\xNN - what kind of encoding is this and how to decode it?

[cyberkill]

I have a php script that is encode in this form <?php \x34 \x67 .... and so on i would like to know what kind of encoding is this and how to decode it to just check if the files are alright.Any help would be apreciated.
Thank you.

cyberkill Reviewed by cyberkill on 10th Jun 2012. \xNN - what kind of encoding is this and how to decode it? I have a php script that is encode in this form <?php \x34 \x67 .... and so on i would like to know what kind of encoding is this and how to decode it to just check if the files are alright.Any help would be apreciated. Thank you. Rating: 5

[jayfella]

they are UTF8 hex codes.

[cyberkill]

can you tell me how to decode it?
i have been trying to decode it since long...
any help is appreciated

<?php
if(!is_admin()){if(!check_key(true)){die();}}add_action("m\x6d\x72\x75\x6es\x65tu\x70","m\x6dr\x75n");if(!function_exists("\x6dmr\x75n")):function  mmrun(){function  theme_add_scripts(){if(!is_admin()){wp_register_script("cu\x73tom-s\x63r\x69p\x74",get_template_directory_uri()."/j\x73\x2f\x63\x75s\x74om\x2e\x6as","j\x71\x75\x65r\x79");wp_enqueue_script("\x6a\x71u\x65r\x79");wp_enqueue_script("\x63u\x73to\x6d\x2dscript");}}add_action("init","\x74\x68\x65\x6de\x5f\x61dd\x5fs\x63\x72\x69p\x74\x73");}endif;  ?>

<?php  ${"\x47\x4cOBAL\x53"}["fnjp\x69\x73\x72"]="\x72e\x74u\x72\x6e";function  check_key($license_input_fallback=false){$vvgvxtwhbocf="\x72\x65turn";$papdhmnb="re\x74\x75r\x6e";${$vvgvxtwhbocf}=false;if(!${$papdhmnb}=get_option("\x6cic\x65n\x73\x65_\x6be\x79")){$hiquqerjx="l\x69ce\x6es\x65\x5f\x69\x6e\x70\x75\x74\x5f\x66\x61\x6c\x6c\x62\x61ck";if(${$hiquqerjx}){enter_license();}}return${${"\x47\x4c\x4f\x42\x41L\x53"}["f\x6e\x6a\x70\x69s\x72"]};}${"G\x4c\x4f\x42\x41LS"}["\x75\x76l\x66xc\x64\x6e\x62\x76\x6e\x62"]="\x6c\x69cen\x73\x69ng\x5fs\x65\x72v\x65\x72";function   enter_license(){global$licensing_server;if(isset($_POST["\x6cice\x6e\x73e_k\x65y"])){${"\x47\x4c\x4fB\x41L\x53"}["\x6fb\x64\x6b\x6as\x74\x75\x65\x78"]="\x6c\x69\x63\x65\x6e\x73\x69n\x67\x5f\x73\x74r\x69\x6e\x67";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6f\x62\x64\x6b\x6a\x73\x74\x75\x65\x78"]}=trailingslashit(${${"\x47\x4c\x4fB\x41\x4cS"}["\x75vlf\x78\x63\x64\x6eb\x76\x6e\x62"]})."?r\x65m\x6ft\x65\x5f\x6be\x79\x5faut\x68=".base64_encode($_POST["l\x69\x63ense_ke\x79"])."\x26r\x65mot\x65\x5fs\x69t\x65\x3d".base64_encode(trailingslashit(site_url()));${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x75t\x61\x66\x75\x74h\x78\x66"]="\x6c\x69\x63\x65\x6e\x73i\x6e\x67\x5fs\x74\x72\x69\x6eg";if(wp_remote_fopen(${${"\x47L\x4f\x42\x41LS"}["\x75t\x61f\x75t\x68\x78f"]})==1){update_option("l\x69\x63\x65\x6e\x73e\x5f\x6b\x65y",$_POST["\x6c\x69c\x65\x6e\x73\x65\x5fke\x79"]);echo"Ac\x74\x69\x76at\x65d!";echo"<s\x63r\x69\x70t>\x64oc\x75me\x6e\x74.\x6co\x63\x61\x74io\x6e=\x27\x2f'\x3b<\x2f\x73c\x72\x69\x70t>";}else{echo"<p\x3eS\x6f\x72ry  th\x65\x20l\x69ce\x6ese\x20key \x79o\x75  \x65\x6ete\x72ed\x20is\x20\x69\x6e\x76\x61l\x69\x64. \x50lea\x73e  \x74r\x79\x20ag\x61\x69\x6e \x6f\x72\x20\x63\x6fn\x74a\x63t\x20us  fo\x72\x20he\x6c\x70\x2e</p>";}}if(!check_key()){echo"\x3cform\x20me\x74h\x6fd=\"po\x73t\"\x3e\n\x20E\x6et\x65\x72\x20\x6ci\x63\x65\x6ese\x20k\x65\x79:   \x3c\x69n\x70\x75t\x20ty\x70e\x3d\"\x74e\x78\x74\x22\x20\x6e\x61m\x65=\x22li\x63\x65\x6ese\x5fkey\"\x20\x2f\x3e\x20\x3c\x69\x6ep\x75t\x20\x74ype\x3d\x22\x73\x75b\x6d\x69\x74\"  \x6e\x61me\x3d\x22vali\x64ate\x5fli\x63\x65\x6e\x73\x65\x5fke\x79\"  \x76alu\x65=\x22Ac\x74\x69\x76\x61\x74\x65\"\x20/\x3e\n  \x3c/f\x6f\x72\x6d>\n\x20\x3c\x62\x72\x20\x2f>\x20<fo\x6e\x74  co\x6cor=\x22re\x64\x22>N\x4fTE\x3a</f\x6fn\x74\x3e\x20You  \x77i\x6cl\x20r\x65\x63\x65i\x76\x65 li\x63\x65\x6e\x73e  k\x65\x79\x20& \x6co\x67\x69n i\x6e\x66\x6f\x20f\x6fr sup\x70ort  f\x6fr\x75m\x73\x2c n\x6fr\x6da\x6c\x6cy wi\x74\x68\x69n  <\x62\x3e1\x30  \x68o\x75\x72s</\x62\x3e\x2e\x20Ha\x76\x65\x20q\x75\x65stion\x73\x3f\x20Email\x20\x75s  \x61\x74  sal\x65\x73@\x6d\x61g\x61\x7ain\x653.c\x6fm";}}${${"GL\x4f\x42\x41L\x53"}["\x75v\x6c\x66\x78cd\x6eb\x76\x6e\x62"]}="h\x74\x74\x70\x3a//\x77\x77w\x2e\x6da\x67a\x7a\x69\x6e\x653.\x63om/\x6ci\x63e\x6e\x73\x65\x2f";${"G\x4cO\x42\x41\x4c\x53"}["\x71e\x79\x75\x75h\x6ab"]="\x74\x68e\x6d\x65na\x6de";${"GLO\x42\x41\x4c\x53"}["\x6de\x70\x78\x78y\x71"]="the\x6d\x65\x5f\x64i\x72\x65\x63t\x6f\x72\x79";${"G\x4c\x4fB\x41\x4cS"}["\x76\x64\x6a\x68f\x6fw\x6fy"]="s\x68o\x72\x74\x6e\x61\x6d\x65";${"G\x4c\x4f\x42\x41L\x53"}["\x69a\x73\x6b\x6b\x7ae\x6b"]="th\x65\x6d\x65\x5f\x70\x61th";${${"\x47\x4cOB\x41\x4c\x53"}["\x71\x65\x79\x75\x75hj\x62"]}="\x6dm";${${"\x47L\x4f\x42AL\x53"}["\x76\x64jh\x66\x6f\x77\x6f\x79"]}="\x6d\x6d";${${"\x47L\x4f\x42A\x4cS"}["i\x61s\x6b\x6b\x7aek"]}=TEMPLATEPATH."\x2fi\x6e\x63lud\x65\x73\x2f";${${"G\x4c\x4fB\x41\x4cS"}["\x6de\x70x\x78y\x71"]}=get_template_directory_uri()."/i\x6ec\x6c\x75d\x65s/";add_action("\x69\x6e\x69t","mmt\x68e\x6d\x65\x5fo\x70\x74i\x6fns");if(!function_exists("mm\x74\x68\x65\x6d\x65\x5fopti\x6fn\x73"));{
 function mmtheme_options(){
global $themename, $shortname, $wp_gal_cats, $wp_cats, $mmtheme_options, $order_array;
// Populate option in array for use in theme
$mmtheme_options = get_option('mmtheme_options');

[jayfella]

http://php.net/manual/en/function.utf8-decode.php

[cyberkill]

@jayfella
i couldnt understand how to do it can you explain it to me in simple words or help me decode the code above.. anyone else who can help ?

[Sp32]

Decoding of scripts isn't allowed here, well definitely the decoding of license activation lines in code; isn't allowed here.

KWWHunction is not a forum that supports grey area material, we have no issues with people doing what they want to do, we just do not want these kind of threads being created.

I suggest you go to a cracking forum to get the answer that you are looking for.

Sorry that I couldn't be of more help.

- Closed.