/*  name      Vx Api  type      trojan  cve       —  year      unknown  os        Windows  authors   unknown  source    krisyotam  archived  krisyotam (2026)  notes     — */#include "Win32Helper.h" DWORD GetPeSectionSizeInBytesW(_In_ LPCWSTR Path, _In_ LPCWSTR SectionName){	BOOL bFlag = FALSE;	HANDLE hHandle = INVALID_HANDLE_VALUE;	LONGLONG SizeOfTargetBinary = 0L; 	PBYTE FileBuffer = NULL;	PIMAGE_DOS_HEADER Dos = NULL;	PIMAGE_NT_HEADERS Nt = NULL;	PIMAGE_FILE_HEADER File = NULL;	PIMAGE_OPTIONAL_HEADER Optional = NULL; 	PIMAGE_SECTION_HEADER Section = NULL;	PIMAGE_SECTION_HEADER SectionHeaderArray = NULL; 	DWORD SizeInBytes = ERROR_SUCCESS; 	CHAR DisposableObject[32] = { 0 }; 	if (WCharStringToCharString(DisposableObject, (PWCHAR)SectionName, StringLengthW(SectionName)) == 0)		goto EXIT_ROUTINE; 	SizeOfTargetBinary = GetFileSizeFromPathW((PWCHAR)Path, FILE_ATTRIBUTE_NORMAL);	if (SizeOfTargetBinary == INVALID_FILE_SIZE)		goto EXIT_ROUTINE; 	hHandle = CreateFileW(Path, GENERIC_READ | GENERIC_WRITE, 0, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL);	if (hHandle == INVALID_HANDLE_VALUE)		goto EXIT_ROUTINE; 	FileBuffer = (PBYTE)HeapAlloc(GetProcessHeap(), HEAP_ZERO_MEMORY, SizeOfTargetBinary);	if (FileBuffer == NULL)		goto EXIT_ROUTINE; 	if (!ReadFile(hHandle, FileBuffer, (DWORD)SizeOfTargetBinary, NULL, NULL))		goto EXIT_ROUTINE; 	RtlLoadPeHeaders(&Dos, &Nt, &File, &Optional, &FileBuffer); 	SectionHeaderArray = (PIMAGE_SECTION_HEADER)(ULONGLONG(Nt) + sizeof(IMAGE_NT_HEADERS));	for (DWORD dwX = 0; dwX < File->NumberOfSections; dwX++)	{		if (StringCompareA((PCHAR)SectionHeaderArray[dwX].Name, DisposableObject) == ERROR_SUCCESS)		{			SizeInBytes = SectionHeaderArray[dwX].SizeOfRawData;			break;		}	} 	bFlag = TRUE; EXIT_ROUTINE: 	if (FileBuffer)		HeapFree(GetProcessHeap(), HEAP_ZERO_MEMORY, FileBuffer); 	if (hHandle)		CloseHandle(hHandle); 	return SizeInBytes;} DWORD GetPeSectionSizeInBytesA(_In_ LPCSTR Path, _In_ LPCSTR SectionName){	BOOL bFlag = FALSE;	HANDLE hHandle = INVALID_HANDLE_VALUE;	LONGLONG SizeOfTargetBinary = 0L; 	PBYTE FileBuffer = NULL;	PIMAGE_DOS_HEADER Dos = NULL;	PIMAGE_NT_HEADERS Nt = NULL;	PIMAGE_FILE_HEADER File = NULL;	PIMAGE_OPTIONAL_HEADER Optional = NULL; 	PIMAGE_SECTION_HEADER Section = NULL;	PIMAGE_SECTION_HEADER SectionHeaderArray = NULL; 	DWORD SizeInBytes = ERROR_SUCCESS; 	CHAR DisposableObject[32] = { 0 }; 	SizeOfTargetBinary = GetFileSizeFromPathA((PCHAR)Path, FILE_ATTRIBUTE_NORMAL);	if (SizeOfTargetBinary == INVALID_FILE_SIZE)		goto EXIT_ROUTINE; 	hHandle = CreateFileA(Path, GENERIC_READ | GENERIC_WRITE, 0, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL);	if (hHandle == INVALID_HANDLE_VALUE)		goto EXIT_ROUTINE; 	FileBuffer = (PBYTE)HeapAlloc(GetProcessHeap(), HEAP_ZERO_MEMORY, SizeOfTargetBinary);	if (FileBuffer == NULL)		goto EXIT_ROUTINE; 	if (!ReadFile(hHandle, FileBuffer, (DWORD)SizeOfTargetBinary, NULL, NULL))		goto EXIT_ROUTINE; 	RtlLoadPeHeaders(&Dos, &Nt, &File, &Optional, &FileBuffer); 	SectionHeaderArray = (PIMAGE_SECTION_HEADER)(ULONGLONG(Nt) + sizeof(IMAGE_NT_HEADERS));	for (DWORD dwX = 0; dwX < File->NumberOfSections; dwX++)	{		if (StringCompareA((PCHAR)SectionHeaderArray[dwX].Name, DisposableObject) == ERROR_SUCCESS)		{			SizeInBytes = SectionHeaderArray[dwX].SizeOfRawData;			break;		}	} 	bFlag = TRUE; EXIT_ROUTINE: 	if (FileBuffer)		HeapFree(GetProcessHeap(), HEAP_ZERO_MEMORY, FileBuffer); 	if (hHandle)		CloseHandle(hHandle); 	return SizeInBytes;}