Added goto cleanup and fixed conflict (#285)

Author: lowlevel01

al-khaser/Al-khaser.cpp

@@ -185,6 +185,7 @@ int main(int argc, char* argv[])
 		exec_check(&disk_size_getdiskfreespace, TEXT("Checking disk size using GetDiskFreeSpaceEx "));
 		exec_check(&cpuid_is_hypervisor, TEXT("Checking if CPU hypervisor field is set using cpuid(0x1)"));
 		exec_check(&cpuid_hypervisor_vendor, TEXT("Checking hypervisor vendor using cpuid(0x40000000)"));
+		exec_check(&hosting_check, TEXT("Check if Machine is hosted on Cloud"));
 		exec_check(&accelerated_sleep, TEXT("Check if time has been accelerated "));
 		exec_check(&VMDriverServices, TEXT("VM Driver Services  "));
 		exec_check(&serial_number_bios_wmi, TEXT("Checking SerialNumber from BIOS using WMI "));

al-khaser/AntiVM/Generic.cpp

@@ -2094,3 +2094,84 @@ BOOL firmware_ACPI_WAET()
 	}
 	return result;
 }
+
+/*
+Check if machine is hosted on Cloud.
+*/
+
+BOOL hosting_check()
+{
+	TCHAR msg[256] = _T("Checking if Machine is hosted on Cloud");
+	WSADATA wsaData;
+	SOCKET sock = INVALID_SOCKET;
+	addrinfo* result = nullptr;
+	addrinfo hints;
+	BOOL retVal = FALSE;
+	std::string request;
+	std::string response;
+	const int bufferSize = 512;
+	char buffer[bufferSize];
+	int bytesReceived = 0;
+
+	if (WSAStartup(MAKEWORD(2, 2), &wsaData) != 0)
+	{
+		goto cleanup;
+	}
+
+	sock = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP);
+	if (sock == INVALID_SOCKET)
+	{
+		goto cleanup;
+	}
+
+
+	memset(&hints, 0, sizeof(hints));
+	hints.ai_family = AF_INET;
+	hints.ai_socktype = SOCK_STREAM;
+	hints.ai_protocol = IPPROTO_TCP;
+
+	if (getaddrinfo("ip-api.com", "80", &hints, &result) != 0)
+	{
+		goto cleanup;
+	}
+
+	if (connect(sock, result->ai_addr, static_cast<int>(result->ai_addrlen)) == SOCKET_ERROR)
+	{
+		goto cleanup;
+	}
+
+	request = "GET /json/?fields=hosting HTTP/1.1\r\n";
+	request += "Host: ip-api.com\r\n";
+	request += "Connection: close\r\n\r\n";
+
+	if (send(sock, request.c_str(), static_cast<int>(request.length()), 0) == SOCKET_ERROR)
+	{
+		goto cleanup;
+	}
+
+	do
+	{
+		bytesReceived = recv(sock, buffer, bufferSize - 1, 0);
+		if (bytesReceived > 0)
+		{
+			buffer[bytesReceived] = '\0';
+			response += buffer;
+		}
+	} while (bytesReceived > 0);
+
+	if (bytesReceived == SOCKET_ERROR)
+	{
+		goto cleanup;
+	}
+
+	if (response.find("\"hosting\":true") != std::string::npos)
+	{
+		retVal = TRUE;
+	}
+
+cleanup:
+	if (result) freeaddrinfo(result);
+	if (sock != INVALID_SOCKET) closesocket(sock);
+	WSACleanup();
+	return retVal;
+}

al-khaser/AntiVM/Generic.h

@@ -51,3 +51,4 @@ BOOL registry_services_disk_enum();
 BOOL registry_disk_enum();
 BOOL number_SMBIOS_tables();
 BOOL firmware_ACPI_WAET();
+BOOL hosting_check();

al-khaser/pch.h

@@ -17,6 +17,8 @@
 #include <vector>
 #include <filesystem>
 
+#include <winsock2.h>
+#include <ws2tcpip.h>
 #include <Windows.h>
 #include <winternl.h>
 #include <stdio.h>
@@ -44,7 +46,9 @@
 #include <algorithm>
 #include <cctype>
 #include <slpublic.h> // SLIsGenuineLocal
+#include <ipmib.h>
 
+#pragma comment(lib, "Ws2_32.lib")
 #pragma comment(lib, "wbemuuid.lib")
 #pragma comment(lib, "Shlwapi.lib")
 #pragma comment(lib, "Mpr.lib")