// Detect It Easy: detection rule file
// Author: horsicq <horsicq@gmail.com>

meta("cryptor", "Duals eXe Encryptor");

function detect() {
    if (PE.compareEP("558BEC81EC00050000E8000000005D81ED0E")) {
        bDetected = true;

        switch (PE.readWord(PE.getEntryPointOffset() + 18)) {
            case 0x308: sVersion = "1.0"; break;
            case 0x43A: sVersion = "1.0b"; break;
        }
    }

    return result();
}