Detect-It-Easy/db/MSDOS/protector_CryExe.2.sg

// Detect It Easy: detection rule file
// Author: horsicq <horsicq@gmail.com>

meta("protector", "CryExe");

function detect() {
    if (MSDOS.compareEP("E9$$$$E9$$$$E9$$$$BB....E8$$$$31EDEB$$8EDDEB$$872FE8$$$$E8$$$$55E9$$$$E9$$$$31C0EB$$EB$$E8")) {
        sVersion = "4.0";
        bDetected = true;
    }

    return result();
}