This isn't 100% accurate, it's just a concept of thought I guess. What I was originally attempting to do was a sort of skiddy attempt at a malicious software detector and in the process I figured that I can use this to detect compressed executables. Thanks to Trancexx for the function that I took from a script called to get the information I needed, like section names and imported functions so I can do a check on them an flag the file depending on certain imported functions found together. I'