// Detect It Easy: detection rule file format
// Author: hypn0 <hypn0@mail.ru>

init("protector", "VBox");

function detect(bShowType, bShowVersion, bShowOptions) {
    if (PE.compareEP("ff7424..ff7424..ff7424..68........68........68........68........ff15........68........ffd0c2")) {
        if (PE.isLibraryPresent("vboxp410.dll")) {
            sVersion = "4.10";
        }
        bDetected = true;
    }

    return result(bShowType, bShowVersion, bShowOptions);
}