Sample_dce3acb25c – Adaware

Dynamic Analysis

Payload

Behaviour	Description
EmailWorm	Worm can send e-mails.

Process activity

The Trojan creates the following process(es):

MetroInstallerAPP.exe:3440
getnowupdater.exe:3184
GetNowUpdater.exe:3548
%original file name%.exe:2696
adb.exe:2952

The Trojan injects its code into the following process(es):

GetNowUpdater.exe:208

File activity

The process MetroInstallerAPP.exe:3440 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\dd.css (4 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\android-close-icon.png (359 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\view-icon.png (655 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\app-icon.png (2 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\Qt5Gui.dll (8092 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\Qt5Quick.dll (6986 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\accessible\qtaccessiblequick.dll (34 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\sqldrivers\qsqlpsql.dll (59 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\dd_arrow.gif (204 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\script.js (6 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\logo.png (7 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\Qt5WebKit.dll (42854 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\mediaservice\dsengine.dll (412 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\Qt5Sensors.dll (1353 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\favicon.ico (8 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\sensorgestures\qtsensorgestures_plugin.dll (61 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\icudt51.dll (58179 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\title-bg.gif (154 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\iconengines\qsvgicon.dll (33 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\desktop_notifications.html (1 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\download_notifications.html (841 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\imageformats\qico.dll (27 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\platforms\qwindows.dll (8204 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\download_notifications.css (2 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\sqldrivers\qsqlodbc.dll (305 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\sensors\qtsensors_generic.dll (32 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\magnifier.png (642 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\Qt5OpenGL.dll (1839 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\ES.png (410 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\bearer\qnativewifibearer.dll (45 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\mediaservice\qtmedia_audioengine.dll (1925 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\mobile-icon.png (426 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\close-icon.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\adbF\adb.exe (2852 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\designer\qdeclarativeview.dll (23 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\notification_warning.png (3 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\imageformats\qsvg.dll (1927 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\designer\qwebview.dll (24 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\imageformats\qmng.dll (1888 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\desktop_notifications.js (538 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\download_notifications.js (256 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\imageformats\qgif.dll (234 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\sensorgestures\qtsensorgestures_shakeplugin.dll (1753 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\playlistformats\qtmultimedia_m3u.dll (24 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\msvcr100.dll (2977 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\sensors\qtsensors_dummy.dll (22 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\generic_icon.png (887 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\sqldrivers\qsqlite.dll (5317 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\select-arrow.png (214 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\Qt5MultimediaWidgets.dll (38 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\Qt5WebKitWidgets.dll (1391 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\Qt5Network.dll (272 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\IT.png (123 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\style.css (19 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RarSFX0\MetroConfig.json (6 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\icuin51.dll (7788 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\libGLESv2.dll (2496 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\mainScripts.js (7 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\qml1tooling\qmldbg_inspector.dll (84 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\qmltooling\qmldbg_qtquick2.dll (514 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\reload-icon.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\DE.png (117 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\adbF\AdbWinApi.dll (1259 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\icuuc51.dll (4396 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\settings-icon.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\libEGL.dll (26 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\msvcp100.dll (2486 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\FR.png (123 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\designer\qaxwidget.dll (2290 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\imageformats\qtga.dll (22 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\GetNowUpdater.exe (30543 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\android-app-icon.png (5 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\desktop_notifications.css (3 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\filenotfound.html (452 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\imageformats\qtiff.dll (3195 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\inst\Bootstrapper\GetnowConfig.JSON (6 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\printsupport\windowsprintersupport.dll (21 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\imageformats\qjpeg.dll (2260 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\qml1tooling\qmldbg_tcp_qtdeclarative.dll (21 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\platforms\qminimal.dll (28 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\newstyles.css (1 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\Qt5Widgets.dll (15058 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\jquery-1.10.2.min.js (93 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\update-icon.png (502 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\Qt5V8.dll (7192 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\minimize-icon.png (949 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\PT.png (605 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\inst\Bootstrapper\uninstall.exe (7433 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\Qt5Qml.dll (3147 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\ranch-icon.png (401 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\android_notifications.css (3 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\store.html (10 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\notifScripts.js (3 bytes)
%Documents and Settings%\%current user%\Desktop\GetNowUpdater.lnk (960 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\EN.png (156 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\Qt5Multimedia.dll (2516 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\qmltooling\qmldbg_tcp.dll (30 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\inst\main.ico (49 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\Qt5Core.dll (13087 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\imageformats\qwbmp.dll (21 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\CrashSender1402.exe (4952 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\dbghelp.dll (3385 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\img\info-icon.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\android_notifications.js (538 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\android_notifications.html (1 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\adbF\AdbWinUsbApi.dll (60 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\Qt5Concurrent.dll (24 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\adbF\driver\readme.txt (2 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\Qt5Sql.dll (81 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\updater.html (10 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\platforms\qoffscreen.dll (5703 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\jquery.dd.min.js (20 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\mediaservice\wmfengine.dll (1436 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\accessible\qtaccessiblewidgets.dll (707 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\plugins\bearer\qgenericbearer.dll (42 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\Qt5PrintSupport.dll (1600 bytes)

The process getnowupdater.exe:3184 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\RarSFX0\MetroInstallPack.MIP (171972 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RarSFX0\MetroInstallerAPP.exe (11405 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\RarSFX0\MetroConfig.json (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RarSFX0\MetroInstallPack.MIP (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RarSFX0\__tmp_rar_sfx_access_check_902734 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RarSFX0\MetroInstallerAPP.exe (0 bytes)

The process GetNowUpdater.exe:208 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\androidMapping.txt (2 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\getnowupdater.ini (474 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\CrashRpt\LangFile\crashrpt_lang.ini (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\1GGYBZUQ\AdbDriverInstaller[1].exe (18449 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RarSFX0\debug_bios.txt (732 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\adbF\driver\AdbDriverInstaller.exe (12296 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\remoteSoft.zip (61401 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\html_res\setup.exe (3780 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\getnowupdater.ini.AaE208 (0 bytes)
%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\androidMapping.txt (0 bytes)

The process %original file name%.exe:2696 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Cookies\L29LLPO9.txt (341 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\1GGYBZUQ\main[1] (15136 bytes)
%Documents and Settings%\%current user%\Cookies\CTCWJJZ8.txt (133 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\ga[1].js (21968 bytes)
%Documents and Settings%\%current user%\Cookies\HK3GE11V.txt (639 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\geoloc_iminent_com[1] (61 bytes)
%Documents and Settings%\%current user%\Cookies\7UAC0982.txt (639 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\getnowupdater[1].exe (2572234 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\128x128[1].gif (450 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\1GGYBZUQ\jquery.min[1].js (60016 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\MSHist012014051820140519\index.dat (16 bytes)
%Documents and Settings%\%current user%\Cookies\69W8E2WU.txt (639 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\logo_GetNowUpdater[1].png (578 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\main[1].txt (888 bytes)
%Documents and Settings%\%current user%\Cookies\LNQKD9FI.txt (639 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\RaiseInstallEventMethod[1] (155 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\setup[1].txt (871 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\1GGYBZUQ\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\desktop.ini (67 bytes)
%Program Files%\GetNowUpdater\inst\Bootstrapper\GetNowUpdaterUninstall.exe (5873 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\install[1] (495 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\GetNowUpdater\getnowupdater.exe (1244219 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT (4 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\History\History.IE5\MSHist012013041520130416\index.dat (0 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\MSHist012013040820130415 (0 bytes)
%Documents and Settings%\%current user%\Cookies\L29LLPO9.txt (0 bytes)
%Documents and Settings%\%current user%\Cookies\CTCWJJZ8.txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\MSHist012013041520130416 (0 bytes)
%Documents and Settings%\%current user%\Cookies\69W8E2WU.txt (0 bytes)
%Documents and Settings%\%current user%\Cookies\HK3GE11V.txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\MSHist012013040820130415\index.dat (0 bytes)
%Documents and Settings%\%current user%\Cookies\7UAC0982.txt (0 bytes)

Registry activity

The process MetroInstallerAPP.exe:3440 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fdd9f6f3-7454-11e2-b4cd-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"
"Startup" = "%Documents and Settings%\%current user%\Start Menu\Programs\Startup"
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GetnowUpdater]
"NoRepair" = "1"
"DisplayVersion" = "1.18.2.3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"
"CommonMusic" = "%Documents and Settings%\All Users\Documents\My Music"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GetnowUpdater]
"Publisher" = "AppScion"
"DisplayName" = "GetnowUpdater"
"HelpLink" = "http://www.iminent.com/aide/"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"My Pictures" = "%Documents and Settings%\%current user%\My Documents\My Pictures"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fdd9f6f2-7454-11e2-b4cd-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GetnowUpdater]
"InstallLocation" = "%Documents and Settings%\%current user%\Application Data\GetNowUpdater"
"NoModify" = "1"
"UserSettings" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GetnowUpdater]
"DisplayIcon" = "%Documents and Settings%\%current user%\Application Data\GetNowUpdater\inst\main.ico"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GetnowUpdater\{1A276A04-F46C-454C-8DAD-0E534BBDD82B}]
"UninstallString" = "%Documents and Settings%\%current user%\Application Data\GetNowUpdater\inst\Bootstrapper\uninstall.exe /UNINSTALL /JSNCONFIG=%Documents and Settings%\%current user%\Application Data\GetNowUpdater\inst\Bootstrapper\GetnowConfig.json"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonVideo" = "%Documents and Settings%\All Users\Documents\My Videos"
"CommonPictures" = "%Documents and Settings%\All Users\Documents\My Pictures"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "F9 6B 3A FE 49 B3 25 AE 50 49 C2 11 CE 34 37 59"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Programs" = "%Documents and Settings%\All Users\Start Menu\Programs"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{773a730e-74fb-11e2-b597-000c293bdf2f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GetnowUpdater]
"ProductCode" = "{1A276A04-F46C-454C-8DAD-0E534BBDD82B}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fdd9f6f5-7454-11e2-b4cd-806d6172696f}]
"BaseClass" = "Drive"

The process getnowupdater.exe:3184 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "5B 0B 41 1E B6 63 8A E1 B2 74 5F DD 10 EE DC F7"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fdd9f6f3-7454-11e2-b4cd-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{773a730e-74fb-11e2-b597-000c293bdf2f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\RarSFX0]
"MetroInstallerAPP.exe" = "Iminent Protection"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fdd9f6f2-7454-11e2-b4cd-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fdd9f6f5-7454-11e2-b4cd-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
"Personal" = "%Documents and Settings%\%current user%\My Documents"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass" = "1"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

"IntranetName" = "1"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

"UNCAsIntranet" = "1"

The process GetNowUpdater.exe:208 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy\traceIdentifier]
"Guid" = "5f31090b-d990-4e91-b16d-46121d0255aa"

[HKCU\Software\AppscionUpdater]
"PreviousVers" = "1.0.1.1"
"AndroidT" = "1970-01-01T00:00:00"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\CtlGuid]
"Guid" = "d905ac1c-65e7-4242-99ea-fe66a8355df8"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WLanDiagCtlGuid]
"BitNames" = " WLANHC_AUTOCONFIG WLANHC_RNWFMSM WLANHC_FATMSM WLANHC_DLLMAIN WLANHC_TEST"

[HKCU\Software\AppscionUpdater]
"DesktopT" = "1970-01-01T00:00:00"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\ServiceCtlGuid]
"BitNames" = " DOT11_AUTOCONF DOT11_AUTOCONF_CLIENT DOT11_AUTOCONF_UI DOT11_FATMSM DOT11_COMMON DOT11_WLANGPA DOT11_CLASS_COINSTALLER"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\DiagL2SecCtlGuid]
"Guid" = "2e8d9ec5-a712-48c4-8ce0-631eb0c1cd65"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"EventMessageFile" = "%System%\ESENT.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 43 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"CategoryCount" = "16"

[HKLM\SOFTWARE\Microsoft\ESENT\Process\GetNowUpdater\DEBUG]
"Trace Level" = ""

[HKCU\Software\AppscionUpdater]
"LaunchID" = "cohort[201421]_"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"LogSessionName" = "stdout"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKCU\Software\AppscionUpdater]
"AnonymousUUID" = "1d9e92b1-7949-4f79-893d-e527c8a29151"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKCU\Software\AppscionUpdater]
"LaunchWeek" = "cohort[201421]_"
"Locale" = "en_EN"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\ServiceCtlGuid]
"Guid" = "0c5a3172-2248-44fd-b9a6-8389cb1dc56a"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\CtlGuid]
"BitNames" = " DOT11_ASSOCIATE DOT11_ROAMING DOT11_1X DOT11_PNP DOT11_SCAN DOT11_RECEIVE DOT11_SEND DOT11_IOCTL DOT11_OID DOT11_MISC DOT11_UPCALL DOT11_KEYMGR DOT11_PEER DOT11_SOFTAP DOT11_PAM DOT11_REPEATER DOT11_APROUTER DOT11_WME DOT11_CONFIG DOT11_MSM DOT11_MSM_ADAPT DOT11_MSM_SCAN DOT11_MSM_CONNECT DOT11_MSM_SECURITY_PKT DOT11_NOTIFY_OBJECT"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\AppscionUpdater]
"LaunchCount" = "1"
"ClientNumber" = "495"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"Active" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg]
"ControlFlags" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing]
"LogSessionName" = "stdout"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg]
"LogSessionName" = "stdout"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\DiagL2SecCtlGuid]
"BitNames" = " SECHC_LOG_FLAG_ASSERT SECHC_LOG_FLAG_INIT SECHC_LOG_FLAG_DIAG SECHC_LOG_FLAG_ONEX_DIAG SECHC_LOG_FLAG_REPAIR SECHC_LOG_FLAG_STATE SECHC_LOG_FLAG_EXT SECHC_LOG_FLAG_EVENT_LOG SECHC_LOG_FLAG_FUNCTION SECHC_LOG_FLAG_MEMORY SECHC_LOG_FLAG_LOCKS"

[HKCU\Software\AppscionUpdater]
"rootPath" = "%Documents and Settings%\%current user%\Application Data\GetNowUpdater\"

[HKCU\Software\Microsoft\Direct3D\MostRecentApplication]
"Name" = "GetNowUpdater.exe"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy]
"Active" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy]
"LogSessionName" = "stdout"

[HKCU\Software\AppscionUpdater]
"LaunchDate" = "2014-5-18"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing]
"Active" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg\traceIdentifier]
"Guid" = "5f31090b-d990-4e91-b16d-46121d0255aa"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"TypesSupported" = "7"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "27 26 50 98 AE CC 4C 63 E2 A7 02 E9 66 7D E4 A8"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil\traceIdentifier]
"Guid" = "8aefce96-4618-42ff-a057-3536aa78233e"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"CategoryMessageFile" = "%System%\ESENT.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy]
"ControlFlags" = "1"

[HKCU\Software\AppscionUpdater]
"AutoUpdateT" = "1970-01-01T00:00:00"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WDiagCoreCtlGuid]
"BitNames" = " WD_LOG_FLAG_INIT WD_LOG_FLAG_RPC WD_LOG_FLAG_EVENT WD_LOG_FLAG_INTERFACE WD_LOG_FLAG_CONNECTION WD_LOG_FLAG_CONTROL WD_LOG_FLAG_LOCKS WD_LOG_FLAG_MEMORY WD_LOG_FLAG_REFERENCES WD_LOG_FLAG_FUNCTION_TRACE WD_LOG_FLAG_ASSERT"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing]
"ControlFlags" = "1"

[HKCU\Software\AppscionUpdater]
"AndroidStats" = "-1,-1,-1,-1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg]
"Active" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"ControlFlags" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WLanDiagCtlGuid]
"Guid" = "6da4ddca-0901-4bae-9ad4-7e6030bab531"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WDiagCoreCtlGuid]
"Guid" = "637a0f36-dff5-4b2f-83dd-b106c1c725e2"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass" = "1"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

"IntranetName" = "1"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GetNowUpdater" = "%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin\GetNowUpdater.exe /silent_startup"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKCU\Software\AppscionUpdater]
"MigrateVOld"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\AppscionUpdater]
"MigrateVNew"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKLM\SOFTWARE\Microsoft\ESENT\Process\GetNowUpdater\DEBUG]
"Trace Level"

The process GetNowUpdater.exe:3548 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "FB 61 88 8A D7 1F D7 EA 39 08 97 E7 8E DF C6 29"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fdd9f6f3-7454-11e2-b4cd-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Direct3D\MostRecentApplication]
"Name" = "GetNowUpdater.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{773a730e-74fb-11e2-b597-000c293bdf2f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Documents and Settings%\%current user%\Application Data\GetNowUpdater\bin]
"GetNowUpdater.exe" = "Updater"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fdd9f6f2-7454-11e2-b4cd-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fdd9f6f5-7454-11e2-b4cd-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
"Personal" = "%Documents and Settings%\%current user%\My Documents"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass" = "1"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

"IntranetName" = "1"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

"UNCAsIntranet" = "1"

The process %original file name%.exe:2696 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012014051820140519]
"CachePrefix" = ":2014051820140519:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fdd9f6f3-7454-11e2-b4cd-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GetnowUpdater]
"UninstallString" = "%Program Files%\GetNowUpdater\inst\Bootstrapper\GetNowUpdaterUninstall.exe /uninstall"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\GetNowUpdater]
"AppInstanceUid" = "E906CE83-3F8F-49F1-8E12-5A8BEC1CF8D9"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012014051820140519]
"CachePath" = "%USERPROFILE%\Local Settings\History\History.IE5\MSHist012014051820140519"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012014051820140519]
"CacheOptions" = "11"

[HKCU\Software\GetNowUpdater]
"TempAppInstanceUid" = "E906CE83-3F8F-49F1-8E12-5A8BEC1CF8D9"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GetnowUpdater]
"UninstallStringOld" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fdd9f6f2-7454-11e2-b4cd-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012014051820140519]
"CacheLimit" = "8192"

[HKCU\Software\Microsoft\Internet Explorer\Main\WindowsSearch]
"Version" = "WS not installed"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 41 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "A9 26 14 F0 34 AB E2 1F 64 AB 67 24 50 D0 91 D3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{773a730e-74fb-11e2-b597-000c293bdf2f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fdd9f6f5-7454-11e2-b4cd-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Favorites" = "%Documents and Settings%\%current user%\Favorites"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012014051820140519]
"CacheRepair" = "0"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following registry key(s):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012013041520130416]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012013040820130415]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

[HKCU\Software\GetNowUpdater]
"TempAppInstanceUid"

The process adb.exe:2952 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "3A B0 E3 8A 36 19 1A E6 B3 8D A7 04 D1 77 F7 61"

Dropped PE files

MD5	File path
a9ccf6fa7b68bd2871f7127c3ad7cf1e	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\GetNowUpdater\getnowupdater.exe
a9ccf6fa7b68bd2871f7127c3ad7cf1e	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\getnowupdater[1].exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

Removals

Static Analysis

VersionInfo

Company Name: SIEN
Product Name: Yappyz
Product Version: 6.39.1.0
Legal Copyright: (c)SIEN S.A. All rights reserved.
Legal Trademarks:
Original Filename: Setup.exe
Internal Name: YappyzSetup.exe
File Version: 6.39.1.0
File Description: Yappyz
Comments:
Language: Language Neutral

Company Name: SIENProduct Name: YappyzProduct Version: 6.39.1.0Legal Copyright: (c)SIEN S.A. All rights reserved.Legal Trademarks: Original Filename: Setup.exeInternal Name: YappyzSetup.exeFile Version: 6.39.1.0File Description: YappyzComments: Language: Language Neutral

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
UPX0	4096	1437696	0	0	d41d8cd98f00b204e9800998ecf8427e
UPX1	1441792	757760	756224	5.49563	329dd14854c0ae2809439caee5ccb921
.rsrc	2199552	57344	56320	4.81562	601a082c2b3bf6c338d4fc7b64b64083

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Network Activity

URLs

URL	IP
hxxp://72.247.9.226/vz/1BEE654B-2FE7-4B33-9B1D-276A04B3191C/1/getnowupdater.exe
hxxp://logevent.iminent.akadns.net/external/d64ffd1e-6804-4183-b43d-52bce5fb72be/json/RaiseObjectEventLiteMethod?AppInstanceId=&Bagkey=&TargetUid=00000000-0000-0000-0000-000000000000&EventType=32768&EventCode=910&Properties=INFO=InstallgetNowUpdater__1
hxxp://logevent.iminent.com/external/d64ffd1e-6804-4183-b43d-52bce5fb72be/json/RaiseObjectEventLiteMethod?AppInstanceId=&Bagkey=&TargetUid=00000000-0000-0000-0000-000000000000&EventType=32768&EventCode=910&Properties=INFO=InstallgetNowUpdater__1	176.74.168.35
hxxp://vzapp.iminent.com/vz/1BEE654B-2FE7-4B33-9B1D-276A04B3191C/1/getnowupdater.exe

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

HEAD /vz/1BEE654B-2FE7-4B33-9B1D-276A04B3191C/1/getnowupdater.exe HTTP/1.1

User-Agent: Downloader

Host: vzapp.iminent.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Content-Length: 24397640

Content-Type: application/octet-stream

Last-Modified: Tue, 29 Apr 2014 13:53:40 GMT

ETag: 27337708.1.5247029782628957904

Server: Microsoft-IIS/7.5

ServerSideUid: d855e377-9e85-4daf-bced-cb1fb8eec089

FromLocalCache: true

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: MCC-PROD19

Cache-Control: public, max-age=30552346

Date: Sun, 18 May 2014 18:49:41 GMT

Connection: keep-alive

HTTP/1.1 200 OK..Content-Length: 24397640..Content-Type: application/octet-stream..Last-Modified: Tue, 29 Apr 2014 13:53:40 GMT..ETag: 27337708.1.5247029782628957904..Server: Microsoft-IIS/7.5..ServerSideUid: d855e377-9e85-4daf-bced-cb1fb8eec089..FromLocalCache: true..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Server: MCC-PROD19..Cache-Control: public, max-age=30552346..Date: Sun, 18 May 2014 18:49:41 GMT..Connection: keep-alive..

GET /external/d64ffd1e-6804-4183-b43d-52bce5fb72be/json/RaiseObjectEventLiteMethod?AppInstanceId=&Bagkey=&TargetUid=00000000-0000-0000-0000-000000000000&EventType=32768&EventCode=910&Properties=INFO=InstallgetNowUpdater__1 HTTP/1.1

User-Agent: LogEvents

Host: logevent.iminent.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Cache-Control: private

Content-Type: application/json; charset=utf-8

Server: Microsoft-IIS/7.5

X-AspNetMvc-Version: 4.0

Access-Control-Allow-Origin: *

Access-Control-Allow-Headers: Content-Type

X-From-Header: 00000000-0000-0000-0000-000000000000

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: MCC-PROD31

Date: Sun, 18 May 2014 18:49:55 GMT

Content-Length: 67

{"EventUid":"60f53627-7b45-4731-89bd-fc9665655353","Recorded":true}..

Map

The Trojan connects to the servers at the folowing location(s):

Strings from Dumps

GetNowUpdater.exe_208:

.text

`.rdata

@.data

.rsrc

@.reloc

F><.tN<[tJ<\tF<*tB<|t><^t:<$t6

<1%u3

t8It.IIt#

.CGy*

9\$$uÂ$

FTPj

YPSSSh

tCPS

9t$Lt.VV

,4,56,789

t#WSSh

xSSSh

FTPjKS

FtPj;S

C.PjRV

.EKSWU

RWj%Sj

FTPG

Camellia for x86 by <appro></appro>

AES for Intel AES-NI, CRYPTOGAMS by <appro></appro>

6-9'6-9'

$6.:$6.:

*?#1*?#1

>8$4,8$4,

AES for x86, CRYPTOGAMS by <appro></appro>

RC4 for x86, CRYPTOGAMS by <appro></appro>

SHA1 block transform for x86, CRYPTOGAMS by <appro></appro>

SHA256 block transform for x86, CRYPTOGAMS by <appro></appro>

DlSHA512 block transform for x86, CRYPTOGAMS by <appro></appro>

GHASH for x86, CRYPTOGAMS by <appro></appro>

|$@3|$<3

Montgomery Multiplication for x86, CRYPTOGAMS by <appro></appro>

GF(2^m) Multiplication for x86, CRYPTOGAMS by <appro></appro>

FtPS

()$^.* ?[]|\-{},:=!

ro.product.locale.region

ro.product.locale.language

ro.product.manufacturer

ro.product.cpu.abi

ro.product.brand

ro.product.model

ro.build.version.release

ro.build.display.id

ro.build.version.sdk

http://vzbucket.appscion.com/appscionupdater

/androidMapping.txt

MSG_DOWNLOAD_LAUNCH_DL

MSG_DOWNLOAD_FINISHED_DL

MSG_DOWNLOAD_ADDED_DL

MSG_DEVICE_DL_ADB_DRIVERS

MSG_DEVICE_INSTALL_USB_DRIVERS_RESPONSE

MSG_DEVICE_INSTALL_USB_DRIVERS

MSG_DEVICE_PERIODIC_SCAN

MSG_DEVICE_EVENT_DETECTED

MSG_DEVICE_ATTACH_USB_TRAP

MSG_PROCESS_SEND_STATS

MSG_PROCESS_SCAN_START

MSG_AUTOUPDATE_COMPLETE

MSG_AUTOUPDATE_START

MSG_ANDROID_APP_UPDATE_ALL

MSG_ANDROID_APP_INSTALL

MSG_ANDROID_APP_UNINSTALL

MSG_ANDROID_RESCAN

MSG_SOFT_UPDATE_SETUPEXE

MSG_SOFT_APP_UPDATE_ALL

MSG_SOFT_LAUNCH_PROCESS

MSG_SOFT_RESCAN_SOFT_COMPLETE

MSG_SOFT_SEND_FEEDBACK

MSG_SOFT_SHOW_DATA

MSG_SOFT_SCAN_REMOTE

MSG_SOFT_SCAN_LOCAL

AutoUpdater.cpp

http://getnow.com/

Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/29.0.1547.66 Safari/537.36 %1

XMLHttpRequest

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

finalExeName: [%1]

/outt.txt

/outt2.txt

/summaryUpdateInfo.txt

mainExe

%d-%d

MD5 hash of file %s is:

Line %d, Column %d

m unresolved strings

depth m has

%d pointers, %d sorted, %d scanned

qsort [0x%x, 0x%x] done %d this %d

%d work, %d block, ratio %5.2f

1.0.4, 20-Dec-2006

(www.memtest86.com). At the time of writing it is free (GPLd).

bzip2/libbzip2: internal error number %d.

This is a bug in bzip2/libbzip2, %s.

Please report it to me at: jseward@bzip.org. If this happened

component, you should also report this bug to the author(s)

of that program. Please make an effort to report this bug;

timely and accurate bug reports eventually lead to higher

combined CRCs: stored = 0xx, computed = 0xx

{0xx, 0xx}

codes %d

code lengths %d,

selectors %d,

bytes: mapping %d,

pass %d: size is %d, grp uses are

initial group %d, [%d .. %d], has %d syms (%4.1f%%)

%d in block, %d after MTF & 1-2 coding, %d 2 syms in use

final combined CRC = 0xx

block %d: crc = 0xx, combined CRC = 0xx, size = %d

[%d: huff mtf

1.1.3

CacheManager.cpp

Mozilla/5.0 (Windows NT %1.%2%3) AppleWebKit/537.21 (KHTML, like Gecko) GetNowUpdater Safari/537.21

/verbose.txt

CGoogleAnalytics.cpp

www.google-analytics.com

http://www.google-analytics.com/collect?

Date: %d %s %d %d:%d:%d

AUTH LOGIN is not supported by the server

The STARTTLS command is not supported by the server

Undefined xyz SMTP response

Bad login or password

Server returned error after sending AUTH LOGIN

Invalid user login or password

Undefined user password

Undefined user login

EHLO %s

,qop=%s

,response=%s

,digest-uri="%s"

,cnonce="%s"

,nc=%s

,nonce="%s"

,realm="%s"

charset=utf-8,username="%s"

smtp/

AUTH PLAIN %s

%s^%s^%s

AUTH LOGIN

LOGIN

--%s--

RCPT TO:<%s>

MAIL FROM:<%s>

QSQLITE

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\%1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\%1

/adbF/driver/android_winusb.inf

/adbF/driver/AdbDriverInstaller.exe

/adbF/driver/UniversalAdbDriverSetup6.msi

/adbF/adb.exe

/AdbDriverInstaller.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceContainers\%1\BaseContainers\%2

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USB\%1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USB

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USB\%1\%2

DeviceManager.cpp

http:[Android]%1

/productname="%1" /producturl="%2" /productlogo="%3" /productkey="%4" /productversion="%5"

setup.exe

[PRODUCTURL]

http://stapi.appscion.com/api/stamp/setup.exe?publisherid=95&affiliateid=1486&publisherkey=Appscion Updater-1486&publishername=GetNow Updater&publishercontact=http://www.getnow.com/contactus&productname=[PRODUCTNAME]&producturl=[PRODUCTURL]&productimage=[PRODUCTIMAGE]&productversion=[PRODUCTVERSION]&productbusiness=0&productcompliancy=0&lcid=1033&offerid=8

:/ù.%

10.rEDC

Start with Windows

"textL15": "Starts when Windows starts",

"textL49": "Portughese",

<h1><span class="figure" id="nrUpdates">0</span><script type="text/javascript">document.write(myJson["textL38"]);</script></h1>

<span><script type="text/javascript">document.write(myJson["textL58"]);</script></span>

<label for="selectAll"><script type="text/javascript">document.write(myJson["textL55"]);</script></label>

<button id="openBtn" onclick="javascript:android_doShow()"><script type="text/javascript">document.write(myJson["textL56"]);</script></button>

<button id="updateBtn" onclick="javascript:android_doUpdateAll()"><script type="text/javascript">document.write(myJson["textL57"]);</script></button>

$('.desktop-notifications').find('ul').scroll(function(){

if ($(this).scrollTop() > 0) {

$('header').addClass('scroll');

$('header').hasClass('scroll') ? ($('header').removeClass('scroll')) : null;

$('#selectAll').click(function(){

if ($(this).prop('checked')) {

$('#auto-update').find('input').prop('checked', true);

$('#auto-update').find('input').click(function(){

if (!$(this).prop('checked')) {

$('#selectAll').prop('checked', false);

$(document).ready(function (e) {

$("#s_countries").msDropdown();

<li class="active"><a href="updater.html"><script type="text/javascript">document.write(myJson["textL4"]);</script></a></li>

<li><a href="store.html?net-page=true"><script type="text/javascript">document.write(myJson["textL27"]);</script></a></li>

<p><span id="aUpdates">0</span><script type="text/javascript">document.write(myJson["textL1"]);</script></p>

<a href="javascript:doAppUpdateAll()" class="btn btn--update-all"><script type="text/javascript">document.write(myJson["textL31"]);</script></a>

<p><span id="mUpdates">0</span><script type="text/javascript">document.write(myJson["textL2"]);</script></p>

<a class="back" href="updater.html"><script type="text/javascript">document.write(myJson["textL14"]);</script></a>

<p><script type="text/javascript">document.write(myJson["textL3"]);</script></p>

<span style="color: red;line-height: 2.50em;" padding-left: 15px><b> <script type="text/javascript">document.write(myJson["textL60"]);</script></b></span>

<span style="color: red;line-height: 2.50em;" padding-left: 15px><b> <script type="text/javascript">document.write(myJson["textL60"]);</script></b></span>

<option value="Good product" selected><script type="text/javascript">document.write(myJson["textL8"]);</script></option>

<option value="Phone Detection"><script type="text/javascript">document.write(myJson["textL9"]);</script></option>

<option value="Not Good Features"><script type="text/javascript">document.write(myJson["textL10"]);</script></option>

<option value="Syncing Issue"><script type="text/javascript">document.write(myJson["textL11"]);</script></option>

<option value="Not user friendly"><script type="text/javascript">document.write(myJson["textL12"]);</script></option>

<option value="Other"><script type="text/javascript">document.write(myJson["textL30"]);</script></option>

<a class="submitB" href="updater.html"><b><script type="text/javascript">document.write(myJson["textL13"]);</script></b></a>

<span style="color: red;line-height: 2.50em;" padding-left: 15px><b> <script type="text/javascript">document.write(myJson["textL59"]);</script></b></span>

<p><script type="text/javascript">document.write(myJson["textL16"]);</script></p>

<input type="checkbox" checked name="settings_startup" value="startup" id="s_startup" /><script type="text/javascript">document.write(myJson["textL15"]);</script><br /><p></p>

<p><script type="text/javascript">document.write(myJson["textL51"]);</script></p>

<option value="English" data-image="img/EN.png" data-title="English" selected><script type="text/javascript">document.write(myJson["textL45"]);</script></option>

<option value="French" data-image="img/FR.png" data-title="French"><script type="text/javascript">document.write(myJson["textL46"]);</script></option>

<option value="Deutch" data-image="img/DE.png" data-title="Deutch"><script type="text/javascript">document.write(myJson["textL47"]);</script></option>

<option value="Italian" data-image="img/IT.png" data-title="Italian"><script type="text/javascript">document.write(myJson["textL48"]);</script></option>

<option value="Portughese" data-image="img/PT.png" data-title="Portughese"><script type="text/javascript">document.write(myJson["textL49"]);</script></option>

<option value="Spanish" data-image="img/ES.png" data-title="Spanish"><script type="text/javascript">document.write(myJson["textL50"]);</script></option>

<p><script type="text/javascript">document.write(myJson["textL22"]);</script></p>

<input type="text" name="androidt_d" placeholder="2" maxlength="1" id="s_android_t_d" /><script type="text/javascript">document.write(myJson["textL17"]);</script>

<input type="text" name="androidt_h" placeholder="2" maxlength="2" id="s_android_t_h" /><script type="text/javascript">document.write(myJson["textL18"]);</script>

<span hidden="true"><input type="text" name="androidt_m" placeholder="2" maxlength="2" id="s_android_t_m" /><script type="text/javascript">document.write(myJson["textL19"]);</script></span>

<input type="text" name="androidt_s" placeholder="2" maxlength="2" id="s_android_t_s" /><script type="text/javascript">document.write(myJson["textL20"]);</script>

<p><script type="text/javascript">document.write(myJson["textL23"]);</script></p>

<input type="text" name="desktopt_d" placeholder="2" maxlength="1" id="s_desktop_t_d" /><script type="text/javascript">document.write(myJson["textL17"]);</script>

<input type="text" name="desktopt_h" placeholder="2" maxlength="2" id="s_desktop_t_h" /><script type="text/javascript">document.write(myJson["textL18"]);</script>

<span hidden="true"><input type="text" name="desktopt_m" placeholder="2" maxlength="2" id="s_desktop_t_m" /><script type="text/javascript">document.write(myJson["textL19"]);</script></span>

<input type="text" name="desktopt_s" placeholder="2" maxlength="2" id="s_desktop_t_s" /><script type="text/javascript">document.write(myJson["textL20"]);</script>

<a class="submitB" href="updater.html"><b><script type="text/javascript">document.write(myJson["textL21"]);</script></b></a>

<a href="#"><script type="text/javascript">document.write(myJson["textL24"]);</script></a>

<a href="#"><script type="text/javascript">document.write(myJson["textL25"]);</script></a>

<span><script type="text/javascript">document.write(myJson["textL26"]);</script></span>

<button class="button_text" id="scan_text" onclick="doSoftListUpdate();"><script type="text/javascript">document.write(myJson["textL53"]);</script></button>

<li><span id="installed">0</span><script type="text/javascript">document.write(myJson["textL5"]);</script></li>

<li><span id="updates">0</span><script type="text/javascript">document.write(myJson["textL6"]);</script></li>

<li><span id="android">0</span><script type="text/javascript">document.write(myJson["textL7"]);</script></li>

<p><script type="text/javascript">document.write(myJson["textL32"]);</script></p>

marrage de Windows",

"textL49": "FR_Portughese",

//@ sourceMappingURL=jquery-1.10.2.min.map

}({});var B=/(?:\{[\s\S]*\}|\[[\s\S]*\])$/,P=/([A-Z])/g;function R(e,n,r,i){if(x.acceptData(e)){var o,a,s=x.expando,l=e.nodeType,u=l?x.cache:e,c=l?e[s]:e[s]&&s;if(c&&u[c]&&(i||u[c].data)||r!==t||"string"!=typeof n)return c||(c=l?e[s]=p.pop()||x.guid :s),u[c]||(u[c]=l?{}:{toJSON:x.noop}),("object"==typeof n||"function"==typeof n)&&(i?u[c]=x.extend(u[c],n):u[c].data=x.extend(u[c].data,n)),a=u[c],i||(a.data||(a.data={}),a=a.data),r!==t&&(a[x.camelCase(n)]=r),"string"==typeof n?(o=a[n],null==o&&(o=a[x.camelCase(n)])):o=a,o}}function W(e,t,n){if(x.acceptData(e)){var r,i,o=e.nodeType,a=o?x.cache:e,s=o?e[x.expando]:x.expando;if(a[s]){if(t&&(r=n?a[s]:a[s].data)){x.isArray(t)?t=t.concat(x.map(t,x.camelCase)):t in r?t=[t]:(t=x.camelCase(t),t=t in r?[t]:t.split(" ")),i=t.length;while(i--)delete r[t[i]];if(n?!I(r):!x.isEmptyObject(r))return}(n||(delete a[s].data,I(a[s])))&&(o?x.cleanData([e],!0):x.support.deleteExpando||a!=a.window?delete a[s]:a[s]=null)}}}x.extend({cache:{},noData:{applet:!0,embed:!0,object:"clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"},hasData:function(e){return e=e.nodeType?x.cache[e[x.expando]]:e[x.expando],!!e&&!I(e)},data:function(e,t,n){return R(e,t,n)},removeData:function(e,t){return W(e,t)},_data:function(e,t,n){return R(e,t,n,!0)},_removeData:function(e,t){return W(e,t,!0)},acceptData:function(e){if(e.nodeType&&1!==e.nodeType&&9!==e.nodeType)return!1;var t=e.nodeName&&x.noData[e.nodeName.toLowerCase()];return!t||t!==!0&&e.getAttribute("classid")===t}}),x.fn.extend({data:function(e,n){var r,i,o=null,a=0,s=this[0];if(e===t){if(this.length&&(o=x.data(s),1===s.nodeType&&!x._data(s,"parsedAttrs"))){for(r=s.attributes;r.length>a;a )i=r[a].name,0===i.indexOf("data-")&&(i=x.camelCase(i.slice(5)),$(s,i,o[i]));x._data(s,"parsedAttrs",!0)}return o}return"object"==typeof e?this.each(function(){x.data(this,e)}):arguments.length>1?this.each(function(){x.data(this,e,n)}):s?$(s,e,x.data(s,e)):null},removeData:function(e){return this.each(function(){x.removeData(this,e)})}});function $(e,n,r){if(r===t&&1===e.nodeType){var i="data-" n.replace(P,"-$1").toLowerCase();if(r=e.getAttribute(i),"string"==typeof r){try{r="true"===r?!0:"false"===r?!1:"null"===r?null: r ""===r? r:B.test(r)?x.parseJSON(r):r}catch(o){}x.data(e,n,r)}else r=t}return r}function I(e){var t;for(t in e)if(("data"!==t||!x.isEmptyObject(e[t]))&&"toJSON"!==t)return!1;return!0}x.extend({queue:function(e,n,r){var i;return e?(n=(n||"fx") "queue",i=x._data(e,n),r&&(!i||x.isArray(r)?i=x._data(e,n,x.makeArray(r)):i.push(r)),i||[]):t},dequeue:function(e,t){t=t||"fx";var n=x.queue(e,t),r=n.length,i=n.shift(),o=x._queueHooks(e,t),a=function(){x.dequeue(e,t)};"inprogress"===i&&(i=n.shift(),r--),i&&("fx"===t&&n.unshift("inprogress"),delete o.stop,i.call(e,a,o)),!r&&o&&o.empty.fire()},_queueHooks:function(e,t){var n=t "queueHooks";return x._data(e,n)||x._data(e,n,{empty:x.Callbacks("once memory").add(function(){x._removeData(e,t "queue"),x._removeData(e,n)})})}}),x.fn.extend({queue:function(e,n){var r=2;return"string"!=typeof e&&(n=e,e="fx",r--),r>arguments.length?x.queue(this[0],e):n===t?this:this.each(function(){var t=x.queue(this,e,n);x._queueHooks(this,e),"fx"===e&&"inprogress"!==t[0]&&x.dequeue(this,e)})},dequeue:function(e){return this.each(function(){x.dequeue(this,e)})},delay:function(e,t){return e=x.fx?x.fx.speeds[e]||e:e,t=t||"fx",this.queue(t,function(t,n){var r=setTimeout(t,e);n.stop=function(){clearTimeout(r)}})},clearQueue:function(e){return this.queue(e||"fx",[])},promise:function(e,n){var r,i=1,o=x.Deferred(),a=this,s=this.length,l=function(){--i||o.resolveWith(a,[a])};"string"!=typeof e&&(n=e,e=t),e=e||"fx";while(s--)r=x._data(a[s],e "queueHooks"),r&&r.empty&&(i ,r.empty.add(l));return l(),o.promise(n)}});var z,X,U=/[\t\r\n\f]/g,V=/\r/g,Y=/^(?:input|select|textarea|button|object)$/i,J=/^(?:a|area)$/i,G=/^(?:checked|selected)$/i,Q=x.support.getSetAttribute,K=x.support.input;x.fn.extend({attr:function(e,t){return x.access(this,x.attr,e,t,arguments.length>1)},removeAttr:function(e){return this.each(function(){x.removeAttr(this,e)})},prop:function(e,t){return x.access(this,x.prop,e,t,arguments.length>1)},removeProp:function(e){return e=x.propFix[e]||e,this.each(function(){try{this[e]=t,delete this[e]}catch(n){}})},addClass:function(e){var t,n,r,i,o,a=0,s=this.length,l="string"==typeof e&&e;if(x.isFunction(e))return this.each(function(t){x(this).addClass(e.call(this,t,this.className))});if(l)for(t=(e||"").match(T)||[];s>a;a )if(n=this[a],r=1===n.nodeType&&(n.className?(" " n.className " ").replace(U," "):" ")){o=0;while(i=t[o ])0>r.indexOf(" " i " ")&&(r =i " ");n.className=x.trim(r)}return this},removeClass:function(e){var t,n,r,i,o,a=0,s=this.length,l=0===arguments.length||"string"==typeof e&&e;if(x.isFunction(e))return this.each(function(t){x(this).removeClass(e.call(this,t,this.className))});if(l)for(t=(e||"").match(T)||[];s>a;a )if(n=this[a],r=1===n.nodeType&&(n.className?(" " n.className " ").replace(U," "):"")){o=0;while(i=t[o ])while(r.indexOf(" " i " ")>=0)r=r.replace(" " i " "," ");n.className=e?x.trim(r):""}return this},toggleClass:function(e,t){var n=typeof e;return"boolean"==typeof t&&"string"===n?t?this.addClass(e):this.removeClass(e):x.isFunction(e)?this.each(function(n){x(this).toggleClass(e.call(this,n,this.className,t),t)}):this.each(function(){if("string"===n){var t,r=0,o=x(this),a=e.match(T)||[];while(t=a[r ])o.hasClass(t)?o.removeClass(t):o.addClass(t)}else(n===i||"boolean"===n)&&(this.className&&x._data(this,"__className__",this.className),this.className=this.className||e===!1?"":x._data(this,"__className__")||"")})},hasClass:function(e){var t=" " e " ",n=0,r=this.length;for(;r>n;n )if(1===this[n].nodeType&&(" " this[n].className " ").replace(U," ").indexOf(t)>=0)return!0;return!1},val:function(e){var n,r,i,o=this[0];{if(arguments.length)return i=x.isFunction(e),this.each(function(n){var o;1===this.nodeType&&(o=i?e.call(this,n,x(this).val()):e,null==o?o="":"number"==typeof o?o ="":x.isArray(o)&&(o=x.map(o,function(e){return null==e?"":e ""})),r=x.valHooks[this.type]||x.valHooks[this.nodeName.toLowerCase()],r&&"set"in r&&r.set(this,o,"value")!==t||(this.value=o))});if(o)return r=x.valHooks[o.type]||x.valHooks[o.nodeName.toLowerCase()],r&&"get"in r&&(n=r.get(o,"value"))!==t?n:(n=o.value,"string"==typeof n?n.replace(V,""):null==n?"":n)}}}),x.extend({valHooks:{option:{get:function(e){var t=x.find.attr(e,"value");return null!=t?t:e.text}},select:{get:function(e){var t,n,r=e.options,i=e.selectedIndex,o="select-one"===e.type||0>i,a=o?null:[],s=o?i 1:r.length,l=0>i?s:o?i:0;for(;s>l;l )if(n=r[l],!(!n.selected&&l!==i||(x.support.optDisabled?n.disabled:null!==n.getAttribute("disabled"))||n.parentNode.disabled&&x.nodeName(n.parentNode,"optgroup"))){if(t=x(n).val(),o)return t;a.push(t)}return a},set:function(e,t){var n,r,i=e.options,o=x.makeArray(t),a=i.length;while(a--)r=i[a],(r.selected=x.inArray(x(r).val(),o)>=0)&&(n=!0);return n||(e.selectedIndex=-1),o}}},attr:function(e,n,r){var o,a,s=e.nodeType;if(e&&3!==s&&8!==s&&2!==s)return typeof e.getAttribute===i?x.prop(e,n,r):(1===s&&x.isXMLDoc(e)||(n=n.toLowerCase(),o=x.attrHooks[n]||(x.expr.match.bool.test(n)?X:z)),r===t?o&&"get"in o&&null!==(a=o.get(e,n))?a:(a=x.find.attr(e,n),null==a?t:a):null!==r?o&&"set"in o&&(a=o.set(e,r,n))!==t?a:(e.setAttribute(n,r ""),r):(x.removeAttr(e,n),t))},removeAttr:function(e,t){var n,r,i=0,o=t&&t.match(T);if(o&&1===e.nodeType)while(n=o[i ])r=x.propFix[n]||n,x.expr.match.bool.test(n)?K&&Q||!G.test(n)?e[r]=!1:e[x.camelCase("default-" n)]=e[r]=!1:x.attr(e,n,""),e.removeAttribute(Q?n:r)},attrHooks:{type:{set:function(e,t){if(!x.support.radioValue&&"radio"===t&&x.nodeName(e,"input")){var n=e.value;return e.setAttribute("type",t),n&&(e.value=n),t}}}},propFix:{"for":"htmlFor","class":"className"},prop:function(e,n,r){var i,o,a,s=e.nodeType;if(e&&3!==s&&8!==s&&2!==s)return a=1!==s||!x.isXMLDoc(e),a&&(n=x.propFix[n]||n,o=x.propHooks[n]),r!==t?o&&"set"in o&&(i=o.set(e,r,n))!==t?i:e[n]=r:o&&"get"in o&&null!==(i=o.get(e,n))?i:e[n]},propHooks:{tabIndex:{get:function(e){var t=x.find.attr(e,"tabindex");return t?parseInt(t,10):Y.test(e.nodeName)||J.test(e.nodeName)&&e.href?0:-1}}}}),X={set:function(e,t,n){return t===!1?x.removeAttr(e,n):K&&Q||!G.test(n)?e.setAttribute(!Q&&x.propFix[n]||n,n):e[x.camelCase("default-" n)]=e[n]=!0,n}},x.each(x.expr.match.bool.source.match(/\w /g),function(e,n){var r=x.expr.attrHandle[n]||x.find.attr;x.expr.attrHandle[n]=K&&Q||!G.test(n)?function(e,n,i){var o=x.expr.attrHandle[n],a=i?t:(x.expr.attrHandle[n]=t)!=r(e,n,i)?n.toLowerCase():null;return x.expr.attrHandle[n]=o,a}:function(e,n,r){return r?t:e[x.camelCase("default-" n)]?n.toLowerCase():null}}),K&&Q||(x.attrHooks.value={set:function(e,n,r){return x.nodeName(e,"input")?(e.defaultValue=n,t):z&&z.set(e,n,r)}}),Q||(z={set:function(e,n,r){var i=e.getAttributeNode(r);return i||e.setAttributeNode(i=e.ownerDocument.createAttribute(r)),i.value=n ="","value"===r||n===e.getAttribute(r)?n:t}},x.expr.attrHandle.id=x.expr.attrHandle.name=x.expr.attrHandle.coords=function(e,n,r){var i;return r?t:(i=e.getAttributeNode(n))&&""!==i.value?i.value:null},x.valHooks.button={get:function(e,n){var r=e.getAttributeNode(n);return r&&r.specified?r.value:t},set:z.set},x.attrHooks.contenteditable={set:function(e,t,n){z.set(e,""===t?!1:t,n)}},x.each(["width","height"],function(e,n){x.attrHooks[n]={set:function(e,r){return""===r?(e.setAttribute(n,"auto"),r):t}}})),x.support.hrefNormalized||x.each(["href","src"],function(e,t){x.propHooks[t]={get:function(e){return e.getAttribute(t,4)}}}),x.support.style||(x.attrHooks.style={get:function(e){return e.style.cssText||t},set:function(e,t){return e.style.cssText=t ""}}),x.support.optSelected||(x.propHooks.selected={get:function(e){var t=e.parentNode;return t&&(t.selectedIndex,t.parentNode&&t.parentNode.selectedIndex),null}}),x.each(["tabIndex","readOnly","maxLength","cellSpacing","cellPadding","rowSpan","colSpan","useMap","frameBorder","contentEditable"],function(){x.propFix[this.toLowerCase()]=this}),x.support.enctype||(x.propFix.enctype="encoding"),x.each(["radio","checkbox"],function(){x.valHooks[this]={set:function(e,n){return x.isArray(n)?e.checked=x.inArray(x(e).val(),n)>=0:t}},x.support.checkOn||(x.valHooks[this].get=function(e){return null===e.getAttribute("value")?"on":e.value})});var Z=/^(?:input|select|textarea)$/i,et=/^key/,tt=/^(?:mouse|contextmenu)|click/,nt=/^(?:focusinfocus|focusoutblur)$/,rt=/^([^.]*)(?:\.(. )|)$/;function it(){return!0}function ot(){return!1}function at(){try{return a.activeElement}catch(e){}}x.event={global:{},add:function(e,n,r,o,a){var s,l,u,c,p,f,d,h,g,m,y,v=x._data(e);if(v){r.handler&&(c=r,r=c.handler,a=c.selector),r.guid||(r.guid=x.guid ),(l=v.events)||(l=v.events={}),(f=v.handle)||(f=v.handle=function(e){return typeof x===i||e&&x.event.triggered===e.type?t:x.event.dispatch.apply(f.elem,arguments)},f.elem=e),n=(n||"").match(T)||[""],u=n.length;while(u--)s=rt.exec(n[u])||[],g=y=s[1],m=(s[2]||"").split(".").sort(),g&&(p=x.event.special[g]||{},g=(a?p.delegateType:p.bindType)||g,p=x.event.special[g]||{},d=x.extend({type:g,origType:y,data:o,handler:r,guid:r.guid,selector:a,needsContext:a&&x.expr.match.needsContext.test(a),namespace:m.join(".")},c),(h=l[g])||(h=l[g]=[],h.delegateCount=0,p.setup&&p.setup.call(e,o,m,f)!==!1||(e.addEventListener?e.addEventListener(g,f,!1):e.attachEvent&&e.attachEvent("on" g,f))),p.add&&(p.add.call(e,d),d.handler.guid||(d.handler.guid=r.guid)),a?h.splice(h.delegateCount ,0,d):h.push(d),x.event.global[g]=!0);e=null}},remove:function(e,t,n,r,i){var o,a,s,l,u,c,p,f,d,h,g,m=x.hasData(e)&&x._data(e);if(m&&(c=m.events)){t=(t||"").match(T)||[""],u=t.length;while(u--)if(s=rt.exec(t[u])||[],d=g=s[1],h=(s[2]||"").split(".").sort(),d){p=x.event.special[d]||{},d=(r?p.delegateType:p.bindType)||d,f=c[d]||[],s=s[2]&&RegExp("(^|\\.)" h.join("\\.(?:.*\\.|)") "(\\.|$)"),l=o=f.length;while(o--)a=f[o],!i&&g!==a.origType||n&&n.guid!==a.guid||s&&!s.test(a.namespace)||r&&r!==a.selector&&("**"!==r||!a.selector)||(f.splice(o,1),a.selector&&f.delegateCount--,p.remove&&p.remove.call(e,a));l&&!f.length&&(p.teardown&&p.teardown.call(e,h,m.handle)!==!1||x.removeEvent(e,d,m.handle),delete c[d])}else for(d in c)x.event.remove(e,d t[u],n,r,!0);x.isEmptyObject(c)&&(delete m.handle,x._removeData(e,"events"))}},trigger:function(n,r,i,o){var s,l,u,c,p,f,d,h=[i||a],g=v.call(n,"type")?n.type:n,m=v.call(n,"namespace")?n.namespace.split("."):[];if(u=f=i=i||a,3!==i.nodeType&&8!==i.nodeType&&!nt.test(g x.event.triggered)&&(g.indexOf(".")>=0&&(m=g.split("."),g=m.shift(),m.sort()),l=0>g.indexOf(":")&&"on" g,n=n[x.expando]?n:new x.Event(g,"object"==typeof n&&n),n.isTrigger=o?2:3,n.namespace=m.join("."),n.namespace_re=n.namespace?RegExp("(^|\\.)" m.join("\\.(?:.*\\.|)") "(\\.|$)"):null,n.result=t,n.target||(n.target=i),r=null==r?[n]:x.makeArray(r,[n]),p=x.event.special[g]||{},o||!p.trigger||p.trigger.apply(i,r)!==!1)){if(!o&&!p.noBubble&&!x.isWindow(i)){for(c=p.delegateType||g,nt.test(c g)||(u=u.parentNode);u;u=u.parentNode)h.push(u),f=u;f===(i.ownerDocument||a)&&h.push(f.defaultView||f.parentWindow||e)}d=0;while((u=h[d ])&&!n.isPropagationStopped())n.type=d>1?c:p.bindType||g,s=(x._data(u,"events")||{})[n.type]&&x._data(u,"handle"),s&&s.apply(u,r),s=l&&u[l],s&&x.acceptData(u)&&s.apply&&s.apply(u,r)===!1&&n.preventDefault();if(n.type=g,!o&&!n.isDefaultPrevented()&&(!p._default||p._default.apply(h.pop(),r)===!1)&&x.acceptData(i)&&l&&i[g]&&!x.isWindow(i)){f=i[l],f&&(i[l]=null),x.event.triggered=g;try{i[g]()}catch(y){}x.event.triggered=t,f&&(i[l]=f)}return n.result}},dispatch:function(e){e=x.event.fix(e);var n,r,i,o,a,s=[],l=g.call(arguments),u=(x._data(this,"events")||{})[e.type]||[],c=x.event.special[e.type]||{};if(l[0]=e,e.delegateTarget=this,!c.preDispatch||c.preDispatch.call(this,e)!==!1){s=x.event.handlers.call(this,e,u),n=0;while((o=s[n ])&&!e.isPropagationStopped()){e.currentTarget=o.elem,a=0;while((i=o.handlers[a ])&&!e.isImmediatePropagationStopped())(!e.namespace_re||e.namespace_re.test(i.namespace))&&(e.handleObj=i,e.data=i.data,r=((x.event.special[i.origType]||{}).handle||i.handler).apply(o.elem,l),r!==t&&(e.result=r)===!1&&(e.preventDefault(),e.stopPropagation()))}return c.postDispatch&&c.postDispatch.call(this,e),e.result}},handlers:function(e,n){var r,i,o,a,s=[],l=n.delegateCount,u=e.target;if(l&&u.nodeType&&(!e.button||"click"!==e.type))for(;u!=this;u=u.parentNode||this)if(1===u.nodeType&&(u.disabled!==!0||"click"!==e.type)){for(o=[],a=0;l>a;a )i=n[a],r=i.selector " ",o[r]===t&&(o[r]=i.needsContext?x(r,this).index(u)>=0:x.find(r,this,null,[u]).length),o[r]&&o.push(i);o.length&&s.push({elem:u,handlers:o})}return n.length>l&&s.push({elem:this,handlers:n.slice(l)}),s},fix:function(e){if(e[x.expando])return e;var t,n,r,i=e.type,o=e,s=this.fixHooks[i];s||(this.fixHooks[i]=s=tt.test(i)?this.mouseHooks:et.test(i)?this.keyHooks:{}),r=s.props?this.props.concat(s.props):this.props,e=new x.Event(o),t=r.length;while(t--)n=r[t],e[n]=o[n];return e.target||(e.target=o.srcElement||a),3===e.target.nodeType&&(e.target=e.target.parentNode),e.metaKey=!!e.metaKey,s.filter?s.filter(e,o):e},props:"altKey bubbles cancelable ctrlKey currentTarget eventPhase metaKey relatedTarget shiftKey target timeStamp view which".split(" "),fixHooks:{},keyHooks:{props:"char charCode key keyCode".split(" "),filter:function(e,t){return null==e.which&&(e.which=null!=t.charCode?t.charCode:t.keyCode),e}},mouseHooks:{props:"button buttons clientX clientY fromElement offsetX offsetY pageX pageY screenX screenY toElement".split(" "),filter:function(e,n){var r,i,o,s=n.button,l=n.fromElement;return null==e.pageX&&null!=n.clientX&&(i=e.target.ownerDocument||a,o=i.documentElement,r=i.body,e.pageX=n.clientX (o&&o.scrollLeft||r&&r.scrollLeft||0)-(o&&o.clientLeft||r&&r.clientLeft||0),e.pageY=n.clientY (o&&o.scrollTop||r&&r.scrollTop||0)-(o&&o.clientTop||r&&r.clientTop||0)),!e.relatedTarget&&l&&(e.relatedTarget=l===e.target?n.toElement:l),e.which||s===t||(e.which=1&s?1:2&s?3:4&s?2:0),e}},special:{load:{noBubble:!0},focus:{trigger:function(){if(this!==at()&&this.focus)try{return this.focus(),!1}catch(e){}},delegateType:"focusin"},blur:{trigger:function(){return this===at()&&this.blur?(this.blur(),!1):t},delegateType:"focusout"},click:{trigger:function(){return x.nodeName(this,"input")&&"checkbox"===this.type&&this.click?(this.click(),!1):t},_default:function(e){return x.nodeName(e.target,"a")}},beforeunload:{postDispatch:function(e){e.result!==t&&(e.originalEvent.returnValue=e.result)}}},simulate:function(e,t,n,r){var i=x.extend(new x.Event,n,{type:e,isSimulated:!0,originalEvent:{}});r?x.event.trigger(i,null,t):x.event.dispatch.call(t,i),i.isDefaultPrevented()&&n.preventDefault()}},x.removeEvent=a.removeEventListener?function(e,t,n){e.removeEventListener&&e.removeEventListener(t,n,!1)}:function(e,t,n){var r="on" t;e.detachEvent&&(typeof e[r]===i&&(e[r]=null),e.detachEvent(r,n))},x.Event=function(e,n){return this instanceof x.Event?(e&&e.type?(this.originalEvent=e,this.type=e.type,this.isDefaultPrevented=e.defaultPrevented||e.returnValue===!1||e.getPreventDefault&&e.getPreventDefault()?it:ot):this.type=e,n&&x.extend(this,n),this.timeStamp=e&&e.timeStamp||x.now(),this[x.expando]=!0,t):new x.Event(e,n)},x.Event.prototype={isDefaultPrevented:ot,isPropagationStopped:ot,isImmediatePropagationStopped:ot,preventDefault:function(){var e=this.originalEvent;this.isDefaultPrevented=it,e&&(e.preventDefault?e.preventDefault():e.returnValue=!1)},stopPropagation:function(){var e=this.originalEvent;this.isPropagationStopped=it,e&&(e.stopPropagation&&e.stopPropagation(),e.cancelBubble=!0)},stopImmediatePropagation:function(){this.isImmediatePropagationStopped=it,this.stopPropagation()}},x.each({mouseenter:"mouseover",mouseleave:"mouseout"},function(e,t){x.event.special[e]={delegateType:t,bindType:t,handle:function(e){var n,r=this,i=e.relatedTarget,o=e.handleObj;return(!i||i!==r&&!x.contains(r,i))&&(e.type=o.origType,n=o.handler.apply(this,arguments),e.type=t),n}}}),x.support.submitBubbles||(x.event.special.submit={setup:function(){return x.nodeName(this,"form")?!1:(x.event.add(this,"click._submit keypress._submit",function(e){var n=e.target,r=x.nodeName(n,"input")||x.nodeName(n,"button")?n.form:t;r&&!x._data(r,"submitBubbles")&&(x.event.add(r,"submit._submit",function(e){e._submit_bubble=!0}),x._data(r,"submitBubbles",!0))}),t)},postDispatch:function(e){e._submit_bubble&&(delete e._submit_bubble,this.parentNode&&!e.isTrigger&&x.event.simulate("submit",this.parentNode,e,!0))},teardown:function(){return x.nodeName(this,"form")?!1:(x.event.remove(this,"._submit"),t)}}),x.support.changeBubbles||(x.event.special.change={setup:function(){return Z.test(this.nodeName)?(("checkbox"===this.type||"radio"===this.type)&&(x.event.add(this,"propertychange._change",function(e){"checked"===e.originalEvent.propertyName&&(this._just_changed=!0)}),x.event.add(this,"click._change",function(e){this._just_changed&&!e.isTrigger&&(this._just_changed=!1),x.event.simulate("change",this,e,!0)})),!1):(x.event.add(this,"beforeactivate._change",function(e){var t=e.target;Z.test(t.nodeName)&&!x._data(t,"changeBubbles")&&(x.event.add(t,"change._change",function(e){!this.parentNode||e.isSimulated||e.isTrigger||x.event.simulate("change",this.parentNode,e,!0)}),x._data(t,"changeBubbles",!0))}),t)},handle:function(e){var n=e.target;return this!==n||e.isSimulated||e.isTrigger||"radio"!==n.type&&"checkbox"!==n.type?e.handleObj.handler.apply(this,arguments):t},teardown:function(){return x.event.remove(this,"._change"),!Z.test(this.nodeName)}}),x.support.focusinBubbles||x.each({focus:"focusin",blur:"focusout"},function(e,t){var n=0,r=function(e){x.event.simulate(t,e.target,x.event.fix(e),!0)};x.event.special[t]={setup:function(){0===n &&a.addEventListener(e,r,!0)},teardown:function(){0===--n&&a.removeEventListener(e,r,!0)}}}),x.fn.extend({on:function(e,n,r,i,o){var a,s;if("object"==typeof e){"string"!=typeof n&&(r=r||n,n=t);for(a in e)this.on(a,n,r,e[a],o);return this}if(null==r&&null==i?(i=n,r=n=t):null==i&&("string"==typeof n?(i=r,r=t):(i=r,r=n,n=t)),i===!1)i=ot;else if(!i)return this;return 1===o&&(s=i,i=function(e){return x().off(e),s.apply(this,arguments)},i.guid=s.guid||(s.guid=x.guid )),this.each(function(){x.event.add(this,e,i,r,n)})},one:function(e,t,n,r){return this.on(e,t,n,r,1)},off:function(e,n,r){var i,o;if(e&&e.preventDefault&&e.handleObj)return i=e.handleObj,x(e.delegateTarget).off(i.namespace?i.origType "." i.namespace:i.origType,i.selector,i.handler),this;if("object"==typeof e){for(o in e)this.off(o,n,e[o]);return this}return(n===!1||"function"==typeof n)&&(r=n,n=t),r===!1&&(r=ot),this.each(function(){x.event.remove(this,e,r,n)})},trigger:function(e,t){return this.each(function(){x.event.trigger(e,t,this)})},triggerHandler:function(e,n){var r=this[0];return r?x.event.trigger(e,n,r,!0):t}});var st=/^.[^:#\[\.,]*$/,lt=/^(?:parents|prev(?:Until|All))/,ut=x.expr.match.needsContext,ct={children:!0,contents:!0,next:!0,prev:!0};x.fn.extend({find:function(e){var t,n=[],r=this,i=r.length;if("string"!=typeof e)return this.pushStack(x(e).filter(function(){for(t=0;i>t;t )if(x.contains(r[t],this))return!0}));for(t=0;i>t;t )x.find(e,r[t],n);return n=this.pushStack(i>1?x.unique(n):n),n.selector=this.selector?this.selector " " e:e,n},has:function(e){var t,n=x(e,this),r=n.length;return this.filter(function(){for(t=0;r>t;t )if(x.contains(this,n[t]))return!0})},not:function(e){return this.pushStack(ft(this,e||[],!0))},filter:function(e){return this.pushStack(ft(this,e||[],!1))},is:function(e){return!!ft(this,"string"==typeof e&&ut.test(e)?x(e):e||[],!1).length},closest:function(e,t){var n,r=0,i=this.length,o=[],a=ut.test(e)||"string"!=typeof e?x(e,t||this.context):0;for(;i>r;r )for(n=this[r];n&&n!==t;n=n.parentNode)if(11>n.nodeType&&(a?a.index(n)>-1:1===n.nodeType&&x.find.matchesSelector(n,e))){n=o.push(n);break}return this.pushStack(o.length>1?x.unique(o):o)},index:function(e){return e?"string"==typeof e?x.inArray(this[0],x(e)):x.inArray(e.jquery?e[0]:e,this):this[0]&&this[0].parentNode?this.first().prevAll().length:-1},add:function(e,t){var n="string"==typeof e?x(e,t):x.makeArray(e&&e.nodeType?[e]:e),r=x.merge(this.get(),n);return this.pushStack(x.unique(r))},addBack:function(e){return this.add(null==e?this.prevObject:this.prevObject.filter(e))}});function pt(e,t){do e=e[t];while(e&&1!==e.nodeType);return e}x.each({parent:function(e){var t=e.parentNode;return t&&11!==t.nodeType?t:null},parents:function(e){return x.dir(e,"parentNode")},parentsUntil:function(e,t,n){return x.dir(e,"parentNode",n)},next:function(e){return pt(e,"nextSibling")},prev:function(e){return pt(e,"previousSibling")},nextAll:function(e){return x.dir(e,"nextSibling")},prevAll:function(e){return x.dir(e,"previousSibling")},nextUntil:function(e,t,n){return x.dir(e,"nextSibling",n)},prevUntil:function(e,t,n){return x.dir(e,"previousSibling",n)},siblings:function(e){return x.sibling((e.parentNode||{}).firstChild,e)},children:function(e){return x.sibling(e.firstChild)},contents:function(e){return x.nodeName(e,"iframe")?e.contentDocument||e.contentWindow.document:x.merge([],e.childNodes)}},function(e,t){x.fn[e]=function(n,r){var i=x.map(this,t,n);return"Until"!==e.slice(-5)&&(r=n),r&&"string"==typeof r&&(i=x.filter(r,i)),this.length>1&&(ct[e]||(i=x.unique(i)),lt.test(e)&&(i=i.reverse())),this.pushStack(i)}}),x.extend({filter:function(e,t,n){var r=t[0];return n&&(e=":not(" e ")"),1===t.length&&1===r.nodeType?x.find.matchesSelector(r,e)?[r]:[]:x.find.matches(e,x.grep(t,function(e){return 1===e.nodeType}))},dir:function(e,n,r){var i=[],o=e[n];while(o&&9!==o.nodeType&&(r===t||1!==o.nodeType||!x(o).is(r)))1===o.nodeType&&i.push(o),o=o[n];return i},sibling:function(e,t){var n=[];for(;e;e=e.nextSibling)1===e.nodeType&&e!==t&&n.push(e);return n}});function ft(e,t,n){if(x.isFunction(t))return x.grep(e,function(e,r){return!!t.call(e,r,e)!==n});if(t.nodeType)return x.grep(e,function(e){return e===t!==n});if("string"==typeof t){if(st.test(t))return x.filter(t,e,n);t=x.filter(t,e)}return x.grep(e,function(e){return x.inArray(e,t)>=0!==n})}function dt(e){var t=ht.split("|"),n=e.createDocumentFragment();if(n.createElement)while(t.length)n.createElement(t.pop());return n}var ht="abbr|article|aside|audio|bdi|canvas|data|datalist|details|figcaption|figure|footer|header|hgroup|mark|meter|nav|output|progress|section|summary|time|video",gt=/ jQuery\d ="(?:null|\d )"/g,mt=RegExp("<(?:" ht ")[\\s/>]","i"),yt=/^\s /,vt=/<(?!area|br|col|embed|hr|img|input|link|meta|param)(([\w:] )[^>]*)\/>/gi,bt=/<([\w:] )/,xt=/<tbody />\s*$/g,At={option:[1,"<select multiple>","</select>"],legend:[1,"<fieldset>","</fieldset>"],area:[1,"<map>","</map>"],param:[1,"<object>","</object>"],thead:[1,"<table>","</table>"],tr:[2,"<table><tbody>","</tbody></table>"],col:[2,"<table><tbody></tbody><colgroup>","</colgroup></table>"],td:[3,"<table><tbody><tr>","</tr></tbody></table>"],_default:x.support.htmlSerialize?[0,"",""]:[1,"X<div>","</div>"]},jt=dt(a),Dt=jt.appendChild(a.createElement("div"));At.optgroup=At.option,At.tbody=At.tfoot=At.colgroup=At.caption=At.thead,At.th=At.td,x.fn.extend({text:function(e){return x.access(this,function(e){return e===t?x.text(this):this.empty().append((this[0]&&this[0].ownerDocument||a).createTextNode(e))},null,e,arguments.length)},append:function(){return this.domManip(arguments,function(e){if(1===this.nodeType||11===this.nodeType||9===this.nodeType){var t=Lt(this,e);t.appendChild(e)}})},prepend:function(){return this.domManip(arguments,function(e){if(1===this.nodeType||11===this.nodeType||9===this.nodeType){var t=Lt(this,e);t.insertBefore(e,t.firstChild)}})},before:function(){return this.domManip(arguments,function(e){this.parentNode&&this.parentNode.insertBefore(e,this)})},after:function(){return this.domManip(arguments,function(e){this.parentNode&&this.parentNode.insertBefore(e,this.nextSibling)})},remove:function(e,t){var n,r=e?x.filter(e,this):this,i=0;for(;null!=(n=r[i]);i )t||1!==n.nodeType||x.cleanData(Ft(n)),n.parentNode&&(t&&x.contains(n.ownerDocument,n)&&_t(Ft(n,"script")),n.parentNode.removeChild(n));return this},empty:function(){var e,t=0;for(;null!=(e=this[t]);t ){1===e.nodeType&&x.cleanData(Ft(e,!1));while(e.firstChild)e.removeChild(e.firstChild);e.options&&x.nodeName(e,"select")&&(e.options.length=0)}return this},clone:function(e,t){return e=null==e?!1:e,t=null==t?e:t,this.map(function(){return x.clone(this,e,t)})},html:function(e){return x.access(this,function(e){var n=this[0]||{},r=0,i=this.length;if(e===t)return 1===n.nodeType?n.innerHTML.replace(gt,""):t;if(!("string"!=typeof e||Tt.test(e)||!x.support.htmlSerialize&&mt.test(e)||!x.support.leadingWhitespace&&yt.test(e)||At[(bt.exec(e)||["",""])[1].toLowerCase()])){e=e.replace(vt,"<$1></$2>");try{for(;i>r;r )n=this[r]||{},1===n.nodeType&&(x.cleanData(Ft(n,!1)),n.innerHTML=e);n=0}catch(o){}}n&&this.empty().append(e)},null,e,arguments.length)},replaceWith:function(){var e=x.map(this,function(e){return[e.nextSibling,e.parentNode]}),t=0;return this.domManip(arguments,function(n){var r=e[t ],i=e[t ];i&&(r&&r.parentNode!==i&&(r=this.nextSibling),x(this).remove(),i.insertBefore(n,r))},!0),t?this:this.remove()},detach:function(e){return this.remove(e,!0)},domManip:function(e,t,n){e=d.apply([],e);var r,i,o,a,s,l,u=0,c=this.length,p=this,f=c-1,h=e[0],g=x.isFunction(h);if(g||!(1>=c||"string"!=typeof h||x.support.checkClone)&&Nt.test(h))return this.each(function(r){var i=p.eq(r);g&&(e[0]=h.call(this,r,i.html())),i.domManip(e,t,n)});if(c&&(l=x.buildFragment(e,this[0].ownerDocument,!1,!n&&this),r=l.firstChild,1===l.childNodes.length&&(l=r),r)){for(a=x.map(Ft(l,"script"),Ht),o=a.length;c>u;u )i=l,u!==f&&(i=x.clone(i,!0,!0),o&&x.merge(a,Ft(i,"script"))),t.call(this[u],i,u);if(o)for(s=a[a.length-1].ownerDocument,x.map(a,qt),u=0;o>u;u )i=a[u],kt.test(i.type||"")&&!x._data(i,"globalEval")&&x.contains(s,i)&&(i.src?x._evalUrl(i.src):x.globalEval((i.text||i.textContent||i.innerHTML||"").replace(St,"")));l=r=null}return this}});function Lt(e,t){return x.nodeName(e,"table")&&x.nodeName(1===t.nodeType?t:t.firstChild,"tr")?e.getElementsByTagName("tbody")[0]||e.appendChild(e.ownerDocument.createElement("tbody")):e}function Ht(e){return e.type=(null!==x.find.attr(e,"type")) "/" e.type,e}function qt(e){var t=Et.exec(e.type);return t?e.type=t[1]:e.removeAttribute("type"),e}function _t(e,t){var n,r=0;for(;null!=(n=e[r]);r )x._data(n,"globalEval",!t||x._data(t[r],"globalEval"))}function Mt(e,t){if(1===t.nodeType&&x.hasData(e)){var n,r,i,o=x._data(e),a=x._data(t,o),s=o.events;if(s){delete a.handle,a.events={};for(n in s)for(r=0,i=s[n].length;i>r;r )x.event.add(t,n,s[n][r])}a.data&&(a.data=x.extend({},a.data))}}function Ot(e,t){var n,r,i;if(1===t.nodeType){if(n=t.nodeName.toLowerCase(),!x.support.noCloneEvent&&t[x.expando]){i=x._data(t);for(r in i.events)x.removeEvent(t,r,i.handle);t.removeAttribute(x.expando)}"script"===n&&t.text!==e.text?(Ht(t).text=e.text,qt(t)):"object"===n?(t.parentNode&&(t.outerHTML=e.outerHTML),x.support.html5Clone&&e.innerHTML&&!x.trim(t.innerHTML)&&(t.innerHTML=e.innerHTML)):"input"===n&&Ct.test(e.type)?(t.defaultChecked=t.checked=e.checked,t.value!==e.value&&(t.value=e.value)):"option"===n?t.defaultSelected=t.selected=e.defaultSelected:("input"===n||"textarea"===n)&&(t.defaultValue=e.defaultValue)}}x.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(e,t){x.fn[e]=function(e){var n,r=0,i=[],o=x(e),a=o.length-1;for(;a>=r;r )n=r===a?this:this.clone(!0),x(o[r])[t](n),h.apply(i,n.get());return this.pushStack(i)}});function Ft(e,n){var r,o,a=0,s=typeof e.getElementsByTagName!==i?e.getElementsByTagName(n||"*"):typeof e.querySelectorAll!==i?e.querySelectorAll(n||"*"):t;if(!s)for(s=[],r=e.childNodes||e;null!=(o=r[a]);a )!n||x.nodeName(o,n)?s.push(o):x.merge(s,Ft(o,n));return n===t||n&&x.nodeName(e,n)?x.merge([e],s):s}function Bt(e){Ct.test(e.type)&&(e.defaultChecked=e.checked)}x.extend({clone:function(e,t,n){var r,i,o,a,s,l=x.contains(e.ownerDocument,e);if(x.support.html5Clone||x.isXMLDoc(e)||!mt.test("<" e.nodeName ">")?o=e.cloneNode(!0):(Dt.innerHTML=e.outerHTML,Dt.removeChild(o=Dt.firstChild)),!(x.support.noCloneEvent&&x.support.noCloneChecked||1!==e.nodeType&&11!==e.nodeType||x.isXMLDoc(e)))for(r=Ft(o),s=Ft(e),a=0;null!=(i=s[a]); a)r[a]&&Ot(i,r[a]);if(t)if(n)for(s=s||Ft(e),r=r||Ft(o),a=0;null!=(i=s[a]);a )Mt(i,r[a]);else Mt(e,o);return r=Ft(o,"script"),r.length>0&&_t(r,!l&&Ft(e,"script")),r=s=i=null,o},buildFragment:function(e,t,n,r){var i,o,a,s,l,u,c,p=e.length,f=dt(t),d=[],h=0;for(;p>h;h )if(o=e[h],o||0===o)if("object"===x.type(o))x.merge(d,o.nodeType?[o]:o);else if(wt.test(o)){s=s||f.appendChild(t.createElement("div")),l=(bt.exec(o)||["",""])[1].toLowerCase(),c=At[l]||At._default,s.innerHTML=c[1] o.replace(vt,"<$1></$2>") c[2],i=c[0];while(i--)s=s.lastChild;if(!x.support.leadingWhitespace&&yt.test(o)&&d.push(t.createTextNode(yt.exec(o)[0])),!x.support.tbody){o="table"!==l||xt.test(o)?"<table>"!==c[1]||xt.test(o)?0:s:s.firstChild,i=o&&o.childNodes.length;while(i--)x.nodeName(u=o.childNodes[i],"tbody")&&!u.childNodes.length&&o.removeChild(u)}x.merge(d,s.childNodes),s.textContent="";while(s.firstChild)s.removeChild(s.firstChild);s=f.lastChild}else d.push(t.createTextNode(o));s&&f.removeChild(s),x.support.appendChecked||x.grep(Ft(d,"input"),Bt),h=0;while(o=d[h ])if((!r||-1===x.inArray(o,r))&&(a=x.contains(o.ownerDocument,o),s=Ft(f.appendChild(o),"script"),a&&_t(s),n)){i=0;while(o=s[i ])kt.test(o.type||"")&&n.push(o)}return s=null,f},cleanData:function(e,t){var n,r,o,a,s=0,l=x.expando,u=x.cache,c=x.support.deleteExpando,f=x.event.special;for(;null!=(n=e[s]);s )if((t||x.acceptData(n))&&(o=n[l],a=o&&u[o])){if(a.events)for(r in a.events)f[r]?x.event.remove(n,r):x.removeEvent(n,r,a.handle);</table>

u[o]&&(delete u[o],c?delete n[l]:typeof n.removeAttribute!==i?n.removeAttribute(l):n[l]=null,p.push(o))}},_evalUrl:function(e){return x.ajax({url:e,type:"GET",dataType:"script",async:!1,global:!1,"throws":!0})}}),x.fn.extend({wrapAll:function(e){if(x.isFunction(e))return this.each(function(t){x(this).wrapAll(e.call(this,t))});if(this[0]){var t=x(e,this[0].ownerDocument).eq(0).clone(!0);this[0].parentNode&&t.insertBefore(this[0]),t.map(function(){var e=this;while(e.firstChild&&1===e.firstChild.nodeType)e=e.firstChild;return e}).append(this)}return this},wrapInner:function(e){return x.isFunction(e)?this.each(function(t){x(this).wrapInner(e.call(this,t))}):this.each(function(){var t=x(this),n=t.contents();n.length?n.wrapAll(e):t.append(e)})},wrap:function(e){var t=x.isFunction(e);return this.each(function(n){x(this).wrapAll(t?e.call(this,n):e)})},unwrap:function(){return this.parent().each(function(){x.nodeName(this,"body")||x(this).replaceWith(this.childNodes)}).end()}});var Pt,Rt,Wt,$t=/alpha$[^)]*$/i,It=/opacity\s*=\s*([^)]*)/,zt=/^(top|right|bottom|left)$/,Xt=/^(none|table(?!-c[ea]). )/,Ut=/^margin/,Vt=RegExp("^(" w ")(.*)$","i"),Yt=RegExp("^(" w ")(?!px)[a-z%] $","i"),Jt=RegExp("^([ -])=(" w ")","i"),Gt={BODY:"block"},Qt={position:"absolute",visibility:"hidden",display:"block"},Kt={letterSpacing:0,fontWeight:400},Zt=["Top","Right","Bottom","Left"],en=["Webkit","O","Moz","ms"];function tn(e,t){if(t in e)return t;var n=t.charAt(0).toUpperCase() t.slice(1),r=t,i=en.length;while(i--)if(t=en[i] n,t in e)return t;return r}function nn(e,t){return e=t||e,"none"===x.css(e,"display")||!x.contains(e.ownerDocument,e)}function rn(e,t){var n,r,i,o=[],a=0,s=e.length;for(;s>a;a )r=e[a],r.style&&(o[a]=x._data(r,"olddisplay"),n=r.style.display,t?(o[a]||"none"!==n||(r.style.display=""),""===r.style.display&&nn(r)&&(o[a]=x._data(r,"olddisplay",ln(r.nodeName)))):o[a]||(i=nn(r),(n&&"none"!==n||!i)&&x._data(r,"olddisplay",i?n:x.css(r,"display"))));for(a=0;s>a;a )r=e[a],r.style&&(t&&"none"!==r.style.display&&""!==r.style.display||(r.style.display=t?o[a]||"":"none"));return e}x.fn.extend({css:function(e,n){return x.access(this,function(e,n,r){var i,o,a={},s=0;if(x.isArray(n)){for(o=Rt(e),i=n.length;i>s;s )a[n[s]]=x.css(e,n[s],!1,o);return a}return r!==t?x.style(e,n,r):x.css(e,n)},e,n,arguments.length>1)},show:function(){return rn(this,!0)},hide:function(){return rn(this)},toggle:function(e){return"boolean"==typeof e?e?this.show():this.hide():this.each(function(){nn(this)?x(this).show():x(this).hide()})}}),x.extend({cssHooks:{opacity:{get:function(e,t){if(t){var n=Wt(e,"opacity");return""===n?"1":n}}}},cssNumber:{columnCount:!0,fillOpacity:!0,fontWeight:!0,lineHeight:!0,opacity:!0,order:!0,orphans:!0,widows:!0,zIndex:!0,zoom:!0},cssProps:{"float":x.support.cssFloat?"cssFloat":"styleFloat"},style:function(e,n,r,i){if(e&&3!==e.nodeType&&8!==e.nodeType&&e.style){var o,a,s,l=x.camelCase(n),u=e.style;if(n=x.cssProps[l]||(x.cssProps[l]=tn(u,l)),s=x.cssHooks[n]||x.cssHooks[l],r===t)return s&&"get"in s&&(o=s.get(e,!1,i))!==t?o:u[n];if(a=typeof r,"string"===a&&(o=Jt.exec(r))&&(r=(o[1] 1)*o[2] parseFloat(x.css(e,n)),a="number"),!(null==r||"number"===a&&isNaN(r)||("number"!==a||x.cssNumber[l]||(r ="px"),x.support.clearCloneStyle||""!==r||0!==n.indexOf("background")||(u[n]="inherit"),s&&"set"in s&&(r=s.set(e,r,i))===t)))try{u[n]=r}catch(c){}}},css:function(e,n,r,i){var o,a,s,l=x.camelCase(n);return n=x.cssProps[l]||(x.cssProps[l]=tn(e.style,l)),s=x.cssHooks[n]||x.cssHooks[l],s&&"get"in s&&(a=s.get(e,!0,r)),a===t&&(a=Wt(e,n,i)),"normal"===a&&n in Kt&&(a=Kt[n]),""===r||r?(o=parseFloat(a),r===!0||x.isNumeric(o)?o||0:a):a}}),e.getComputedStyle?(Rt=function(t){return e.getComputedStyle(t,null)},Wt=function(e,n,r){var i,o,a,s=r||Rt(e),l=s?s.getPropertyValue(n)||s[n]:t,u=e.style;return s&&(""!==l||x.contains(e.ownerDocument,e)||(l=x.style(e,n)),Yt.test(l)&&Ut.test(n)&&(i=u.width,o=u.minWidth,a=u.maxWidth,u.minWidth=u.maxWidth=u.width=l,l=s.width,u.width=i,u.minWidth=o,u.maxWidth=a)),l}):a.documentElement.currentStyle&&(Rt=function(e){return e.currentStyle},Wt=function(e,n,r){var i,o,a,s=r||Rt(e),l=s?s[n]:t,u=e.style;return null==l&&u&&u[n]&&(l=u[n]),Yt.test(l)&&!zt.test(n)&&(i=u.left,o=e.runtimeStyle,a=o&&o.left,a&&(o.left=e.currentStyle.left),u.left="fontSize"===n?"1em":l,l=u.pixelLeft "px",u.left=i,a&&(o.left=a)),""===l?"auto":l});function on(e,t,n){var r=Vt.exec(t);return r?Math.max(0,r[1]-(n||0)) (r[2]||"px"):t}function an(e,t,n,r,i){var o=n===(r?"border":"content")?4:"width"===t?1:0,a=0;for(;4>o;o =2)"margin"===n&&(a =x.css(e,n Zt[o],!0,i)),r?("content"===n&&(a-=x.css(e,"padding" Zt[o],!0,i)),"margin"!==n&&(a-=x.css(e,"border" Zt[o] "Width",!0,i))):(a =x.css(e,"padding" Zt[o],!0,i),"padding"!==n&&(a =x.css(e,"border" Zt[o] "Width",!0,i)));return a}function sn(e,t,n){var r=!0,i="width"===t?e.offsetWidth:e.offsetHeight,o=Rt(e),a=x.support.boxSizing&&"border-box"===x.css(e,"boxSizing",!1,o);if(0>=i||null==i){if(i=Wt(e,t,o),(0>i||null==i)&&(i=e.style[t]),Yt.test(i))return i;r=a&&(x.support.boxSizingReliable||i===e.style[t]),i=parseFloat(i)||0}return i an(e,t,n||(a?"border":"content"),r,o) "px"}function ln(e){var t=a,n=Gt[e];return n||(n=un(e,t),"none"!==n&&n||(Pt=(Pt||x("<iframe frameborder="0" width="0" height="0" />").css("cssText","display:block !important")).appendTo(t.documentElement),t=(Pt[0].contentWindow||Pt[0].contentDocument).document,t.write("<!DOCTYPE html><html><body>"),t.close(),n=un(e,t),Pt.detach()),Gt[e]=n),n}function un(e,t){var n=x(t.createElement(e)).appendTo(t.body),r=x.css(n[0],"display");return n.remove(),r}x.each(["height","width"],function(e,n){x.cssHooks[n]={get:function(e,r,i){return r?0===e.offsetWidth&&Xt.test(x.css(e,"display"))?x.swap(e,Qt,function(){return sn(e,n,i)}):sn(e,n,i):t},set:function(e,t,r){var i=r&&Rt(e);return on(e,t,r?an(e,n,r,x.support.boxSizing&&"border-box"===x.css(e,"boxSizing",!1,i),i):0)}}}),x.support.opacity||(x.cssHooks.opacity={get:function(e,t){return It.test((t&&e.currentStyle?e.currentStyle.filter:e.style.filter)||"")?.01*parseFloat(RegExp.$1) "":t?"1":""},set:function(e,t){var n=e.style,r=e.currentStyle,i=x.isNumeric(t)?"alpha(opacity=" 100*t ")":"",o=r&&r.filter||n.filter||"";n.zoom=1,(t>=1||""===t)&&""===x.trim(o.replace($t,""))&&n.removeAttribute&&(n.removeAttribute("filter"),""===t||r&&!r.filter)||(n.filter=$t.test(o)?o.replace($t,i):o " " i)}}),x(function(){x.support.reliableMarginRight||(x.cssHooks.marginRight={get:function(e,n){return n?x.swap(e,{display:"inline-block"},Wt,[e,"marginRight"]):t}}),!x.support.pixelPosition&&x.fn.position&&x.each(["top","left"],function(e,n){x.cssHooks[n]={get:function(e,r){return r?(r=Wt(e,n),Yt.test(r)?x(e).position()[n] "px":r):t}}})}),x.expr&&x.expr.filters&&(x.expr.filters.hidden=function(e){return 0>=e.offsetWidth&&0>=e.offsetHeight||!x.support.reliableHiddenOffsets&&"none"===(e.style&&e.style.display||x.css(e,"display"))},x.expr.filters.visible=function(e){return!x.expr.filters.hidden(e)}),x.each({margin:"",padding:"",border:"Width"},function(e,t){x.cssHooks[e t]={expand:function(n){var r=0,i={},o="string"==typeof n?n.split(" "):[n];for(;4>r;r )i[e Zt[r] t]=o[r]||o[r-2]||o[0];return i}},Ut.test(e)||(x.cssHooks[e t].set=on)});var cn=/ /g,pn=/\[\]$/,fn=/\r?\n/g,dn=/^(?:submit|button|image|reset|file)$/i,hn=/^(?:input|select|textarea|keygen)/i;x.fn.extend({serialize:function(){return x.param(this.serializeArray())},serializeArray:function(){return this.map(function(){var e=x.prop(this,"elements");return e?x.makeArray(e):this}).filter(function(){var e=this.type;return this.name&&!x(this).is(":disabled")&&hn.test(this.nodeName)&&!dn.test(e)&&(this.checked||!Ct.test(e))}).map(function(e,t){var n=x(this).val();return null==n?null:x.isArray(n)?x.map(n,function(e){return{name:t.name,value:e.replace(fn,"\r\n")}}):{name:t.name,value:n.replace(fn,"\r\n")}}).get()}}),x.param=function(e,n){var r,i=[],o=function(e,t){t=x.isFunction(t)?t():null==t?"":t,i[i.length]=encodeURIComponent(e) "=" encodeURIComponent(t)};if(n===t&&(n=x.ajaxSettings&&x.ajaxSettings.traditional),x.isArray(e)||e.jquery&&!x.isPlainObject(e))x.each(e,function(){o(this.name,this.value)});else for(r in e)gn(r,e[r],n,o);return i.join("&").replace(cn," ")};function gn(e,t,n,r){var i;if(x.isArray(t))x.each(t,function(t,i){n||pn.test(e)?r(e,i):gn(e "[" ("object"==typeof i?t:"") "]",i,n,r)});else if(n||"object"!==x.type(t))r(e,t);else for(i in t)gn(e "[" i "]",t[i],n,r)}x.each("blur focus focusin focusout load resize scroll unload click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave change select submit keydown keypress keyup error contextmenu".split(" "),function(e,t){x.fn[t]=function(e,n){return arguments.length>0?this.on(t,null,e,n):this.trigger(t)}}),x.fn.extend({hover:function(e,t){return this.mouseenter(e).mouseleave(t||e)},bind:function(e,t,n){return this.on(e,null,t,n)},unbind:function(e,t){return this.off(e,null,t)},delegate:function(e,t,n,r){return this.on(t,e,n,r)},undelegate:function(e,t,n){return 1===arguments.length?this.off(e,"**"):this.off(t,e||"**",n)}});var mn,yn,vn=x.now(),bn=/\?/,xn=/#.*$/,wn=/([?&])_=[^&]*/,Tn=/^(.*?):[ \t]*([^\r\n]*)\r?$/gm,Cn=/^(?:about|app|app-storage|. -extension|file|res|widget):$/,Nn=/^(?:GET|HEAD)$/,kn=/^\/\//,En=/^([\w. -] :)(?:\/\/([^\/?#:]*)(?::(\d )|)|)/,Sn=x.fn.load,An={},jn={},Dn="*/".concat("*");try{yn=o.href}catch(Ln){yn=a.createElement("a"),yn.href="",yn=yn.href}mn=En.exec(yn.toLowerCase())||[];function Hn(e){return function(t,n){"string"!=typeof t&&(n=t,t="*");var r,i=0,o=t.toLowerCase().match(T)||[];if(x.isFunction(n))while(r=o[i ])" "===r[0]?(r=r.slice(1)||"*",(e[r]=e[r]||[]).unshift(n)):(e[r]=e[r]||[]).push(n)}}function qn(e,n,r,i){var o={},a=e===jn;function s(l){var u;return o[l]=!0,x.each(e[l]||[],function(e,l){var c=l(n,r,i);return"string"!=typeof c||a||o[c]?a?!(u=c):t:(n.dataTypes.unshift(c),s(c),!1)}),u}return s(n.dataTypes[0])||!o["*"]&&s("*")}function _n(e,n){var r,i,o=x.ajaxSettings.flatOptions||{};for(i in n)n[i]!==t&&((o[i]?e:r||(r={}))[i]=n[i]);return r&&x.extend(!0,e,r),e}x.fn.load=function(e,n,r){if("string"!=typeof e&&Sn)return Sn.apply(this,arguments);var i,o,a,s=this,l=e.indexOf(" ");return l>=0&&(i=e.slice(l,e.length),e=e.slice(0,l)),x.isFunction(n)?(r=n,n=t):n&&"object"==typeof n&&(a="POST"),s.length>0&&x.ajax({url:e,type:a,dataType:"html",data:n}).done(function(e){o=arguments,s.html(i?x("<div>").append(x.parseHTML(e)).find(i):e)}).complete(r&&function(e,t){s.each(r,o||[e.responseText,t,e])}),this},x.each(["ajaxStart","ajaxStop","ajaxComplete","ajaxError","ajaxSuccess","ajaxSend"],function(e,t){x.fn[t]=function(e){return this.on(t,e)}}),x.extend({active:0,lastModified:{},etag:{},ajaxSettings:{url:yn,type:"GET",isLocal:Cn.test(mn[1]),global:!0,processData:!0,async:!0,contentType:"application/x-www-form-urlencoded; charset=UTF-8",accepts:{"*":Dn,text:"text/plain",html:"text/html",xml:"application/xml, text/xml",json:"application/json, text/javascript"},contents:{xml:/xml/,html:/html/,json:/json/},responseFields:{xml:"responseXML",text:"responseText",json:"responseJSON"},converters:{"* text":String,"text html":!0,"text json":x.parseJSON,"text xml":x.parseXML},flatOptions:{url:!0,context:!0}},ajaxSetup:function(e,t){return t?_n(_n(e,x.ajaxSettings),t):_n(x.ajaxSettings,e)},ajaxPrefilter:Hn(An),ajaxTransport:Hn(jn),ajax:function(e,n){"object"==typeof e&&(n=e,e=t),n=n||{};var r,i,o,a,s,l,u,c,p=x.ajaxSetup({},n),f=p.context||p,d=p.context&&(f.nodeType||f.jquery)?x(f):x.event,h=x.Deferred(),g=x.Callbacks("once memory"),m=p.statusCode||{},y={},v={},b=0,w="canceled",C={readyState:0,getResponseHeader:function(e){var t;if(2===b){if(!c){c={};while(t=Tn.exec(a))c[t[1].toLowerCase()]=t[2]}t=c[e.toLowerCase()]}return null==t?null:t},getAllResponseHeaders:function(){return 2===b?a:null},setRequestHeader:function(e,t){var n=e.toLowerCase();return b||(e=v[n]=v[n]||e,y[e]=t),this},overrideMimeType:function(e){return b||(p.mimeType=e),this},statusCode:function(e){var t;if(e)if(2>b)for(t in e)m[t]=[m[t],e[t]];else C.always(e[C.status]);return this},abort:function(e){var t=e||w;return u&&u.abort(t),k(0,t),this}};if(h.promise(C).complete=g.add,C.success=C.done,C.error=C.fail,p.url=((e||p.url||yn) "").replace(xn,"").replace(kn,mn[1] "//"),p.type=n.method||n.type||p.method||p.type,p.dataTypes=x.trim(p.dataType||"*").toLowerCase().match(T)||[""],null==p.crossDomain&&(r=En.exec(p.url.toLowerCase()),p.crossDomain=!(!r||r[1]===mn[1]&&r[2]===mn[2]&&(r[3]||("http:"===r[1]?"80":"443"))===(mn[3]||("http:"===mn[1]?"80":"443")))),p.data&&p.processData&&"string"!=typeof p.data&&(p.data=x.param(p.data,p.traditional)),qn(An,p,n,C),2===b)return C;l=p.global,l&&0===x.active &&x.event.trigger("ajaxStart"),p.type=p.type.toUpperCase(),p.hasContent=!Nn.test(p.type),o=p.url,p.hasContent||(p.data&&(o=p.url =(bn.test(o)?"&":"?") p.data,delete p.data),p.cache===!1&&(p.url=wn.test(o)?o.replace(wn,"$1_=" vn ):o (bn.test(o)?"&":"?") "_=" vn )),p.ifModified&&(x.lastModified[o]&&C.setRequestHeader("If-Modified-Since",x.lastModified[o]),x.etag[o]&&C.setRequestHeader("If-None-Match",x.etag[o])),(p.data&&p.hasContent&&p.contentType!==!1||n.contentType)&&C.setRequestHeader("Content-Type",p.contentType),C.setRequestHeader("Accept",p.dataTypes[0]&&p.accepts[p.dataTypes[0]]?p.accepts[p.dataTypes[0]] ("*"!==p.dataTypes[0]?", " Dn "; q=0.01":""):p.accepts["*"]);for(i in p.headers)C.setRequestHeader(i,p.headers[i]);if(p.beforeSend&&(p.beforeSend.call(f,C,p)===!1||2===b))return C.abort();w="abort";for(i in{success:1,error:1,complete:1})C[i](p[i]);if(u=qn(jn,p,n,C)){C.readyState=1,l&&d.trigger("ajaxSend",[C,p]),p.async&&p.timeout>0&&(s=setTimeout(function(){C.abort("timeout")},p.timeout));try{b=1,u.send(y,k)}catch(N){if(!(2>b))throw N;k(-1,N)}}else k(-1,"No Transport");function k(e,n,r,i){var c,y,v,w,T,N=n;2!==b&&(b=2,s&&clearTimeout(s),u=t,a=i||"",C.readyState=e>0?4:0,c=e>=200&&300>e||304===e,r&&(w=Mn(p,C,r)),w=On(p,w,C,c),c?(p.ifModified&&(T=C.getResponseHeader("Last-Modified"),T&&(x.lastModified[o]=T),T=C.getResponseHeader("etag"),T&&(x.etag[o]=T)),204===e||"HEAD"===p.type?N="nocontent":304===e?N="notmodified":(N=w.state,y=w.data,v=w.error,c=!v)):(v=N,(e||!N)&&(N="error",0>e&&(e=0))),C.status=e,C.statusText=(n||N) "",c?h.resolveWith(f,[y,N,C]):h.rejectWith(f,[C,N,v]),C.statusCode(m),m=t,l&&d.trigger(c?"ajaxSuccess":"ajaxError",[C,p,c?y:v]),g.fireWith(f,[C,N]),l&&(d.trigger("ajaxComplete",[C,p]),--x.active||x.event.trigger("ajaxStop")))}return C},getJSON:function(e,t,n){return x.get(e,t,n,"json")},getScript:function(e,n){return x.get(e,t,n,"script")}}),x.each(["get","post"],function(e,n){x[n]=function(e,r,i,o){return x.isFunction(r)&&(o=o||i,i=r,r=t),x.ajax({url:e,type:n,dataType:o,data:r,success:i})}});function Mn(e,n,r){var i,o,a,s,l=e.contents,u=e.dataTypes;while("*"===u[0])u.shift(),o===t&&(o=e.mimeType||n.getResponseHeader("Content-Type"));if(o)for(s in l)if(l[s]&&l[s].test(o)){u.unshift(s);break}if(u[0]in r)a=u[0];else{for(s in r){if(!u[0]||e.converters[s " " u[0]]){a=s;break}i||(i=s)}a=a||i}return a?(a!==u[0]&&u.unshift(a),r[a]):t}function On(e,t,n,r){var i,o,a,s,l,u={},c=e.dataTypes.slice();if(c[1])for(a in e.converters)u[a.toLowerCase()]=e.converters[a];o=c.shift();while(o)if(e.responseFields[o]&&(n[e.responseFields[o]]=t),!l&&r&&e.dataFilter&&(t=e.dataFilter(t,e.dataType)),l=o,o=c.shift())if("*"===o)o=l;else if("*"!==l&&l!==o){if(a=u[l " " o]||u["* " o],!a)for(i in u)if(s=i.split(" "),s[1]===o&&(a=u[l " " s[0]]||u["* " s[0]])){a===!0?a=u[i]:u[i]!==!0&&(o=s[0],c.unshift(s[1]));break}if(a!==!0)if(a&&e["throws"])t=a(t);else try{t=a(t)}catch(p){return{state:"parsererror",error:a?p:"No conversion from " l " to " o}}}return{state:"success",data:t}}x.ajaxSetup({accepts:{script:"text/javascript, application/javascript, application/ecmascript, application/x-ecmascript"},contents:{script:/(?:java|ecma)script/},converters:{"text script":function(e){return x.globalEval(e),e}}}),x.ajaxPrefilter("script",function(e){e.cache===t&&(e.cache=!1),e.crossDomain&&(e.type="GET",e.global=!1)}),x.ajaxTransport("script",function(e){if(e.crossDomain){var n,r=a.head||x("head")[0]||a.documentElement;return{send:function(t,i){n=a.createElement("script"),n.async=!0,e.scriptCharset&&(n.charset=e.scriptCharset),n.src=e.url,n.onload=n.onreadystatechange=function(e,t){(t||!n.readyState||/loaded|complete/.test(n.readyState))&&(n.onload=n.onreadystatechange=null,n.parentNode&&n.parentNode.removeChild(n),n=null,t||i(200,"success"))},r.insertBefore(n,r.firstChild)},abort:function(){n&&n.onload(t,!0)}}}});var Fn=[],Bn=/(=)\?(?=&|$)|\?\?/;x.ajaxSetup({jsonp:"callback",jsonpCallback:function(){var e=Fn.pop()||x.expando "_" vn ;return this[e]=!0,e}}),x.ajaxPrefilter("json jsonp",function(n,r,i){var o,a,s,l=n.jsonp!==!1&&(Bn.test(n.url)?"url":"string"==typeof n.data&&!(n.contentType||"").indexOf("application/x-www-form-urlencoded")&&Bn.test(n.data)&&"data");return l||"jsonp"===n.dataTypes[0]?(o=n.jsonpCallback=x.isFunction(n.jsonpCallback)?n.jsonpCallback():n.jsonpCallback,l?n[l]=n[l].replace(Bn,"$1" o):n.jsonp!==!1&&(n.url =(bn.test(n.url)?"&":"?") n.jsonp "=" o),n.converters["script json"]=function(){return s||x.error(o " was not called"),s[0]},n.dataTypes[0]="json",a=e[o],e[o]=function(){s=arguments},i.always(function(){e[o]=a,n[o]&&(n.jsonpCallback=r.jsonpCallback,Fn.push(o)),s&&x.isFunction(a)&&a(s[0]),s=a=t}),"script"):t});var Pn,Rn,Wn=0,$n=e.ActiveXObject&&function(){var e;for(e in Pn)Pn[e](t,!0)};function In(){try{return new e.XMLHttpRequest}catch(t){}}function zn(){try{return new e.ActiveXObject("Microsoft.XMLHTTP")}catch(t){}}x.ajaxSettings.xhr=e.ActiveXObject?function(){return!this.isLocal&&In()||zn()}:In,Rn=x.ajaxSettings.xhr(),x.support.cors=!!Rn&&"withCredentials"in Rn,Rn=x.support.ajax=!!Rn,Rn&&x.ajaxTransport(function(n){if(!n.crossDomain||x.support.cors){var r;return{send:function(i,o){var a,s,l=n.xhr();if(n.username?l.open(n.type,n.url,n.async,n.username,n.password):l.open(n.type,n.url,n.async),n.xhrFields)for(s in n.xhrFields)l[s]=n.xhrFields[s];n.mimeType&&l.overrideMimeType&&l.overrideMimeType(n.mimeType),n.crossDomain||i["X-Requested-With"]||(i["X-Requested-With"]="XMLHttpRequest");try{for(s in i)l.setRequestHeader(s,i[s])}catch(u){}l.send(n.hasContent&&n.data||null),r=function(e,i){var s,u,c,p;try{if(r&&(i||4===l.readyState))if(r=t,a&&(l.onreadystatechange=x.noop,$n&&delete Pn[a]),i)4!==l.readyState&&l.abort();else{p={},s=l.status,u=l.getAllResponseHeaders(),"string"==typeof l.responseText&&(p.text=l.responseText);try{c=l.statusText}catch(f){c=""}s||!n.isLocal||n.crossDomain?1223===s&&(s=204):s=p.text?200:404}}catch(d){i||o(-1,d)}p&&o(s,c,p,u)},n.async?4===l.readyState?setTimeout(r):(a= Wn,$n&&(Pn||(Pn={},x(e).unload($n)),Pn[a]=r),l.onreadystatechange=r):r()},abort:function(){r&&r(t,!0)}}}});var Xn,Un,Vn=/^(?:toggle|show|hide)$/,Yn=RegExp("^(?:([ -])=|)(" w ")([a-z%]*)$","i"),Jn=/queueHooks$/,Gn=[nr],Qn={"*":[function(e,t){var n=this.createTween(e,t),r=n.cur(),i=Yn.exec(t),o=i&&i[3]||(x.cssNumber[e]?"":"px"),a=(x.cssNumber[e]||"px"!==o&& r)&&Yn.exec(x.css(n.elem,e)),s=1,l=20;if(a&&a[3]!==o){o=o||a[3],i=i||[],a= r||1;do s=s||".5",a/=s,x.style(n.elem,e,a o);while(s!==(s=n.cur()/r)&&1!==s&&--l)}return i&&(a=n.start= a|| r||0,n.unit=o,n.end=i[1]?a (i[1] 1)*i[2]: i[2]),n}]};function Kn(){return setTimeout(function(){Xn=t}),Xn=x.now()}function Zn(e,t,n){var r,i=(Qn[t]||[]).concat(Qn["*"]),o=0,a=i.length;for(;a>o;o )if(r=i[o].call(n,t,e))return r}function er(e,t,n){var r,i,o=0,a=Gn.length,s=x.Deferred().always(function(){delete l.elem}),l=function(){if(i)return!1;var t=Xn||Kn(),n=Math.max(0,u.startTime u.duration-t),r=n/u.duration||0,o=1-r,a=0,l=u.tweens.length;for(;l>a;a )u.tweens[a].run(o);return s.notifyWith(e,[u,o,n]),1>o&&l?n:(s.resolveWith(e,[u]),!1)},u=s.promise({elem:e,props:x.extend({},t),opts:x.extend(!0,{specialEasing:{}},n),originalProperties:t,originalOptions:n,startTime:Xn||Kn(),duration:n.duration,tweens:[],createTween:function(t,n){var r=x.Tween(e,u.opts,t,n,u.opts.specialEasing[t]||u.opts.easing);return u.tweens.push(r),r},stop:function(t){var n=0,r=t?u.tweens.length:0;if(i)return this;for(i=!0;r>n;n )u.tweens[n].run(1);return t?s.resolveWith(e,[u,t]):s.rejectWith(e,[u,t]),this}}),c=u.props;for(tr(c,u.opts.specialEasing);a>o;o )if(r=Gn[o].call(u,e,c,u.opts))return r;return x.map(c,Zn,u),x.isFunction(u.opts.start)&&u.opts.start.call(e,u),x.fx.timer(x.extend(l,{elem:e,anim:u,queue:u.opts.queue})),u.progress(u.opts.progress).done(u.opts.done,u.opts.complete).fail(u.opts.fail).always(u.opts.always)}function tr(e,t){var n,r,i,o,a;for(n in e)if(r=x.camelCase(n),i=t[r],o=e[n],x.isArray(o)&&(i=o[1],o=e[n]=o[0]),n!==r&&(e[r]=o,delete e[n]),a=x.cssHooks[r],a&&"expand"in a){o=a.expand(o),delete e[r];for(n in o)n in e||(e[n]=o[n],t[n]=i)}else t[r]=i}x.Animation=x.extend(er,{tweener:function(e,t){x.isFunction(e)?(t=e,e=["*"]):e=e.split(" ");var n,r=0,i=e.length;for(;i>r;r )n=e[r],Qn[n]=Qn[n]||[],Qn[n].unshift(t)},prefilter:function(e,t){t?Gn.unshift(e):Gn.push(e)}});function nr(e,t,n){var r,i,o,a,s,l,u=this,c={},p=e.style,f=e.nodeType&&nn(e),d=x._data(e,"fxshow");n.queue||(s=x._queueHooks(e,"fx"),null==s.unqueued&&(s.unqueued=0,l=s.empty.fire,s.empty.fire=function(){s.unqueued||l()}),s.unqueued ,u.always(function(){u.always(function(){s.unqueued--,x.queue(e,"fx").length||s.empty.fire()})})),1===e.nodeType&&("height"in t||"width"in t)&&(n.overflow=[p.overflow,p.overflowX,p.overflowY],"inline"===x.css(e,"display")&&"none"===x.css(e,"float")&&(x.support.inlineBlockNeedsLayout&&"inline"!==ln(e.nodeName)?p.zoom=1:p.display="inline-block")),n.overflow&&(p.overflow="hidden",x.support.shrinkWrapBlocks||u.always(function(){p.overflow=n.overflow[0],p.overflowX=n.overflow[1],p.overflowY=n.overflow[2]}));for(r in t)if(i=t[r],Vn.exec(i)){if(delete t[r],o=o||"toggle"===i,i===(f?"hide":"show"))continue;c[r]=d&&d[r]||x.style(e,r)}if(!x.isEmptyObject(c)){d?"hidden"in d&&(f=d.hidden):d=x._data(e,"fxshow",{}),o&&(d.hidden=!f),f?x(e).show():u.done(function(){x(e).hide()}),u.done(function(){var t;x._removeData(e,"fxshow");for(t in c)x.style(e,t,c[t])});for(r in c)a=Zn(f?d[r]:0,r,u),r in d||(d[r]=a.start,f&&(a.end=a.start,a.start="width"===r||"height"===r?1:0))}}function rr(e,t,n,r,i){return new rr.prototype.init(e,t,n,r,i)}x.Tween=rr,rr.prototype={constructor:rr,init:function(e,t,n,r,i,o){this.elem=e,this.prop=n,this.easing=i||"swing",this.options=t,this.start=this.now=this.cur(),this.end=r,this.unit=o||(x.cssNumber[n]?"":"px")},cur:function(){var e=rr.propHooks[this.prop];return e&&e.get?e.get(this):rr.propHooks._default.get(this)},run:function(e){var t,n=rr.propHooks[this.prop];return this.pos=t=this.options.duration?x.easing[this.easing](e,this.options.duration*e,0,1,this.options.duration):e,this.now=(this.end-this.start)*t this.start,this.options.step&&this.options.step.call(this.elem,this.now,this),n&&n.set?n.set(this):rr.propHooks._default.set(this),this}},rr.prototype.init.prototype=rr.prototype,rr.propHooks={_default:{get:function(e){var t;return null==e.elem[e.prop]||e.elem.style&&null!=e.elem.style[e.prop]?(t=x.css(e.elem,e.prop,""),t&&"auto"!==t?t:0):e.elem[e.prop]},set:function(e){x.fx.step[e.prop]?x.fx.step[e.prop](e):e.elem.style&&(null!=e.elem.style[x.cssProps[e.prop]]||x.cssHooks[e.prop])?x.style(e.elem,e.prop,e.now e.unit):e.elem[e.prop]=e.now}}},rr.propHooks.scrollTop=rr.propHooks.scrollLeft={set:function(e){e.elem.nodeType&&e.elem.parentNode&&(e.elem[e.prop]=e.now)}},x.each(["toggle","show","hide"],function(e,t){var n=x.fn[t];x.fn[t]=function(e,r,i){return null==e||"boolean"==typeof e?n.apply(this,arguments):this.animate(ir(t,!0),e,r,i)}}),x.fn.extend({fadeTo:function(e,t,n,r){return this.filter(nn).css("opacity",0).show().end().animate({opacity:t},e,n,r)},animate:function(e,t,n,r){var i=x.isEmptyObject(e),o=x.speed(t,n,r),a=function(){var t=er(this,x.extend({},e),o);(i||x._data(this,"finish"))&&t.stop(!0)};return a.finish=a,i||o.queue===!1?this.each(a):this.queue(o.queue,a)},stop:function(e,n,r){var i=function(e){var t=e.stop;delete e.stop,t(r)};return"string"!=typeof e&&(r=n,n=e,e=t),n&&e!==!1&&this.queue(e||"fx",[]),this.each(function(){var t=!0,n=null!=e&&e "queueHooks",o=x.timers,a=x._data(this);if(n)a[n]&&a[n].stop&&i(a[n]);else for(n in a)a[n]&&a[n].stop&&Jn.test(n)&&i(a[n]);for(n=o.length;n--;)o[n].elem!==this||null!=e&&o[n].queue!==e||(o[n].anim.stop(r),t=!1,o.splice(n,1));(t||!r)&&x.dequeue(this,e)})},finish:function(e){return e!==!1&&(e=e||"fx"),this.each(function(){var t,n=x._data(this),r=n[e "queue"],i=n[e "queueHooks"],o=x.timers,a=r?r.length:0;for(n.finish=!0,x.queue(this,e,[]),i&&i.stop&&i.stop.call(this,!0),t=o.length;t--;)o[t].elem===this&&o[t].queue===e&&(o[t].anim.stop(!0),o.splice(t,1));for(t=0;a>t;t )r[t]&&r[t].finish&&r[t].finish.call(this);delete n.finish})}});function ir(e,t){var n,r={height:e},i=0;for(t=t?1:0;4>i;i =2-t)n=Zt[i],r["margin" n]=r["padding" n]=e;return t&&(r.opacity=r.width=e),r}x.each({slideDown:ir("show"),slideUp:ir("hide"),slideToggle:ir("toggle"),fadeIn:{opacity:"show"},fadeOut:{opacity:"hide"},fadeToggle:{opacity:"toggle"}},function(e,t){x.fn[e]=function(e,n,r){return this.animate(t,e,n,r)}}),x.speed=function(e,t,n){var r=e&&"object"==typeof e?x.extend({},e):{complete:n||!n&&t||x.isFunction(e)&&e,duration:e,easing:n&&t||t&&!x.isFunction(t)&&t};return r.duration=x.fx.off?0:"number"==typeof r.duration?r.duration:r.duration in x.fx.speeds?x.fx.speeds[r.duration]:x.fx.speeds._default,(null==r.queue||r.queue===!0)&&(r.queue="fx"),r.old=r.complete,r.complete=function(){x.isFunction(r.old)&&r.old.call(this),r.queue&&x.dequeue(this,r.queue)},r},x.easing={linear:function(e){return e},swing:function(e){return.5-Math.cos(e*Math.PI)/2}},x.timers=[],x.fx=rr.prototype.init,x.fx.tick=function(){var e,n=x.timers,r=0;for(Xn=x.now();n.length>r;r )e=n[r],e()||n[r]!==e||n.splice(r--,1);n.length||x.fx.stop(),Xn=t},x.fx.timer=function(e){e()&&x.timers.push(e)&&x.fx.start()},x.fx.interval=13,x.fx.start=function(){Un||(Un=setInterval(x.fx.tick,x.fx.interval))},x.fx.stop=function(){clearInterval(Un),Un=null},x.fx.speeds={slow:600,fast:200,_default:400},x.fx.step={},x.expr&&x.expr.filters&&(x.expr.filters.animated=function(e){return x.grep(x.timers,function(t){return e===t.elem}).length}),x.fn.offset=function(e){if(arguments.length)return e===t?this:this.each(function(t){x.offset.setOffset(this,e,t)});var n,r,o={top:0,left:0},a=this[0],s=a&&a.ownerDocument;if(s)return n=s.documentElement,x.contains(n,a)?(typeof a.getBoundingClientRect!==i&&(o=a.getBoundingClientRect()),r=or(s),{top:o.top (r.pageYOffset||n.scrollTop)-(n.clientTop||0),left:o.left (r.pageXOffset||n.scrollLeft)-(n.clientLeft||0)}):o},x.offset={setOffset:function(e,t,n){var r=x.css(e,"position");"static"===r&&(e.style.position="relative");var i=x(e),o=i.offset(),a=x.css(e,"top"),s=x.css(e,"left"),l=("absolute"===r||"fixed"===r)&&x.inArray("auto",[a,s])>-1,u={},c={},p,f;l?(c=i.position(),p=c.top,f=c.left):(p=parseFloat(a)||0,f=parseFloat(s)||0),x.isFunction(t)&&(t=t.call(e,n,o)),null!=t.top&&(u.top=t.top-o.top p),null!=t.left&&(u.left=t.left-o.left f),"using"in t?t.using.call(e,u):i.css(u)}},x.fn.extend({position:function(){if(this[0]){var e,t,n={top:0,left:0},r=this[0];return"fixed"===x.css(r,"position")?t=r.getBoundingClientRect():(e=this.offsetParent(),t=this.offset(),x.nodeName(e[0],"html")||(n=e.offset()),n.top =x.css(e[0],"borderTopWidth",!0),n.left =x.css(e[0],"borderLeftWidth",!0)),{top:t.top-n.top-x.css(r,"marginTop",!0),left:t.left-n.left-x.css(r,"marginLeft",!0)}}},offsetParent:function(){return this.map(function(){var e=this.offsetParent||s;while(e&&!x.nodeName(e,"html")&&"static"===x.css(e,"position"))e=e.offsetParent;return e||s})}}),x.each({scrollLeft:"pageXOffset",scrollTop:"pageYOffset"},function(e,n){var r=/Y/.test(n);x.fn[e]=function(i){return x.access(this,function(e,i,o){var a=or(e);return o===t?a?n in a?a[n]:a.document.documentElement[i]:e[i]:(a?a.scrollTo(r?x(a).scrollLeft():o,r?o:x(a).scrollTop()):e[i]=o,t)},e,i,arguments.length,null)}});function or(e){return x.isWindow(e)?e:9===e.nodeType?e.defaultView||e.parentWindow:!1}x.each({Height:"height",Width:"width"},function(e,n){x.each({padding:"inner" e,content:n,"":"outer" e},function(r,i){x.fn[i]=function(i,o){var a=arguments.length&&(r||"boolean"!=typeof i),s=r||(i===!0||o===!0?"margin":"border");return x.access(this,function(n,r,i){var o;return x.isWindow(n)?n.document.documentElement["client" e]:9===n.nodeType?(o=n.documentElement,Math.max(n.body["scroll" e],o["scroll" e],n.body["offset" e],o["offset" e],o["client" e])):i===t?x.css(n,r,s):x.style(n,r,i,s)},n,a?i:t,a,null)}})}),x.fn.size=function(){return this.length},x.fn.andSelf=x.fn.addBack,"object"==typeof module&&module&&"object"==typeof module.exports?module.exports=x:(e.jQuery=e.$=x,"function"==typeof define&&define.amd&&define("jquery",[],function(){return x}))})(window);</div></body></html>

"textL15": "PT_Starts when Windows starts",

"textL49": "PT_Portughese",

"textL15": "ES_Starts when Windows starts",

"textL49": "ES_Portughese",

.borderRadius{-moz-border-radius:5px; border-radius:5px; }

.borderRadiusTp{-moz-border-radius:5px 5px 0 0; border-radius:5px 5px 0 0;}

.borderRadiusBtm{-moz-border-radius:0 0 5px 5px ; border-radius:0 0 5px 5px;}

.ddcommon {position:relative;display:-moz-inline-stack; zoom:1; display:inline-block; *display:inline; cursor:default;}

.ddcommon ul{padding:0;margin:0;}

.ddcommon ul li{list-style-type:none;}

.borderRadiusTp ul li:last-child{-moz-border-radius:0 0 5px 5px ; border-radius:0 0 5px 5px;border-bottom:0 none #c3c3c3; }

.borderRadiusBtm ul li:first-child{-moz-border-radius:5px 5px 0 0; border-radius:5px 5px 0 0 ;border-bottom:1 solid #c3c3c3; }

.ddcommon .disabled img, .ddcommon .disabled span, .ddcommon.disabledAll{

opacity: .5; /* standard: ff gt 1.5, opera, safari */

.ddcommon .clear{clear:both}

.ddcommon .shadow{-moz-box-shadow:5px 5px 5px -5px #888888;-webkit-box-shadow:5px 5px 5px -5px #888888;box-shadow: 5px 5px 5px -5px #888888;}

.ddcommon input.text{color:#7e7e7e;padding:0 0 0 0; position:absolute; background:#fff; display:block; width:98%; height:98%; left:2px; top:0; border:none;}

.ddOutOfVision{position:relative; display:-moz-inline-stack; display:inline-block; zoom:1; *display:inline;}

.borderRadius .shadow{-moz-box-shadow:5px 5px 5px -5px #888888;-webkit-box-shadow:5px 5px 5px -5px #888888;box-shadow: 5px 5px 5px -5px #888888;}

.borderRadiusBtm .shadow{-moz-box-shadow:-5px -5px 5px -5px #888888;-webkit-box-shadow:-5px -5px 5px -5px #888888;box-shadow: -5px -5px 5px -5px #888888}

.borderRadiusTp .border, .borderRadius .border{-moz-border-radius:0 0 5px 5px ; border-radius:0 0 5px 5px;}

.borderRadiusBtm .border{-moz-border-radius:5px 5px 0 0; border-radius:5px 5px 0 0;}

img.fnone{float:none !important}

.ddcommon .divider{width:0; height:100%; position:absolute;}

.ddcommon .ddArrow{display:inline-block; position:absolute; top:50%; right:4px;}

.ddcommon .ddArrow:hover{background-position:0 100%;}

.ddcommon .ddTitle{padding:0; position:relative; display:inline-block; width:100%}

.ddcommon .ddTitle .ddTitleText{display:block;}

.ddcommon .ddTitle .ddTitleText .ddTitleText{padding:0;}

.ddcommon .ddTitle .description{display:block;}

.ddcommon .ddTitle .ddTitleText img{position:relative; vertical-align:middle; float:left}

.ddcommon .ddChild{position:absolute;display:none;width:100%;overflow-y:auto; overflow-x:hidden; zoom:1; z-index:9999}

.ddcommon .ddChild li{clear:both;}

.ddcommon .ddChild li .description{display:block;}

.ddcommon .ddChild li img{border:0 none; position:relative;vertical-align:middle;float:left}

.ddcommon .ddChild li.optgroup{padding:0;}

.ddcommon .ddChild li.optgroup .optgroupTitle{padding:0 5px; font-weight:bold; font-style:italic}

.ddcommon .ddChild li.optgroup ul li{padding:5px 5px 5px 15px}

.ddcommon .noBorderTop{border-top:none 0 !important; padding:0; margin:0;}

.dd{border:1px solid #c3c3c3;}

.dd .divider{border-left:1px solid #c3c3c3; border-right:1px solid #fff;; right:24px;}

.dd .ddArrow{width:16px;height:16px; margin-top:-8px; background:url(img/dd_arrow.gif) no-repeat;}

.dd .ddArrow:hover{background-position:0 100%;}

.dd .ddTitle{color:#000;background:#e2e2e4 url(img/title-bg.gif) repeat-x left top;}

.dd .ddTitle .ddTitleText{padding:5px 20px 5px 5px;}

.dd .ddTitle .ddTitleText .ddTitleText{padding:0;}

.dd .ddTitle .description{font-size:12px; color:#666}

.dd .ddTitle .ddTitleText img{padding-right:5px;}

.dd .ddChild{border:1px solid #c3c3c3; background-color:#fff; left:-1px;}

.dd .ddChild li{padding:5px; background-color:#fff; border-bottom:1px solid #c3c3c3;}

.dd .ddChild li .description{color:#666;}

.dd .ddChild li .ddlabel{color:#333;}

.dd .ddChild li.hover{background-color:#f2f2f2}

.dd .ddChild li img{padding:0 6px 0 0;}

.dd .ddChild li.optgroup{padding:0;}

.dd .ddChild li.optgroup .optgroupTitle{padding:0 5px; font-weight:bold; font-style:italic}

.dd .ddChild li.optgroup ul li{padding:5px 5px 5px 15px}

.dd .ddChild li.selected{background-color:#d5d5d5; color:#000;}

$('.android-notifications').find('ul').scroll(function(){

O//this function is called from QT, put here all the code to execute once the page is completly loaded. it must return true

var text = mainWindowJS.get_localized_text;

myJson = ($.parseJSON(text));

mainWindowJS.doCloseApp(true);

mainWindowJS.startAnalyzeComplete();

mainWindowJS.doMinimizeApp(false);

mainWindowJS.doMinimizeApp(true);

mainWindowJS.doFeedback(data);

mainWindowJS.doSettings(data);

mainWindowJS.doAppUpdate(data);

mainWindowJS.doRefresh.connect(function (data)

if(data.soft == 1)

retVal = data.lastCheckS;

else if(data.android == 1)

retVal = data.lastCheckA;

$('#lastCheck').html(retVal["lastCheck"]);

$('#installed').html(retVal["softwares"]);

$('#updates').html(retVal["updates"]);

$('#android').html(retVal["android"]);

var progressLabel1 = document.querySelector("#scanSoft1");

var progressLabel3 = document.querySelector("#scanSoft3");

var valCurrent = (retProgress_r * 100.0 / retTotal_r).toFixed(2) "%";

progressLabel3.style.width = valCurrent;

progressLabel3.style.width = "0%";

mainWindowJS.startAnalyze(data, data2, data3);

mainWindowJS.startAnalyzeRemote(data,true);

mainWindowJS.analysisDone.connect(function (data, data2)

$('#installed').html(data.total);

$('#auto-update').empty();

$('#none-update').empty();

$.each(data.updateList, function(item) {

var newVersion = (1 == data.updateList[item].update) ? '<p class="new-version">' myJson["textL36"] '<span>' data.updateList[item].update_version '</span></p>' : ' ';

var appendText = '<li class="clearfix"><img src="' data.updateList[item].icon '" /><p class="app-name">' data.updateList[item].name '<span> ' data.updateList[item].version '</span>' newVersion '</p><ul>' (1== data.updateList[item].launch? '<li> <a href="javascript:doAppLaunch(\'' data.updateList[item].appID '\');">' myJson["textL33"] '</a></li> ': '' ) '<li> <a href="javascript:doAppUninstall(\'' data.updateList[item].appID '\');">' myJson["textL34"] '</a></li><li> <a href="javascript:doAppSettings(\'' data.updateList[item].appID '\');"><img src="img/ranch-icon.png" /></a></li></ul>';</li>

if(1== data.updateList[item].update)

appendText = appendText '<input type="checkbox" checked name="options[]" value="' data.updateList[item].appID '" /><a href="javascript:doAppUpdate(\'' data.updateList[item].appID '\');" class="btn">' myJson["textL35"] '</a>';

$('#auto-update').append(autoUpdateListBlock);

$('#none-update').append(noneUpdateListBlock);

$('#aUpdates').html(data.aUpdates);

$('#mUpdates').html(data.mUpdates);

if(data.aUpdates > 0)

document.querySelector("#soft_updateList").hidden = false;

document.querySelector("#auto-update").hidden = false;

document.querySelector("#soft_updateList").hidden = true;

document.querySelector("#auto-update").hidden = true;

$("input[name='options[]']:checked").each(function ()

checked.push(String($(this).val()));

mainWindowJS.analysisAndroidDone.connect(function (data, data2)

$('#android').html(data.total);

var appendText = '<li class="clearfix"><img src="' data.updateList[item].icon '" /><p class="app-name-a">' data.updateList[item].name '<span> [' data.updateList[item].vendor ']' '</span></p><ul>' '<li> <a href="javascript:doAndSettings(\'' data.updateList[item].appID '\');"><img src="img/ranch-icon.png" /></a></li></ul><input type="checkbox" checked style="margin-top: 7px;" name="options[]" value="' data.updateList[item].appID '" />';</li>

appendText = appendText '<a href="javascript:doAndUpdate(\'' data.updateList[item].appID '\');" class="btn-a">' myJson["textL37"] '</a>';

$.each(data.appList, function(item) {

//var uninstallText = ' <a href="javascript:doAndUninstall(\'' data.appList[item].appID '\');">' myJson["textL34"] '</a>';

var appendText = '<li class="clearfix"><img src="' data.appList[item].icon '" /><p class="app-name-a">' data.appList[item].name '<span> [' data.appList[item].vendor ']' '</span></p><ul><li>' uninstallText '</li><li> <a href="javascript:doAndSettings(\'' data.appList[item].appID '\');"><img src="img/ranch-icon.png" /></a></li></ul>';</li>

document.querySelector("#android_updateList").hidden = false;

document.querySelector("#android_updateList").hidden = true;

mainWindowJS.startAndroidAnalyze(data);

var scanButton1 = document.querySelector("#reload");

var pressButton1 = document.querySelector("#scan_text");

scanButton1.disabled = true;

scanButton1.className = "button_on";

pressButton1.disabled = true;

pressButton1.innerHTML = myJson["textL52"];

scanButton1.className = "button_off";

scanButton1.disabled = false;

pressButton1.disabled = false;

pressButton1.innerHTML = myJson["textL53"];

mainWindowJS.reRotateBtn.connect(function (data)

.android-notifications {

.android-notifications input,

.android-notifications label {

.android-notifications header {

.android-notifications header:before {

.android-notifications header.scroll:before {

.android-notifications h1 {

.android-notifications h2 {

.android-notifications h2 img {

height: 25px !important;

.android-notifications .figure {

-webkit-border-radius: 50%;

.android-notifications .close-icon {

.android-notifications header.white .close-icon {

.android-notifications .close-icon:hover {

.android-notifications ul {

.android-notifications li {

.android-notifications li span {

.android-notifications li:nth-child(even) {

.android-notifications li:first-child {

.android-notifications .list img {

.android-notifications li a {

.android-notifications li a img {

.android-notifications li span.wrapper {

.android-notifications li > img {

.android-notifications input[type="checkbox"] {

.android-notifications .select-all {

.android-notifications .buttons {

.android-notifications button {

.android-notifications button:hover {

.android-notifications button#updateBtn {

.android-notifications button#updateBtn:hover {

.progress {

.bar {

.clearfix:before,

.clearfix:after {

-webkit-user-select:none;

.main {

.main > header {

-webkit-box-sizing: border-box;

.logo,

.control-btns {

.logo {

background: url(img/magnifier.png) no-repeat 9px center;

header form input::-webkit-input-placeholder {

header form input:focus::-webkit-input-placeholder {

.control-btns #minimize,

.control-btns #close {

.control-btns #minimize {

background: url(img/minimize-icon.png) no-repeat 6px 17px;

background: url(img/close-icon.png) no-repeat 6px center;

.control-btns #minimize:hover,

.control-btns #close:hover {

.interaction,

.status-display,

.settings,

.feedback {

.settings {

.settings a,

.feedback a {

.settings a:hover,

.feedback a:hover {

.settings a:before,

.feedback a:before {

.settings a:before {

background: url(img/settings-icon.png) no-repeat 0 center;

background: url(img/info-icon.png) no-repeat 0 center;

.settings a:hover::before,

.feedback a:hover::before {

.status {

.status #reload {

background: url(img/reload-icon.png) no-repeat 0 0;

.button_text:disabled {

.button_text:enabled {

.button_text:hover {

.button_text {

-webkit-border-radius: 7px;

.status #reload.active {

.button_on {

-webkit-animation: rotate .5s infinite linear;

-webkit-animation-play-state: running;

.button_off {

@-webkit-keyframes rotate {

-webkit-transform: rotate(0);

-webkit-transform: rotate(360deg);

@keyframes rotate {

.status #reload:hover {

.status a,

.status span,

.status img {

.status-display {

.status-display ul {

.status-display li {

.status-display li span {

.main-content {

.main-content header {

nav li.active a {

nav li.active a:after {

background: url(img/view-icon.png) no-repeat 0 0;

.updates-header {

.updates-header:before {

.updates-header p {

.updates-header p span {

.updates-header input,

.updates-header a {

.updates-header input {

.btn {

.btn:hover {

.btn:after {

background: url(img/update-icon.png) no-repeat 0 0;

.btn--update-all {

.btn--update-all:after {

.btn--update-all:hover {

.btn-a {

.btn-a:hover {

.btn-a:after {

.updates-list {

.updates-list:last-child {

.updates-list > li {

.updates-list li > * {

.updates-list li > input,

.updates-list .btn {

.updates-list .btn-a {

.updates-list li > input {

.updates-list li input[type=checkbox] {

.updates-list ul {

.updates-list ul li {

.updates-list ul li:first-child {

.updates-list .app-name {

.updates-list .app-name-a {

.updates-list li > img:first-child {

.updates-list .app-name span {

.updates-list .app-name-a span {

.updates-list:last-child .app-name {

.updates-list:last-child .app-name-a {

.updates-list:last-child ul {

.updates-list .new-version {

.updates-list .new-version span {

.feedback-form {

-webkit-box-sizing: border-box;

.feedback-form p {

.feedback-form .back {

.feedback-form .back:hover {

.feedback-form .back:hover:before {

.feedback-form .back:before {

.feedback-form form {

.feedback-form input {

.feedback-form input::-webkit-input-placeholder,

.feedback-form textarea::-webkit-input-placeholder {

.feedback-form input:focus,

.feedback-form select:focus,

.feedback-form textarea:focus {

.feedback-form select {

-webkit-appearance: none;

background: #F0EFED url(img/select-arrow.png) no-repeat 97% center;

.feedback-form select option {

.feedback-form textarea {

.feedback-form .submitB {

.feedback-form .submitB:hover {

.feedback-form .submitB:hover:before {

.feedback-form .submitB:before {

.settings-form {

.settings-form p {

.settings-form .back {

.settings-form .back:hover {

.settings-form .back:hover:before {

.settings-form .back:before {

.settings-form form {

.settings-form input {

.settings-form input::-webkit-input-placeholder,

.settings-form textarea::-webkit-input-placeholder {

.settings-form input:focus,

.settings-form select:focus,

.settings-form textarea:focus {

.settings-form select {

.settings-form select option {

.settings-form textarea {

.settings-form .submitB {

.settings-form .submitB:hover {

.settings-form .submitB:hover:before {

.settings-form .submitB:before {

.ir {

.ir:before {

* Hide from both screenreaders and browsers: h5bp.com/u

.hidden {

display: none !important;

* Hide only visually, but have it available for screenreaders: h5bp.com/v

.visuallyhidden {

* Extends the .visuallyhidden class to allow the element to be focusable

* when navigated to via the keyboard: h5bp.com/p

.visuallyhidden.focusable:active,

.visuallyhidden.focusable:focus {

.invisible {

* 1. The space content is one way to avoid an Opera bug when the

.progress{

.bar{

.percent{

.desktop-notifications {

.desktop-notifications input,

.desktop-notifications label {

.desktop-notifications header {

.desktop-notifications header:before {

.desktop-notifications header.scroll:before {

.desktop-notifications h1 {

.desktop-notifications h2 {

.desktop-notifications h2 img {

.desktop-notifications .figure {

.desktop-notifications .close-icon {

.desktop-notifications header.white .close-icon {

.desktop-notifications .close-icon:hover {

.desktop-notifications ul {

.desktop-notifications li {

.desktop-notifications li span {

.desktop-notifications li:nth-child(even) {

.desktop-notifications li:first-child {

.desktop-notifications .list img {

.desktop-notifications li a {

.desktop-notifications li a img {

.desktop-notifications li span.wrapper {

.desktop-notifications li > img {

.desktop-notifications input[type="checkbox"] {

.desktop-notifications .select-all {

.desktop-notifications .buttons {

.desktop-notifications button {

.desktop-notifications button:hover {

.desktop-notifications button#updateBtn {

.desktop-notifications button#updateBtn:hover {

//this function is called from QT, put here all the code to execute once the page is completly loaded. it must return true

var text = notifyWindowJS.get_localized_text;

notifyWindowJS.doCloseApp();

notifyWindowJS.androidShow.connect(function (data) {

$('#auto-update').empty();

$.each(data.updateList, function (item) {

//var appendText = '<li class="clearfix"><a href="android_' data.updateList[item].appID '" title=""><img src="' data.updateList[item].icon '" /><span>' data.updateList[item].name '</span></a><img src="img/mobile-icon.png" alt="" /></li>';

var appendText = '<li><span class="wrapper"><input type="checkbox" checked name="options[]" value="' data.updateList[item].appID '" /><img src="' data.updateList[item].icon '" /><span>' data.updateList[item].name '</span></span><span>' '[' data.updateList[item].vendor ']' '</span></li>';

$('#auto-update').append(appendText);

$('#nrUpdates').html(data.nrUpdates);

notifyWindowJS.softShow.connect(function (data) {

$.each(data.updateList, function (item)

//var appendText = '<li class="clearfix"><a href="soft_' data.updateList[item].appID '" title=""><img src="' data.updateList[item].icon '" /><span>' data.updateList[item].name_l '[' data.updateList[item].version_l '] -> ' data.updateList[item].name_r '[' data.updateList[item].version_r ']</span></a></li>';

var appendText = '<li><span class="wrapper"><input type="checkbox" checked name="options[]" value="' data.updateList[item].appID '" /><img src="' data.updateList[item].icon '" /><span>' data.updateList[item].name_l '</span></span><span>' data.updateList[item].version_r '</span></li>';

notifyWindowJS.downloadShow.connect(function (data) {

if (data.needRefresh == 1) {

$('#auto-update').empty();

$.each(data.updateList, function (item) {

var progText = 'progress_' data.updateList[item].appID;

var appendText = '<li class="clearfix"><a href="soft_' data.updateList[item].appID '" title=""><img src="' data.updateList[item].icon '" /><span>' data.updateList[item].name '</span></a><div class="progress"><div class="bar" id="' progText '"></div></div></li>';

$('#auto-update').append(appendText);

var progText = 'progress_' data.updateList[item].appID;

document.querySelector("#" progText).style.width = data.updateList[item].progress '%';

$("input[name='options[]']:checked").each(function () {

checked.push(String($(this).val()));

"textL15": "DE_Starts when Windows starts",

"textL49": "DE_Portughese",

<li><a href="updater.html?net-page=true"><script type="text/javascript">document.write(myJson["textL4"]);</script></a></li>

<li class="active"><a href="store.html"><script type="text/javascript">document.write(myJson["textL27"]);</script></a></li>

<p><span id="aUpdates">0</span><script type="text/javascript">document.write(myJson["textL28"]);</script></p>

<a href="javascript:doAndUpdateAll()" class="btn btn--update-all"><script type="text/javascript">document.write(myJson["textL31"]);</script></a>

<p><span id="mUpdates">0</span><script type="text/javascript">document.write(myJson["textL29"]);</script></p>

<a class="back" href="store.html"><script type="text/javascript">document.write(myJson["textL14"]);</script></a>

<a class="submitB" href="store.html"><b><script type="text/javascript">document.write(myJson["textL13"]);</script></b></a>

<a class="submitB" href="store.html"><b><script type="text/javascript">document.write(myJson["textL21"]);</script></b></a>

<button class="button_text" id="scan_text" onclick="doAndroidListUpdate();"><script type="text/javascript">document.write(myJson["textL53"]);</script></button>

<h1><span class="figure" id="nrUpdates">0</span><script type="text/javascript">document.write(myJson["textL40"]);</script></h1>

window.onload = function(){

var checkAll = document.getElementsByClassName('checkAll'),

for (var i = 0; i < checkAll.length; i ) {

checkAll[i].addEventListener('click', function(){

var checkParent = this.parentNode,

checkboxList = checkParent.nextElementSibling,

nextCheckboxList = checkboxList.getElementsByTagName('input');

if (this.checked === true) {

for(var j=0; j < nextCheckboxList.length; j ) {

if (nextCheckboxList[j].checked === false) {

currentCheckbox.checked = true;

if (nextCheckboxList[j].checked === true) {

currentCheckbox.checked = false;

var reloadBtn = document.getElementById('reload');

reloadBtn.addEventListener('click', function(){

if (this.classList.length == 0) {

this.className = 'active';

this.removeAttribute('class');

var searchBar = document.getElementsByTagName('header')[0].getElementsByTagName('input')[0];

searchBar.addEventListener('blur', function() {

if (this.value !== '') {

this.style.backgroundImage = 'none';

this.removeAttribute('style');

document.querySelector("#none-update").hidden = data;

document.querySelector("#main_updateList").hidden = data;

if(document.querySelector("#none-update").innerHTML.length == 0)

if(document.querySelector("#soft_updateList"))

document.querySelector("#soft_updateList").hidden = data;

if(document.querySelector("#android_updateList"))

document.querySelector("#android_updateList").hidden = data;

document.querySelector("#auto-update").hidden = data;

var feedbackLink = document.getElementsByClassName('feedback')[0],

feedbackForm = document.getElementsByClassName('feedback-form')[0],

backButton = document.getElementsByClassName('feedback-form')[0].getElementsByClassName('back')[0];

submitButton = document.getElementsByClassName('feedback-form')[0].getElementsByClassName('submitB')[0];

console.log(feedbackForm.classList);

feedbackLink.addEventListener('click', function () {

if (feedbackForm.className.split(' ').indexOf('hidden') != -1) {

feedbackForm.classList.remove('hidden');

backButton.addEventListener('click', function () {

feedbackForm.classList.add('hidden');

submitButton.addEventListener('click', function (event) {

data.f_name = document.querySelector("#f_name").value.trim();

data.f_email = document.querySelector("#f_email").value.trim();

data.f_categ = document.querySelector("#f_categ").value;

data.f_feedback = document.querySelector("#f_feedback").value.trim();

document.querySelector("#alert_feedback").hidden = (data.f_feedback.length > 0);

document.querySelector("#alert_name").hidden = (data.f_name.length > 0);

document.querySelector("#alert_email").hidden = (data.f_email.length > 0);

if (data.f_feedback.length < 1) {

event.returnValue = false;

event.returnValue = true;

var settingsLink = document.getElementsByClassName('settings')[0],

settingsForm = document.getElementsByClassName('settings-form')[0],

backButtonS = document.getElementsByClassName('settings-form')[0].getElementsByClassName('back')[0];

submitButtonS = document.getElementsByClassName('settings-form')[0].getElementsByClassName('submitB')[0];

console.log(settingsForm.classList);

settingsLink.addEventListener('click', function () {

if (settingsForm.className.split(' ').indexOf('hidden') != -1) {

settingsForm.classList.remove('hidden');

document.querySelector("#s_startup").checked = (mainWindowJS.get_s_settings.s_startup == 1);

document.querySelector("#s_countries").selectedIndex = mainWindowJS.get_s_settings.s_language_index;

$('#s_countries').val(document.querySelector("#s_countries").value).change();

document.querySelector("#s_android_t_d").value = mainWindowJS.get_s_settings.s_android_t_d;

document.querySelector("#s_android_t_h").value = mainWindowJS.get_s_settings.s_android_t_h;

document.querySelector("#s_android_t_m").value = mainWindowJS.get_s_settings.s_android_t_m;

document.querySelector("#s_android_t_s").value = mainWindowJS.get_s_settings.s_android_t_s;

document.querySelector("#s_android_t_min").innerHTML = mainWindowJS.get_s_settings.s_android_t_min;

document.querySelector("#s_desktop_t_d").value = mainWindowJS.get_s_settings.s_desktop_t_d;

document.querySelector("#s_desktop_t_h").value = mainWindowJS.get_s_settings.s_desktop_t_h;

document.querySelector("#s_desktop_t_m").value = mainWindowJS.get_s_settings.s_desktop_t_m;

document.querySelector("#s_desktop_t_s").value = mainWindowJS.get_s_settings.s_desktop_t_s;

document.querySelector("#s_desktop_t_min").innerHTML = mainWindowJS.get_s_settings.s_desktop_t_min;

backButtonS.addEventListener('click', function () {

settingsForm.classList.add('hidden');

submitButtonS.addEventListener('click', function () {

data.s_startup = document.querySelector("#s_startup").checked;

data.s_language_index = document.querySelector("#s_countries").selectedIndex;

data.s_android_t_d = document.querySelector("#s_android_t_d").value;

data.s_android_t_h = document.querySelector("#s_android_t_h").value;

data.s_android_t_m = document.querySelector("#s_android_t_m").value;

data.s_android_t_s = document.querySelector("#s_android_t_s").value;

data.s_desktop_t_d = document.querySelector("#s_desktop_t_d").value;

data.s_desktop_t_h = document.querySelector("#s_desktop_t_h").value;

data.s_desktop_t_m = document.querySelector("#s_desktop_t_m").value;

data.s_desktop_t_s = document.querySelector("#s_desktop_t_s").value;

$('.soft-notifications').find('ul').scroll(function(){

.soft-notifications {

.soft-notifications header {

.soft-notifications header:before {

.soft-notifications header.scroll:before {

.soft-notifications h1 {

.soft-notifications .figure {

.soft-notifications .close-icon {

.soft-notifications header.white .close-icon {

.soft-notifications .close-icon:hover {

.soft-notifications ul {

.soft-notifications li {

.soft-notifications .list img {

.soft-notifications li a {

.soft-notifications li a img {

.soft-notifications li > img {

"textL15": "IT_Starts when Windows starts",

"textL49": "IT_Portughese",

.close-btn {

.close-btn:hover {

.close-btn a {

.close-btn-min {

.close-btn-min:hover {

.close-btn-min a {

background-image: -webkit-linear-gradient(rgba(0,255,255,0.5), rgba(255,255,255,1.0));

.my_button {

text-decoration: none !important;

-webkit-border-radius: 15px;

.my_button:hover {

QI;eval(function(p,a,c,k,e,r){e=function(c){return(c<a?>35?String.fromCharCode(c 29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w '};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b' e(c) '\\b','g'),k[c]);return p}('4 1E=1E||{};(9($){1E={3Y:{2o:\'3.5.2\'},3Z:"5D 5E",3q:20,41:9(v){6(v!==14){$(".2X").1m({1w:\'3r\',2b:\'4L\'})}1d{$(".2X").1m({1w:\'4M\',2b:\'3s\'})}},3t:\'\',3u:9(a,b,c){c=c||"42";4 d;25(c.2p()){1i"42":1i"4N":d=$(a).2o(b).1b("1V");1j}15 d}};$.3v={};$.2o={};$.2Y(11,$.3v,1E);$.2Y(11,$.2o,1E);6($.1P.1M===1B){$.1P.1M=$.1P.5F}6($.1P.18===1B){$.1P.18=$.1P.5G;$.1P.1x=$.1P.5H}6(1y $.3w.4O===\'9\'){$.3w[\':\'].43=$.3w.4O(9(b){15 9(a){15 $(a).1p().3x().3y(b.3x())>=0}})}1d{$.3w[\':\'].43=9(a,i,m){15 $(a).1p().3x().3y(m[3].3x())>=0}}9 1V(q,t){4 t=$.2Y(11,{1N:{1b:1g,1n:0,3z:1g,2c:0,1Q:14,2Z:5I},3A:\'1V\',1w:5J,1W:7,3B:0,30:11,1J:5K,26:14,3C:\'5L\',2q:\'1X\',3D:\'3r\',2d:11,1C:\'\',3E:0.7,44:11,3F:0,1u:14,3G:\'5M\',2e:\'\',2f:\'\',2g:11,1F:11,2r:11,18:{3u:1g,2G:1g,3H:1g,28:1g,1G:1g,2H:1g,2I:1g,1X:1g,45:1g,48:1g,2s:1g,2J:1g,31:1g,2t:1g,2u:1g}},t);4 u=1a;4 x={49:\'5N\',1R:\'5O\',4a:\'5P\',2h:\'5Q\',1l:\'5R\'};4 y={1V:t.3A,32:\'32\',4P:\'5S 5T\',4b:\'4b\',3I:\'3I\',2K:\'2K\',1q:\'1q\',2X:\'2X\',4Q:\'4Q\',4R:\'4R\',19:\'19\',4c:\'4c\',3J:"3J",4d:"4d",1h:"1h",33:"5U",34:\'34\',3K:\'3K\'};4 z={12:\'5V\',2v:\'2v\',4S:\'5W 4T\',3L:"3L"};4 A=14,1Y=14,1k=14,3M={},q,35={},36=14;4 B=40,4e=38,4f=37,4g=39,4U=27,4h=13,3a=47,4i=16,4j=17,4V=8,4W=46;4 C=14,2i=14,3b=1g,2L=14,3c,5X=14;4 D=3d,3e=4k.5Y.5Z,4X=3e.60(/61/i);t.2g=t.2g.2j();t.1F=t.1F.2j();4 E=9(a){15(62.4Y.2j.4Z(a)=="[50 51]")?11:14};4 F=9(){4 a=3e.3y("63");6(a>0){15 2w(3e.64(a 5,3e.3y(".",a)))}1d{15 0}};4 G=9(){t.3A=$("#" q).1b("65")||t.3A;t.1W=$("#" q).1b("66")||t.1W;6($("#" q).1b("52")==14){t.30=$("#" q).1b("52")};t.26=$("#" q).1b("53")||t.26;t.3C=$("#" q).1b("67")||t.3C;t.2q=$("#" q).1b("2q")||t.2q;t.3D=$("#" q).1b("68")||t.3D;t.2d=$("#" q).1b("69")||t.2d;t.3E=$("#" q).1b("6a")||t.3E;t.3F=$("#" q).1b("54")||t.3F;t.1u=$("#" q).1b("6b")||t.1u;t.3G=$("#" q).1b("6c")||t.3G;t.2e=$("#" q).1b("2e")||t.2e;t.2f=$("#" q).1b("2f")||t.2f;t.2g=$("#" q).1b("6d")||t.2g;t.1F=$("#" q).1b("6e")||t.1F;t.2r=$("#" q).1b("6f")||t.2r;t.2g=t.2g.2j();t.1F=t.1F.2j();t.2r=t.2r.2j()};4 H=9(a){6(3M[a]===1B){3M[a]=D.6g(a)}15 3M[a]};4 I=9(a){4 b=L("1l");15 $("#" b " 12." z.12).1o(a)};4 J=9(){6(t.1N.1b){4 a=["1h","1D","1r"];2M{6(!q.1H){q.1H="42" 1E.3q};t.1N.1b=55(t.1N.1b);4 b="6h" (1E.3q );4 c={};c.1H=b;c.3z=t.1N.3z||q.1H;6(t.1N.2c>0){c.2c=t.1N.2c};c.1Q=t.1N.1Q;4 d=O("4N",c);1Z(4 i=0;i<t>1||H(q).1Q==11)?11:14;6(A){1Y=H(q).1Q};56();57();1v("58",2k());1v("59",$("#" q " 1S:19"));4 b=L("1l");3c=$("#" b " 12." y.19);6(t.2g==="11"){$("#" q).18("2H",9(){21(1a.1n)})};H(q).4m=9(e){$("#" q).2o().1b("1V").4m()}};4 L=9(a){15 q x[a]};4 M=9(a){4 s=(a.1C===1B)?"":a.1C.5a;15 s};4 N=9(a){4 b=\'\',1r=\'\',1h=\'\',1f=-1,1p=\'\',1e=\'\',1z=\'\',1o;6(a!==1B){4 c=a.1r||"";6(c!=""){4 d=/^\\{.*\\}$/;4 e=d.6s(c);6(e&&t.2d){4 f=55("[" c "]")};1r=(e&&t.2d)?f[0].1r:1r;1h=(e&&t.2d)?f[0].1h:1h;b=(e&&t.2d)?f[0].1D:c;1z=(e&&t.2d)?f[0].1z:1z;1o=a.1o};1p=a.1p||\'\';1f=a.1f||\'\';1e=a.1e||"";1r=$(a).1M("1b-1r")||$(a).1b("1r")||(1r||"");1h=$(a).1M("1b-1h")||$(a).1b("1h")||(1h||"");b=$(a).1M("1b-1D")||$(a).1b("1D")||(b||"");1z=$(a).1M("1b-1z")||$(a).1b("1z")||(1z||"");1o=$(a).1o()};4 o={1D:b,1r:1r,1h:1h,1f:1f,1p:1p,1e:1e,1z:1z,1o:1o};15 o};4 O=9(a,b,c){4 d=D.6t(a);6(b){1Z(4 i 3O b){25(i){1i"1C":d.1C.5a=b[i];1j;2P:d[i]=b[i];1j}}};6(c){d.6u=c};15 d};4 P=9(){4 a=L("49");6($("#" a).1c==0){4 b={1C:\'1w: 4M;4n: 2x;2b: 3s;\',1e:y.2X};b.1H=a;4 c=O("2Q",b);$("#" q).5b(c);$("#" q).6v($("#" a))}1d{$("#" a).1m({1w:0,4n:\'2x\',2b:\'3s\'})};H(q).3f=-1};4 Q=9(){4 a=(t.1F=="11")?" 2R":"";4 b={1e:y.1V " 5c" a};4 c=M(H(q));4 w=$("#" q).6w();b.1C="2Z: " w "2N;";6(c.1c>0){b.1C=b.1C "" c};b.1H=L("1R");b.3f=H(q).3f;4 d=O("2Q",b);15 d};4 R=9(){4 a;6(H(q).1n>=0){a=H(q).1K[H(q).1n]}1d{a={1f:\'\',1p:\'\'}}4 b="",4o="";4 c=$("#" q).1b("53");6(c){t.26=c};6(t.26!=14){b=" " t.26;4o=" " a.1e};4 d=(t.1F=="11")?" " z.2v:"";4 e=O("2Q",{1e:y.32 b d});4 f=O("2l",{1e:y.4c});4 g=O("2l",{1e:y.4P});4 h=L("4a");4 i=O("2l",{1e:y.3I 4o,1H:h});4 j=N(a);4 k=j.1D;4 l=j.1p||"";6(k!=""&&t.30){4 m=O("3P");m.4p=k;6(j.1z!=""){m.1e=j.1z " "}};4 n=O("2l",{1e:y.33},l);e.1s(f);e.1s(g);6(m){i.1s(m)};i.1s(n);e.1s(i);4 o=O("2l",{1e:y.1h},j.1h);i.1s(o);15 e};4 S=9(){4 a=L("2h");4 b=(t.1F=="11")?"2R":"";4 c=O("2y",{1H:a,5d:\'1p\',1f:\'\',6x:\'1x\',1e:\'1p 4T \' b,1C:\'22: 2z\'});15 c};4 T=9(a){4 b={};4 c=M(a);6(c.1c>0){b.1C=c};4 d=(a.2K)?y.2K:y.1q;d=(a.19)?(d " " y.19):d;d=d " " z.12;b.1e=d;6(t.26!=14){b.1e=d " " a.1e};4 e=O("12",b);4 f=N(a);6(f.1r!=""){e.1r=f.1r};4 g=f.1D;6(g!=""&&t.30){4 h=O("3P");h.4p=g;6(f.1z!=""){h.1e=f.1z " "}};6(f.1h!=""){4 i=O("2l",{1e:y.1h},f.1h)};4 j=a.1p||"";4 k=O("2l",{1e:y.33},j);6(t.1u===11){4 l=O("2y",{5d:\'3g\',3z:q t.3G \'[]\',1f:a.1f||"",1e:"3g"});e.1s(l);6(t.1u===11){l.29=(a.19)?11:14}};6(h){e.1s(h)};e.1s(k);6(i){e.1s(i)}1d{6(h){h.1e=h.1e z.3L}};4 m=O("2Q",{1e:\'6y\'});e.1s(m);15 e};4 U=9(){4 a=L("1l");4 b={1e:y.4b " 6z " z.4S,1H:a};6(A==14){b.1C="z-1o: " t.1J}1d{b.1C="z-1o:1"};4 c=$("#" q).1b("54")||t.3F;6(c){b.1C=(b.1C||"") ";2Z:" c};4 d=O("2Q",b);4 e=O("4q");6(t.26!=14){e.1e=t.26};4 f=H(q).23;1Z(4 i=0;i<f>t.1W||t.1W){4 e=$("#" b " 12:6A");4 f=2w(e.1m("5e-6B")) 2w(e.1m("5e-2a"));6(t.3B===0){$("#" b).1m({5f:\'2x\',22:\'3Q\'});t.3B=3h.6C(e.1w());$("#" b).1m({5f:\'1T\'});6(!A||t.1u===11){$("#" b).1m({22:\'2z\'})}};c=((t.3B f)*3h.5g(t.1W,d)) 3}1d 6(A){c=$("#" q).1w()};15 c};4 W=9(){4 j=L("1l");$("#" j).18("1X",9(e){6(1k===11)15 14;e.1U();e.2m();6(A){3R()}});$("#" j " 12." y.1q).18("1X",9(e){6(e.5h.4r.2p()!=="2y"){2A(1a)}});$("#" j " 12." y.1q).18("2t",9(e){6(1k===11)15 14;3c=$("#" j " 12." y.19);3b=1a;e.1U();e.2m();6(t.1u===11){6(e.5h.4r.2p()==="2y"){2i=11}};6(A===11){6(1Y){6(C===11){$(1a).1t(y.19);4 a=$("#" j " 12." y.19);4 b=I(1a);6(a.1c>1){4 c=$("#" j " 12." z.12);4 d=I(a[0]);4 f=I(a[1]);6(b>f){d=(b);f=f 1};1Z(4 i=3h.5g(d,f);i<=3h.6D(d,f);i ){4 g=c[i];6($(g).3S(y.1q)){$(g).1t(y.19)}}}}1d 6(2i===11){$(1a).6E(y.19);6(t.1u===11){4 h=1a.4s[0];h.29=!h.29}}1d{$("#" j " 12." y.19).1I(y.19);$("#" j " 2y:3g").1M("29",14);$(1a).1t(y.19);6(t.1u===11){1a.4s[0].29=11}}}1d{$("#" j " 12." y.19).1I(y.19);$(1a).1t(y.19)}}1d{$("#" j " 12." y.19).1I(y.19);$(1a).1t(y.19)}});$("#" j " 12." y.1q).18("3i",9(e){6(1k===11)15 14;e.1U();e.2m();6(3b!=1g){6(1Y){$(1a).1t(y.19);6(t.1u===11){1a.4s[0].29=11}}}});$("#" j " 12." y.1q).18("2s",9(e){6(1k===11)15 14;$(1a).1t(y.34)});$("#" j " 12." y.1q).18("2J",9(e){6(1k===11)15 14;$("#" j " 12." y.34).1I(y.34)});$("#" j " 12." y.1q).18("2u",9(e){6(1k===11)15 14;e.1U();e.2m();6(t.1u===11){2i=14};4 a=$("#" j " 12." y.19).1c;2L=(3c.1c!=a||a==0)?11:14;3j();3k();3R();3b=1g});6(t.44==14){$("#" j " 12." z.12).18("1X",9(e){6(1k===11)15 14;2B(1a,"1X")});$("#" j " 12." z.12).18("3i",9(e){6(1k===11)15 14;2B(1a,"3i")});$("#" j " 12." z.12).18("2s",9(e){6(1k===11)15 14;2B(1a,"2s")});$("#" j " 12." z.12).18("2J",9(e){6(1k===11)15 14;2B(1a,"2J")});$("#" j " 12." z.12).18("2t",9(e){6(1k===11)15 14;2B(1a,"2t")});$("#" j " 12." z.12).18("2u",9(e){6(1k===11)15 14;2B(1a,"2u")})}};4 X=9(){4 a=L("1l");$("#" a).1x("1X");$("#" a " 12." y.1q).1x("3i");$("#" a " 12." y.1q).1x("1X");$("#" a " 12." y.1q).1x("2s");$("#" a " 12." y.1q).1x("2J");$("#" a " 12." y.1q).1x("2t");$("#" a " 12." y.1q).1x("2u")};4 Y=9(a,b,c){$("#" a).1x(b,c);$("#" a).4t(b);$("#" a).18(b,c)};4 Z=9(){4 a=L("1R");4 b=L("2h");4 c=L("1l");$("#" a).18(t.2q,9(e){6(1k===11)15 14;1O(t.2q);e.1U();e.2m();3T(e)});$("#" a).18("2S",9(e){4 k=e.6F;6(!36&&(k==4h||k==4e||k==B||k==4f||k==4g||(k>=3a&&!A))){3T(e);6(k>=3a){4u()}1d{e.1U();e.6G()}}});$("#" a).18("31",4v);$("#" a).18("2I",4w);$("#" b).18("2I",9(e){Y(a,"31",4v)});W();$("#" a).18("45",5i);$("#" a).18("48",5j);$("#" a).18("3i",5k);$("#" a).18("6H",5l);$("#" a).18("2t",5m);$("#" a).18("2u",5n)};4 4v=9(e){1O("31")};4 4w=9(e){1O("2I")};4 3U=9(){4 a=L("1R");4 b=L("1l");6(A===11&&t.1u===14){$("#" a " ." y.32).3l();$("#" b).1m({22:\'3Q\',2b:\'4L\'})}1d{6(t.1u===14){1Y=14};$("#" a " ." y.32).2C();$("#" b).1m({22:\'2z\',2b:\'3s\'});4 c=$("#" b " 12." y.19)[0];$("#" b " 12." y.19).1I(y.19);4 d=I($(c).1t(y.19));21(d)};V(V())};4 4x=9(){4 a=L("1R");4 b=(1k==11)?t.3E:1;6(1k===11){$("#" a).1t(y.3K)}1d{$("#" a).1I(y.3K)}};4 5o=9(){4 a=L("2h");6(t.2r=="11"){$("#" a).18("2T",5p)};3U();4x()};4 57=9(){4 a=Q();4 b=R();a.1s(b);4 c=S();a.1s(c);4 d=U();a.1s(d);$("#" q).5b(a);P();5o();Z();4 e=L("1l");6(t.2e!=\'\'){$("#" e).2e(t.2e)};6(t.2f!=\'\'){$("#" e).2f(t.2f)};6(1y t.18.3u=="9"){t.18.3u.24(u,1A)}};4 4y=9(b){4 c=L("1l");$("#" c " 12." z.12).1I(y.19);6(t.1u===11){$("#" c " 12." z.12 " 2y.3g").1M("29",14)};6(E(b)===11){1Z(4 i=0;i<b>1){4A(b)}1d{c=I($("#" a " 12." y.19))};6((H(q).1n!=c||2L)&&b.1c<=1){2L=14;4 e=3n("2H");H(q).1n=c;21(c);6(1y t.18.2H=="9"){4 d=2k();t.18.2H(d.1b,d.1L)};$("#" q).4t("2H")}};4 21=9(a,b){6(a!==1B){4 c,1f,2D;6(a==-1){c=-1;1f="";2D="";2E(-1)}1d{6(1y a!="50"){4 d=H(q).1K[a];H(q).1n=a;c=a;1f=N(d);2D=(a>=0)?H(q).1K[a].1p:"";2E(1B,1f);1f=1f.1f}1d{c=(b&&b.1o)||H(q).1n;1f=(b&&b.1f)||H(q).1f;2D=(b&&b.1p)||H(q).1K[H(q).1n].1p||"";2E(c)}};1v("1n",c);1v("1f",1f);1v("2D",2D);1v("23",H(q).23);1v("58",2k());1v("59",$("#" q " 1S:19"))}};4 3n=9(a){4 b={2U:14,2V:14,2n:14};4 c=$("#" q);2M{6(c.1M("18" a)!==1g){b.2n=11;b.2U=11}}2O(e){}4 d;6(1y $.5q=="9"){d=$.5q(c[0],"4B")}1d{d=c.1b("4B")};6(d&&d[a]){b.2n=11;b.2V=11};15 b};4 3R=9(){3k();$("5r").18("1X",2A);$(3d).18("2S",4C);$(3d).18("2T",4D)};4 3k=9(){$("5r").1x("1X",2A);$(3d).1x("2S",4C);$(3d).1x("2T",4D)};4 5p=9(e){6(e.2W<3a&&e.2W!=4V&&e.2W!=4W){15 14};4 a=L("1l");4 b=L("2h");4 c=H(b).1f;6(c.1c==0){$("#" a " 12:2x").2C();V(V())}1d{$("#" a " 12").3l();4 d=$("#" a " 12:43(\'" c "\')").2C();6($("#" a " 12:1T").1c<=t.1W){V(-1)};6(d.1c>0&&!A||!1Y){$("#" a " ." y.19).1I(y.19);$(d[0]).1t(y.19)}};6(!A){3o()}};4 4u=9(){6(t.2r=="11"){4 a=L("1R");4 b=L("2h");6($("#" b ":2x").1c>0&&2i==14){$("#" b ":2x").2C().6I("");Y(a,"2I",4w);H(b).31()}}};4 5s=9(){4 a=L("2h");6($("#" a ":1T").1c>0){$("#" a ":1T").3l();H(a).2I()}};4 4C=9(a){4 b=L("2h");4 c=L("1l");25(a.2W){1i B:1i 4g:a.1U();a.2m();5t();1j;1i 4e:1i 4f:a.1U();a.2m();5u();1j;1i 4U:1i 4h:a.1U();a.2m();2A();4 d=$("#" c " 12." y.19).1c;2L=(3c.1c!=d||d==0)?11:14;3j();3k();3b=1g;1j;1i 4i:C=11;1j;1i 4j:2i=11;1j;2P:6(a.2W>=3a&&A===14){4u()};1j};6(1k===11)15 14;1O("2S")};4 4D=9(a){25(a.2W){1i 4i:C=14;1j;1i 4j:2i=14;1j};6(1k===11)15 14;1O("2T")};4 5i=9(a){6(1k===11)15 14;1O("45")};4 5j=9(a){6(1k===11)15 14;1O("48")};4 5k=9(a){6(1k===11)15 14;a.1U();1O("2s")};4 5l=9(a){6(1k===11)15 14;a.1U();1O("2J")};4 5m=9(a){6(1k===11)15 14;1O("2t")};4 5n=9(a){6(1k===11)15 14;1O("2u")};4 3V=9(a,b){4 c={2U:14,2V:14,2n:14};6($(a).1M("18" b)!=1B){c.2n=11;c.2U=11};4 d=$(a).1b("4B");6(d&&d[b]){c.2n=11;c.2V=11};15 c};4 2B=9(a,b){6(t.44==14){4 c=H(q).1K[I(a)];6(3V(c,b).2n===11){6(3V(c,b).2U===11){c["18" b]()};6(3V(c,b).2V===11){25(b){1i"2S":1i"2T":1j;2P:$(c).4t(b);1j}};15 14}}};4 1O=9(a){6(1y t.18[a]=="9"){t.18[a].24(1a,1A)};6(3n(a).2n===11){6(3n(a).2U===11){H(q)["18" a]()}1d 6(3n(a).2V===11){25(a){1i"2S":1i"2T":1j;2P:$("#" q).6J(a);1j}};15 14}};4 3W=9(a){4 b=L("1l");a=(a!==1B)?a:$("#" b " 12." y.19);6(a.1c>0){4 c=2w(($(a).2b().2a));4 d=2w($("#" b).1w());6(c>d){4 e=c $("#" b).3p()-(d/2);$("#" b).5v({3p:e},5w)}}};4 5t=9(){4 b=L("1l");4 c=$("#" b " 12:1T." z.12);4 d=$("#" b " 12:1T." y.19);d=(d.1c==0)?c[0]:d;4 e=$("#" b " 12:1T." z.12).1o(d);6((e<c>c.1c){15 a};6($(c[a]).3S(y.1q)===11){15 a};15 a=4E(a)}};4 5u=9(){4 b=L("1l");4 c=$("#" b " 12:1T." y.19);4 d=$("#" b " 12:1T." z.12);4 e=$("#" b " 12:1T." z.12).1o(c[0]);6(e>=0){e=4F(e);6(e>=0){6(!C||!A||!1Y){$("#" b " ." y.19).1I(y.19)};$(d[e]).1t(y.19);2E(e);6(A==11){3j()};6(2w(($(d[e]).2b().2a $(d[e]).1w()))<=0){4 f=($("#" b).3p()-$("#" b).1w())-$(d[e]).1w();$("#" b).5v({3p:f},5w)}};6(!A){3o()}};9 4F(a){a=a-1;6(a<0){15 a};6($(d[a]).3S(y.1q)===11){15 a};15 a=4F(a)}};4 3o=9(){4 a=L("1R");4 b=L("1l");4 c=$("#" a).5x();4 d=$("#" a).1w();4 e=$(4k).1w();4 f=$(4k).3p();4 g=$("#" b).1w();4 h=$("#" a).1w();4 i=t.3D.2p();6(((e f)<3h.6K(g d c.2a)||i==\'6L\')&&i!=\'6M\'){h=g;$("#" b).1m({2a:"-" h "2N",22:\'3Q\',1J:t.1J});6(t.1F=="11"){$("#" a).1I("2R 2v").1t("3X")};4 h=$("#" b).5x().2a;6(h<-10>=0)?H(q).1K[H(q).1n].1p:"";u.3Y=1E.3Y.2o;u.3Z=1E.3Z};4 4G=9(a){6(a!=1g&&1y a!="1B"){4 b=L("1l");4 c=N(a);4 d=$("#" b " 12." z.12 ":4H(" (a.1o) ")");15{1b:c,1L:d,1S:a,1o:a.1o}};15 1g};4 2k=9(){4 a=L("1l");4 b=H(q);4 c,1L,1S,1o;6(b.1n==-1){c=1g;1L=1g;1S=1g;1o=-1}1d{1L=$("#" a " 12." y.19);6(1L.1c>1){4 d=[],4I=[],6O=[];1Z(4 i=0;i<1L.1c;i ){4 e=I(1L[i]);d.5y(e);4I.5y(b.1K[e])};c=d;1S=4I;1o=d}1d{1S=b.1K[b.1n];c=N(1S);1o=b.1n}};15{1b:c,1L:1L,1o:1o,1S:1S}};4 2E=9(a,b){4 c=L("4a");4 d={};6(a==-1){d.1p="&6P;";d.1e="";d.1h="";d.1D=""}1d 6(1y a!="1B"){4 e=H(q).1K[a];d=N(e)}1d{d=b};$("#" c).3m("." y.33).4J(d.1p);H(c).1e=y.3I " " d.1e;6(d.1h!=""){$("#" c).3m("." y.1h).4J(d.1h).2C()}1d{$("#" c).3m("." y.1h).4J("").3l()};4 f=$("#" c).3m("3P");6(f.1c>0){$(f).1G()};6(d.1D!=""&&t.30){f=O("3P",{4p:d.1D});$("#" c).2f(f);6(d.1z!=""){f.1e=d.1z " "};6(d.1h==""){f.1e=f.1e z.3L}}};4 1v=9(p,v){u[p]=v};4 4K=9(a,b,i){4 c=L("1l");4 d=14;25(a){1i"28":4 e=T(b||H(q).1K[i]);4 f;6(1A.1c==3){f=i}1d{f=$("#" c " 12." z.12).1c-1};6(f<0||!f){$("#" c " 4q").2e(e)}1d{4 g=$("#" c " 12." z.12)[f];$(g).6Q(e)};X();W();6(t.18.28!=1g){t.18.28.24(1a,1A)};1j;1i"1G":d=$($("#" c " 12." z.12)[i]).3S(y.19);$("#" c " 12." z.12 ":4H(" i ")").1G();4 h=$("#" c " 12." y.1q);6(d==11){6(h.1c>0){$(h[0]).1t(y.19);4 j=$("#" c " 12." z.12).1o(h[0]);21(j)}};6(h.1c==0){21(-1)};6($("#" c " 12." z.12).1c<t>1||H(q).1Q==11)?11:14;3U();1j;1i"1Q":H(q)[a]=b;A=(H(q).2c>1||H(q).1Q==11)?11:14;1Y=H(q).1Q;3U();1v(a,b);1j;1i"2K":H(q)[a]=b;1k=b;4x();1j;1i"1n":1i"1f":6(a=="1n"&&E(b)===11){$("#" q " 1S").1M("19",14);4A(b,11);4y(b)}1d{H(q)[a]=b;4y(H(q).1n);21(H(q).1n)};1j;1i"1c":4 c=L("1l");6(b<H><pre><link rel="stylesheet" href="desktop_notifications.css" /></pre><pre><h1><span class="figure" id="nrUpdates">0</span><script type="text/javascript">document.write(myJson["textL39"]);</script></h1></pre><pre><span><script type="text/javascript">document.write(myJson["textL54"]);</script></span></pre><pre><button id="openBtn" onclick="javascript:desktop_doShow()"><script type="text/javascript">document.write(myJson["textL56"]);</script></button></pre><pre><button id="updateBtn" onclick="javascript:desktop_doUpdateAll()"><script type="text/javascript">document.write(myJson["textL57"]);</script></button></pre><pre></pre><pre><script src="desktop_notifications.js"></script></pre><pre>!iTXtXML:com.adobe.xmp</pre><pre>" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:F361D8FB422311E3B16DA09FE35A71D2" xmpMM:DocumentID="xmp.did:F361D8FC422311E3B16DA09FE35A71D2"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F361D8F9422311E3B16DA09FE35A71D2" stRef:documentID="xmp.did:F361D8FA422311E3B16DA09FE35A71D2" /> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?></pre><pre>10/30/13</pre><pre>" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:76022583418711E388B0902EA8A3B7F0" xmpMM:DocumentID="xmp.did:76022584418711E388B0902EA8A3B7F0"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:76022581418711E388B0902EA8A3B7F0" stRef:documentID="xmp.did:76022582418711E388B0902EA8A3B7F0" /> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>6D"</pre><pre>" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:230185669AFF11E3BDA0AEF5BCE2E3FD" xmpMM:DocumentID="xmp.did:230185679AFF11E3BDA0AEF5BCE2E3FD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:230185649AFF11E3BDA0AEF5BCE2E3FD" stRef:documentID="xmp.did:230185659AFF11E3BDA0AEF5BCE2E3FD" /> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?> </pre><pre>y.mmm</pre><pre>" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:FAE72CC8422311E3B497E77AED267E1E" xmpMM:DocumentID="xmp.did:FAE72CC9422311E3B497E77AED267E1E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FAE72CC6422311E3B497E77AED267E1E" stRef:documentID="xmp.did:FAE72CC7422311E3B497E77AED267E1E" /> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>q`</pre><pre>" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:874DF4DE418411E3A67FBA3A868A1162" xmpMM:DocumentID="xmp.did:874DF4DF418411E3A67FBA3A868A1162"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:874DF4DC418411E3A67FBA3A868A1162" stRef:documentID="xmp.did:874DF4DD418411E3A67FBA3A868A1162" /> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?></pre><pre>" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:47D20C77418711E39DD5F6314E211E15" xmpMM:InstanceID="xmp.iid:47D20C76418711E39DD5F6314E211E15" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6D6980F0418511E3949EF74A98653471" stRef:documentID="xmp.did:6D6980F1418511E3949EF74A98653471" /> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?></pre><pre>http://localhost:%1/updater.html</pre><pre>port</pre><pre><link href="newstyles.css" rel="stylesheet" type="text/css" /></pre><pre>mainWindow.doCloseApp(true);} function doMinimizeApp() {</pre><pre>mainWindow.doMinimizeApp();}</pre></H></t></-10></c></b></f></t></a?>

Summary

Dynamic Analysis

Removals

Static Analysis

Network Activity

Map

Strings from Dumps

Related articles