On Sat, 28 Apr 2012, Yegor Kozlov wrote:
All I can suggest is to study the spec and write a decoder of VBA. I recall that macro code is compressed but it is not PKZIP but some other compression algorithm.
I think it might well be a tweaked LZW. We already have two LZW implementations handled in POI, as some formats use the flag bit one way, some the other... See org.apache.poi.util.LZWDecompresser. You may need some trial + error and/or looking at hex dumps with known text to work out what the options used for VBA are.
Nick --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
