https://bugs.winehq.org/show_bug.cgi?id=29940
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- Keywords| |obfuscation Status|UNCONFIRMED |RESOLVED Component|-unknown |ntdll Resolution|--- |DUPLICATE Summary|Matlab 2011a: Portable |MatLAB v7.12 (2011a) |version doesn't start |portable (Thinstall | |virtualization wrapped) | |fails to launch | |(differences in process | |creation sequence at native | |API level)
--- Comment #6 from Anastasius Focht focht@gmx.net --- Hello folks,
thanks to some guys still seeding this old stuff I got a distributed backup for investigation purpose.
Dupe of bug 23451
With some debugging one arrives at error hook (after child process has been created suspended):
--- snip --- '[*** PostMapExecutableBaseIntoChild failed (0xC0000141)]' --- snip ---
ProtectionID scan:
--- snip --- -=[ ProtectionID v0.6.6.7 DECEMBER]=- (c) 2003-2015 CDKiLLER & TippeX Build 24/12/14-22:48:13 Ready... Scanning -> Z:\home\focht\Downloads\MatLAB v7.12\MATLAB R2011a.dat File Type : 32-Bit Exe (Subsystem : Win CUI / 3), Size : 612281237 (0247EAB95h) Byte(s) Compilation TimeStamp : 0x4D837BF7 -> Fri 18th Mar 2011 15:36:23 (GMT) [TimeStamp] 0x4D837BF7 -> Fri 18th Mar 2011 15:36:23 (GMT) | PE Header | - | Offset: 0x00000188 | VA: 0x79BF0188 | - -> File has 612125377 (0247C4AC1h) bytes of appended data starting at offset 0260D4h [File Heuristics] -> Flag #1 : 00000000000000000001010000000110 (0x00001406) [Entrypoint Section Entropy] : 5.05 (section #0) ".text " | Size : 0x3000 (12288) byte(s) [DllCharacteristics] -> Flag : (0x8040) -> ASLR | TSA [SectionCount] 2 (0x2) | ImageSize 0x27000 (159744) byte(s) [VersionInfo] Company Name : The MathWorks Inc. [VersionInfo] Product Name : MATLAB [VersionInfo] Product Version : 7.12.0.384 [VersionInfo] File Description : MATLAB (R2011a) [VersionInfo] File Version : 7.12.0.384 [VersionInfo] Original FileName : matlab.exe [VersionInfo] Internal Name : matlab [VersionInfo] Legal Trademarks : MATLAB® is a registered trademark of The MathWorks. Inc. [VersionInfo] Legal Copyrights : Copyright © 2010 [!] THInstall detected ! - Scan Took : 0.362 Second(s) [00000016Ah (362) tick(s)] [558 of 573 scan(s) done]
Scanning -> Z:\home\focht\Downloads\MatLAB v7.12\MATLAB.exe File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 89009 (015BB1h) Byte(s) Compilation TimeStamp : 0x4D837BF7 -> Fri 18th Mar 2011 15:36:23 (GMT) [TimeStamp] 0x4D837BF7 -> Fri 18th Mar 2011 15:36:23 (GMT) | PE Header | - | Offset: 0x00000188 | VA: 0x79BF0188 | - -> File has 2269 (08DDh) bytes of appended data starting at offset 0152D4h [File Heuristics] -> Flag #1 : 00000000000000000001000000000110 (0x00001006) [Entrypoint Section Entropy] : 5.05 (section #0) ".text " | Size : 0x3000 (12288) byte(s) [DllCharacteristics] -> Flag : (0x8040) -> ASLR | TSA [SectionCount] 2 (0x2) | ImageSize 0x16000 (90112) byte(s) [VersionInfo] Company Name : The MathWorks Inc. [VersionInfo] Product Name : MATLAB [VersionInfo] Product Version : 7.12.0.384 [VersionInfo] File Description : MATLAB (R2011a) [VersionInfo] File Version : 7.12.0.384 [VersionInfo] Original FileName : matlab.exe [VersionInfo] Internal Name : matlab [VersionInfo] Legal Trademarks : MATLAB® is a registered trademark of The MathWorks. Inc. [VersionInfo] Legal Copyrights : Copyright © 2010 [!] THInstall detected ! - Scan Took : 0.320 Second(s) [000000140h (320) tick(s)] [558 of 573 scan(s) done] --- snip ---
$ sha1sum * 45a293b69dc1f097a75fc601e40d20f432537125 MATLAB.exe 7a30ba6fc01fca734456f21ab63e728787cc054c MATLAB R2011a.dat
$ du -sh * 88K MATLAB.exe 584M MATLAB R2011a.dat
$ wine --version wine-1.7.55-55-g7f6634b
Regards
*** This bug has been marked as a duplicate of bug 23451 ***