Addressed perf regression in Browsermark2.0 array blur test

test/mjsunit/array-literal-feedback.js

 // Copyright 2013 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 75 matching lines @@
 }
 
 if (support_smi_only_arrays) {
 
   function get_literal(x) {
     var literal = [1, 2, x];
     return literal;
   }
 
   get_literal(3);
+  // It's important to store a from before we crankshaft get_literal, because
+  // mementos won't be created from crankshafted code at all.
+  a = get_literal(3);
+  %OptimizeFunctionOnNextCall(get_literal);
   get_literal(3);
-  %OptimizeFunctionOnNextCall(get_literal);
-  a = get_literal(3);
   assertOptimized(get_literal);
   assertTrue(%HasFastSmiElements(a));
+  // a has a memento so the transition caused by the store will affect the
+  // boilerplate.
   a[0] = 3.5;
 
   // We should have transitioned the boilerplate array to double, and
   // crankshafted code should de-opt on the unexpected elements kind
   b = get_literal(3);
   assertTrue(%HasFastDoubleElements(b));
   assertEquals([1, 2, 3], b);
   assertUnoptimized(get_literal);
 
   // Optimize again
@@ skipping 11 matching lines @@
       return [a, b, c];
     }
 
     a = bar(1, 2, 3);
     a[0] = 3.5;
     a[1] = 'hi';
     b = bar(1, 2, 3);
     assertKind(elements_kind.fast, b);
   })();
 }