Detectar ejecución de app en Máquina Virtual

[[cHackAll]]

Código Delphi [-]
function IsInsideVMWare: Boolean; // test the port used by VMware tools to communicate with the host
begin
 try
  asm
   push ebx
   and  [Result], 0
   mov  eax, 'VMXh'
   xor  ebx, ebx
   mov  ecx, 10
   mov  edx, 'VX'
   in   eax, dx
   cmp  ebx, 'VMXh'
   setz [Result]
   pop  ebx
  end;
 except on EPrivilege do Result := False;
 end;
end;

function IsSomethingUnknown: Boolean; // from vmcheck.dll
begin
 Result := True;
 try
  asm
   db 15
   mov eax, 45C70001h
   cld
   dd -1
  end;
 except Result := False;
 end;
end;

function IsVirtualPC: Boolean; // from vmcheck.dll
begin
 Result := True;
 try
  asm
   mov eax, 1
   db  15
   aas
   pop es
   or  eax, edi
   inc ebp
   cld
   dd  -1
  end;
 except Result := False;
 end;
end;

function IsInsideVPC: Boolean; // Elias aka lallous
asm
 push ebp
 mov  ecx, offset @catch
 mov  ebp, esp
 push ebx
 push ecx
 push dword ptr fs:[0]
 mov  dword ptr fs:[0], esp
 xor  ebx, ebx
 mov  eax, 1
 dd   0B073F0Fh
 mov  eax, dword ptr ss:[esp]
 mov  dword ptr fs:[0], eax
 add  esp, 8
 test ebx, ebx
 setz al
 lea  esp, dword ptr ss:[ebp - 4]
 mov  ebx, dword ptr ss:[esp]
 mov  ebp, dword ptr ss:[esp + 4]
 add  esp, 8
 jmp  @ret
@catch:
 mov  ecx, [esp + 0Ch]
 mov  dword ptr [ecx + 0A4h], -1
 add  dword ptr [ecx + 0B8h], 4
 xor  eax, eax
@ret:
end;

function _IsVirtualPC: Boolean; // add-on
var
 hModule: Cardinal;
 Value: function: Boolean;
begin
 Result := False;
 hModule := LoadLibrary('c:\vmcheck.dll');
 if LongBool(hModule) then
  begin
   @Value := GetProcAddress(hModule, 'IsRunningInsideVirtualMachine');
   if Assigned(Value) then Result := Value;
   FreeLibrary(hModule);
  end;
end;

function IsRunningWine: Boolean;
var hModule: Cardinal;
begin
 hModule := LoadLibrary('ntdll.dll');
 Result := Assigned(GetProcAddress(hModule, 'wine_get_version')) and
           Assigned(GetProcAddress(hModule, 'wine_nt_to_unix_file_name'));
 FreeLibrary(hModule);
end;

TODO; Virtualbox

Saludos