kernel32基地址获得.docx

kernel32基地址获得.docx

《kernel32基地址获得.docx》由会员分享，可在线阅读，更多相关《kernel32基地址获得.docx（36页珍藏版）》请在冰豆网上搜索。

kernel32基地址获得

kernel32基地址获得.txt精神失常的疯子不可怕，可怕的是精神正常的疯子！

鐥呮瘨鏈ㄩ┈銆怉ntiVirus涓撻銆?

.2-2.kernel32鍩哄湴鍧€鑾峰緱-鐪嬮洩杞欢瀹夊叏璁哄潧

鐪嬮洩杞欢瀹夊叏璁哄潧>杞欢瀹夊叏>銆庤蒋浠惰皟璇曡鍧涖€?

鐥呮瘨鏈ㄩ┈銆怉ntiVirus涓撻銆?

.2-2.kernel32鍩哄湴鍧€鑾峰緱

娆㈣繋鎮紝xfhsm

鎮ㄤ笂娆¤闂殑鏃堕棿鏄?

2009-10-04锛?

0:

20

鎮勬倓璇?

鏈0鏉★紝鎬诲叡1鏉°€?

鎺у埗闈㈡澘璁哄潧甯姪绀惧尯鏃ュ巻浜嬩欢鏌ョ湅鏂板笘鎼滅储蹇€熼摼鎺?

閫€鍑鸿鍧?

銆庤蒋浠惰皟璇曡鍧涖€?

鑹拌緵鍘嗙▼

绀惧尯閾炬帴

鍦堝瓙

鐓х墖涓庣浉鍐?

鑱旂郴浜轰笌濂藉弸

绀惧尯閾惰

鎼滅储璁哄潧

鏄剧ず涓婚鏄剧ず甯栧瓙

鏍囩鎼滅储

楂樼骇鎼滅储

Google

蹇€熸悳绱?

鎴戠殑甯栧瓙

鎴戠殑涓婚

浠婃棩鏂板笘

蹇€熼摼鎺?

浠婃棩鏂板笘

鏍囪鐗堥潰宸茶

鎵撳紑鑱旂郴浜虹獥鍙?

鏈€鏂扮簿鍗?

鐢ㄦ埛鎺у埗闈㈡澘

缂栬緫涓汉璇︾粏璧勬枡

缂栬緫璁哄潧閫夐」

鍏朵粬

鎮勬倓璇?

鏀惰棌鐨勪富棰?

鎮ㄧ殑涓汉璧勬枡

杞埌椤甸潰...

绗?

椤碉紝鍏?

椤?

2345>

涓婚宸ュ叿鎼滅储鏈富棰?

涓婚璇勫垎鏄剧ず妯″紡

鏈珯澹版槑锛氱湅闆鍧涙枃绔犵増鏉冨睘浜庝綔鑰咃紝鍙楁硶寰嬩繚鎶ゃ€傛病鏈変綔鑰呬功闈㈣鍙笉寰楄浆杞姐€傝嫢浣滆€呭悓鎰忚浆杞斤紝蹇呴』浠ヨ秴閾炬帴褰㈠紡鏍囨槑鏂囩珷鍘熷鍑哄鍜屼綔鑰咃紒

xfish

鏅€氫細鍛?

璧勩€€鏂?

娉ㄥ唽鏃ユ湡:

Feb2008

甯栧瓙:

109

绮惧崕:

9

鐜伴噾:

421Kx1銆怉ntiVirus涓撻銆?

.2-2.kernel32鍩哄湴鍧€鑾峰緱

鏍?

棰?

銆怉ntiVirus涓撻銆?

.2-2.kernel32鍩哄湴鍧€鑾峰緱

浣?

鑰?

xfish

鏃?

闂?

2009-04-10,15:

09

閾?

鎺?

1.22.kernel32鍩哄湴鍧€鑾峰緱

kernel32鍩哄湴鍧€鐨勮幏寰椾篃鏄梾姣掍腑蹇呬笉鍙皯鐨勬妧鏈紝鍥犱负鍦╳in32鐜涓竴鑸垵濮嬪寲PE鏂囦欢鐨勬椂鍊欙紝鎴戜滑鐨刵tdll.dll,

kernel32.dll鏄殢杩涚▼浠ュ強绾跨▼鍒濆鍖栨椂鍊欏姞杞界殑銆傛墍浠ュ嵆浣跨▼

搴忎腑鎴戜滑涓嶅紩鍏ヤ换浣曡緭鍏ヨ〃缁撴瀯锛岃繖涓や釜DLL鍦ㄦ垜浠▼搴忚繘绋嬩互鍙婄嚎绋嬪垵濮嬪寲鏃朵篃蹇呴』鍔犺浇銆傛墍浠ユ垜浠粖澶╄繖绡囨枃绔犵殑鐩殑灏辨槸鍦ㄦ垜浠殑杩涚▼鍐呭瓨绌洪棿涓潵鑾峰緱鍔犺浇kernel32.dll鐨勫熀鍦板潃銆傚洜涓烘垜浠幏寰?

kernel32.dll鐨勫熀鍦板潃鍚庯紝灏卞彲浠ヨ幏寰桳oadLibray鍑芥暟鏉ョ户缁姞杞藉叾浠栫殑鍔ㄦ€侀摼鎺ュ簱锛岀劧鍚庡啀閫氳繃鎴戜滑鐨凣etProcAdress鍑芥暟鏉ヨ幏寰楃浉搴旈渶瑕佺殑api鍑芥暟鍦板潃,杩欐牱涔熷氨鍋氬埌浜嗗彲绉绘鎬х殑瑕佹眰锛屾墍鏈夌殑鍑芥暟

鍧囨槸鑷繁鍔ㄦ€佽幏鍙栧苟濉厖銆?

浠婂ぉ鎴戠粰澶у浠嬬粛涓夌鑾峰彇kernel32.dll鍩哄湴鍧€鐨勬妧鏈紝鍏跺疄杩樻湁閮ㄥ垎鏂规硶涔熷彲浠ヨ幏寰楋紝鍙槸杩?

绉嶆瘮杈冮€氱敤锛屼篃鏄梾姣掍腑缁忓父鐢ㄥ埌鐨勩€傚畠浠垎鍒槸

1.閫氳繃绾跨▼鍒濆鍖栨椂,鑾峰緱esp鍫嗘爤鎸囬拡涓殑ExitThread鍑芥暟鐨勫湴鍧€锛岀劧鍚庨€氳繃鎼滅储鑾峰緱kernel32.dll鐨勫熀鍦板潃銆?

2.

閬嶅巻seh寮傚父閾撅紝鐒跺悗鑾峰緱EXCEPTION_REGISTRATION缁撴瀯prev涓?

1鐨勫紓甯稿鐞嗚繃绋嬪湴鍧€锛岃繖涓紓甯稿鐞嗚繃绋嬪湴鍧€鏄綅浜巏ernel32.dll锛岄€氳繃瀹冩悳绱㈠緱鍒発ernel32.dll鐨勫熀鍦板潃銆?

3.閫氳繃TEB鑾峰緱PEB缁撴瀯鍦板潃锛岀劧鍚庡啀鑾峰緱PEB_LDR_DATA缁撴瀯鍦板潃锛岀劧鍚庨亶鍘嗘ā鍧楀垪琛紝鏌ユ壘kernel32.dll妯″潡鐨勫熀鍦板潃銆?

1.

绗竴绉嶆柟娉?

鎴戜滑涓婇潰浠嬬粛浜嗙嚎绋嬪湪琚垵濮嬪寲鐨勬椂锛屽叾鍫嗘爤鎸囬拡鎸囧悜ExitThread鍑芥暟鐨勫湴鍧€锛寃indows杩欐牱鍋氭槸涓轰簡閫氳繃ret杩斿洖鏃舵潵璋冪敤ExitThread鍦板潃銆傛墍浠ヤ竴鑸垜浠彲浠ュ湪鎴戜滑涓荤嚎绋嬬殑璧峰浣嶇疆（涔熷氨鏄?

绋嬪簭鍏ュ彛鐐瑰）閫氳繃鑾峰緱鍫嗘爤鎸囬拡涓璄xitThread鍑芥暟（褰撶劧浣犺鎯冲垱寤轰竴涓嚎绋嬫椂鍊欒幏寰椾篃鍙互o（鈭鈭?

o...鍝堝搱）銆?

鎴戜滑鐩存帴閫氳繃

movedx,[esp]

;鑾峰緱鍫嗘爤鎸囬拡涓璄xitThread鍦板潃鍒癳dx瀵勫瓨鍣ㄣ€傚洜涓篍xitThread鍦板潃鍦╧ernel32.dll绌洪棿涓紝鎵€浠ユ垜浠彲浠ラ€氳繃瀹冨線涓婃悳绱㈡潵鑾峰緱鍩哄湴鍧€銆?

鍒嗘瀽杩噆ernel32.dll鐨勬湅鍙嬪簲璇ラ兘鐭ラ亾kernel32.dll鐨勫潡瀵归綈鍊兼槸00001000h,

骞朵笖涓€鑸珼LL浠?

M涓鸿竟鐣岋紝鎵€浠ユ垜浠彲浠ラ€氳繃10000h（64k）浣滀负璺ㄥ害锛岃繖鏍峰彲浠ュ鍔犳悳绱㈤€熷害銆傛垜浠浣曠‘瀹氳繖涓?

鍦板潃鏄熀鍦板潃锛屾垜浠兘鐭ラ亾鎴戜滑鍒ゆ柇杩欎釜鍦板潃鐨勫墠涓や釜瀛楄妭鏄惁鏄?

MZ",鐒跺悗瀹氫綅鍒癙E澶寸粨鏋勶紝鐒跺悗鍒ゆ柇鏄惁鏄?

PE"锛屽鏋滆繖涓や釜閮界鍚堢殑璇濆垯琛ㄧず鎴戜滑鐨勫湴鍧€鍒欐槸鍩哄湴鍧€浜嗐€傘€?

鏈変簡浠ヤ笂鐨勪簡瑙ｆ垜浠氨鍙互鏉ュ啓浠ｇ爜浜嗐€?

movedx,[esp]

.Next:

decedx;

xordx,dx;鍑忓幓璺ㄥ害

cmpword[edx],"MZ"

jz.IsPe

jmp.Next

.IsPe:

moveax,[edx+3ch]

cmpword[eax+edx],'PE'

jnz.Next

xchgeax,edx;eax=kernel32鍩哄湴鍧€

杩欓噷璐翠竴涓皝瑁呰繃鐨勮繃绋嬨€?

浠ｇ爜:

;++

;

;int

;GetKrnlBase（

;intKrnlApiAddress

;）

;

;RoutineDescription:

;

;鑾峰緱kernel32鍩哄湴鍧€

;

;Arguments:

;

;（esp）-returnaddress

;

;Data（esp+4）-KrnlApiAddress,ptrApiAddress

;

;

;ReturnValue:

;

;eax=krnl32base

;

;--

GetKrnlBase:

popeax

popedx

pusheax

.Next:

cmpword[edx],'MZ'

jz.IsPe

decedx

xordx,dx

jmp.Next

.IsPe:

moveax,[edx+3ch]

cmpword[eax+edx],'PE'

jnz.Next

xchgeax,edx

ret

2.

绗簩绉嶆柟娉?

杩欎釜鏂规硶鏄亶鍘嗛亶鍘唖eh寮傚父閾撅紝鐒跺悗鑾峰緱EXCEPTION_REGISTRATION缁撴瀯prev涓?

1鐨勫紓甯稿鐞嗚繃绋嬪湴鍧€锛岃繖涓紓甯稿鐞嗚繃绋嬪湴鍧€鏄綅浜巏ernel32.dll锛岄€氳繃瀹冩悳绱㈠緱鍒発ernel32.dll鐨勫熀鍦板潃銆?

鎼滅储鐨勬柟娉曞湪涓婇潰鎴戝凡缁忚浜嗭紝閫氳繃鍑忓幓璺ㄥ害锛岀劧鍚庡垽鏂湴鍧€鍓嶄袱瀛楄妭鏄惁鏄?

MZ"锛屾槸鐨勮瘽锛岀户缁畾浣嶅埌PE澶寸粨鏋勶紝鐒跺悗鍒ゆ柇鍓嶄袱涓瓧鑺傛槸鍚︽槸"PE"锛屼笉鏄殑璇濈户缁噺鍘昏法搴︽悳绱€傜洿鍒版槸涓烘銆?

structEXCEPTION_REGISTRATION

prevdd?

handlerdd?

ends

閬嶅巻鐨勬柟娉曚篃寰堢畝鍗曪紝鎴戜滑閮界煡閬揫fs:

0]鐨凟xceptionList

鎸囧悜EXCEPTION_REGISTRATION缁撴瀯锛屾墍浠ラ€氳繃[fs:

0]鑾峰緱EXCEPTION_REGISTRATION缁撴瀯鍚庯紝鍒ゆ柇prev鎴愬憳鏄惁鏄?

1锛屽鏋滄槸鐨勮瘽鍒欏彇

寮傚父澶勭悊杩囩▼鍦板潃锛岀劧鍚庤繘琛屾悳绱€?

鏈変簡鎬濊矾锛屾垜浠紑濮嬪啓浠ｇ爜銆?

movedx,[fs:

0];鑾峰緱EXCEPTION_REGISTRATION缁撴瀯鍦板潃

.Next:

incdword[edx];灏唒rev鎴愬憳+1

jz.Krnl;濡傛灉ZF=1,鍒欒烦杞?

Krnl

decdword[edx]

movedx,[edx]

jmp.Next

.Krnl:

decdword[edx];鎭㈠-1

movedx,[edx+4];鑾峰緱handler,鐒跺悗涓嬮潰杩涜鎼滅储..

.Loop:

cmpword[edx],'MZ'

jz.IsPe

decedx

xordx,dx

jmp.Loop

.IsPe:

moveax,[edx+3ch]

cmpword[eax+edx],'PE'

jnz.Next

xchgeax,edx;eax=kernel32鍩哄湴鍧€

涓€涓皝瑁呰繃鐨勮繃绋?

浠ｇ爜:

;++

;

;int

;GetKrnlBase2（

;void

;）

;

;RoutineDescription:

;

;鑾峰緱kernel32鍩哄湴鍧€

;

;Arguments:

;

;（esp）-returnaddress

;

;

;ReturnValue:

;

;eax=krnl32base

;

;--

GetKrnlBase2:

movedx,[fs:

0]

.Next:

incdword[edx]

jz.Krnl

decdword[edx]

movedx,[edx]

jmp.Next

.Krnl:

decdword[edx]

movedx,[edx+4]

.Loop:

cmpword[edx],'MZ'

jz.IsPe

decedx

xordx,dx

jmp.Loop

.IsPe:

moveax,[edx+3ch]

cmpword[eax+edx],'PE'

jnz.Next

xchgeax,edx

ret

3.

绗笁绉嶆柟娉?

姝ゆ柟娉曟槸閫氳繃TEB鑾峰緱PEB缁撴瀯鍦板潃锛岀劧鍚庡啀鑾峰緱PEB_LDR_DATA缁撴瀯鍦板潃锛岀劧鍚庨亶鍘嗘ā鍧楀垪琛紝鏌ユ壘kernel32.dll妯″潡鐨勫熀鍦板潃銆?

TEB鏄嚎绋嬬幆澧冨潡（ThreadEnvironmentBlock）缁撴瀯,

鎴戜滑鐨刦s娈甸€夋嫨瀛愭墍瀵瑰簲鐨勬鎸囧悜TEB锛屼篃灏辨槸fs:

0（娉ㄦ剰杩欓噷鍙笉鏄€淸fs:

0]鈥?

鎸囧悜TEB.閭ｄ箞TEB鐨凱rocessEnvironmentBlock缁撴瀯鎴愬憳鎸?

鍚戞垜浠殑PEB杩涚▼鐜鍧楃粨鏋?

ProcessEnvironmentBlock）锛岀劧鍚庨€氳繃PEB缁撴瀯鏉ヨ幏寰桺EB_LDR_DATA銆?

鎺ヤ笅鏉ユ垜浠€氳繃windbg鏉ユ煡鐪嬩笅鐩稿叧缁撴瀯銆?

鎴戜滑棣栧厛鏉ョ湅涓婽EB缁撴瀯锛岄€氳繃windbg鐨刣t鍛戒护銆?

lkd>dt_TEB

nt!

_TEB

+0x000NtTib:

_NT_TIB

+0x01cEnvironmentPointer:

Ptr32Void

+0x020ClientId:

_CLIENT_ID

+0x028ActiveRpcHandle:

Ptr32Void

+0x02cThreadLocalStoragePointer:

Ptr32Void

+0x030ProcessEnvironmentBlock:

Ptr32_PEB;;;;;;;;;;

......鐪佺暐

鎴戜滑鍙互鐪嬪埌TEB缁撴瀯鐨?

x30鍋忕Щ澶勫瓨鍌ㄧ殑鎴戜滑鐨凱EB缁撴瀯鐨勫湴鍧€銆傘€?

鐒跺悗鎺ヤ笅鏉ユ垜浠潵鐪婸EB缁撴瀯銆?

lkd>dt_PEB

nt!

_PEB

+0x000InheritedAddressSpace:

UChar

+0x001ReadImageFileExecOptions:

UChar

+0x002BeingDebugged:

UChar

+0x003SpareBool:

UChar

+0x004Mutant:

Ptr32Void

+0x008ImageBaseAddress:

Ptr32Void

+0x00cLdr:

Ptr32_PEB_LDR_DATA

..........鐪佺暐

鎴戜滑鍙互鐪嬪埌PEB缁撴瀯鐨?

x0c鍋忕Щ澶勫瓨鍌ㄧ殑鎴戜滑鐨刜PEB_LDR_DATA缁撴瀯鍦板潃銆?

濂藉埌杩欓噷鎴戜滑鍙互鍏堟妸鑾峰緱_PEB_LDR_DATA缁撴瀯鍦板潃鐨勪唬鐮佸啓鍑烘潵銆?

moveax,[fs:

30h];GetPeb

moveax,[eax+0ch];Get_PEB_LDR_DATA

鐒跺悗鎴戜滑鍐嶆潵鏌ョ湅_PEB_LDR_DATA缁撴瀯

lkd>dt_PEB_LDR_DATA

nt!

_PEB_LDR_DATA

+0x000Length:

Uint4B

+0x004Initialized:

UChar

+0x008SsHandle:

Ptr32Void

+0x00cInLoadOrderModuleList:

_LIST_ENTRY

+0x014InMemoryOrderModuleList:

_LIST_ENTRY

+0x01cInInitializationOrderModuleList:

_LIST_ENTRY

+0x024EntryInProgress:

Ptr32Void

鎴戜滑鐪嬪埌杩欎釜缁撴瀯涓殑妯″潡绔嬫爣鏈?

涓猒LIST_ENTRY缁撴瀯锛屽畠浠垎鍒槸

InLoadOrderModuleList（鍔犺浇椤哄簭妯″潡鍒楄〃）

InMemoryOrderModuleList（鍐呭瓨椤哄簭妯″潡鎺掑垪）

InInitializationOrderModuleList（鍒濆鍖栭『搴忔ā鍧楀垪琛?

鐒跺悗鎴戜滑缁х画鏌ョ湅杩欎釜缁撴瀯銆?

nt!

_LIST_ENTRY

+0x000Flink:

Ptr32_LIST_ENTRY

+0x004Blink:

Ptr32_LIST_ENTRY

杩欎釜缁撴瀯鎴戜滑鍙互鐪嬪埌瀹冩槸涓€涓弻鍚戦摼琛紝Flink琛ㄧず浠庡墠寰€鍚庯紝Blink琛ㄧず浠庡悗寰€鍓嶃€?

骞朵笖杩欎笁涓摼琛ㄧ殑缁撶偣鏄潎鏄寚鍚戞缁撴瀯

typedefstruct_LDR_MODULE

{

LIST_ENTRYInLoadOrderModuleList;//+0x00

LIST_ENTRYInMemoryOrderModuleList;//+0x08

LIST_ENTRYInInitializationOrderModuleList;//+0x10

PVOIDBaseAddress;//+0x18

PVOIDEntryPoint;//+0x1c

ULONGSizeOfImage;//+0x20

UNICODE_STRINGFullDllName;//+0x24

UNICODE_STRINGBaseDllName;//+0x2c

ULONGFlags;//+0x34

SHORTLoadCount;//+0x38

SHORTTlsIndex;//+0x3a

LIST_ENTRYHashTableEntry;//+0x3c

ULONGTimeDateStamp;//+0x44

//+0x48

}LDR_MODULE,*PLDR_MODULE;

鎴戜滑涓€鑸彇瀹冪殑鍒濆鍖栭『搴忕粨鏋?

InInitializationOrderModuleList）鐨凢link鎴愬憳鎸囧悜鐨刜LDR_MODULE缁撴瀯鐨凚aseAddress鎴愬憳鍒欎负鎴戜滑闇€瑕佺殑鍩哄湴鍧€锛屽綋鐒剁敱浜庣涓€涓槸

ntdll锛屾墍浠ュ彇绗簩涓垯涓烘垜浠殑Kernel32.dll銆?

OK鎴戜滑寮€濮嬪啓浠ｇ爜锛屼笂闈㈡垜浠凡缁忓啓浜嗗彇寰梍PEB_LDR_DATA缁撴瀯鍦板潃鐨勪唬鐮佷簡銆傛垜浠妸瀹僣opy涓嬫潵銆?

moveax,[fs:

30h];GetPeb

moveax,[eax+0ch];Get_PEB_LDR_DATA

moveax,[eax+1ch];GetInInitializationOrderModuleList.Flink,

姝ゆ椂eax鎸囧悜鐨勬槸ntdll妯″潡鐨処nInitializationOrderModuleList绾挎€у湴鍧€銆傛墍浠ユ垜浠幏寰楀畠鐨勪笅涓€涓垯鏄痥ernel32.dll

moveax,[eax]

moveax,[eax+8];8=sizeof.LIST_ENTRY

ret

鍚屾牱鎴戜滑璐翠竴涓皝瑁呰繃鐨勮繃绋嬨€?

浠ｇ爜:

;++

;

;int

;GetKrnlBase3（

;void

;）

;

;RoutineDescription:

;

;鑾峰緱kernel32鍩哄湴鍧€

;

;Arguments:

;

;（esp）-returnaddress

;

;

;ReturnValue:

;

;eax=krnl32base

;

;--

GetKrnlBase3:

moveax,[fs:

30h]

moveax,[eax+0ch]

moveax,[eax+1ch]

moveax,[eax]

moveax,[eax+8h]

ret

闄勪欢涓烘涓夌鏂规硶鐨勪唬鐮佸拰bin銆?

涓婁紶鐨勯檮浠秌rnlbase.rar（983瀛楄妭,310娆′笅杞?

[璋佷笅杞?

]

姝ゅ笘浜?

2009-04-1020:

24琚?

xfish鏈€鍚庣紪杈?

[鍏憡]璇锋敞鎰忚█琛屼妇姝紝涓嶈璁╁ぇ瀹惰寰椾笉閫傦紒

xfish

鏌ョ湅鍏紑淇℃伅

鍙戦€佹倓鎮勮瘽缁?

xfish

鍙戦€?

Email缁?

xfish

鏌ユ壘xfish鍙戣〃鐨勬洿澶氬笘瀛?

鏌ユ壘xfish鍙戣〃鐨勬墍鏈変富棰?

鏌ョ湅xfish鍙戣〃鐨勭簿鍗庡笘

娣诲姞xfish鍒拌仈绯讳汉鍒楄〃

dsjHZAHfaf

鍒濈骇浼氬憳

璧勩€€鏂?

娉ㄥ唽鏃ユ湡:

Aug2007

甯栧瓙:

350

绮惧崕:

0

鐜伴噾:

114Kx22009-04-10,15:

13

璇烽棶杩欐槸浠€涔坒asm锛?

娉?

鎴戞墠鏄涓€涓《鐨?

鍒殑閮芥槸鍋囩殑.

姝ゅ笘浜?

2009-04-1015:

16琚?

dsjHZAHfaf鏈€鍚庣紪杈?

[鍏憡]濡傛灉浣犺寰楁湁浜鸿瑷€鎸戣锛岃鐐规瘡甯栧彸涓婅鐨勨€滀妇鎶モ€濇寜閽紒

dsjHZAHfaf

鏌ョ湅鍏紑淇℃伅

鍙戦€佹倓鎮勮瘽缁?

dsjHZAHfaf

鍙戦€?

Email缁?

dsjHZAHfaf

鏌ユ壘dsjHZAHfaf鍙戣〃鐨勬洿澶氬笘瀛?

鏌ユ壘dsjHZAHfaf鍙戣〃鐨勬墍鏈変富棰?

娣诲姞dsjHZAHfaf鍒拌仈绯讳汉鍒楄〃

zapline

鍒濈骇浼氬憳

璧勩€€鏂?

娉ㄥ唽鏃ユ湡:

Feb2008

甯栧瓙:

824

绮惧崕:

0

鐜伴噾:

493Kx32009-04-10,15:

14

鏀寔涓€涓嬨€傘€?

[鍏憡]璇锋敞鎰忚█琛屼妇姝紝涓嶈璁╁ぇ瀹惰寰椾笉閫傦紒

zapline

鏌ョ湅鍏紑淇℃伅

鍙戦€佹倓鎮勮瘽缁?

zapline

鍙戦€?

Email缁?

zapline

鏌ユ壘zapline鍙戣〃鐨勬洿澶氬笘瀛?

鏌ユ壘zapline鍙戣〃鐨勬墍鏈変富棰?

娣诲姞zapline鍒拌仈绯讳汉鍒楄〃

moonife

銆庢柊浜轰氦娴佹姇绋裤€忓疄涔犵増涓?

璧勩€€鏂?

娉ㄥ唽鏃ユ湡:

Dec2008

甯栧瓙:

437

绮惧崕:

4

鐜伴噾:

207Kx42009-04-10,15:

15

杩欎箞濂界殑绯诲垪鏂囩珷锛屾垜涓€瀹氳椤跺晩

[鍏憡]濡傛灉浣犺寰楁湁浜鸿瑷€鎸戣锛岃鐐规瘡甯栧彸涓婅鐨勨€滀妇鎶モ€濇寜閽紒

moonife

鏌ョ湅鍏紑淇℃伅

鍙戦€佹倓鎮勮瘽缁?

moonife

鍙戦€?

Email缁?

moonife

璁块棶moonife鐨勪釜浜虹綉绔?

鏌ユ壘moonife鍙戣〃鐨勬洿澶氬笘瀛?

鏌ユ壘moonife鍙戣〃鐨勬墍鏈変富棰?

鏌ョ湅moonife鍙戣〃鐨勭簿鍗庡笘

娣诲姞moonife鍒拌仈绯讳汉鍒楄〃

xfish

鏅€氫細鍛?

璧勩€€鏂?

娉ㄥ唽鏃ユ湡:

Feb2008

甯栧瓙:

109

绮惧崕:

9

鐜伴噾:

421Kx52009-04-10,15:

27