Zone05.exe - ZONESRV.exe - ZONESRV ?? ????

info
MZ
PE
resources
imports
foremost
7zip
version info
hexdump
disasm
log
discuss
donate

filename	Zone05.exe
size	1081344 (0x108000)
md5	25a9968b05423efe388b6a99b99eb8cb

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
39	9162	9
64	9466	38
28	9466	201
37	8755	2
25	9210	19
1	0	198
29	9466	97
69	9466	1
61	9466	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x4c748277
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	7.0
SizeOfCode	0xd7000
SizeOfInitializedData	0x11a6a000
SizeOfUninitializedData	0
AddressOfEntryPoint	0xc901b
BaseOfCode	0x1000
BaseOfData	0xd8000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x11b53000
SizeOfHeaders	0x1000
CheckSum	0x10a0ba
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xd6d80	0xd7000	RWX CODE
.rdata	0xd8000	0x1d230	0x1e000	RW- IDATA
.data	0xf6000	0x11a585f4	0xd000	RW- IDATA
.rsrc	0x11b4f000	0x3644	0x4000	RWX IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0xf44ec	0xdc
RESOURCE	0x11b4f000	0x3644
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0xd82a0	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0xd8000	0x294
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
ICON	#1	12840
MENU	#106	60
GROUP_ICON	#105	20
VERSION	#1	668

module_name	hint	ord	function_name
WINMM.dll	163		timeGetTime
WS2_32.dll		101
WS2_32.dll		3
WS2_32.dll		12
WS2_32.dll		14
WS2_32.dll		1
WS2_32.dll		8
WS2_32.dll		116
WS2_32.dll		11
WS2_32.dll		4
WS2_32.dll		19
WS2_32.dll		111
WS2_32.dll		16
WS2_32.dll		23
WS2_32.dll		57
WS2_32.dll		9
WS2_32.dll		2
WS2_32.dll		13
WS2_32.dll		115
WININET.dll	146		InternetOpenA
WININET.dll	147		InternetOpenUrlA
WININET.dll	154		InternetReadFile
WININET.dll	105		InternetCloseHandle
VERSION.dll	1		GetFileVersionInfoSizeA
VERSION.dll			GetFileVersionInfoA
VERSION.dll	10		VerQueryValueA
KERNEL32.dll	780		SetStdHandle
KERNEL32.dll	321		GetEnvironmentStringsW
KERNEL32.dll	228		FreeEnvironmentStringsW
KERNEL32.dll	319		GetEnvironmentStrings
KERNEL32.dll	227		FreeEnvironmentStringsA
KERNEL32.dll	834		UnhandledExceptionFilter
KERNEL32.dll	414		GetStdHandle
KERNEL32.dll	762		SetHandleCount
KERNEL32.dll	507		HeapSize
KERNEL32.dll	424		GetSystemInfo
KERNEL32.dll	859		VirtualProtect
KERNEL32.dll	380		GetOEMCP
KERNEL32.dll	449		GetTimeZoneInformation
KERNEL32.dll	532		IsBadWritePtr
KERNEL32.dll	853		VirtualAlloc
KERNEL32.dll	235		GetACP
KERNEL32.dll	349		GetLocaleInfoA
KERNEL32.dll	456		GetVersionExA
KERNEL32.dll	593		MultiByteToWideChar
KERNEL32.dll	873		WideCharToMultiByte
KERNEL32.dll	50		CompareStringA
KERNEL32.dll	51		CompareStringW
KERNEL32.dll	389		GetPrivateProfileStringA
KERNEL32.dll	44		CloseHandle
KERNEL32.dll	74		CreateFileA
KERNEL32.dll	383		GetPrivateProfileIntA
KERNEL32.dll	446		GetTickCount
KERNEL32.dll	886		WriteFile
KERNEL32.dll	753		SetFilePointer
KERNEL32.dll	656		ReadFile
KERNEL32.dll	426		GetSystemTime
KERNEL32.dll	891		WritePrivateProfileStringA
KERNEL32.dll	348		GetLocalTime
KERNEL32.dll	809		Sleep
KERNEL32.dll	740		SetCurrentDirectoryA
KERNEL32.dll	357		GetModuleFileNameA
KERNEL32.dll	339		GetFullPathNameA
KERNEL32.dll	616		OutputDebugStringA
KERNEL32.dll	861		VirtualQuery
KERNEL32.dll	303		GetCurrentProcess
KERNEL32.dll	229		FreeLibrary
KERNEL32.dll	514		InitializeCriticalSection
KERNEL32.dll	393		GetProcAddress
KERNEL32.dll	558		LoadLibraryA
KERNEL32.dll	797		SetUnhandledExceptionFilter
KERNEL32.dll	518		InterlockedDecrement
KERNEL32.dll	118		DeleteCriticalSection
KERNEL32.dll	557		LeaveCriticalSection
KERNEL32.dll	139		EnterCriticalSection
KERNEL32.dll	136		DuplicateHandle
KERNEL32.dll	305		GetCurrentThread
KERNEL32.dll	304		GetCurrentProcessId
KERNEL32.dll	301		GetCurrentDirectoryA
KERNEL32.dll	241		GetCPInfo
KERNEL32.dll	328		GetFileAttributesA
KERNEL32.dll	336		GetFileType
KERNEL32.dll	219		FlushFileBuffers
KERNEL32.dll	197		FindFirstFileA
KERNEL32.dll	317		GetDriveTypeA
KERNEL32.dll	183		FileTimeToLocalFileTime
KERNEL32.dll	184		FileTimeToSystemTime
KERNEL32.dll	193		FindClose
KERNEL32.dll	253		GetCommandLineA
KERNEL32.dll	412		GetStartupInfoA
KERNEL32.dll	120		DeleteFileA
KERNEL32.dll	505		HeapReAlloc
KERNEL32.dll	817		TerminateProcess
KERNEL32.dll	359		GetModuleHandleA
KERNEL32.dll	428		GetSystemTimeAsFileTime
KERNEL32.dll	689		RtlUnwind
KERNEL32.dll	501		HeapFree
KERNEL32.dll	495		HeapAlloc
KERNEL32.dll	643		RaiseException
KERNEL32.dll	171		ExitProcess
KERNEL32.dll	415		GetStringTypeA
KERNEL32.dll	418		GetStringTypeW
KERNEL32.dll	638		QueryPerformanceCounter
KERNEL32.dll	744		SetEndOfFile
KERNEL32.dll	529		IsBadReadPtr
KERNEL32.dll	526		IsBadCodePtr
KERNEL32.dll	745		SetEnvironmentVariableA
KERNEL32.dll	568		LocalFree
KERNEL32.dll	544		LCMapStringA
KERNEL32.dll	545		LCMapStringW
KERNEL32.dll	346		GetLastError
KERNEL32.dll	66		CreateDirectoryA
KERNEL32.dll	856		VirtualFree
KERNEL32.dll	497		HeapCreate
KERNEL32.dll	499		HeapDestroy
KERNEL32.dll	306		GetCurrentThreadId
USER32.dll	571		SendMessageA
USER32.dll	605		SetMenu
USER32.dll	314		GetMessageA
USER32.dll	682		TranslateMessage
USER32.dll	161		DispatchMessageA
USER32.dll	443		LoadIconA
USER32.dll	439		LoadCursorA
USER32.dll	534		RegisterClassA
USER32.dll	451		LoadMenuA
USER32.dll	200		EndPaint
USER32.dll	142		DefWindowProcA
USER32.dll	634		SetTimer
USER32.dll	434		KillTimer
USER32.dll	513		PostQuitMessage
USER32.dll	646		SetWindowTextA
USER32.dll	93		CreateMenu
USER32.dll	96		CreateWindowExA
USER32.dll	658		ShowWindow
USER32.dll	699		UpdateWindow
USER32.dll	476		MessageBoxA
USER32.dll	13		BeginPaint
GDI32.dll	421		GetStockObject
GDI32.dll	143		DeleteObject
GDI32.dll	570		SetTextColor
GDI32.dll	588		TextOutA
GDI32.dll	57		CreateFontA
ADVAPI32.dll	135		CryptCreateHash
ADVAPI32.dll	156		CryptHashData
ADVAPI32.dll	137		CryptDeriveKey
ADVAPI32.dll	139		CryptDestroyKey
ADVAPI32.dll	159		CryptReleaseContext
ADVAPI32.dll	136		CryptDecrypt
ADVAPI32.dll	132		CryptAcquireContextA
ole32.dll	97		CoTaskMemFree
ole32.dll	96		CoTaskMemAlloc
OLEAUT32.dll		200
OLEAUT32.dll		6
OLEAUT32.dll		8
OLEAUT32.dll		9

StringTable 041204B0

FileDescription	ZONESRV ?? ????
FileVersion	6, 9, 0, 6
InternalName	ZONESRV
LegalCopyright	Joyimpact (c) - 2007
OriginalFilename	ZONESRV.exe
ProductName	ZONESRV ?? ????
ProductVersion	1, 0, 0, 1

VS_FIXEDFILEINFO

FileVersion	6.9.0.6
ProductVersion	1.0.0.1
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	1077248	EXE	08/25/2010 02:39:51	#
15c1	15	HTM		#
107000	4096	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 1081344 bytes (1056 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

Zone05.exe-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 041204B0

VS_FIXEDFILEINFO

Zone05.exe
-