@@ -9,7 +9,7 @@ You can also find XLM grammar in [xlm-macro-lark.template](XLMMacroDeobfuscator/
9
9
10
10
# Installing the emulator
11
11
12
- 1 . Install using pip (not recommended)
12
+ 1 . Install using pip
13
13
14
14
```
15
15
pip install XLMMacroDeobfuscator
@@ -84,18 +84,22 @@ default.config file must be a valid json file, such as:
84
84
(______/ (_______/(_______)|/ \___/ |/ (_______)\_______)(_______/|/ \| )_( (_______)|/ \__/
85
85
86
86
87
- XLMMacroDeobfuscator(v0.1.9 ) - https://github.com/DissectMalware/XLMMacroDeobfuscator
87
+ XLMMacroDeobfuscator(v0.2.0 ) - https://github.com/DissectMalware/XLMMacroDeobfuscator
88
88
89
- usage: deobfuscator.py [-h] [-c FILE_PATH] [-f FILE_PATH] [-n] [-x] [-2]
89
+ Error: --file is missing
90
+
91
+ usage: deobfuscator.py [-h] [-c FILE_PATH] [-f FILE_PATH] [-n] [-x]
92
+ [--sort-formulas] [--defined-names] [-2]
90
93
[--with-ms-excel] [-s] [-d DAY]
91
94
[--output-formula-format OUTPUT_FORMULA_FORMAT]
92
- [--no-indent] [--export-json FILE_PATH]
95
+ [--extract-formula-format EXTRACT_FORMULA_FORMAT]
96
+ [--no-indent] [--silent] [--export-json FILE_PATH]
93
97
[--start-point CELL_ADDR] [-p PASSWORD]
94
- [-o OUTPUT_LEVEL]
98
+ [-o OUTPUT_LEVEL] [--timeout N]
95
99
96
100
optional arguments:
97
101
-h, --help show this help message and exit
98
- -c FILE_PATH, --config_file FILE_PATH
102
+ -c FILE_PATH, --config-file FILE_PATH
99
103
Specify a config file (must be a valid JSON file)
100
104
-f FILE_PATH, --file FILE_PATH
101
105
The path of a XLSM file
@@ -114,9 +118,10 @@ optional arguments:
114
118
Specify the format for output formulas ([[CELL-ADDR]],
115
119
[[INT-FORMULA]], and [[STATUS]]
116
120
--extract-formula-format EXTRACT_FORMULA_FORMAT
117
- Specify the format for extracted formulas ([[CELL-ADDR]],
118
- [[CELL-FORMULA]], and [[CELL-VALUE]]
121
+ Specify the format for extracted formulas ([[CELL-
122
+ ADDR]], [[CELL-FORMULA]], and [[CELL-VALUE]]
119
123
--no-indent Do not show indent before formulas
124
+ --silent Do not print output
120
125
--export-json FILE_PATH
121
126
Export the output to JSON
122
127
--start-point CELL_ADDR
@@ -166,6 +171,7 @@ XLMMacroDeofuscator is adopted in the following projects:
166
171
* [ REMNUX] ( https://remnux.org/ )
167
172
* [ IntelOwl] ( https://github.com/intelowlproject/IntelOwl )
168
173
* [ Assemblyline 4] ( https://cybercentrecanada.github.io/assemblyline4_docs/ ) by Canadian Centre for Cyber Security
174
+ * [ oletools] ( https://github.com/decalage2/oletools ) by [ @decalage2 ] ( https://twitter.com/decalage2 )
169
175
170
176
Please contact me if you incorporated XLMMacroDeofuscator in your project.
171
177
0 commit comments