Hey @
BARUROT could you explain how with an HEX editor you will READ an encrypted file? (he is asking on how to read not on how to see the content of an encrypted file)
.xls (EXCEL)? I thought tantra files were .xml (Extensible Markup Language)
HTScript.sys -> From TantraParam.xls (wrong answer), it is from TantraParamExp.xml (which is almost the same as TantraParam, with the exception that it includes the Titles Tab which TantraParam don't have)
@
iElyrb: I will give you and idea of what i did to read the content of some of the files you mentioned:
It is well known that the client needs to decrypt those files in order to be able to use them, so attach a debugger to the client and make a breakpoint when the file is open for read, when that happens client will allocate mem and store the encripted bytes, so put a mem on access breakpoint on that allocated memory, and when the client starts to decrypt it you will see in which mem address the decrypted bytes are allocated, then when client finish to decrypt, just dump that mem sector and thats all.