xlrd2 icon indicating copy to clipboard operation
xlrd2 copied to clipboard

Defined name value type

Open DissectMalware opened this issue 4 years ago • 2 comments

Defined name can reference to a cell, int, float, string and array

Currently, xlrd2 cannot parse array value type

f9adf499bc16bfd096e00bc59c3233f022dec20c20440100d56e58610e4aded3

Name:

SbhipD

Value:

b'`\x00\x11\x00\x00\x00\x00\x00\x00\x11\x00\x02\x18\x00\x00PcWs3NqZ8mTrRlTgf23I>K:O\x02\x1f\x00\x00HVo^2gXn7vZ_l]ZaV_1P?6_=CP<E:R;\x02\x1b\x00\x00JjX^HZ_]Mb\\sU]pT]NG??J35QEK\x02\x1b\x00\x00FhYaIQOtAqXqV`qKMe;KBH48R<=\x02\x1e\x00\x00]\\h]GRRu8aoee\\oLPf2;S<XAO;6LCB\x02\x06\x00\x00]ai`G4\x02\x17\x00\x00JxKSt;hXv36L,:PMJ9Y;>C3\x02\x06\x00\x00Gnbq1H\x02"\x00\x00HVo^2HeK@SNEN\\;WE]AH5>Q::PCX:H6>RB\x02\x1e\x00\x00z]5]C{`"(|}|c1k-tp}Ny%*)n/!"},\x02\n\x00\x00x]VbJq3>T3\x02]\x00\x00GdX`RmP;oKWe;<byU%y,6@5W&A1_R@AcK@+Z-3s;@XVR/AF/G\\;VL]AE-HC0\\QJJLW1/\\,0rDQ:bC3CE,FeK@TNEG,)B<\x02\x1f\x00\x00WMdQVoO8nTgNG-`%rs2W<57z\'9nqpUC\x02\x1b\x00\x00FcPSjXONa[Vd3/iUUs\'guA7>Y?3\x02\x00\x00\x00\x02\x1a\x00\x00]W_OhYROXKmXB+4xXxtLlX<5O4\x02\x17\x00\x00JeOPia_7mLZf2,n&g{8-9Q3\x02\x0f\x00\x00G,+/"*Xy$K^w%B2'

image

Name: YZJvX

Value:

image

image

DissectMalware avatar Jan 20 '21 02:01 DissectMalware

60H (96) is an array

image

rgVal (data) starts at index 11

image

can be double or unicode string

image

image

image

DissectMalware avatar Jan 20 '21 08:01 DissectMalware

Code: https://github.com/DissectMalware/xlrd2/blob/1900ebd5f99d113648ac3f42a3ea5495faf0d1c9/xlrd2/formula.py#L1546

DissectMalware avatar Jan 20 '21 09:01 DissectMalware