// Detect It Easy: detection rule file format

init("protector", "KGCrypt");

function detect(bShowType, bShowVersion, bShowOptions) {
    if (PE.compareEP("E8........5D81ED........64A1........84C074..64A1........0BC074")) {
        bDetected = true;
    }

    return result(bShowType, bShowVersion, bShowOptions);
}