https://bugs.winehq.org/show_bug.cgi?id=49112
Bug ID: 49112 Summary: ELWAVE doesn't start - detects Wine as VM Product: Wine Version: 5.2 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs@winehq.org Reporter: dark.shadow4@web.de Distribution: ---
The program doesn't start, since it refuses to work in a VM but detects Wine as such.
Seems to work on older CPUs though, so maybe that's a clue.
Reported in the forums: https://forum.winehq.org/viewtopic.php?f=2&t=33826
https://bugs.winehq.org/show_bug.cgi?id=49112
--- Comment #1 from Fabian Maurer dark.shadow4@web.de --- Created attachment 67108 --> https://bugs.winehq.org/attachment.cgi?id=67108 +relay logs from old and new system
Adding logs from the forum.
https://bugs.winehq.org/show_bug.cgi?id=49112
--- Comment #2 from Fabian Maurer dark.shadow4@web.de --- Might be related to bug 48789, maybe the same protection...
https://bugs.winehq.org/show_bug.cgi?id=49112
--- Comment #3 from Fabian Maurer dark.shadow4@web.de --- *** Bug 48789 has been marked as a duplicate of this bug. ***
https://bugs.winehq.org/show_bug.cgi?id=49112
Fabian Maurer dark.shadow4@web.de changed:
What |Removed |Added ---------------------------------------------------------------------------- Keywords| |download Summary|ELWAVE doesn't start - |Multiple programs protected |detects Wine as VM |by Themida detect Wine as | |VM (ELWAVE, Freestyle 2: | |Street Basketball) URL| |https://web.archive.org/web | |/20200509151619if_/https:// | |dw15.malavida.com/dwn/4125c | |9e8954915f511c999f33455db7d | |084d1b7220d08ad7646f6c9f491 | |4e9b4/ThemidaDemo32_64.zip
--- Comment #4 from Fabian Maurer dark.shadow4@web.de --- Found an old demo version of Themida which can be used to reproduce the problem.
https://bugs.winehq.org/show_bug.cgi?id=49112
Fabian Maurer dark.shadow4@web.de changed:
What |Removed |Added ---------------------------------------------------------------------------- URL|https://web.archive.org/web |https://store.steampowered. |/20200509151619if_/https:// |com/app/339610/Freestyle_2_ |dw15.malavida.com/dwn/4125c |Street_Basketball/ |9e8954915f511c999f33455db7d | |084d1b7220d08ad7646f6c9f491 | |4e9b4/ThemidaDemo32_64.zip |
--- Comment #5 from Fabian Maurer dark.shadow4@web.de --- Sorry, never mind... The demo doesn't start on Wine, and protected executables from a VM can't be copied to a different machine...
https://bugs.winehq.org/show_bug.cgi?id=49112
--- Comment #6 from Fabian Maurer dark.shadow4@web.de --- I managed to get two working executables to test though: https://www.mediafire.com/file/ymiwu3q2zdoljpt/themida_test.zip
So if someone better than me wants to debug this Anti-VM nonsense, feel free to do so.
https://bugs.winehq.org/show_bug.cgi?id=49112
Andrew Wesie awesie@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |awesie@gmail.com
--- Comment #7 from Andrew Wesie awesie@gmail.com --- You might want to try disabling UMIP (add clearcpuid=514 kernel parameter) and see if that helps.
https://bugs.winehq.org/show_bug.cgi?id=49112
--- Comment #8 from Fabian Maurer dark.shadow4@web.de --- That indeed helps. I'm guessing we'd need to catch those instructions and handle them so the program works with UMIP enabled?
https://bugs.winehq.org/show_bug.cgi?id=49112
--- Comment #9 from Fabian Maurer dark.shadow4@web.de --- Upgraded to a "Ryzen 7 3800X 8" now, and I can't reproduce the issue anymore. Not sure if that CPU supports UMIP...
https://bugs.winehq.org/show_bug.cgi?id=49112
--- Comment #10 from Fabian Maurer dark.shadow4@web.de --- Can someone with a modern Intel CPU try to replicate this? As noted, my AMD CPU doesn't have that issue.
https://bugs.winehq.org/show_bug.cgi?id=49112
--- Comment #11 from Fabian Maurer dark.shadow4@web.de --- I think this got fixed by https://github.com/torvalds/linux/commit/b91e7089ae70d2f7c81a4456e5b78fef498...
That would explain why I thought my CPU wasn't affected. I can run the "VM forbidden" exe properly, only with an older Linux kernel I get the error.
Can someone confirm?
https://bugs.winehq.org/show_bug.cgi?id=49112
Rafał Mikrut mikrutrafal@protonmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |mikrutrafal@protonmail.com
--- Comment #12 from Rafał Mikrut mikrutrafal@protonmail.com --- With provided examples I see twice OK, so looks that this is fixed
https://bugs.winehq.org/show_bug.cgi?id=49112
Fabian Maurer dark.shadow4@web.de changed:
What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |NOTOURBUG Status|NEW |RESOLVED
--- Comment #13 from Fabian Maurer dark.shadow4@web.de --- Marking NOTOUTBUG then.
https://bugs.winehq.org/show_bug.cgi?id=49112
--- Comment #14 from Fabian Maurer dark.shadow4@web.de --- *** Bug 49111 has been marked as a duplicate of this bug. ***