cool

 

thanks

 

Update build https://mega.nz/#!AF9HRRDQ!QNtLjgC_FrrYokgxc6NIiraO8UPI-A7GhBTqBl4quSc

 

We need support for IDA version 7.0 Fentanyl + Keystone it's an excellent combination...

 

wwcd for ida7.0, hope it will be useful

 

Thanks !!!

 

Code (Text):

C:\Program Files\IDA 7.0\plugins\fentanyl.py: 'module' object has no attribute 'GetIdaDirectory'
Traceback (most recent call last):
  File "C:\Program Files\IDA 7.0\python\ida_idaapi.py", line 553, in IDAPython_ExecScript
    execfile(script, g)
  File "C:/Program Files/IDA 7.0/plugins/fentanyl.py", line 180, in <module>
    icons_path = os.path.join(idc.GetIdaDirectory(), 'plugins', 'FentanylCore', 'icons')
AttributeError: 'module' object has no attribute 'GetIdaDirectory'

Var Sistem, I have this defined...
IDADIR = C:\Program Files\IDA 7.0
No reference "GetIdaDirectory" in: IDA 7.0 SDK: Porting from IDA 4.9-6.x API to IDA 7.0 API

any ideas?

 

idc.GetIdaDirectory could be replace by idaapi.idadir(None)

https://transfer.sh/T7plt/fentanyl_ida7_plugins.7z

You could try my minor fixup

 

Computerline, as always, you did an excellent job

Something strange happens, I had this error



In: FentanylCore/AssembleForm.py """ Initialize form elements """ line: 246 It says

Code (Text):

        self.ui_cntls = {
            'inp':idaapi.Form.MultiLineTextControl('', idaapi.textctrl_info_t.TXTF_FIXEDFONT),
            #'inp': idaapi.Form.StringInput(tp=None, width=1024, swidth=40, hlp=None, value='', size=None),
            'opt_chk':idaapi.Form.ChkGroupControl(('fixup', 'nopout')),
            'form_cb':idaapi.Form.FormChangeCb(self._form_cb),
        }
        self.ui_form = idaapi.Form("""STARTITEM {id:inp}

I had to make the next change

Code (Text):

        self.ui_cntls = {
            'inp':ida_kernwin.Form.MultiLineTextControl('', ida_kernwin.textctrl_info_t.TXTF_FIXEDFONT),
            #'inp': idaapi.Form.StringInput(tp=None, width=1024, swidth=40, hlp=None, value='', size=None),
            'opt_chk':ida_kernwin.Form.ChkGroupControl(('fixup', 'nopout')),
            'form_cb':ida_kernwin.Form.FormChangeCb(self._form_cb),
        }
        self.ui_form = ida_kernwin.Form("""STARTITEM {id:inp}

This is a Temporary Solution...

Strangely IDA 7.0 does not address well the API "idaapi" and I had to point directly to "ida_kernwin"

Any idea why this happens?

 

Yes !
They have split up idaapi to mutible modules, where idaa_kernwin is the main module in ida 7.+

 

Fentanyl for IDA 7.+ Updated Libraries in Fentanyl.py and FentanylCore/*.py

 

Do you mind sharing the source for your plugins so I can builld them on OS X ?

 

the code is in pyhton, so it is open source.

 

Yes, because the license changed by wwcd so I don't upload source with the binary, the code only craft, so it buggy, help it will be usefull.

wwcd2: https://drive.google.com/uc?id=1clTteyumMJAh9cH40y0FQglEuMhG7iyk&export=download
zydecode : https://drive.google.com/uc?id=14U8WY13UpBJ9Ru2kZEKGgEvZMEza75Rw&export=download

I'm try to update zydecode to the lastest zydis version, but their change allot, I couldn't build the binary, so I used the stable version.
wwcd2 use capstone, today their release v4.0, so that better to update.

And I don't known though I rename the action in source, but wwcd2 and zydecode can't work to gether

 

Thx, now I don't have to port it myself.

 

Update wwcd2 + capstone 4

 

cmp rcx,rax and mov rax,rcx

Assembler failed

What x64 support ?

 

I't not support x64, but you could try keypatch