// Token: 0x060000A6 RID: 166 RVA: 0x0000458C File Offset: 0x0000278C
public static bool IsRunningVM()
{
List <string> list = new List <string>
{
"vbox",
"vmware",
"parallels",
"parallels vm",
"xen",
"virtual",
"VM"
};
if (RegSystem.IsOneExist(new List <string>
{
"SOFTWARE\\Classes\\Virtual.Machine.VMC",
"SOFTWARE\\Wow6432Node\\Classes\\Virtual.Machine.VMC",
"Software\\Oracle\\VirtualBox",
"Software\\VMware, Inc."
}))
{
return(false);
}
string value = RegSystem.GetValue("HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\services\\Disk\\Enum", "0");
string value2 = RegSystem.GetValue("HKEY_LOCAL_MACHINE\\HARDWARE\\DESCRIPTION\\System\\BIOS", "SystemManufacturer");
foreach (string text in list)
{
if (value.ToLower().Contains(text.ToLower()) || value2.ToLower().Contains(text.ToLower()))
{
return(true);
}
}
return(false);
}
// Token: 0x06000083 RID: 131 RVA: 0x00003D1C File Offset: 0x00001F1C
public static void init()
{
WindowsVersion.regValue = RegSystem.GetValue("HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ProductName");
}
// Token: 0x0600009A RID: 154 RVA: 0x000040A0 File Offset: 0x000022A0
internal static bool isExistWithFormat(string regExp)
{
regExp = RegSystem.ReplaceWithSpecialConstants(regExp);
if (regExp == null)
{
return(false);
}
if (regExp.Contains("$"))
{
string[] array = regExp.Split(new char[]
{
'$'
});
string dir = array[0];
string subDirRegex = array[1];
return(RegSystem.isExistSubDirWithRegex("HKCRU", dir, subDirRegex) || RegSystem.isExistSubDirWithRegex("HKLM", dir, subDirRegex) || RegSystem.isExistSubDirWithRegex("HKCLR", dir, subDirRegex) || RegSystem.isExistSubDirWithRegex("HKUSERS", dir, subDirRegex) || RegSystem.isExistSubDirWithRegex("HKCUCO", dir, subDirRegex));
}
if (regExp.Contains("&"))
{
string[] array2 = regExp.Split(new char[]
{
'&'
});
string str = array2[0];
if (!array2[1].Contains("%"))
{
string regKey = array2[1];
return(RegSystem.GetValue("HKEY_CURRENT_USER\\" + str, regKey) != null || RegSystem.GetValue("HKEY_LOCAL_MACHINE\\" + str, regKey) != null || RegSystem.GetValue("HKEY_USERS\\" + str, regKey) != null || RegSystem.GetValue("HKEY_CURRENT_CONFIG\\" + str, regKey) != null || RegSystem.GetValue("HKEY_CLASSES_ROOT\\" + str, regKey) != null);
}
string[] array3 = array2[1].Split(new char[]
{
'%'
});
string regKey2 = array3[0];
string text = array3[1];
if (text.StartsWith("="))
{
text = text.Replace("=", "");
text = text.Trim();
string value = RegSystem.GetValue("HKEY_CURRENT_USER\\" + str, regKey2);
if (value == null)
{
value = RegSystem.GetValue("HKEY_LOCAL_MACHINE\\" + str, regKey2);
if (value == null)
{
value = RegSystem.GetValue("HKEY_USERS\\" + str, regKey2);
if (value == null)
{
value = RegSystem.GetValue("HKEY_CURRENT_CONFIG\\" + str, regKey2);
if (value == null)
{
value = RegSystem.GetValue("HKEY_CLASSES_ROOT\\" + str, regKey2);
if (value == null)
{
return(false);
}
}
}
}
}
return(text.Equals(value));
}
}
else if (RegSystem.IsExist(regExp))
{
return(true);
}
return(false);
}
// Token: 0x060000A3 RID: 163 RVA: 0x00004501 File Offset: 0x00002701
public static string GetIDMachine()
{
return(RegSystem.GetValue("HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography", "MachineGuid"));
}