INNER CODE UNIT · Python

REG_BLOCK_SIZE

gendigitalinc/ioc · AuraStealer/extras/aurastealer_decrypt_strings.py:28

REG_BLOCK_SIZE = 1 * 1024 * 1024
HEAP_BASE = 0x60000000
# --------------------------------------------------------------------------------------------------------

class IdaUnicornEmulator:
    def __init__(self):
        self.uc = None
        self.is_64bit = ida_ida.inf_is_64bit()
        self.arch = UC_ARCH_X86
        self.mode = UC_MODE_64 if self.is_64bit else UC_MODE_32

        if self.is_64bit:
            self.reg_ip = UC_X86_REG_RIP
            self.reg_sp = UC_X86_REG_RSP
        else:
            self.reg_ip = UC_X86_REG_EIP
            self.reg_sp = UC_X86_REG_ESP

View source record →

📰 Research Paper
Loading…
⏳ Fetching content…