// Detect It Easy: detection rule file
// Author: horsicq <horsicq@gmail.com>

meta("protector", "VCasm-Protector");

function detect() {
    if (PE.compareEP("558BEC6AFF68........68........64A1000000005064892500000000E803000000")) {
        sVersion = "1.0X";
        bDetected = true;
    } else if (PE.compareEP("EB..'[VProtect]'")) {
        if (PE.compareEP("..0A")) {
            sVersion = "1.0e";
        } else if (PE.compareEP("..0B")) {
            sVersion = "1.1-1.2";
        } else {
            sVersion = "1.X";
        }
        bDetected = true;
    }

    return result();
}
