_G_C(yLl25gM^(EZ^Z3C{#=Yhxb2l5)<(5<1wPrwYj0NvvQ
za^_a=EBz8WtZyG+*Vd9uus*>Sz$So~uxF4l#3nf2JX4f4BjkP97Jd6*(7usub<3+L
zt|XI)n_wp)mkawz8;5ccKkQ#f{=1TtYuH2s_Kp3GLN@g)`wUn`*+gs5oDbi<GFE}C
z0@oPqa}-}-$iG1EpexWv$jjXB($^p!Lb<W{7nF}fiOD}g2OTUTm0ks9*|3lBned%P
z_(xfT&NoNz-wBsE`gi?01WpMYpKu)sc}5&okUq8OgLWW}QD^`fd7ur*yu&L>zjArV
zmv<!}yq0)#gZ%M3IuozxBd>3W|L_bw%hjL^b$gQU$8=WQ&64u}ieqWSf(xna=j8jT
ztw5jtB$J4RAR|IX>5O~)Kc2-q^scrXRhfLx&{?Z@y(*-o_-`uV947S7naY<wBb?6g
z<I)xje<k8N+{1qqr_i$^wxf4Z29<@nxNJl9s{g09L<xf5R~f3&LBw&WPm3>=5B-E)
zLhK@RmG1HXBF+@=klm!`P!^S`u0tONhE3^bS&^Q9A>#;(uqgGSd}q>qd$K=hhrsS4
zw&|8f+8arWsBkz^8So=0lgc&(1M^$xZ-1*G$}J$q0M5Fy7)RJP*iQKR&mR;eBv?_7
zu9mTjLn%oM=(_q{l!Y=;HplZCc@T1rc(uQE8hYo7fK^?$6P1O!5og2hA_hh~Tz#D0
zCSwLi3;7&;Bi_Ng3<t`TvDp<-7wS~$7}@!0%21-MgP=LR2YBf>{Ao|JkBEsMTvXRe
z?N@I_nb=D50yY$F3=bz6+ksAy50oK%4ABy0qYkP|@Ij-SLf)Jy{&f=Ve<|0XCCV7x
zP*KkBidrw)-H6vwKHF}@1eXu%o;$N$w$Zy&8EBWVo}doY1sR8FqJwC(SjOH&BRmJ+
zg`C3P1(Ls9>W5bp&r|yuIQ2A_AH-^i50I<SKOi5w=g8-g-$2>mgKVQM*3_L-#GBAr
z)@k5%{g|#a_-y11;Mcicl!aLL?Q`98;gribv_w&k)3ZvX?*8RNG7gaP5Gm{f;zLJE
zs+;U3?3S=CfRErr?glXm>V0^fVseW0MZLsh#1rtx94m1xSC3G8t+9-=Agjn5flnyo
zbs*88oa6&!0d=8H)a_`wp01_s68};C11l)X%g3^0<c>O1JO_D39*XlYT<@csGOq(0
zFtiH2OR$6Ac<1mk`P6eidY^bE+NXlfl<yLCuBUsqNG|~s!Jxq(^|Owl49L*n$`ot9
zl;z<Y*Jw|G4_$LBiq}dh1Hc({06aeH<nu55qt=hQM4eQ(qvd;@FELR6p`}zlm4&zy
zb%LIdjUj|9cmn-I45>c6$sYZgL6>LJuOBu+`mgs?zs{~3!k_C$dxqmyv=!0D8uW|Q
z6|^VNo<-aY_}010HU;Oo4An2~66%h*e&`n3&X9GK9T`b^%R5p(!B5DlEy05JJPyd(
zV1f&A@X<B$Ud;8!On=l5TAtk@%i?d?CFm)50J*z$QX}g`2ecJptDor~oBW~vF1bht
z|Ip<XfLB+#2iZfrOD&gZH-IMakK9ht$3Lq4#jJnG8G_fa3&U$@{4LQIdEm#Sd+Gza
ziMBg*)mZ(D&He;jBOlXJ+Ii>{=nh+>K46PrlSDqMpyUZ`7V<i=+aJUB_vQ&*4G~|+
z#;;I>ZADI;57=JFCHMe2zy~%Oa*ulXxay^`zw{jBUD$eQf1~w3uw#fZkW0`%;A<ck
z@I72Fd=mO6;G_6JYyux9^5Z2XocjI;F#vp_zW;^4g8xPC*>@k8D19t^Eo?k|FLYp0
zKWXcAPm#~wEpyu_1F{1e3I7(=|8k7~Rs4bHMf^ej1~|gsFL9PJ2I_@;LoPsD^?~*{
z@{xE3w$YgQBi8tfe3ihLaE8r+9-P`L?H$(*yMufNVpBY8Wc(%g&#@r#!!gC5BK9Rd
zg71j=(02hI!{;M+23o_eqHd1+a0bt#i9b<44x{65@C9)w>>K(nppW1M?g2h^y~4J~
z9)C*+R4^Fb{viHB{sgUsd~yAh=O&y1i;?Y*uV65${Y7%YaxL3r@oIl*VNkUdzjymn
z3xld{fP3Gw{mn3Zk24yj=qu_%A8npO^tjNCcpPX`vTfsHl)+ZTsh_Vq*;)^h&C?Wv
zJ)!d_`fwcdNptVCcm~hXJN!P*BA=m>5A}Zuan0>fE=%cOCNJ3zC(1({BiPXYLGcBB
zkcWpK)6aw89`|A4S-gXHMHyxCYRlEMKlyh;oVgv3vIx$f3BEZ*$G4)rC1D|3C~`(p
zPbJ;iX7E|lN2bZ806)BoHXF)9nN&8ztFDvp#pSH+Yim;~CHVkX`bfA@zqDn@NvdLH
zx*yfnM)w=<5WZ;J(mNtAL}jB6std4k-Eo0i{XY5dGF0waQHKuhxWF7eE>ZC~i#pXX
zn2H1APJLo+3HFbI*OK1G!7ci3AshIRoEXa!)B(9dom6*RaL~f;XyGJuQqo-Ju498k
z<dvv?<cdTNh2kY`-YAMMjUFcl^f8l6iM*19lPNf8VYjz*R0fN9g>^Fe`hb%*E+pTN
zxNr`|dT4i`pBUpg(9eUoPx|GU%R+f<4*&zfVhj%2Sjpb1jV7mtzU$cK1u}xT8u<i_
z+tJT!A!l>xfXp8to-!T>)GhOS1e3sl>?_Xt2iq&fxugZjp6nZ!G>D#79A6>ML%RfR
zLiA7KKp*9oP<f4S^tnxFPH|ar2|w$HIu~h3HUR_r*Z~v42Dlkk#({m4;!ZZw(ek23
zSEHAAA>%}I<RuX&qHmS+N`O@jH}W=r_mwh*J|@Jnpg-P)exSdL>0k(cAxoqW&}qO1
z81;M{#{*=GM~Jvo+L^EE&N9yV1;{mz`4Vtb+>bm64)hnI-G|%_^Z_sqpj;c^1>DHT
zqAfPPy=)(VFX}dtJ}!U>F*Cs^c)<N<h-VNJ4zS2id?K4A{OH#*kNVNxgN!3Tf5uaQ
zDZbEl=Jqq-M}BO$jeHhxAnyjbM>_^>%qvH9@8bCrn`HZ%bGoQYAAa~qzy=rrD_{of
zJnqDS#{0ns8lpYq1>^NVzg@E_zyDFzkGvMzT6`ckfN=_<-9z*Q+@L?;MlJ|#bH)>S
z0LU5hEBKwFAb$qE0KW|B1z-~}TF#Stpc#jQe65q^2a-$B{cGC8?kyW6#~L!MY8ij_
zK(?VF->~(-6S4p~0nd=jz}PxI)Hvf_l(OzC%3?=#UPH|b<nY0V4+LjUt^UGK8KOOC
z0T_17<eDY@KzAG%ud!o>)JgD1$T;QaMZSmh6S<#<*W|PKR>O&W*zpazJc`Isk{t4Z
z94_kCmnG%_!K{Pd@&ws?(A}`jfo(zg%zM;<JOTQsSY{zBJiZCJ6?Hxv`FqYA;rj40
zDNmgDQu_<kfw}_kNu7cGMb!n2#R04*gbX3K;Ar`oc!K9tvP177r{PSp@bZzQ3d)5X
z!0v$FutUfp!7f3@kqbY#SVw2T40!pta#;2Yfv$iFat7IiykjgZY!>Rk0r(vRO#1Lc
zesJ%z=$CV}=q~NOusf<}8Ge#uh9BknU6!yyzQJ3_3TzAd&)x*$33;ex1^LXs`$(H_
zn^T?vGjs!GKv$tR7&ps@fS>3WmG<&Ce46kF1iPcf5>1?>Cp*!=A8?)OrCbkm1N28f
z8;@y1-Ox?8DaiRjjsXK~63!T>bYi0%Qvw<wF9rUgJlFv~VuByzAY^Q}gvvZ4$6gsp
zf8=d3))jRlCPU1CL%^-!Jz@v+ouY38as~K+D|AMEAh#~Z2TR<Z-Pipa6a1h*+M<Bn
z!SbohyQ*a$@)aHZRqzA0?b9{7t)V-{A#vX)<cejS`(lJnkdCrmz(%p1F&2L4DcaM3
zU8lQ}23mPD0)FT)>?aPk>CkQTE3jS**`}CbYFqgn%NE-s<X+kK8V^75lyz92?&7`?
z^e5W^`^Ub4;h)o;=t;V$Z?{1gf6{#%3_I*H`mbPjA!DY%FX;?>sj`_2JI*oCA3BFR
zG47lD6WKRhJn*&e1TL^Q%LWSYwSEkJJjl0lel>3Jv+Xxte&83t^ED$SJWNmdi`prT
zNMFgWgQoaEmTYs#z9BrrwiR(j4|5%_Oo5-}CocLc;HP?54Ffb19^ilv<QrrDU~izi
zBJLzyF%A;rAMrnQ7k)~>Pyey384tf&f8$_3Nq&F>`t#6-r#_JX7wufKZ?I1o3ygk2
z_NzFvu3*dp;tx~dSKH6H_%Fyl`>zo-Wgj_W`t8%?ec`J}ZXn;7Yk`C5E`Lcs4x7sD
zN!Y14`L8&{50HJ1AK=TNo1i&l9DO`!FQSi;50-cQMvQ@219F9TKzq;v?Xoz<4<${A
z-$-`RHwjw~*#PaJn~){=ATidL_`nC`oOK&G9Q2T5oY*JhUFZq;HLEklZ^SE>Gb7_S
z8G{;%pNaqM%U+S4Mohpq60(54RLBm-KwzAKe%p%uD{w(9jhGs6L-r7B182xSVsLd_
zVPgC&;g7EULc9fCch6;tN*n+`4$K3<_>i|R<ZpbdWd&^)5g(9DAx;Iog)bm_!{)<x
zqYZ=ubVq+QADGX>aRt*6XT$B6nA?xw@v7l+EC-jbh7<SLrr;WF1lUHz$AAI40$U0h
z$H#+W2DPrL%L)pRZB^)o8g6<0Rr^sfs{Kx~1R2G+6pV2W`wS?hOrdU;aqu2;gtj_l
z1wLHl9!O8{{^Z{k<;HROF1~>?%X`R2Ii?Fdf_*Tu{VsA4M&(b4hLByrg>gg|_Uhok
z73?Q+BlsV-MdTic-;i<iOJmFj!wNZJUBbI(x2wj)5zp8kM5RC4U0>x-g#2?Z$k_Z9
zcnh03zo(q{ve<#-gk&7D0XY#ePXD8RjL}#70JWUm_ocapon%>%QOFtMji_+T-;jF)
z`6~fG=#QM7N%=#v*=X}24~P%yg-!wo;P!X#=zRcUKFqg({l&Y$*O0t09>}N1kUtbS
zX!`z4%ij_X@ICkde)uxXi9s8N51}6s@)z_5`U5?JJ_wu%c81f?*@*lt;Kvc?{5k3c
zETAWR*qyTsz3z-T2+$k$0UR?Mf|>8h+`UoxbBTej&kTJACiP!14qEx?E64L)^&%h8
zL)ua3O-wS*aN`WRBOhf#|HW50#I^qjvJAT~^n-LnjC+BM(MJtqbl36dKl%!XIQQRa
zbdvQWI#{FLm*Y#~*?;#H4nJW3=~p=Xfc@7x98~i@ez5TaS{yV!PW$@@8o$9X<1FGO
zO}xSPe}wTf4C{aAgrxw+Y1N|7DEja?Ei+ns<XatL{<x;ip{_$2Kx1Y5TXv+eKr<*#
z-cNabjN!)`0ii0Nhike=|KS-ti+AW<by>JZyN2hJ>;Lyp{1$kt^iFAGmW<X0v7vtX
zzX+ELgx4n#qoQ9x`ac<yMfH#J9?yy6XYnq|Kv^i0%4QtJxHiqadcOC)&)h$cdX>JV
zauJ+^iFa28p6Is(zQ{+4n2Ta{oMr52C^w98WSX&LnrHDY%HXn4HtL|d7*{n6eD7PI
zxowJi2)-ONMsYmB^+Ldj{u6-*wX0;TX$V*2;yvWh1<gcRk)m$~v_M^`lj;^Qz=wUq
zF^+0_a$Z5y>ulAJV0kL=7X2<-oQ=iLwC9)>s7ulTeN_DzJ~eE7FCov`b{NJ24Y2Z#
zf_Jq29VEm0x*q@EGM;8S02Uqt6wNrM_|SpJgrE$<r7Q9LgXrf(?m+7Ex4<#>GFi`H
zF98$5CScTzy@?Ob{I0O?aG`XNEt@Xdjl!mpjfxK+IY%IJN+i$mDT~{MXwwpm0#?|B
zc=`v%o#sQQpgh7x&3xDR^Bg#H4is%*<eUW^;-M=n3z#npSOIf9XdrNh90}YlcZwVt
z=0?YdPa>a1yhe@);{vg!3&wXKcOmjdB*$o1$EOa!h<u(C!3@}egNbq==*GEA!FMVz
zKDZ;l0o;+(Lp~DY3b7^^ALtVibConX5$HyO(7<Y=&;`N;IN{ougZ&8Qs%8k8k1OuL
z1H1*!J<a9#AoaLJ^xbgo8MMIqK<F<*zA-^)Ky?!iz?pH14S%hVb1Y>m{99acXB|gg
zQGZ+`_a_5q?qk3;#v@_v70@dR{&AHD(gnl`go~g-EWVLrD5{(0ozOfCXECS2wD^s6
z9DN<g*+&@{8L8tpc+Us&_~_GxO@y4N^MQhnWFMgqrrHMBMBpIS^pf*p7)O0M5IQe%
z{bVm_44lTl8}H-5FQMb4!^p>qah3jzp^nd@KTd-?u6bQ9$cexa{32XI1AIUal#4zd
z<V~5r#@Yw?M#Kle3APY88n6Z2jv!yuN5~9f8>8xA9VeXy&oPf*-A^Fo8+@maTGns)
zP`}x4((d!PFM&7cNP5d-PBFd?{oh#AQ9XVNcEu?8h?d;9Nw^6;P_<XZZ>)`kPrnjb
z$!`QvOpSIL^5iks!LkY7xz<*clbcoiCf;&?t{QKQ1;H3=<n!@S^Ak9UaV1oq{&;4T
zEXKdBp|Km)Wq$?W!~3zp30!~^a08ASd|3yyymzu3ZxruEzmQ5cF+StdJBhpCGvSUy
z*mvSP4*W01aS*($<E+n&1L!FF>{saeA)zB`ok3aZ@r$A_Tcay6(Sc=va8%2HpatTj
z0mZVBkAFjSg1w90<^fjb9elRBznb~1FYAyC$OrIK$9fzW00-DUF`haI7|KIi9%!JU
zBj3Xl7)yfwMA!w`9HysXI$&%O;YBzCS50ilev#JA9TY3?0Wa!8Us{y;?wavYn2(}{
z@6H*yo+|7D`rue+IW7Rqh=29RV{;k$bd2sk`nWNU1AGCDhVj?g0m4<t0CH)d1I~^X
zHz~iM$-fxTdz6dvXLQnyX#hNsO&kmxt`XZUA1ryIZ?j?BxW9fJ!HjWze2DT4@EPMh
zFxG_+u1l>KnAZ)yU_3~4G=Lodj=)ueyPyNsOh%q5CY#6jb04aD91Zx612ACy8tqsI
zjZXwWgpSj1=ztgx?x7pg!a9yJ7&lyF{LA{$(k5aJC5$urLgO-Uus-0L`~I<>kFW<Z
z*hJt6TnT5b{d2OI8msIJnIia~`=N3j-x-c`JLOmjq2r{>Y|}tDTtm)b+x5qjGrnpX
zfVPL1>BgHtU$ipwE3K(;kYJ#L>lW`4Ojvs-w%A!~2Q8*b9iW)Nf#*iW=JSC6eOWi#
zcEIo9NaIQJ%D7eNI6W6d$H~57jRp01bb&YMNFSyFO2%9OtQ8HL0h@?*fIxc@Uy<&>
zW?+2y>JbtS@qUE7#=0J{;;-R9a7H{dpmZ@RKZJZE>WSX&Yx(~`*2VEFcs0UC@>a`p
z6~D0N0p?Tj0bH4HYP>O*0BfYcULgL5p8&2H6U^lT2G|eiIM#~hgJIz@^q`f1SKy?7
z&GRHeG`M$+Rrj@Jf&T{Z2aeok5wc2r!&nfkCBpOmfHUM22g8eNtj8(lA`rgN5!3}5
zV4YONdx!^mn(J_2JA^S;d~kWj;V<nRY=9&6u{cs2SH#E0<g=o|pT`Bm|FVBqkMm?c
z1Am4UXZ2hLF&~G@2d^>z2y20XW}wfWxstx14dV}6&j*)jEdJVg8ic!p#esP9UyVQP
z6l^u-><C%c@SI`A8SBvke%MObMA!__4t$3lHFTgI2|0j0fFF(z{_F#QyQ9Tz%AG<c
zV$pr*k`ep|{*ZkhyD8)zvQHnhV=$(T<45os`hpL1T|E~B&*K0M!C%l5bj6x|(Es@1
zFV_<T?hcl(ME$YaJ`?fhwZB;BF%EJ>P0hRn!do4yf)4Q8XzK}j8IT#2gZ12CXF#j?
z;166ubKoAeA692)v^EcT^M~FsWdHQ#AN=Qek&Hj)aiZM@`+&N&Wm4JDY48+nK5=Mx
zk873#ypJ_|gkOj!|8;e%`=F!3q<cnn-w6D9j47`x#rVUXVf-xq*T)}qv0dZwt8CNQ
zc4A$>gwlV5xG|4oI>&-P>=@R*+`mY&QHuk~F8GMp7&xf?Im04kfb1IlI^)c=!&-TG
z2Xoq>H}SQ9T&FynAOkVrkGKoA4}M!eMrRpD`v7ZE8Il3W1Y#YmbHHPe8UN>gQa*%l
zO;G$p6U_brC-4P(oZw)b<uBZjSICdyIq;kL0G@)sSfkGn|1p;b&nF!ID*Kl}{tx^|
z8y{n7!8hUiH8_J7_zk|g*NYk}0&n(*$cv#b1ka0)#t$Sk|KaQ5^M(IQ$oPl!A2AHi
z(FPs(1MXu@NW{3n8MXp4BjykMM)L=Jq<pBqBjNk$gSJ23NhtnDiGLC}{)G)d-yYVg
zXB_|yu-*##1BA>I?GgK74qBA?2O4^T25bXyjdml?=S>j%r_G7aAb7q(`-k`ne~$JG
zVjB2$#4NntGH9Tlzaa1>+;Iqb(dZ4<azq;naUa^ku#xO16RQ1_Ano6p(sn~eftwai
zq5=9mA?Ls!dJcLRY#V88gdhTaiS;1K7hs+WWQt=3(f*~fkniJz{j72ApQ!C$<N)HE
z{{T*ya||0O@*kQQ0(mg#EPTFxK3{7e_3*|z1Xw#8@i1s6%7d+<53XTjQP=Vz5_@4=
zHL??j{D;T^8JqtC4`7S6`7e!~1}?nT3iKLsj%RVLzrKmu9;$U*J^ztyB>PBV`$+yF
z3#005+K8IEK?T+sk^drDV_9MUsy^%Gzf8`5a{qOd{3n2*BlxXcs|EE#=0!gLh5QfS
zjIWvoh?T_rNs8?S?dV<BBiK4Y#{x2^iur<wq4W>Ve_r*La)bBOIIFMO_G|K=M(4j#
zCVU(A2?6{#v@)!@7B}e&Ya{tz;a@7e^<-Ut{v~u9umWe$0QEr!kW0t>KR(oS<ZG;P
zi+$VBZ^&|^#v9kbT`&KQJh(;%jPL)LMll@A0bmj^sB}RMC;LE#6aVSY--KSX%(9Mi
zUn=@g_=v6^^u@r}=*N{`;ZJ?K7!RQC|3F`$N&R0MIY2vHe|;>*Q7zwm4>;)0{{)Yj
zS3<|hZa@dHCNk^^A1K2R9ntrOJ~;3kAJ!Xvyyb6${a=Fj+Oa;CM)rRKZrC@{OR>Hg
z`Dpz-r<w*|%^xLMWLSlc6HVbGKntw(gtopopf9XzbY>dx`bLlyelI4S7qYM6y<Y#P
zz&}3y-@HDZp?w#CgZ}(ezzld;$2s;#UJS86A1pV*zY+iWIJHI2&4!$ac$j!$nBThl
z(EAwrzoW>2spB7j2XKO&Lfe0qt?Y*ZE}YL7vPsXVbzH>$gah(e`g=DBK7;ovywUGA
zt-a(obWhNc>W&R}HSePt{~+*(4T#tH7m{7bG|MCMw6I~2X|;|69`FupoM7Jp#u0L^
z_AAV9^rd3oF02~@e}Fo;JmYXTYW$0!0mXvi9N+Ozh=25D6TAmK5X){FA9W3W)^TAo
zi0?Sy=l9Gb`%*#L8P*qLaOP)B82<#kaU{(6H^`+*HUT?gW32yX%y<d(0U)P}cn|F!
zwv~*R(Pz`fzex({#tO!J{3FB3_`_GJ*JXk1v;2eS*e?h613CnGhmPZ2F2|%Z#=+A2
zCXRm;G5}kk^@$kw3>!=3nN&aNx%zqFA>^O<3Hj&zIPiY;gw_mll`^6q`>V?^`Wm>y
zPQ-2etDpgVBHD%tJ^mTCf$iVY0WyBkuEkF@inFXUy&3nokAK$c0mp`d1_?a=9l2h}
zIX<w7@x>dq4sE*x8vm|O10fUNYW_o<bzH;qZ#4fwO9L@RO5+><&*r}{4Fvx+<EO=1
z8vjT0pQ6w}(_R+z_&=Nf#&i&VfpkL9;Qws?Bhx_Ot{O-E|1|$K3Ju^R)pYnjn*aP2
z9aOe~|NFPke`h@ZJO7vzzyb@S06JN7?K%;ujh-rpHxuO{a=Id)BlFw(Kq`ZaXP`cC
zE80t>HMNt5(q|#H*Y;354{J8~(FbFru-A}!4iv6&5C73K;@LgoT~P*=g)*sZ{rd15
zx%TMh9~pZ7zk8-pK+AJYoT`3X8DvqI=IpnjJm^%K6L*NlI|mRCL+KukSEL*rJ{S{=
z-<VgAHi;Y)t=EpHHV6L0Gk6y7@ca0UGEp|_KwYSl>Q=*oYas`aPfZ-9|Nno#ji-Q!
zNA-NK;!r6gt&!1)_%MS$7l|ifV(vcrf50z{e-ZQe#h8E6YZ?=QJUKpcEND#QVey}4
zZ4Nvy#!k!kQ6|bp9jHsr$)|nA2?nvQ4Z%dPsj(AwL6dt`-~aDAW(tV4c2sl|`*aVq
zY)W)qM!bD2bQ3(lnk+(>!DBJ66TFf<G&-lo`K4ITkPDQpsf+4F-GBkGz+M10zzA4r
zA9Kc1$gygTAHM(JIVuJ8eW)_9Y$>v{6Ug4)6?zAqgMAkIO#IgAbW~fO@Vt+%e2uNp
zzyjC+BWwg<2JD0bW66GufB$!u6cGBZ@|V=Ms!z6d8|jjq=P&0mkPR2MJSO`c9iP6>
zeVMD3{sJ(=E&vDMLO3zMr5xzi{NnrnZ)fS>RclQSuxv?mI;M@ipvSQ5QqR8+4-?9E
zu#G}_um>Ur#r~g`Et${y`1AdL`&r1pDy|dpTz@McEu93vMeLP$b=`P5AsmF=lJj$A
zjOqiNna?6lRM|hi|8G2VKRj@wSgJIwVd5!t1Nz}$A=hv=p0+=hO^~splmp-k+=&Lv
zXEkm3-oNFnj(sSno?gU8{jEZjLF6NatrYFEAB~@JgO~9I?w|qUM4}0Jtsevb8~6`D
z$9Pa)t|8%kL&QeVbHsH2UVV>QJ{WhziJ%G5MoT9Z&G_Drc-D?Xwlz;pvCj<AUPeAm
zw%7j+{yk<M$1dA)d<STPTmooBv;wc0c0VNFDV|~YHGckr(0R6fvC}2Kbp5g3XSxVm
zAl8=_alwxm8;Z53H1>;ZT4$2$4<g2sI{#zw<$KF1Xe8Q-L^GnDv;#C=kNV?(1UnGL
z*E?HINw9Twzc(NL$@<je-iU_GcQtMKUSc|P`$g$kIvwRdw`#`Ma!&p~y*EXsL|+5N
z#u)DlS`tmcYo>8x;=39y^7T0>hB+nU`*@D6HicgQ+GmM|hzUSb%^vcJO$HbqrEf`d
z(T)*qdh%n5l_!{IgK^pFPkhHJe@k2u6Ubb_4bWJvZ~wF%(DL4a#$oigx-W9Li8am>
z<2#7&nA3*23Yh1}AIv|8JS0{*5Hf(AA<>v<ofu?*_pQ<B{r$un<5SxjbB-`q3-dCt
z#=_RgaxN~`q{Do6?28Lo5Ni>U9DGZCj%(T6Hh>Ih?Z7|NkI1p8(wp|lakjddX!RaC
z&2y7@U)V32wN`10miEBh<Gu5#pN`gefgG@{h%2wY)q89QKy#wKumj&YSIF&qnnRYB
z#=M*nZM?*0^Lc(Q^c}q1GD)|uE||`96#2}8fV~P<xky`K%wDzMiqA2X3tG$ZXJ-Tt
zi2vU!KcMcrCEk0=oL(Y|^@QG%t;gJS%&T75SFYQ^{8i6O<$E~m&&R)aL9TfQTY$0>
zTU-DcK)Zl=AZ>tL^ZQ%JgQ}eFUkNgQHYPbY^*^k$!fTIBY^f+$y>uJ~-+7%0-QBOR
zqR2s{T*n+`q1?nK1DLxk<}h3S#WL_M`LE)AM`3>)6N%mnA5VRWJpb5hWz@A6dHsd2
zxo!B4+D2dwH`ejTy!AxKf5I6&fG?o+-oB*_Xyd)UWh|%-5=?dnW2*nz{yWi*r#6w;
zXM*ORZyZPS?}Kza<@G0YcVfO$Kaah8u$CR#1DLyS%Gw;J+O7CJ4<3LQ;0f_Y%7CuF
zJt6D?kKIrlilm}GiOZUH-aprG&psY&5h6yzers4GjSsc{^1YbOun)|8Tx0D<v=v}a
z&~}Jz4Wjt)FCpGVe*yZ8z#H%=f#;uS?Y@J>EM*A!*ncwChmXg)3g8Xa6~}s<d>HHF
z`S~cmo^Fc0n|_z=KjaF;x^2{UFqTLEq<;|cpy17{g!BX2{GM~EIzq-AEs@v#{&rvO
z<A+!)%AqBy^_U}cYb-HuV>_#DgxI^vS+m|6t>tNQ9*|@N?;u8mtT3#`%1y#N2cF2j
zW8#&N0R!{pOz{V@tw(K3chSzL`3y1aBa|>We64GotA`JU-mi04lsC_G+*R{YcQ^Vg
z*m-UTh`qa}OMZzw0ohPfZ9RC6HL+liuns=xpk3?71ly4i^urhu@W{#XuHYH+0`VAE
ztkr!7i;1G0@jdOn*2h!a4SLS)ZeZ<AYM&W<2wP9Q=L36}jjS#CroX0{F}yI8U&5Xy
zSl4n&8<}U0iw`lT?wFndkI*J0p2f!oAl?`H?_^Pu^1GP(ig@q)*nQ{}`*^Gy@4J_|
zCi8Zzzq-3IT#<~ZZG?93HgjsznYi8{=+1H(U4DrnLBGO?nsJw}n0OrXf6)JM$ur`e
z7>8$idqAuEjuyK#`Q2|H?+d?4HWN8FtPQ?@p`wI+mJ|ig<I|4kz3aep?RtwQ+GlNk
ziEMpz`6U6P#x7xRn{9u|wqsoVOU%6f+F#;%v<E~^z+zWiY=D;c&Q|qg%=eAQXsdlZ
zVkqo^hP^@fQ0p(>i|Gs=u#FIV_sym86SUr>ShtgSZfbnS&x`z0RYmby5qo|~4Rdt+
zBgKWcM!%zJ6A}+il>uS<vHp*P<!MdK|7~<1wp6S!OFD@h4%UdoT9JGR8ftWj@5OW$
zKA!Ttd|+P+thWii#bv!sty~gph!Hl9H7&oS507?#FtTrubJ4yeeKne=COs>20^lKd
zX=EQEulb}nmi|@r>B=<_5*|k3<0-cW-hfBy{n5a8)?emjjAxP&wZ1*@m9o^!T<7CW
zX`8c;M}7&hXF}wc*mnWWDEs3PPuadCxEzoTz<fjErLY02^}O)g(4md{94$_L6Ws@{
zpf7wp`r5G;Ft7a&o->_d<hSZiHQ(Vg){yUjZfV<Kz~2PDQRkPiFWaR9y2?zJOWmvD
zigS$kq1_*nV1w=B_Jk?0#{R6d0pO((aiG@k_qV7mcrWK;nnu6qU=lh-yhrSX7;ME*
zML}OXA8J1Gy_n9z$CIDOfjtrqERr!J<O*vvo2pa%JnRwHt&MMfNkV4$Ta7FBN9Db)
z_19C6j+Um}2M@(uQ;XWrcjmD{-Ph!cNMClyd6@~+zlWR(bP_S}j1G!&_neL{f)=Fr
z#vb}U)ps9_=b|<u_!gJ-cC|j9?7YY?xy3KP6jwa3KQQ*vf&7X+kxaB((a8kz0T??<
zJdKI}93N2rsF+x@BB9#);63~(*2O=)O-CJd9!_^R<}0<{U{9pEJ*1t-cuv@DQ+>RM
zJ&|7``-}ZwutyOeag|Foj9gYsXSE&U{jmWT#-l<uqvNY-_i2w1T8D&qD`dbxEU4|{
zaiUxw#+4*Qt`G2|-`uUP+&dn0P~#gDUDW@n{U-LG-7s3}2>2%A2@~mrchIj3n=z)5
z+{2CQ1OMU^dx~<%p2a7Q@h3UNUaPQ2rpR=3G67zSu|k@hpla<6ArG1yG08w`k~e?q
zOD6hKE;+jLOt}vnuzwd0Lwiffe++-CWku{YvqHCbJYZm-Z7e)ORy46E=)3Q4+TSLD
z@=Ms~Yn{8IoZ70x#bjBcS9#B?ixhXFZ#yAu0C)+Wg15wDHP6L0?}>nQ_0V2O2;PI%
z@b^plOL~}M7xjI-{$4w#wwu|<i#_|uuC5v;_hw*DnF1T$QOhM_Pwb0}d}a51(jU$0
zOnD4nE?v_$C7WRE!SEQ`Q`J~m*MAN?6>HDPb!WJpFZj=KpOfWs${Wi0==$%Q`djdy
zVwp3Z(w;I-vC%;N9QISh_)WAK;u0Ifb_!og?G4D{%ub4O|AGzzQI`pP(U(j8*b{XD
zZ?ruT@5VKc$uvOQ7(NPRno58D=ivjuTjFsPp0n-8nk<f%fz)pR{f~b?4|EQDVBJ0~
z>CHIls2}x8?JvdHt4Y%LVecu#kfz!}&<t@j=;vOa<Z!#LKEPs<kEd7F@WY?Q6nhGO
z5goPt7-Sz{Cvd23hrILkH`j%D8D%60|B0vIEqKgp%^)Yhw%^&Jfo$_9kl$zi^FDu!
z)7RL7DDp0Na%>%qy|R&f6JxJTlzq?&dXHQ`_9?~Q<RKq*<*Vh)AS`+})o{Okt|;qA
z$=K1D*i)TLLK_wK!kB~WgzZcy{=*)?2Ot+fyk@_zjr$#G-H{;)WcyK<vHS<m@ws(M
zQLy(f@Qq8qId~4<i~JI`Ik30pivS(9nWnlsF<+_ml-p(4^A+|4_!+B{0xt3kXruBt
zhDSFf&e7Q*hBd+YFWLdH?K1@bv2HnR0Qv_ob`a~&Bt-0I3jdi47|Yi+H~H&wQh!l~
zQ6J(vx0m7Lr?rz~Ft}VnOOh{R5AcNPk9RH~qH%`JCEu~Plc}*M;{biYKH;6RQB2cM
zLZhxn4Ikf6aQ>72i#3yp*Wfw(e*4ltQ(O>6AJ9DhzCSMf|LYH#D=@{+LkD^673ObZ
zOb;LN%`ZKoye#i?iTstR`6cGN`poueX@3bN^O<4hGv7~W{)4yRF?dZphYi3%{<2Mi
zkMS_p{xi-~$o9v!&o9%G<3Z><__BSvqG0|e4xzsh^4i#Mb$;pnOGVi{LE0We{W7rU
zzzw{_$5eR*%-Amx2lH9}(tY#&gy%o>MUD+2o=fh7{}xjdEa%5O`d0i0%^@eyNzl>I
zzMDEq#(bsr@t`^OZN(T)Lq4A43*-$EV}Os455NJO0T<&Q-5JmP^Ze&r;8ZRD9W4)Q
z`UnzkoX5A~KWL8el{b&;cnjV|7fb1$(p~BM_-jYye#Ij8G~nZ5Z;;2t|AQ*Z7{kL+
z<|Ysu;6LzH*aor>iJAXcgI4wj9Tv7<w)-Dya=r=U`+<Lg^PlJnIv-v}eAL8q!pECx
z>q%Dlz__eM4$_{$rU-kk$3J0jNXNl<j7L<DOG7z;0r>#z<%}{!-<@6=EDwo7|0xEL
zx!{Ll9bU)MmNdtSW54KSmvJ!moS^(CdLqv2Pwjb(sl*Yk;-kD1^SAKv8o3eUGN(ux
z6?zMQP9J^Ta1T5k)0q6seO>t+W9a7+Fop^Ik4^>>1OI`e+%tvtJuYoYYf!h+wEGfH
z_eC8V+8LGqA=1Ve|1tlm{UqA-#7AT8J$S_N9o{i^TsCYua=7TXeocKlIM4@Ws9w~8
z|8PJC5FbGPzmlg!;Qs*=^1EmUg7?_pOpFl|<NLpcSsw>ue}5DGC;q>DEa_~B5Aq+~
z{~Sl-&dn2wf;OhH`6Z#N6l<K@CCg*}%3p@R`5DBeuq!A-O|QhF{~`t;{)6|977PEC
z{AUh5f1oI6ZzE2(i^j*Rd4y}|KE^G;?hBnK{pOg1%QbWs@d()%jA2H;59O%KPHg-K
z@3A)`a>9@aHLUTy{>Sv6=#L}#oucfRA#;N<`FKNkf={p$$o1n;+Yxyunr}_rUqY$R
zsUFD?^*gF%ATjY@@|^a?q_w8Sdh7|*@5A)`C-^UX0`Va96Se1B$$WBL`;d?Wz!*>*
zM)RMZWxs^JX2b#NxH7TuA31)xr={EzRrU-181Y|B{-0?N-5+W#+YD;@vuwt87Wz;8
zKfDawk0bv(6aQ%(fV%#~!hhs}CC~jx|6gfr)W3)S$OVtEk@36Q{>H|4{-61e`97xd
zAJ1b9*XV{C`>$#TBqsh#y3l^d7N0czK2c*8rbS%O-^Bh?``;M-2mi5t3)*jS;XhzU
zyf~pb+4Bhb5rPoQ7sr1Xn~Xke{kjtm{|PpVbHV#>HNPvN`42fnUr*2@$pp6bYL@Ul
zE&nNBsLumq<r(n9exv^vhcPh#KeN&$vA6#;y8aF4^(G|$Q5JL=^Tpo1ko;g?%U@CN
zef~&!o2q1g4d|dL{73wbvFl<@F^Ve<)yeg9E)Zi?VLJ@TU1HLIW9bmr=Mt3vn)dkR
zgBm`QO^)thK49z|a<_mZt~hWUz~eQzZ2h{0T#$S`_mg8hFizx$;r}<X0SU!_!Gi*d
zvT2;8I_Glrd7%Eye8L<<LwPu3<pDTAmoY9)9K>To2g8J1x5zO?BXfyP|H1pj9RHEt
zi+-PSvfmAQ#=JGe2fl}A@ND2+`M$CI)_;y=7-P!B5exq@wp>5wqb@Ts@n0MNCF1rU
z=!F<;b{7r#qoKcsJ5f)XXJhPFLJS<k$5j5`J8wAe%XK6k{?j-xk(;LWpQWEB7m)bc
z|DYH0aM+&#`FD=5qcYm?FMf8}pt$=0)DL~ecoT6%BY$lFe<c3v@;`|;|I7TxUL81?
zr}9_K-{M)~*Q((%myfbo4~;qFdH5dN9CG~+QQN<S|55Y5iMRg;JV5-W9WNV0+^;VU
z94E}{A;;Yt%YQrv+o+yDf_yT^`1<wW_m8Llnsq^_?=La;|AG&&zvxTD{Hd6DpyrE+
z6G>N*2f}zxWAcEg3%p044f<}EliyI!A5oXDfBhr!UyS*n{@=tt{sTP0n9mD)B-MG0
zg+33|zxf%A^+7*wjJi*J*PlPaa~4r1`w?~d`qw`y|H1pjKK=_aIOpM@&p0A9W3A+`
zsNc+c<m@nZD<<8CT=4u6*V=KPKO*=~_U7){A0z%(kN^4+#(xSMK<z;Esk01ldjR^$
zAC?5Ht%aP8=zk|3>&JWOlZ9MyZfN^7IbKA(Pkdy3=JH}Yf6>Sz=JgpG_rvuA57hZj
z&i?=`>hYgH%J^@V0nDSl=B<eZ^cVv<xVT^D><#greLV8QSWm#iiE>2ub%h99ulpJ6
z6=F=StdQJbzP`x)C*u4cbYC_8Tg(CYQRaU@2B2Ty-Q?fo{wzn=$ay=P#>@4yz<2ly
zJj;3~)`O$IL-ffa9zaeAdp+<0zKhtBZ^UxOvuatv*iz&OkgGyn+IsbJONm4Oqs;#h
z{Qr^Wf5C2xyd22@azo&!IMX%j9{y(@2sxm3Jf7kGAGvJ^-R0|8Sg!qB&3DW_gDpqB
zuqjbwPLKD1Co%9}w-%Ic{@0H-{}Z$Xk3moMN6mNfKRp9~3%mc-{*T0aQw||3r1v-w
zgJ8}n#v_RG0SkRt=At_%4*q{V|1+`7{}!>65p;}>zCtdD*We3$1bl(9`#(y~e*G<M
zy-HTZz7ch3ttYZ4Xgh$XF~Ot$56{9!EFB>0QQH!A&3r%M=l^~+|2xsF|A0N2v3?fj
zctKy)bTjrEd`Ei^wthlO+W+y0j;f%kDL$Ut7hFO@>>GjgXgX)7^<Mk@GyE5MU(zqE
z^`Tk+A<?Y=f_=P3(U?i_&eT1)SqJeh#{C>wp_`8d{~jM79~2<hlEHisZd0iJOsul0
zu}6qKkyA#y6#Yby#pvYmTj{^_{pjb@t^bmk)_=md{k;q1TwBC-++K^0#vB76KZrS(
z8^)TpK0oU=pM|UtUvOZ}D6Aa?osHMN5t`T&<B@&VMbC3ttNi|E{5P=v6R!dDPp|)`
zZATLcFvb^qaAW+QA)OO)LAD<80@hT*{;UtL=_ttb)7^>rO89v44}4&)III~5djh#)
z`x2cT>feW4;)Av80PEICG;jH}rgZ2%*`$~bhW|UP|0ddh-)#Lyb2%SYpT5!JPPAd%
z@eJ(bjE*wK<~BWeA=Y9b-i)J|0qdmlfp?>`sr*covtE4|zk?hjVtP>@$(Sjz2+L)B
zV^78d>kU8#O_e`=dBpE%)_)ZIXCLq_)_=tqJREAi$~)12>&pw`V7Gciivse4_4yBa
zn6{>(er;-aUcufBlldXU=b*PqKAz|sCH8EgC>RIK2lJDE$987eW_H%tKe8o;cxuW$
z#D3`WBOa@HF0R=JB<T9jWcScMLOu-ZY~bL&8Tl*rZ?!+hm~Q0hv8HN#_J35DiFgBR
zKw~XvW8w`%^k&_Jo??B#Bg=Join=0V$5Z_Tum6noZD2=Cu|J03!#(gmhV`F?3~1H_
zr?x@DuKx}ku(scaR}xF13ntQp^+8Q1agXe`v4_4*L4We-#?ro;+TH+7)v+huUq4z=
zur@s(>Uf6l#dKE73f3AC;}$6XNf7?Wy#Bl7zuY5`)`dvm{U6AdA~%Y7>Z+HH0zwYr
zz&}&p({IOPkB2#3HEVZK{0O^k3XR#vbL@$INqK#HU}s2Hby$CWr7xF=`LMrnLgd19
z_8`{%AA}5W9GKwyzmN<dp2FC8%%ym8TSo^|>7{!!_A7PS@EL2}Wb7E{y`cyX=sIjY
z)`m#PeM!}^F5+8b^2s{>Mjsy_?lWTlmni)ICi_28>>=7j=2G7<rc>J{B37DeFJt1q
z+LmH12E>Yp8NoNv7f5_GhIagnhzBW-L5zS{A<Dj_<jYW>DTi7v(bmO$L7^X%ujabA
z?)aWf*#C+BfXE4d%l+T5CIfhZb-uCQH`7n_v6x6pHQn`XDfVu|9&V^h=oHy{Q|QS)
z9&G~TA`)cZ2#wDZv8N{271#Vy?6{b;|C``Hw*|lH{*R<fqP;{kg-*q{KOQom)+ywI
zuxBIqhQ8Uj_;~fc5y(NnKJy{!((sY*#dOw}%k#S__H3k)%Q)nhV&}U?&S`#^80TsH
z{*PK4fc}B+vHvUVU3|vlsQm`U{9(-ov^$X#7Pi#Hwlm&A&JQ*NIS1q(_yFI*OQR2Z
zRxOwMu_t8Al-Sc~zEk@I>p5YK9~1X~jS>fZul=9nG9FLu<B?aup3La`5k8*q2OmwL
zmw<un5^{f7gMQ~MMfv<eavD5mA7w1>)qGEg*wYkT#IvOPVy_3&_kWHe1K)f9clCJO
z6Pt9@7O?^Npr=#l<3(RD{0RDfVe3tym1xhAte|ZIUxB{)=YFbsN#{*D)N(0e&n5AT
zJx#%dpXD{aiFayV;@a3lyAQCFMM;_;7)oPCu|8bF&JkpIqnt?x)#LH82iEOVUvuEe
zE$T<_EAyksF`4S)^~VHaZOEG^b@iBP>-FUl{n_z}J)_V>*mGm$8e=@dCC`X=*x$pz
zevih;0q+${{&b=;6n>G~l5vO2Sor00TD_z;5pp3*2g?0|gWt+=pZFiPntg{Ua0%a_
zX@iJ<+4VZV&UQv839(<PZ9T?-$0znQ1rI~df=7~96TxHVp)vf{e}-j8aj%e;Wa=*E
z25E0N$|W1B_gmd#zl`x#$gg9b2F3}QI`#_ip*<&Z5Zo_|9K;(9f8kdmV&}E`3H9?L
z_8ceS60xVIu5U#bL*>fxJ<$KVf@h@n;GsTWP5I68qd1qUqgf{uHsCw>0X>@sokbg7
z><vZNF^#j<r;V^B6c=dwW&6c12dVb)(0#8}a;{NaV^4i}<Mtao`66S!Qgy&%=A9}0
zHuS7^jF^MPEM*AM@q79KH7&qLeAM@1yB2u{iVMM;i7gYR4}xs~=Ale%75CUPHrP%1
zA3Tw~nI(9yx5uv`z8ZT^_yOu0P#lV+5@QENyYd^Y8)OR3F+I!eKkz-F#{@pTL;FV9
zYw{M<Za`h8%4JNjoBAK(eeeY1I>96GDxP*<Up6>~RQi^&puXf_@-Yz<3w(b+U<_@*
z3&e(K4`S^QUNa7QtM=Kf$1$D7^AsE4Fm~SvV_;0EXTSsS0z4t!NZprxx%xbe?{BRi
zaJ1|w_6u|Tj_m<s=>^^+Mu2`|{U<)uF*@Ii=`7lF91jxzjomlGSU3~xIpV=!#6y-H
zCGTq{k1wBNdS4|2e~ESm_Kry~T=ZhTxRlHM$G+njyUmBO{MT>C-=drVas%k25wR!5
zKc>W<alygpcZl|A>p5Ef^*wkm>Ja$^DPv@JJQIB1IHPfoK~{wQCw`%gxOt+YU_Lk>
zG1-5$j35VyTp)6S#_k)D5U?9thKTnNcUXEd?-SbRM`s7b+!3@bdx^Zj8O`32-!C_0
z42{$|9*m{(rZyU{8-ey4c&+}hd|+<hj+wF#05Jq)2{{O3>ik~MfcLQZPL^i`55NoR
zuZxaf-{QVD9_(E@2jv=Xihjm_s$Cc@-N8Gu*J4f>*#ory)Z=oQ=X}Q4E3Eg6HbY#-
z{YMK&47SSDcR*wG>4N4&d#U^1Cf<upZj?4=$wd8qOPW*sd0(_a5}gbX?S&4L9Eg5q
zYOi5EN!WuM#}(!JF*!a6J|1~HjKe|yL!$BVD%k;T(ar;{iROa#8Xm;Pt8eu`=a|UX
z78Y<pHWQ-^K+ib;i#bK;FT`0~lfLu(eLQ2TPJWN)S?|GnqP66G8=-&Sinqp=tCaz1
z2X2V*hKW@Mz$^H3k+Y#Q_|4bfgO72kL-3ybeSfPPI=xREyk{BF%7CL~PGx}QDbX%S
zY;D81(EcBPhuU~Ui1(l=(Ka#ZJ@cN=S{dkAIvvF)TQ&KC@I;#@{Kt8#^6mPth}<gW
zb<w^DEs3UynfF>5P>nTEoGqtl+9`+$5_W$<eR}<yeuGw6qYZ65qM;$$^1Z}(=KKI)
zqdtkwG;ZKSqHP-_Ho1YXM~n}e5$yyG|AF>>eC0~?8S<P$N6XT*&gcc1E2O@P?>&Yj
zvGLdtJfI0a@b#b-(M<BbX7cZq*NZRD4ZW}JFR(RFO)<<2l53J}%FD?1LE`K`G{m28
zcaO$Yk<NoAf;L1Wq80Pr5KVuydz>p2I5}A~6zv$uIcWO-92YR|Lg%S%N3>zys%gge
ze&n<82Ry$NYt0O>nm}?8B69`*XFh>#J?3SC2A~DeMCivi7`u^}<c8ab0#_Lqc#3#O
zjw!;}(tmS1f!e|r5n6ovQ~#;P&ol266R*A%Eb7=$;Ei=>`dj&kehnc9WDn%Nr2mHa
zfN-Gp9CRMIi8WXVSIs&s0)L8=f8-c1u5tn&r}lFcAGV~=F)f{BeDLLmY%d5KPjMY^
z0MA96j&LI!nO^$%^Zoy~Gx`zL@=r9XPxfFN<vwKY6KmH<dM55%B64<!=>RKWMqCFR
zfD7Toe3h|~>^tRq|DEM{^(b;Muxu$28#!Cu6*?sHVOm*WyYNr?2ss}H?Kkiod#V9O
z**{P7WhkyA9GJI~?}@A5hG9!gXJHT2dF1}qX_SGMO-YxQQC{@1u%*x~w3p>x7Kp20
zYuP@03z-0~QLd&gO^y~Y02bJHzy=rrE5Xb(6?Xm~?x$y1ex$SXk5R|7Dh`!0B6cD=
z&!EpmqIsCmIq*QnR#GOQkD@K1vB&Z^_!pCG$p7)Ic%I&sG8G}@3^pBgpe{N7Donrt
zSO62jrlv1)U+VZq{ojAr##4aprn>FOZ!3dn+{pl|He`FJ5-$!Bp8|+yp>$93N*jC8
zZ`fyy1rjzxukQ`_#5f`PAMbLkj`#5!Wuk1<fx1v9)y;7588C`Z0?)tT^8eq@T3Lu@
zev>k|cm|5MtSFb(n)o@CJ`0I=*yj*AbwB!G&)ZM*QRf+OjeBxGT>0!C@vbO?%0ih`
zwjufpJ^z>IZ4BZ4-@X4R@E-;KqriU@_>ThrQQ*g<z~q+A8)itGCoMsrp>d;nt!3Dn
z#4L46y3=vM`d(&cO{O=lSNnIDJFk`u^~m2d_@r0hlKn%Q4sVon#n48DXSS>}a829V
zqf=z7Z8_>n>sqy*1pbt+V4XZ;(oR{veCC=-*`EKDWy9nmi^o0qImu5~cD{Nr%+Jr<
zuGgCjvuo`b@#ewp`@?E3oA<KVYhT~<eJ&339XRgs@gVEs*Nb<v$vq|gq8XdE%<Ixg
z8T4`C*4b|9Pgg8|t7@g}%bJa~T%612WX6>K&oX_iaOrC8qSFgxoN8Sv^Z7+Ja|Vq|
zndC3e_RAj}E7hgsv7bhtxbc2_;D=e~c6g^w*ZPTNkCK1cJt!C)bl~KRzJa^LOJChS
zY2V|YPX#s_kgkbqUylt-XSkNnwy@kRGn;+|t2K8{c6Nt-QJcFR&iN+2TkX^h?=Jb0
zjq3cc>+#1mTCFoL9lkAW{vod~9(!vS`MkeTNbsRIL6-Z>(rvEyXL`$Q0r^uo<?^v8
zeJ*b^n>R-)HO{f^giqr(86GST-FIh&b+IYUI*&P?WYD_IWv*Y(6JYo2T>Bue`@szz
zyIeY-+3t4sT;qF=8|yIj(#6%sis#6^;zC63b;aJ)yU?NIgPqxXBwMyOopSTZ*5T9M
zSfu``O1^SoSvoDgFlw-6c9*<$^OtR!zRa*bo!y?NZFenfVw>yMwmb8`ypylXfS*!b
zdcMjv``@`g^xxIwdBf?0J5=-Oo$gDw+gVR#e)rrd{L;R$9^0#>uCppztL}3y?Q0sG
zFMq~~{v98ePoCv%p>+k9c3yH}%()%O1A3;vnAfGfWd*wy^M>BooZF-AFWD9*sdOeI
zl^;4Sviz9v14EA&-MZ||j)pUzbn$QMTkcrXRwav791`K2am?E!3xCQx?4ZZkWO*YC
zEOnXW@*<nZ_=0s0rylI>Rb$zy%@@-RZhQ8MYxUJH${#wOyGX|6SIu1djp#abzqdp8
zfO97YtR6pdT31h(zAr1K^X=0k=P!e<j$igyvdsg#t}W<tGE@FKW;b?R^1gcG?efvZ
z13MOWa-UVVS@VZx-CA9}nKblyglD?@L%LP@>D+efPoJ**{;<y2Or9C-i%)-@;^I%q
zr@G{N6m&oJq74mQQu-YBed~W{(~}F~<yYisRCes~By(-<1ST0)x6Gi$A@d98|NY>o
zQe~Qr-?`#)hos4m@6I)Hz>S9)J-YNSSnPbp^vN$&oOCMv=sTMOj)t~9*YI(YNsa%Q
zX+0{V)7|<Jp(J&O52Z+z)Gyn)R>e*<C|&Q^lA?DrTnSsbAYHe&&6;$WUCC#i?^`qH
zpqZbC6;i4caX4{2Nw!zJ+>SQr__)#n%i`5eZRmEZe)?OzJX@`9G4+UNXpTj>bB(pT
zVzp#el|tbsLhp4RI?vU!QmQ2$$CK>xI&yKu!Xf*;UyXls(6|4X#+NVlJlgA6)jxh(
z^(M2Of3^x`OV)Gs%sqdKbMa&5M6HWk0(NEfDA?a@eA)0>IrpvF{HUYl#KqZ?Uub{x
zui4#x9dNNp>mq-qYMy@Sf*U*1`P6L?a^Ypa$D@yDAuc&=aO)k?<`-Yv9kct6{*d`o
zgNhf1PA@q5Q@QhL>zx}rGiAiovHiY$URfz=-w(?iNDyoFOPQzZ-1Qp=M6O#^CC#bi
z7rW2h*`>mt#jTT++23w^gN(`gPip+!zFy|C>AGHNP+@=flj+Zl$-1#zk?91T*){8C
zes!Il9;bMH+`IpFyK8U9{yO{V(5LUco0hby;(7l4INJ+H8m!&+YJc&J%NO4aEqrQ!
z-6a97(|?(h%Wc7+<hi`x&;8S_+=waFXZt6+e=W)5n`3-V9-P%+eU^ZJX0<E)@zJ-)
z1i#>XNjkS*wrSwK?)kF@Hk*I@es1%buNS?ZvD80h#cFQJJ-SyvJEoXr)%T08g>?Fo
z-1@kM&#h6#{15DMK5@SBj(yeUr?}GTO2o!e)l-b_a(w*jK}p?uwYJYvanJIw$pJ&l
z^lDXbOyIn+7v9<wsJZ1}d&iWZ!_?gUa@sY{SIcf{*oubcZY%EA&)0TxK-mQ;78lK%
z$1UlEA%35_c5!umceGuBA;;<u+%~_;7QZEAK#u*^=23X=tVOGZ{kov<>ofJeXPju6
zyJD8d%^nslel(RwvY>eZRhrgt9yUCC+Y5(km%m(XuJx$qIfMHbbbRcxcU|_azu1f@
z_S|j2jf0k_-yiDlQF+9U>Y19auYI6frGlM)dGXt$^ONR<r#{u<#LSF~<_xM?CCE01
zOCMLeJ`F<Jbt<#9%gS3@|IW~;?aQDUxq^lqdo=W9;JMn}PiJg;DdMqxiB&V_+xs_8
zdc?MJo6fKL9!m1OZ!Nz`{a<&;wRX}9r%Q9|MLf<{FmDN;q4RtGdGdO*Ssf1iRI5a%
zqEE~#JZQ7I(y!$vR9Lk?eD#eM%~yDiZZy%mz2md4xj(<`(dSv(qN4|;cw}D1H$%Gg
z?w?#6q?nex$c_$YN=_KQqRZg{hYFsvyg1;_%aY}{?W~sM`R3uS9oMdZIVsK7Jo{>o
zJM#0Tz~WB*22A-oLyyB1j|{X-=DT@uk=@s<eR}TmUEj2K)t-mTJp8-FkmJ^sTcy9+
zsg_^Cx-)aR513M*T#A~fGw&O9q}$&%-8>ebu6KFK#4Piy&zO~Xc>YN8RsA~l{4l_=
zQlE`;=GLsTrgR$n3cH`%c-RbFd9C4_-m{ZrTk&AsA7g&DJGf<0+xKPWtgU*tR*ttn
zJ!;WBO`UaSo%f91-1xWqhi1EHsB+h#{+8sVMlH&ZDl}@O&#C?QPdG2gwI_WC*T!d;
zdARr|y;I8dV!P?fs@3oO($atV^NJ_kk5p?tuDG*(?utc&-3D}<kgj4D|66ot!m>Bh
zJ<7G(vE=8hWtS9rzpRkW=ZDXF?riK{v&!~CNta&u$^ThVo6i}|1Diij-`xB75Vx9k
z;eolAb?7uIFligNW}WvwK7KvTKC_^t)gKKEdfWf?A&;!iv%8oDoqN7)`i2^<#&iul
zX#S;Vc=_JPUfA4D{<3NFb<Z<fZ%aSN;bHL)YtKBnesxLP5#7Rjr7p7dWX*1e4qgih
zufBQ9>`Jx)E3-AY;Tlpp%sFh9N76lM&b_stuWVXu={0Fp)|oDAA`UnV4RQJ0w9JJW
zJ2R|sZdm^O)yVc2*Uzimb48V8qwBXR@8k6$!`yWRpG^EK<fn!$J(o;yOVRn#`6mO5
zpKGye*R&b;{yu&oq~X+|3l?Rod9l*$3=LhfK6087Fmb3;&sD>(Tu9~JeDTrw$yV5A
z8l3#EKfF7bAMKaUf6kMcpH}SnbxEz+S+X5ZliaP!kqf<xWiDR4;PyISP8~2G)~EEv
zN<~lFuK(SA@TvzV%4C{2=hOHadnVe{xDlze^Gv?fBi+#I8Oj{q(tP>(w#5l4>(S-I
zmoGHGxTI9u<Kv4LEcfEWvY>hW9WK?YHT%=vpwYuq=Bd!qFZn^IOo0Vbq)LA=VsVKb
z2M;Z_|Mm673++OJyaG-(3>bUj(!thVb`MkE*;H=j-?c6sA2x8^8K;N-$%~X8>Go*g
zCWq!`UZ3(^tW{~$ybPYf1+71{wC+>$?O~70c`v{0vLwZ(t8bFE&lvvt=L@OxELz@n
z&5@I7Y%bY!xwQJ7{d_0iC586RyOXBThH37{{~VgUz~}vDM~iJa^2yBAB2UHk?%mz3
zAGLhuS7B;MrSQsmf7)p8o8|nloLdi@FI|6iThWkO)s~DpI(cGYe~ZDtJz2J9P}0_C
zuXikba(}B_y}CRPNZN77^i2+fBR4h}IdkHSD}&tEH4A=|>|n3He#KH(D^u8|caHF<
zwbzfxIef0gpMTFy;n3l?Vg<%@{bl~f10~CE`hC-x)xU?0^eMK_YU-mt<E-pcT1<ZD
zbg6EIl#9w=y0qE*!LWu$7fg7PJ2G%}Sl;37?~Gr0>)4hS$IJ_i9p7|Ci}9VCK1^Nd
z*8cW$j`_RzrTyZ&xX7CYb?jO;S@F0+p0kS=l&jnNWr2*JihO)f>00Pr$CZO4Cx3Zy
z^FxN+xr(2*NN3YAsaHhtdl8$fj(?Cnjr($|_G3HeUV83rw*zI`R9LZn)x7b)PW%*B
z#;5zrTWfpX>vr~5jTXBrR|#79zD$QL4P0Kga{hecZE!^0N10Z+ZJ%0mfKBN^$rlGt
zwDm~3ciO~=iN~f4?`{7_omq|EZ@w{fNWtEP`klRXxKHlAWn0-_@9C1iO67w2GlXTR
z=GW}wxzIj)eqI>p*Yc5*@3B^^x`vnY3~jJ%+S&Zg`=9ek75T1uN2P^JXtHPRl9Vh{
zGF_#5ExfmRU##?g=di1**A}i_`)aG@ep4sU&R^+4{x@qv`&{}vmwSi9gGbI;t88iY
zrM30y^)H<>PQRV?^?~H2t7a^9b<u`N_J4j}(IF^J#o57E!Ux@Q85&NnZ`nGe^Uc#{
zb-Hv9NxpZd_rT;I2Q@yp?LvdSJ8It^R{V9Un%4PJeztHZ=2^+r|9*Yv`(qbn?~(Lb
zn_0Uu++0_qM9PV$N~IccVM&o~gOZmhaboM24JW7G_W0QMT!n`f%J*(w%j?sp@Gax#
z1()4d)Ae&^>)mP3wmy+6N#(gU--ZX34Ymn+v+2dIvxB#%oNOMFuVvY3fjiE>?t1IX
z?M%Jbp6+-0*Zx6n)%zCxGke+VbIX-?s%<ymj*ES+OktnKJqdpMq1y7WQZ66Y<V&6F
z)|Gm9Crx<i(K&EwHE)Nk{x|)`T&Of=&88d2GtAzZqowD<%_X}(-Z*MQsj}@mj+oVL
z&d3SV2CfS$8R^mNMdZpXqhBn(_AJx=Hlb#9_m)VXWqoGfCdZa}tt=23Vjcd(*0aaF
z@;T}c$Y@n%ORb{=!tEzqecEi6SGGAtik#T|W#aUqcSn@H+HQEUihhM=gio2DqQ=>P
z#}NUW>vpa6W>2fpe@)JGD0J42H0Ca?c8*^9B#n({^8=n;+nB8iY%#y`l<}z=UA{3W
znNQ^>w#80Frnx;aW8pL@{#f<uk7NPoef%FE>biXP!(?0TOlaYi{<qf?b9SCMWzeLq
zMMAvo8r7-f^V`6j&b5ANId%8r*1O!4VXuq3rSNJL7O|#(@+{3<KELu0U-ehRtd5zs
zSbLU@=(EJyHE>Rkmo7`fN2M&iWayUg9l65IO5T|{<L&01xjL4=YdfHJX8+Td&lb4X
z)w%ke386jDTxsL%Q+Q)-&y}6?*FLiI*^LvUx}50Je`?8-mu6<G8tfj_<=3m#m;O?+
zL5kdCTHaoF_r}vgYo_&Xb=GTTlCa;8ZLpp2CjUzJ>3MD5o}K9YD%so9%Eu1{(%6g|
z>)kZqcKV%XCzR`T_mt;&%M@upJ=?Udd*6OVdwZO#-?_@FF;8=}+vb>iWQ}CO7w&Ad
zC|cNe!tSBVn&dCEXh==hS54MOIF-oUtx3Ngt?rif^!(7v`Tjy@pW9{aoBnwqPx;%g
z?^nvU>z8NqDs1duI_LEpO<LAC>^#IGMgDjBgC^wiv9xPE_~tdg3TJQI-ZuO4a`Uf;
zQ`wzN_HO#gNqH9!9^<rZN!NRAciEa(b}cw(yq8Ui$~H;gxNp2V;eIajNlivi-92>?
z#WkgWZ@awg(jG_h9Pr+Ka@D=t&G!vIWH!P4`p%IfypM15u|0Wo?we!H0*^j>HP_rP
zUxSJzv;0=Zb7u4Bzt|{MJ*uW~b4hpTOJkQ#MJ?MEDl}(zsTPr2lKC%f>OUe?(C#wZ
z+NSDtz<gy9-!bn><lI-u?`e~zNj8svdv!~Dx6m3PQ_8P@(6CBa-p`$Op4{{E!-y{p
ze;;$O?f5-`O{QcT_x$se;ZM@Leko`jVYcOP;meoyU78Z~ppC2lyDInF&OcuzsaL*j
zGn4;Za-8?6OW8mEGQH~Pqxb9I+4M`gH>0vRN4D}jcVk)4fGwk4w%yqEX;1DI6Kv~0
z&*F6P*(KkNDQ^uMXdT$dy4Q^Am2A_T8*?Lk^h71q)dHjTzo|WAhhwp(Ihsta@@Mby
zSw4)|x%qI?LRW13FAm#Xyh&Nt&5Iw;D|h7J$M98E$&-$06PQ0m!>M5pt5!9C=N4SI
z=kbVv^KHhpF8rX7|Ky|#7H)o@@??Pw2OaWeZU3%nk25yySN1(|KZW_EeMxF(ofFu6
zUYc1Mh8#+^zW;>D`#P2B(#ZesCp%UjdsDpA?YCRTKgm#bUm4fHE)JX8tiHLd&&{eU
zYgB3b+ufXgsdM(9`*)U{RkqE`kf+lOzf`_9`6|6K_uBqwd{h6hiT+#d4$QM$n9L)j
zNA<4Pn%;a{{+C7_k{qp6^X#I`i%<93cP!Ugj}F~0)?2XYLyc7pW^J$PHsWT{ji=hq
z@~s~cykWtI@f9~;omOLL$JAccQ>6TqrufqmOJ?2nEPB)8_u&1(jjdm|Jy2xz_F)(L
zm1%dk?4aahzxZ7ATCt-?n^~6ailyo`q+P8`0aI64E)GbWx$V`<xoV|*<TR#Qqj9GW
zlnStO=<_bLq0joHYfprRct6a3cG8!-zqRjtyla+*Zu@thyV3r2z61S8OSkOY@TK#m
z9WUlN7Hpa$%Q%lm{s$Vrcj=I%cAtS^nbO;yb#FH1@PU=dPNzCK!9Js1V3O|R-QIO5
z{NRIMrriC@oJjW0F@sBi>aCMp?AqbvxIbPVyYpL@!CCLUPagiff2ZMh+MJsHA=j9T
z7havRF>@%HZ1omzztWHHzk4{)u5G_B^|x$)5?pqDCJ(nRr*@xg-*DHdUYiQLJa<@c
zSteqoZ}@z>o>g2&*0c`tbeW#tYww>u&%7R4x_HwY*WZp_Z}n`4M_Ica_paxt)$-0y
z5e>^6?`LVZHn76IUb}m|D&=r^UWO)hstjpi9hkb)s{5B)l{Rl_@9XUlu+lfvg5zVe
z+$=xjo>_;CEiE5Ej`-!t^i`I(cYO(X-ZtB{&ClBJ=rQ_Tx!UvhKbbalX_ddb)ZJ<3
zRCkpUKJY}w@GCuw5AWlfanbfAHNu)c2zmLU*sT$E`(AW7TPNshUE7b7>fD{>TcX?J
zHLeaP@*h4pAT;pswqTcG?YEtqxBgQ~t7d;x^7bk7+*K(S(PeS%{rzTKd7p7zwWfb>
zsdCHJ%+<kZ@bBBKMrEqmrlJ3cPGjozupbqC?sk#43zc{CTDPrnf7pk9#Sc8}Vb;kq
ztl{9uvng-&|IPYKYHP<|tEVoz?9`;iLuyv<ysoMB!!emQJ6`KoV?afZp+#PL_HjKq
zy+e;PdHmO&^1rykvfZ*KyGJ#jo@tjwy0?|A!`=*Sx4Z4hDod(_HN5OP?C{!ael^o?
zt)6|z{bKez8az9ac}9&<vp3mRe!ebGcs0k3a~}@P*{5RDd1Y5tS=Z{9SDVI$ol1AW
zbI`LKFP6X0-?wDGx#Om<FO;GCkTG=|ya>K9!nRtzCmTx7PLb>B$Z(5=2Y+ri%D&OZ
zZA)jI_nT{1W7*}}DevB%sf0TmSbBL^*uBDC7f*YXWlN=O?;Lwi@T$I{)vHxKU!4Cn
z{oB#u_s7???ig6OP!XHvyB@ByZFT#7pzY1s8xPGnJ9~WoBw2ebtTHG`_r4P!-l&{z
zW`=r^nNB@gR{OWWJ5Tdo56zIf=#;6qTlLvG;!U<0ZbJ^{9PGAn>b`@^E>HTS@9~2@
zUs|uab@uQ4gI~IA%iq1?ke35|cYN|H)%4S+;+HlZ`dGKU!~IGx=XFhO-Oabhu-+r9
zCEYRlL*xvXk{Q!1s@B4<=9ESjdAc0jU9ZUM57QUyIhm^0;WZ9Exd&#iKDETzH78T8
zoEr3ZjevWFyKJgmZf?;I`OnV2@XTXJkBps4{nW!{(1YKr3>q1nw8!Cg?tup{=USS{
zE~44G^&foP+`N`LpIzWTwQjcCGwNPEaBJ$mAZ5e2mDXh+wx5xInVXr1+sw49=MI1A
z(y4CyOcz#GI6J#txluhY9_Ukk;K*B}dnKFi8sWXVtZ&z9b+2u68aJWXw5nI#Q|EO1
z<>rmCTX*l;5xmlO+sh<FJEhNgsz<AJ87gNFezjuXiET>8Q??rpCR=m-?$q|@X205%
zyW@zI_gpegz18GRC%aii2WIToI#==V<+U7Y+0}aK`{-U5zjx&?Rjb#i$kqv?t`2hl
z{Hn{#wu6R_wA=C_-LXj>lHZJ|U^8{!{Lm@I4llKyk>4)qzKD_`_kBFOOx}~B`}7R^
z-k#iYI&Iy~3k#(yoY(QUlr7t=a(|P~@9o)Vk1Q+so;3fn_t|5aywdKqU4PQ)!<9#`
zyM%8k{&Y{i)LvDaJvsB~LA$0a=TF}M(>#lIo7Rtb)5N8(jcfPv9mCr8tlHpa_H^ya
zw>Wk9&5=K=H8}UjDVu@W?6!B#J<>HGZ)l}^H`3Q?uxzs5@4ih>+O5CP<<a_2S(6OE
zadh<??|_3Na}=~__oC_Z;!g_&+m1T8jGSI@ig(_r3QZfIJ%eXszk7Qgy&n|*cC^Lo
zF@7~Suld!!!f4O*p6#A4_+>}X`MjsymX6yOTK#RN<2_5=_6td$p<7?dh4njMVqxIh
z``Lom9j_2P>+-zzy(?^tC~P<AUastSJe)UwI^1+xrsM&Gi3QF5b6yP?x9RsVi_#&Z
zGVIN-JabtysZ59b-G8lBwsy*Xt`mBdx@~@ZgVo+F$#+e^T3>lnY3uXX?}uBzGD{J@
zWAvx~P3Jv$+C4)i-`4f^A1UeNu*V|*Pv&cG94@u%^^p&Stli!?XI!~`SI^d6$fE>p
z@QB#yPV)B0Zsp<fKP*>Xe0`;F8<)=aa|M0co<0Bhs)wf)T%I-a-k=%xywCUToVBj4
zeRwwaBG+b^U!#^p){)zrmK(KW&#=fonVwlY4NN(~e#M;er(Wi6@$)q0$i@#TE*{B~
zse#9=L)#yf@8mrEMnGB5<K0iSs`B<>-YFgCuIqNUz@S{m+s$7y-1AY>wx?H~UVGCb
z+4_yGX1Cb0bX!QzkAsuc&Ue(S(dvgmwynqA*gw5;seS{0^*LeTzhJlXmFou{Y;2g@
z{#u8ew$r~9cI{W{yz9UVlb)7vxO=JnExY0&LCKel$#<{J+@b^5SgqK6Ve+thA-P;%
zrCn3QZtT5EtET&|Ep({c=T`yeeCGOR`>kcmj<x(3T&~>VV%zr)!w={4p4#z%`|N>M
zTgKm7Vs92P;%JtipWU2w(){qKVjd;J&&@e7AZS9v;P%7YzVNe4HZ9v>i-4MCd@2|B
zY2i3Flg+d=5Az?n*1-Sx$n56UZ%Xw1skH6k$o3OYOxb4^G2DBdMSv2Sws_|)bvCZ8
z7gFnVp{LL8cW<8YN|N%aJg%Kx>$N<2>XPFQdIas+Uf{#1wB1UC^r;iNuGQU*>w7iK
z?H=@T*vXE6hnbxp{^76B_xApgJ@QlSDV=^lp81{I$e+WXCOJ{g`Q1#bi+)2~LrM((
zz1onsxBAcR=@wEl-@sv8*W{^d=bt%w@3KjJo`yGg&^d37kP3S@mkM7L95SVCgYi4x
z{i@Wjc)+pdzDH&&y`NqQyqUv$Smk3ww~ak8G~0>hq05%tXy|^kOua*8ys}PL+U(0)
zu-DXm`BVB_dvnzM;`mv2d$*f;X8!z|ng2YIywo}W$ejMiZGEo0+h(0t=99g9w%(PV
zuWS8$p}qYY&lByEZkw7mXnara_Al?dHV<>(yz^bri}f}P+%;y?t-)?R3ZDDJr_JYD
z!P^2NbME%tW_h=)&xMAE{QgWGc+br5V8*A1vQ}{Qrbhg+S2?|(tUK9o&%LT^2HPde
z?-q7v-hm-jrOw#TTCzS}1@Fij^R8v<kg4ECha~w9ZY}TKp+i{BkFI;yq;A{o(ZQEK
z;|AQfEs$}9y}6BR$)uAf+-o}cl>4ArPYWx*C2jUso)*={S3KML?Tb{-Z_;`8-oG{Q
zMW<N<2dw?QPM)8Sp8e2e!505phd=iF@Zf6twbip9=~47->Z#8v{JAGjfiUyxpG(>A
znYF|GuaZr31T_2XmHLfqz97d@U9xm}lw?GwAwerQ^~n8;Z`s1db9B2gKQeDXmu*v<
z<h}aQYt@wtC9K@TdWM7*+4s1Nr}Ksej=wG6QP})lrIiD2oU%<*xyIIr(AH%hmL0b1
zA>o$3LPVWT<M$kByu^7!NHVLt(?`BadN`z*hfRjkhjKrN-1jkjw6(R_rk=IdWXagM
zLvGKL#cijzP9Cs+>%l;~8rg;(s~ECnM%QD_-oEO$d*sc%4IOj$T=8mqig&L!?0lZp
z>1LkK+i$O_d#FRYjrFGY54;c%w$p#Y&aNTz`#nsyX3(t~XMb6I;DguMVuwDB_Q)|h
zsCwbU<K10K?|SZ<SFz7oYjV=UUQfb$eR;dFT>7*V-G9yJUdGS+;k>txvi|<KaKGSw
zubRJVS!GjAo3!q3J1Rb$75bO;=5tmLa~-H3UhL_jod?c5JK4}bqQ#@a9ST?tzTKxn
z_7M>;I`^}A^eHm3f&W3T(eBs#e9H02(r3!iKhG79957_j$iFPl6;H7+-)CFJ<JGC9
zou|~UG-=zroWH#YdsoHz<&(0ZZX@@9`E+{C^ZfZQm%5U+yiIsb>(IVMb6a(uRrjGo
z`eIM79C`of&5`8)Yve7X+6vok?cnakio08};8xtN5L}8C_u@`*FHj&zDaGAANTIm9
z6Wl58C+|7?$o_tPf0L1wv7WUax#xY&+2!q`cHfsd{SQTSDrI*~miv_v=vekD^ak=y
zwS*nOv@nNnEhqd9P5a>dKj=^t0<mLw@48D~j5l*_w!Y(-OIG*JJ)FvQu<^UCT|{vn
zvGdb8Io?C^#V>-Gj!15$==dK6(nzTO8Xz4!-smtrZf6%jPXddA3Dq4%Hs%*x0KAO&
z!35;GoEoJaXHi+#%rhB`QOUv%JK>Lavz$Fe&EIqJnmPT=?$ceMOEGvS4L`OKmh!I~
zwsQ%yDksIv0Z@2|CX(9h{1t^{JTJA=BBFpdcds?gXS^v2DM*W4ltT+kiK#jR71$M=
zl5Ap#n^+6=2i5g?g)PT!7Bkr)*E{G&%QrX*BEiieM2&@p;q@`r2t~ybJ--h=dMKzx
zIoT>IjjR8s?k$mL-rrfW7HYatxE7XR(H}5%;DGykV?#{;GGqpO^pxOQDGJ9!k9d=P
zURhfaLir%z{Ldbq?u704)7%?aNc&Km^usn~IJ7E!<*lBPZoF-JBn1m53O%){kq7!@
z3Wr2mpDrtGqYCTrETTSDnP0U&Qjwn=!s9CblmIILW>FnxwH1{zo=Lj`8=X3%lkQtK
z5!#&)1i>gXUB$fQc~znL;rEiwN^pp-A<JL8#<EM8fWDz*!ImW$!r#t<^pdXxD#e%a
z@#y+RPVHCR_6#ph?YOtpm8@gP#9gk>%H*!0(C;1f4xZy6`r@y1AXG$b3b7t64a#5w
znMDEzH%x-WSI&bfa!5jXGF{jxau#~E({y6wUQK7lo%8Z=6r1{SSq(u|D9fF_v$)a-
zG#E!Gz2^>R;RR`9QKGp>s0Ss66@R<GFeufM1TaUUO?dN$;KkonMWS@3>*~8V1(=!E
z9lko(F0HH+Yg!OP7I7%6v%VQaKai~lkbS|0&6q4+?n9GZoYfZxC+9qln?+asE(ab-
zCM;(PoG0v|q4X!lXz6$60hyO`^KfO6w1MlU2}d6Gnj&a~D<r$WFt{!3fwtkC!>iVo
zp74Rd)E{WGLLFVWxjsm_C1Dv7e^n`+Y|--)aXPw5IPX)fk@l&u{LVBC0($-ZA;N^q
z&sX~QPws68*WYnGG;Ma+Q?!9xn`S!Kr5n<K(5<x}0G*07!I~PkMkiYFW0%FCzipm7
zTDc#NkZ(c)yyxe3ak>$MzP>wJALFQ4P5KL-h$>g;<E<_$*{$^})i_K?U^)CbZmX@)
zaQj^DcX-m5N2xbp8IZa@*pK!u2^X=CPC5zB)h|aTh{*x!;J*;)Igr-PQXcersOYkS
zSn@vIP?4f&v#N33=&un*@2SvWWINV`82<b0l`0%F8UK76q+i-)jxNu-ZS<c#Eipfj
zTwTCqG}gPDH5m(zjwR3o0BD{qHeMhRRTuJJtVtj;aJ=atilG=hu(4Rdf3Lb<dTT0P
zw7|Q?msfG<$l#nT9|$%|p5Ohwkej>$TKJUDPDNGX9Lje7N#11xqqXW|>1BvRez!M>
z)h7de4Aq0k2J;1WT_?LcP~K^L^@?n2`|N94lMv$l>({FJ<t6F`bbD<uIV&|)Q?}cQ
z;jGj0R#{<MP+=}>F3&9v>u;Xp${csrM)n`d|6aEpaBt`K49SD_y|CHdcG9&;($`@}
z*cuME?3iVY%!k~-YM6H1pUUs6TtMXc+bveOTL|<mo~YkU)5a~PiSMIh*B>~bm%`#(
zgrT<Aym`$=QZGr+Yjh3-?Fr)Qx9|HD;i5k^%sm0A<khjg8jyFV>n!R=NzvZCjm2^l
zcLR*qHfqED=|^gyb9A)*By@UC^{Hb_n2~P)Z4eT?9)t3(EP`0}u}ds1?ds}KBj7u_
z(|}Zys1Q<Z5E8s`6kHtXIV(A)mw*vNQjS33qAIEGU@1G>de#Smrcr^@Y7nF>vX^(C
zcIn@%Ppt4ni-}=!Q96gZ+S5V=Fu*HpFwUFMS{5Q{R+t3H0R{_L>yCj)R!!&JSpG%k
zDePai@MJX+7s^d!FdXZ`B~C=9R%_NyCuU@rq_Yb-o+F0m`V|twA;c3PV_Yi%0jJ6%
zWLe+GMe@DXKrNXPIK}q0k&dMj?fTfojSdg0iN}kVW9lU{Y>n(7x8(sO+=Jclo&k4<
zFa9bmZ(KsB8aYdrPYDFzxSY|ym3=ol(^9d*eq~y2V;eeAJC{POiUWvb2Ygn+yy9P;
zEEf6Vo`#_I@@+Z)%vV%}Uu~QPTP%H^Lv)ATx^ubT0)SV|F?b!1<}D1&up39i2Usl5
z0!J7Xm{GEF1mvMHe3&Pld+<XEKm@<z9iwkmf5-b!eADeRHp}%Org_7a1j=f0m8P?B
zu-_o}4GeMEF;VZo<3Cq8D%&X~$;MY5m2C{_rYy6$=x$cf8XEV&BqIxf119}KTC9>y
z4$;-9pbO$WIPvFGlt;4~5=HoaxD#+d&YbTBkBCfie2}-Aa(lN&mSsMqBrJ-^X^@=F
z&&-dV;sGyge7L*;crns~5hj3xQ*~i+q`-YB{jQoC8F|yPzXaXnaeb_G>I@MR_i<%H
zd$Q(6(0DryYNlxDjstZ#{p1K>HyYE{ybZwBk!u(SQqftDoH*|M(?(N5yS6=*nwoP{
zoFd)YGsWu<A|Rejcx+}zI`{u69Qe)$&Z^<>HPu9EQ`b2Isid0#E{aERVX<p8vYFJ7
zq@YA{_N2S)qmZ1A@>@c2BUWax^N^h-(-4WP4*gakx1CSo2bj`ye;nuHA;7FQqKa7M
zhr4e0>xVq~qW4sbOKnZU&b#%;Kbq!A^a#v5qLLGCEqhelZwRVm7(+4jTbXC6o-SA2
z`Ra*ZOKubnPTpr><el<a<1=Y|WT&1o<lqw;<ei+w++WK#c%Eu7lF|x7sNV>|aMlzL
zbTG&V5#kAXRrhKX6!!cql;2N}pttX1#wX<#ia1A2W1;@KcT@9KR{UVu3o5T;cb_70
z{4c42Dz7JdkKO2sV$I6T_=(PIM-uraVk3a6X@$O-idrZdA)nXb<P=mDD@4r6F`AZ>
zziA;;fAlyAcYlS+Zd!?N`z>ztl%HK6WNuz)a&bJ<=f>Jo7PAS!XSw)k1#f4n2y0^f
zB>48%`D5X~i%JhWMIJufLJBy#=J_>rwiK=WN&a$vHCqJ|z#n_8Hd-vWKR<7AHb-UL
z!BG~YbRT2-H$+GTsPfxlQ#z`VXb^-7dQcUSlX99^sLwk{$-4}(^V#Po>eP@F5|-$C
z;L%SIDx~xoqG>hU1h`+EM<F3}e2>I_<e*-Mqe){zGu4`4c-v4^>WUANmhI+8J024A
zg~e>+BJ^4jT00`n*xAl$X>bvEwSfF7puQsQPD&1z!chIEr`Hw7X&whL8bO!Fmrad$
zpex`sGKIW?52B@*G`HgbL4!XqERB^B{%{N!12}{l5Ym^!r@yCTS9Fr!UzXAs-XxZV
z{%dFw67fxFkO!rd5#f%2EXdi_bV5Yb*PH4JzWSjEUK^wk|4uE3@3RQoh3=&Hcb|D-
zvud?rkA@pY#UI`q0JFSHoVB>C3a1LK$_ch&LMcWD<uIuj${^rAw0lY;fAUq=kfzN~
z{5$jB-XyG))>N?i=jSek&0BJz-<$SD$4&rq6l={E9h4oTmnjnlUP$w-TiM_D3Avn-
z#>8+L7o{yFFk_H^2_8A#icjp-%KuAAZ9!V)5Zo*t`axm~zJYAmb(0-Kg_^wv<WNVN
zsV37~s}{fgcgkhq&qeB&17kSlzU!971j$J$aIxuGW(nR)m-~7IOc}Muud8=LZ2~z^
zvvY6jADCG!5-B*@Gr7XUUSU~-hkI{h_>GF`=$`LbM~E@4JS`uv-pVj!HDX2c>CMru
zH%Ajd;Yxag09{$%A|O%LI%RCIx{QF?Hb8jlQd;N&(rf*)l~D|FgqnBLe94R_1<SEF
z^z6juzrM7Rn|5a!CK0oTe6yBH{1=WgxjqIlU%s_-PL$nS8k(lA(NNJLr7x~$5tS!!
z4~fuR>EW<6AHFjy4`~|~F<8^RV9&>Vz0ZUX{WA>z^YLvNWpn1cl9Zas^sVmOPotEG
z3AJ=&0@~5@a62hCXA##72yd(JL#Ei~neyg0(;1I|!y}EBnRfyhU%l~+0`;osS#~he
zuqYM?JT;z7541^fu=>@;8C<s<{)lkINUD9MNTmiCV^JM|sw^nHO)#0xi^(5#k@`{K
z%X@z{s+W_uowKO6;Qo*lnEbapmZ*cw5&ewh0L`5I&%V9&U4xK1L@%b_oC{4HHyz0k
zE8G-}97KuXcm9i`V?gCE6*J^~p&oWDW?H?Z@`O(gbv5iZ70{6ge6j>Wg*kY(X@k}o
zVgO{z{yPAbbis<B<wN=!A?m|8+Ln54br2!`zhd6OhJ$@`#pP||)4Hd{g!25pKInn|
zY${z`m>=YVej870thKF<BWysr_j?43nJ<g$*cD$e?$t=Lb+esa0lRSL`XgFA3e#xJ
z4%N@8yI;(5S=N-v=UxRWrV=;E&RP)%C<?`HQ2XuK#BqgSM=9=IaiHgiQD5F)tl35x
z)HU{RQA)%U2W?k*3%#TZYzGT;Jg=c%fPU)vx&~3(9zafq3x#t3rB^Q!^YhMnc(&Q{
zOY8EArZABqpCXAq19toy`l?UzI58hz-_bzRObi&KsNEM*U){%|z1cx#J|L<;m&tq4
z7yv}!3IZ&wVwkqWzuuSBy$nD1-^cdA;SR2F84cpQZ0pT!j%6}~T-^Uyrj3{}Bx7)4
zT75F}Ozm2PmFYHAaHeZ)aZ%=NhUi+#%AifN6;-oo@6GT4v!j=bReRwh!`xvj%myj^
zHP8!~>XFJp3^&pNPQ(!%;i;rTPoSLPuOU_WWp|TgE5>&#RspTDy3*M0)K8+ApuNzR
zviJK>J}k%V;WH^KI`>1Zfntru0<VlM$D|~Fd?#H2<7P@cP%6c^6_+Y+SkrJcVcF^F
zwD00pezKhQ<Lzl=H8+Ceicm3G%KAO(*_gZU_^#5ov}){P(+Q)}q@3-!-|+Q6)n7=j
zWPGR-GaQHzQ$XeL-f-~6Twi71zdoUNTnPI+##tj8V*V8h)f&AgL)$f%k@uJmbUAQx
zfzn+p1hI)v7S}nlP0-1x74wzf|NKY8^ZawA%clOzF@SduirKgfU?<pX4QAM8z%O_g
zJ^fz)08{{3*~krr1|f9^DA*id&HU5aLP(yvJ%%F=!211$+f|1$E4W`(TX_#@13(}t
zDz~0GFXuFzW{N+!ae@shq~U=-gcOPBMv1x7&=u6C1W-j9#*Nod_123LU<#5uTaz;A
zZSM-jYgI=+;msu>ff`0i^Z|#wa>pNzqES$<Y}8WzY$EoP2A928eL~75#xa^k|3!C;
z;+u<Z-}Qi(6GZ2~Z}9c-)aVxnUt<$TgT-<F7m`(1n&<6zB$I|cA`0YEOl-2?uV0|B
z0u_K90SxvOJ$0z#YoLQ2*n!h4?fAJlC>xoG5-;Uy-9A2!?OIbYs!=%ixd~)%FY+$)
z=Dx;7DGbVLE0o1EZpVlI*@A#ZnLbJArSzmqXXfV*`S0!}&(ZlGB_v9%dZ;MJG`$>E
zE<)mcdlJ=ySGZ;y&C1CL=?*kNbvq43Z_c6CN0(n|Hui3&)ZSsJ?Wt}fga|{uO&x=!
z)kYhO*s1$b(ii$Bie+weFD~BPrhuIHkV%fs=8bQ#Z9mef%1Y{Y*yo{T-_z-M(%=D<
zkT##xdq7Uf*nZKY0YQ{ZCXKMq97hObK*gMCZ}|w-U;SyjIuO<7jdHw$a<7Y6!hdr!
zS;G%c<yrXpyufnMwHM{*vA#+5?k7P;KnS-Cnq=#zpb^WMFYrvFXQ5}`5TcHLU9E*}
zB^m1~6lxH-JMQ7YO702tuMPq^{`}7lzD`}#*!PlVjg>x+Aubb%n<6NOjn&LN;<%cL
zdVB{Y*Pw4@S}E>p`1RbJ8Y|<?H=m&0%S0p(91DUg-}K_mlj;{+gyH|A8yO_NZeF;A
z&%XO&L%aHdY4nEM(UpH1*CH)n2RXv%e2{Y)pt*?WD!r6llq@xIAZ`*Yv^BirRPh7k
zW)_;3vyY&C_fSA%nw<Q_Fq9F=a^=?Sh!ML)5_0}3=ZWVxXjsz!|0+qb4xPGb#CkAj
z@x<`+50Y0)tu=KTW&^+7U}$f2E81Wrf&0yAb|%|9@yTiwb`TnWP*`eJ<luf9C6z6Q
zvVa9!%cVohnaZO1OhPJ0V$ROAZq3*LYpmDR!<XkZ&n8F+FAHv8ko5-b$d@lU(Q$9Q
zcCV>Z`w1v*Y*dp9oQ-F?1yj)RSPWhsJ!bi&e}q(-Pn0<~hQR&1i(wR)`qmGi0{W+^
zk(s<7N+*t%z>Oz|%?XB?KZB)4k34=mi{ICpl<|rh6Hw-BE*ph{Nog)@C=!uWXUW1A
zj8{S)@Elj-&8M6Bv*Om(OdIwb4lhH78^%W@fEa2W2A~M#PkWf70|2TLg+9`6W#U_<
zC_BTM(!mv);BMB6EA?fZvo3ubcHgvpL^&02zUK>F9%L@tpX<VuBh8oTcmDA~;+8)P
z2Y$%v4b@3ma*F)@wK#xu*$?+Izn1iNQOc?+2JY-5S0ctpC<jXKrKOomP<#tU#uuMW
zzamAhLL@Mu9R<+$(Tbv5wYY(Q-={U@_q(YH1#GGV?b74X+a*$QgEDA05%|H`erPIl
ziZmj?>(fxZGeyb!h>*D;?NK*X#It8E{|md868hga-HMhuyQMxeI|i_EUJkM!0|3h0
zOxyKTI*u7F&9+juolDY1<#KpfYkVdcSX&NdV}*+v9A(1Nkz&)!`4)y2V7uWU4%MQg
z;n=U=fjCVRzpQ#9Rixz@2Bvj|6@6|FS>2lkv4tLLEq*^G^NxKszl^y>n2<Fs{k`Dr
z%(i0Ej1Z-TNZ?{R`7x}&0n<h8yM?J?Qg-S2WOQpTYpbyz9(iXwdQgLnMHMcWHHP@4
zj1791A4l8^LPr<3$$hZ9u+`TE27_w7^a#TstF;8`FD#sfm3ZE(JO-c0yS+I_xG7xD
z>6jj0i)+kSereT$tv!Ao28E%uI6EG`*(e8heAtAVj!eTI!&8c4Z6(%rG5*fvtltnT
z@bfP%9TC>K_+j{CGc)J4DM1UiwX~~wCf0^z)~(kzg?fqIL-EcaQJnIuv`#%xdLN3?
zRtdd&QwMud^3#Rpk?4MRwWPgI77?bf8+tie<EW4qSIgsy%MSC)8;Sr^#JXmKBi-=0
z|E6qbp6h4|g+5n2aHRXF%GmF*Tdhvrq|D`;g8v<okKEnn3-lppSfv#A96=63ArYPz
zgdlKa>?@apwSV%Y^9AE<`Dv?#&HQm@OW9%Gw6=MX`Zyh-A@Xgch2Lr<K)t8as+`cj
z^Fb8JvUv@tH|??W5>KAe=rZA6)E78^XCX`cx?Wp#{pPM@!+?JBNGHf$pS93GN!*UC
z&L|*hhAU|$^b8$@wevJm43sQgG^1;5k)B`8TV5nIHc&fRWin2b2A#QSZ08p%<h)*|
z9yf?ErIZ#JV|RLfK6&5OU$lQSdqt^vVZ3<h+v*Q+Q;Wsl;=ucKdGWUS)E#^CoA#Sj
zjuog3MWo9kf_<3j%|8$g0Qp!}4!-L@x0)NU<RsfGBDJeWbX_Ie^g~DGFu<0No9EM1
z3ief|++M3UBDK}+ORKyeMrloJPRooww;S99t8cFF-*k&Op}+X;PXE&)`J_YiaX`$&
z{r)JoW{uHh=(24>@)z{z*|X>sZ&TzJ$A?wz67dbb8xzXj=w6k+0{eHtpstEJ-5)n4
z-p&bE4wAS{ng0t3l(iCx@p_bvx~t*Xx|0Y#o(KgC90TQ6i7!!n)5_(xj3*#ydZq6#
zhW(e^41JgWnS6KI?ut46sM(apK3bCcuP=LRERnD{sy6KhOmsba?5NMfpidAd=q}C4
zh?~&J?!liqm7*<^2%6I4w_-1v+<RYMNjENy>=dBYe8_23#@?sJi4lEtp_2bGi$XB0
z9!IZs+CQl#%}NTf<@@7%(ZZq`9OsZHlfOghgM1Ioj1jf}r{7w|absGInO}zNyoZ(2
z17*Cl6eq(yD|wm|d(0=|NJOFIRH_`&zUY)`@bokYA$2`1vy(N<I_C&Q3kuaPhG01F
zXq{?R^Rrng^S4E|d2gi+fg$&Wr`_V4t}~-#^r;e$E9sb!;6?CYYfl%{D&PA6o_>5M
zpYWyz6!af%*5~c3+Gyu>)9-cOz0h-+#H2AjRvjU?Pi$lj5f5{nd~}O$W}<ba3CNF<
zgH=IyNnUDMAB22)T$_Rdy7fLs&{V4=M<ioa^I|+dp9@au>WQ3h2oA--rtZqRGB0bD
znOWfSr{sC!hvX%tM2cB?LwU`QY-kFZgH$eRhyA8&%7RxNtuVQwB2rJwpmt_?o+R^u
zaaBTlu;QCj?#j3!tAVS0nms3bY*xL?F=opFk+I{aTrJ<m#@dBU%;yiH#4an(rT-Qt
z5Z>m=5J#~vt_-t#ydtrBAL3eC&wD`&eL{l$HWuRz7X52JwLjNjA8WyzjN6qNZXkA}
zTaBFi(NNay{(+aH8@?v+blI-nDh`_IDGL-+GL&<=*xSH_tygPFkn2B8pYgEBjwvs-
z$np6IJkqhG|3mgk$!n>vo9a3~-90<Jb<MKuKgDjfp=_N`uq|}x$=YQ^d_3+ul5veM
z+Zu+g#o5zU{A>fALAwZqJU%-NFP(mA->b4`2QWD=roT!>%I~Xwms$ApY!AZ-#8mQX
zZ896=il!8`+N1D@ft80{UJ+HD!^=i|O+}ykBe<YM2%E!=+}lb*UO9~hMAucb9`|XA
z7ePG99L_j)Y;AYSpLz(r?PlNh+4-M`J(xz_R<i`&FFBZh2<FBp`9JJRh!fteaQ1d0
z5BdQg-*M>pRif6k8ab(}w^(6$-!`LiQ=JqjV?*qtH<HdT_j}14oAaxXO$UItXl2}(
zH*v(>g2(tvI5s?21X|rFd0Q|~qm1h@!HeKuI30CwlhbJYlMnM?dON2H0sJVBaoL}m
z9PMSAZ~i;Xz&qwea~G9+ginJ&q*L3~YvA((3@qipF8#}K#a={bJAM>Aeo?vEQRpEr
zNuF~+d~*etn^jGbNxY%4uRA}Wdr%AiHhgKs%QW$W)%#<U!6GL0D7@VNWv6OAwjFyJ
zje_brOnP#)%Nq1Hn&n~8L$i3~hA8S?cRrW<#J}nJl4OEP=jmfnm+)-_x~3Rn@uVOe
zQ&ZFh@%+-R*d8(V*=k#Vl_V=CAG$&tY)1W!gYF*ed<G1Xb2Xy8ZqGgTe9w;~$XUxy
zWY~E+=f;m)sg1JL#ik*4cRlXa_Kqed+XsY|#HJt|LMxZ)F5frg8x}`_@8=yEmGd0R
z&Ep!b3&78sNQtkYE^!zD)<rYb?HHcRnU2)3cPSW7;O=)?5}N;XLY_D~ANgpStey4B
z_k3pl^$GfQI6deb7g&T?w`;%3R9t7=9e}$2$V_?1qBhm7icQUh0W|SHJ7EPumM`Gw
zT&^iuUm8ybE_+aZ{%!IgT)k&r6`)(#8%1eX+C|N(GkAZ}6u*sta;oLev@ERcyGID?
z(u>|@&EM~WJI3Ea4}yAghTIk+<=&dKeeFFe?=Om;7k(|W{q>+Uku<yrdF|Y6;5weq
zHzB04=ajpLlvA;aUrc~556tD&JUmlP2F=@hedK$SIAWk54J{cK#7g=ZRy<+rJk49~
z*v0B<;0Z!a!BqDcc7EHkPh%r~T;?V={#I?(0l)x?!1mt5>-D71(@r6Waqnlw+fXa_
zX<+6<`fVNEPz5ll#y7ohK?Z+bt`i-hZqHl!lYnjWPC8RV^G0#q@$5t1KH$F~z|W}^
z+W-LU*!lygd2(^J)@hPuS*L1T{!X7PD8B%-VhZD5?;*J&{isx^Se!84RSZc`6#bk_
z3tpXkAOWGAW2_Q6LdM|9PHdgXKcC-pJJ&`RW4jT_xNh8(X<x#2j|%2cs7>Z*x>@@@
zW(E1UT1CuF?=tEJ(%QNsX!|#xZ)-6gW_cUxo)BD#Jb*)`4^vWmMRF4|*g+qA-*<wA
zr?6<uTR*{&gN~|~XBZq-Q%k#c0~@3<$7uBd0=Z5PEH3S^$t`SZ99(kodDVZzBzcb1
zY@zDJ5{x=8Ad~7cNHG=ahPcL{EEEzo;{EYzT|42)vR))mbANvuA^!0JuaNNbn(NGj
z_s<8@Ag-JrErN`^1Qg^i^?^u%ll?ob+E&tr!QG)kfE)r&naHaAYS&pbOfNX>L(1|$
zbh6;@Slpl8jTJplaxV)A_n`<lZ|WhvLgyugN>2;}DAGxuvSH~gFi9<buu@U~p-ibf
zyJ6sMh9GO}x@vR=|Ciy(L;W@lHj#mO|MNOK^aD9<72p577lCo`QSrUIo;^m@o$!%$
zyxbGk+^pBN*QHti?!w|j-DiySeiW*EOf>tv953k|$#Xxc!q*WhShdE{6MANGU%4E(
zgjqb6O&es#cA=+%l5Ya>nf(uK>o=<Gs-cIBxPU^XQ0$R?frG85r9uwF@bbD{SYU<N
z>W!%<dZ)6O*Q!#JXkPeDcXPw|+np%Vop0LrPeP?T5K~xXr1m|GE}N~t)A?=a5DAkf
z5;UIDYu@&O`o6XOn4KMmX|KyY=?h@M+@gv<>bASt)BJC$yRKwWU4PwYO@YQbDZ|Xd
z=9v^L*|4UYHf3;kg1ISM<bRRVCL2C)T>hpQZa%z>ZAXXWe*dH&K5tTHY-PCDjP)A|
zS1h(eSw|Y!zgi@ejb0xY47a-`Gt^_l8cXF(O%xS$gXbCg=@nL$AcF|j^;i1l5$c*X
z5A^`fo4YV;&TK)|v#Q*)j)(mij#&}S8sqS}xy)wl0lqOPDAhtoj}f)e%A)EEN!$y1
z+^Vqny(9)?9<})y!zobu4>uH0vs-O_Ud5DnDOm16V%ZdcX=oVxB3gQm)i#LazeWKW
zt*57p<jr9qkZW;zdZz7cjcI__Qy&kjHZAmZ$H+)G(PT1h>X2{s;yLS3P!v`Ltr2Um
z+MW3qjGsBY(QdMn^5pPbu@CL67)UA2OPicNKM)w}#$V;VefI~tB#t<Eb0W?EZZS-r
zpU4ZMpv)<a<adZ&W!%zYIor!XdhzY;p)()FzSzPC7oa$jd3oEjn;)6-dS|Irm$|-%
zEi_ZzvuUB#ShHwgU~Z%Z{do6;vR1=Z(-kA!?ojzLv(GEGnSIF~qrq^~yYJSpG;V{f
zubwnFt34Q@EJXVEtE>m0!2>Dse;XMr@P0jcBFz(10d0vX!11v^#|^B8axqaHS=(;&
zRWY^XzV$@^Zvz8*#3OMdB6T;L#%Tv>P?|bQLhFf)#F(qADYI6YZT9VVL0Bc+w&`)H
zWJP#erU8v*#8$4W%^-)-|4gvjrs-g>yP8zRht((Y5B%%%hYsq^xCiZ>A(&})tlPw)
zR#-+>1m=#*gZbL}CcFi|?&eGxTO%!t@H9UFiv9#bm3ct+O+=u&(!0K^>OV5+70PZe
zWUa1ed_uf+1r|+_vFH|B@uc-ahjZyR{WhN`b2j0Qi%Mot+Z|V2V}!|+*s$4Wn^G9A
zRGJx%-c_BcLtEMF{YY*DZxOOsq}SA4mxGUOv9SM$iGbec3=WOg_L3lGAYzC+SN<rr
zeeSs1s@UjV>ej>dFI~uzJ+7w}*cy836U(rD($LsWrDs;pJ`S|R-Phj|RSWd0<Kup(
zrvg2%;ppZ-kb!a3xr5-QAMEr+kVxjE>oN^lFfR^A&QCR(eGKvYcd$OblNhHu!w*R^
zwfSF{VZj7@s_E_MJO|psxJivy2qrCBdsvGvAD|iT!DC6Pl07$@IJoG>z{*altfG#P
z0>j|_-M=3wD15GL(8Z0>X5J7cy2>`qQV<(_2HtG0eh=ULIk?N<Lx{S7$#EV3ag+L2
zl-~>kY2c7nf^l|Oj&i);`TKkwgqcrVgAccSD+MJ&O?J1)rT&#HTReM@gIVX$AMxIa
z+;D{;{6&k3i~P4|HJbFUor%7{i}?tZyf(Xv|A|%>Y*De0bsIeFCJPRx-a=}KK7oGd
z$UIY?Q?YfZhRBafLMA#og}Jyjk17XUIX43ehkp;1*N0poecvKl3F^qtb_@zgbb>@<
zHYCx5sds3<%8`axz5zBK;>VBfPBnc!3)CLTD;2j|gYRG$;AK(@=!*B)3Ag>0M+CZb
zb$S;`s_*N;#8PX)a^z57%X*a4qHaE)Rq2T~)NTIf3z$e{G59p~wzuZJvhLcuA9I@d
zrtIW^9R+E+fi}8}mI)*UX=2WtpW_emJzX-(kvJ9Q<3UfUM&P`U&tB91V&rh9rP-`+
z>;g+n>DXpizc+#2F_*1#0tB1f(FDw+2K9wr3sQxr0wCV+&Kz>ve-$H@O$KV3geA<M
z8)xp3?5Dp9j0o<lC9f#iJ@-r1u_bc)SLqEjN)bp!snV<EgX?zLjtWe<fR*T7p48Xp
zt!D~(K_(9xOaQ8!rJ{M;!Gd!8&JP{=(N}wFsT*m__tCM*jlhuFGkKG&k$Tn7G7JSU
z1VggPUzg573^joq2_-HVEQn!$-(e6mg<j&PcZVS^AmY4atF=#z*?u!}5oR4I>Ro1p
zhXQ31M^1;L#*v(J^0NfyI;!MI76|^E6|`gRRy18~sjkC7C|?UpOfMs-QJV{S#vh6B
z7J_mOHj}<qJJmh^EcAN;L*N={(c`_lucx1ZE0WZTLK+${7-h{g3C+zIe&XO+YIx)j
zz_=8+bwKcc4V~McpZh0ja&*)OXLFf*qAt(0pjTJ<EO5xN{Ks4=2mlJjcvDQs1Z?#J
z#Xq+Vl()<TfLGxv4iO{4=Yb~~mm~RTvC0PFLx(y8=N%tZnxgYYvl%l6r|u737&m<r
za2Il;Dq#y|hn<^G(w2YfKz{p9N*SL}Ez^S;<QI=r<kh}v>PY#Q94dJz(^;dZxVj{!
zpyj1w(kM1PQ`c%Bbj$p&@W`R-!Ik$Hl*t$-mtS93v9Hl@kO-KPa=wywC!$n%z%fmL
z8F2>I?kx@ACzVWf>i)BQiKtR~Bp~3eUkzX6&}Dac4MmSARO>~4yU2AXUj)VFjnA6I
zIvpg{uYC#>nu(vtjn0*H+x{@&TrZmExYM6eo#8DKdpUFXc)X>wGsRz3=OZMT%{M1y
zInAh|hPL9r`?cxEvImt~o{;7dMq`tRE5QGC8ZQ_Ry87|*p>)g^YaUFT%vfyc`6PRx
zf^L+a2lHNM&7WJtntPI<sAvm$6_+^(7VR}wR%!~h5QWBh@g>-j)Wv#@zO-oIN5ZFn
z1?|DX$2vq=%uQtj51y&N=Jjvu6F`AT;<)s6&><G3VVn@t5NC?|IIHe9MJ+>Js6S)O
zY23hu4+X&93)NaZ*+-1xX(^bj<AbPXzzwyJeX4c|Q634*L|+dlc<pf_=od43tYT)m
zzzQc$MSM>b$zpLp#+Qus0FNe_nbWk?h3@@0UWYl-(#GPZY*TsHZiGDP#uzi#xHDd!
zP1}siJpjtZREBq@UxKj&<Oc}-)e!G=CNvUlL0PBLDlbalA^O0EC%Gh_j0T$&Y}-Bl
zJzVbD3H)o_sw0}!se|Fl+=HA_FRm$ZTy)W2xMbbhP(_R~r}|wF_AXTSg16gJOg=7%
zz&KFNyRvxl^V^2r#sQm&e4dJZ{P(VI^SZ|vxq8?FBUb~i>nB71M1cj7oCG)Rw#buh
z^tgI3xBgP<?!z_fZ9RySFz+!*F2@5sr5?GLisKMB&o_H_8unGT7$_IEmy6pjM01vr
z%r&Z0>hnHJH^&02@cYa;F$A)M!xh`q|9c#OG1|fLIyQ9*S$S_ZkBp%J9j8Yz!3A%s
zMeHwjh3SCotpL$L1MkLFOby-LXHwn+t;Rq>Z-CE|q&{uje~&c?r7Ixtz9HDet;V!O
z$O=B5?j_`98rpuo3v;4>zjCVf`u?{$bWMS7HtK>uIG>cw*CvJE%2=gz@V{p!RBoWP
z{rCbi6VUx?dru&CoeW(q7<XZbe5u9#jEYF_ifG(>0nX^{1Ed%C|BGGH-bv2c8q}_0
za|KWs5dq>lAYc+8=PhQT(Kc#Z_*U#0Fmo5JJ1Zbw#dO8JnCv`WK`nMZST3}Tbw5Zr
zE7e8iLevvcAj~sVSuR1Or=&_o1)UB#G#G@MDv&iqfetTH@Lonx<&FTQCgffc_S7>f
zei>|vhIiuCjB%j4)z#3OoQkrA+Dy}I%v}CgTE+Xt!z$0fZNPFgPIys|=DaIsdY>wK
zsI`j#3(j`ZUTn|Rv>9*k77g9A^)3HDNS0dX)BHm;0&_my;x2qMal*OqAR42r1T4d0
zicmxG(`3jLWt<|-cGy^rPPho(D{%k44=2wvEa0P<k3<QB!J}W+$$iMJ&OL`U(zxH&
z$BYB6&6mv;8EL)t8-gV)QG+PQDgiafRlIq@n1KqQ0ady2r&qioK#{C%Lw?}W_iVf}
zSr0`BagNz#PPL%h=cDjUuPD*C+s0fD-!}*MMfV7ny13d!s)M)SHs@*1uRgxI|Mi|6
zf~8JOd7_nb&NvQCWki}B2wZZ=3zvAo>6&Dr+w@oya!E?!BS9yqhVkOBEiU44EU0aN
zONm;e&RWBa3f%_cw5FV})R%GAq3^)ps!#&JLuHXUaocIX8-2Q^>&a<RX@A5xHAJ`}
z0Sg@BVOb<byoPbfJ+RP@$ETfmff?xs-s<tu8_9m)SouO-dQO0XJ5d2}2xM&=L2@F)
zFcnCr<2bR$4EuvX9F9#xu6~BRE3IshNKI>=mUtFnRS;5Kxg~|5KHe&~KF-xy2BDu4
zcLjiv+4NU1M7Hr4CO$9G{dMEMVAv<wDk^zbD2E%^qA*ZFV1vdnCH5>PdWm}}9j2FV
z_5Vqr;c_ea&$#S+AYZvwlG@S@wpD`78zKT~PogcO?ym*A29${#sMpK1i=`Q9;or+E
zACVii&<qL@2XaQ`UmNm#IZ?<w{0s`c_z<~|CCZWhqrP}pq`~6zCoEa~LUnS<i~&qo
z!cm2)mhS>pYlsxDOpcYF*}HT+>?R&*iB$Bw%n_l8gNXu57d81Tyo@^s_xwT!$uhOB
zFIwfW%pY3wT6|JJ4@Uun`C6S#M@&x$J5R?>k<UXB+h;ucr6-`RIA`f00m`J~O3V@N
zJg0Om6j3mredN=2eP`nddrhai0~Y2058!|y*KNZvw*&(mHlkP{+#KmsedU-W>P@2=
zn0yxi)}<!UkFFunXYLijUgwU~GfEfC@?Q^dOkp=E2P*&1D5GDF8NlG33M7RJaZO&t
z_?TnHhB)yV-RVTQA9BcsgTJ@y?UJkrEEgAh0OT(rfylnXCH+%<A$anCYz{`S|Nn(G
o`D2Ha?Rx)6Pz7{+1;3$mh0GsH3V!2*1ylhPWz{}bNt=cK538Lr`2YX_

literal 0
HcmV?d00001

diff --git a/pyinstaller.spec b/pyinstaller.spec
index cf909167..555c7c92 100644
--- a/pyinstaller.spec
+++ b/pyinstaller.spec
@@ -4,6 +4,7 @@
 
 import os
 import platform
+import re
 import subprocess
 import sys
 
@@ -47,6 +48,50 @@ _hiddenimports = [
 if sys.version_info >= (3, 10):
     _hiddenimports += ['truststore', 'truststore._windows', 'truststore._macos', 'truststore._openssl']
 
+_IS_WINDOWS = platform.system() == 'Windows'
+
+
+def _build_windows_version_info(version: str):
+    """Windows-only VERSIONINFO resource."""
+    from PyInstaller.utils.win32.versioninfo import (
+        FixedFileInfo,
+        StringFileInfo,
+        StringStruct,
+        StringTable,
+        VarFileInfo,
+        VarStruct,
+        VSVersionInfo,
+    )
+
+    numbers = [int(part) for part in re.match(r'\d+(?:\.\d+)*', version).group(0).split('.')]
+    filevers = tuple((numbers + [0, 0, 0, 0])[:4])
+
+    return VSVersionInfo(
+        ffi=FixedFileInfo(filevers=filevers, prodvers=filevers),
+        kids=[
+            StringFileInfo(
+                [
+                    StringTable(
+                        '040904B0',  # US English, Unicode
+                        [
+                            StringStruct('CompanyName', 'Cycode Ltd.'),
+                            StringStruct('FileDescription', 'Cycode CLI'),
+                            StringStruct('FileVersion', version),
+                            StringStruct('InternalName', 'cycode-cli'),
+                            StringStruct('OriginalFilename', 'cycode-cli.exe'),
+                            StringStruct('ProductName', 'Cycode CLI'),
+                            StringStruct('ProductVersion', version),
+                            StringStruct('LegalCopyright', 'Copyright (c) Cycode Ltd.'),
+                            StringStruct('Comments', 'MIT licensed. https://github.com/cycodehq/cycode-cli'),
+                        ],
+                    )
+                ]
+            ),
+            VarFileInfo([VarStruct('Translation', [0x0409, 1200])]),
+        ],
+    )
+
+
 a = Analysis(
     scripts=['cycode/cli/main.py'],
     excludes=['tests', 'setuptools', 'pkg_resources'],
@@ -61,9 +106,7 @@ if platform.system() == 'Darwin':
     # wins the dedup, which breaks `import cryptography` at runtime. Drop every collected
     # libssl/libcrypto and inject Homebrew's, which satisfies both consumers.
     try:
-        openssl_lib = os.path.join(
-            subprocess.check_output(['brew', '--prefix', 'openssl@3'], text=True).strip(), 'lib'
-        )
+        openssl_lib = os.path.join(subprocess.check_output(['brew', '--prefix', 'openssl@3'], text=True).strip(), 'lib')
         a.binaries = [b for b in a.binaries if 'libssl' not in b[0] and 'libcrypto' not in b[0]]
         for name in ('libssl.3.dylib', 'libcrypto.3.dylib'):
             a.binaries.append((name, os.path.join(openssl_lib, name), 'BINARY'))
@@ -82,6 +125,8 @@ exe = EXE(
     target_arch=None,
     codesign_identity=_CODESIGN_IDENTITY,
     entitlements_file='entitlements.plist',
+    icon='images/cycode.ico' if _IS_WINDOWS else None,
+    version=_build_windows_version_info(CLI_VERSION) if _IS_WINDOWS else None,
 )
 
 if _ONEDIR_MODE:
diff --git a/tests/cli/utils/__init__.py b/tests/cli/utils/__init__.py
new file mode 100644
index 00000000..e69de29b
diff --git a/tests/cli/utils/test_host_info.py b/tests/cli/utils/test_host_info.py
new file mode 100644
index 00000000..e1f26ac7
--- /dev/null
+++ b/tests/cli/utils/test_host_info.py
@@ -0,0 +1,119 @@
+import sys
+import types
+from pathlib import Path
+from typing import Optional
+
+import pytest
+
+from cycode.cli.utils import host_info
+
+_MACHINE_GUID = 'e0e8e0a1-2222-4c3f-9d4a-000000000001'
+_IOREG_OUTPUT = """
+  +-o Root  <class IORegistryEntry, id 1, retain 42>
+      "IOPlatformSerialNumber" = "C02XY1234567"
+"""
+
+
+@pytest.fixture(autouse=True)
+def _home_in_tmp(tmp_path: Path, monkeypatch: pytest.MonkeyPatch) -> Path:
+    monkeypatch.setattr(Path, 'home', classmethod(lambda _cls: tmp_path))
+    return tmp_path
+
+
+def _fake_winreg(machine_guid: Optional[str] = _MACHINE_GUID) -> types.ModuleType:
+    module = types.ModuleType('winreg')
+    module.HKEY_LOCAL_MACHINE = 0
+    module.KEY_READ = 0x20019
+    module.KEY_WOW64_64KEY = 0x0100
+
+    class _Key:
+        def __enter__(self) -> '_Key':  # noqa: PYI034
+            return self
+
+        def __exit__(self, *_args: object) -> None:
+            return None
+
+    def open_key(_hive: int, sub_key: str, _reserved: int, access: int) -> _Key:
+        assert sub_key == r'SOFTWARE\Microsoft\Cryptography'
+        assert access & module.KEY_WOW64_64KEY  # must read the 64-bit view, not WOW6432Node
+        return _Key()
+
+    def query_value_ex(_key: '_Key', name: str) -> tuple:
+        assert name == 'MachineGuid'
+        if machine_guid is None:
+            raise FileNotFoundError(name)
+        return machine_guid, 1
+
+    module.OpenKey = open_key
+    module.QueryValueEx = query_value_ex
+    return module
+
+
+@pytest.fixture
+def _windows(monkeypatch: pytest.MonkeyPatch) -> None:
+    monkeypatch.setattr(host_info.platform, 'system', lambda: 'Windows')
+
+
+def test_cache_path_is_under_cycode_home_and_not_temp(tmp_path: Path) -> None:
+    cache_path = host_info._serial_number_cache_path()
+    assert cache_path == tmp_path / '.cycode' / 'device-id'
+
+
+def test_cached_value_short_circuits_resolution(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None:
+    cache_path = tmp_path / '.cycode' / 'device-id'
+    cache_path.parent.mkdir(parents=True)
+    cache_path.write_text('CACHED-ID', encoding='utf-8')
+
+    def _fail() -> str:
+        raise AssertionError('must not resolve when the cache is warm')
+
+    monkeypatch.setattr(host_info, '_resolve_serial_number', _fail)
+
+    assert host_info.get_serial_number() == 'CACHED-ID'
+
+
+@pytest.mark.usefixtures('_windows')
+def test_windows_reads_machine_guid_and_caches_it(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None:
+    monkeypatch.setitem(sys.modules, 'winreg', _fake_winreg())
+
+    assert host_info.get_serial_number() == _MACHINE_GUID
+    assert (tmp_path / '.cycode' / 'device-id').read_text(encoding='utf-8') == _MACHINE_GUID
+
+
+@pytest.mark.usefixtures('_windows')
+def test_windows_falls_back_to_generated_uuid_and_reuses_it(monkeypatch: pytest.MonkeyPatch) -> None:
+    monkeypatch.setitem(sys.modules, 'winreg', _fake_winreg(machine_guid=None))
+
+    first = host_info.get_serial_number()
+    second = host_info.get_serial_number()
+
+    assert first is not None
+    assert first == second  # persisted, so the id is stable across processes
+
+
+@pytest.mark.usefixtures('_windows')
+def test_windows_write_removes_legacy_temp_cache(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None:
+    legacy_dir = tmp_path / 'temp'
+    legacy_dir.mkdir()
+    monkeypatch.setattr(host_info.tempfile, 'gettempdir', lambda: str(legacy_dir))
+    monkeypatch.setattr(host_info.getpass, 'getuser', lambda: 'tester')
+    legacy_path = legacy_dir / '.cycode-device-serial-tester'
+    legacy_path.write_text('OLD-BIOS-SERIAL', encoding='utf-8')
+
+    monkeypatch.setitem(sys.modules, 'winreg', _fake_winreg())
+
+    assert host_info.get_serial_number() == _MACHINE_GUID
+    assert not legacy_path.exists()
+
+
+def test_macos_serial_number_is_parsed_from_ioreg(monkeypatch: pytest.MonkeyPatch) -> None:
+    monkeypatch.setattr(host_info.platform, 'system', lambda: 'Darwin')
+    monkeypatch.setattr(host_info, '_run', lambda *_args, **_kwargs: _IOREG_OUTPUT)
+
+    assert host_info.get_serial_number() == 'C02XY1234567'
+
+
+def test_linux_returns_none(monkeypatch: pytest.MonkeyPatch) -> None:
+    monkeypatch.setattr(host_info.platform, 'system', lambda: 'Linux')
+
+    assert host_info.get_serial_number() is None

From b3180292f54714cd9deb4b09ead472f4fe8ee038 Mon Sep 17 00:00:00 2001
From: "omer.roth" <omer.roth@cycode.com>
Date: Mon, 7 Sep 2026 07:40:21 +0300
Subject: [PATCH 2/5] CM-72131 formatting

---
 cycode/cli/utils/host_info.py | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/cycode/cli/utils/host_info.py b/cycode/cli/utils/host_info.py
index 18ea2e80..14cc2012 100644
--- a/cycode/cli/utils/host_info.py
+++ b/cycode/cli/utils/host_info.py
@@ -180,8 +180,7 @@ def _get_macos_serial_number() -> Optional[str]:
 
 
 def _get_windows_machine_guid() -> Optional[str]:
-    """Read the per-installation machine GUID from the registry.
-    """
+    """Read the per-installation machine GUID from the registry."""
     import winreg  # Windows-only stdlib module
 
     with winreg.OpenKey(

From ee53d4eb5951e049355c2e26ebac644dbd9b9285 Mon Sep 17 00:00:00 2001
From: "omer.roth" <omer.roth@cycode.com>
Date: Mon, 7 Sep 2026 08:30:50 +0300
Subject: [PATCH 3/5] CM-72131 returned wmi call with eager declaration

---
 cycode/cli/utils/host_info.py     |  48 ++++++++------
 poetry.lock                       |   2 +-
 pyinstaller.spec                  |   4 +-
 pyproject.toml                    |   1 +
 tests/cli/utils/test_host_info.py | 106 ++++++++++++++++++------------
 5 files changed, 96 insertions(+), 65 deletions(-)

diff --git a/cycode/cli/utils/host_info.py b/cycode/cli/utils/host_info.py
index 14cc2012..cff8ff58 100644
--- a/cycode/cli/utils/host_info.py
+++ b/cycode/cli/utils/host_info.py
@@ -4,16 +4,25 @@
 import re
 import socket
 import subprocess
+import sys
 import tempfile
-import uuid
 from pathlib import Path
-from typing import Optional
+from typing import Any, Optional
 
 from cycode.cli.consts import CYCODE_CONFIGURATION_DIRECTORY
 from cycode.logger import get_logger
 
 logger = get_logger('HOST INFO')
 
+pythoncom: Optional[Any] = None
+win32com_client: Optional[Any] = None
+if sys.platform == 'win32':
+    try:
+        import pythoncom
+        import win32com.client as win32com_client
+    except ImportError as e:
+        logger.debug('pywin32 is unavailable', exc_info=e)
+
 _SUBPROCESS_TIMEOUT_SEC = 5
 
 _DEVICE_ID_CACHE_FILE_NAME = 'device-id'
@@ -101,18 +110,13 @@ def get_last_login_user() -> Optional[str]:
 
 
 def get_serial_number() -> Optional[str]:
-    # The serial is immutable host info, but resolving it costs a syscall chain (ioreg/registry)
+    # The serial is immutable hardware info, but resolving it shells out (ioreg/WMI)
     # and this runs in a fresh process per AI hook event - cache it on disk.
     cached = _read_serial_number_cache()
     if cached:
         return cached
 
     serial = _resolve_serial_number()
-    if not serial and platform.system() == 'Windows':
-        # MachineGuid is missing only on stripped/preinstallation images. Mint our own stable id
-        # rather than reporting no device at all; the cache write below makes it persistent.
-        serial = str(uuid.uuid4())
-
     if serial:
         _write_serial_number_cache(serial)
     return serial
@@ -124,7 +128,7 @@ def _resolve_serial_number() -> Optional[str]:
         if system == 'Darwin':
             return _get_macos_serial_number()
         if system == 'Windows':
-            return _get_windows_machine_guid()
+            return _get_windows_serial_number()
     except Exception as e:
         logger.debug('Failed to resolve serial number', exc_info=e)
     return None
@@ -179,16 +183,18 @@ def _get_macos_serial_number() -> Optional[str]:
     return match.group(1) if match else None
 
 
-def _get_windows_machine_guid() -> Optional[str]:
-    """Read the per-installation machine GUID from the registry."""
-    import winreg  # Windows-only stdlib module
-
-    with winreg.OpenKey(
-        winreg.HKEY_LOCAL_MACHINE,
-        r'SOFTWARE\Microsoft\Cryptography',
-        0,
-        winreg.KEY_READ | winreg.KEY_WOW64_64KEY,
-    ) as key:
-        machine_guid, _ = winreg.QueryValueEx(key, 'MachineGuid')
+def _get_windows_serial_number() -> Optional[str]:
+    """Read the OEM serial over WMI."""
+    if pythoncom is None or win32com_client is None:
+        return None
 
-    return machine_guid.strip() if machine_guid else None
+    pythoncom.CoInitialize()
+    try:
+        wmi_service = win32com_client.GetObject('winmgmts:')
+        for bios in wmi_service.InstancesOf('Win32_BIOS'):
+            serial = bios.SerialNumber
+            # whitespace-only is what whiteboxes and some hypervisors report
+            return serial.strip() or None if serial else None
+    finally:
+        pythoncom.CoUninitialize()
+    return None
diff --git a/poetry.lock b/poetry.lock
index 455c9eb5..927d1b2f 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -2278,4 +2278,4 @@ type = ["pytest-mypy"]
 [metadata]
 lock-version = "2.1"
 python-versions = ">=3.9"
-content-hash = "29c8657164d291cce6b7f70b23ae4c69fb3eb153e6e7e45c0868b2aee246721d"
+content-hash = "6e4e2f5667418c910955f532c5243b795d3631d6e21b6cffcd9d4f900f595758"
diff --git a/pyinstaller.spec b/pyinstaller.spec
index 555c7c92..715b5763 100644
--- a/pyinstaller.spec
+++ b/pyinstaller.spec
@@ -8,6 +8,8 @@ import re
 import subprocess
 import sys
 
+_IS_WINDOWS = platform.system() == 'Windows'
+
 _INIT_FILE_PATH = os.path.join('cycode', '__init__.py')
 _CODESIGN_IDENTITY = os.environ.get('APPLE_CERT_NAME')
 _ONEDIR_MODE = os.environ.get('CYCODE_ONEDIR_MODE') is not None
@@ -48,8 +50,6 @@ _hiddenimports = [
 if sys.version_info >= (3, 10):
     _hiddenimports += ['truststore', 'truststore._windows', 'truststore._macos', 'truststore._openssl']
 
-_IS_WINDOWS = platform.system() == 'Windows'
-
 
 def _build_windows_version_info(version: str):
     """Windows-only VERSIONINFO resource."""
diff --git a/pyproject.toml b/pyproject.toml
index 2fbb0f36..7cc92481 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -50,6 +50,7 @@ typer = "^0.15.3"
 tenacity = ">=9.1.2,<9.2.0"
 mcp = { version = ">=1.28.1,<2.0.0", markers = "python_version >= '3.10'" }
 truststore = { version = ">=0.10.4,<0.11.0", markers = "python_version >= '3.10'" }
+pywin32 = { version = ">=312,<313", markers = "python_version >= '3.10' and sys_platform == 'win32'"}
 pydantic = ">=2.11.5,<3.0.0"
 pathvalidate = ">=3.3.1,<4.0.0"
 tomli-w = ">=1.0.0,<2.0.0"
diff --git a/tests/cli/utils/test_host_info.py b/tests/cli/utils/test_host_info.py
index e1f26ac7..3dd1ff0d 100644
--- a/tests/cli/utils/test_host_info.py
+++ b/tests/cli/utils/test_host_info.py
@@ -1,13 +1,12 @@
-import sys
-import types
 from pathlib import Path
+from types import SimpleNamespace
 from typing import Optional
 
 import pytest
 
 from cycode.cli.utils import host_info
 
-_MACHINE_GUID = 'e0e8e0a1-2222-4c3f-9d4a-000000000001'
+_SERIAL = 'C02XY1234567'
 _IOREG_OUTPUT = """
   +-o Root  <class IORegistryEntry, id 1, retain 42>
       "IOPlatformSerialNumber" = "C02XY1234567"
@@ -20,33 +19,44 @@ def _home_in_tmp(tmp_path: Path, monkeypatch: pytest.MonkeyPatch) -> Path:
     return tmp_path
 
 
-def _fake_winreg(machine_guid: Optional[str] = _MACHINE_GUID) -> types.ModuleType:
-    module = types.ModuleType('winreg')
-    module.HKEY_LOCAL_MACHINE = 0
-    module.KEY_READ = 0x20019
-    module.KEY_WOW64_64KEY = 0x0100
+class _ComCalls:
+    def __init__(self) -> None:
+        self.initialized = 0
+        self.uninitialized = 0
 
-    class _Key:
-        def __enter__(self) -> '_Key':  # noqa: PYI034
-            return self
 
-        def __exit__(self, *_args: object) -> None:
-            return None
+def _install_fake_pywin32(
+    monkeypatch: pytest.MonkeyPatch,
+    serial: Optional[str] = _SERIAL,
+    get_object_error: Optional[Exception] = None,
+) -> _ComCalls:
+    calls = _ComCalls()
 
-    def open_key(_hive: int, sub_key: str, _reserved: int, access: int) -> _Key:
-        assert sub_key == r'SOFTWARE\Microsoft\Cryptography'
-        assert access & module.KEY_WOW64_64KEY  # must read the 64-bit view, not WOW6432Node
-        return _Key()
+    pythoncom = SimpleNamespace(
+        CoInitialize=lambda: setattr(calls, 'initialized', calls.initialized + 1),
+        CoUninitialize=lambda: setattr(calls, 'uninitialized', calls.uninitialized + 1),
+    )
 
-    def query_value_ex(_key: '_Key', name: str) -> tuple:
-        assert name == 'MachineGuid'
-        if machine_guid is None:
-            raise FileNotFoundError(name)
-        return machine_guid, 1
+    class _Bios:
+        SerialNumber = serial
 
-    module.OpenKey = open_key
-    module.QueryValueEx = query_value_ex
-    return module
+    class _WmiService:
+        def InstancesOf(self, class_name: str) -> list:  # noqa: N802 - mirrors the COM API
+            assert class_name == 'Win32_BIOS'
+            return [_Bios()]
+
+    def get_object(moniker: str) -> _WmiService:
+        assert moniker == 'winmgmts:'
+        if get_object_error is not None:
+            raise get_object_error
+        return _WmiService()
+
+    win32com_client = SimpleNamespace(GetObject=get_object)
+
+    # host_info imports pywin32 at module level (guarded by sys.platform), so patch the bound names
+    monkeypatch.setattr(host_info, 'pythoncom', pythoncom, raising=False)
+    monkeypatch.setattr(host_info, 'win32com_client', win32com_client, raising=False)
+    return calls
 
 
 @pytest.fixture
@@ -55,8 +65,7 @@ def _windows(monkeypatch: pytest.MonkeyPatch) -> None:
 
 
 def test_cache_path_is_under_cycode_home_and_not_temp(tmp_path: Path) -> None:
-    cache_path = host_info._serial_number_cache_path()
-    assert cache_path == tmp_path / '.cycode' / 'device-id'
+    assert host_info._serial_number_cache_path() == tmp_path / '.cycode' / 'device-id'
 
 
 def test_cached_value_short_circuits_resolution(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None:
@@ -73,22 +82,37 @@ def _fail() -> str:
 
 
 @pytest.mark.usefixtures('_windows')
-def test_windows_reads_machine_guid_and_caches_it(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None:
-    monkeypatch.setitem(sys.modules, 'winreg', _fake_winreg())
+def test_windows_reads_bios_serial_over_wmi_and_caches_it(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None:
+    calls = _install_fake_pywin32(monkeypatch)
 
-    assert host_info.get_serial_number() == _MACHINE_GUID
-    assert (tmp_path / '.cycode' / 'device-id').read_text(encoding='utf-8') == _MACHINE_GUID
+    assert host_info.get_serial_number() == _SERIAL
+    assert (tmp_path / '.cycode' / 'device-id').read_text(encoding='utf-8') == _SERIAL
+    assert (calls.initialized, calls.uninitialized) == (1, 1)
 
 
 @pytest.mark.usefixtures('_windows')
-def test_windows_falls_back_to_generated_uuid_and_reuses_it(monkeypatch: pytest.MonkeyPatch) -> None:
-    monkeypatch.setitem(sys.modules, 'winreg', _fake_winreg(machine_guid=None))
+def test_windows_uninitializes_com_when_wmi_fails(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None:
+    calls = _install_fake_pywin32(monkeypatch, get_object_error=OSError('WMI is unavailable'))
 
-    first = host_info.get_serial_number()
-    second = host_info.get_serial_number()
+    assert host_info.get_serial_number() is None
+    assert (calls.initialized, calls.uninitialized) == (1, 1)
+    assert not (tmp_path / '.cycode' / 'device-id').exists()
+
+
+@pytest.mark.usefixtures('_windows')
+def test_windows_blank_serial_is_none_and_not_cached(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None:
+    _install_fake_pywin32(monkeypatch, serial='   ')
 
-    assert first is not None
-    assert first == second  # persisted, so the id is stable across processes
+    assert host_info.get_serial_number() is None
+    assert not (tmp_path / '.cycode' / 'device-id').exists()
+
+
+@pytest.mark.usefixtures('_windows')
+def test_windows_without_pywin32_returns_none(monkeypatch: pytest.MonkeyPatch) -> None:
+    monkeypatch.setattr(host_info, 'pythoncom', None, raising=False)
+    monkeypatch.setattr(host_info, 'win32com_client', None, raising=False)
+
+    assert host_info.get_serial_number() is None
 
 
 @pytest.mark.usefixtures('_windows')
@@ -98,11 +122,11 @@ def test_windows_write_removes_legacy_temp_cache(monkeypatch: pytest.MonkeyPatch
     monkeypatch.setattr(host_info.tempfile, 'gettempdir', lambda: str(legacy_dir))
     monkeypatch.setattr(host_info.getpass, 'getuser', lambda: 'tester')
     legacy_path = legacy_dir / '.cycode-device-serial-tester'
-    legacy_path.write_text('OLD-BIOS-SERIAL', encoding='utf-8')
+    legacy_path.write_text('OLD-CACHED-SERIAL', encoding='utf-8')
 
-    monkeypatch.setitem(sys.modules, 'winreg', _fake_winreg())
+    _install_fake_pywin32(monkeypatch)
 
-    assert host_info.get_serial_number() == _MACHINE_GUID
+    assert host_info.get_serial_number() == _SERIAL
     assert not legacy_path.exists()
 
 
@@ -110,7 +134,7 @@ def test_macos_serial_number_is_parsed_from_ioreg(monkeypatch: pytest.MonkeyPatc
     monkeypatch.setattr(host_info.platform, 'system', lambda: 'Darwin')
     monkeypatch.setattr(host_info, '_run', lambda *_args, **_kwargs: _IOREG_OUTPUT)
 
-    assert host_info.get_serial_number() == 'C02XY1234567'
+    assert host_info.get_serial_number() == _SERIAL
 
 
 def test_linux_returns_none(monkeypatch: pytest.MonkeyPatch) -> None:

From 0f9b23672c4691b7adb8ae6d2f93365ef4277222 Mon Sep 17 00:00:00 2001
From: "omer.roth" <omer.roth@cycode.com>
Date: Mon, 7 Sep 2026 09:47:20 +0300
Subject: [PATCH 4/5] CM-72131 temp revert of cached dir location

---
 cycode/cli/utils/host_info.py     | 29 ++++++++---------------
 tests/cli/utils/test_host_info.py | 38 +++++++++++--------------------
 2 files changed, 23 insertions(+), 44 deletions(-)

diff --git a/cycode/cli/utils/host_info.py b/cycode/cli/utils/host_info.py
index cff8ff58..2b5c6f80 100644
--- a/cycode/cli/utils/host_info.py
+++ b/cycode/cli/utils/host_info.py
@@ -9,7 +9,6 @@
 from pathlib import Path
 from typing import Any, Optional
 
-from cycode.cli.consts import CYCODE_CONFIGURATION_DIRECTORY
 from cycode.logger import get_logger
 
 logger = get_logger('HOST INFO')
@@ -25,8 +24,7 @@
 
 _SUBPROCESS_TIMEOUT_SEC = 5
 
-_DEVICE_ID_CACHE_FILE_NAME = 'device-id'
-_LEGACY_SERIAL_NUMBER_CACHE_FILE_NAME = '.cycode-device-serial'
+_SERIAL_NUMBER_CACHE_FILE_NAME = '.cycode-device-serial'
 
 _PLATFORM_NAMES = {'Darwin': 'macOS', 'Windows': 'Windows', 'Linux': 'Linux'}
 
@@ -135,15 +133,8 @@ def _resolve_serial_number() -> Optional[str]:
 
 
 def _serial_number_cache_path() -> Path:
-    return Path.home() / CYCODE_CONFIGURATION_DIRECTORY / _DEVICE_ID_CACHE_FILE_NAME
-
-
-def _remove_legacy_serial_number_cache() -> None:
-    try:
-        legacy_path = Path(tempfile.gettempdir()) / f'{_LEGACY_SERIAL_NUMBER_CACHE_FILE_NAME}-{getpass.getuser()}'
-        legacy_path.unlink(missing_ok=True)
-    except Exception as e:
-        logger.debug('Failed to remove legacy serial number cache', exc_info=e)
+    # The username suffix avoids collisions on OSes with a shared temp dir
+    return Path(tempfile.gettempdir()) / f'{_SERIAL_NUMBER_CACHE_FILE_NAME}-{getpass.getuser()}'
 
 
 def _read_serial_number_cache() -> Optional[str]:
@@ -156,18 +147,18 @@ def _read_serial_number_cache() -> Optional[str]:
 def _write_serial_number_cache(serial: str) -> None:
     try:
         cache_path = _serial_number_cache_path()
-        cache_path.parent.mkdir(parents=True, exist_ok=True)
 
-        # The serial identifies the machine, so the cache is created readable by its owner alone
-        # (what mkstemp does) and moved into place atomically - a hook racing another one never
-        # reads a half-written cache, and the rename can't be redirected by a symlink planted at
-        # the destination the way an in-place write could.
-        file_descriptor, temp_path = tempfile.mkstemp(dir=cache_path.parent, prefix=f'{_DEVICE_ID_CACHE_FILE_NAME}.')
+        # The serial identifies the machine, and the temp dir is shared, so the cache is created
+        # readable by its owner alone (what mkstemp does) and moved into place atomically - a hook
+        # racing another one never reads a half-written cache, and the rename can't be redirected
+        # by a symlink planted at the destination the way an in-place write could.
+        file_descriptor, temp_path = tempfile.mkstemp(
+            dir=cache_path.parent, prefix=f'{_SERIAL_NUMBER_CACHE_FILE_NAME}.'
+        )
         try:
             with os.fdopen(file_descriptor, 'w', encoding='utf-8') as temp_file:
                 temp_file.write(serial)
             os.replace(temp_path, cache_path)
-            _remove_legacy_serial_number_cache()
         except Exception:
             Path(temp_path).unlink(missing_ok=True)
             raise
diff --git a/tests/cli/utils/test_host_info.py b/tests/cli/utils/test_host_info.py
index 3dd1ff0d..579a1acf 100644
--- a/tests/cli/utils/test_host_info.py
+++ b/tests/cli/utils/test_host_info.py
@@ -14,11 +14,16 @@
 
 
 @pytest.fixture(autouse=True)
-def _home_in_tmp(tmp_path: Path, monkeypatch: pytest.MonkeyPatch) -> Path:
-    monkeypatch.setattr(Path, 'home', classmethod(lambda _cls: tmp_path))
+def _temp_dir(tmp_path: Path, monkeypatch: pytest.MonkeyPatch) -> Path:
+    monkeypatch.setattr(host_info.tempfile, 'gettempdir', lambda: str(tmp_path))
+    monkeypatch.setattr(host_info.getpass, 'getuser', lambda: 'tester')
     return tmp_path
 
 
+def _cache_path(tmp_path: Path) -> Path:
+    return tmp_path / '.cycode-device-serial-tester'
+
+
 class _ComCalls:
     def __init__(self) -> None:
         self.initialized = 0
@@ -64,14 +69,12 @@ def _windows(monkeypatch: pytest.MonkeyPatch) -> None:
     monkeypatch.setattr(host_info.platform, 'system', lambda: 'Windows')
 
 
-def test_cache_path_is_under_cycode_home_and_not_temp(tmp_path: Path) -> None:
-    assert host_info._serial_number_cache_path() == tmp_path / '.cycode' / 'device-id'
+def test_cache_path_is_per_user_in_the_temp_dir(tmp_path: Path) -> None:
+    assert host_info._serial_number_cache_path() == _cache_path(tmp_path)
 
 
 def test_cached_value_short_circuits_resolution(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None:
-    cache_path = tmp_path / '.cycode' / 'device-id'
-    cache_path.parent.mkdir(parents=True)
-    cache_path.write_text('CACHED-ID', encoding='utf-8')
+    _cache_path(tmp_path).write_text('CACHED-ID', encoding='utf-8')
 
     def _fail() -> str:
         raise AssertionError('must not resolve when the cache is warm')
@@ -86,7 +89,7 @@ def test_windows_reads_bios_serial_over_wmi_and_caches_it(monkeypatch: pytest.Mo
     calls = _install_fake_pywin32(monkeypatch)
 
     assert host_info.get_serial_number() == _SERIAL
-    assert (tmp_path / '.cycode' / 'device-id').read_text(encoding='utf-8') == _SERIAL
+    assert _cache_path(tmp_path).read_text(encoding='utf-8') == _SERIAL
     assert (calls.initialized, calls.uninitialized) == (1, 1)
 
 
@@ -96,7 +99,7 @@ def test_windows_uninitializes_com_when_wmi_fails(monkeypatch: pytest.MonkeyPatc
 
     assert host_info.get_serial_number() is None
     assert (calls.initialized, calls.uninitialized) == (1, 1)
-    assert not (tmp_path / '.cycode' / 'device-id').exists()
+    assert not _cache_path(tmp_path).exists()
 
 
 @pytest.mark.usefixtures('_windows')
@@ -104,7 +107,7 @@ def test_windows_blank_serial_is_none_and_not_cached(monkeypatch: pytest.MonkeyP
     _install_fake_pywin32(monkeypatch, serial='   ')
 
     assert host_info.get_serial_number() is None
-    assert not (tmp_path / '.cycode' / 'device-id').exists()
+    assert not _cache_path(tmp_path).exists()
 
 
 @pytest.mark.usefixtures('_windows')
@@ -115,21 +118,6 @@ def test_windows_without_pywin32_returns_none(monkeypatch: pytest.MonkeyPatch) -
     assert host_info.get_serial_number() is None
 
 
-@pytest.mark.usefixtures('_windows')
-def test_windows_write_removes_legacy_temp_cache(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None:
-    legacy_dir = tmp_path / 'temp'
-    legacy_dir.mkdir()
-    monkeypatch.setattr(host_info.tempfile, 'gettempdir', lambda: str(legacy_dir))
-    monkeypatch.setattr(host_info.getpass, 'getuser', lambda: 'tester')
-    legacy_path = legacy_dir / '.cycode-device-serial-tester'
-    legacy_path.write_text('OLD-CACHED-SERIAL', encoding='utf-8')
-
-    _install_fake_pywin32(monkeypatch)
-
-    assert host_info.get_serial_number() == _SERIAL
-    assert not legacy_path.exists()
-
-
 def test_macos_serial_number_is_parsed_from_ioreg(monkeypatch: pytest.MonkeyPatch) -> None:
     monkeypatch.setattr(host_info.platform, 'system', lambda: 'Darwin')
     monkeypatch.setattr(host_info, '_run', lambda *_args, **_kwargs: _IOREG_OUTPUT)

From 733566604bdac90ce9ddf1c04755297de4663272 Mon Sep 17 00:00:00 2001
From: "omer.roth" <omer.roth@cycode.com>
Date: Mon, 7 Sep 2026 10:19:24 +0300
Subject: [PATCH 5/5] CM-72131 returned the change of cache dir location

---
 cycode/cli/utils/host_info.py     | 19 +++++++++----------
 tests/cli/utils/test_host_info.py | 10 +++++-----
 2 files changed, 14 insertions(+), 15 deletions(-)

diff --git a/cycode/cli/utils/host_info.py b/cycode/cli/utils/host_info.py
index 2b5c6f80..064f7823 100644
--- a/cycode/cli/utils/host_info.py
+++ b/cycode/cli/utils/host_info.py
@@ -9,6 +9,7 @@
 from pathlib import Path
 from typing import Any, Optional
 
+from cycode.cli.consts import CYCODE_CONFIGURATION_DIRECTORY
 from cycode.logger import get_logger
 
 logger = get_logger('HOST INFO')
@@ -24,7 +25,7 @@
 
 _SUBPROCESS_TIMEOUT_SEC = 5
 
-_SERIAL_NUMBER_CACHE_FILE_NAME = '.cycode-device-serial'
+_DEVICE_ID_CACHE_FILE_NAME = 'device-id'
 
 _PLATFORM_NAMES = {'Darwin': 'macOS', 'Windows': 'Windows', 'Linux': 'Linux'}
 
@@ -133,8 +134,7 @@ def _resolve_serial_number() -> Optional[str]:
 
 
 def _serial_number_cache_path() -> Path:
-    # The username suffix avoids collisions on OSes with a shared temp dir
-    return Path(tempfile.gettempdir()) / f'{_SERIAL_NUMBER_CACHE_FILE_NAME}-{getpass.getuser()}'
+    return Path.home() / CYCODE_CONFIGURATION_DIRECTORY / _DEVICE_ID_CACHE_FILE_NAME
 
 
 def _read_serial_number_cache() -> Optional[str]:
@@ -147,14 +147,13 @@ def _read_serial_number_cache() -> Optional[str]:
 def _write_serial_number_cache(serial: str) -> None:
     try:
         cache_path = _serial_number_cache_path()
+        cache_path.parent.mkdir(parents=True, exist_ok=True)
 
-        # The serial identifies the machine, and the temp dir is shared, so the cache is created
-        # readable by its owner alone (what mkstemp does) and moved into place atomically - a hook
-        # racing another one never reads a half-written cache, and the rename can't be redirected
-        # by a symlink planted at the destination the way an in-place write could.
-        file_descriptor, temp_path = tempfile.mkstemp(
-            dir=cache_path.parent, prefix=f'{_SERIAL_NUMBER_CACHE_FILE_NAME}.'
-        )
+        # The serial identifies the machine, so the cache is created readable by its owner alone
+        # (what mkstemp does) and moved into place atomically - a hook racing another one never
+        # reads a half-written cache, and the rename can't be redirected by a symlink planted at
+        # the destination the way an in-place write could.
+        file_descriptor, temp_path = tempfile.mkstemp(dir=cache_path.parent, prefix=f'{_DEVICE_ID_CACHE_FILE_NAME}.')
         try:
             with os.fdopen(file_descriptor, 'w', encoding='utf-8') as temp_file:
                 temp_file.write(serial)
diff --git a/tests/cli/utils/test_host_info.py b/tests/cli/utils/test_host_info.py
index 579a1acf..8d405517 100644
--- a/tests/cli/utils/test_host_info.py
+++ b/tests/cli/utils/test_host_info.py
@@ -14,14 +14,13 @@
 
 
 @pytest.fixture(autouse=True)
-def _temp_dir(tmp_path: Path, monkeypatch: pytest.MonkeyPatch) -> Path:
-    monkeypatch.setattr(host_info.tempfile, 'gettempdir', lambda: str(tmp_path))
-    monkeypatch.setattr(host_info.getpass, 'getuser', lambda: 'tester')
+def _home_in_tmp(tmp_path: Path, monkeypatch: pytest.MonkeyPatch) -> Path:
+    monkeypatch.setattr(Path, 'home', classmethod(lambda _cls: tmp_path))
     return tmp_path
 
 
 def _cache_path(tmp_path: Path) -> Path:
-    return tmp_path / '.cycode-device-serial-tester'
+    return tmp_path / '.cycode' / 'device-id'
 
 
 class _ComCalls:
@@ -69,11 +68,12 @@ def _windows(monkeypatch: pytest.MonkeyPatch) -> None:
     monkeypatch.setattr(host_info.platform, 'system', lambda: 'Windows')
 
 
-def test_cache_path_is_per_user_in_the_temp_dir(tmp_path: Path) -> None:
+def test_cache_path_is_under_the_cycode_home_dir(tmp_path: Path) -> None:
     assert host_info._serial_number_cache_path() == _cache_path(tmp_path)
 
 
 def test_cached_value_short_circuits_resolution(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None:
+    _cache_path(tmp_path).parent.mkdir(parents=True)
     _cache_path(tmp_path).write_text('CACHED-ID', encoding='utf-8')
 
     def _fail() -> str: