Anti something api

Adding some more APIs used to detect virtualization. If we see one of those API calls as one of the last before Malware terminates, we know it got us.

Closes #29