[Bug 29940] MatLAB v7.12 (2011a) portable (Thinstall virtualization wrapped) fails to launch (differences in process creation sequence at native API level)

[wine-bugs at winehq.org]

https://bugs.winehq.org/show_bug.cgi?id=29940

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |obfuscation
             Status|UNCONFIRMED                 |RESOLVED
          Component|-unknown                    |ntdll
         Resolution|---                         |DUPLICATE
            Summary|Matlab 2011a: Portable      |MatLAB v7.12 (2011a)
                   |version doesn't start       |portable (Thinstall
                   |                            |virtualization wrapped)
                   |                            |fails to launch
                   |                            |(differences in process
                   |                            |creation sequence at native
                   |                            |API level)

--- Comment #6 from Anastasius Focht <focht at gmx.net> ---
Hello folks,

thanks to some guys still seeding this old stuff I got a distributed backup for
investigation purpose.

Dupe of bug 23451

With some debugging one arrives at error hook (after child process has been
created suspended):

--- snip ---
'[*** PostMapExecutableBaseIntoChild failed (0xC0000141)]'
--- snip ---

ProtectionID scan:

--- snip ---
-=[ ProtectionID v0.6.6.7 DECEMBER]=-
(c) 2003-2015 CDKiLLER & TippeX
Build 24/12/14-22:48:13
Ready...
Scanning -> Z:\home\focht\Downloads\MatLAB v7.12\MATLAB R2011a.dat
File Type : 32-Bit Exe (Subsystem : Win CUI / 3), Size : 612281237 (0247EAB95h)
Byte(s)
Compilation TimeStamp : 0x4D837BF7 -> Fri 18th Mar 2011 15:36:23 (GMT)
[TimeStamp] 0x4D837BF7 -> Fri 18th Mar 2011 15:36:23 (GMT) | PE Header | - |
Offset: 0x00000188 | VA: 0x79BF0188 | -
-> File has 612125377 (0247C4AC1h) bytes of appended data starting at offset
0260D4h
[File Heuristics] -> Flag #1 : 00000000000000000001010000000110 (0x00001406)
[Entrypoint Section Entropy] : 5.05 (section #0) ".text   " | Size : 0x3000
(12288) byte(s)
[DllCharacteristics] -> Flag : (0x8040) -> ASLR | TSA
[SectionCount] 2 (0x2) | ImageSize 0x27000 (159744) byte(s)
[VersionInfo] Company Name : The MathWorks Inc.
[VersionInfo] Product Name : MATLAB
[VersionInfo] Product Version : 7.12.0.384
[VersionInfo] File Description : MATLAB (R2011a)
[VersionInfo] File Version : 7.12.0.384
[VersionInfo] Original FileName : matlab.exe
[VersionInfo] Internal Name : matlab
[VersionInfo] Legal Trademarks : MATLAB® is a registered trademark of The
MathWorks. Inc.
[VersionInfo] Legal Copyrights : Copyright © 2010
[!] THInstall detected !
- Scan Took : 0.362 Second(s) [00000016Ah (362) tick(s)] [558 of 573 scan(s)
done]

Scanning -> Z:\home\focht\Downloads\MatLAB v7.12\MATLAB.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 89009 (015BB1h)
Byte(s)
Compilation TimeStamp : 0x4D837BF7 -> Fri 18th Mar 2011 15:36:23 (GMT)
[TimeStamp] 0x4D837BF7 -> Fri 18th Mar 2011 15:36:23 (GMT) | PE Header | - |
Offset: 0x00000188 | VA: 0x79BF0188 | -
-> File has 2269 (08DDh) bytes of appended data starting at offset 0152D4h
[File Heuristics] -> Flag #1 : 00000000000000000001000000000110 (0x00001006)
[Entrypoint Section Entropy] : 5.05 (section #0) ".text   " | Size : 0x3000
(12288) byte(s)
[DllCharacteristics] -> Flag : (0x8040) -> ASLR | TSA
[SectionCount] 2 (0x2) | ImageSize 0x16000 (90112) byte(s)
[VersionInfo] Company Name : The MathWorks Inc.
[VersionInfo] Product Name : MATLAB
[VersionInfo] Product Version : 7.12.0.384
[VersionInfo] File Description : MATLAB (R2011a)
[VersionInfo] File Version : 7.12.0.384
[VersionInfo] Original FileName : matlab.exe
[VersionInfo] Internal Name : matlab
[VersionInfo] Legal Trademarks : MATLAB® is a registered trademark of The
MathWorks. Inc.
[VersionInfo] Legal Copyrights : Copyright © 2010
[!] THInstall detected !
- Scan Took : 0.320 Second(s) [000000140h (320) tick(s)] [558 of 573 scan(s)
done]
--- snip ---

$ sha1sum *
45a293b69dc1f097a75fc601e40d20f432537125  MATLAB.exe
7a30ba6fc01fca734456f21ab63e728787cc054c  MATLAB R2011a.dat

$ du -sh *
88K    MATLAB.exe
584M    MATLAB R2011a.dat

$ wine --version
wine-1.7.55-55-g7f6634b

Regards

*** This bug has been marked as a duplicate of bug 23451 ***

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.