Fix manual allocation folding of RegExpConstructResult.

test/mjsunit/regress/regress-409533.js

Index: test/mjsunit/regress/regress-409533.js
diff --git a/test/mjsunit/regress/regress-crbug-387636.js b/test/mjsunit/regress/regress-409533.js
similarity index 87%
copy from test/mjsunit/regress/regress-crbug-387636.js
copy to test/mjsunit/regress/regress-409533.js
index 1e50ace45a293c8561042f1a09c8fcd505b43dc2..e51065e4bf43f8c8ca222c458c85a96f003996a2 100644
--- a/test/mjsunit/regress/regress-crbug-387636.js
+++ b/test/mjsunit/regress/regress-409533.js
@@ -5,9 +5,8 @@
 // Flags: --allow-natives-syntax
 
 function f() {
-  [].indexOf(0x40000000);
+  %_RegExpConstructResult(0, {}, {});
 }
-
 f();
 f();
 %OptimizeFunctionOnNextCall(f);