IDA Pro 7.0 error when hitting F5 key during analysis

[deepzero]

can you share the file?

[Stingered]

Originally Posted by deepzero

can you share the file?

D/L HERE

[computerline]

Originally Posted by Stingered

D/L HERE

.text:0000000140507E60                             ;   try {
.text:0000000140507E60 18                                          db  18h
.text:0000000140507E61 B9                                          db 0B9h ; ¹
.text:0000000140507E62 04                                          db    4
.text:0000000140507E63 00                                          db    0
.text:0000000140507E64 0F                                          db  0Fh                 ; CODE XREF: sub_140507780+6BA↑j
.text:0000000140507E64                                                                     ; sub_140507780+6C4↑j ...
.text:0000000140507E64                             ;   } // starts at 140507E60
.text:0000000140507E65                             ; ---------------------------------------------------------------------------
.text:0000000140507E65 0B 90 90 90 90 90                           or      edx, [rax-6F6F6F70h]
.text:0000000140507E65
.text:0000000140507E65                             ; ---------------------------------------------------------------------------
.text:0000000140507E6B 90                                          db  90h
.text:0000000140507E6C 90                                          db  90h
.text:0000000140507E6D 90                                          db  90h
.text:0000000140507E6E 90                                          db  90h

IDA 7.0 Analysis loop at address 0x140507E65, don't known why, but seem it IDA bug, or there some anti analysis in the binary, I see many nop, maybe it make IDA analysis confuse.

Anyway, you could stop the analysis by click the yellow cycle on top toolbar and continue your work.

I tried IDA 6.8 and doen't got problem.

[Stingered]

Originally Posted by Stingered

D/L HERE

Originally Posted by computerline

.text:0000000140507E60                             ;   try {
.text:0000000140507E60 18                                          db  18h
.text:0000000140507E61 B9                                          db 0B9h ; ¹
.text:0000000140507E62 04                                          db    4
.text:0000000140507E63 00                                          db    0
.text:0000000140507E64 0F                                          db  0Fh                 ; CODE XREF: sub_140507780+6BA↑j
.text:0000000140507E64                                                                     ; sub_140507780+6C4↑j ...
.text:0000000140507E64                             ;   } // starts at 140507E60
.text:0000000140507E65                             ; ---------------------------------------------------------------------------
.text:0000000140507E65 0B 90 90 90 90 90                           or      edx, [rax-6F6F6F70h]
.text:0000000140507E65
.text:0000000140507E65                             ; ---------------------------------------------------------------------------
.text:0000000140507E6B 90                                          db  90h
.text:0000000140507E6C 90                                          db  90h
.text:0000000140507E6D 90                                          db  90h
.text:0000000140507E6E 90                                          db  90h

IDA Analysis loop at address 0x140507E65, don't known why, but seem it IDA bug, or there some anti analysis in the binary, I see many nop, maybe it make IDA analysis confuse.

Anyway, you could stop the analysis by click the yellow cycle on top toolbar and continue your work.

Thanks for review! I think it may be a bug and why I posted. Unfortunately, I don't have later release of IDA, but yes I can pause the analysis and go from there.