In this tutorial, i will show you how to install Keypatch plugin for IDA 6.8.
First, you need download 4 files : Windows - Core engine, Python module for Windows - Binaries , Visual C++ Redistributable Packages for Visual Studio 2013 (32bit or 64bit depend on your OS architecture) and Keypatch
Step 1. Install Visual C++ Redistributable Packages for Visual Studio 2013 and Python module for Windows - Binaries
Step 2. Extract Windows- Core engine and Keypatch files, you will see keystone.dll file in keystone-0.9.1-win32 folder and keypatch.py in Keypatch folder.
Step 3. Copy keystone.dll to C:\Python27\Lib\site-packages\keystone
Step 4. Copy keypatch.py to your IDA plugins directory (ex: C:\Program Files\IDA 6.8\plugins on my PC)
Step 5. Restart IDA. Done.
the first step is incorrect: you need Keystone Python module 32bit, even if your Windows is 64bit. the reason is that IDAPro uses Python 32bit, even on Win64. So for Keystone 0.9.1, you need to install https://github.com/keystone-engine/keystone/releases/download/0.9.1/keystone-0.9.1-python-win32.msi
ReplyDelete