// Detect It Easy: detection rule file
// Author: horsicq <horsicq@gmail.com>

meta("protector", "UPolyX");

function detect() {
    if (PE.compareEP("81FD00FBFFFF83D1..8D142F83FDFC76..8A02428807474975")) {
        sVersion = "0.X";
        bDetected = true;
    } else if (PE.compareEP("E2..FF..0000000000000000000000000000")) {
        sVersion = "0.1";
        bDetected = true;
    } else if (PE.compareEP("558BEC..00BD46008B..B9..00000080....51")) {
        sVersion = "0.5";
        bDetected = true;
    } else if (PE.compareEP("BB........83EC04891C24..B9..0000008033")) {
        sVersion = "0.5";
        bDetected = true;
    } else if (PE.compareEP("E8000000005983C10751C3C3")) {
        sVersion = "0.5";
        bDetected = true;
    } else if (PE.compareEP("EB01C3")) {
        sVersion = "0.5";
        bDetected = true;
    } else if (PE.compareEP("83EC0489..2459....000000")) {
        sVersion = "0.5";
        bDetected = true;
    }

    return result();
}