// Detect It Easy: detection rule file format

init("protector", "PE Ninja");

function detect(bShowType, bShowVersion, bShowOptions) {
    if (PE.compareEP("5D8BC581ED........2B85........2D710200008985........0FB6B5........8BFD")) {
        sOptions = "modified";
        bDetected = true;
    }

    return result(bShowType, bShowVersion, bShowOptions);
}