Commit e98b3ae01be301a77083348d590677906325b16f
1 parent
ed225143
Added documentation to support vbaparser.reveal()
Showing
1 changed file
with
11 additions
and
1 deletions
oletools/doc/olevba.md
| ... | ... | @@ -323,6 +323,16 @@ Example: |
| 323 | 323 | |
| 324 | 324 | Alternatively, the VBA_Parser method **extract_all_macros** returns the same results as a list of tuples. |
| 325 | 325 | |
| 326 | +### Extract Experimental Deobfuscated VBA Macro Source Code | |
| 327 | + | |
| 328 | +The method **reveal** extracts, decompresses, and deofuscates VBA source code into a single string. | |
| 329 | + | |
| 330 | +Example: | |
| 331 | + | |
| 332 | + :::python | |
| 333 | + print vbaparser.reveal() | |
| 334 | + | |
| 335 | + | |
| 326 | 336 | ### Analyze VBA Source Code |
| 327 | 337 | |
| 328 | 338 | Since version 0.40, the VBA_Parser class provides simpler methods than VBA_Scanner to analyze all macros contained |
| ... | ... | @@ -498,4 +508,4 @@ python-oletools documentation |
| 498 | 508 | - [[oletimes]] |
| 499 | 509 | - [[olevba]] |
| 500 | 510 | - [[pyxswf]] |
| 501 | - - [[rtfobj]] | |
| 502 | 511 | \ No newline at end of file |
| 512 | + - [[rtfobj]] | ... | ... |