[Bug 38714] 64-bit ARM Windows applications from Windows SDK for Windows 10 crash in entry (loader needs to set/randomize security cookie for PE modules)

WineHQ Bugzilla wine-bugs at winehq.org
Sun Jul 18 16:46:14 CDT 2021 

https://bugs.winehq.org/show_bug.cgi?id=38714

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                URL|http://go.microsoft.com/fwl |https://web.archive.org/web
                   |ink/p/?LinkId=536682        |/20200915210324/http://down
                   |                            |load.microsoft.com/download
                   |                            |/6/3/B/63BADCE0-F2E6-44BD-B
                   |                            |2F9-60F5F073038E/standalone
                   |                            |sdk/SDKSETUP.EXE

--- Comment #6 from Anastasius Focht <focht at gmx.net> ---
Hello folks,

adding stable download links via Internet Archive for documentation.

NOTE: Many older Windows SDK web-installers which use builtin 'bing.com' URL
bootstrapper are broken by design.

Example snapshot:

https://web.archive.org/web/20150704231532if_/http://download.microsoft.com/download/9/1/D/91DB6FE6-93B7-413E-91E2-E6FEA7355342/standalonesdk/sdksetup.exe

--- snip ---
...
[0250:0298][2021-07-18T22:42:33]w343: Prompt for source of package:
package_.Net_Framework_4.5, payload: package_.Net_Framework_4.5, path:
Z:\home\focht\Downloads\Installers\dotNetFx45_Full_x86_x64.exe
[0250:0298][2021-07-18T22:42:33]i000: package_.Net_Framework_4.5
[0250:0298][2021-07-18T22:42:33]i000: Resolving download root for:
http://go.microsoft.com/fwlink/?LinkID=535005
[0250:0298][2021-07-18T22:42:33]i000: HTTP status code: 302
[0250:0298][2021-07-18T22:42:33]i000: Redirected URL:
https://www.bing.com?ref=go&linkid=535005
[0250:0298][2021-07-18T22:42:33]i000: Resolved redirected download root:
https://www.bing.com?ref=go&linkid=535005/
[0250:0298][2021-07-18T22:42:33]i000: package_.Net_Framework_4.5 to
https://www.bing.com/Installers/dotNetFx45_Full_x86_x64.exe
[0250:0298][2021-07-18T22:42:33]i338: Acquiring package:
package_.Net_Framework_4.5, payload: package_.Net_Framework_4.5, download from:
https://www.bing.com/Installers/dotNetFx45_Full_x86_x64.exe
[0250:0298][2021-07-18T22:42:34]e000: Error 0x80070002: Failed to send request
to URL: https://www.bing.com/Installers/dotNetFx45_Full_x86_x64.exe
[0250:0298][2021-07-18T22:42:34]e000: Error 0x80070002: Failed to connect to
URL: https://www.bing.com/Installers/dotNetFx45_Full_x86_x64.exe
[0250:0298][2021-07-18T22:42:34]e000: Error 0x80070002: Failed to get size and
time for URL: https://www.bing.com/Installers/dotNetFx45_Full_x86_x64.exe
[0250:0298][2021-07-18T22:42:34]e000: Error 0x80070002: Failed attempt to
download URL: 'https://www.bing.com/Installers/dotNetFx45_Full_x86_x64.exe' to:
'C:\users\focht\Temp\{d46d7f88-dc0a-4d24-b834-bbed388e3993}\package_.Net_Framework_4.5'
[0250:0298][2021-07-18T22:42:34]i000: Retry downloading of payload
[package_.Net_Framework_4.5] for Package package_.Net_Framework_4.5
...
--- snip ---

Newer snapshot of web-installer which uses 'go.microsoft.com' URL bootstrapper.

https://web.archive.org/web/20200915210324/http://download.microsoft.com/download/6/3/B/63BADCE0-F2E6-44BD-B2F9-60F5F073038E/standalonesdk/SDKSETUP.EXE

--- snip ---
...
[03B4:03FC][2021-07-18T22:53:14]w343: Prompt for source of package:
package_.Net_Framework_4.5, payload: package_.Net_Framework_4.5, path:
Z:\home\focht\Downloads\Installers\dotNetFx45_Full_x86_x64.exe
[03B4:03FC][2021-07-18T22:53:14]i000: package_.Net_Framework_4.5
[03B4:03FC][2021-07-18T22:53:14]i000: Resolving download root for:
http://go.microsoft.com/fwlink/?prd=11966&pver=1.0&plcid=0x409&clcid=0x409&ar=Threshold&sar=SDK&o1=10.0.14393.33
[03B4:03FC][2021-07-18T22:53:14]i000: HTTP status code: 302
[03B4:03FC][2021-07-18T22:53:14]i000: Redirected URL:
https://download.microsoft.com/download/6/3/B/63BADCE0-F2E6-44BD-B2F9-60F5F073038E/standalonesdk/
[03B4:03FC][2021-07-18T22:53:14]i000: Resolved redirected download root:
https://download.microsoft.com/download/6/3/B/63BADCE0-F2E6-44BD-B2F9-60F5F073038E/standalonesdk/
[03B4:03FC][2021-07-18T22:53:14]i000: package_.Net_Framework_4.5 to
https://download.microsoft.com/download/6/3/B/63BADCE0-F2E6-44BD-B2F9-60F5F073038E/standalonesdk/Installers/dotNetFx45_Full_x86_x64.exe
[03B4:03FC][2021-07-18T22:53:14]i338: Acquiring package:
package_.Net_Framework_4.5, payload: package_.Net_Framework_4.5, download from:
https://download.microsoft.com/download/6/3/B/63BADCE0-F2E6-44BD-B2F9-60F5F073038E/standalonesdk/Installers/dotNetFx45_Full_x86_x64.exe
[03A0:03CC][2021-07-18T22:53:22]i000: Moving payload from working path
'C:\users\focht\Temp\{f23f94c5-8bba-4202-85ad-c83d4402cdc1}\package_.Net_Framework_4.5'
to path 'C:\users\focht\Downloads\Windows
Kits\10\StandaloneSDK\Installers\dotNetFx45_Full_x86_x64.exe'
...
--- snip ---

$ sha1sum SDKSETUP.EXE 
d9d88a2c3c8c196e06a948613b4c749addbaef04  SDKSETUP.EXE

$ du -sh SDKSETUP.EXE 
1.2M    SDKSETUP.EXE

Figuring out the actual installer payload package(s) of interest:

--- snip ---
$ grep -ral arm64\\\\mt.exe .wine/drive_c/

.wine/drive_c/users/focht/Temp/standalonesdk/Windows_Software_Development_Kit___Windows_10.0.14393.33_20210718230231_009_package_WindowsSDKforWindowsStoreAppsTools_x86_en_us.log
--- snip ---

--- snip ---
...
[03B4:03FC][2021-07-18T22:53:46]i338: Acquiring package:
package_WindowsSDKforWindowsStoreAppsTools_x86_en_us, payload:
package_WindowsSDKforWindowsStoreAppsTools_x86_en_us, download from:
https://download.microsoft.com/download/6/3/B/63BADCE0-F2E6-44BD-B2F9-60F5F073038E/standalonesdk/Installers/Windows
SDK for Windows Store Apps Tools-x86_en-us.msi
[03A0:03CC][2021-07-18T22:53:46]i000: Moving payload from working path
'C:\users\focht\Temp\{f23f94c5-8bba-4202-85ad-c83d4402cdc1}\package_WindowsSDKforWindowsStoreAppsTools_x86_en_us'
to path 'C:\users\focht\Downloads\Windows
Kits\10\StandaloneSDK\Installers\Windows SDK for Windows Store Apps
Tools-x86_en-us.msi'
...
--- snip ---

Dumping tables with ORCA ...

'File' table:

--- snip ---
...
filfba0d0fbe7048c6342ff44f6650d31f3    cmpfba0d0fbe7048c6342ff44f6650d31f3   
mt.exe    1193664    10.0.14393.33    1033    512    102
fild620776100898ed00d5f7040d7387a05    cmpd620776100898ed00d5f7040d7387a05   
mt.exe    1202688    10.0.14393.33    1033    512    166
fil98de9494e47bad794ffc26a4cd21e5ca    cmp98de9494e47bad794ffc26a4cd21e5ca   
mt.exe    989368    10.0.14393.33    1033    512    300
...
--- snip ---

Sequence numbers: 102, 166, 300

'Media' table:

--- snip ---
1    0                
2    2        15bc5316e373960d82abc253bceaa25d.cab        
3    5        2630bae9681db6a9f6722366f47d055c.cab        
4    8        61d57a7a82309cd161a854a6f4619e52.cab        
5    10        68de71e3e2fb9941ee5b7c77500c0508.cab        
6    103        69661e20556b3ca9456b946c2c881ddd.cab        
7    180        b82881a61b7477bd4eb5de2cd5037fe2.cab        
8    242        e072b3b3d3164e26b63338dce51862a7.cab        
9    338        e3d1b35aecfccda1b4af6fe5988ac4be.cab        
--- snip ---

103 -> 69661e20556b3ca9456b946c2c881ddd.cab
166 -> b82881a61b7477bd4eb5de2cd5037fe2.cab
300 -> e3d1b35aecfccda1b4af6fe5988ac4be.cab

--- snip ---
$ cabextract -F filfba0d0fbe7048c6342ff44f6650d31f3 -q
69661e20556b3ca9456b946c2c881ddd.cab && file
filfba0d0fbe7048c6342ff44f6650d31f3

filfba0d0fbe7048c6342ff44f6650d31f3: PE32+ executable (console) x86-64, for MS
Windows
--- snip ---

--- snip ---
$ cabextract -F fild620776100898ed00d5f7040d7387a05 -q
b82881a61b7477bd4eb5de2cd5037fe2.cab && file
fild620776100898ed00d5f7040d7387a05

fild620776100898ed00d5f7040d7387a05: PE32+ executable (console) Aarch64, for MS
Windows
--- snip ---

--- snip ---
$ cabextract -F fil98de9494e47bad794ffc26a4cd21e5ca -q
e3d1b35aecfccda1b4af6fe5988ac4be.cab && file
fil98de9494e47bad794ffc26a4cd21e5ca

fil98de9494e47bad794ffc26a4cd21e5ca: PE32 executable (console) Intel 80386, for
MS Windows
--- snip ---

Snapshots of those via Internet Archive:

https://web.archive.org/web/20210718213628/https://download.microsoft.com/download/6/3/B/63BADCE0-F2E6-44BD-B2F9-60F5F073038E/standalonesdk/Installers/Windows%20SDK%20for%20Windows%20Store%20Apps%20Tools-x86_en-us.msi

https://web.archive.org/web/20210718213835/https://download.microsoft.com/download/6/3/B/63BADCE0-F2E6-44BD-B2F9-60F5F073038E/standalonesdk/Installers/61d57a7a82309cd161a854a6f4619e52.cab

https://web.archive.org/web/20210718213916/https://download.microsoft.com/download/6/3/B/63BADCE0-F2E6-44BD-B2F9-60F5F073038E/standalonesdk/Installers/b82881a61b7477bd4eb5de2cd5037fe2.cab

https://web.archive.org/web/20210718214005/https://download.microsoft.com/download/6/3/B/63BADCE0-F2E6-44BD-B2F9-60F5F073038E/standalonesdk/Installers/e3d1b35aecfccda1b4af6fe5988ac4be.cab

Maybe one day I write a script that populates all payload packages (.msi, .cab)
from the SDK web-installers and automagically creates snapshots for those on
archive.org. This way they will live in case the original web-installer and its
payloads goes defunct. It also allows to download certain tools directly
without all the unneeded garbage - as long as they don't require installation
via MSI.

===

https://web.archive.org/web/20210212012422/files.emeditor.com/emed64_15.1.4_portable.zip

$ sha1sum emed64_15.1.4_portable.zip 
b38b83aab7164ff574aad936b8571dea30b72ab3  emed64_15.1.4_portable.zip

$ du -sh emed64_15.1.4_portable.zip 
11M    emed64_15.1.4_portable.zip

Regards

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.

More information about the wine-bugs mailing list