Break infinite loops by limiting the # of iterations of a while loop.

README.md

@@ -147,6 +147,15 @@ xlmdeobfuscator can be executed on any OS to extract and deobfuscate macros in x
 Note: if you want to use MS Excel (on Windows), you need to install pywin32 library and use --with-ms-excel switch.
 If --with-ms-excel is used, xlmdeobfuscator, first, attempts to load xls files with MS Excel, if it fails it uses [xlrd2 library](https://github.com/DissectMalware/xlrd2).
 
+# Project Using XLMMacroDeofuscator
+XLMMacroDeofuscator is adopted in the following projects:
+* [CAPE Sandbox](https://github.com/ctxis/CAPE)
+* [FAME](https://certsocietegenerale.github.io/fame/)
+* [REMNUX](https://remnux.org/)
+* [IntlOwl](https://github.com/certego/IntelOwl)
+
+Please contact me if you incorporated XLMMacroDeofuscator in your project.
+
 # How to Contribute
 If you found a bug or would like to suggest an improvement, please create a new issue on the [issues page](https://github.com/DissectMalware/XLMMacroDeobfuscator/issues).
 

XLMMacroDeobfuscator/boundsheet.py

@@ -12,11 +12,19 @@ def __init__(self):
         self.formula = None
         self.value = None
         self.attributes = {}
+        self.times_visited = 0
+        self.emulated = False
 
     def get_attribute(self, attribute_name):
         # return default value if attributes doesn't cointain the attribute_name
         pass
 
+    def visit(self):
+        self.times_visited += 1
+
+    def visited_too_many_times(self):
+        return (self.times_visited > 1000)
+
     def __deepcopy__(self, memodict={}):
         copy = type(self)()
         memodict[id(self)] = copy
@@ -26,6 +34,7 @@ def __deepcopy__(self, memodict={}):
         copy.formula = self.formula
         copy.value = self.value
         copy.attributes = self.attributes
+        copy.emulated = self.emulated
         return copy
 
     def get_local_address(self):
@@ -34,6 +43,21 @@ def get_local_address(self):
     def __str__(self):
         return "'{}'!{}".format(self.sheet.name,self.get_local_address())
 
+    def debug(self):
+        """
+        Return a string with full details about the cell.
+        """
+        r = ""
+        r += "Address:\t" + str(self) + "\n"
+        r += "Sheet:\t\t" + str(self.sheet) + "\n"
+        r += "Column:\t\t" + str(self.column) + "\n"
+        r += "Row:\t\t" + str(self.row) + "\n"
+        r += "Formula:\t" + str(self.formula) + "\n"
+        r += "Value:\t\t" + str(self.value) + "\n"
+        r += "Attributes:\t" + str(self.attributes) + "\n"
+        r += "Emulated:\t" + str(self.emulated) + "\n"
+        return r
+
     @staticmethod
     def convert_to_column_index(s):
         number = 0