// Detect It Easy: detection rule file
// Author: hypn0 <hypn0@mail.ru>

init("protector", "Oreans CodeVirtualizer");

function detect() {
    if (PE.compareEP("eb$$e9$$$$$$$$e9$$$$$$$$565053e8$$$$$$$$584889c348ffc0482d........482d........4805........803b..75..c603..bb........68........68........5350e8")) {
        bDetected = true;
    } else if (PE.isSectionNamePresent(".vlizer")) {
        bDetected = true;
    }

    return result();
}