View Single Post
  #6  
Old 01-18-2019, 11:40
computerline computerline is offline
Friend
 
Join Date: Jun 2014
Posts: 81
Rept. Given: 39
Rept. Rcvd 28 Times in 12 Posts
Thanks Given: 124
Thanks Rcvd at 125 Times in 50 Posts
computerline Reputation: 28
Quote:
Originally Posted by Stingered View Post
D/L HERE
Code:
.text:0000000140507E60                             ;   try {
.text:0000000140507E60 18                                          db  18h
.text:0000000140507E61 B9                                          db 0B9h ; ¹
.text:0000000140507E62 04                                          db    4
.text:0000000140507E63 00                                          db    0
.text:0000000140507E64 0F                                          db  0Fh                 ; CODE XREF: sub_140507780+6BA↑j
.text:0000000140507E64                                                                     ; sub_140507780+6C4↑j ...
.text:0000000140507E64                             ;   } // starts at 140507E60
.text:0000000140507E65                             ; ---------------------------------------------------------------------------
.text:0000000140507E65 0B 90 90 90 90 90                           or      edx, [rax-6F6F6F70h]
.text:0000000140507E65
.text:0000000140507E65                             ; ---------------------------------------------------------------------------
.text:0000000140507E6B 90                                          db  90h
.text:0000000140507E6C 90                                          db  90h
.text:0000000140507E6D 90                                          db  90h
.text:0000000140507E6E 90                                          db  90h
IDA 7.0 Analysis loop at address 0x140507E65, don't known why, but seem it IDA bug, or there some anti analysis in the binary, I see many nop, maybe it make IDA analysis confuse.

Anyway, you could stop the analysis by click the yellow cycle on top toolbar and continue your work.

I tried IDA 6.8 and doen't got problem.

Last edited by computerline; 01-18-2019 at 11:50.
Reply With Quote
The Following 3 Users Say Thank You to computerline For This Useful Post:
kienmanowar (01-18-2019), Stingered (01-18-2019), tonyweb (01-18-2019)