From b89eff37c89d20bd63d9e1dde26558a035c98277 Mon Sep 17 00:00:00 2001 From: "Mr. eXoDia" Date: Sun, 1 Jun 2014 04:13:49 +0200 Subject: [PATCH] fixed a bug in WipeSection --- TitanEngine/TitanEngine.PE.Section.cpp | 3 +++ 1 file changed, 3 insertions(+) diff --git a/TitanEngine/TitanEngine.PE.Section.cpp b/TitanEngine/TitanEngine.PE.Section.cpp index 6844acf..efe8035 100644 --- a/TitanEngine/TitanEngine.PE.Section.cpp +++ b/TitanEngine/TitanEngine.PE.Section.cpp @@ -1340,6 +1340,9 @@ __declspec(dllexport) bool TITCALL WipeSectionW(wchar_t* szFileName, int WipeSec DOSHeader = (PIMAGE_DOS_HEADER)FileMapVA; if(EngineValidateHeader(FileMapVA, FileHandle, NULL, DOSHeader, true)) { + ULONG_PTR WipeRawSize=GetPE32DataFromMappedFile(FileMapVA, SectionNumber, UE_SECTIONRAWSIZE); + if(!WipeRawSize) + RemovePhysically = false; PEHeader32 = (PIMAGE_NT_HEADERS32)((ULONG_PTR)DOSHeader + DOSHeader->e_lfanew); PEHeader64 = (PIMAGE_NT_HEADERS64)((ULONG_PTR)DOSHeader + DOSHeader->e_lfanew); if(PEHeader32->OptionalHeader.Magic == 0x10B)