basicDaveDev

FreeSpaceOffset is 0

1

At the file ``` Eventlogedit-evtx--Evolution/DeleteRecordofFile.cpp``` ``` unsigned char *ChecksumBuf1 = new unsigned char[currentChunk->FreeSpaceOffset - 512]; memcpy(ChecksumBuf1, (PBYTE)currentChunk + 512, currentChunk->FreeSpaceOffset - 512); crc32 = GetCRC32(ChecksumBuf1, currentChunk->FreeSpaceOffset - 512); ``` In...