DissectMalware / XLMMacroDeobfuscator

Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)
Apache License 2.0
568 stars 116 forks source link

New version #71

Closed DissectMalware closed 3 years ago

DissectMalware commented 3 years ago

Several handlers for functions including DEFINE.NAME, ROWS, INDEX, QUOTIENT are added Many bugs are fixed evaluate_defined_name is added. A defined name can be a string, parse tree, cell, or cell address.