Peter M. Groen / oletools

Commit e98b3ae01be301a77083348d590677906325b16f

Authored by Aaron McPhall
1 parent ed225143

Added documentation to support vbaparser.reveal()

Inline Side-by-side
Showing 1 changed file with 11 additions and 1 deletions
oletools/doc/olevba.md
  View file @e98b3ae
@@ -323,6 +323,16 @@ Example: @@ -323,6 +323,16 @@ Example:
323 323
324 Alternatively, the VBA_Parser method **extract_all_macros** returns the same results as a list of tuples. 324 Alternatively, the VBA_Parser method **extract_all_macros** returns the same results as a list of tuples.
325 325
  326 +### Extract Experimental Deobfuscated VBA Macro Source Code
  327 +
  328 +The method **reveal** extracts, decompresses, and deofuscates VBA source code into a single string.
  329 +
  330 +Example:
  331 +
  332 + :::python
  333 + print vbaparser.reveal()
  334 +
  335 +
326 ### Analyze VBA Source Code 336 ### Analyze VBA Source Code
327 337
328 Since version 0.40, the VBA_Parser class provides simpler methods than VBA_Scanner to analyze all macros contained 338 Since version 0.40, the VBA_Parser class provides simpler methods than VBA_Scanner to analyze all macros contained
@@ -498,4 +508,4 @@ python-oletools documentation @@ -498,4 +508,4 @@ python-oletools documentation
498 - [[oletimes]] 508 - [[oletimes]]
499 - [[olevba]] 509 - [[olevba]]
500 - [[pyxswf]] 510 - [[pyxswf]]
501 - - [[rtfobj]]  
502 \ No newline at end of file 511 \ No newline at end of file
  512 + - [[rtfobj]]