search

SocialSisterYi / bilibili-API-collect

哔哩哔哩-API收集整理【不断更新中....】
https://socialsisteryi.github.io/bilibili-API-collect/
Other
15.33k stars 1.74k forks source link

Web 风控相关问题: buvid3, buvid4 获取及激活(ExClimbWuzhi 上传设备指纹消息) #933

Open cxw620 opened 10 months ago

cxw620 commented 10 months ago

RE from https://s1.hdslb.com/bfs/seed/log/report/log-reporter.js

Last Updated: 2024/2/15 15:05, original js content md5: a6fa378028e0cce7ea7202dda4783781, now changed to e454c139bf766d9187d74e3fd5ffc1bc.

[!CAUTION] 勿盲目照搬示例. DO NOT JUST COPY THE FOLLOWING EXAMPLES!!!

  1. GET https://api.bilibili.com/x/frontend/finger/spi 
    {
    "code":0,
    "data":{
        "b_3":"6DEAB968-BFFF-82D2-42FC-6A148AF1A91A14121infoc", // buvid3
        "b_4":"950387F6-81BA-FA85-1C1C-084C0C68537E14121-024011008-mqHh6TGQlnVgXazy647zgAx1XBsd+g7y946DRln50pkrLmYNRsOEtIPaLiatNJt0" // buvid4
    },
    "message":"ok"
}

  2. POST https://api.bilibili.com/x/internal/gaia-gateway/ExClimbWuzhi

    • Cookie is needed. Example:
    innersign=0; buvid3=6DEAB968-BFFF-82D2-42FC-6A148AF1A91A14121infoc; b_nut=1704873471; i-wanna-go-back=-1; b_ut=7; b_lsid=9910433CB_18CF260AB89; _uuid=312C2F31-1D48-E108C-4232-D7E96B104A8D1070864infoc; enable_web_push=DISABLE; header_theme_version=undefined; home_feed_column=4; browser_resolution=839-959; buvid4=950387F6-81BA-FA85-1C1C-084C0C68537E14121-024011008-mqHh6TGQlnVgXazy647zgAx1XBsd+g7y946DRln50pkrLmYNRsOEtIPaLiatNJt0; buvid_fp=946265982c5f2c530cfed6f97df5cf65
    • POST Content
    payload:"{\"3064\":1,\"5062\":\"1704873471951\",\"03bf\":\"https%3A%2F%2Fwww.bilibili.com%2F\",\"39c8\":\"333.1007.fp.risk\",\"34f1\":\"\",\"d402\":\"\",\"654a\":\"\",\"6e7c\":\"839x959\",\"3c43\":{\"2673\":1,\"5766\":24,\"6527\":0,\"7003\":1,\"807e\":1,\"b8ce\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\",\"641c\":0,\"07a4\":\"zh-CN\",\"1c57\":8,\"0bd0\":16,\"748e\":[2560,1080],\"d61f\":[2467,1091],\"fc9d\":480,\"6aa9\":\"Asia/Hong_Kong\",\"75b8\":1,\"3b21\":1,\"8a1c\":0,\"d52f\":\"not available\",\"adca\":\"Win32\",\"80c9\":[[\"PDF Viewer\",\"Portable Document Format\",[[\"application/pdf\",\"pdf\"],[\"text/pdf\",\"pdf\"]]],[\"Chrome PDF Viewer\",\"Portable Document Format\",[[\"application/pdf\",\"pdf\"],[\"text/pdf\",\"pdf\"]]],[\"Chromium PDF Viewer\",\"Portable Document Format\",[[\"application/pdf\",\"pdf\"],[\"text/pdf\",\"pdf\"]]],[\"Microsoft Edge PDF Viewer\",\"Portable Document Format\",[[\"application/pdf\",\"pdf\"],[\"text/pdf\",\"pdf\"]]],[\"WebKit built-in PDF\",\"Portable Document Format\",[[\"application/pdf\",\"pdf\"],[\"text/pdf\",\"pdf\"]]]],\"13ab\":\"mTUAAAAASUVORK5CYII=\",\"bfe9\":\"aTot0S1jJ7Ws0JC6QkvAL/A4H1PbV+/QA3AAAAAElFTkSuQmCC\",\"a3c1\":[\"extensions:ANGLE_instanced_arrays;EXT_blend_minmax;EXT_color_buffer_half_float;EXT_disjoint_timer_query;EXT_float_blend;EXT_frag_depth;EXT_shader_texture_lod;EXT_texture_compression_bptc;EXT_texture_compression_rgtc;EXT_texture_filter_anisotropic;EXT_sRGB;KHR_parallel_shader_compile;OES_element_index_uint;OES_fbo_render_mipmap;OES_standard_derivatives;OES_texture_float;OES_texture_float_linear;OES_texture_half_float;OES_texture_half_float_linear;OES_vertex_array_object;WEBGL_color_buffer_float;WEBGL_compressed_texture_s3tc;WEBGL_compressed_texture_s3tc_srgb;WEBGL_debug_renderer_info;WEBGL_debug_shaders;WEBGL_depth_texture;WEBGL_draw_buffers;WEBGL_lose_context;WEBGL_multi_draw\",\"webgl aliased line width range:[1, 1]\",\"webgl aliased point size range:[1, 1024]\",\"webgl alpha bits:8\",\"webgl antialiasing:yes\",\"webgl blue bits:8\",\"webgl depth bits:24\",\"webgl green bits:8\",\"webgl max anisotropy:16\",\"webgl max combined texture image units:32\",\"webgl max cube map texture size:16384\",\"webgl max fragment uniform vectors:1024\",\"webgl max render buffer size:16384\",\"webgl max texture image units:16\",\"webgl max texture size:16384\",\"webgl max varying vectors:30\",\"webgl max vertex attribs:16\",\"webgl max vertex texture image units:16\",\"webgl max vertex uniform vectors:4095\",\"webgl max viewport dims:[32767, 32767]\",\"webgl red bits:8\",\"webgl renderer:WebKit WebGL\",\"webgl shading language version:WebGL GLSL ES 1.0 (OpenGL ES GLSL ES 1.0 Chromium)\",\"webgl stencil bits:0\",\"webgl vendor:WebKit\",\"webgl version:WebGL 1.0 (OpenGL ES 2.0 Chromium)\",\"webgl unmasked vendor:Google Inc. (NVIDIA) #X3fQVPgERx\",\"webgl unmasked renderer:ANGLE (NVIDIA, NVIDIA GeForce RTX 3060 Laptop GPU (0x00002560) Direct3D11 vs_5_0 ps_5_0, D3D11) #X3fQVPgERx\",\"webgl vertex shader high float precision:23\",\"webgl vertex shader high float precision rangeMin:127\",\"webgl vertex shader high float precision rangeMax:127\",\"webgl vertex shader medium float precision:23\",\"webgl vertex shader medium float precision rangeMin:127\",\"webgl vertex shader medium float precision rangeMax:127\",\"webgl vertex shader low float precision:23\",\"webgl vertex shader low float precision rangeMin:127\",\"webgl vertex shader low float precision rangeMax:127\",\"webgl fragment shader high float precision:23\",\"webgl fragment shader high float precision rangeMin:127\",\"webgl fragment shader high float precision rangeMax:127\",\"webgl fragment shader medium float precision:23\",\"webgl fragment shader medium float precision rangeMin:127\",\"webgl fragment shader medium float precision rangeMax:127\",\"webgl fragment shader low float precision:23\",\"webgl fragment shader low float precision rangeMin:127\",\"webgl fragment shader low float precision rangeMax:127\",\"webgl vertex shader high int precision:0\",\"webgl vertex shader high int precision rangeMin:31\",\"webgl vertex shader high int precision rangeMax:30\",\"webgl vertex shader medium int precision:0\",\"webgl vertex shader medium int precision rangeMin:31\",\"webgl vertex shader medium int precision rangeMax:30\",\"webgl vertex shader low int precision:0\",\"webgl vertex shader low int precision rangeMin:31\",\"webgl vertex shader low int precision rangeMax:30\",\"webgl fragment shader high int precision:0\",\"webgl fragment shader high int precision rangeMin:31\",\"webgl fragment shader high int precision rangeMax:30\",\"webgl fragment shader medium int precision:0\",\"webgl fragment shader medium int precision rangeMin:31\",\"webgl fragment shader medium int precision rangeMax:30\",\"webgl fragment shader low int precision:0\",\"webgl fragment shader low int precision rangeMin:31\",\"webgl fragment shader low int precision rangeMax:30\"],\"6bc5\":\"Google Inc. (NVIDIA) #X3fQVPgERx~ANGLE (NVIDIA, NVIDIA GeForce RTX 3060 Laptop GPU (0x00002560) Direct3D11 vs_5_0 ps_5_0, D3D11) #X3fQVPgERx\",\"ed31\":0,\"72bd\":0,\"097b\":0,\"52cd\":[0,0,0],\"a658\":[\"Arial\",\"Arial Black\",\"Arial Narrow\",\"Book Antiqua\",\"Bookman Old Style\",\"Calibri\",\"Cambria\",\"Cambria Math\",\"Century\",\"Century Gothic\",\"Century Schoolbook\",\"Comic Sans MS\",\"Consolas\",\"Courier\",\"Courier New\",\"Georgia\",\"Helvetica\",\"Helvetica Neue\",\"Impact\",\"Lucida Bright\",\"Lucida Calligraphy\",\"Lucida Console\",\"Lucida Fax\",\"Lucida Handwriting\",\"Lucida Sans\",\"Lucida Sans Typewriter\",\"Lucida Sans Unicode\",\"Microsoft Sans Serif\",\"Monotype Corsiva\",\"MS Gothic\",\"MS PGothic\",\"MS Reference Sans Serif\",\"MS Sans Serif\",\"MS Serif\",\"Palatino Linotype\",\"Segoe Print\",\"Segoe Script\",\"Segoe UI\",\"Segoe UI Light\",\"Segoe UI Semibold\",\"Segoe UI Symbol\",\"Tahoma\",\"Times\",\"Times New Roman\",\"Trebuchet MS\",\"Verdana\",\"Wingdings\",\"Wingdings 2\",\"Wingdings 3\"],\"d02f\":\"124.04347527516074\"},\"54ef\":\"{\\\"b_ut\\\":\\\"7\\\",\\\"home_version\\\":\\\"V8\\\",\\\"i-wanna-go-back\\\":\\\"-1\\\",\\\"in_new_ab\\\":true,\\\"ab_version\\\":{\\\"for_ai_home_version\\\":\\\"V8\\\",\\\"tianma_banner_inline\\\":\\\"CONTROL\\\",\\\"enable_web_push\\\":\\\"DISABLE\\\"},\\\"ab_split_num\\\":{\\\"for_ai_home_version\\\":54,\\\"tianma_banner_inline\\\":54,\\\"enable_web_push\\\":10}}\",\"8b94\":\"\",\"df35\":\"312C2F31-1D48-E108C-4232-D7E96B104A8D1070864infoc\",\"07a4\":\"zh-CN\",\"5f45\":null,\"db46\":0}"
    • payload content example
    {
    "3064":1, // ptype, mobile => 2, others => 1
    "5062":"1704873471951", // timestamp
    "03bf":"https%3A%2F%2Fwww.bilibili.com%2F", // url accessed
    "39c8":"333.1007.fp.risk", // spm_id,
    "34f1":"", // target_url, default empty now
    "d402":"", // screenx, default empty
    "654a":"", // screeny, default empty
    "6e7c":"839x959", // browser_resolution, window.innerWidth || document.body && document.body.clientWidth + "x" + window.innerHeight || document.body && document.body.clientHeight
    "3c43":{ // 3c43 => msg
        "2673":1, // hasLiedResolution, window.screen.width < window.screen.availWidth || window.screen.height < window.screen.availHeight
        "5766":24, // colorDepth, window.screen.colorDepth
        "6527":0, // addBehavior, !!window.HTMLElement.prototype.addBehavior, html5 api
        "7003":1, // indexedDb, !!window.indexedDB, html5 api
        "807e":1, // cookieEnabled, navigator.cookieEnabled
        "b8ce":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36", // ua
        "641c":0, // webdriver, navigator.webdriver, like Selenium
        "07a4":"zh-CN", // language
        "1c57":8, // deviceMemory in GB, navigator.deviceMemory
        "0bd0":16, // hardwareConcurrency, navigator.hardwareConcurrency
        "748e":[
            2560, // window.screen.width
            1080  // window.screen.height
        ], // screenResolution
        "d61f":[
            2467, // window.screen.availWidth
            1091  // window.screen.availHeight
        ], // availableScreenResolution
        "fc9d":480, // timezoneOffset, (new Date).getTimezoneOffset()
        "6aa9":"Asia/Hong_Kong", // timezone, (new window.Intl.DateTimeFormat).resolvedOptions().timeZone
        "75b8":1, // sessionStorage, window.sessionStorage, html5 api
        "3b21":1, // localStorage, window.localStorage, html5 api
        "8a1c":0, // openDatabase, window.openDatabase, html5 api
        "d52f":"not available", // cpuClass, navigator.cpuClass
        "adca":"Win32", // platform, navigator.platform
        "80c9":[
            [
                "PDF Viewer",
                "Portable Document Format",
                [
                    [
                        "application/pdf",
                        "pdf"
                    ],
                    [
                        "text/pdf",
                        "pdf"
                    ]
                ]
            ],
            [
                "Chrome PDF Viewer",
                "Portable Document Format",
                [
                    [
                        "application/pdf",
                        "pdf"
                    ],
                    [
                        "text/pdf",
                        "pdf"
                    ]
                ]
            ],
            [
                "Chromium PDF Viewer",
                "Portable Document Format",
                [
                    [
                        "application/pdf",
                        "pdf"
                    ],
                    [
                        "text/pdf",
                        "pdf"
                    ]
                ]
            ],
            [
                "Microsoft Edge PDF Viewer",
                "Portable Document Format",
                [
                    [
                        "application/pdf",
                        "pdf"
                    ],
                    [
                        "text/pdf",
                        "pdf"
                    ]
                ]
            ],
            [
                "WebKit built-in PDF",
                "Portable Document Format",
                [
                    [
                        "application/pdf",
                        "pdf"
                    ],
                    [
                        "text/pdf",
                        "pdf"
                    ]
                ]
            ]
        ], // plugins
        "13ab":"mTUAAAAASUVORK5CYII=", // canvas fingerprint
        "bfe9":"aTot0S1jJ7Ws0JC6QkvAL/A4H1PbV+/QA3AAAAAElFTkSuQmCC", // webgl_str
        "a3c1":[
            "extensions:ANGLE_instanced_arrays;EXT_blend_minmax;EXT_color_buffer_half_float;EXT_disjoint_timer_query;EXT_float_blend;EXT_frag_depth;EXT_shader_texture_lod;EXT_texture_compression_bptc;EXT_texture_compression_rgtc;EXT_texture_filter_anisotropic;EXT_sRGB;KHR_parallel_shader_compile;OES_element_index_uint;OES_fbo_render_mipmap;OES_standard_derivatives;OES_texture_float;OES_texture_float_linear;OES_texture_half_float;OES_texture_half_float_linear;OES_vertex_array_object;WEBGL_color_buffer_float;WEBGL_compressed_texture_s3tc;WEBGL_compressed_texture_s3tc_srgb;WEBGL_debug_renderer_info;WEBGL_debug_shaders;WEBGL_depth_texture;WEBGL_draw_buffers;WEBGL_lose_context;WEBGL_multi_draw",
            "webgl aliased line width range:[1, 1]",
            "webgl aliased point size range:[1, 1024]",
            "webgl alpha bits:8",
            "webgl antialiasing:yes",
            "webgl blue bits:8",
            "webgl depth bits:24",
            "webgl green bits:8",
            "webgl max anisotropy:16",
            "webgl max combined texture image units:32",
            "webgl max cube map texture size:16384",
            "webgl max fragment uniform vectors:1024",
            "webgl max render buffer size:16384",
            "webgl max texture image units:16",
            "webgl max texture size:16384",
            "webgl max varying vectors:30",
            "webgl max vertex attribs:16",
            "webgl max vertex texture image units:16",
            "webgl max vertex uniform vectors:4095",
            "webgl max viewport dims:[32767, 32767]",
            "webgl red bits:8",
            "webgl renderer:WebKit WebGL",
            "webgl shading language version:WebGL GLSL ES 1.0 (OpenGL ES GLSL ES 1.0 Chromium)",
            "webgl stencil bits:0",
            "webgl vendor:WebKit",
            "webgl version:WebGL 1.0 (OpenGL ES 2.0 Chromium)",
            "webgl unmasked vendor:Google Inc. (NVIDIA) #X3fQVPgERx",
            "webgl unmasked renderer:ANGLE (NVIDIA, NVIDIA GeForce RTX 3060 Laptop GPU (0x00002560) Direct3D11 vs_5_0 ps_5_0, D3D11) #X3fQVPgERx",
            "webgl vertex shader high float precision:23",
            "webgl vertex shader high float precision rangeMin:127",
            "webgl vertex shader high float precision rangeMax:127",
            "webgl vertex shader medium float precision:23",
            "webgl vertex shader medium float precision rangeMin:127",
            "webgl vertex shader medium float precision rangeMax:127",
            "webgl vertex shader low float precision:23",
            "webgl vertex shader low float precision rangeMin:127",
            "webgl vertex shader low float precision rangeMax:127",
            "webgl fragment shader high float precision:23",
            "webgl fragment shader high float precision rangeMin:127",
            "webgl fragment shader high float precision rangeMax:127",
            "webgl fragment shader medium float precision:23",
            "webgl fragment shader medium float precision rangeMin:127",
            "webgl fragment shader medium float precision rangeMax:127",
            "webgl fragment shader low float precision:23",
            "webgl fragment shader low float precision rangeMin:127",
            "webgl fragment shader low float precision rangeMax:127",
            "webgl vertex shader high int precision:0",
            "webgl vertex shader high int precision rangeMin:31",
            "webgl vertex shader high int precision rangeMax:30",
            "webgl vertex shader medium int precision:0",
            "webgl vertex shader medium int precision rangeMin:31",
            "webgl vertex shader medium int precision rangeMax:30",
            "webgl vertex shader low int precision:0",
            "webgl vertex shader low int precision rangeMin:31",
            "webgl vertex shader low int precision rangeMax:30",
            "webgl fragment shader high int precision:0",
            "webgl fragment shader high int precision rangeMin:31",
            "webgl fragment shader high int precision rangeMax:30",
            "webgl fragment shader medium int precision:0",
            "webgl fragment shader medium int precision rangeMin:31",
            "webgl fragment shader medium int precision rangeMax:30",
            "webgl fragment shader low int precision:0",
            "webgl fragment shader low int precision rangeMin:31",
            "webgl fragment shader low int precision rangeMax:30"
        ], // webgl_params, cab be set to [] if webgl is not supported
        "6bc5":"Google Inc. (NVIDIA) #X3fQVPgERx~ANGLE (NVIDIA, NVIDIA GeForce RTX 3060 Laptop GPU (0x00002560) Direct3D11 vs_5_0 ps_5_0, D3D11) #X3fQVPgERx", // webglVendorAndRenderer
        "ed31":0, // hasLiedLanguages
        "72bd":0, // hasLiedOs
        "097b":0, // hasLiedBrowser
        "52cd":[
            0, // void 0 !== navigator.maxTouchPoints ? t = navigator.maxTouchPoints : void 0 !== navigator.msMaxTouchPoints && (t = navigator.msMaxTouchPoints);
            0, // document.createEvent("TouchEvent"), if succeed 1 else 0
            0 // "ontouchstart" in window ? 1 : 0
        ], // touch support
        "a658":[
            "Arial",
            "Arial Black",
            "Arial Narrow",
            "Book Antiqua",
            "Bookman Old Style",
            "Calibri",
            "Cambria",
            "Cambria Math",
            "Century",
            "Century Gothic",
            "Century Schoolbook",
            "Comic Sans MS",
            "Consolas",
            "Courier",
            "Courier New",
            "Georgia",
            "Helvetica",
            "Helvetica Neue",
            "Impact",
            "Lucida Bright",
            "Lucida Calligraphy",
            "Lucida Console",
            "Lucida Fax",
            "Lucida Handwriting",
            "Lucida Sans",
            "Lucida Sans Typewriter",
            "Lucida Sans Unicode",
            "Microsoft Sans Serif",
            "Monotype Corsiva",
            "MS Gothic",
            "MS PGothic",
            "MS Reference Sans Serif",
            "MS Sans Serif",
            "MS Serif",
            "Palatino Linotype",
            "Segoe Print",
            "Segoe Script",
            "Segoe UI",
            "Segoe UI Light",
            "Segoe UI Semibold",
            "Segoe UI Symbol",
            "Tahoma",
            "Times",
            "Times New Roman",
            "Trebuchet MS",
            "Verdana",
            "Wingdings",
            "Wingdings 2",
            "Wingdings 3"
        ], // font details. see https://github.com/fingerprintjs/fingerprintjs for implementation details
        "d02f":"124.04347527516074" // audio fingerprint. see https://github.com/fingerprintjs/fingerprintjs for implementation details
    },
    "54ef":"{\"b_ut\":\"7\",\"home_version\":\"V8\",\"i-wanna-go-back\":\"-1\",\"in_new_ab\":true,\"ab_version\":{\"for_ai_home_version\":\"V8\",\"tianma_banner_inline\":\"CONTROL\",\"enable_web_push\":\"DISABLE\"},\"ab_split_num\":{\"for_ai_home_version\":54,\"tianma_banner_inline\":54,\"enable_web_push\":10}}", // abtest info, embedded in html
    "8b94":"", // refer_url, document.referrer ? encodeURIComponent(document.referrer).substr(0, 1e3) : ""
    "df35":"312C2F31-1D48-E108C-4232-D7E96B104A8D1070864infoc", // _uuid, set from cookie, generated by client side(algorithm remains unknown)
    "07a4":"zh-CN", // language
    "5f45":null, // laboratory, set from cookie, null if empty, source remains unknown
    "db46":0 // is_selfdef, default 0
}

Originally posted by @cxw620 in https://github.com/SocialSisterYi/bilibili-API-collect/issues/686#issuecomment-1884438297

UUID (_uuid mentioned above) generation algorithm

See Rust Playground

BUVID Fp (buvid_fp mentioned above) generation algorithm

[!TIP] Using your own browser's fingerprintjs2 info and related buvid_fp will be the best choice for your crawler.

See Rust Playground

A good way to obtain a buvid_fp Copy these codes into your browser console: ```javascript /* * Fingerprintjs2 2.1.4 - Modern & flexible browser fingerprint library v2 * https://github.com/fingerprintjs/fingerprintjs * Copyright (c) 2020 Valentin Vasilyev (valentin@fingerprintjs.com) * Licensed under the MIT (http://www.opensource.org/licenses/mit-license.php) license. * * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE * ARE DISCLAIMED. IN NO EVENT SHALL VALENTIN VASILYEV BE LIABLE FOR ANY * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */ /* * This software contains code from open-source projects: * MurmurHash3 by Karan Lyons (https://github.com/karanlyons/murmurHash3.js) */ /* global define */ (function (name, context, definition) { 'use strict' if (typeof window !== 'undefined' && typeof define === 'function' && define.amd) { define(definition) } else if (typeof module !== 'undefined' && module.exports) { module.exports = definition() } else if (context.exports) { context.exports = definition() } else { context[name] = definition() } })('Fingerprint2', this, function () { 'use strict' // detect if object is array // only implement if no native implementation is available if (typeof Array.isArray === 'undefined') { Array.isArray = function (obj) { return Object.prototype.toString.call(obj) === '[object Array]' } }; /// MurmurHash3 related functions // // Given two 64bit ints (as an array of two 32bit ints) returns the two // added together as a 64bit int (as an array of two 32bit ints). // var x64Add = function (m, n) { m = [m[0] >>> 16, m[0] & 0xffff, m[1] >>> 16, m[1] & 0xffff] n = [n[0] >>> 16, n[0] & 0xffff, n[1] >>> 16, n[1] & 0xffff] var o = [0, 0, 0, 0] o[3] += m[3] + n[3] o[2] += o[3] >>> 16 o[3] &= 0xffff o[2] += m[2] + n[2] o[1] += o[2] >>> 16 o[2] &= 0xffff o[1] += m[1] + n[1] o[0] += o[1] >>> 16 o[1] &= 0xffff o[0] += m[0] + n[0] o[0] &= 0xffff return [(o[0] << 16) | o[1], (o[2] << 16) | o[3]] } // // Given two 64bit ints (as an array of two 32bit ints) returns the two // multiplied together as a 64bit int (as an array of two 32bit ints). // var x64Multiply = function (m, n) { m = [m[0] >>> 16, m[0] & 0xffff, m[1] >>> 16, m[1] & 0xffff] n = [n[0] >>> 16, n[0] & 0xffff, n[1] >>> 16, n[1] & 0xffff] var o = [0, 0, 0, 0] o[3] += m[3] * n[3] o[2] += o[3] >>> 16 o[3] &= 0xffff o[2] += m[2] * n[3] o[1] += o[2] >>> 16 o[2] &= 0xffff o[2] += m[3] * n[2] o[1] += o[2] >>> 16 o[2] &= 0xffff o[1] += m[1] * n[3] o[0] += o[1] >>> 16 o[1] &= 0xffff o[1] += m[2] * n[2] o[0] += o[1] >>> 16 o[1] &= 0xffff o[1] += m[3] * n[1] o[0] += o[1] >>> 16 o[1] &= 0xffff o[0] += (m[0] * n[3]) + (m[1] * n[2]) + (m[2] * n[1]) + (m[3] * n[0]) o[0] &= 0xffff return [(o[0] << 16) | o[1], (o[2] << 16) | o[3]] } // // Given a 64bit int (as an array of two 32bit ints) and an int // representing a number of bit positions, returns the 64bit int (as an // array of two 32bit ints) rotated left by that number of positions. // var x64Rotl = function (m, n) { n %= 64 if (n === 32) { return [m[1], m[0]] } else if (n < 32) { return [(m[0] << n) | (m[1] >>> (32 - n)), (m[1] << n) | (m[0] >>> (32 - n))] } else { n -= 32 return [(m[1] << n) | (m[0] >>> (32 - n)), (m[0] << n) | (m[1] >>> (32 - n))] } } // // Given a 64bit int (as an array of two 32bit ints) and an int // representing a number of bit positions, returns the 64bit int (as an // array of two 32bit ints) shifted left by that number of positions. // var x64LeftShift = function (m, n) { n %= 64 if (n === 0) { return m } else if (n < 32) { return [(m[0] << n) | (m[1] >>> (32 - n)), m[1] << n] } else { return [m[1] << (n - 32), 0] } } // // Given two 64bit ints (as an array of two 32bit ints) returns the two // xored together as a 64bit int (as an array of two 32bit ints). // var x64Xor = function (m, n) { return [m[0] ^ n[0], m[1] ^ n[1]] } // // Given a block, returns murmurHash3's final x64 mix of that block. // (`[0, h[0] >>> 1]` is a 33 bit unsigned right shift. This is the // only place where we need to right shift 64bit ints.) // var x64Fmix = function (h) { h = x64Xor(h, [0, h[0] >>> 1]) h = x64Multiply(h, [0xff51afd7, 0xed558ccd]) h = x64Xor(h, [0, h[0] >>> 1]) h = x64Multiply(h, [0xc4ceb9fe, 0x1a85ec53]) h = x64Xor(h, [0, h[0] >>> 1]) return h } // // Given a string and an optional seed as an int, returns a 128 bit // hash using the x64 flavor of MurmurHash3, as an unsigned hex. // var x64hash128 = function (key, seed) { key = key || '' seed = seed || 0 var remainder = key.length % 16 var bytes = key.length - remainder var h1 = [0, seed] var h2 = [0, seed] var k1 = [0, 0] var k2 = [0, 0] var c1 = [0x87c37b91, 0x114253d5] var c2 = [0x4cf5ad43, 0x2745937f] for (var i = 0; i < bytes; i = i + 16) { k1 = [((key.charCodeAt(i + 4) & 0xff)) | ((key.charCodeAt(i + 5) & 0xff) << 8) | ((key.charCodeAt(i + 6) & 0xff) << 16) | ((key.charCodeAt(i + 7) & 0xff) << 24), ((key.charCodeAt(i) & 0xff)) | ((key.charCodeAt(i + 1) & 0xff) << 8) | ((key.charCodeAt(i + 2) & 0xff) << 16) | ((key.charCodeAt(i + 3) & 0xff) << 24)] k2 = [((key.charCodeAt(i + 12) & 0xff)) | ((key.charCodeAt(i + 13) & 0xff) << 8) | ((key.charCodeAt(i + 14) & 0xff) << 16) | ((key.charCodeAt(i + 15) & 0xff) << 24), ((key.charCodeAt(i + 8) & 0xff)) | ((key.charCodeAt(i + 9) & 0xff) << 8) | ((key.charCodeAt(i + 10) & 0xff) << 16) | ((key.charCodeAt(i + 11) & 0xff) << 24)] k1 = x64Multiply(k1, c1) k1 = x64Rotl(k1, 31) k1 = x64Multiply(k1, c2) h1 = x64Xor(h1, k1) h1 = x64Rotl(h1, 27) h1 = x64Add(h1, h2) h1 = x64Add(x64Multiply(h1, [0, 5]), [0, 0x52dce729]) k2 = x64Multiply(k2, c2) k2 = x64Rotl(k2, 33) k2 = x64Multiply(k2, c1) h2 = x64Xor(h2, k2) h2 = x64Rotl(h2, 31) h2 = x64Add(h2, h1) h2 = x64Add(x64Multiply(h2, [0, 5]), [0, 0x38495ab5]) } k1 = [0, 0] k2 = [0, 0] switch (remainder) { case 15: k2 = x64Xor(k2, x64LeftShift([0, key.charCodeAt(i + 14)], 48)) // fallthrough case 14: k2 = x64Xor(k2, x64LeftShift([0, key.charCodeAt(i + 13)], 40)) // fallthrough case 13: k2 = x64Xor(k2, x64LeftShift([0, key.charCodeAt(i + 12)], 32)) // fallthrough case 12: k2 = x64Xor(k2, x64LeftShift([0, key.charCodeAt(i + 11)], 24)) // fallthrough case 11: k2 = x64Xor(k2, x64LeftShift([0, key.charCodeAt(i + 10)], 16)) // fallthrough case 10: k2 = x64Xor(k2, x64LeftShift([0, key.charCodeAt(i + 9)], 8)) // fallthrough case 9: k2 = x64Xor(k2, [0, key.charCodeAt(i + 8)]) k2 = x64Multiply(k2, c2) k2 = x64Rotl(k2, 33) k2 = x64Multiply(k2, c1) h2 = x64Xor(h2, k2) // fallthrough case 8: k1 = x64Xor(k1, x64LeftShift([0, key.charCodeAt(i + 7)], 56)) // fallthrough case 7: k1 = x64Xor(k1, x64LeftShift([0, key.charCodeAt(i + 6)], 48)) // fallthrough case 6: k1 = x64Xor(k1, x64LeftShift([0, key.charCodeAt(i + 5)], 40)) // fallthrough case 5: k1 = x64Xor(k1, x64LeftShift([0, key.charCodeAt(i + 4)], 32)) // fallthrough case 4: k1 = x64Xor(k1, x64LeftShift([0, key.charCodeAt(i + 3)], 24)) // fallthrough case 3: k1 = x64Xor(k1, x64LeftShift([0, key.charCodeAt(i + 2)], 16)) // fallthrough case 2: k1 = x64Xor(k1, x64LeftShift([0, key.charCodeAt(i + 1)], 8)) // fallthrough case 1: k1 = x64Xor(k1, [0, key.charCodeAt(i)]) k1 = x64Multiply(k1, c1) k1 = x64Rotl(k1, 31) k1 = x64Multiply(k1, c2) h1 = x64Xor(h1, k1) // fallthrough } h1 = x64Xor(h1, [0, key.length]) h2 = x64Xor(h2, [0, key.length]) h1 = x64Add(h1, h2) h2 = x64Add(h2, h1) h1 = x64Fmix(h1) h2 = x64Fmix(h2) h1 = x64Add(h1, h2) h2 = x64Add(h2, h1) return ('00000000' + (h1[0] >>> 0).toString(16)).slice(-8) + ('00000000' + (h1[1] >>> 0).toString(16)).slice(-8) + ('00000000' + (h2[0] >>> 0).toString(16)).slice(-8) + ('00000000' + (h2[1] >>> 0).toString(16)).slice(-8) } var defaultOptions = { preprocessor: null, audio: { timeout: 1000, // On iOS 11, audio context can only be used in response to user interaction. // We require users to explicitly enable audio fingerprinting on iOS 11. // See https://stackoverflow.com/questions/46363048/onaudioprocess-not-called-on-ios11#46534088 excludeIOS11: true }, fonts: { swfContainerId: 'fingerprintjs2', swfPath: 'flash/compiled/FontList.swf', userDefinedFonts: [], extendedJsFonts: false }, screen: { // To ensure consistent fingerprints when users rotate their mobile devices detectScreenOrientation: true }, plugins: { sortPluginsFor: [/palemoon/i], excludeIE: false }, extraComponents: [], excludes: { // Unreliable on Windows, see https://github.com/fingerprintjs/fingerprintjs/issues/375 'enumerateDevices': true, // devicePixelRatio depends on browser zoom, and it's impossible to detect browser zoom 'pixelRatio': true, // DNT depends on incognito mode for some browsers (Chrome) and it's impossible to detect incognito mode 'doNotTrack': true, // uses js fonts already 'fontsFlash': true, // Extensions (including AdBlock) are disabled by default in Incognito mod of Chrome and Firefox // See https://github.com/fingerprintjs/fingerprintjs/issues/405 'adBlock': true }, NOT_AVAILABLE: 'not available', ERROR: 'error', EXCLUDED: 'excluded' } var each = function (obj, iterator) { if (Array.prototype.forEach && obj.forEach === Array.prototype.forEach) { obj.forEach(iterator) } else if (obj.length === +obj.length) { for (var i = 0, l = obj.length; i < l; i++) { iterator(obj[i], i, obj) } } else { for (var key in obj) { if (obj.hasOwnProperty(key)) { iterator(obj[key], key, obj) } } } } var map = function (obj, iterator) { var results = [] // Not using strict equality so that this acts as a // shortcut to checking for `null` and `undefined`. if (obj == null) { return results } if (Array.prototype.map && obj.map === Array.prototype.map) { return obj.map(iterator) } each(obj, function (value, index, list) { results.push(iterator(value, index, list)) }) return results } var extendSoft = function (target, source) { if (source == null) { return target } var value var key for (key in source) { value = source[key] if (value != null && !(Object.prototype.hasOwnProperty.call(target, key))) { target[key] = value } } return target } // https://developer.mozilla.org/en-US/docs/Web/API/MediaDevices/enumerateDevices var enumerateDevicesKey = function (done, options) { if (!isEnumerateDevicesSupported()) { return done(options.NOT_AVAILABLE) } navigator.mediaDevices.enumerateDevices().then(function (devices) { done(devices.map(function (device) { return 'id=' + device.deviceId + ';gid=' + device.groupId + ';' + device.kind + ';' + device.label })) }).catch(function (error) { done(error) }) } var isEnumerateDevicesSupported = function () { return (navigator.mediaDevices && navigator.mediaDevices.enumerateDevices) } // Inspired by and based on https://github.com/cozylife/audio-fingerprint var audioKey = function (done, options) { var audioOptions = options.audio if (audioOptions.excludeIOS11 && navigator.userAgent.match(/OS 11.+Version\/11.+Safari/)) { // See comment for excludeUserAgent and https://stackoverflow.com/questions/46363048/onaudioprocess-not-called-on-ios11#46534088 return done(options.EXCLUDED) } var AudioContext = window.OfflineAudioContext || window.webkitOfflineAudioContext if (AudioContext == null) { return done(options.NOT_AVAILABLE) } var context = new AudioContext(1, 44100, 44100) var oscillator = context.createOscillator() oscillator.type = 'triangle' oscillator.frequency.setValueAtTime(10000, context.currentTime) var compressor = context.createDynamicsCompressor() each([ ['threshold', -50], ['knee', 40], ['ratio', 12], ['reduction', -20], ['attack', 0], ['release', 0.25] ], function (item) { if (compressor[item[0]] !== undefined && typeof compressor[item[0]].setValueAtTime === 'function') { compressor[item[0]].setValueAtTime(item[1], context.currentTime) } }) oscillator.connect(compressor) compressor.connect(context.destination) oscillator.start(0) context.startRendering() var audioTimeoutId = setTimeout(function () { console.warn('Audio fingerprint timed out. Please report bug at https://github.com/fingerprintjs/fingerprintjs with your user agent: "' + navigator.userAgent + '".') context.oncomplete = function () { } context = null return done('audioTimeout') }, audioOptions.timeout) context.oncomplete = function (event) { var fingerprint try { clearTimeout(audioTimeoutId) fingerprint = event.renderedBuffer.getChannelData(0) .slice(4500, 5000) .reduce(function (acc, val) { return acc + Math.abs(val) }, 0) .toString() oscillator.disconnect() compressor.disconnect() } catch (error) { done(error) return } done(fingerprint) } } var UserAgent = function (done) { done(navigator.userAgent) } var webdriver = function (done, options) { done(navigator.webdriver == null ? options.NOT_AVAILABLE : navigator.webdriver) } var languageKey = function (done, options) { done(navigator.language || navigator.userLanguage || navigator.browserLanguage || navigator.systemLanguage || options.NOT_AVAILABLE) } var colorDepthKey = function (done, options) { done(window.screen.colorDepth || options.NOT_AVAILABLE) } var deviceMemoryKey = function (done, options) { done(navigator.deviceMemory || options.NOT_AVAILABLE) } var pixelRatioKey = function (done, options) { done(window.devicePixelRatio || options.NOT_AVAILABLE) } var screenResolutionKey = function (done, options) { done(getScreenResolution(options)) } var getScreenResolution = function (options) { var resolution = [window.screen.width, window.screen.height] if (options.screen.detectScreenOrientation) { resolution.sort().reverse() } return resolution } var availableScreenResolutionKey = function (done, options) { done(getAvailableScreenResolution(options)) } var getAvailableScreenResolution = function (options) { if (window.screen.availWidth && window.screen.availHeight) { var available = [window.screen.availHeight, window.screen.availWidth] if (options.screen.detectScreenOrientation) { available.sort().reverse() } return available } // headless browsers return options.NOT_AVAILABLE } var timezoneOffset = function (done) { done(new Date().getTimezoneOffset()) } var timezone = function (done, options) { if (window.Intl && window.Intl.DateTimeFormat) { done(new window.Intl.DateTimeFormat().resolvedOptions().timeZone || options.NOT_AVAILABLE) return } done(options.NOT_AVAILABLE) } var sessionStorageKey = function (done, options) { done(hasSessionStorage(options)) } var localStorageKey = function (done, options) { done(hasLocalStorage(options)) } var indexedDbKey = function (done, options) { done(hasIndexedDB(options)) } var addBehaviorKey = function (done) { done(!!window.HTMLElement.prototype.addBehavior) } var openDatabaseKey = function (done) { done(!!window.openDatabase) } var cpuClassKey = function (done, options) { done(getNavigatorCpuClass(options)) } var platformKey = function (done, options) { done(getNavigatorPlatform(options)) } var doNotTrackKey = function (done, options) { done(getDoNotTrack(options)) } var canvasKey = function (done, options) { if (isCanvasSupported()) { done(getCanvasFp(options)) return } done(options.NOT_AVAILABLE) } var webglKey = function (done, options) { if (isWebGlSupported()) { done(getWebglFp()) return } done(options.NOT_AVAILABLE) } var webglVendorAndRendererKey = function (done) { if (isWebGlSupported()) { done(getWebglVendorAndRenderer()) return } done() } var adBlockKey = function (done) { done(getAdBlock()) } var hasLiedLanguagesKey = function (done) { done(getHasLiedLanguages()) } var hasLiedResolutionKey = function (done) { done(getHasLiedResolution()) } var hasLiedOsKey = function (done) { done(getHasLiedOs()) } var hasLiedBrowserKey = function (done) { done(getHasLiedBrowser()) } // flash fonts (will increase fingerprinting time 20X to ~ 130-150ms) var flashFontsKey = function (done, options) { // we do flash if swfobject is loaded if (!hasSwfObjectLoaded()) { return done('swf object not loaded') } if (!hasMinFlashInstalled()) { return done('flash not installed') } if (!options.fonts.swfPath) { return done('missing options.fonts.swfPath') } loadSwfAndDetectFonts(function (fonts) { done(fonts) }, options) } // kudos to http://www.lalit.org/lab/javascript-css-font-detect/ var jsFontsKey = function (done, options) { // a font will be compared against all the three default fonts. // and if it doesn't match all 3 then that font is not available. var baseFonts = ['monospace', 'sans-serif', 'serif'] var fontList = [ 'Andale Mono', 'Arial', 'Arial Black', 'Arial Hebrew', 'Arial MT', 'Arial Narrow', 'Arial Rounded MT Bold', 'Arial Unicode MS', 'Bitstream Vera Sans Mono', 'Book Antiqua', 'Bookman Old Style', 'Calibri', 'Cambria', 'Cambria Math', 'Century', 'Century Gothic', 'Century Schoolbook', 'Comic Sans', 'Comic Sans MS', 'Consolas', 'Courier', 'Courier New', 'Geneva', 'Georgia', 'Helvetica', 'Helvetica Neue', 'Impact', 'Lucida Bright', 'Lucida Calligraphy', 'Lucida Console', 'Lucida Fax', 'LUCIDA GRANDE', 'Lucida Handwriting', 'Lucida Sans', 'Lucida Sans Typewriter', 'Lucida Sans Unicode', 'Microsoft Sans Serif', 'Monaco', 'Monotype Corsiva', 'MS Gothic', 'MS Outlook', 'MS PGothic', 'MS Reference Sans Serif', 'MS Sans Serif', 'MS Serif', 'MYRIAD', 'MYRIAD PRO', 'Palatino', 'Palatino Linotype', 'Segoe Print', 'Segoe Script', 'Segoe UI', 'Segoe UI Light', 'Segoe UI Semibold', 'Segoe UI Symbol', 'Tahoma', 'Times', 'Times New Roman', 'Times New Roman PS', 'Trebuchet MS', 'Verdana', 'Wingdings', 'Wingdings 2', 'Wingdings 3' ] if (options.fonts.extendedJsFonts) { var extendedFontList = [ 'Abadi MT Condensed Light', 'Academy Engraved LET', 'ADOBE CASLON PRO', 'Adobe Garamond', 'ADOBE GARAMOND PRO', 'Agency FB', 'Aharoni', 'Albertus Extra Bold', 'Albertus Medium', 'Algerian', 'Amazone BT', 'American Typewriter', 'American Typewriter Condensed', 'AmerType Md BT', 'Andalus', 'Angsana New', 'AngsanaUPC', 'Antique Olive', 'Aparajita', 'Apple Chancery', 'Apple Color Emoji', 'Apple SD Gothic Neo', 'Arabic Typesetting', 'ARCHER', 'ARNO PRO', 'Arrus BT', 'Aurora Cn BT', 'AvantGarde Bk BT', 'AvantGarde Md BT', 'AVENIR', 'Ayuthaya', 'Bandy', 'Bangla Sangam MN', 'Bank Gothic', 'BankGothic Md BT', 'Baskerville', 'Baskerville Old Face', 'Batang', 'BatangChe', 'Bauer Bodoni', 'Bauhaus 93', 'Bazooka', 'Bell MT', 'Bembo', 'Benguiat Bk BT', 'Berlin Sans FB', 'Berlin Sans FB Demi', 'Bernard MT Condensed', 'BernhardFashion BT', 'BernhardMod BT', 'Big Caslon', 'BinnerD', 'Blackadder ITC', 'BlairMdITC TT', 'Bodoni 72', 'Bodoni 72 Oldstyle', 'Bodoni 72 Smallcaps', 'Bodoni MT', 'Bodoni MT Black', 'Bodoni MT Condensed', 'Bodoni MT Poster Compressed', 'Bookshelf Symbol 7', 'Boulder', 'Bradley Hand', 'Bradley Hand ITC', 'Bremen Bd BT', 'Britannic Bold', 'Broadway', 'Browallia New', 'BrowalliaUPC', 'Brush Script MT', 'Californian FB', 'Calisto MT', 'Calligrapher', 'Candara', 'CaslonOpnface BT', 'Castellar', 'Centaur', 'Cezanne', 'CG Omega', 'CG Times', 'Chalkboard', 'Chalkboard SE', 'Chalkduster', 'Charlesworth', 'Charter Bd BT', 'Charter BT', 'Chaucer', 'ChelthmITC Bk BT', 'Chiller', 'Clarendon', 'Clarendon Condensed', 'CloisterBlack BT', 'Cochin', 'Colonna MT', 'Constantia', 'Cooper Black', 'Copperplate', 'Copperplate Gothic', 'Copperplate Gothic Bold', 'Copperplate Gothic Light', 'CopperplGoth Bd BT', 'Corbel', 'Cordia New', 'CordiaUPC', 'Cornerstone', 'Coronet', 'Cuckoo', 'Curlz MT', 'DaunPenh', 'Dauphin', 'David', 'DB LCD Temp', 'DELICIOUS', 'Denmark', 'DFKai-SB', 'Didot', 'DilleniaUPC', 'DIN', 'DokChampa', 'Dotum', 'DotumChe', 'Ebrima', 'Edwardian Script ITC', 'Elephant', 'English 111 Vivace BT', 'Engravers MT', 'EngraversGothic BT', 'Eras Bold ITC', 'Eras Demi ITC', 'Eras Light ITC', 'Eras Medium ITC', 'EucrosiaUPC', 'Euphemia', 'Euphemia UCAS', 'EUROSTILE', 'Exotc350 Bd BT', 'FangSong', 'Felix Titling', 'Fixedsys', 'FONTIN', 'Footlight MT Light', 'Forte', 'FrankRuehl', 'Fransiscan', 'Freefrm721 Blk BT', 'FreesiaUPC', 'Freestyle Script', 'French Script MT', 'FrnkGothITC Bk BT', 'Fruitger', 'FRUTIGER', 'Futura', 'Futura Bk BT', 'Futura Lt BT', 'Futura Md BT', 'Futura ZBlk BT', 'FuturaBlack BT', 'Gabriola', 'Galliard BT', 'Gautami', 'Geeza Pro', 'Geometr231 BT', 'Geometr231 Hv BT', 'Geometr231 Lt BT', 'GeoSlab 703 Lt BT', 'GeoSlab 703 XBd BT', 'Gigi', 'Gill Sans', 'Gill Sans MT', 'Gill Sans MT Condensed', 'Gill Sans MT Ext Condensed Bold', 'Gill Sans Ultra Bold', 'Gill Sans Ultra Bold Condensed', 'Gisha', 'Gloucester MT Extra Condensed', 'GOTHAM', 'GOTHAM BOLD', 'Goudy Old Style', 'Goudy Stout', 'GoudyHandtooled BT', 'GoudyOLSt BT', 'Gujarati Sangam MN', 'Gulim', 'GulimChe', 'Gungsuh', 'GungsuhChe', 'Gurmukhi MN', 'Haettenschweiler', 'Harlow Solid Italic', 'Harrington', 'Heather', 'Heiti SC', 'Heiti TC', 'HELV', 'Herald', 'High Tower Text', 'Hiragino Kaku Gothic ProN', 'Hiragino Mincho ProN', 'Hoefler Text', 'Humanst 521 Cn BT', 'Humanst521 BT', 'Humanst521 Lt BT', 'Imprint MT Shadow', 'Incised901 Bd BT', 'Incised901 BT', 'Incised901 Lt BT', 'INCONSOLATA', 'Informal Roman', 'Informal011 BT', 'INTERSTATE', 'IrisUPC', 'Iskoola Pota', 'JasmineUPC', 'Jazz LET', 'Jenson', 'Jester', 'Jokerman', 'Juice ITC', 'Kabel Bk BT', 'Kabel Ult BT', 'Kailasa', 'KaiTi', 'Kalinga', 'Kannada Sangam MN', 'Kartika', 'Kaufmann Bd BT', 'Kaufmann BT', 'Khmer UI', 'KodchiangUPC', 'Kokila', 'Korinna BT', 'Kristen ITC', 'Krungthep', 'Kunstler Script', 'Lao UI', 'Latha', 'Leelawadee', 'Letter Gothic', 'Levenim MT', 'LilyUPC', 'Lithograph', 'Lithograph Light', 'Long Island', 'Lydian BT', 'Magneto', 'Maiandra GD', 'Malayalam Sangam MN', 'Malgun Gothic', 'Mangal', 'Marigold', 'Marion', 'Marker Felt', 'Market', 'Marlett', 'Matisse ITC', 'Matura MT Script Capitals', 'Meiryo', 'Meiryo UI', 'Microsoft Himalaya', 'Microsoft JhengHei', 'Microsoft New Tai Lue', 'Microsoft PhagsPa', 'Microsoft Tai Le', 'Microsoft Uighur', 'Microsoft YaHei', 'Microsoft Yi Baiti', 'MingLiU', 'MingLiU_HKSCS', 'MingLiU_HKSCS-ExtB', 'MingLiU-ExtB', 'Minion', 'Minion Pro', 'Miriam', 'Miriam Fixed', 'Mistral', 'Modern', 'Modern No. 20', 'Mona Lisa Solid ITC TT', 'Mongolian Baiti', 'MONO', 'MoolBoran', 'Mrs Eaves', 'MS LineDraw', 'MS Mincho', 'MS PMincho', 'MS Reference Specialty', 'MS UI Gothic', 'MT Extra', 'MUSEO', 'MV Boli', 'Nadeem', 'Narkisim', 'NEVIS', 'News Gothic', 'News GothicMT', 'NewsGoth BT', 'Niagara Engraved', 'Niagara Solid', 'Noteworthy', 'NSimSun', 'Nyala', 'OCR A Extended', 'Old Century', 'Old English Text MT', 'Onyx', 'Onyx BT', 'OPTIMA', 'Oriya Sangam MN', 'OSAKA', 'OzHandicraft BT', 'Palace Script MT', 'Papyrus', 'Parchment', 'Party LET', 'Pegasus', 'Perpetua', 'Perpetua Titling MT', 'PetitaBold', 'Pickwick', 'Plantagenet Cherokee', 'Playbill', 'PMingLiU', 'PMingLiU-ExtB', 'Poor Richard', 'Poster', 'PosterBodoni BT', 'PRINCETOWN LET', 'Pristina', 'PTBarnum BT', 'Pythagoras', 'Raavi', 'Rage Italic', 'Ravie', 'Ribbon131 Bd BT', 'Rockwell', 'Rockwell Condensed', 'Rockwell Extra Bold', 'Rod', 'Roman', 'Sakkal Majalla', 'Santa Fe LET', 'Savoye LET', 'Sceptre', 'Script', 'Script MT Bold', 'SCRIPTINA', 'Serifa', 'Serifa BT', 'Serifa Th BT', 'ShelleyVolante BT', 'Sherwood', 'Shonar Bangla', 'Showcard Gothic', 'Shruti', 'Signboard', 'SILKSCREEN', 'SimHei', 'Simplified Arabic', 'Simplified Arabic Fixed', 'SimSun', 'SimSun-ExtB', 'Sinhala Sangam MN', 'Sketch Rockwell', 'Skia', 'Small Fonts', 'Snap ITC', 'Snell Roundhand', 'Socket', 'Souvenir Lt BT', 'Staccato222 BT', 'Steamer', 'Stencil', 'Storybook', 'Styllo', 'Subway', 'Swis721 BlkEx BT', 'Swiss911 XCm BT', 'Sylfaen', 'Synchro LET', 'System', 'Tamil Sangam MN', 'Technical', 'Teletype', 'Telugu Sangam MN', 'Tempus Sans ITC', 'Terminal', 'Thonburi', 'Traditional Arabic', 'Trajan', 'TRAJAN PRO', 'Tristan', 'Tubular', 'Tunga', 'Tw Cen MT', 'Tw Cen MT Condensed', 'Tw Cen MT Condensed Extra Bold', 'TypoUpright BT', 'Unicorn', 'Univers', 'Univers CE 55 Medium', 'Univers Condensed', 'Utsaah', 'Vagabond', 'Vani', 'Vijaya', 'Viner Hand ITC', 'VisualUI', 'Vivaldi', 'Vladimir Script', 'Vrinda', 'Westminster', 'WHITNEY', 'Wide Latin', 'ZapfEllipt BT', 'ZapfHumnst BT', 'ZapfHumnst Dm BT', 'Zapfino', 'Zurich BlkEx BT', 'Zurich Ex BT', 'ZWAdobeF'] fontList = fontList.concat(extendedFontList) } fontList = fontList.concat(options.fonts.userDefinedFonts) // remove duplicate fonts fontList = fontList.filter(function (font, position) { return fontList.indexOf(font) === position }) // we use m or w because these two characters take up the maximum width. // And we use a LLi so that the same matching fonts can get separated var testString = 'mmmmmmmmmmlli' // we test using 72px font size, we may use any size. I guess larger the better. var testSize = '72px' var h = document.getElementsByTagName('body')[0] // div to load spans for the base fonts var baseFontsDiv = document.createElement('div') // div to load spans for the fonts to detect var fontsDiv = document.createElement('div') var defaultWidth = {} var defaultHeight = {} // creates a span where the fonts will be loaded var createSpan = function () { var s = document.createElement('span') /* * We need this css as in some weird browser this * span elements shows up for a microSec which creates a * bad user experience */ s.style.position = 'absolute' s.style.left = '-9999px' s.style.fontSize = testSize // css font reset to reset external styles s.style.fontStyle = 'normal' s.style.fontWeight = 'normal' s.style.letterSpacing = 'normal' s.style.lineBreak = 'auto' s.style.lineHeight = 'normal' s.style.textTransform = 'none' s.style.textAlign = 'left' s.style.textDecoration = 'none' s.style.textShadow = 'none' s.style.whiteSpace = 'normal' s.style.wordBreak = 'normal' s.style.wordSpacing = 'normal' s.innerHTML = testString return s } // creates a span and load the font to detect and a base font for fallback var createSpanWithFonts = function (fontToDetect, baseFont) { var s = createSpan() s.style.fontFamily = "'" + fontToDetect + "'," + baseFont return s } // creates spans for the base fonts and adds them to baseFontsDiv var initializeBaseFontsSpans = function () { var spans = [] for (var index = 0, length = baseFonts.length; index < length; index++) { var s = createSpan() s.style.fontFamily = baseFonts[index] baseFontsDiv.appendChild(s) spans.push(s) } return spans } // creates spans for the fonts to detect and adds them to fontsDiv var initializeFontsSpans = function () { var spans = {} for (var i = 0, l = fontList.length; i < l; i++) { var fontSpans = [] for (var j = 0, numDefaultFonts = baseFonts.length; j < numDefaultFonts; j++) { var s = createSpanWithFonts(fontList[i], baseFonts[j]) fontsDiv.appendChild(s) fontSpans.push(s) } spans[fontList[i]] = fontSpans // Stores {fontName : [spans for that font]} } return spans } // checks if a font is available var isFontAvailable = function (fontSpans) { var detected = false for (var i = 0; i < baseFonts.length; i++) { detected = (fontSpans[i].offsetWidth !== defaultWidth[baseFonts[i]] || fontSpans[i].offsetHeight !== defaultHeight[baseFonts[i]]) if (detected) { return detected } } return detected } // create spans for base fonts var baseFontsSpans = initializeBaseFontsSpans() // add the spans to the DOM h.appendChild(baseFontsDiv) // get the default width for the three base fonts for (var index = 0, length = baseFonts.length; index < length; index++) { defaultWidth[baseFonts[index]] = baseFontsSpans[index].offsetWidth // width for the default font defaultHeight[baseFonts[index]] = baseFontsSpans[index].offsetHeight // height for the default font } // create spans for fonts to detect var fontsSpans = initializeFontsSpans() // add all the spans to the DOM h.appendChild(fontsDiv) // check available fonts var available = [] for (var i = 0, l = fontList.length; i < l; i++) { if (isFontAvailable(fontsSpans[fontList[i]])) { available.push(fontList[i]) } } // remove spans from DOM h.removeChild(fontsDiv) h.removeChild(baseFontsDiv) done(available) } var pluginsComponent = function (done, options) { if (isIE()) { if (!options.plugins.excludeIE) { done(getIEPlugins(options)) } else { done(options.EXCLUDED) } } else { done(getRegularPlugins(options)) } } var getRegularPlugins = function (options) { if (navigator.plugins == null) { return options.NOT_AVAILABLE } var plugins = [] // plugins isn't defined in Node envs. for (var i = 0, l = navigator.plugins.length; i < l; i++) { if (navigator.plugins[i]) { plugins.push(navigator.plugins[i]) } } // sorting plugins only for those user agents, that we know randomize the plugins // every time we try to enumerate them if (pluginsShouldBeSorted(options)) { plugins = plugins.sort(function (a, b) { if (a.name > b.name) { return 1 } if (a.name < b.name) { return -1 } return 0 }) } return map(plugins, function (p) { var mimeTypes = map(p, function (mt) { return [mt.type, mt.suffixes] }) return [p.name, p.description, mimeTypes] }) } var getIEPlugins = function (options) { var result = [] if ((Object.getOwnPropertyDescriptor && Object.getOwnPropertyDescriptor(window, 'ActiveXObject')) || ('ActiveXObject' in window)) { var names = [ 'AcroPDF.PDF', // Adobe PDF reader 7+ 'Adodb.Stream', 'AgControl.AgControl', // Silverlight 'DevalVRXCtrl.DevalVRXCtrl.1', 'MacromediaFlashPaper.MacromediaFlashPaper', 'Msxml2.DOMDocument', 'Msxml2.XMLHTTP', 'PDF.PdfCtrl', // Adobe PDF reader 6 and earlier, brrr 'QuickTime.QuickTime', // QuickTime 'QuickTimeCheckObject.QuickTimeCheck.1', 'RealPlayer', 'RealPlayer.RealPlayer(tm) ActiveX Control (32-bit)', 'RealVideo.RealVideo(tm) ActiveX Control (32-bit)', 'Scripting.Dictionary', 'SWCtl.SWCtl', // ShockWave player 'Shell.UIHelper', 'ShockwaveFlash.ShockwaveFlash', // flash plugin 'Skype.Detection', 'TDCCtl.TDCCtl', 'WMPlayer.OCX', // Windows media player 'rmocx.RealPlayer G2 Control', 'rmocx.RealPlayer G2 Control.1' ] // starting to detect plugins in IE result = map(names, function (name) { try { // eslint-disable-next-line no-new new window.ActiveXObject(name) return name } catch (e) { return options.ERROR } }) } else { result.push(options.NOT_AVAILABLE) } if (navigator.plugins) { result = result.concat(getRegularPlugins(options)) } return result } var pluginsShouldBeSorted = function (options) { var should = false for (var i = 0, l = options.plugins.sortPluginsFor.length; i < l; i++) { var re = options.plugins.sortPluginsFor[i] if (navigator.userAgent.match(re)) { should = true break } } return should } var touchSupportKey = function (done) { done(getTouchSupport()) } var hardwareConcurrencyKey = function (done, options) { done(getHardwareConcurrency(options)) } var hasSessionStorage = function (options) { try { return !!window.sessionStorage } catch (e) { return options.ERROR // SecurityError when referencing it means it exists } } // https://bugzilla.mozilla.org/show_bug.cgi?id=781447 var hasLocalStorage = function (options) { try { return !!window.localStorage } catch (e) { return options.ERROR // SecurityError when referencing it means it exists } } var hasIndexedDB = function (options) { // IE and Edge don't allow accessing indexedDB in private mode, therefore IE and Edge will have different // fingerprints in normal and private modes. if (isIEOrOldEdge()) { return options.EXCLUDED } try { return !!window.indexedDB } catch (e) { return options.ERROR // SecurityError when referencing it means it exists } } var getHardwareConcurrency = function (options) { if (navigator.hardwareConcurrency) { return navigator.hardwareConcurrency } return options.NOT_AVAILABLE } var getNavigatorCpuClass = function (options) { return navigator.cpuClass || options.NOT_AVAILABLE } var getNavigatorPlatform = function (options) { if (navigator.platform) { return navigator.platform } else { return options.NOT_AVAILABLE } } var getDoNotTrack = function (options) { if (navigator.doNotTrack) { return navigator.doNotTrack } else if (navigator.msDoNotTrack) { return navigator.msDoNotTrack } else if (window.doNotTrack) { return window.doNotTrack } else { return options.NOT_AVAILABLE } } // This is a crude and primitive touch screen detection. // It's not possible to currently reliably detect the availability of a touch screen // with a JS, without actually subscribing to a touch event. // http://www.stucox.com/blog/you-cant-detect-a-touchscreen/ // https://github.com/Modernizr/Modernizr/issues/548 // method returns an array of 3 values: // maxTouchPoints, the success or failure of creating a TouchEvent, // and the availability of the 'ontouchstart' property var getTouchSupport = function () { var maxTouchPoints = 0 var touchEvent if (typeof navigator.maxTouchPoints !== 'undefined') { maxTouchPoints = navigator.maxTouchPoints } else if (typeof navigator.msMaxTouchPoints !== 'undefined') { maxTouchPoints = navigator.msMaxTouchPoints } try { document.createEvent('TouchEvent') touchEvent = true } catch (_) { touchEvent = false } var touchStart = 'ontouchstart' in window return [maxTouchPoints, touchEvent, touchStart] } // https://www.browserleaks.com/canvas#how-does-it-work var getCanvasFp = function (options) { var result = [] // Very simple now, need to make it more complex (geo shapes etc) var canvas = document.createElement('canvas') canvas.width = 2000 canvas.height = 200 canvas.style.display = 'inline' var ctx = canvas.getContext('2d') // detect browser support of canvas winding // http://blogs.adobe.com/webplatform/2013/01/30/winding-rules-in-canvas/ // https://github.com/Modernizr/Modernizr/blob/master/feature-detects/canvas/winding.js ctx.rect(0, 0, 10, 10) ctx.rect(2, 2, 6, 6) result.push('canvas winding:' + ((ctx.isPointInPath(5, 5, 'evenodd') === false) ? 'yes' : 'no')) ctx.textBaseline = 'alphabetic' ctx.fillStyle = '#f60' ctx.fillRect(125, 1, 62, 20) ctx.fillStyle = '#069' // https://github.com/fingerprintjs/fingerprintjs/issues/66 if (options.dontUseFakeFontInCanvas) { ctx.font = '11pt Arial' } else { ctx.font = '11pt no-real-font-123' } ctx.fillText('Cwm fjordbank glyphs vext quiz, \ud83d\ude03', 2, 15) ctx.fillStyle = 'rgba(102, 204, 0, 0.2)' ctx.font = '18pt Arial' ctx.fillText('Cwm fjordbank glyphs vext quiz, \ud83d\ude03', 4, 45) // canvas blending // http://blogs.adobe.com/webplatform/2013/01/28/blending-features-in-canvas/ // http://jsfiddle.net/NDYV8/16/ ctx.globalCompositeOperation = 'multiply' ctx.fillStyle = 'rgb(255,0,255)' ctx.beginPath() ctx.arc(50, 50, 50, 0, Math.PI * 2, true) ctx.closePath() ctx.fill() ctx.fillStyle = 'rgb(0,255,255)' ctx.beginPath() ctx.arc(100, 50, 50, 0, Math.PI * 2, true) ctx.closePath() ctx.fill() ctx.fillStyle = 'rgb(255,255,0)' ctx.beginPath() ctx.arc(75, 100, 50, 0, Math.PI * 2, true) ctx.closePath() ctx.fill() ctx.fillStyle = 'rgb(255,0,255)' // canvas winding // http://blogs.adobe.com/webplatform/2013/01/30/winding-rules-in-canvas/ // http://jsfiddle.net/NDYV8/19/ ctx.arc(75, 75, 75, 0, Math.PI * 2, true) ctx.arc(75, 75, 25, 0, Math.PI * 2, true) ctx.fill('evenodd') if (canvas.toDataURL) { result.push('canvas fp:' + canvas.toDataURL()) } return result } var getWebglFp = function () { var gl var fa2s = function (fa) { gl.clearColor(0.0, 0.0, 0.0, 1.0) gl.enable(gl.DEPTH_TEST) gl.depthFunc(gl.LEQUAL) gl.clear(gl.COLOR_BUFFER_BIT | gl.DEPTH_BUFFER_BIT) return '[' + fa[0] + ', ' + fa[1] + ']' } var maxAnisotropy = function (gl) { var ext = gl.getExtension('EXT_texture_filter_anisotropic') || gl.getExtension('WEBKIT_EXT_texture_filter_anisotropic') || gl.getExtension('MOZ_EXT_texture_filter_anisotropic') if (ext) { var anisotropy = gl.getParameter(ext.MAX_TEXTURE_MAX_ANISOTROPY_EXT) if (anisotropy === 0) { anisotropy = 2 } return anisotropy } else { return null } } gl = getWebglCanvas() if (!gl) { return null } // WebGL fingerprinting is a combination of techniques, found in MaxMind antifraud script & Augur fingerprinting. // First it draws a gradient object with shaders and convers the image to the Base64 string. // Then it enumerates all WebGL extensions & capabilities and appends them to the Base64 string, resulting in a huge WebGL string, potentially very unique on each device // Since iOS supports webgl starting from version 8.1 and 8.1 runs on several graphics chips, the results may be different across ios devices, but we need to verify it. var result = [] var vShaderTemplate = 'attribute vec2 attrVertex;varying vec2 varyinTexCoordinate;uniform vec2 uniformOffset;void main(){varyinTexCoordinate=attrVertex+uniformOffset;gl_Position=vec4(attrVertex,0,1);}' var fShaderTemplate = 'precision mediump float;varying vec2 varyinTexCoordinate;void main() {gl_FragColor=vec4(varyinTexCoordinate,0,1);}' var vertexPosBuffer = gl.createBuffer() gl.bindBuffer(gl.ARRAY_BUFFER, vertexPosBuffer) var vertices = new Float32Array([-0.2, -0.9, 0, 0.4, -0.26, 0, 0, 0.732134444, 0]) gl.bufferData(gl.ARRAY_BUFFER, vertices, gl.STATIC_DRAW) vertexPosBuffer.itemSize = 3 vertexPosBuffer.numItems = 3 var program = gl.createProgram() var vshader = gl.createShader(gl.VERTEX_SHADER) gl.shaderSource(vshader, vShaderTemplate) gl.compileShader(vshader) var fshader = gl.createShader(gl.FRAGMENT_SHADER) gl.shaderSource(fshader, fShaderTemplate) gl.compileShader(fshader) gl.attachShader(program, vshader) gl.attachShader(program, fshader) gl.linkProgram(program) gl.useProgram(program) program.vertexPosAttrib = gl.getAttribLocation(program, 'attrVertex') program.offsetUniform = gl.getUniformLocation(program, 'uniformOffset') gl.enableVertexAttribArray(program.vertexPosArray) gl.vertexAttribPointer(program.vertexPosAttrib, vertexPosBuffer.itemSize, gl.FLOAT, !1, 0, 0) gl.uniform2f(program.offsetUniform, 1, 1) gl.drawArrays(gl.TRIANGLE_STRIP, 0, vertexPosBuffer.numItems) try { result.push(gl.canvas.toDataURL()) } catch (e) { /* .toDataURL may be absent or broken (blocked by extension) */ } result.push('extensions:' + (gl.getSupportedExtensions() || []).join(';')) result.push('webgl aliased line width range:' + fa2s(gl.getParameter(gl.ALIASED_LINE_WIDTH_RANGE))) result.push('webgl aliased point size range:' + fa2s(gl.getParameter(gl.ALIASED_POINT_SIZE_RANGE))) result.push('webgl alpha bits:' + gl.getParameter(gl.ALPHA_BITS)) result.push('webgl antialiasing:' + (gl.getContextAttributes().antialias ? 'yes' : 'no')) result.push('webgl blue bits:' + gl.getParameter(gl.BLUE_BITS)) result.push('webgl depth bits:' + gl.getParameter(gl.DEPTH_BITS)) result.push('webgl green bits:' + gl.getParameter(gl.GREEN_BITS)) result.push('webgl max anisotropy:' + maxAnisotropy(gl)) result.push('webgl max combined texture image units:' + gl.getParameter(gl.MAX_COMBINED_TEXTURE_IMAGE_UNITS)) result.push('webgl max cube map texture size:' + gl.getParameter(gl.MAX_CUBE_MAP_TEXTURE_SIZE)) result.push('webgl max fragment uniform vectors:' + gl.getParameter(gl.MAX_FRAGMENT_UNIFORM_VECTORS)) result.push('webgl max render buffer size:' + gl.getParameter(gl.MAX_RENDERBUFFER_SIZE)) result.push('webgl max texture image units:' + gl.getParameter(gl.MAX_TEXTURE_IMAGE_UNITS)) result.push('webgl max texture size:' + gl.getParameter(gl.MAX_TEXTURE_SIZE)) result.push('webgl max varying vectors:' + gl.getParameter(gl.MAX_VARYING_VECTORS)) result.push('webgl max vertex attribs:' + gl.getParameter(gl.MAX_VERTEX_ATTRIBS)) result.push('webgl max vertex texture image units:' + gl.getParameter(gl.MAX_VERTEX_TEXTURE_IMAGE_UNITS)) result.push('webgl max vertex uniform vectors:' + gl.getParameter(gl.MAX_VERTEX_UNIFORM_VECTORS)) result.push('webgl max viewport dims:' + fa2s(gl.getParameter(gl.MAX_VIEWPORT_DIMS))) result.push('webgl red bits:' + gl.getParameter(gl.RED_BITS)) result.push('webgl renderer:' + gl.getParameter(gl.RENDERER)) result.push('webgl shading language version:' + gl.getParameter(gl.SHADING_LANGUAGE_VERSION)) result.push('webgl stencil bits:' + gl.getParameter(gl.STENCIL_BITS)) result.push('webgl vendor:' + gl.getParameter(gl.VENDOR)) result.push('webgl version:' + gl.getParameter(gl.VERSION)) try { // Add the unmasked vendor and unmasked renderer if the debug_renderer_info extension is available var extensionDebugRendererInfo = gl.getExtension('WEBGL_debug_renderer_info') if (extensionDebugRendererInfo) { result.push('webgl unmasked vendor:' + gl.getParameter(extensionDebugRendererInfo.UNMASKED_VENDOR_WEBGL)) result.push('webgl unmasked renderer:' + gl.getParameter(extensionDebugRendererInfo.UNMASKED_RENDERER_WEBGL)) } } catch (e) { /* squelch */ } if (!gl.getShaderPrecisionFormat) { loseWebglContext(gl) return result } each(['FLOAT', 'INT'], function (numType) { each(['VERTEX', 'FRAGMENT'], function (shader) { each(['HIGH', 'MEDIUM', 'LOW'], function (numSize) { each(['precision', 'rangeMin', 'rangeMax'], function (key) { var format = gl.getShaderPrecisionFormat(gl[shader + '_SHADER'], gl[numSize + '_' + numType])[key] if (key !== 'precision') { key = 'precision ' + key } var line = ['webgl ', shader.toLowerCase(), ' shader ', numSize.toLowerCase(), ' ', numType.toLowerCase(), ' ', key, ':', format].join('') result.push(line) }) }) }) }) loseWebglContext(gl) return result } var getWebglVendorAndRenderer = function () { /* This a subset of the WebGL fingerprint with a lot of entropy, while being reasonably browser-independent */ try { var glContext = getWebglCanvas() var extensionDebugRendererInfo = glContext.getExtension('WEBGL_debug_renderer_info') var params = glContext.getParameter(extensionDebugRendererInfo.UNMASKED_VENDOR_WEBGL) + '~' + glContext.getParameter(extensionDebugRendererInfo.UNMASKED_RENDERER_WEBGL) loseWebglContext(glContext) return params } catch (e) { return null } } var getAdBlock = function () { var ads = document.createElement('div') ads.innerHTML = ' ' ads.className = 'adsbox' var result = false try { // body may not exist, that's why we need try/catch document.body.appendChild(ads) result = document.getElementsByClassName('adsbox')[0].offsetHeight === 0 document.body.removeChild(ads) } catch (e) { result = false } return result } var getHasLiedLanguages = function () { // We check if navigator.language is equal to the first language of navigator.languages // navigator.languages is undefined on IE11 (and potentially older IEs) if (typeof navigator.languages !== 'undefined') { try { var firstLanguages = navigator.languages[0].substr(0, 2) if (firstLanguages !== navigator.language.substr(0, 2)) { return true } } catch (err) { return true } } return false } var getHasLiedResolution = function () { return window.screen.width < window.screen.availWidth || window.screen.height < window.screen.availHeight } var getHasLiedOs = function () { var userAgent = navigator.userAgent.toLowerCase() var oscpu = navigator.oscpu var platform = navigator.platform.toLowerCase() var os // We extract the OS from the user agent (respect the order of the if else if statement) if (userAgent.indexOf('windows phone') >= 0) { os = 'Windows Phone' } else if (userAgent.indexOf('windows') >= 0 || userAgent.indexOf('win16') >= 0 || userAgent.indexOf('win32') >= 0 || userAgent.indexOf('win64') >= 0 || userAgent.indexOf('win95') >= 0 || userAgent.indexOf('win98') >= 0 || userAgent.indexOf('winnt') >= 0 || userAgent.indexOf('wow64') >= 0) { os = 'Windows' } else if (userAgent.indexOf('android') >= 0) { os = 'Android' } else if (userAgent.indexOf('linux') >= 0 || userAgent.indexOf('cros') >= 0 || userAgent.indexOf('x11') >= 0) { os = 'Linux' } else if (userAgent.indexOf('iphone') >= 0 || userAgent.indexOf('ipad') >= 0 || userAgent.indexOf('ipod') >= 0 || userAgent.indexOf('crios') >= 0 || userAgent.indexOf('fxios') >= 0) { os = 'iOS' } else if (userAgent.indexOf('macintosh') >= 0 || userAgent.indexOf('mac_powerpc)') >= 0) { os = 'Mac' } else { os = 'Other' } // We detect if the person uses a touch device var mobileDevice = (('ontouchstart' in window) || (navigator.maxTouchPoints > 0) || (navigator.msMaxTouchPoints > 0)) if (mobileDevice && os !== 'Windows' && os !== 'Windows Phone' && os !== 'Android' && os !== 'iOS' && os !== 'Other' && userAgent.indexOf('cros') === -1) { return true } // We compare oscpu with the OS extracted from the UA if (typeof oscpu !== 'undefined') { oscpu = oscpu.toLowerCase() if (oscpu.indexOf('win') >= 0 && os !== 'Windows' && os !== 'Windows Phone') { return true } else if (oscpu.indexOf('linux') >= 0 && os !== 'Linux' && os !== 'Android') { return true } else if (oscpu.indexOf('mac') >= 0 && os !== 'Mac' && os !== 'iOS') { return true } else if ((oscpu.indexOf('win') === -1 && oscpu.indexOf('linux') === -1 && oscpu.indexOf('mac') === -1) !== (os === 'Other')) { return true } } // We compare platform with the OS extracted from the UA if (platform.indexOf('win') >= 0 && os !== 'Windows' && os !== 'Windows Phone') { return true } else if ((platform.indexOf('linux') >= 0 || platform.indexOf('android') >= 0 || platform.indexOf('pike') >= 0) && os !== 'Linux' && os !== 'Android') { return true } else if ((platform.indexOf('mac') >= 0 || platform.indexOf('ipad') >= 0 || platform.indexOf('ipod') >= 0 || platform.indexOf('iphone') >= 0) && os !== 'Mac' && os !== 'iOS') { return true } else if (platform.indexOf('arm') >= 0 && os === 'Windows Phone') { return false } else if (platform.indexOf('pike') >= 0 && userAgent.indexOf('opera mini') >= 0) { return false } else { var platformIsOther = platform.indexOf('win') < 0 && platform.indexOf('linux') < 0 && platform.indexOf('mac') < 0 && platform.indexOf('iphone') < 0 && platform.indexOf('ipad') < 0 && platform.indexOf('ipod') < 0 if (platformIsOther !== (os === 'Other')) { return true } } return typeof navigator.plugins === 'undefined' && os !== 'Windows' && os !== 'Windows Phone' } var getHasLiedBrowser = function () { var userAgent = navigator.userAgent.toLowerCase() var productSub = navigator.productSub // we extract the browser from the user agent (respect the order of the tests) var browser if (userAgent.indexOf('edge/') >= 0 || userAgent.indexOf('iemobile/') >= 0) { // Unreliable, different versions use EdgeHTML, Webkit, Blink, etc. return false } else if (userAgent.indexOf('opera mini') >= 0) { // Unreliable, different modes use Presto, WebView, Webkit, etc. return false } else if (userAgent.indexOf('firefox/') >= 0) { browser = 'Firefox' } else if (userAgent.indexOf('opera/') >= 0 || userAgent.indexOf(' opr/') >= 0) { browser = 'Opera' } else if (userAgent.indexOf('chrome/') >= 0) { browser = 'Chrome' } else if (userAgent.indexOf('safari/') >= 0) { if (userAgent.indexOf('android 1.') >= 0 || userAgent.indexOf('android 2.') >= 0 || userAgent.indexOf('android 3.') >= 0 || userAgent.indexOf('android 4.') >= 0) { browser = 'AOSP' } else { browser = 'Safari' } } else if (userAgent.indexOf('trident/') >= 0) { browser = 'Internet Explorer' } else { browser = 'Other' } if ((browser === 'Chrome' || browser === 'Safari' || browser === 'Opera') && productSub !== '20030107') { return true } // eslint-disable-next-line no-eval var tempRes = eval.toString().length if (tempRes === 37 && browser !== 'Safari' && browser !== 'Firefox' && browser !== 'Other') { return true } else if (tempRes === 39 && browser !== 'Internet Explorer' && browser !== 'Other') { return true } else if (tempRes === 33 && browser !== 'Chrome' && browser !== 'AOSP' && browser !== 'Opera' && browser !== 'Other') { return true } // We create an error to see how it is handled var errFirefox try { // eslint-disable-next-line no-throw-literal throw 'a' } catch (err) { try { err.toSource() errFirefox = true } catch (errOfErr) { errFirefox = false } } return errFirefox && browser !== 'Firefox' && browser !== 'Other' } var isCanvasSupported = function () { var elem = document.createElement('canvas') return !!(elem.getContext && elem.getContext('2d')) } var isWebGlSupported = function () { // code taken from Modernizr if (!isCanvasSupported()) { return false } var glContext = getWebglCanvas() var isSupported = !!window.WebGLRenderingContext && !!glContext loseWebglContext(glContext) return isSupported } var isIE = function () { if (navigator.appName === 'Microsoft Internet Explorer') { return true } else if (navigator.appName === 'Netscape' && /Trident/.test(navigator.userAgent)) { // IE 11 return true } return false } var isIEOrOldEdge = function () { // The properties are checked to be in IE 10, IE 11 and Edge 18 and not to be in other browsers return ('msWriteProfilerMark' in window) + ('msLaunchUri' in navigator) + ('msSaveBlob' in navigator) >= 2 } var hasSwfObjectLoaded = function () { return typeof window.swfobject !== 'undefined' } var hasMinFlashInstalled = function () { return window.swfobject.hasFlashPlayerVersion('9.0.0') } var addFlashDivNode = function (options) { var node = document.createElement('div') node.setAttribute('id', options.fonts.swfContainerId) document.body.appendChild(node) } var loadSwfAndDetectFonts = function (done, options) { var hiddenCallback = '___fp_swf_loaded' window[hiddenCallback] = function (fonts) { done(fonts) } var id = options.fonts.swfContainerId addFlashDivNode() var flashvars = { onReady: hiddenCallback } var flashparams = { allowScriptAccess: 'always', menu: 'false' } window.swfobject.embedSWF(options.fonts.swfPath, id, '1', '1', '9.0.0', false, flashvars, flashparams, {}) } var getWebglCanvas = function () { var canvas = document.createElement('canvas') var gl = null try { gl = canvas.getContext('webgl') || canvas.getContext('experimental-webgl') } catch (e) { /* squelch */ } if (!gl) { gl = null } return gl } var loseWebglContext = function (context) { var loseContextExtension = context.getExtension('WEBGL_lose_context') if (loseContextExtension != null) { loseContextExtension.loseContext() } } var components = [ { key: 'userAgent', getData: UserAgent }, { key: 'webdriver', getData: webdriver }, { key: 'language', getData: languageKey }, { key: 'colorDepth', getData: colorDepthKey }, { key: 'deviceMemory', getData: deviceMemoryKey }, { key: 'pixelRatio', getData: pixelRatioKey }, { key: 'hardwareConcurrency', getData: hardwareConcurrencyKey }, { key: 'screenResolution', getData: screenResolutionKey }, { key: 'availableScreenResolution', getData: availableScreenResolutionKey }, { key: 'timezoneOffset', getData: timezoneOffset }, { key: 'timezone', getData: timezone }, { key: 'sessionStorage', getData: sessionStorageKey }, { key: 'localStorage', getData: localStorageKey }, { key: 'indexedDb', getData: indexedDbKey }, { key: 'addBehavior', getData: addBehaviorKey }, { key: 'openDatabase', getData: openDatabaseKey }, { key: 'cpuClass', getData: cpuClassKey }, { key: 'platform', getData: platformKey }, { key: 'doNotTrack', getData: doNotTrackKey }, { key: 'plugins', getData: pluginsComponent }, { key: 'canvas', getData: canvasKey }, { key: 'webgl', getData: webglKey }, { key: 'webglVendorAndRenderer', getData: webglVendorAndRendererKey }, { key: 'adBlock', getData: adBlockKey }, { key: 'hasLiedLanguages', getData: hasLiedLanguagesKey }, { key: 'hasLiedResolution', getData: hasLiedResolutionKey }, { key: 'hasLiedOs', getData: hasLiedOsKey }, { key: 'hasLiedBrowser', getData: hasLiedBrowserKey }, { key: 'touchSupport', getData: touchSupportKey }, { key: 'fonts', getData: jsFontsKey, pauseBefore: true }, { key: 'fontsFlash', getData: flashFontsKey, pauseBefore: true }, { key: 'audio', getData: audioKey }, { key: 'enumerateDevices', getData: enumerateDevicesKey } ] var Fingerprint2 = function (options) { throw new Error("'new Fingerprint()' is deprecated, see https://github.com/fingerprintjs/fingerprintjs#upgrade-guide-from-182-to-200") } Fingerprint2.get = function (options, callback) { if (!callback) { callback = options options = {} } else if (!options) { options = {} } extendSoft(options, defaultOptions) options.components = options.extraComponents.concat(components) var keys = { data: [], addPreprocessedComponent: function (key, value) { if (typeof options.preprocessor === 'function') { value = options.preprocessor(key, value) } keys.data.push({ key: key, value: value }) } } var i = -1 var chainComponents = function (alreadyWaited) { i += 1 if (i >= options.components.length) { // on finish callback(keys.data) return } var component = options.components[i] if (options.excludes[component.key]) { chainComponents(false) // skip return } if (!alreadyWaited && component.pauseBefore) { i -= 1 setTimeout(function () { chainComponents(true) }, 1) return } try { component.getData(function (value) { keys.addPreprocessedComponent(component.key, value) chainComponents(false) }, options) } catch (error) { // main body error keys.addPreprocessedComponent(component.key, String(error)) chainComponents(false) } } chainComponents(false) } Fingerprint2.getPromise = function (options) { return new Promise(function (resolve, reject) { Fingerprint2.get(options, resolve) }) } Fingerprint2.getV18 = function (options, callback) { if (callback == null) { callback = options options = {} } return Fingerprint2.get(options, function (components) { var newComponents = [] for (var i = 0; i < components.length; i++) { var component = components[i] if (component.value === (options.NOT_AVAILABLE || 'not available')) { newComponents.push({ key: component.key, value: 'unknown' }) } else if (component.key === 'plugins') { newComponents.push({ key: 'plugins', value: map(component.value, function (p) { var mimeTypes = map(p[2], function (mt) { if (mt.join) { return mt.join('~') } return mt }).join(',') return [p[0], p[1], mimeTypes].join('::') }) }) } else if (['canvas', 'webgl'].indexOf(component.key) !== -1 && Array.isArray(component.value)) { // sometimes WebGL returns error in headless browsers (during CI testing for example) // so we need to join only if the values are array newComponents.push({ key: component.key, value: component.value.join('~') }) } else if (['sessionStorage', 'localStorage', 'indexedDb', 'addBehavior', 'openDatabase'].indexOf(component.key) !== -1) { if (component.value) { newComponents.push({ key: component.key, value: 1 }) } else { // skip continue } } else { if (component.value) { newComponents.push(component.value.join ? { key: component.key, value: component.value.join(';') } : component) } else { newComponents.push({ key: component.key, value: component.value }) } } } var murmur = x64hash128(map(newComponents, function (component) { return component.value }).join('~~~'), 31) callback(murmur, newComponents) }) } Fingerprint2.x64hash128 = x64hash128 Fingerprint2.VERSION = '2.1.4' return Fingerprint2 }) ``` Then run `Fingerprint2.getV18({}, function(e,t) { console.log(e); console.log(t) })`. You will get a fp string and related fp information.
JiaLeDe commented 10 months ago

还有办法能获取用户投稿嘛？我自己测试了好几遍都不行，接口是：/x/space/wbi/arc/search

cxw620 commented 10 months ago

还有办法能获取用户投稿嘛？我自己测试了好几遍都不行，接口是：/x/space/wbi/arc/search

和本 issue 不相关, 去 #868, 贴上你的代码要不然谁知道发生了什么

Allenyep commented 10 months ago

buvid_fp 影响接口是否返回-352，需要解这个值

Allenyep commented 10 months ago

DIGHT_MAP 考虑把10去掉？

cxw620 commented 10 months ago

DIGHT_MAP 考虑把10去掉？

Math.ceil(Math.random() * 16) 取值 0..=16, 就是有 "10" 的, 虽然看起来很像 0-9,a-f.

反而应该去掉 0 因为 Math.random() === 0 太罕见了概率无限接近 0

cxw620 commented 10 months ago

buvid_fp 的算法应该是拿浏览器指纹信息计算得到的指纹, 算法参考见 fingerprint2 库(2.1.4版本), 差不多弄清楚了

kingwingfly commented 10 months ago

@cxw620 Thanks a lot.

I've successfully activated the buvid.

Here's the code: generate _uuid (refactored) generate buvid_fp (keep the same)

The response json is 

Object {
    "code": Number(0),
    "data": Object {},
    "message": String("0"),
    "ttl": Number(1),
}

So I guess activating successfully.

However, I still cannot use it to invoke like api(https://api.bilibili.com/x/web-interface/archive/like) which I succeeded with cookies(SESSDATA, buvid3) from browser.

Anyone who knows how to deal with it, please kindly tell me how!

Edit: Here's how I invoke like api

cxw620 commented 10 months ago

Edit: Here's how I invoke like api

User-Agent? I strongly suggest that you add any headers like a real browser will send.

What's more, showing us codes is good, though an example your programme requesting and getting from upstream will help a lot, too.

kingwingfly commented 10 months ago

User-Agent? I strongly suggest that you add any headers like a real browser will send.

I’m afraid that it is not the cause for my managing to invoke with the cookies from browser, without anything except params, SESSDATA and buvid3.

塑料英语长难句翻译：我恐怕这不是原因，因为我用浏览器的cookie成功调用了，除了params, SESSDATA and buvid3，没有用其他参数。

cxw620 commented 10 months ago

User-Agent? I strongly suggest that you add any headers like a real browser will send.

I’m afraid that it is not the case for my managing to invoke with the cookies from browser, without anything except params, SESSDATA and buvid3.

I mean http headers, not cookie, I think you must know the difference. Do you think reqwest/0.11.23 is a normal browser's UA?

kingwingfly commented 10 months ago

I’m afraid that it is not the cause for my managing to invoke with the cookies from browser, without anything except params, SESSDATA and buvid3.

我的意思是：复制浏览器中的SESSDATA，buvid3，csrf，不需要UA，是可以成功调用点赞API的。这说明这个API是不检查UA的。

刚才我给激活buvid和点赞都带上了UA，依然不行。返回的还是-403 账号异常,操作失败。

用爬虫的SESSDATA和浏览器的buvid3请求，也是-403，说明二者是绑定的。于是猜测可能是激活的时候信息没带够（Cookie只带了buvid3 buvid4 buvid_fp _uuid）。

然后我又试着带上SESSDATA bili_jct DedeUserID等等，返回的是0，但依然无法用来点赞。实在没辙了。

z0z0r4 commented 10 months ago

这里都是国人...不用强迫自己翻译吧...

kingwingfly commented 10 months ago

这里都是国人...不用强迫自己翻译吧...

哈哈，主要是我也习惯在GitHub用英语，关键是自己的英语比较塑料。刚写的那个句子ChatGPT都没翻译对，我的表达有问题，让大佬误解了，所以解释一下。

然后，破案了。是我测试用的视频的up主的问题，换个bv号就好了。

https://github.com/SocialSisterYi/bilibili-API-collect/issues/795#issuecomment-1913524156

cxw620 commented 10 months ago

这里都是国人...不用强迫自己翻译吧...

算是养成习惯, 不过不会的也不用勉强就是()

lb-chc commented 10 months ago

看起来ExClimbWuzhi前的执行的过程是这样的

主站：www.bilibili.com 获得Cookie: buvid3、b_nut

调用数次spi：api.bilibili.com/x/frontend/finger/spi 其中第一次spi获得：b_3、b_4（b_4将被沿用）

ExClimbWuzhi：api.bilibili.com/x/internal/gaia-gateway/ExClimbWuzh 附加cookie：访问主站使用的buvid3和b_nut，第一次调用spi获得的buvid4，以及b_lsid、_uuid、buvid_fp

其中，b_lsid的来源依然不明，而第一次调用spi获得的buvid4的参数尾与spi的返回值不同，如果第一次是aaaaa-aaaaa,请求ExClimbWuzhi时就会变成aaaaa-bbbbb，这个差异是怎么造成的？

cxw620 commented 10 months ago

b_lsid seems to be generated locally, see here: image

buvid4 struct: {XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXXXXXXX}-{ DATE INFO }-{ENCRYPTED DATA}

Nemo2011 commented 9 months ago

algorithm in pure python:

import time
import random
import struct
import io

MOD = 1 << 64

def rotate_left(x: int, k: int) -> int:
    bin_str = bin(x)[2:].rjust(64, "0")
    return int(bin_str[k:] + bin_str[:k], base=2)

def gen_uuid_infoc() -> str:
    t = int(time.time() * 1000) % 100000
    mp = list("123456789ABCDEF") + ["10"]
    pck = [8, 4, 4, 4, 12]
    gen_part = lambda x: "".join([random.choice(mp) for _ in range(x)])
    return "-".join([gen_part(l) for l in pck]) + str(t).ljust(5, "0") + "infoc"

def gen_buvid_fp(key: str, seed: int):
    source = io.BytesIO(bytes(key, "ascii"))
    m = murmur3_x64_128(source, seed)
    return "{}{}".format(
        hex(m & (MOD - 1))[2:], hex(m >> 64)[2:]
    )

def murmur3_x64_128(source: io.BufferedIOBase, seed: int) -> str:
    C1 = 0x87C3_7B91_1142_53D5
    C2 = 0x4CF5_AD43_2745_937F
    C3 = 0x52DC_E729
    C4 = 0x3849_5AB5
    R1, R2, R3, M = 27, 31, 33, 5
    h1, h2 = seed, seed
    processed = 0
    while 1:
        read = source.read(16)
        processed += len(read)
        if len(read) == 16:
            k1 = struct.unpack("<q", read[:8])[0]
            k2 = struct.unpack("<q", read[8:])[0]
            h1 ^= (rotate_left(k1 * C1 % MOD, R2) * C2 % MOD)
            h1 = ((rotate_left(h1, R1) + h2) * M + C3) % MOD
            h2 ^= rotate_left(k2 * C2 % MOD, R3) * C1 % MOD
            h2 = ((rotate_left(h2, R2) + h1) * M + C4) % MOD
        elif len(read) == 0:
            h1 ^= processed
            h2 ^= processed
            h1 = (h1 + h2) % MOD
            h2 = (h2 + h1) % MOD
            h1 = fmix64(h1)
            h2 = fmix64(h2)
            h1 = (h1 + h2) % MOD
            h2 = (h2 + h1) % MOD
            return (h2 << 64) | h1
        else:
            k1 = 0
            k2 = 0
            if len(read) >= 15:
                k2 ^= int(read[14]) << 48
            if len(read) >= 14:
                k2 ^= int(read[13]) << 40
            if len(read) >= 13:
                k2 ^= int(read[12]) << 32
            if len(read) >= 12:
                k2 ^= int(read[11]) << 24
            if len(read) >= 11:
                k2 ^= int(read[10]) << 16
            if len(read) >= 10:
                k2 ^= int(read[9]) << 8
            if len(read) >= 9:
                k2 ^= int(read[8])
                k2 = rotate_left(k2 * C2 % MOD, R3) * C1 % MOD
                h2 ^= k2
            if len(read) >= 8:
                k1 ^= int(read[7]) << 56
            if len(read) >= 7:
                k1 ^= int(read[6]) << 48
            if len(read) >= 6:
                k1 ^= int(read[5]) << 40
            if len(read) >= 5:
                k1 ^= int(read[4]) << 32
            if len(read) >= 4:
                k1 ^= int(read[3]) << 24
            if len(read) >= 3:
                k1 ^= int(read[2]) << 16
            if len(read) >= 2:
                k1 ^= int(read[1]) << 8
            if len(read) >= 1:
                k1 ^= int(read[0])
            k1 = rotate_left(k1 * C1 % MOD, R2) * C2 % MOD
            h1 ^= k1

def fmix64(k: int) -> int:
    C1 = 0xFF51_AFD7_ED55_8CCD
    C2 = 0xC4CE_B9FE_1A85_EC53
    R = 33
    tmp = k
    tmp ^= tmp >> R
    tmp = tmp * C1 % MOD
    tmp ^= tmp >> R
    tmp = tmp * C2 % MOD
    tmp ^= tmp >> R
    return tmp

if __name__ == '__main__':
    # Test gen_uuid_infoc
    print("gen_uuid_infoc():", gen_uuid_infoc())
    # Test gen_buvid_fp
    FP = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36falsezh-CN248162560,10802467,1089480Asia/Hong_Kongtruetruetruefalsefalsenot availableWin32PDF Viewer,Portable Document Format,application/pdf,pdf,text/pdf,pdf,Chrome PDF Viewer,Portable Document Format,application/pdf,pdf,text/pdf,pdf,Chromium PDF Viewer,Portable Document Format,application/pdf,pdf,text/pdf,pdf,Microsoft Edge PDF Viewer,Portable Document Format,application/pdf,pdf,text/pdf,pdf,WebKit built-in PDF,Portable Document Format,application/pdf,pdf,text/pdf,pdfcanvas winding:yes,canvas fp:data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAB9AAAADICAYAAACwGnoBAAAAAXNSR0IArs4c6QAAIABJREFUeF7s3Xl8VOXd///XmZkkJAHCLvsOIoooUrdqlWqtrbZ3l9u2d9WKogHX/rrY9r7b3tLt273edSeKULe2dr/rUm0ttHi7i1VcEET2fQ2QQDLL+eVzzZwwmUzCJJls+r4eDx5gcs51rvM8k/jH+3w+l0cXHz7+MGAKcBQwDhgFDAEGpP6d7Q7WAjuAzYD9exXwBrDMw9sYnODjj0792/4+I/XvM9MmTP9+8OU1ad/P/Pc/Ut9b4+EtbrAwP7/3gXfoPrr4I9TyJCABCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCXQLAa+rrdLHt6D8LOB04BRgRJ7XWAnUAIPyPG+D6Sytf6iMXX8bRezFoyndeQ6lzMzrFdcDT9dZLamzegLPs0vmNPxy/JwOfIcd5FXQ5T7vbSQuSf2MTAWWA/8H2OdbQwISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISaIVAlwgUffyTgY8DH0lVmrfiVjr/lGeAPwB/TpW7Z12R1bRbjbvVuwf/zs/SLUC3S/8Bz7OlNDkUoOcHvBNnOR/4L8/jpOGDikLDBhaydVeUdVsPEo/zInAj8AC8O1+U6MTnoktLQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABCQgAQl0c4FOC9B9fGvBbjXZs4BJ3dXR+sQvrCuTn58qAW7xfViIbgoWqKc3j2/xRA1OsGpkW9JCPM+W2GA0CtDDYSx5faePd0AFelHdz8qv+vaOfOxHV4/hP84ZSGlxuP6x1dQm+P3iHXz55tVs2l5rnQksaN/7Tn+uuj8JSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJ5Esge4B+5W19iUX+A8+/EOidahN+FxXlL4HXpvbfPr7tZ3513f7ks1tyE8+xjXtZyWh6cSWTKSHCErawnyjnMiLvvbmfZztPsZWrmUwIj/9hGScyiNMY7Ja9DLi1bjP2eS25icMdO3w7fGAnfGMijA0d7ujcvr9p5/3MX7SZrVt/wK3X7LSTWluBnsBjIadyFJs5hbdzu34XOqrdA/TZd0yu6wAwFd/7LRWzo3m+dftZfejMaWUf/uV3JjG4f2GT01fuj3HZd1fw+8U7rRrdtkI4kOe1aDoJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJvCMFGgfo5fNOA+4DXsX3fkkosZdE6L14/uV4/rXMm/PL1kj4+McC1wMXtfT8t9jLv/EYlzCRZ9nGTCbyEUZxHU/xPNt4hA/RFyvOzd94jA3cxKs8yNmUEuFKnuQo+nAmx/DjFFD+rhbMtMGxw9kwOgI3pKrT23KhDTuh4gn47HsfZtKw/8LzXmltgG7LuJILXYB+HX9vy6o67Nx5vI9iavkcz9DuAXr5vCuBb5AInc1dV+S8J32OGFdMHlNS8eLC4+lRdPiXK3zf54wrX2HJv/Z+u+6dCfskaUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAocRaBigX3nbkcTDj+L5NzJv9i0Nqs2vqDiVUGIP8+a83hJVH39gKsCzqvNWjZfZyVU8ye85hyMorp+jhjj2pzdNV+O26oJAZoA+kyd5mz4s4ZjWTpnDeWkBOpHk8UGL99ZGoEGAXn4WDO9vM966bbZ3tT2U1ozuFqDfxPt5gyHczv0dEaAXUFtYysKZlW3t1JDxbOzDsPb5BccNnX5UL/etC29YzpWfGMJpU8vqD12+pprrb1nNg9+dRHGPMOu31jDuk89XRWP+MKCyNc9b50hAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUjg3SRwKECfOzfCxqE/I5Tohe+VN9mC+tqbiqguKWX+rN31IaF97ebraurhZt3Vj1BiyMH5s87a6O//7mC/pNduaniN3RxNX4ZRiv33c2xnPL0ZS++sLditV7wdZwH69TzD9zjRtW4/mUEUEGIlle5va+uePrZzkKXsYCy9GEdv14LdxhaqqSLGYEpc5bpVrU+hX/33oyR4ge0ulN9FDfN501WgLyDCl3iSWvoA1qV7O2B7hts27pnhfQzYBi4At+/ZHtXB+mpTX7c7C7Ymtyg7qCjODNDtGraFdRmMDiX3Sr8kFaqn37Cbbi9s3g2D+0BNDAb2hh4FYAH6fUvgynOgtAgORun9pRK+h881qTlWcARlHGAQ+1hDf4azmyhhnnPpPZzIGkqwtR+qQL+Sf/A6Q9hNSYPvB8vaSB9eYbib9wTWUoS5NB41dbb76EE/qgiR3B3Arr2UkUxmM7046L5m7eOXMYxN9OFYNjCMPe7re+lBGJ9Skh8/O/dVhjKBbRykgApOd+u4lKc4N/H/jeCuKwy56XHtTb2JFkzD93bjezWEEge548o12Gfa84/grsuX13/uZy7oQyQ2juEbX2Lu3ETWY+xKF99TSlFNT+LhBAXRPa1o737uaVN7P7pk3lS37uqDcUrPfIobLh/J3MtH1d/L3X/ewqzvreS1X05j8phS9/XPfOMNfv23HbZdQkWz961vSkACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSEACabl1+byRwMN4/tXMm/PPJm3K550E3Ek8/BHmX76W8nlDgMVuS/CK2TfZeSed9Yf/jL+a+PIjWz/U72r+j3Xsx9qwl1FIjASzmMRtvEYvCthNLQs5k/Oxyzccduy3WMq9rHCB9scZw3BKuYrJLoS3FutvsIfbsa7zsJUDzGQxtn/5AHq48P0TjOFGTnExq1WVX82TLqaNk2APtVzEBG7iVF5nN5/mCReqh/FcAD+NIRRwNk+4MPzJVNBt4XgV1NN9EHCV3S6iT1LYtvHVqaLfCcD7XLQLfwX6Qf3+4bYSC+FnpML29ADdAuun3SsErqW7C+/TKtKDIL02Br97Bl5cDaMGwttbwL72yZPh/cckA/QHnoQ550B1Ddz8KOz4FvAm5wA/oIDvMov38hblLOGTzOF0VnJXyjRGmIHs48/c6oJ1q0CPEXIB91Z6EyFOf6r4E7e57/t43M4ZfJvz+DCvumOWM5j/5VaOZlOjZ2zfu4DZ3Md8ppLMtlcyiI9xFb9gAdNZy2bK+AxXsIkyjmETiziSm/kVF/Est3Amf+EYfsmd9OYgD3Es3+ND/IKF/D8+xKMc49Z/Nm/wc//si7iz/P4mP9uz7/gAvncP8Erd9vb2uZ6A7y3kzvIrmX2H7W1+G4nQJ7jriq1ujuTX5gEfp2L2Zq6o+CCe/z8kQmdSfGAPNUX3AhekrrcfKMb3vsSd5T9v4e+eH33j0hHXf2d28oWGlgTod/5pM+Xff+vXlqW38Jo6XAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQALvOoFDFejJYPx24DwXBjY1yudZz+g/4fk/YN6cv1A+z9LfP9UVKj9CUc0lVbfOuWyO/3+3TvcHeNdxjNs7/H9Zw0Ocy3EM4Ks8ywLe5GHO5UQG8Vve5h5W8ivOctXl2UZTLdzTA3SLor/PSzzNVu7l/fShkB0c5CP8ha9wHB9ntAvQz+NRF6hfwzEuYLdj+lHkjvss493XbXyO5dzPGnwXXgcBum1rfQpwdCpAfzYVjFuAbxXRjwMng3sZwAJwew+hB7gw2iqw/5aqPLfQ3SrPrbr6L/bKQSqvtQB5Wd0O6+PrHsPzqevYeqyKPWNYlmoh+umvwvINcOn7oaQQqmpgwSKYPLxxgN6rGH7/LDx+W2oX9wRhxjKM/2AJt7sg/FOUs5iJPMBdfJRXsArxC5nFiazmqzzmAvR7OLnR9z/Ky1zi9Hvzb1zFHdzPcax3i36RUQxlD0OydBG3MH6Oe41hq5vfxnzeyyNM4X7mU0uYi7mMU1nFF/kbBcR5mCncxpk8SIV7JaOci+hHNdewiE9zBd/mfzmX19xcObdwL583BfhjXeX557mz/CHK5xXUPfjv4nu9DxOgHwrVkwH6F4nEPsltV+/nggcL6bs7WVbv+T92f/ve9a2oQH/g7m9M+I9Lzx/spkgkfM75/Kt89eLhfODEvvUfjJfe3M8Xfv62a+E+qF+yM8LfntvNB6571d7+OP1d99tNNywBCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCCBFgocCtDTq2eDCtumJrui4geEEvuZN/t7lFf80FXWwrSn7/239UMOlH760/zNVZVPoo8L0K1B+S2c5mq2LfR+kR3M531ECLn27Nn2N0+/dC4BurVn/xiP8z+c6lq8B+O7LHXNvK3K3AL0L/I0T3Cea+MejPks5xHWcz/vd5Xq5a7EPrOdumWQB+pC8fenBdrrANsS3kL2pZaOpsLwYGY7x4LME9MCdAs8LTC3EYTqFpIPB3fNR1Khu4XsRxzmce6HPo/DrafCZ5Phqhv3PwlD+jQO0HsXw9rt8P/sPQn7Y9X0F7mW9FfwF26k0AXoVin+Q36Pl2qpnh5CW4C+jV4u3O7hquoPtXW/jr+7tukzmUklxVzG//E+V0++r36ubDf0B47nNs7gd9zhvm1V8FfxDz7OS9j3rMr8t8yjDwfctW9mhmvL/ivudK3lN9CXCyhnI325nse4hsVZ1+5VZN0pwKXaqc8xVJR/tb5Fe/m86/C9o5oM0K+oOI5Q4jv43kVUzK50FehwHQd7fIp7P2dtCpJzz553Db53NkU1F3PzddaTv6Vj/q3Xj7vsqk8Obel5/HnJTj56/evW+sAaDmhIQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQALNCBwK0GffcRa+dxOJ0PvrW1Q3deLsO87F964hlLiGROiujy4feVPNssT8y3dPsn7k/JJV9WG0BehH0QerRreR2XY9XwH6v9jJHJbwJz7IES7PT47061mAbv9t+5qXplW72xonUsYnmMLFwBJ35tvAilQ4HlSgWxv15H0khx2zEjgj1brd9kcPWtEnUhXoRmLnBGH5RGBs6vxsAfoLqRbwFk4Hrd2behA7U63lz4GZxXBD3U7XQ2Nw5xNw1LDsAXo8AVddlmo3v5zkxuoWXG/lVIooopwv1bXBP89VwifHjZyN7ZN+O/e7CvRh7OYbLuhPDvvaUWzGAnQbFqL/laP4LSfwF452e5bfw4KsFeh2/HZ68Ulm82N+RzWF/Bcf43+5jSKi/Dtz3F7sPanB9lW3MP7feZHreZzR2P3bawueaxk/n9N4gp+5/c+DkVMF+lW39iQW+V1dtfnPuLM8WQZvw14UsQ3om2rhXj7vPHzvqvrAPLMCPTnH+YQSXycevuCw+6839ZjhP6+9YOj/u+lL49wRTzy/hyUvVzZ59JRxpXxyhvtR5Mf3beArt6y2lgNXNz29viMBCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCZjAoQB91l2jCMetn/hVVMxe1Ijn2pt6U1v4E2KRH7m+5eH4A3j+7wauK/7E24/+x8i7eXPEq+ziAHHOZhiXYEGxhasdE6BnC+KT+63/kxMY4AL8bAF6Ap/L+Sd96M/vOYa1btXxVCBuIXZ6C/fMAN1auBvhcan27fa3VZLb2Oe2lMc5TMtSbW7HZAvQX00F8hak27CW8dlb2+MCZIv7rbi4BKyt+8d3gPcInDcte4BuU86eBPw7yfNt33brwG/V80UUU873+TufT7VAtzDcWrgHLdozw/LkM24YoKd/dhJ4fJl/p5A4P+D3WX/qLAD/Kp+gmFpXRZ7ezv06PsNgKt3+7P2oIpSqiq8l4tq5W5X8M4zlKj7LKaxiPf3cfuq2H7qNnAL0WXf1c5993/tmfYB+6d0DKYja157LGqBbi3fPr8D3TnZ7nlvXhswuDnNuP55E6Lf1beFb/ztn+oQRxc+v+M10N8OCh7bwvpmPMm5cMlBPH1VVVdz45eP5xsxkR4IPXLuMvz2/55PQBH7r16QzJSABCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJPCOEzgUoCdbTX8P3/sInv9p5s2x3uQwd26IDcNOxPN/DvyCO6+4nbnfCrNx6PzQRj5z4yOnFFo4/SzbOI+/uL3Hn+B8RtHTnd5RAfp2DvJR/sLXOI5/Y7SLWW3v9a/yHH/iHI6kT9YA3db4aZ7jQaqB96Ue8CvAS0Av4MPJcBprx27jVHBN6dcAz6TCa9sW3t45sPDcwmnb//wpcHuAj0jNaxXptgd60K7d5moqQLfQ3o63OW0N1vI9yz7o1NQF7FYwPQGwMHUH8DSMqIIfTIPPHgMbdsI9/4DZ50D/5DNhtlXoX1lXeW4h642pEN2+UQSugf3r/IW/8wHgZt7PQk7hIW5hGHuyhuXpAfpTjON/OIu7uMeF2EF1+E56chO/avIH6AVGudbtYRI8ws1McsG+feBO4Ve8h19TUT+f7dH+CMfwff7AFspc+/av8yjvY4XbL/1s3qhv4x4E6LfyAOFExVlEYm9yx5UbGyzk2puKqCm6F/gXFeXf57K7e1IQ/Sm+dzG+tzAVoE/A9/6I51/CvNkvMnveR/E9K92vwvM/xLw5KxsE6LFIDYW1v8TzH2He7Fvq28IHF7YA3vc+4/rop1e9N/0r5sX7v3XktM9+cBD7q+OM/eTzbN+dbKGfPkp6hFj+6+mMOKKIJ1+u5PTZr2yqy9xHpT5s77hfYLohCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCeRTIC1At+x0Xgm+9994/hdTG2TvB2zTbtv8u5yK8r8GQeC/H/fXny3+16Yv/I3zmEp/dlHDuTzCUfSt39/cQuzZ/JNj6NdkC/cn2Mh1PMXfOb9B6/X0m8xlD3Q7/mHWcQmLXYhv1ef7iHIPMzgv1VY9WwW61Yifj21XbUG0VS1b9blVmlto/Q/gvdYXPRWg2x7l9n1js4DbWqwPSy3VvmctzG3Pc5tnfOq854DzUtvEtyRAt6pzC+KTbdGTe6/b3JljV6pa3sLz3qn91tfC0FHwvbFw9k6oeALKz4Lh/ZMnz7YXAC5I3YtVhduTshEE6FY1v4/+hCkl4fY7P4233BGHq0DfSw8u4xKWMMGds9yF9LgA/Bgsy80+7LyPcyVj2Mkd3EfE+UL6fH2p5gAFnM5KfsZvKKXWVcePYzs/5HfunGUM42NchQXm5/Ka20P9Mj7nwvd19PtO3ZsI36FiduPkuXyePfA/ukAcrP+5PfxX67Y16OcC9LlzI2wc+kM8fxawxy0u+e//wvfmUzH7gQYBeijxCcBapzccduywTXPYOqgXidAjJEK7Gu6Z3iTR1D69Is8u/cXxRWOG9uD11VWc/6XXuTAS5orBJTy8q4Ybdh7gDz84ivdOLWP33ijHfe4l1m2pOTf14W5yYn1DAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhJICjQM0AOVi+8ppbRqIvHwYMLxNxi8dR1z5yYTTRe3+uccJP7YcvZwNH0pcBXZVpO9jwghhlNa71vlqqyp33O8hjj2p3cqDLYW6nuodaF3qInlNHVM5n7qdh2b+0V2UEucaQyov459z+axUN2ubTf+eF299gfrV2rrtL2zbe0WRNsRlrNakG3/tu9bFfjeVEBuGWtmVbhVhFuQbRXpVu1twbTNEQTfFojbOennpX/NiO066UF5tq8Fi7ZzrRLe9lQP2rxb6/i/1u2UfTqMHgiXAF+phaIIhJPPidm2dqs0t6JrC/6DEQToVvluGbHHn9nM+alnaEdVuZDdlOxekyPza1Z1voE+vMowhrKHyWx27dYPN7bSG2v5PoSG+3vb1ywYt2rz41jv9kG31u12nUqK3VrS57fQvYiY+xOca3uoj6/YFmpUCZ6+qCtv60siNA3PX+U+85uGXIPvHeUCdBvWjWHz4CkkQqX0OPgiN19Xg21tUFN0wIXy9v31w/swYsMedvYr4ECxvYnRcPhelPmzdrsvXnHnl/D8Qlf1jhe8xdAc0zVDBhTevPCbEznnpL7srYpxzyPb2FEZpXdJmIs/NIiBfQt57rV9XDT3TVauP/Bje/qHc9f3JSABCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCCBpED2AL0ZHR//5GSf8M4bt/M6v2O1q3r/NGP5qtuDvGXDmq/b7uLde1jbeauct8rykalw39rPW/X7ialW8yT3RrdMfPMKeGEVvGr7pq8GHkxV0gcKQYBuVe+v1dPYw7aH3t2HV9HCz3v5vOsaBOj5BLjq1hHEIsb6x6wV8U1f69q6dgY//PTZA4pnnncEZxxfRnGPMNFYgidf3suv/7adO/+0JZZI8IO6h/vfae0F8rl6zSUBCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCCBd6RAiwJ0H9/2UrbW1vZ3pw2rIv9f1tKDsGvPbn+3ZKyty5PPAOzv7j+su/6bqUpyC9ItPLcK84xHayH6nw/AppXwu2uAZ1Mt4tMFrELdWtavqqtQP9RuvUs89Dw8qBYH6FdUnEEocQLz5vwsD5fP5xRHABakn1W3c8F7Ui0NrIL9X6me/7em3pDI5zU1lwQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgATe8QItDdD/mewN3r3H++qSR6vBftcNC9EXAL9s0WN3TPbQ7eF359HiAL0736zWLgEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJtFgg5yTVx6+wXZtbfIUudoLt/H1nF1tThy7HQvT+HpzQ8qvaw7cPQXcdCtC765PTuiUgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABCTQMQI5Beg+/mzgjo5ZUvtdZR4wp/2m7z4z9/JgYl1L91aE6PYhsA9DdxwK0LvjU9OaJSABCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJNBxAocN0H38ycArqX2WO25leb7S68CxQDzP83br6eYCN7T4DmLAVDzPSDUkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJvGMEcgnQHwPO6e53/EHg8e5+E+2x/taF6I/jeUaqIQEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSOAdI9BsgO7jX1O3Y/bN3f1ubwGu7e430Z7rb12Ifi2eZ7QaEpDAu1MgAvQBSoCi1J9CoBaoSf2pAioB61yhIQEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAS6vECTAbqPPxB4C+jd5e+imQVuB8YDe7vzTbT32kcDM1vczt1Ix+N5RqwhAQm8ewTs/xtDgSOA+v+HDBlQwMghJazbXM3mHdF0DR/YDGyp+y1j/9aQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAl1WoLkA3aqLr+6yK89xYVZCf2uOx76rD7MQfQFwZosUbsXzjFhDAhJ4dwhYtflYqzYfUFbA5R8bwnmnlTFlXAllJQX1ApWVUZatquaPT+7gFw/vYEelC9QPAG8DB98dVLpLCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEuqNA1gDdxz8WeLk73lD6ml8Bpnb3m+jI9bcuRJ+K5xm1hgQk8M4WGAQMLyjA+9pnR/K1S0ZSYnH6YUZldZTv3LWOm36zmWjUVaCvAXYd7jx9XwISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABCQgAQl0hkBTAfq9de3bLwoWFCdG3G1r61FAD7xDXXs7Y805X/Piuh7j9zU42rbltWHb9XbXkQCsmjP9Huy/7VHalsRtHBaiLwLs79zGfXieUTcYFzxI+DefIp7bFO171AWvUXj0ZGJzPRIzF9HDrrZwRudVwc6dS8jWMHcu9jA1JNAdBKxl+5BJI0t46CeTGDcyh+Q8466sIv38zy9jXbK9+wZga3e4ca1RAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCCBd5dAowDdx58CuIpiC853sZYDVOKntq4NEaYXg+jjtsDtumMZYGX0yWHbdNsWvMG+vGHLglJb+DZ3DxtT59pWv3Z8Vxi2jbCtqyy1u7ut6U2gChhR17Detq5v47DwfHWL5jgWzzNyN2Y+x+BImGEhnz0V01nVopnyfHD5CxT4ESb68WRwbiPk44cK2HDHVLbl+XI5TTfnJUYn4vSLhli/YJr7cGq8QwUufpnSwlrGeCHiIZ+3KqbX/xLqTnfcDxgzbkgJzyycgrVub+2wvdFPmLk02CP9LaCytXPpPAlIQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABCTQHgLZAvQ76tLm2T4JtvEWB9mHheYFFJMgRjRVuNuT/vRvQZlyeyy+uTnn1EXe89wB++uK6S2nsWLo4tQptgWvVWtPSPta5mxWHGzBdDW47HUi0PrgKH/3HwToPYEjU9PaOu0+hwGD83OpucANOU81D88zcjeCAD0RYf/dUx1ip445/2JYbYIBFpx7IUJ+gnDIZ1PFdPdWRYcPC9BjCfrH4mxceCL2QDWyCNjLDzGfEbECasZOZbN1EOhuUJcv4whqGd7ZL220wc1+UR5TUkL4mTunub3O2zqeXVbJ6Vcts3bu9kbTq9D9nmtbDXS+BCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSEACXVegQYDu4w9IlVyzi3XsY7tr2T6ICUQodHdh1eg73Ba2FtVOdMF6Vxs7GtRhB4Fz71Rgbqu1ot8DwMjDLN3OtYy1b4t6mrevRwcF6C3fD30gnmf0XS5AT38el73MkaEYPTszvFaAnttPSPkLlMRC7i0XIglWVkx3b7N0q2HbB/SsYXzYJ1Lh2CXxAAAgAElEQVQTYdW9U12riO40hlurjge/P4kLZtj/Hg4NC8IHDCjAKtObGqvWVVNZDdMmNTzmrj9u5oofuOYUm1K/ZLuTidYqAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpDAO1ggM0D/MvDjKAfYykqsCn0g4+hBrwYE+9hGnCh9XMVz1xs/qWtofn39soLAuX8XCsHbYtZBAbotsWX7oV+P5xm9AvTDPF4F6Ll9/t8JAXpud9plj7K9LqaeNqXMW3Kn7exxaDz8ZCXnf3kZZWUFbH/oJAqyNOeorIwy9PxnqY6CnX/aFNt24tA49sKlLFtVba1BXq7rd+F3WQUtTAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABCQggXeVQGaA/gYwaTcb2csWiuntqs+72zgKWF6/6HdagL4LWAtYRWc7tnAP/M4EFuX0CViO5xm9AvTDcClAz+nzhAL03Jza8Si39/mdXxvH5R8b0uAyt/9mM1f91FWQs+mhkxgyoHGCvnxVNUdduNQds/Cbk7jkvIYV7D99YDNfvsnNob3Q2/EhamoJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgARaJlAfoPv4JwNPW9X5Ft6klgP0ZyQ9aRh6ZE5vbd6r2U0JfenFQLdHuv13EaX0wNqmQyWb2c8OyhiCR8i1hi+iJzXsI0oNpfSlN4Nd2/haqiiklP6Mcjuvt3Q8Q4JTeLuuBj3olGzbJtufUOpPMKPtIT4uY3oLc/YBAYsVRdq5liNZOXa2UZnqQFwDWMGmVbrbPuSZ28vbmuwYaxtv+5XvBLcFcHPn2PXsOGs5b+faPVjLfFtjUwG6mVvb+eD+7T6tC3OyBX/jkbl+m9/Otbb1I5KHf3MjfP0gFAwBrxBiWyG+G/w4hEqgYFjybzgFz3umqT3QL36Z0kicUV6cg2/vZ93iGcRa+nwzj//cs/TvEWagF6LIT5CI+VSFCyj2YhxcsY+1mdc4XAv3uT6htc8zLOJT7IXZWjEdA2owLn2OEQUhSoF11lbc/tsvoEdhnI2pA4ckPEoTHl4kwf7dxaz/zdHUBpOkB+hrqtgxqS9HRD36+nHCBR7VfpyN2dqVWzvw0r0MLSygl+3lnggR82LsqjiBLXitq+C1+13/EiPwKaiNsDmzxfgFT1HcJ8LYuMeBkdNZk7kPeeaa/IT7oG5Od7PnXhxl8MFaDt5zar2R40jtEd4v5LO9Yjo73HqWMjZifjE8P+x+QPDixEORQ/foJ9hfMZ1kgtuGkfn5sfsM+xTHQuy8e5prL86spYxKQKlXzfq7T3M/fPWj/AUGJDyGJjx2BMfPXESPcE/GR1Jrr00QjkSo2VPAyvTPQfo81z5D75oIsaoYkdIIpbEQXqFHYdyjMAxVdxzX0K0Nt9ySU+2XXv+1fziJkUMa/i7OR4C+bFU1VoUObKtjXt+ShelYCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJNBeAukB+g+Br1j79i2swMPjCLfHeY9mr23h+B421VerV7KFPWwkRJgBjKGYMnawmip2uTA+QpH7fvqwa3mESaTlqRa+H9GK6vevkODHrEgLkJtavgXFE2135bQDbF1WsZ45LCu1au/0UNxCcAvFLQTPHH2scDMjsH8zFZxbkF2fpaadmK3FvO01bwG6DQvPLcwPhgXjmRXodt29GcfZ8fYMrZNAZoi+DrBty+1Fgcz5g4A+BKNWwaN7YFw/iO8DP+OevSLoMdHC9R/heV/NFqDPfIk+kYR7e8CSuOrKHqxqKkzM9cM+82lGRwrdGwv4YRJe3N2EGwmPWLZ9sw8XoNu5lz3P2FCIvuEQe+cdz8r09Zy5iMiRZUz0E/QIFbDhjqlsC+YM+ezxw/TyE8nQN21EC/fy9m0z3JsT1AfoIXZGEu4tk8w3RaKVNaz8zakcCOa48hX6JmKMjPtE7EWBkI/vQnQPzwuzb9hU3soMt3N1nP0SE+IJeqdCbPtQ1I85LzMoEWW4F+Lgm5WsSH8h4bLl9ApVuQ96ga0nHsG3ZxD38YtSNjbRrNfoRzWj3DG9WXX3pGQIbcF6UYxxzquEtfOPZpcF6JteZKK9gNDc+i3oXp2xnlzvNziu2c9PhP13T8V+aAl8YnE2Ljyx4S+IbJ/1bPdgz6zwIGtuP53dmeu0z9SYMiZacJ/tHpo7t6X33MLjJ48cUFC89qGTGp2WjwDdJi09/Ulr8W4/F85aQwISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABCQgAQl0tkB6gP46cJQF3TtZ64JuC9DDDQLmxssNji+kmMFMYidr2M9OF4n3ZTi9GJSqaK9y/21jNxvw8SmlHwUUU8km99+Fro59uAvcbeQS4GeuaDJgfegPjba0cM/WLt1mtsJpC+kt37TMa5RFQamA3NZuAbPd66C0dQQBun3J8lL7vgXeVl1uha52bPqe8vY1W7sda/Nbzmq5YzB/tgDd5rZHOjA1l63TinSrU1+z/DoYVqVufyzrtfltLRbWW35qQX36/Gvgop0wLzV/ZECyGt2uVbMSEtVQOAwig9/A8yZnhoqXP8PweIRBdifxEDvnH8+61lZMB6svfwFbgP2JVsVYe//J7L12JUUHqxjvx+nRlgDdwv5wjDFeiHivGlbemBZkz3qKfpQwCo/o3ggr7CWAy57nyFCInhYQ2/rsHkccz/rFiwmN7ck4+14iwe673+PeuKgP0O3fdk4izu5QmA0r9uGP7ce4UIyetTVsCaq1g0DW2g7EQmwJKp2D+7UQPVhLa36hBCF5NMTBzFA6CI/T12PXsMr0siImhHwi0QTbF7yHDfZML1vK0EiCwZlzBV+3DgEjp7PSwv6ZzzAhUpA9uLdrtGcL9+DzY5+T4t6suXkCe9NfCEikBejNtdwPPuv28kS2ivhc78E+cwW1DPLCHIyF3MsftQnP/SCXEGPXXSeypq0/M634bBw3Y1pZ+O+3Ndz/3OZ54PEdXPjfy93e53seO40S14Ci4di8I7kHuo2HfjKJ805r3M3khJlLWbq82roWvNqK9ekUCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJJB3AReg+/i2d7UF6Oxjmwu4rY364PoK56avW0s1W1npgnYLvLfzNjXJQltXcd6HoWxlBXGiDGSc+9sCegvYrUI9RIRtrMRax/dhmKs738Jy10J+AKNdpJ7rsODcAvSGoz0CdOs4vCEVbltld3qV/lZwFfaWKFmFe1AUHQToFlhb6/heacu0wD29CNn8bFtgG5nHNrcHuj1Oax8/NG1uC8Vtz/Si1HrsOhb8W2F1PBWeW4v6YARV+BkBuoXrjwJnDU62bA9GdDNEN0GkPxS6NveTZz7v7Y6E3dsA1eEQMatuDnvEYkWstyrjXJ9nU8d94SmK9xUxwSqwvTir09uFl79AgR9hYjxBpLUV6OkVxJnBcbZq7SBgtfVGQuy843isdYAbFz5D75IixloL8qIyVtw8gZr04zOrvlMtzYenB7LN3ZNVL0/shVcxPWsrhJyoZ66mR2QXE80zXsWqoE15c+FvEH5n3m/6OWUHWRG8fGCm615ggrVmt5cACsPErLI9GuPg6gMNK9uDRecaPud0k2kHWeV7wUHGhwvxMj8/wQsSvkd1UIGeS4Ce6dDWewiu2dbuAi21yTh+2nmnDfAs/M4c1VH46S/WMW5kCZ89p+ltPu7642Z2VEb50mdHurA9c5x+1TKeXFppb/q83Ma16nQJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkkBeBIEC/pm6v25ttxqAFu+1RnkuAboF4MiCPuUB8N+vdvuY2cXIv85GuJXyIkAvYa6hKVbgXuv9Onm9hru8C9h70SlWsV7t90K1KPddxS10N9bWNDm6PAD0Iwy2sTq8at4tbOG3V6SZgAXoQrgfnWCW5he7NjaB1e7a27s0F6Nna0lv1edCF3K5rwb5tN2wvAdjLCWMzFhJ4mbt157aRWs+oIljtWrUfOie2A2rXQbgUilxL+WtnPu/9NhWgu+OsqtaLuaDbFtPmMedfDIvFGZyt6jcfAbot8PJnOCIUYVh6JfVVr9EzahXuYRLplen1AatPLftYuXAGB4ObvOBBCnuPYaLt5R0E+sHxIZ/aIFQPjs8W4DaoQPfZE/HYki/L4LrlLzAu4dEnEmZLsN/2555iWGERgzNb2V+7kt4H9zM2Gieeeb/BCwNuP/p+rFg45pCFVXiH9zLO3hWxyvtYnFBhEWtuP7ZxW3NbV3sF6OUvMNKqu9O7AjTn39EBuu2rHoWRvrWyyPg8tfmHp2UTNFmB3rJpmj46VYFue1osy9ecmkcCEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJtEUgCNB/XVeB/imbqKUBup2zhTexSnSrNrfzbf9zqyi3v62ifBfrCVq8H2r5XuIC+qCCPX3P9WC+lgbon64rf36wkUa+A3TLRi0gt27dQSCdflGrJrfvW1Fl+vebC92znW+ZkgXY1lo9fTQXoFsb+BEZx2cG6Bbo21rsPqx1e+YLCkEFenp4HwT6fWDBOJiZdonYLoiuhVBJEKA/WFeB/vmMAL1Ne3RnPtLyF5gUhZICWFcx3W3iXj+srXlNJRNjIUKtrUC3yS54jcLeMSZSS0E8wuqFx7OnqeA1LRBv1MY7W6AfHJ9tj/VsAbqtp/wFyhKee2CujtdC/HCMAwfjbL/nJNd7v00jCG0LoHroCe4DzIalHBn3KY7HWVt/DR/v0ucZHg4zyF5gsH0AasMUelF6hcOujX2x25c9xr5hJzbelz14+cHmj9Wyc+Eph6r1szxna1nv3jbJ9ixbc8PBfuOhEEVUs3b+qQ07IrS0Aj24n3xVoF+1iJ61vRmbvi98a+4zT+ccPXJIQY+1f2i8B3qe5qf0/U9SXU0VsDxfc2oeCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJNAWgSBAt42vXfK6nx3sZB1FObZwt3Nsz/IqdtOT/lhAblXkVlkeo9ZVkFtbePvbKtSbCtCDFvBhClpdgW47fFttdcOR7wC9MrUPueWYVmGe2Zf4cAG6Vaxb5XpTIwi8MyvYg+Nt33LbHz3bHujZ5s6cz+Zp7gUA2zPdctFsAfoAGD0KFgGuW7uloI0C9PUzn/dODFq4JxIkbA/wpgLGln54g0Aan4LM9ts2V1C17CqcMyqg7fuXvcyRtsd4LM7GhSe6TeabHOmB+b4SNmQG6sGJzVUoZwv0g+OzmTQVoNu1rBL97efoGyqkX8inxPYft6/7UDliGm/bvuIt9QyOD14Y8OPJSnkLxW0f+FABtV6MFUGLeGufX9mDicG1069n5nGf2rjPjoXvYWu2PbvTgno7dXPFdOwDnXW0RwV6sH67YHqL+WABQQv9XPdAr6/cz2jdH8zXknuw57vxZcb7cXod7uWC1j7nFp5n7Sn67nnsJMrKDv2ee3ZZNSdfsbSFU8EbD05j0shDm6Wv2xxl1MfdHun2EoztM6EhAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABDpdwPPxLXW1Db3dOEClC8QtyLYW6/Z3trGHjRRS4vYor2Qze9jkQndr0W6V6FZZfoC97hjbE92+VsaQdgvQrW56eNaV5jtA351qaW5tzLMF6Idr4Z5rgG7ZaLb5rR373iwBugXl2SrKg4r1YA90q2y3OWwvdps/rR27q5q3cN3uIVuAnlq7VaAvSGE3DtCZvPFbx5+6dW7YQsh9EVb3iTLBi7lN2JsNTHP5aQgC9ESUwsKDrLn99Ibtv4PW636EmvTgN5i7JQF6est2ouwKRbASf1ehnR5WNxegW+W4H2ZMIkZs72pW/OZT1NYH6Gnt0oP1NRegZ/rYXt6FMMYsGlSJ5wKZ5ZjLnmdsKETfwh5sjB2g0NqcZ+7RbqeZoR+ltCjMrlqf2tR+5vsrTuBAttA8uNTMRe7dmgmFqbdOEh6xmgir7p3qKpAbjZaEz7necjBnOEQs2+cjCMRzCdCDlw7ss52PCvS06vzq4dN4sy0vROTqcZjjXEuL+789qcE+55WVUc7/TgFLlizJ+TInnHAsz/y8rME+6Lf/ZjNX/dRe2An2iMh5Oh0oAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABNpNwAL0c4FHgyvEqGmwp3lJoxbi1uZ9s2vV3o+Rruo8qFq3WliPkNu7POqi+C3uv20E7djbqwLdbuDDWZnyHaA3FZAHF98KWJxfCrg9wVMjaOGea4CerQI9CO+t0DizAr2pAD2oKB8IWI1+ekt3C9Bt3/RgWCGoNSOw9vTNBOhWfR5UoWcJ0Pvu/duFn3zrA28GIWTQljruEynIT4ietYW7BZoW1vtxeqT2Xa+vnA7usCUBevre4/EIfiKGl61t/GECdLffdvp+7c0d31SAbmH+oMlUZ4aqVy1jRG0tg3yPHfOnta2K93PP0j8cZhQxDvoRwgUJwgWlvHXb0exP/9EK1k8hG+6agn3gGwxrkz6pH/2W72LX4hnurQw3Ln+WMUToZ2Gz/XcsQf+mWr3b99szQLf5MyvQg5cdrH16tgA95LMpvWI+eFnDWtanP990jFzvIbh23MfvUcSqTPN2+z9A8xPb21PHnjatjCW3TWlw5Mkzl/Htnz9IQUH2F6zSD66uruam71zIYz9vOMexFy5l2apq+2XzMhDvpHvUZSUgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpBAAwEL0L8A/Cz9q9t5m2p2u3LRQYyvD8HtmCp2uhbvVll+BBPc9w6yj+2sIkHc7Xs+iAlYEL+Ttam90CMMZiIFFLdbBfqNdXXZX8z6cPMdoFt4bVXaFkRbGH5E2lWtutu+Z39bPbwVcAYj1wA9aAGfuQe6Xe9toCY1oQXfFoBbpbrNbUW8FnpbFXowgupzC+PHp0L3puYPKtNtb3Qb9gLApNS/gz3Q08L/oAo9S4BeUv3SDZ9dPu3h9BBy1mv0ozq1uBLWzj+64d7TLfm5DEJjL0z93upWjR05wKiwfciAlgTodm4plN4xlW2Z60gPScMeB96sZEV6KGzHB4FyIsHukdNZE4Tc9fdsGWPaftstDdDnvMygqM+wcIwtmS3Pg7kKC9l225QsOxi0ADa9otpOC/lUZVbb29cDE/Ofd7xrZ1A/rEMAMM4LEUq3snC+oIiRIajdU8DKvgfw/QQTvRBFkWI23XZ043b6TYXP9ryKo/Rurv17U7fd1B7odq24z1hbj53bIED/F8NicQanh+RBNX3Eq2/hkLVqPJcA3a2pmIkFEXq0tEvD5c8wPB5x+9H7tPHnqgmzcUCfP3x/Eh+bMaD+kAce38GF/537tuUP/WQK551WVn/+Lx7ewczvuPPtZQr7BaMhAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABLqEgAXotwBXp6/G2rBbIG77mFse2QsLTjwXqltYbm3dBzKWIlcFDVEOpqrW7fgervW77X++jZUuVA++Zudl7rFurd63pjK4IGTfwpuuFXx/V+F+KLRpTuwa4NasBwQBeh/L9VqIHgTQtm9vejW55azW9d6q6y0kt7kt4LbtnC2I7pUKrJPV98mRa4Bux1oV+HZwWZ5tTW+htt2HFfPa3FYFb4WbtkVx77S5LSi3SnML0m3tNocdNyT1J1iLBfFWzW4huQX9Nn+wdnumNr+tfUKqQj1LgG5V6Kuz7oFO4cEVCz/3+pG3pIeQduXyF5ILiYWIJzzWLjzebbbe4pFeae7bHus+vh92PektON+X8Ci0r2Vr0V0fXieroPcUwcCYR89wjJ0V0x18g5EeKtfWsOWeU117gQYjmNOumYizu6YH2wrilIU9Blk1c2Z775YG6Fe+Qt/aGkaHIm6P8W2RRNItEaOf38NVt/vZ9oNvMay1Z0+1cXf3EmPjXSc3rjBPb8UeKWJ7rIadkX2EGEDfg1H6efYeTVqYa4F3UYxx9oyiNay756RkBXoQqntx4oV7efu2GQ0r3evb9UNhUQGbvRDRA7UMiEQprY2ya+EprQteg73t/QQ1YY/1iRg9EoUuILe3UaLWKcEroOruqe6Hlpkv0cf2g3fmYTaEDhIPFzLMPmf2UoX9bZXjtnd8xXSq7XnFEu4HES9GKApu4+8CqPYjJOwdGC/MBjvWvj7rRcZ7UGafZb+Q6rCF4WkjESdRG2FzZqv7wMc6Lri1Jdh/93uSa87jsLknDxlQ4Nke5mUlhyrOv3zTKn76QHIL+yklBXx2QAHjSgpYVR3lFzuiLK+2l3Xg25eP5JuXW/eL5Ni8I8pRFy6lsjJq9/lq6pdmHpesqSQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpBA6wUsQP8zcH7mFBaWW6V54lAHZndIhCIGMMbtdx6MODEXllsYbqH6YI504ftWVrhwvZjerirdxl62spsN9cdZq/ctrmrbarknuMr2ZIBu+6YPo4zBOd3dR4CHsh4ZBOjpLc9zmhJcdmhBeT9I5mdpw7JWa3neIOtKhdIWbKfvLW6ntSRAtxD+rVSQnX5NC88tubYA3CrOLfy2Cnib27I4C73rO2a7lx6SAX/m7vCZ1eZ2DTvW7nNo6toWqlt4bzlglgDdTrF90C/aCrUbINwTipIvGUSia/46c9mY/8wM0O17QXjshYi3JfS1yl4/wvBYjJ4W6cV9ahNhthYkqIqFmNDUHtdBi3QX8ibP80Mhds4/nnXZ9u/+wlMU7ytKfnh71bDyxlPd2wUNRnBPNlfYc5CHRoRdw49lba57pjfVwv3yZRzhH2SoVXanT2+hq9eDTdlaqef6KU8/LmjjHvaINXW/dryFxIkYIy1sTj8/5lPbK8bam09mr33d2uBvfI7xfoResSh7F57cqGJ9XMJLvoHy1l5WZlb3z3ya0ZFC90aIG844xra7TnY/mK0a9lJEzxrGh/0G+xfYT3Jl2GdPPMII36M6CNDtIsGLBQ3soXLvKtb1HM/4ggQ9oiHWL5jGdusYkIgy3Fq7N7XAoGOA+WxY6t7OcSF7U6OpFv3pPtYxoGI6uZeF567nWk+cc1JZozbsv3l8B1f8YBXfH1LiQvRxJbCqGp6srOanlVEWfnNSg8rzaBROv2oZzy6rtKvbyyj2C1pDAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCXQZAQvQXwBOyLYinwT72emqzi2360FvSuhLtlzIKs73sgXbM92Os2GB+j62UUp/1w7ehhVXWjhvrd+D/dVtfgvSrdrcvm5z2THFlLnq9VzGdODFrAday3UreLWY1XK6bMPCZ/tjAXJ6PhkExxZCW5icOewcm9syVcsRrVo+ee+Nh1VjWtW3fT+Xe7Jg3irILWiy4ur0uS3ctgDd1msZXbLSM/lvq46371keZ7ljU9eyoN2Ote2tLey3oDx4KcK+Zq3ig9wyWLu9hJCW87kqdB9iu8ELQTjw9V+c9XTonHgxiWxV5le/Qf+qg8TbUoHe9wC9h57Arsw9wS9dykASjLDK4OHTeDPz+6bkKrqj9I/XEissYFtQCZztqQXVytae/e73uDcXGo20CvRNB+PUFkToW1RIzb4EuzKrhu3kYI/wRJT9ja7t4816mr7RMF5QqR1c0CqOaxP0LyqgV6IWL17A/kiC7RXT6z8AufyoHPYY6xQQihC647jG1fbpJ7sguoojIoUUx6PEvCh75p/ifrgbvFXiKtAP0DMUYVfmWlMt1fv6lexbOMO1Qmg4fLw5rzDQT1BWG+WgX8X2rMcd9q6anteDaG0xO++exL6mXmDAx/vcc/SzZ2svLZTG2RG8JHDVInp6gym69ahkZb0de8HT9Ohb2HSAvmIftcHLAnZ+oh8lVVBVHG30Rg4HCvDCu4hnu++5cwlt/jfGxRP0bqpDQktpshxvv1hsb4j+HzttAA9+fxLpW5/v2BHlpj9u5smlLhR3Y8a0Mq68YAgDyg5VrFdXw6f+cxkPP+uOs19ujTo+5GGtmkICEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJtEnAAnRLidM3zm7ThJ11smW5a1t1cQuSbRtny+6syjwIgS1EXmWNkTO+3qqLvHNPWmSJcKPbW4vn2SNpl3HZ8xzpe5QWwLqK6a4NgBvp+1i3JUwsfwHbrLm61nYr6MWEsE8kHmF1U4F/cy3Z2wVAk7abQJMBertdsW0TX7aUoZEEg/0I+4dN5a1sL4y07QoNznYtLyaNLOG2r41zIXmu4+End/D5n65j1WbXtX5Tas+IXE/XcRKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUigwwQsQM/sQd5hF8/nhZrslZzTRYJKc6uW7Jtqg27bTFt4blXY7ZYF57S6Ln2QhecWomcOz2vbI2nmptP2sE54hexJxKmJJCiO+/S2Fue2D3prw0QLz/0wY1z77agrrA9laz2evrzZLzHBKoBjcTYuPFEtqbv05/Uwi+tOAXr5CwywdvMRn/1+nDX57kTQBFWwJ4R33mkDuO6CIS5IT69ID86zdu0PP7uDmx7YzKJkdbr9QrX3nHZ158+I1i4BCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkMA7W0ABunu+1qLcunNb1Xkwgj3BR2a0dX9nfyBadXfZqtDbMUC3FtmzXmJkIkH/9D3H/TCJAp/dy/ewIXMv7Vzv64KnKC4rcm9MuF71XpiDXozVzbV5n/Ui4z0oU4Ceq3LXPS7YA54QB1dXsqK1n6MOuUMfb+5iwnNnYG00OnIUAUNTe0hQUgCTxpVQZv9IjR2VUZavq8ZCdNfUPhmaW+V5bUcuVNeSgAQkIAEJSEACEpCABCQgAQlIQDitxpwAACAASURBVAISkIAEJCABCUhAAi0VUIDeQMzauO9N7Wdue5XbvuYahxWYWxeR3ZBxVHsG6KlL2f7Zo/vQszBOcVWMqgknsb+dW1hnp0jteb29hmiXDlwP+yB1gAlc+wy99xURaqplv5TqBewXpO15YS+bWKjeA7AU3ULymtSfKsDaecTlJgEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAS6g4ACdPeUNgKvAMuBt4B1qS16bXvtpnZWt23jBwBDUlvIjwMmAccCw7rDs8/fGrO1ce+AAD1/N6CZJCABCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCcC7NEB/A3gCWAI8DazP82dhBHBK3TVOr7vGWcBReZ6/C06X2cZdAXoXfEhakgQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQk0JzAuyhAfwb4A/BnwAL0jhwWoH8E+DhwckdeuOOuldnGXQF6x9nrShKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQQF4ELEBf43qQh7v3LrWjszZbtxbsC4H5qfbseTFr4yTW5n0WMDPVAr6N03WV0+0BrK5fzFo8z76iIQEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSKDbCFiA/kJdWfYJ3WbFTSx0el2N94v131sG3Fq3P/m8Ln5bs4GrgSldfJ05Lu9QG/cX8Tx7JBoSkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEuo2ABejW0/z8brPiJhZqDdIf4hXgx8B93ex2LgKuB47tZuvOWO6hAP0hPM8eiYYEJCABCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCCBbiNgAfotqTLobrPoxgvdztV8i9tc1Xk3HideDc/dUFc9P7B73sSZgIXoVv7vedd0z5vQqiUgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABCQggXergAXoXwB+1n0BLP//Ojeyly9235tIrtyewsd7wy++B3O7Yf58aB/0L+J5N3b3x6H1S0ACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSEAC7y4BC9DPBR7tfrf9OmDZ/+Nu6XYDH+5+N9FwxXYT9jRsrDkHZtwIayZ3r7vy3XI/hOf9pXstXKuVgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgATe7QIWoA8DNnQviHmAVWjH6pe9ERjevW6i8WrtKdjTCMaaMPyiri393Nnd586S+6APx/PskWhIQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAIS6DYCnq3Ux98PlHaPVZfXpcx3Zl3qSGB997iJxqscAaxrYvHfugLmVnSLOyv7GpWVP/D6dIvFapESkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAE0gSCAH0rMKhry6wFLgaWNLnMTwMPdu2baHp1nwJ+3czi15wOM+6FNaO69B2ecyzbHn/FO6JLL1KLk4AEJCABCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJJBFIAjQdwL9uq7QM8BnAAvRmx63ANd23ZtofmU3p7rSN3eUheczfgVrTu6yd/mjMnZ9pdLr32UXqIVJQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISaEIgCND9riv0OPDBnJb3Rl0F+uScjuyCB71eV4F+VA7rWgPMeAzWnJPDwR1/iN3GZDz3udKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQk0J0EPB9/NLC6ay76YeD8Fi3NAnQL0rvVKAP2tGDFFqJf+hAsPq8FJ7X/oZb/W4BuEb+Ht7j9r6grSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEsifgAXoM4EF+ZsyXzPlXnmefsWvAj/K1xI6ah4L0P8F2KsMuQ4Xoj8Gi7tOJfpXgB8m168APdfnqOMkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIIEuI9BFA3Tb8/yUViG1/sxWXS5/J80FbmjhdK6d+9NdZk/0p4HU7uxzPbxvtfBudLgEJCABCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCCBThWwAN2qz60KvYuMtcAZdeXV9nfrhrUSX966UzvvrDPrbntRKy6/ZhTM+AfY3504JjVsnb/Qw7u0E5ejS0tAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhJosUAXDNDfByxp8Y2kn/AT4Po2zdAJJ7dlJ/o1p8OYf3bCog9d8sfAlw/952IPb0anLkgXl4AEJCABCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJNBCAQvQre7Z6p+7wCgH7mzzOnYAA9s8SydM0JYnsfAKuLSiExadvOR2YMChqytA77QnoQtLQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAKtFehCAfo8YE5r76PReTaTzditRmv2QU+/wRl3wOLZHX7LdsU7Gl5VAXqHPwVdUAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISaKuABeirAWsg3onjdeBYIJ63NSxLzZi3CTtiotbugx6sbU0EZrwMayZ3xGrrr/EKMKXhFdd4eGM6dBG6mAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIIE2CnSRAP2DwONtvJXGp18M3Jf3WdtxwrYG6La0xefAjMfacZENp74IuLfx1RSgd9gT0IUkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIIF8CXSBAP0W4Np83U+Deawyemq7zNxOk1ofAOsH0NZx6c2w8Jq2zpLT+S9nr/RXgJ6Tng6SgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAS6koAF6H7nLWh7XY34eGBvuy3BYuRb2232PE+crwB9TW8Y81bdnQ/M8wIbTnc1YK8/ZBsenteuF9fkEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABPIs0MkBevvH2+0f0ef5icytm8/+tHXMvBoWNBVvt3Vyd7699TAezzPiBsPHX+DhXZqXq2gSCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAh0k0Ikt3DuuwXr7NYnP81MKKtC/VTdvW0N0m2vBy3DmsXleZP101+J5jRJ6C8+BmapAby92zSsBCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCbSXQCcG6BfXFTDf11731WjeDwKPd9jVWnmhM4FFqXPzEaLPvAgW3NvKxTR72uN4npE2GEF4Xhegaw/09lDXnBKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQQLsKdFKAvgxot8rorGCvA1OBWLtytnHymVY1njZHW0N0q0Jf9AqMntLGhTU4Pe4enucZaf1IC8/tawrQ8ymuuSQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABCQggQ4RsADdap6t9rkDxxxgXgdeL3kpu6JducuOzADdFtrWEH3mbFhwRz5veQ6e1+DhZYTndq3FHt6MfF5Uc0lAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhJob4FOCNB3AAPb+76anL8cuLPTrn6YC7vdw7Mc05YQ3e2rvh0YkI+7vhPPM8L6kSU8t+8pQM+HtuaQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQ6VKATAvSfANd36E1mXux9wJJOXUETF/ebWVRbQvQFP4aZX27rHS/B84yufjQRntv3F3p4l7b1gjpfAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQQEcKWIDeVN1zO63jKGB5O82d27Rr67YGPwOwv7vMyNa+PXNxrQ3RR0+C1W+05VaTZJ5XT3aYz40C9LZo61wJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSKBTBCxAv6HuynM75urPAKd0zKUOc5Wus5LUQnN9jaG1Ifqip+HMk1trfwqeZ2Ru5PDSxaUe3sLWXkznSUACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEugMAQvQz6yrLl7UMRf/KvCjjrlUDld5HPhgDsd1yCGr6xqf237luYzWhOhzvwI3/DCX2TOP+SCeZ1Ru5BCe22EK0FsjrXMkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIIFOFbAA3WJbi287YEwG2tRKPO9rfBg4P++ztnDCXNq3Z07Z0hB99FGw+vUWLozz8TwjciPH8NwOHePhrWnpxXS8BCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABCQggc4U6MAA3YJzC9C73uj0SvSWVJ+n87U0RF/0Opxpe9DnNFpTee4m9vC8nK6ggyQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABCQgAQl0IQEXdPr4rY1wW3ArtwDXtuD4jj3UNvj+TF3v8bUde1loTfV5+hpbEqIvuhnOvOZwd2gEn2nhnucN5lSAfjhifV8CEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEuiKAkGAbnug217o7Tg+XVeB/mA7zt/2qS05vhhY0vapcp/Bz/3QJo/MNUSf+SlY8OvmLmi3fjGeV/8eQQvatgfzLvTwLs3DXWkKCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAh0qEAToN9RddW77XnkksL59L5Gn2cuBO/M0V7PT5PO1hVxC9NEjYPW6ppZUgefNTv9mK8JzO10Bekd8dnQNCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUgg7wJBgG7V5xbnttPYCAxvp7nbZ9p5wNVAvH2mT76uYK8t5HPkEqL7G+peDxiWftUYcA2eZ7dcP1oZntv5l3p4C/N5W5pLAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQQEcIBAH6aMD2QW+n8Sjw4Xaau/2mfR34AvB4vi/Rnq8rHC5EX/QInPmh4I7s1r6A59mt1o82hOc2xxgPb02+yTSfBCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABCQggfYWcAG6DR8/nw3FM9Z9I/DF9r6Xdpv/FuDrdXewNx9XaM/wPFhfcyH6gp/BzC/YrXwdz7NbazDaGJ7j4dV/pvLBpTkkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJdJRAeoC+AJjZLhcee/FW3r7viHaZu4Mm3Q5YLn1rW65nuqbcEaOJEP2iL1209b6f3DsFz7NbajDaGp5r//OOeLC6hgQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQk0F4C6QF6+9VG/3DCy5z71lR+DNzXXrfSMfO+Aq27jfbY8/xwt5wWol8EXA8ce/z7dnov/XNA5ql5CM9tSu1/frhnou9LQAISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAJdViA9QG+/fdAf6rOC8yonOoVlqTLueV3WJKeF5XwbpmpV5/Z6QieM2d+Cq+fClODaJ07a5z23vHf6UvIUntuU2v+8E56xLikBCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCeRHoMF+1e22D/rKgo2Mjw1rsOQd1vAbmA8sz8/NdMYszd5GZ1SdA5OAWal+/K7UPL2d+/BhMW/DxoLAKo/h+WIPb0ZnPANdUwISkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkEA+BDID9BvqJrXYN79jtQdWid3UeAb4A/Bn4I38Xvqwsw0EGu0Gftizsh5Qfxtz4Q2T7MBxFPAR4OPAydmuG4Too8Fbg3vueQzPbTq1b+/A561LSUACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJSEAC+RfIDNDbp4374QL09PuyAP0JYAnwdF0p9fo83/QI4JS6a5xed42zAEue19S1WF9c14D8F6m/W3NJk5sJXFJXWT86+R5AR9/GYZdtIfrCZICe5/DcLq327Yd9ADpAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhLoygINAnRbaLu0cfcbXSZ3k42pfdMtkV5VV+e8FtgMWO90+3e2MQqw3uVD6vYft3+PSwXlthF4w0byjc8OwvR/pL5l/x38Caro7e/gzxm57W/e0bfRJLCrRPeteb7F/fkaat+eL0nNIwEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIAEJdJpAtgDdgtUFeV1RWwL0vC5EkzkBz883hNq351tU80lAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAh0ukC1Az38b95a0cO9wgnfhBfMfoKt9+7vwY6RbloAE/v/27jTGrrKMA/hz2tpWqcEFqVClLQIuSDEyTCVGmAkGA5qiGBNxaydGP7lGrXHtjAsmqHH9oPFDp4hrFBEUYyIyrRpomaIUEe06be0q4kZjqy3XHpjRIjNz77n3npn73vs7X6YJ533O8/6ey6d/3nMIECBAgAABAgQIECBAgAABAgQIECBAgAABAu0mMO671Zv+GncBeuv8bvLX0S9u6gn0wSyyvtbZoE4IECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBQn8BEAXpPRNxWX8lxVm153J4462i1r4837XEKTSKwddaeOPvfzZxFbxbZEHMCBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAikLjBRgJ6/xj3/DnoepDd+/ehJm+Plfzun8UIqPFpgZkQcK4by45M3xyv+2qxZjGSRLS7WgLsJECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECDQmgLjBuh5q5WorBgN0Rvv/Pun3R5X7b+o8UIqNCxw7Vl3x/u3nN9wnUcK9GWRDTapljIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBCYVoHJAvT8FPqOpnT3ppduiDW3djelliKNCSy/dENc97OmzCKLbMLfT2NNWk2AAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAIGpF5g0AG3aKfTud98Z6z9/4dRvzxMfI7D0XXfGhs81Yxb9xwP0AcIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBBoF4FqAXpzTqGf+u1NceDqJe2ClvQ+5n9rUxx8bTNmsTiLbCRpC80TIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIEDgBIGqr+CuRGV1ROTfQ6//mrlrdxxd+Mz6C1jZNIFZO3fHsTMancVgFllf03pSiAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAi0gUEuA3pxT6D99/MG47PCpLbDnTm5hd2SVRsPz8O3zTv4J2TsBAgQIECBAgAABAgQIECBAgAABAgQIECBAgACB9hWoGqDnW2/Kt9DfeuG98dXhc9uXMoGdXfPcDfGh33U32GlfFtlggzUsJ0CAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAQMsJ1Bqg56fQ81e599S9g0Uf2xI7Vp1d93oLGxe48H3rY/japQ0UGsoi621gvaUECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBBoWYGaAvS8+0pU8vD8trp3MnvTnjhy/oK611vYuMCcu/fEv5Y0MoPeLLKhxhtRgQABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAq0nUHOAnrdeiUp+Cn1F3du4Zd7OuPzQwrrXP2bhzIg41rxy7VzpJyftjCsebMR+MIusr52J7I0AAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAgc4WKBqg569y31E32euW/Sq+cfOL615vYf0CPVf/NtZ+8/n1F4jFWWQjDay3lAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAi0tUChAz3dSiUp+Aj0/iV78mrtuX/zzktOKL7SiYYHHr90Xhy+u174/i2yg4R4UIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAQAsLFA7Q871UopJ/Cz3/Jnrx65Z5u+LyQ2cUX2hF3QI/OWlXXPFgveZDWWS9dT/bQgIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECCQiUG+Anr/KPQ/R87/FrqXvGI47vtRVbJG7GxJ40duHY/0X6zEfySJb3NCzLSZAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgEAiAnUF6PneKlHJT6DnIXqxa8bBXXFsfr2noYs9y92PCGR/iohT6tHozSIbqmehNQQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIEEhNoO4APd9oJSqrjv/tL7zp5b3DMThUz4nowo/q+AX9XUMxcGc9r9v33fOO//EAIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQINBZAo0G6Pkr3FcX/h76nLv2xuELTu8s6mna7dyNe+PIC4ta++75NI3LYwkQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQmD6BhgL0vO1KVOr7HvrHl9weH77nounbegc8+RPn3R4f2VTUeCQi8le3539dBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQ6BiBhgP0XGo0RN9RSG3Oxr1xuKvoyehCj+j4m+cO740jhU/6++55x/9wABAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBDoTIGmBOh1h+hveumGWHNrd2fSl7zr5ZduiOt+VtRWeF7yWJQnQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQKB1BZoWoI+G6CtGv4le245n7t8dmxc8Oc58aF5tC9xVk8D2GQ/Gs/bPi3haTbeP3iQ8L6LlXgIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIE2k6gqQF6rlOJyqrjf/trlupauT7u/PTSmu93Y3WBxQNbYuSjZ1e/8b939GWRDRa4360ECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBBoO4GmB+i5UOEQ/QdPH45XHuhqO93p2NCN84fjVfuLWPZnkQ1MR6ueSYAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAgVYSKCVAzzdYKESfffee+P0L5sfimNVKOAn2cizm/GZ//Ov8BTX2LjyvEcptBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAi0v0BpAXpOVyhEX/ipzTHywXPan7zEHS66ZnPs/ECthl7bXuIolCZAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAID2BUgP00RB9RUSsrolmRe/GWD10QU33uunRAn2XbIzBmu16s8iGEBIgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIDA/wRKD9DzR1WisigidtQAPxI/fOrfY9kDS2q41y1jAjc9ZVNc+edazYTnfjkECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAYR2BKAvT8uaMh+m0RkYfpE1+ztv0x7ntOFmcdrfU73p092K2z9sTZWxdELKzmMBIR+WvbnTyvJuW/EyBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECDQkQJTFqDnuqMhev46955Jteeu2xf3XXJalai9Iwf2qE3nkfhz1+6LwxefVgUjvzM/eZ7/dREgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIDAOAJTGqDnzx8N0Zcf/3f/pBN5ws0H4tCy+aY2icD8726Kg6+p9ur2/iyyAY4ECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgMLnAlAfoY+3U9Er3J9xwIA69Wog+3gyffv09ceD1500yXq9s938/AQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECghMW4Ce91jTafT8JPq9y+Z7nfvoVPNYfGnVk+dDWWS9BX4HbiVAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgEDHC0xrgD6mX4nKquP/nviV7vk30e+59KE46+iCjp7Y1ll74rxbZ1T55rlXtnf0j8TmCRAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBCoV6AlAvS8+aqn0Wdt+2N8v/uBWPZAtW9+12vR2utuesqmuPKuJRELJ+pzKCL6ssjyM+ouAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECgo0DIB+ljfVb6NPhIrev4cq9deUHCfad/e17MxBm+baM++dZ72dHVPgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgECLCLRcgJ67VD2NvvBTm2Pog8+KRTGzRRzLaWNHHI3ea7bHzg+cM84D8uB8MItsoJyHq0qAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAIHOEmjJAH1sBJMG6bPv3hOfvPIv8d6dz2/Lkd04fzhe9fOuiOeNtz3fOW/LodsUAQIECBAgQIAA5cgg0AAACp9JREFUAQIECBAgQIAAAQIECBAgQIAAAQLTKdDSAXpNQXrXyvXxnc+eG2c+NG86IZv27O0zHox3vmVd/OgrV/xfTSfOm4asEAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBB4rkESAPtb26In0nuNveV91/PXli/67nZn7d8fr37Av1tzanfSQl1+6Ia77VnfE007chuA86aFqngABAgQIECBAgAABAgQIECBAgAABAgQIECBAgACBVASSCtDHUE8I0pdHRB6oP3LN2bg33vi2++NrdyxJZQAP9/mWF22Kr3/5lDhywekn9J0H5wNZZINJ7UWzBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQSFQgyQD9ROtxw/Q5d+2N175nbwwOdbXsXPJ4vL9nONZ8sSvivLE2nTZv2YFpjAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgACBdhdIPkA/cUCjYfrYqfSemHFwVyxb+ft46/eeE5cfOqMlhrll9rZYefW2uPEzl0Wckrf0cGgeEWuyyPJ/uwgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIEBgGgTaKkA/0e+Ek+mXPPy99Lnrnh1XfWZ7vOHnz4jLDy2cUusts7dG/8sOxA3vPTMOX3xkNDCPLLKBKe3DwwgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIEBgQoG2DdD/f8ePCtRP/eXJ0X39nLho3SnRtWNRXHb41Kb+RrbN2hfXvuCBmHnmr+P6950T/+i6JSLWZpENNfU5ihEgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIBA0wQ6JkAfT2w0VI94yQ1d8bYvnBT7oztefN+8mHv4GXHuP06OR96xPtFp9Z0RcX/c+8S/xV2n/z3e+Id1sfLNj4s7rtgev7jqfmF5036jChEgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQGBKBDo6QJ8SYQ8hQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAgSQEBOhJjEmTBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIFC2gAC9bGH1CRAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQCAJAQF6EmPSJAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAiULSBAL1tYfQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBBIQkCAnsSYNEmAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECZQsI0MsWVp8AAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIEkhAQoCcxJk0SIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAQNkCAvSyhdUnQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAgSQEBOhJjEmTBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIFC2gAC9bGH1CRAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQCAJAQF6EmPSJAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAiULSBAL1tYfQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBBIQkCAnsSYNEmAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECZQsI0MsWVp8AAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIEkhAQoCcxJk0SIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAQNkCAvSyhdUnQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAgSQEBOhJjEmTBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIFC2gAC9bGH1CRAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQCAJAQF6EmPSJAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAiULSBAL1tYfQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBBIQkCAnsSYNEmAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECZQsI0MsWVp8AAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIEkhAQoCcxJk0SIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAQNkCAvSyhdUnQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAgSQEBOhJjEmTBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIFC2gAC9bGH1CRAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQCAJAQF6EmPSJAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAiULSBAL1tYfQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBBIQkCAnsSYNEmAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECZQsI0MsWVp8AAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIEkhAQoCcxJk0SIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAQNkCAvSyhdUnQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAgSQEBOhJjEmTBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIFC2gAC9bGH1CRAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQCAJAQF6EmPSJAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAiULSBAL1tYfQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBBIQkCAnsSYNEmAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECZQsI0MsWVp8AAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIEkhAQoCcxJk0SIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAQNkCAvSyhdUnQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAgSQEBOhJjEmTBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIFC2gAC9bGH1CRAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQCAJAQF6EmPSJAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAiULSBAL1tYfQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBBIQkCAnsSYNEmAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECZQsI0MsWVp8AAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIEkhAQoCcxJk0SIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAQNkCAvSyhdUnQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAgSQEBOhJjEmTBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIFC2wH8AohmGbZVbbCUAAAAASUVORK5CYII=data:image/png;base64,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,extensions:ANGLE_instanced_arrays;EXT_blend_minmax;EXT_color_buffer_half_float;EXT_disjoint_timer_query;EXT_float_blend;EXT_frag_depth;EXT_shader_texture_lod;EXT_texture_compression_bptc;EXT_texture_compression_rgtc;EXT_texture_filter_anisotropic;EXT_sRGB;KHR_parallel_shader_compile;OES_element_index_uint;OES_fbo_render_mipmap;OES_standard_derivatives;OES_texture_float;OES_texture_float_linear;OES_texture_half_float;OES_texture_half_float_linear;OES_vertex_array_object;WEBGL_color_buffer_float;WEBGL_compressed_texture_s3tc;WEBGL_compressed_texture_s3tc_srgb;WEBGL_debug_renderer_info;WEBGL_debug_shaders;WEBGL_depth_texture;WEBGL_draw_buffers;WEBGL_lose_context;WEBGL_multi_draw,webgl aliased line width range:[1, 1],webgl aliased point size range:[1, 1024],webgl alpha bits:8,webgl antialiasing:yes,webgl blue bits:8,webgl depth bits:24,webgl green bits:8,webgl max anisotropy:16,webgl max combined texture image units:32,webgl max cube map texture size:16384,webgl max fragment uniform vectors:1024,webgl max render buffer size:16384,webgl max texture image units:16,webgl max texture size:16384,webgl max varying vectors:30,webgl max vertex attribs:16,webgl max vertex texture image units:16,webgl max vertex uniform vectors:4095,webgl max viewport dims:[32767, 32767],webgl red bits:8,webgl renderer:WebKit WebGL,webgl shading language version:WebGL GLSL ES 1.0 (OpenGL ES GLSL ES 1.0 Chromium),webgl stencil bits:0,webgl vendor:WebKit,webgl version:WebGL 1.0 (OpenGL ES 2.0 Chromium),webgl unmasked vendor:Google Inc. (NVIDIA) #itsl7pRpEh,webgl unmasked renderer:ANGLE (NVIDIA, NVIDIA GeForce RTX 3060 Laptop GPU (0x00002560) Direct3D11 vs_5_0 ps_5_0, D3D11) #itsl7pRpEh,webgl vertex shader high float precision:23,webgl vertex shader high float precision rangeMin:127,webgl vertex shader high float precision rangeMax:127,webgl vertex shader medium float precision:23,webgl vertex shader medium float precision rangeMin:127,webgl vertex shader medium float precision rangeMax:127,webgl vertex shader low float precision:23,webgl vertex shader low float precision rangeMin:127,webgl vertex shader low float precision rangeMax:127,webgl fragment shader high float precision:23,webgl fragment shader high float precision rangeMin:127,webgl fragment shader high float precision rangeMax:127,webgl fragment shader medium float precision:23,webgl fragment shader medium float precision rangeMin:127,webgl fragment shader medium float precision rangeMax:127,webgl fragment shader low float precision:23,webgl fragment shader low float precision rangeMin:127,webgl fragment shader low float precision rangeMax:127,webgl vertex shader high int precision:0,webgl vertex shader high int precision rangeMin:31,webgl vertex shader high int precision rangeMax:30,webgl vertex shader medium int precision:0,webgl vertex shader medium int precision rangeMin:31,webgl vertex shader medium int precision rangeMax:30,webgl vertex shader low int precision:0,webgl vertex shader low int precision rangeMin:31,webgl vertex shader low int precision rangeMax:30,webgl fragment shader high int precision:0,webgl fragment shader high int precision rangeMin:31,webgl fragment shader high int precision rangeMax:30,webgl fragment shader medium int precision:0,webgl fragment shader medium int precision rangeMin:31,webgl fragment shader medium int precision rangeMax:30,webgl fragment shader low int precision:0,webgl fragment shader low int precision rangeMin:31,webgl fragment shader low int precision rangeMax:30Google Inc. (NVIDIA) #itsl7pRpEh~ANGLE (NVIDIA, NVIDIA GeForce RTX 3060 Laptop GPU (0x00002560) Direct3D11 vs_5_0 ps_5_0, D3D11) #itsl7pRpEhfalsetruefalsefalse0,false,falseArial,Arial Black,Arial Narrow,Book Antiqua,Bookman Old Style,Calibri,Cambria,Cambria Math,Century,Century Gothic,Century Schoolbook,Comic Sans MS,Consolas,Courier,Courier New,Georgia,Helvetica,Helvetica Neue,Impact,Lucida Bright,Lucida Calligraphy,Lucida Console,Lucida Fax,Lucida Handwriting,Lucida Sans,Lucida Sans Typewriter,Lucida Sans Unicode,Microsoft Sans Serif,Monotype Corsiva,MS Gothic,MS PGothic,MS Reference Sans Serif,MS Sans Serif,MS Serif,Palatino Linotype,Segoe Print,Segoe Script,Segoe UI,Segoe UI Light,Segoe UI Semibold,Segoe UI Symbol,Tahoma,Times,Times New Roman,Trebuchet MS,Verdana,Wingdings,Wingdings 2,Wingdings 3124.04347527516074"
    assert gen_buvid_fp(FP, 31) == "e01abd0e12f9ee456fe52d2efd6803bb"
    assert gen_buvid_fp("", 31) == "24700f9f1986800ab4fcc880530dd0ed"
    print("gen_buvid_fp() No Problem. ")

and, Rust is so interesting :)

lb-chc commented 9 months ago

b_lsid seems to be generated locally, see here: image

buvid4 struct: {XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXXXXXXX}-{ DATE INFO }-{ENCRYPTED DATA}

  • {XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXXXXXXX} => Random string(?)
  • { DATE INFO } => yyymmddhh
  • {ENCRYPTED DATA} => Generated with IP(?)

谢谢

目前你找到可用的最小cookie组合了吗？根据你说的，buvid3、b_nut、uuid、 buvid4已经可以脱离主站进行模拟了，buvid_fp、b_lsid还不能这样，你在仅有前者的情况下成功通过ExClimbWuzhi的激活过吗？

因为我不知道自己哪里做错了，ExClimbWuzhi一直在返回失败响应

cxw620 commented 9 months ago

b_lsid seems to be generated locally, see here: image buvid4 struct: {XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXXXXXXX}-{ DATE INFO }-{ENCRYPTED DATA}

  • {XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXXXXXXX} => Random string(?)
  • { DATE INFO } => yyymmddhh
  • {ENCRYPTED DATA} => Generated with IP(?)

谢谢

目前你找到可用的最小cookie组合了吗？根据你说的，buvid3、b_nut、uuid、 buvid4已经可以脱离主站进行模拟了，buvid_fp、b_lsid还不能这样，你在仅有前者的情况下成功通过ExClimbWuzhi的激活过吗？

因为我不知道自己哪里做错了，ExClimbWuzhi一直在返回失败响应

No, I've little interest in web APIs, and I make use of APIs used by offcial APPs, where cookies' not a must.

I strongly suggest that you add all cookies like normal requests do, since risk controlling measures that mikufans may deploy are really a black box and often change over time.

If you do not know the meaning of specific fields in cookies, you can just copy from your own browser, like fingerprint related ones.

I think I've show you how to generate buvid_fp in this issue. As for b_lsid, format!("{}_{:X}", random_string!(len = 8, charset = "0123456789ABCDEF"), now!().as_millis()).

lb-chc commented 9 months ago

I think I've show you how to generate buvid_fp in this issue. As for b_lsid, format!("{}_{:X}", random_string!(len = 8, charset = "0123456789ABCDEF"), now!().as_millis()).

抱歉我记错了，buvid_fp你早就说过了。

我阅读你指出的b_lsid代码后，追溯过其中return (0, n.d8)("b_lsid", r, 0, "same-domain"), r;的n.d8，然后怀疑自己遇到了某种经过混淆的复杂ID生成算法，原来它是随机字符串啊......（或者只是等效于随机字符串）

根据已有的信息，如果buvid4 struct: {XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXXXXXXX}-{ DATE INFO }-{ENCRYPTED DATA}中的{ENCRYPTED DATA}不是风险控制必要项，完全模拟的条件好像已经齐备了

你大量使用移动端API时，是不是要面临更艰难的反编译，更多的硬件特征模拟乃至无线电特征模拟？

PS：mikufans 可真是个很硬核的称谓

cxw620 commented 9 months ago

I think I've show you how to generate buvid_fp in this issue. As for b_lsid, format!("{}_{:X}", random_string!(len = 8, charset = "0123456789ABCDEF"), now!().as_millis()).

抱歉我记错了，buvid_fp你早就说过了。

我阅读你指出的b_lsid代码后，追溯过其中return (0, n.d8)("b_lsid", r, 0, "same-domain"), r;的n.d8，然后怀疑自己遇到了某种经过混淆的复杂ID生成算法，原来它是随机字符串啊......（或者只是等效于随机字符串）

根据已有的信息，如果buvid4 struct: {XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXXXXXXX}-{ DATE INFO }-{ENCRYPTED DATA}中的{ENCRYPTED DATA}不是风险控制必要项，完全模拟的条件好像已经齐备了

你大量使用移动端API时，是不是要面临更艰难的反编译，更多的硬件特征模拟乃至无线电特征模拟？

PS：mikufans 可真是个很硬核的称谓

lb-chc commented 9 months ago

buvid_fp示例代码的输入“FP”中的主要内容如其“canvas fp:data:image/png;base64”所述是canvas指纹，解码后是PNG图片 output

xiaofeisi commented 9 months ago

看起来ExClimbWuzhi之前的执行过程是这样的

主站：www.bilibili.com 获取Cookie: buvid3、b_nut

调用数次spi：api.bilibili.com/x/frontend/finger/spi 其中第spi获取：b_3、b_4（b_4将被沿用）

ExClimbWuzhi：api.bilibili.com/x/internal/gaia-gateway/ExClimbWuzh 附加cookie：访问主站使用的buvid3和b_nut，第一次调用spi获取的buvid4，以及b_lsid、_uuid、buvid_fp

其中，b_lsid的来源依然不确定，而第一次调用spi获得的buvid4的参数尾部与spi的返回值不同，如果第一次是aaaaa-aaaaa，请求ExClimbWuzhi时就会变成aaaaaa-bbbbb，这个差异是怎么造成的？

buvid4，其他接口可以返回 但是b_lsid、_uuid、buvid_fp 这三个值 有接口返回来吗

cxw620 commented 9 months ago

buvid_fp示例代码的输入“FP”中的主要内容如其“canvas fp:data:image/png;base64”所述是canvas指纹，解码后是PNG图片 output

See Fingerprintjs2, I've mentioned it above. Not with good measures generating that and I think copy from a real browser will be a good choice...

lb-chc commented 9 months ago

看起来ExClimbWuzhi之前的执行过程是这样的 主站：www.bilibili.com 获取Cookie: buvid3、b_nut 调用数次spi：api.bilibili.com/x/frontend/finger/spi 其中第spi获取：b_3、b_4（b_4将被沿用） ExClimbWuzhi：api.bilibili.com/x/internal/gaia-gateway/ExClimbWuzh 附加cookie：访问主站使用的buvid3和b_nut，第一次调用spi获取的buvid4，以及b_lsid、_uuid、buvid_fp 其中，b_lsid的来源依然不确定，而第一次调用spi获得的buvid4的参数尾部与spi的返回值不同，如果第一次是aaaaa-aaaaa，请求ExClimbWuzhi时就会变成aaaaaa-bbbbb，这个差异是怎么造成的？

buvid4，其他接口可以返回 但是b_lsid、_uuid、buvid_fp 这三个值 有接口返回来吗

它们全都是生成的，代码在一楼

SessionHu commented 3 months ago

近来约半月, 使用 Firefox, 对于 ^(https?://)?(?:[a-zA-Z0-9-]+\.)*bilibili\.com(/.*)?$ 的请求使用 User-Agent 为 curl/7.88.1, 同时 block https://api.bilibili.com/x/internal/gaia-gateway/ExClimbWuzhi data.bilibili.com 的所有请求, 除 v_voucher 验证码以外未见任何异常, 或许 ExClimbWuzhi 的作用并不大