Merge V8 at r8928: Roll to 3.2.10.37

Bug: 5188807

Change-Id: I0f1fc251f801b222d4dc1647d8a2ec0a8b0f8d83
diff --git a/src/bootstrapper.cc b/src/bootstrapper.cc
index a30ffc0..5b87640 100644
--- a/src/bootstrapper.cc
+++ b/src/bootstrapper.cc
@@ -1526,8 +1526,6 @@
   global_context()->set_string_function_prototype_map(
       HeapObject::cast(string_function->initial_map()->prototype())->map());
 
-  InstallBuiltinFunctionIds();
-
   // Install Function.prototype.call and apply.
   { Handle<String> key = factory->function_class_symbol();
     Handle<JSFunction> function =
@@ -1561,6 +1559,8 @@
     apply->shared()->set_length(2);
   }
 
+  InstallBuiltinFunctionIds();
+
   // Create a constructor for RegExp results (a variant of Array that
   // predefines the two properties index and match).
   {