// Detect It Easy: detection rule file
// Author: horsicq <horsicq@gmail.com>

// https://hacking-software-free-download.blogspot.com/2013/02/nt-packer-v21.html
meta("packer", "NTPacker");

function detect() {
    if (PE.compareEP("558BEC83C4E05333C08945E08945E48945E88945ECB8........E8....FFFF33C05568")) {
        sVersion = "1.0";
        bDetected = true;
    } else if (PE.compareEP("4B57696E646F7773001055547970657300003F756E744D61696E46756E6374696F6E73000047756E744279706173730000B761504C696275000000")) {
        sVersion = "2.0";
        bDetected = true;
    }

    return result();
}