IDA install keystone

Install on windows

1. 下载keystone-engine（http://www.keystone-engine.org/download/）这个msi文件安装‘
2. keypatch.py复制到IDA 安装目录的plugins

Note

1. 遇到keystone安装不成功问题

   keypatch.py: name 'KS_ARCH_X86' is not defined
   Traceback (most recent call last):
     File "C:\Program Files (x86)\IDA 6.95\python\ida_idaapi.py", line 509, in IDAPython_ExecScript execfile(script, g)
     File "C:/Program Files (x86)/IDA 6.95/plugins/keypatch.py", line 111, in <module> class Keypatch_Asm:
     File "C:/Program Files (x86)/IDA 6.95/plugins/keypatch.py", line 114, in Keypatch_Asm
   "X86 16-bit": (KS_ARCH_X86, KS_MODE_16),                # X86 16-bit NameError: name 'KS_ARCH_X86' is not defined
   

   我按照网上教程，用python安装完keystone后，就把keystone放到IDA 7.0\python目录，ida启动时老是报这个问题，后来通过下载keystone-engine msi进行安装，并删掉原有keystone文件夹后解决，巨坑！）

参考

1. https://www.keystone-engine.org/download/
2. https://github.com/keystone-engine/keypatch