// Detect It Easy: detection rule file
// Author: horsicq <horsicq@gmail.com>

meta("protector", "DeepSea");

function detect() {
    if (PE.isNet()) {
        var nOffset = PE.findString(PE.section[0].FileOffset, PE.section[0].FileSize, "DeepSeaObfuscator");

        if (nOffset !== -1) {
            if (PE.compare("'Evaluation'", nOffset + 18)) {
                sOptions = "Evaluation";
                sVersion = "4.X";
            }

            bDetected = true;
        }
    }

    return result();
}
