// Detect It Easy: detection rule file
// Author: horsicq <horsicq@gmail.com>

meta("protector", "ILUCRYPT");

function detect() {
    if (PE.compareEP("8BECFAC746F7....4281FA....75F9FF66F7")) {
        sVersion = "4.015";
        bDetected = true;
    } else if (PE.compareEP("8BECFAC7........4C4CC3FBBF....B8....2E....D1C84F81")) {
        sVersion = "4.018";
        bDetected = true;
    }

    return result();
}