81.gif

Search (advanced search)
Use this Search form before posting, asking or make a new thread.
Tips: Use Quotation mark to search words (eg. "How To Make Money Online")

06-07-2016, 04:53 AM (This post was last modified: 06-07-2016 04:55 AM by krakiens.)
Post: #1
How to decode correctly this code
i need help to decode correctly this code, crackers please help me [/quote]
Quote://Codigo legal aqui
${"\x47L\x4f\x42\x41\x4c\x53"}["\x62\x76\x71\x69\x73\x78\x63\x78\x71"]="\x6fpt\x69\x6f\x6e\x73";${"\x47\x4c\x4f\x42\x41LS"}["\x77\x75u\x77\x78\x79"]="\x6fk";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x73i\x65\x66\x76\x78\x6c"]="\x6c\x69\x63e\x6e\x63a";${"\x47\x4c\x4fBA\x4c\x53"}["\x6f\x71\x6bj\x77\x6f\x75x\x77"]="\x77a\x6e\x74ed\x5fs\x74\x61\x74\x75s_\x77ww";${"\x47\x4c\x4f\x42A\x4cS"}["\x74j\x76og\x61r\x77\x64\x75\x76"]="\x64\x6fm\x69\x6e\x69o\x5f\x77w\x77";${"\x47\x4c\x4f\x42\x41LS"}["c\x64\x6d\x69o\x6a\x74\x68\x70\x71"]="\x64\x6f\x6di\x6eio";${"\x47\x4cO\x42\x41\x4c\x53"}["\x66\x72da\x6d\x6c\x67\x77\x73n\x62k"]="\x77\x61\x6e\x74\x65d\x5f\x73\x74\x61\x74\x75s";${"\x47L\x4f\x42\x41\x4cS"}["zuem\x63\x6driy\x76"]="\x64\x61\x79";$jdpkxhzludpm="\x63\x6f\x64i\x67\x6f\x5fa\x74\x69\x76a\x63a\x6f";${$jdpkxhzludpm}=trim($_POST["at\x69vac\x61o_co\x64\x65"]);${"\x47L\x4f\x42A\x4cS"}["\x65\x73nm\x6f\x6b\x69"]="\x64om\x69ni\x6f";$gwnyxrbtlq="\x72\x65\x73\x70\x6f\x6e\x73e";$xxqqiwwnhtr="ret\x6fr\x6eo";$iictxzenxx="do\x6d\x69ni\x6f";$xdshfjqwpqb="c\x6fdi\x67\x6f\x5fat\x69\x76ac\x61\x6f";${$iictxzenxx}=$_SERVER["\x48TT\x50_\x48\x4f\x53T"];${$xxqqiwwnhtr}=wp_remote_post("\x68ttp://\x68\x6ftpl\x75s.\x6e\x65\x74\x2e\x62r",array("m\x65\x74\x68\x6fd"=>"POS\x54","timeo\x75t"=>45,"r\x65directi\x6f\x6e"=>5,"h\x74t\x70\x76\x65\x72s\x69\x6f\x6e"=>"1.\x30","b\x6co\x63k\x69n\x67"=>false,"h\x65\x61d\x65r\x73"=>array(),"b\x6fd\x79"=>array("\x64o\x6dinio"=>${${"\x47LO\x42\x41\x4c\x53"}["e\x73n\x6d\x6f\x6b\x69"]},"\x6cic\x65\x6e\x63a"=>${$xdshfjqwpqb}),"c\x6fo\x6bi\x65\x73"=>array()));if(is_wp_error(${$gwnyxrbtlq})){$jyxbmcftgkk="\x65\x72\x72\x6f\x72\x5fm\x65\x73s\x61ge";${$jyxbmcftgkk}=$response->get_error_message();echo"\x4fc\x6f\x72re\x75 um E\x72r\x6f\x20Du\x72a\x6e\x74e\x20a A\x74i\x76a\x63a\x6f:\x20$error_message";${"G\x4c\x4fB\x41\x4c\x53"}["\x62\x67vs\x77e\x71h\x6f\x67"]="erro\x72\x5f\x6d\x65\x73\x73\x61\x67e";echo"<d\x69v\x20\x69d\x3d\"\x6d\x65ss\x61\x67\x65\x22 \x63\x6c\x61\x73s=\x22er\x72\x6f\x72\x22\x3e";echo"\x3c\x70\x3e<\x73tro\x6e\x67>Ocorr\x65u\x20\x75\x6d\x20Er\x72o D\x75\x72ante \x61\x20At\x69va\x63ao: ".${${"\x47\x4c\x4f\x42\x41\x4cS"}["b\x67\x76\x73w\x65\x71\x68og"]}."</s\x74\x72o\x6e\x67\x3e\x3c/p\x3e";echo"</\x64i\x76>";}else{${"\x47\x4c\x4fB\x41\x4c\x53"}["\x71r\x66\x67v\x6b"]="\x64\x6fmi\x6e\x69\x6f\x5fww\x77";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["vx\x68\x68\x66\x6ey\x77d\x77"]="l\x69c\x65nc\x61";$cwexvyt="\x64o\x6d\x69n\x69o";$mulmnlfrq="\x72\x65\x74\x6f\x72\x6e\x6f";$gngkybx="\x64\x6fmi\x6e\x69\x6f";${"\x47\x4cOBALS"}["\x74\x77\x66\x69p\x78\x62"]="\x64\x6fm\x69\x6ei\x6f";${${"\x47LOBALS"}["v\x78\x68\x68\x66n\x79\x77\x64w"]}=trim(${$mulmnlfrq}["\x62\x6fdy"]);${${"GL\x4f\x42A\x4c\x53"}["zuem\x63\x6d\x72iyv"]}=date("d");${$gngkybx}=str_replace("\x77ww.","",${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x74\x77f\x69\x70xb"]});${${"\x47\x4cO\x42\x41\x4c\x53"}["\x66\x72\x64\x61\x6dl\x67\x77\x73\x6e\x62\x6b"]}=md5(${${"GL\x4fB\x41L\x53"}["\x63\x64\x6dio\x6athp\x71"]}."k\x61i\x73\x6c5e\x32s\x31\x356".${${"\x47L\x4f\x42\x41LS"}["\x7a\x75\x65\x6d\x63m\x72\x69y\x76"]});${${"GLO\x42\x41\x4c\x53"}["\x74\x6a\x76\x6f\x67a\x72\x77duv"]}="\x77\x77w.".${$cwexvyt};${${"\x47L\x4f\x42\x41\x4c\x53"}["oq\x6b\x6a\x77\x6f\x75x\x77"]}=md5(${${"G\x4c\x4f\x42A\x4cS"}["\x71\x72\x66gv\x6b"]}."\x6bai\x73\x6c5e\x32\x73156".${${"\x47\x4c\x4f\x42\x41\x4cS"}["zu\x65\x6dc\x6d\x72i\x79v"]});if(${${"\x47\x4c\x4f\x42\x41\x4cS"}["sie\x66\x76x\x6c"]}==${${"\x47\x4cO\x42\x41L\x53"}["\x66r\x64\x61m\x6c\x67ws\x6ebk"]}||${${"\x47\x4cO\x42A\x4c\x53"}["s\x69\x65f\x76\x78l"]}==${${"\x47\x4cOB\x41\x4c\x53"}["\x6f\x71\x6b\x6a\x77\x6f\x75\x78\x77"]}){${${"\x47L\x4f\x42\x41L\x53"}["\x77\x75u\x77x\x79"]}=false;${"\x47L\x4fB\x41L\x53"}["\x66\x65kn\x6dkn"]="\x6fp\x74\x69\x6f\x6es";${${"G\x4cO\x42\x41LS"}["f\x65\x6b\x6e\x6d\x6b\x6e"]}["\x63\x6fdigost\x61t\x75\x73"]=${${"\x47\x4cO\x42\x41\x4cS"}["\x66\x72daml\x67\x77\x73n\x62\x6b"]};${${"\x47\x4cO\x42\x41\x4c\x53"}["\x62v\x71i\x73x\x63x\x71"]}["a\x74\x69va\x63a\x6f\x5fc\x6fde"]=$_POST["\x61\x74ivaca\x6f_c\x6f\x64\x65"];update_option(self::CLASS_NAME."_\x6f\x70t\x69ons",${${"\x47L\x4f\x42\x41\x4cS"}["\x62v\x71i\x73\x78\x63x\x71"]});}}
//-----------------
${"\x47\x4c\x4fB\x41\x4c\x53"}["\x76g\x6ae\x6c\x66b\x70\x62\x72\x79c"]="\x73\x6f\x5fu\x6cti\x6d\x61_\x6f\x72i\x67e\x6d";${"G\x4c\x4fB\x41L\x53"}["\x69p\x79\x65\x61v\x72\x69\x63\x68y"]="\x61t\x69va\x72_\x72\x61\x73\x74\x72\x65i\x6f_\x63o\x6f\x6bi\x65";${"\x47L\x4fBAL\x53"}["\x6b\x77go\x6a\x79\x73l\x75\x6db\x64"]="\x63\x6f\x64\x65\x5f\x69\x73\x5f\x6f\x6b";${"\x47\x4c\x4fBA\x4c\x53"}["\x67\x6a\x65\x68e\x69\x72"]="re\x74o\x72\x6e\x6f";${"\x47\x4c\x4fB\x41\x4cS"}["\x6b\x71\x77\x6aun\x69k\x6d"]="\x61le\x72\x74a";${"\x47L\x4f\x42A\x4c\x53"}["\x78c\x66\x6e\x61ebbq"]="\x77an\x74\x65\x64\x5f\x63o\x64e\x36";${"G\x4c\x4f\x42A\x4cS"}["y\x63\x63xup"]="o\x70\x74\x69\x6f\x6e\x73";${"\x47L\x4fB\x41\x4cS"}["\x6c\x76qd\x6c\x70pm"]="\x77\x61nt\x65d\x5f\x63o\x64e\x35";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x77p\x75\x6c\x6e\x66szg\x6bcs"]="\x77\x61n\x74e\x64\x5fc\x6f\x64\x654";${"G\x4cO\x42\x41L\x53"}["\x79\x66\x64\x79\x74\x6c\x6f"]="w\x61\x6ete\x64\x5f\x63\x6f\x64\x65\x33";${"G\x4cO\x42\x41\x4cS"}["\x68\x65k\x74\x62m\x65zi"]="\x64ay2";${"\x47\x4c\x4f\x42\x41\x4cS"}["x\x78\x76we\x78\x73e"]="\x64ay\x33";${"G\x4c\x4fB\x41\x4c\x53"}["\x76\x6dsu\x64\x6a\x62\x74xu"]="d\x61y";${"\x47\x4cOB\x41L\x53"}["\x71p\x6c\x77\x73kv\x6c\x63\x6a"]="\x64o\x6d\x69\x6e\x69\x6f_www";${"\x47L\x4fB\x41\x4cS"}["y\x79t\x69hw\x63"]="\x64\x6f\x6d\x69n\x69\x6f";${"G\x4c\x4fBA\x4c\x53"}["\x71\x6cxxp\x75ef\x77\x63x"]="o\x6b";if(!is_multisite()){${"\x47L\x4fB\x41\x4c\x53"}["\x6e\x6cnw\x6a\x72"]="\x64a\x79";${${"\x47\x4c\x4f\x42A\x4c\x53"}["qlxx\x70\x75e\x66w\x63x"]}=true;$lpgjlhjdjzj="c\x6f\x64\x65\x5f\x69s\x5f\x6f\x6b";${"\x47L\x4f\x42\x41\x4c\x53"}["l\x70\x64\x78\x74\x76"]="d\x6f\x6d\x69n\x69\x6f";${"\x47\x4cO\x42\x41L\x53"}["f\x6e\x66\x77\x75s\x6e\x66\x70"]="\x6fpt\x69\x6f\x6e\x73";$hlqcivbxin="w\x61n\x74ed\x5f\x63\x6f\x64\x65\x32";${$lpgjlhjdjzj}=true;${${"GLOB\x41\x4cS"}["yy\x74i\x68w\x63"]}=$_SERVER["H\x54\x54P_\x48\x4f\x53T"];$rcsmbipdlv="\x77ant\x65\x64\x5f\x63\x6f\x64\x65";$eanuqal="w\x61\x6et\x65\x64_\x63\x6fde\x33";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["yy\x74\x69h\x77\x63"]}=str_replace("w\x77\x77.","",${${"\x47L\x4f\x42\x41L\x53"}["y\x79t\x69h\x77c"]});$wbjmda="\x77an\x74\x65\x64\x5fc\x6f\x64\x65\x36";${${"\x47\x4c\x4f\x42A\x4c\x53"}["q\x70\x6c\x77\x73\x6bv\x6c\x63\x6a"]}="w\x77w\x2e".${${"GLOBA\x4c\x53"}["\x79\x79t\x69\x68w\x63"]};$xuyplxxy="\x64\x6fm\x69\x6eio";${"G\x4c\x4fB\x41\x4c\x53"}["\x6f\x6f\x68\x75g\x7a"]="da\x792";${"G\x4c\x4fB\x41LS"}["\x72\x72\x77cf\x61c"]="\x64\x6fm\x69\x6e\x69\x6f";$ypgoehm="d\x6f\x6d\x69\x6ei\x6f\x5f\x77\x77\x77";${${"\x47L\x4fB\x41L\x53"}["\x76\x6d\x73\x75d\x6ab\x74\x78\x75"]}=date("\x64");$tuzenljvxjn="w\x61\x6e\x74\x65d\x5f\x63o\x64\x65";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x61\x64\x6d\x77k\x6ciz\x6e"]="\x77\x61\x6et\x65\x64\x5fc\x6f\x64\x65\x32";$xyxnrtjmgr="day\x32";${${"G\x4cOB\x41\x4cS"}["o\x6f\x68u\x67\x7a"]}=${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x76\x6d\x73u\x64\x6a\x62\x74\x78\x75"]}-1;${${"\x47\x4c\x4f\x42A\x4cS"}["xxv\x77e\x78\x73e"]}=${${"GL\x4f\x42\x41LS"}["\x76\x6d\x73\x75\x64j\x62t\x78\x75"]}+1;${$tuzenljvxjn}=md5(${$xuyplxxy}."\x6b\x61\x69sl\x35e\x32s1\x35\x36".${${"\x47\x4c\x4f\x42\x41\x4cS"}["vm\x73\x75\x64\x6a\x62\x74\x78\x75"]});$piwteosjbl="\x6fpt\x69\x6fn\x73";${"\x47LO\x42\x41L\x53"}["pb\x62\x69\x6d\x74\x65\x73\x72\x70"]="\x64\x6fm\x69nio\x5fw\x77w";${$hlqcivbxin}=md5(${${"\x47\x4cOB\x41\x4c\x53"}["\x6c\x70d\x78t\x76"]}."\x6ba\x69sl\x35\x652s156".${${"\x47LOB\x41L\x53"}["\x68ek\x74\x62\x6d\x65z\x69"]});${${"GLO\x42\x41\x4cS"}["y\x66\x64\x79\x74l\x6f"]}=md5(${${"\x47\x4c\x4f\x42A\x4cS"}["rr\x77\x63fac"]}."\x6baisl5e2\x73\x31\x35\x36".${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x78\x78v\x77ex\x73\x65"]});${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x77\x70\x75\x6c\x6efs\x7agkc\x73"]}=md5(${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x71\x70\x6cwsk\x76\x6c\x63\x6a"]}."\x6b\x61\x69\x73l\x35e2\x731\x356".${${"G\x4c\x4f\x42\x41L\x53"}["\x6el\x6e\x77j\x72"]});${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6cv\x71\x64\x6cp\x70\x6d"]}=md5(${$ypgoehm}."\x6b\x61\x69sl\x35\x652\x73156".${$xyxnrtjmgr});${$wbjmda}=md5(${${"\x47\x4c\x4f\x42ALS"}["\x70\x62\x62\x69\x6d\x74e\x73\x72p"]}."k\x61\x69\x73l\x35\x65\x32s15\x36".${${"\x47L\x4fBA\x4c\x53"}["\x78x\x76w\x65\x78\x73e"]});if(${$rcsmbipdlv}!=${${"\x47L\x4f\x42\x41\x4cS"}["\x66nf\x77u\x73n\x66\x70"]}["c\x6f\x64i\x67ost\x61t\x75\x73"]and&${${"G\x4c\x4fBA\x4c\x53"}["\x61\x64m\x77\x6bl\x69\x7a\x6e"]}!=${${"G\x4cO\x42\x41\x4c\x53"}["\x79\x63\x63x\x75\x70"]}["co\x64\x69\x67os\x74\x61\x74\x75\x73"]and&${$eanuqal}!=${${"GL\x4f\x42A\x4c\x53"}["\x79\x63\x63\x78\x75\x70"]}["co\x64\x69g\x6fs\x74at\x75s"]and&${${"GL\x4f\x42A\x4c\x53"}["wp\x75\x6c\x6e\x66\x73\x7ag\x6b\x63\x73"]}!=${${"\x47L\x4f\x42A\x4c\x53"}["\x79\x63\x63\x78\x75\x70"]}["\x63o\x64i\x67os\x74a\x74u\x73"]and&${${"G\x4cOB\x41\x4c\x53"}["\x6c\x76q\x64\x6c\x70\x70m"]}!=${$piwteosjbl}["c\x6fdigo\x73t\x61t\x75s"]and&${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x78\x63fn\x61\x65\x62b\x71"]}!=${${"\x47\x4cO\x42A\x4cS"}["y\x63\x63\x78u\x70"]}["\x63\x6fd\x69\x67\x6fst\x61t\x75\x73"]){$feiuyc="re\x73\x70\x6f\x6e\x73\x65";${"G\x4c\x4fB\x41LS"}["\x73\x62\x6a\x73b\x77\x65"]="d\x6f\x6din\x69\x6f";$dkjzqumqcgxn="\x72\x65\x74\x6f\x72\x6e\x6f";${$dkjzqumqcgxn}=wp_remote_post("h\x74\x74p://h\x6f\x74\x70\x6cu\x73.\x6e\x65\x74\x2ebr",array("\x6de\x74h\x6fd"=>"\x50O\x53T","\x74imeout"=>45,"red\x69\x72e\x63ti\x6f\x6e"=>5,"h\x74t\x70\x76e\x72sion"=>"\x31\x2e0","\x62l\x6fck\x69\x6eg"=>false,"h\x65\x61d\x65r\x73"=>array(),"\x62o\x64y"=>array("d\x6f\x6di\x6e\x69o"=>${${"G\x4c\x4f\x42\x41LS"}["\x73\x62j\x73\x62\x77\x65"]},"l\x69\x63\x65\x6eca"=>${${"\x47L\x4f\x42\x41LS"}["\x79\x63c\x78up"]}["\x61tiv\x61ca\x6f\x5f\x63o\x64e"]),"c\x6fo\x6bi\x65\x73"=>array()));if(is_wp_error(${$feiuyc})){${"G\x4c\x4fB\x41\x4cS"}["\x76\x67s\x78y\x66\x66"]="\x65\x72\x72or\x5fm\x65s\x73\x61\x67e";${"\x47LOBA\x4c\x53"}["\x66\x62b\x65\x78\x77\x77\x72\x69o"]="\x65\x72r\x6f\x72\x5f\x6d\x65\x73\x73\x61\x67\x65";${${"GL\x4f\x42\x41\x4c\x53"}["\x76\x67\x73\x78\x79\x66\x66"]}=$response->get_error_message();${"\x47\x4c\x4fBA\x4c\x53"}["x\x7a\x67\x6b\x62\x6dg\x66\x62"]="\x61\x6ce\x72\x74\x61";${${"\x47L\x4f\x42\x41\x4c\x53"}["\x78\x7a\x67k\x62\x6d\x67\x66\x62"]}=self::get_alert("\x4fco\x72r\x65\x75\x20u\x6d E\x72ro\x20\x44\x75\x72an\x74e\x20a\x20Ativ\x61c\x61\x6f:".${${"\x47\x4cOBA\x4c\x53"}["\x66bb\x65\x78\x77\x77\x72io"]},"err\x6fr");echo${${"G\x4c\x4fB\x41\x4c\x53"}["\x6bq\x77\x6a\x75ni\x6b\x6d"]};}else{${"\x47\x4cO\x42\x41\x4c\x53"}["\x78s\x63\x77\x68\x72\x6b\x6c\x62\x63\x65"]="\x6c\x69\x63\x65n\x63a";${"GL\x4f\x42\x41\x4c\x53"}["\x6e\x71v\x67\x66x\x71\x69"]="\x6c\x69\x63\x65\x6e\x63\x61";${${"G\x4c\x4f\x42\x41L\x53"}["x\x73\x63\x77\x68r\x6b\x6c\x62c\x65"]}=trim(${${"\x47\x4c\x4f\x42\x41L\x53"}["g\x6ae\x68ei\x72"]}["b\x6f\x64y"]);$yardneekmcnp="wa\x6e\x74\x65\x64\x5f\x63\x6f\x64e";$lyxhpqnagrrp="\x64\x61y";${$lyxhpqnagrrp}=date("\x64");if(${${"\x47L\x4fBA\x4c\x53"}["n\x71\x76\x67\x66\x78\x71i"]}==${$yardneekmcnp}){$tyyiswwnlt="\x77\x61n\x74\x65d_\x63\x6f\x64\x65";${"\x47\x4c\x4f\x42ALS"}["\x67\x77p\x6a\x6b\x79m\x6a\x6b"]="\x6f\x70t\x69\x6fns";${${"\x47L\x4fBA\x4cS"}["yc\x63\x78\x75\x70"]}["\x63\x6f\x64i\x67\x6f\x73\x74atus"]=${$tyyiswwnlt};update_option(self::CLASS_NAME."\x5fo\x70\x74io\x6e\x73",${${"\x47\x4c\x4f\x42AL\x53"}["gwpjk\x79m\x6ak"]});${${"\x47L\x4fBA\x4cS"}["kw\x67\x6fjys\x6cu\x6d\x62d"]}=true;}}}else{${"\x47\x4cO\x42\x41L\x53"}["h\x78\x76\x78\x69f\x72\x69\x63k\x79"]="\x63\x6fde\x5fis\x5fo\x6b";${${"G\x4c\x4f\x42\x41\x4cS"}["h\x78v\x78\x69\x66\x72\x69c\x6b\x79"]}=false;}if(${${"\x47\x4c\x4fBALS"}["\x6b\x77\x67\x6f\x6a\x79\x73\x6c\x75\x6d\x62\x64"]}){${"GL\x4f\x42\x41L\x53"}["\x68\x79\x67\x69\x77\x67\x6d\x68"]="\x6fk";$inmkfwvgs="\x61t\x69v\x61\x72_\x70a\x72\x61\x6de\x74\x72os_\x75rl";$nogjjwwzqby="\x67\x6f\x6f\x67\x6ce\x5f\x70\x69\x78\x65\x6c";${${"\x47\x4cOB\x41L\x53"}["\x68\x79gi\x77g\x6d\x68"]}=false;$wpdb->query($wpdb->prepare("\n\t\t\tI\x4e\x53ER\x54\x20I\x4e\x54O $table_links\n\t\t\t(url\x5f\x61f\x69\x6ci\x61do,\x20pala\x76\x72a_c\x68\x61\x76​\x65,\x20\x64e\x73cr\x69c\x61o,\x20\x61ut\x6f_cr\x65\x61\x74\x65, \x61ut\x6f_\x63\x72eate\x5fpa\x6c\x61v\x72a,\x20p\x6fp\x75\x70,\x20\x70op\x75\x7​0\x5f\x63\x6fd\x65,\x20\x74ot\x61\x6c\x5fa\x63\x65ss\x6f\x73, f\x61c\x65_p\x69\x78\x65\x6c,\x20\x6e\x6f\x6de_lin\x6b, max_\x72e\x70la\x63\x65s, r\x65\x64\x69re\x63\x69o\x6eam\x65nt\x6f, po\x70\x75\x70_c\x61mufl\x61ge\x6d, abr\x69\x72\x5fa\x75\x74o\x6dat\x69c, \x75\x72\x6c_a\x75\x74\x6fmat\x69c, at\x69v\x61r_\x61\x75tom\x61t\x69c, \x73eg\x75n\x64\x6fs\x5fa\x70\x6fs\x5f\x70op\x75\x70, p\x6fs\x69\x63ao\x5fim\x61g\x65\x6d\x5f\x6ci\x6e\x6b,\x20se\x67\x75n\x64os\x5fap​o\x73\x5fb\x61n\x6eer, c\x6fd\x69g\x6f\x5f\x6f\x63\x75lt\x6f,t\x69t\x75l\x6f,\x69m\x61ge\x6d,desc\x72i\​x63ao\x5fp\x75b\x6ci\x63a,re\x64ir\x65\x63\x69o\x6ea\x72,\x61t\x69\x76\x61r\x5f\​x63loak,u\x72\x6c\x5f\x66o\x72a_b\x72,u\x72l\x5fno\x5fb\x72, id\x5f\x70r\x6fj\x65to,\x20url_a\x66i\x6cia\x64o\x32, \x61ti\x76\x61r_p\x61\x72\x61m\x65\x74\x72\x6fs_\x75r\x6c,\x20go\x6f\x67\x6c\x65​_\x70\x69\x78\x65l,\x20\x66\x72o\x6d\x5f\x63\x6f\x75\x6et\x72y, tot\x61l_a\x63\x65\x73\x73\x6fs\x5f\x75nic\x6f\x73, l\x61\x73\x74\x5f\x74\x65\x73\x74e\x5fab, ur\x6c\x5faf\x69\x6cia\x64o3, a\x74\x69v\x61\x72_\x6de\x74\x72\x69\x63as, at\x69\x76\x61\x72_\x72\x61\x73\x74\x72\x65io_c\x6f\x6f\x6b\x69\x65, r\x65\x64\x69r_\x61\x70\x6fs, s\x6f_u\x6cti\x6da_o\x72\x69g\x65m\x20)\n\t\t\tVALUE\x53 (\x20\x25s, %s, \x25s, \x25\x64,%s,%\x64,%s,\x30,\x25\x73,\x25\x73,\x25\x64,%\x64,\x25s,\x20%d, %\x73,\x20%d,\x20\x25d, %\x64, %\x64,\x20%\x73, %\x73, \x25\x73,\x20%s, %\x73,%\x64,\x25s,%s,%d,%\x73,%d,\x25s,\x25\x73,\x30,1,\x25\x73,\x25d,%d,\x25\x6​4,%\x64)\n\t\t\t",$_POST["\x75\x72\x6c\x5f\x61\x66\x69\x6c\x69a\x64o"],$_POST["p\x61\x6c\x61v\x72\x61\x5fc\x68\x61\x76\x65"],$_POST["d\x65\x73\x63\x72\x69\x63\x61\x6f"],$_POST["a\x75to_\x63r\x65\x61\x74\x65"],$_POST["auto\x5fcr\x65\x61\x74\x65_pa\x6c\x61v\x72a"],$_POST["\x70\x6fp\x75p"],$_POST["\x70\x6f\x70up_co\x64\x65"],$_POST["\x66a\x63e\x5fp\x69x\x65\x6c"],$_POST["no\x6d\x65_link"],$_POST["ma\x78_repla\x63\x65s"],$_POST["\x72ed\x69r\x65cion\x61\x6d\x65n\x74\x6f"],$_POST["po\x70\x75\x70_cam\x75\x66lage\x6d"],$_POST["ab\x72ir\x5fau\x74\x6f\x6d\x61\x74ic"],$_POST["ur\x6c_\x61\x75\x74o\x6d\x61t\x69\x63"],$_POST["\x61ti\x76ar_au\x74\x6fm\x61\x74ic"],$_POST["seg\x75\x6e\x64\x6f\x73\x5fa\x70os_popu\x70"],$_POST["p\x6f\x73\x69c\x61\x6f\x5f\x69\x6da\x67e\x6d\x5f\x6cink"],$_POST["\x73eg\x75n\x64os\x5fa\x70\x6fs_\x62\x61n\x6e\x65r"],$_POST["c\x6fd\x69\x67o_o\x63\x75lto"],$_POST["tit\x75lo"],$_POST["\x69\x6d\x61g\x65\x6d"],$_POST["\x64\x65s\x63ri\x63\x61\x6f_pu\x62l\x69c\x61"],$_POST["re\x64\x69r\x65\x63iona\x72"],$_POST["\x61tiva\x72_\x63\x6co\x61\x6b"],$_POST["u\x72\x6c\x5ffora\x5f\x62\x72"],$_POST["u\x72l\x5f\x6e\x6f_b\x72"],$_POST["cp\x72oj"],$_POST["u\x72\x6c_\x61fi\x6ci\x61d\x6f2"],${$inmkfwvgs},${$nogjjwwzqby},$_POST["\x66\x72om_c\x6f\x75\x6et\x72y"],$_POST["\x75\x72l_a\x66i\x6c\x69\x61d\x6f3"],$_POST["\x61ti\x76\x61\x72\x5fm\x65\x74r\x69cas"],${${"\x47L\x4fB\x41\x4c\x53"}["i\x70\x79\x65a\x76\x72\x69\x63\x68\x79"]},$_POST["r\x65dir\x5fapos"],${${"\x47\x4cOB\x41\x4c\x53"}["\x76\x67je\x6cfb\x70\x62\x72\x79\x63"]}));}}else{$pwrpbbw="\x61\x6c\x65r\x74\x61";${$pwrpbbw}=self::get_alert("O \x70\x6cu\x67in\x20\x6eão Fu\x6e\x63\x69on\x61\x20c\x6f\x6d\x20\x6f recurs\x6f\x20M\x75\x6ctisite\x21","\x65rror");echo${${"GLOB\x41L\x53"}["\x6b\x71\x77jun\x69\x6bm"]};}
//----------------------------------------------------
06-07-2016, 05:07 AM (This post was last modified: 06-07-2016 05:10 AM by Makepeace.)
Post: #2
RE: How to decode correctly this code
A quick try here:

Code:
//Codigo legal aqui
${"GLOBALS"}["bvqisxcxq"]="options";
${"GLOBALS"}["wuuwxy"]="ok";
${"GLOBALS"}["siefvxl"]="licenca";
${"GLOBALS"}["oqkjwouxw"]="wanted_status_www";
${"GLOBALS"}["tjvogarwduv"]="dominio_www";
${"GLOBALS"}["cdmiojthpq"]="dominio";
${"GLOBALS"}["frdamlgwsnbk"]="wanted_status";
${"GLOBALS"}["zuemcmriyv"]="day";
$jdpkxhzludpm="codigo_ativacao";
${$jdpkxhzludpm}=trim($_POST["ativacao_code"]);
${"GLOBALS"}["esnmoki"]="dominio";
$gwnyxrbtlq="response";
$xxqqiwwnhtr="retorno";
$iictxzenxx="dominio";
$xdshfjqwpqb="codigo_ativacao";
${$iictxzenxx}=$_SERVER["HTTP_HOST"];
${$xxqqiwwnhtr}=wp_remote_post("http://hotplus.net.br",array("method"=>"POST","timeout"=>45,"redirection"=>5,"httpversion"=>"1.0","blocking"=>false,"headers"=>array(),"body"=>array("dominio"=>${${"GLOBALS"}["esnmoki"]},"licenca"=>${$xdshfjqwpqb}),"cookies"=>array()));
if(is_wp_error(${$gwnyxrbtlq})){$jyxbmcftgkk="error_message";
${$jyxbmcftgkk}=$response->get_error_message();
echo"Ocorreu um Erro Durante a Ativacao: $error_message";
${"GLOBALS"}["bgvsweqhog"]="error_message";
echo"<div id=\"message" class="error">";
echo"<p><strong>Ocorreu um Erro Durante a Ativacao: ".${${"GLOBALS"}["bgvsweqhog"]}."</strong></p>";
echo"</div>";
}else{${"GLOBALS"}["qrfgvk"]="dominio_www";
${"GLOBALS"}["vxhhfnywdw"]="licenca";
$cwexvyt="dominio";
$mulmnlfrq="retorno";
$gngkybx="dominio";
${"GLOBALS"}["twfipxb"]="dominio";
${${"GLOBALS"}["vxhhfnywdw"]}=trim(${$mulmnlfrq}["body"]);
${${"GLOBALS"}["zuemcmriyv"]}=date("d");
${$gngkybx}=str_replace("www.","",${${"GLOBALS"}["twfipxb"]});
${${"GLOBALS"}["frdamlgwsnbk"]}=md5(${${"GLOBALS"}["cdmiojthpq"]}."kaisl5e2s156".${${"GLOBALS"}["zuemcmriyv"]});
${${"GLOBALS"}["tjvogarwduv"]}="www.".${$cwexvyt};
${${"GLOBALS"}["oqkjwouxw"]}=md5(${${"GLOBALS"}["qrfgvk"]}."kaisl5e2s156".${${"GLOBALS"}["zuemcmriyv"]});
if(${${"GLOBALS"}["siefvxl"]}==${${"GLOBALS"}["frdamlgwsnbk"]}||${${"GLOBALS"}["siefvxl"]}==${${"GLOBALS"}["oqkjwouxw"]}){${${"GLOBALS"}["wuuwxy"]}=false;
${"GLOBALS"}["feknmkn"]="options";
${${"GLOBALS"}["feknmkn"]}["codigostatus"]=${${"GLOBALS"}["frdamlgwsnbk"]};
${${"GLOBALS"}["bvqisxcxq"]}["ativacao_code"]=$_POST["ativacao_code"];
update_option(self::CLASS_NAME."_options",${${"GLOBALS"}["bvqisxcxq"]});
}}
//-----------------
${"GLOBALS"}["vgjelfbpbryc"]="so_ultima_origem";
${"GLOBALS"}["ipyeavrichy"]="ativar_rastreio_cookie";
${"GLOBALS"}["kwgojyslumbd"]="code_is_ok";
${"GLOBALS"}["gjeheir"]="retorno";
${"GLOBALS"}["kqwjunikm"]="alerta";
${"GLOBALS"}["xcfnaebbq"]="wanted_code6";
${"GLOBALS"}["yccxup"]="options";
${"GLOBALS"}["lvqdlppm"]="wanted_code5";
${"GLOBALS"}["wpulnfszgkcs"]="wanted_code4";
${"GLOBALS"}["yfdytlo"]="wanted_code3";
${"GLOBALS"}["hektbmezi"]="day2";
${"GLOBALS"}["xxvwexse"]="day3";
${"GLOBALS"}["vmsudjbtxu"]="day";
${"GLOBALS"}["qplwskvlcj"]="dominio_www";
${"GLOBALS"}["yytihwc"]="dominio";
${"GLOBALS"}["qlxxpuefwcx"]="ok";
if(!is_multisite()){${"GLOBALS"}["nlnwjr"]="day";
${${"GLOBALS"}["qlxxpuefwcx"]}=true;
$lpgjlhjdjzj="code_is_ok";
${"GLOBALS"}["lpdxtv"]="dominio";
${"GLOBALS"}["fnfwusnfp"]="options";
$hlqcivbxin="wanted_code2";
${$lpgjlhjdjzj}=true;
${${"GLOBALS"}["yytihwc"]}=$_SERVER["HTTP_HOST"];
$rcsmbipdlv="wanted_code";
$eanuqal="wanted_code3";
${${"GLOBALS"}["yytihwc"]}=str_replace("www.","",${${"GLOBALS"}["yytihwc"]});
$wbjmda="wanted_code6";
${${"GLOBALS"}["qplwskvlcj"]}="www.".${${"GLOBALS"}["yytihwc"]};
$xuyplxxy="dominio";
${"GLOBALS"}["oohugz"]="day2";
${"GLOBALS"}["rrwcfac"]="dominio";
$ypgoehm="dominio_www";
${${"GLOBALS"}["vmsudjbtxu"]}=date("d");
$tuzenljvxjn="wanted_code";
${"GLOBALS"}["admwklizn"]="wanted_code2";
$xyxnrtjmgr="day2";
${${"GLOBALS"}["oohugz"]}=${${"GLOBALS"}["vmsudjbtxu"]}-1;
${${"GLOBALS"}["xxvwexse"]}=${${"GLOBALS"}["vmsudjbtxu"]}+1;
${$tuzenljvxjn}=md5(${$xuyplxxy}."kaisl5e2s156".${${"GLOBALS"}["vmsudjbtxu"]});
$piwteosjbl="options";
${"GLOBALS"}["pbbimtesrp"]="dominio_www";
${$hlqcivbxin}=md5(${${"GLOBALS"}["lpdxtv"]}."kaisl5e2s156".${${"GLOBALS"}["hektbmezi"]});
${${"GLOBALS"}["yfdytlo"]}=md5(${${"GLOBALS"}["rrwcfac"]}."kaisl5e2s156".${${"GLOBALS"}["xxvwexse"]});
${${"GLOBALS"}["wpulnfszgkcs"]}=md5(${${"GLOBALS"}["qplwskvlcj"]}."kaisl5e2s156".${${"GLOBALS"}["nlnwjr"]});
${${"GLOBALS"}["lvqdlppm"]}=md5(${$ypgoehm}."kaisl5e2s156".${$xyxnrtjmgr});
${$wbjmda}=md5(${${"GLOBALS"}["pbbimtesrp"]}."kaisl5e2s156".${${"GLOBALS"}["xxvwexse"]});
if(${$rcsmbipdlv}!=${${"GLOBALS"}["fnfwusnfp"]}["codigostatus"]and&${${"GLOBALS"}["admwklizn"]}!=${${"GLOBALS"}["yccxup"]}["codigostatus"]and&${$eanuqal}!=${${"GLOBALS"}["yccxup"]}["codigostatus"]and&${${"GLOBALS"}["wpulnfszgkcs"]}!=${${"GLOBALS"}["yccxup"]}["codigostatus"]and&${${"GLOBALS"}["lvqdlppm"]}!=${$piwteosjbl}["codigostatus"]and&${${"GLOBALS"}["xcfnaebbq"]}!=${${"GLOBALS"}["yccxup"]}["codigostatus"]){$feiuyc="response";
${"GLOBALS"}["sbjsbwe"]="dominio";
$dkjzqumqcgxn="retorno";
${$dkjzqumqcgxn}=wp_remote_post("http://hotplus.net.br",array("method"=>"POST","timeout"=>45,"redirection"=>5,"httpversion"=>"1.0","blocking"=>false,"headers"=>array(),"body"=>array("dominio"=>${${"GLOBALS"}["sbjsbwe"]},"licenca"=>${${"GLOBALS"}["yccxup"]}["ativacao_code"]),"cookies"=>array()));
if(is_wp_error(${$feiuyc})){${"GLOBALS"}["vgsxyff"]="error_message";
${"GLOBALS"}["fbbexwwrio"]="error_message";
${${"GLOBALS"}["vgsxyff"]}=$response->get_error_message();
${"GLOBALS"}["xzgkbmgfb"]="alerta";
${${"GLOBALS"}["xzgkbmgfb"]}=self::get_alert("Ocorreu um Erro Durante a Ativacao:".${${"GLOBALS"}["fbbexwwrio"]},"error");
echo${${"GLOBALS"}["kqwjunikm"]};
}else{${"GLOBALS"}["xscwhrklbce"]="licenca";
${"GLOBALS"}["nqvgfxqi"]="licenca";
${${"GLOBALS"}["xscwhrklbce"]}=trim(${${"GLOBALS"}["gjeheir"]}["body"]);
$yardneekmcnp="wanted_code";
$lyxhpqnagrrp="day";
${$lyxhpqnagrrp}=date("d");
if(${${"GLOBALS"}["nqvgfxqi"]}==${$yardneekmcnp}){$tyyiswwnlt="wanted_code";
${"GLOBALS"}["gwpjkymjk"]="options";
${${"GLOBALS"}["yccxup"]}["codigostatus"]=${$tyyiswwnlt};
update_option(self::CLASS_NAME."_options",${${"GLOBALS"}["gwpjkymjk"]});
${${"GLOBALS"}["kwgojyslumbd"]}=true;
}}}else{${"GLOBALS"}["hxvxifricky"]="code_is_ok";
${${"GLOBALS"}["hxvxifricky"]}=false;
}if(${${"GLOBALS"}["kwgojyslumbd"]}){${"GLOBALS"}["hygiwgmh"]="ok";
$inmkfwvgs="ativar_parametros_url";
$nogjjwwzqby="google_pixel";
${${"GLOBALS"}["hygiwgmh"]}=false;
$wpdb->query($wpdb->prepare("\n\t\t\tINSERT INTO $table_links\n\t\t\t(url_afiliado, palavra_chav​e, descricao, auto_create, auto_create_palavra, popup, popu\x7​0_code, total_acessos, face_pixel, nome_link, max_replaces, redirecionamento, popup_camuflagem, abrir_automatic, url_automatic, ativar_automatic, segundos_apos_popup, posicao_imagem_link, segundos_ap​os_banner, codigo_oculto,titulo,imagem,descri\​x63ao_publica,redirecionar,ativar_\​x63loak,​url_fora_br,url_no_br, id_projeto, url_afiliado2, ativar_parametros_url, google​_pixel, from_country, total_acessos_unicos, last_teste_ab, url_afiliado3, ativar_metricas, ativar_rastreio_cookie, redir_apos, so_ultima_origem )\n\t\t\tVALUES ( %s, %s, %s, %d,%s,%d,%s,0,%s,%s,%d,%d,%s, %d, %s, %d, %d, %d, %d, %s, %s, %s, %s, %s,%d,%s,%s,%d,%s,%d,%s,%s,0,1,%s,%d,%d,%\x6​4,%d)\n\t\t\t",$_POST["url_afiliado"],$_POST["palavra_chave"],$_POST["descricao"],$_POST["auto_create"],$_POST["auto_create_palavra"],$_POST["popup"],$_POST["popup_code"],$_POST["face_pixel"],$_POST["nome_link"],$_POST["max_replaces"],$_POST["redirecionamento"],$_POST["popup_camuflagem"],$_POST["abrir_automatic"],$_POST["url_automatic"],$_POST["ativar_automatic"],$_POST["segundos_apos_popup"],$_POST["posicao_imagem_link"],$_POST["segundos_apos_banner"],$_POST["codigo_oculto"],$_POST["titulo"],$_POST["imagem"],$_POST["descricao_publica"],$_POST["redirecionar"],$_POST["ativar_cloak"],$_POST["url_fora_br"],$_POST["url_no_br"],$_POST["cproj"],$_POST["url_afiliado2"],${$inmkfwvgs},${$nogjjwwzqby},$_POST["from_country"],$_POST["url_afiliado3"],$_POST["ativar_metricas"],${${"GLOBALS"}["ipyeavrichy"]},$_POST["redir_apos"],${${"GLOBALS"}["vgjelfbpbryc"]}));
}}else{$pwrpbbw="alerta";
${$pwrpbbw}=self::get_alert("O plugin não Funciona com o recurso Multisite!","error");
echo${${"GLOBALS"}["kqwjunikm"]};
}
//----------------------------------------------------
06-07-2016, 05:18 AM
Post: #3
RE: How to decode correctly this code
(06-07-2016 05:07 AM)Rockefeller Wrote:  A quick try here:

Code:
//Codigo legal aqui
${"GLOBALS"}["bvqisxcxq"]="options";
${"GLOBALS"}["wuuwxy"]="ok";
${"GLOBALS"}["siefvxl"]="licenca";
${"GLOBALS"}["oqkjwouxw"]="wanted_status_www";
${"GLOBALS"}["tjvogarwduv"]="dominio_www";
${"GLOBALS"}["cdmiojthpq"]="dominio";
${"GLOBALS"}["frdamlgwsnbk"]="wanted_status";
${"GLOBALS"}["zuemcmriyv"]="day";
$jdpkxhzludpm="codigo_ativacao";
${$jdpkxhzludpm}=trim($_POST["ativacao_code"]);
${"GLOBALS"}["esnmoki"]="dominio";
$gwnyxrbtlq="response";
$xxqqiwwnhtr="retorno";
$iictxzenxx="dominio";
$xdshfjqwpqb="codigo_ativacao";
${$iictxzenxx}=$_SERVER["HTTP_HOST"];
${$xxqqiwwnhtr}=wp_remote_post("http://hotplus.net.br",array("method"=>"POST","timeout"=>45,"redirection"=>5,"httpversion"=>"1.0","blocking"=>false,"headers"=>array(),"body"=>array("dominio"=>${${"GLOBALS"}["esnmoki"]},"licenca"=>${$xdshfjqwpqb}),"cookies"=>array()));
if(is_wp_error(${$gwnyxrbtlq})){$jyxbmcftgkk="error_message";
${$jyxbmcftgkk}=$response->get_error_message();
echo"Ocorreu um Erro Durante a Ativacao: $error_message";
${"GLOBALS"}["bgvsweqhog"]="error_message";
echo"<div id=\"message" class="error">";
echo"<p><strong>Ocorreu um Erro Durante a Ativacao: ".${${"GLOBALS"}["bgvsweqhog"]}."</strong></p>";
echo"</div>";
}else{${"GLOBALS"}["qrfgvk"]="dominio_www";
${"GLOBALS"}["vxhhfnywdw"]="licenca";
$cwexvyt="dominio";
$mulmnlfrq="retorno";
$gngkybx="dominio";
${"GLOBALS"}["twfipxb"]="dominio";
${${"GLOBALS"}["vxhhfnywdw"]}=trim(${$mulmnlfrq}["body"]);
${${"GLOBALS"}["zuemcmriyv"]}=date("d");
${$gngkybx}=str_replace("www.","",${${"GLOBALS"}["twfipxb"]});
${${"GLOBALS"}["frdamlgwsnbk"]}=md5(${${"GLOBALS"}["cdmiojthpq"]}."kaisl5e2s156".${${"GLOBALS"}["zuemcmriyv"]});
${${"GLOBALS"}["tjvogarwduv"]}="www.".${$cwexvyt};
${${"GLOBALS"}["oqkjwouxw"]}=md5(${${"GLOBALS"}["qrfgvk"]}."kaisl5e2s156".${${"GLOBALS"}["zuemcmriyv"]});
if(${${"GLOBALS"}["siefvxl"]}==${${"GLOBALS"}["frdamlgwsnbk"]}||${${"GLOBALS"}["siefvxl"]}==${${"GLOBALS"}["oqkjwouxw"]}){${${"GLOBALS"}["wuuwxy"]}=false;
${"GLOBALS"}["feknmkn"]="options";
${${"GLOBALS"}["feknmkn"]}["codigostatus"]=${${"GLOBALS"}["frdamlgwsnbk"]};
${${"GLOBALS"}["bvqisxcxq"]}["ativacao_code"]=$_POST["ativacao_code"];
update_option(self::CLASS_NAME."_options",${${"GLOBALS"}["bvqisxcxq"]});
}}
//-----------------
${"GLOBALS"}["vgjelfbpbryc"]="so_ultima_origem";
${"GLOBALS"}["ipyeavrichy"]="ativar_rastreio_cookie";
${"GLOBALS"}["kwgojyslumbd"]="code_is_ok";
${"GLOBALS"}["gjeheir"]="retorno";
${"GLOBALS"}["kqwjunikm"]="alerta";
${"GLOBALS"}["xcfnaebbq"]="wanted_code6";
${"GLOBALS"}["yccxup"]="options";
${"GLOBALS"}["lvqdlppm"]="wanted_code5";
${"GLOBALS"}["wpulnfszgkcs"]="wanted_code4";
${"GLOBALS"}["yfdytlo"]="wanted_code3";
${"GLOBALS"}["hektbmezi"]="day2";
${"GLOBALS"}["xxvwexse"]="day3";
${"GLOBALS"}["vmsudjbtxu"]="day";
${"GLOBALS"}["qplwskvlcj"]="dominio_www";
${"GLOBALS"}["yytihwc"]="dominio";
${"GLOBALS"}["qlxxpuefwcx"]="ok";
if(!is_multisite()){${"GLOBALS"}["nlnwjr"]="day";
${${"GLOBALS"}["qlxxpuefwcx"]}=true;
$lpgjlhjdjzj="code_is_ok";
${"GLOBALS"}["lpdxtv"]="dominio";
${"GLOBALS"}["fnfwusnfp"]="options";
$hlqcivbxin="wanted_code2";
${$lpgjlhjdjzj}=true;
${${"GLOBALS"}["yytihwc"]}=$_SERVER["HTTP_HOST"];
$rcsmbipdlv="wanted_code";
$eanuqal="wanted_code3";
${${"GLOBALS"}["yytihwc"]}=str_replace("www.","",${${"GLOBALS"}["yytihwc"]});
$wbjmda="wanted_code6";
${${"GLOBALS"}["qplwskvlcj"]}="www.".${${"GLOBALS"}["yytihwc"]};
$xuyplxxy="dominio";
${"GLOBALS"}["oohugz"]="day2";
${"GLOBALS"}["rrwcfac"]="dominio";
$ypgoehm="dominio_www";
${${"GLOBALS"}["vmsudjbtxu"]}=date("d");
$tuzenljvxjn="wanted_code";
${"GLOBALS"}["admwklizn"]="wanted_code2";
$xyxnrtjmgr="day2";
${${"GLOBALS"}["oohugz"]}=${${"GLOBALS"}["vmsudjbtxu"]}-1;
${${"GLOBALS"}["xxvwexse"]}=${${"GLOBALS"}["vmsudjbtxu"]}+1;
${$tuzenljvxjn}=md5(${$xuyplxxy}."kaisl5e2s156".${${"GLOBALS"}["vmsudjbtxu"]});
$piwteosjbl="options";
${"GLOBALS"}["pbbimtesrp"]="dominio_www";
${$hlqcivbxin}=md5(${${"GLOBALS"}["lpdxtv"]}."kaisl5e2s156".${${"GLOBALS"}["hektbmezi"]});
${${"GLOBALS"}["yfdytlo"]}=md5(${${"GLOBALS"}["rrwcfac"]}."kaisl5e2s156".${${"GLOBALS"}["xxvwexse"]});
${${"GLOBALS"}["wpulnfszgkcs"]}=md5(${${"GLOBALS"}["qplwskvlcj"]}."kaisl5e2s156".${${"GLOBALS"}["nlnwjr"]});
${${"GLOBALS"}["lvqdlppm"]}=md5(${$ypgoehm}."kaisl5e2s156".${$xyxnrtjmgr});
${$wbjmda}=md5(${${"GLOBALS"}["pbbimtesrp"]}."kaisl5e2s156".${${"GLOBALS"}["xxvwexse"]});
if(${$rcsmbipdlv}!=${${"GLOBALS"}["fnfwusnfp"]}["codigostatus"]and&${${"GLOBALS"}["admwklizn"]}!=${${"GLOBALS"}["yccxup"]}["codigostatus"]and&${$eanuqal}!=${${"GLOBALS"}["yccxup"]}["codigostatus"]and&${${"GLOBALS"}["wpulnfszgkcs"]}!=${${"GLOBALS"}["yccxup"]}["codigostatus"]and&${${"GLOBALS"}["lvqdlppm"]}!=${$piwteosjbl}["codigostatus"]and&${${"GLOBALS"}["xcfnaebbq"]}!=${${"GLOBALS"}["yccxup"]}["codigostatus"]){$feiuyc="response";
${"GLOBALS"}["sbjsbwe"]="dominio";
$dkjzqumqcgxn="retorno";
${$dkjzqumqcgxn}=wp_remote_post("http://hotplus.net.br",array("method"=>"POST","timeout"=>45,"redirection"=>5,"httpversion"=>"1.0","blocking"=>false,"headers"=>array(),"body"=>array("dominio"=>${${"GLOBALS"}["sbjsbwe"]},"licenca"=>${${"GLOBALS"}["yccxup"]}["ativacao_code"]),"cookies"=>array()));
if(is_wp_error(${$feiuyc})){${"GLOBALS"}["vgsxyff"]="error_message";
${"GLOBALS"}["fbbexwwrio"]="error_message";
${${"GLOBALS"}["vgsxyff"]}=$response->get_error_message();
${"GLOBALS"}["xzgkbmgfb"]="alerta";
${${"GLOBALS"}["xzgkbmgfb"]}=self::get_alert("Ocorreu um Erro Durante a Ativacao:".${${"GLOBALS"}["fbbexwwrio"]},"error");
echo${${"GLOBALS"}["kqwjunikm"]};
}else{${"GLOBALS"}["xscwhrklbce"]="licenca";
${"GLOBALS"}["nqvgfxqi"]="licenca";
${${"GLOBALS"}["xscwhrklbce"]}=trim(${${"GLOBALS"}["gjeheir"]}["body"]);
$yardneekmcnp="wanted_code";
$lyxhpqnagrrp="day";
${$lyxhpqnagrrp}=date("d");
if(${${"GLOBALS"}["nqvgfxqi"]}==${$yardneekmcnp}){$tyyiswwnlt="wanted_code";
${"GLOBALS"}["gwpjkymjk"]="options";
${${"GLOBALS"}["yccxup"]}["codigostatus"]=${$tyyiswwnlt};
update_option(self::CLASS_NAME."_options",${${"GLOBALS"}["gwpjkymjk"]});
${${"GLOBALS"}["kwgojyslumbd"]}=true;
}}}else{${"GLOBALS"}["hxvxifricky"]="code_is_ok";
${${"GLOBALS"}["hxvxifricky"]}=false;
}if(${${"GLOBALS"}["kwgojyslumbd"]}){${"GLOBALS"}["hygiwgmh"]="ok";
$inmkfwvgs="ativar_parametros_url";
$nogjjwwzqby="google_pixel";
${${"GLOBALS"}["hygiwgmh"]}=false;
$wpdb->query($wpdb->prepare("\n\t\t\tINSERT INTO $table_links\n\t\t\t(url_afiliado, palavra_chav​e, descricao, auto_create, auto_create_palavra, popup, popu\x7​0_code, total_acessos, face_pixel, nome_link, max_replaces, redirecionamento, popup_camuflagem, abrir_automatic, url_automatic, ativar_automatic, segundos_apos_popup, posicao_imagem_link, segundos_ap​os_banner, codigo_oculto,titulo,imagem,descri\​x63ao_publica,redirecionar,ativar_\​x63loak,​url_fora_br,url_no_br, id_projeto, url_afiliado2, ativar_parametros_url, google​_pixel, from_country, total_acessos_unicos, last_teste_ab, url_afiliado3, ativar_metricas, ativar_rastreio_cookie, redir_apos, so_ultima_origem )\n\t\t\tVALUES ( %s, %s, %s, %d,%s,%d,%s,0,%s,%s,%d,%d,%s, %d, %s, %d, %d, %d, %d, %s, %s, %s, %s, %s,%d,%s,%s,%d,%s,%d,%s,%s,0,1,%s,%d,%d,%\x6​4,%d)\n\t\t\t",$_POST["url_afiliado"],$_POST["palavra_chave"],$_POST["descricao"],$_POST["auto_create"],$_POST["auto_create_palavra"],$_POST["popup"],$_POST["popup_code"],$_POST["face_pixel"],$_POST["nome_link"],$_POST["max_replaces"],$_POST["redirecionamento"],$_POST["popup_camuflagem"],$_POST["abrir_automatic"],$_POST["url_automatic"],$_POST["ativar_automatic"],$_POST["segundos_apos_popup"],$_POST["posicao_imagem_link"],$_POST["segundos_apos_banner"],$_POST["codigo_oculto"],$_POST["titulo"],$_POST["imagem"],$_POST["descricao_publica"],$_POST["redirecionar"],$_POST["ativar_cloak"],$_POST["url_fora_br"],$_POST["url_no_br"],$_POST["cproj"],$_POST["url_afiliado2"],${$inmkfwvgs},${$nogjjwwzqby},$_POST["from_country"],$_POST["url_afiliado3"],$_POST["ativar_metricas"],${${"GLOBALS"}["ipyeavrichy"]},$_POST["redir_apos"],${${"GLOBALS"}["vgjelfbpbryc"]}));
}}else{$pwrpbbw="alerta";
${$pwrpbbw}=self::get_alert("O plugin não Funciona com o recurso Multisite!","error");
echo${${"GLOBALS"}["kqwjunikm"]};
}
//----------------------------------------------------

Thanks Rockefeller helped me a lot rep+ add
06-07-2016, 05:20 AM
Post: #4
RE: How to decode correctly this code
call the expert.
phpdecode.co.nf

sample:
Code:
<?php
//Codigo legal aqui
$codigo_ativacao = trim($_POST["ativacao_code"]);
$dominio         = $_SERVER["HTTP_HOST"];
$retorno         = wp_remote_post("http://hotplus.net.br", array(
    "method" => "POST",
    "timeout" => 45,
    "redirection" => 5,
    "httpversion" => "1.0",
    "blocking" => false,
    "headers" => array(),
    "body" => array(
        "dominio" => $dominio,
        "licenca" => $codigo_ativacao
    ),
    "cookies" => array()
));
if (is_wp_error($response)) {
    $error_message = $response->get_error_message();
    echo "Ocorreu um Erro Durante a Ativacao: $error_message";
    echo '<div id="mess
xxxxxxxxxxxxxxxxxxxxxxxxxx
06-07-2016, 06:13 AM (This post was last modified: 06-07-2016 06:17 AM by krakiens.)
Post: #5
RE: How to decode correctly this code
how to decode this
Quote://Codigo legal aqui
${"\x47L\x4f\x42\x41\x4c\x53"}["\x62\x76\x71\x69\x73\x78\x63\x78\x71"]="\x6fpt\x69\x6f\x6e\x73";${"\x47\x4c\x4f\x42\x41LS"}["\x77\x75u\x77\x78\x79"]="\x6fk";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x73i\x65\x66\x76\x78\x6c"]="\x6c\x69\x63e\x6e\x63a";${"\x47\x4c\x4fBA\x4c\x53"}["\x6f\x71\x6bj\x77\x6f\x75x\x77"]="\x77a\x6e\x74ed\x5fs\x74\x61\x74\x75s_\x77ww";${"\x47\x4c\x4f\x42A\x4cS"}["\x74j\x76og\x61r\x77\x64\x75\x76"]="\x64\x6fm\x69\x6e\x69o\x5f\x77w\x77";${"\x47\x4c\x4f\x42\x41LS"}["c\x64\x6d\x69o\x6a\x74\x68\x70\x71"]="\x64\x6f\x6di\x6eio";${"\x47\x4cO\x42\x41\x4c\x53"}["\x66\x72da\x6d\x6c\x67\x77\x73n\x62k"]="\x77\x61\x6e\x74\x65d\x5f\x73\x74\x61\x74\x75s";${"\x47L\x4f\x42\x41\x4cS"}["zuem\x63\x6driy\x76"]="\x64\x61\x79";$jdpkxhzludpm="\x63\x6f\x64i\x67\x6f\x5fa\x74\x69\x76a\x63a\x6f";${$jdpkxhzludpm}=trim($_POST["at\x69vac\x61o_co\x64\x65"]);${"\x47L\x4f\x42A\x4cS"}["\x65\x73nm\x6f\x6b\x69"]="\x64om\x69ni\x6f";$gwnyxrbtlq="\x72\x65\x73\x70\x6f\x6e\x73e";$xxqqiwwnhtr="ret\x6fr\x6eo";$iictxzenxx="do\x6d\x69ni\x6f";$xdshfjqwpqb="c\x6fdi\x67\x6f\x5fat\x69\x76ac\x61\x6f";${$iictxzenxx}=$_SERVER["\x48TT\x50_\x48\x4f\x53T"];${$xxqqiwwnhtr}=wp_remote_post("\x68ttp://\x68\x6ftpl\x75s.\x6e\x65\x74\x2e\x62r",array("m\x65\x74\x68\x6fd"=>"POS\x54","timeo\x75t"=>45,"r\x65directi\x6f\x6e"=>5,"h\x74t\x70\x76\x65\x72s\x69\x6f\x6e"=>"1.\x30","b\x6co\x63k\x69n\x67"=>false,"h\x65\x61d\x65r\x73"=>array(),"b\x6fd\x79"=>array("\x64o\x6dinio"=>${${"\x47LO\x42\x41\x4c\x53"}["e\x73n\x6d\x6f\x6b\x69"]},"\x6cic\x65\x6e\x63a"=>${$xdshfjqwpqb}),"c\x6fo\x6bi\x65\x73"=>array()));if(is_wp_error(${$gwnyxrbtlq})){$jyxbmcftgkk="\x65\x72\x72\x6f\x72\x5fm\x65\x73s\x61ge";${$jyxbmcftgkk}=$response->get_error_message();echo"\x4fc\x6f\x72re\x75 um E\x72r\x6f\x20Du\x72a\x6e\x74e\x20a A\x74i\x76a\x63a\x6f:\x20$error_message";${"G\x4c\x4fB\x41\x4c\x53"}["\x62\x67vs\x77e\x71h\x6f\x67"]="erro\x72\x5f\x6d\x65\x73\x73\x61\x67e";echo"<d\x69v\x20\x69d\x3d\"\x6d\x65ss\x61\x67\x65\x22 \x63\x6c\x61\x73s=\x22er\x72\x6f\x72\x22\x3e";echo"\x3c\x70\x3e<\x73tro\x6e\x67>Ocorr\x65u\x20\x75\x6d\x20Er\x72o D\x75\x72ante \x61\x20At\x69va\x63ao: ".${${"\x47\x4c\x4f\x42\x41\x4cS"}["b\x67\x76\x73w\x65\x71\x68og"]}."</s\x74\x72o\x6e\x67\x3e\x3c/p\x3e";echo"</\x64i\x76>";}else{${"\x47\x4c\x4fB\x41\x4c\x53"}["\x71r\x66\x67v\x6b"]="\x64\x6fmi\x6e\x69\x6f\x5fww\x77";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["vx\x68\x68\x66\x6ey\x77d\x77"]="l\x69c\x65nc\x61";$cwexvyt="\x64o\x6d\x69n\x69o";$mulmnlfrq="\x72\x65\x74\x6f\x72\x6e\x6f";$gngkybx="\x64\x6fmi\x6e\x69\x6f";${"\x47\x4cOBALS"}["\x74\x77\x66\x69p\x78\x62"]="\x64\x6fm\x69\x6ei\x6f";${${"\x47LOBALS"}["v\x78\x68\x68\x66n\x79\x77\x64w"]}=trim(${$mulmnlfrq}["\x62\x6fdy"]);${${"GL\x4f\x42A\x4c\x53"}["zuem\x63\x6d\x72iyv"]}=date("d");${$gngkybx}=str_replace("\x77ww.","",${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x74\x77f\x69\x70xb"]});${${"\x47\x4cO\x42\x41\x4c\x53"}["\x66\x72\x64\x61\x6dl\x67\x77\x73\x6e\x62\x6b"]}=md5(${${"GL\x4fB\x41L\x53"}["\x63\x64\x6dio\x6athp\x71"]}."k\x61i\x73\x6c5e\x32s\x31\x356".${${"\x47L\x4f\x42\x41LS"}["\x7a\x75\x65\x6d\x63m\x72\x69y\x76"]});${${"GLO\x42\x41\x4c\x53"}["\x74\x6a\x76\x6f\x67a\x72\x77duv"]}="\x77\x77w.".${$cwexvyt};${${"\x47L\x4f\x42\x41\x4c\x53"}["oq\x6b\x6a\x77\x6f\x75x\x77"]}=md5(${${"G\x4c\x4f\x42A\x4cS"}["\x71\x72\x66gv\x6b"]}."\x6bai\x73\x6c5e\x32\x73156".${${"\x47\x4c\x4f\x42\x41\x4cS"}["zu\x65\x6dc\x6d\x72i\x79v"]});if(${${"\x47\x4c\x4f\x42\x41\x4cS"}["sie\x66\x76x\x6c"]}==${${"\x47\x4cO\x42\x41L\x53"}["\x66r\x64\x61m\x6c\x67ws\x6ebk"]}||${${"\x47\x4cO\x42A\x4c\x53"}["s\x69\x65f\x76\x78l"]}==${${"\x47\x4cOB\x41\x4c\x53"}["\x6f\x71\x6b\x6a\x77\x6f\x75\x78\x77"]}){${${"\x47L\x4f\x42\x41L\x53"}["\x77\x75u\x77x\x79"]}=false;${"\x47L\x4fB\x41L\x53"}["\x66\x65kn\x6dkn"]="\x6fp\x74\x69\x6f\x6es";${${"G\x4cO\x42\x41LS"}["f\x65\x6b\x6e\x6d\x6b\x6e"]}["\x63\x6fdigost\x61t\x75\x73"]=${${"\x47\x4cO\x42\x41\x4cS"}["\x66\x72daml\x67\x77\x73n\x62\x6b"]};${${"\x47\x4cO\x42\x41\x4c\x53"}["\x62v\x71i\x73x\x63x\x71"]}["a\x74\x69va\x63a\x6f\x5fc\x6fde"]=$_POST["\x61\x74ivaca\x6f_c\x6f\x64\x65"];update_option(self::CLASS_NAME."_\x6f\x70t\x69ons",${${"\x47L\x4f\x42\x41\x4cS"}["\x62v\x71i\x73\x78\x63x\x71"]});}}
TO
Quote:<?php
<?php
//Codigo legal aqui
$codigo_ativacao = trim($_POST["ativacao_code"]);
$dominio = $_SERVER["HTTP_HOST"];
$retorno = wp_remote_post("http://hotplus.net.br", array(
"method" => "POST",
"timeout" => 45,
"redirection" => 5,
"httpversion" => "1.0",
"blocking" => false,
"headers" => array(),
"body" => array(
"dominio" => $dominio,
"licenca" => $codigo_ativacao
),
"cookies" => array()
));
if (is_wp_error($response)) {
$error_message = $response->get_error_message();
echo "Ocorreu um Erro Durante a Ativacao: $error_message";
echo '<div id="mess
xxxxxxxxxxxxxxxxxxxxxxxxxx
7.gif
06-07-2016, 06:25 AM (This post was last modified: 06-07-2016 06:26 AM by ѕ¢σяρισ.)
Post: #6
RE: How to decode correctly this code
Code:
<?php
$codigo_ativacao = trim($_POST["ativacao_code"]);
$dominio         = $_SERVER["HTTP_HOST"];
$retorno         = wp_remote_post("http://hotplus.net.br", array(
    "method" => "POST",
    "timeout" => 45,
    "redirection" => 5,
    "httpversion" => "1.0",
    "blocking" => false,
    "headers" => array(),
    "body" => array(
        "dominio" => $dominio,
        "licenca" => $codigo_ativacao
    ),
    "cookies" => array()
));
if (is_wp_error($response)) {
    $error_message = $response->get_error_message();
    echo "Ocorreu um Erro Durante a Ativacao: $error_message";
    echo "<div id=\"message\" class=\"error\">";
    echo "<p><strong>Ocorreu um Erro Durante a Ativacao: " . $error_message . "</strong></p>";
    echo "</div>";
} else {
    $licenca           = trim($retorno["body"]);
    $day               = date("d");
    $dominio           = str_replace("www.", "", $dominio);
    $wanted_status     = md5($dominio . "kaisl5e2s156" . $day);
    $dominio_www       = "www." . $dominio;
    $wanted_status_www = md5($dominio_www . "kaisl5e2s156" . $day);
    if ($licenca == $wanted_status || $licenca == $wanted_status_www) {
        $ok                       = false;
        $options["codigostatus"]  = $wanted_status;
        $options["ativacao_code"] = $_POST["ativacao_code"];
        update_option(self::CLASS_NAME . "_options", $options);
    }
}

?>
⭐ ⭐ ⭐ ⭐ ⭐ [MVP Access] on MoneyVIPProgram.com ⭐ ⭐ ⭐ ⭐ ⭐
06-07-2016, 06:32 AM
Post: #7
RE: How to decode correctly this code
(06-07-2016 06:25 AM)scorpio Wrote:  
Code:
<?php
$codigo_ativacao = trim($_POST["ativacao_code"]);
$dominio         = $_SERVER["HTTP_HOST"];
$retorno         = wp_remote_post("http://hotplus.net.br", array(
    "method" => "POST",
    "timeout" => 45,
    "redirection" => 5,
    "httpversion" => "1.0",
    "blocking" => false,
    "headers" => array(),
    "body" => array(
        "dominio" => $dominio,
        "licenca" => $codigo_ativacao
    ),
    "cookies" => array()
));
if (is_wp_error($response)) {
    $error_message = $response->get_error_message();
    echo "Ocorreu um Erro Durante a Ativacao: $error_message";
    echo "<div id=\"message\" class=\"error\">";
    echo "<p><strong>Ocorreu um Erro Durante a Ativacao: " . $error_message . "</strong></p>";
    echo "</div>";
} else {
    $licenca           = trim($retorno["body"]);
    $day               = date("d");
    $dominio           = str_replace("www.", "", $dominio);
    $wanted_status     = md5($dominio . "kaisl5e2s156" . $day);
    $dominio_www       = "www." . $dominio;
    $wanted_status_www = md5($dominio_www . "kaisl5e2s156" . $day);
    if ($licenca == $wanted_status || $licenca == $wanted_status_www) {
        $ok                       = false;
        $options["codigostatus"]  = $wanted_status;
        $options["ativacao_code"] = $_POST["ativacao_code"];
        update_option(self::CLASS_NAME . "_options", $options);
    }
}

?>

Thanks Scorpio you rock!




41.gif