INNER CODE UNIT · Python

IdaUnicornEmulator

gendigitalinc/ioc · AuraStealer/extras/aurastealer_decrypt_strings.py:32

class IdaUnicornEmulator:
    def __init__(self):
        self.uc = None
        self.is_64bit = ida_ida.inf_is_64bit()
        self.arch = UC_ARCH_X86
        self.mode = UC_MODE_64 if self.is_64bit else UC_MODE_32

        if self.is_64bit:
            self.reg_ip = UC_X86_REG_RIP
            self.reg_sp = UC_X86_REG_RSP
        else:
            self.reg_ip = UC_X86_REG_EIP
            self.reg_sp = UC_X86_REG_ESP

        self.mapped_pages = set()
        self.stop_request = False

        self.tick_count = 0

View source record →