// Detect It Easy: detection rule file
// Author: hypn0 <hypn0@mail.ru>

// https://12ghosts-zip.apponic.com/
meta("sfx", "12Ghosts Zip2");

function detect() {
    if (PE.compareEP("E8$$$$$$$$558BEC83EC..A1........8365....8365....5357BF........3BC7BB........74")) {
        if (PE.isSignaturePresent(PE.getOverlayOffset(), 0x1000, "'BZh91'")) {
            sOptions = "BZIP2";
            sVersion = "8.0";
            bDetected = true;
        }
    }

    return result();
}