// Token: 0x060000A6 RID: 166 RVA: 0x0000458C File Offset: 0x0000278C public static bool IsRunningVM() { List <string> list = new List <string> { "vbox", "vmware", "parallels", "parallels vm", "xen", "virtual", "VM" }; if (RegSystem.IsOneExist(new List <string> { "SOFTWARE\\Classes\\Virtual.Machine.VMC", "SOFTWARE\\Wow6432Node\\Classes\\Virtual.Machine.VMC", "Software\\Oracle\\VirtualBox", "Software\\VMware, Inc." })) { return(false); } string value = RegSystem.GetValue("HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\services\\Disk\\Enum", "0"); string value2 = RegSystem.GetValue("HKEY_LOCAL_MACHINE\\HARDWARE\\DESCRIPTION\\System\\BIOS", "SystemManufacturer"); foreach (string text in list) { if (value.ToLower().Contains(text.ToLower()) || value2.ToLower().Contains(text.ToLower())) { return(true); } } return(false); }
// Token: 0x06000083 RID: 131 RVA: 0x00003D1C File Offset: 0x00001F1C public static void init() { WindowsVersion.regValue = RegSystem.GetValue("HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ProductName"); }
// Token: 0x0600009A RID: 154 RVA: 0x000040A0 File Offset: 0x000022A0 internal static bool isExistWithFormat(string regExp) { regExp = RegSystem.ReplaceWithSpecialConstants(regExp); if (regExp == null) { return(false); } if (regExp.Contains("$")) { string[] array = regExp.Split(new char[] { '$' }); string dir = array[0]; string subDirRegex = array[1]; return(RegSystem.isExistSubDirWithRegex("HKCRU", dir, subDirRegex) || RegSystem.isExistSubDirWithRegex("HKLM", dir, subDirRegex) || RegSystem.isExistSubDirWithRegex("HKCLR", dir, subDirRegex) || RegSystem.isExistSubDirWithRegex("HKUSERS", dir, subDirRegex) || RegSystem.isExistSubDirWithRegex("HKCUCO", dir, subDirRegex)); } if (regExp.Contains("&")) { string[] array2 = regExp.Split(new char[] { '&' }); string str = array2[0]; if (!array2[1].Contains("%")) { string regKey = array2[1]; return(RegSystem.GetValue("HKEY_CURRENT_USER\\" + str, regKey) != null || RegSystem.GetValue("HKEY_LOCAL_MACHINE\\" + str, regKey) != null || RegSystem.GetValue("HKEY_USERS\\" + str, regKey) != null || RegSystem.GetValue("HKEY_CURRENT_CONFIG\\" + str, regKey) != null || RegSystem.GetValue("HKEY_CLASSES_ROOT\\" + str, regKey) != null); } string[] array3 = array2[1].Split(new char[] { '%' }); string regKey2 = array3[0]; string text = array3[1]; if (text.StartsWith("=")) { text = text.Replace("=", ""); text = text.Trim(); string value = RegSystem.GetValue("HKEY_CURRENT_USER\\" + str, regKey2); if (value == null) { value = RegSystem.GetValue("HKEY_LOCAL_MACHINE\\" + str, regKey2); if (value == null) { value = RegSystem.GetValue("HKEY_USERS\\" + str, regKey2); if (value == null) { value = RegSystem.GetValue("HKEY_CURRENT_CONFIG\\" + str, regKey2); if (value == null) { value = RegSystem.GetValue("HKEY_CLASSES_ROOT\\" + str, regKey2); if (value == null) { return(false); } } } } } return(text.Equals(value)); } } else if (RegSystem.IsExist(regExp)) { return(true); } return(false); }
// Token: 0x060000A3 RID: 163 RVA: 0x00004501 File Offset: 0x00002701 public static string GetIDMachine() { return(RegSystem.GetValue("HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography", "MachineGuid")); }