// Detect It Easy: detection rule file
// Author: horsicq <horsicq@gmail.com>

meta("protector", "PE Protect");

function detect() {
    if (PE.compareEP("'\r\nPE-PROTECT 0.9 (C)o'", 64)) {
        sVersion = "0.9";
        bDetected = true;
    } else if (PE.compareEP("525155576467A1300085C0780DE8........5883C007C6..C3")) {
        sVersion = "0.9";
        bDetected = true;
    }

    return result();
}