Add additional anti-vm rules

[CalebFenton]

This will require a little research to see if the techniques work in Android and if they're used anywhere.

First, the vmstat command seems to be a command on the android emulator. Checking for its existence or running it would be a give-away that you're in a VM.

Second, checking /proc/uptime may indicate if a device was just recently booted, which is common in VM analysis environments.

Third, a native code approach which is called "red pill" and may work in Android:
https://web.archive.org/web/20110708204609/http://www.invisiblethings.org/papers/redpill.html

int swallow_redpill () {
  unsigned char m[2+4], rpill[] = "\x0f\x01\x0d\x00\x00\x00\x00\xc3";
  *((unsigned*)&rpill[3]) = (unsigned)m;
  ((void(*)())&rpill)();
  return (m[5]>0xd0) ? 1 : 0;
}