[Bug 49112] New: ELWAVE doesn't start - detects Wine as VM
https://bugs.winehq.org/show_bug.cgi?id=49112 Bug ID: 49112 Summary: ELWAVE doesn't start - detects Wine as VM Product: Wine Version: 5.2 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: dark.shadow4(a)web.de Distribution: --- The program doesn't start, since it refuses to work in a VM but detects Wine as such. Seems to work on older CPUs though, so maybe that's a clue. Reported in the forums: https://forum.winehq.org/viewtopic.php?f=2&t=33826 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=49112 --- Comment #1 from Fabian Maurer <dark.shadow4(a)web.de> --- Created attachment 67108 --> https://bugs.winehq.org/attachment.cgi?id=67108 +relay logs from old and new system Adding logs from the forum. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=49112 --- Comment #2 from Fabian Maurer <dark.shadow4(a)web.de> --- Might be related to bug 48789, maybe the same protection... -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=49112 --- Comment #3 from Fabian Maurer <dark.shadow4(a)web.de> --- *** Bug 48789 has been marked as a duplicate of this bug. *** -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=49112 Fabian Maurer <dark.shadow4(a)web.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |download Summary|ELWAVE doesn't start - |Multiple programs protected |detects Wine as VM |by Themida detect Wine as | |VM (ELWAVE, Freestyle 2: | |Street Basketball) URL| |https://web.archive.org/web | |/20200509151619if_/https:// | |dw15.malavida.com/dwn/4125c | |9e8954915f511c999f33455db7d | |084d1b7220d08ad7646f6c9f491 | |4e9b4/ThemidaDemo32_64.zip --- Comment #4 from Fabian Maurer <dark.shadow4(a)web.de> --- Found an old demo version of Themida which can be used to reproduce the problem. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=49112 Fabian Maurer <dark.shadow4(a)web.de> changed: What |Removed |Added ---------------------------------------------------------------------------- URL|https://web.archive.org/web |https://store.steampowered. |/20200509151619if_/https:// |com/app/339610/Freestyle_2_ |dw15.malavida.com/dwn/4125c |Street_Basketball/ |9e8954915f511c999f33455db7d | |084d1b7220d08ad7646f6c9f491 | |4e9b4/ThemidaDemo32_64.zip | --- Comment #5 from Fabian Maurer <dark.shadow4(a)web.de> --- Sorry, never mind... The demo doesn't start on Wine, and protected executables from a VM can't be copied to a different machine... -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=49112 --- Comment #6 from Fabian Maurer <dark.shadow4(a)web.de> --- I managed to get two working executables to test though: https://www.mediafire.com/file/ymiwu3q2zdoljpt/themida_test.zip So if someone better than me wants to debug this Anti-VM nonsense, feel free to do so. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=49112 Andrew Wesie <awesie(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |awesie(a)gmail.com --- Comment #7 from Andrew Wesie <awesie(a)gmail.com> --- You might want to try disabling UMIP (add clearcpuid=514 kernel parameter) and see if that helps. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=49112 --- Comment #8 from Fabian Maurer <dark.shadow4(a)web.de> --- That indeed helps. I'm guessing we'd need to catch those instructions and handle them so the program works with UMIP enabled? -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=49112 --- Comment #9 from Fabian Maurer <dark.shadow4(a)web.de> --- Upgraded to a "Ryzen 7 3800X 8" now, and I can't reproduce the issue anymore. Not sure if that CPU supports UMIP... -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=49112 --- Comment #10 from Fabian Maurer <dark.shadow4(a)web.de> --- Can someone with a modern Intel CPU try to replicate this? As noted, my AMD CPU doesn't have that issue. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=49112 --- Comment #11 from Fabian Maurer <dark.shadow4(a)web.de> --- I think this got fixed by https://github.com/torvalds/linux/commit/b91e7089ae70d2f7c81a4456e5b78fef498... That would explain why I thought my CPU wasn't affected. I can run the "VM forbidden" exe properly, only with an older Linux kernel I get the error. Can someone confirm? -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=49112 Rafał Mikrut <mikrutrafal(a)protonmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mikrutrafal(a)protonmail.com --- Comment #12 from Rafał Mikrut <mikrutrafal(a)protonmail.com> --- With provided examples I see twice OK, so looks that this is fixed -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=49112 Fabian Maurer <dark.shadow4(a)web.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |NOTOURBUG Status|NEW |RESOLVED --- Comment #13 from Fabian Maurer <dark.shadow4(a)web.de> --- Marking NOTOUTBUG then. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=49112 --- Comment #14 from Fabian Maurer <dark.shadow4(a)web.de> --- *** Bug 49111 has been marked as a duplicate of this bug. *** -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
participants (1)
-
WineHQ Bugzilla