Hacking ALBW ActorCommon.szs extracted

[Antidote]

I managed to get my hands on ALBW's ActorCommon.szs and was able to reverse the format (though the SFNT section is mysteriously empty) and with that:

SUCCESS!
If anyone is interested in the code just ask, I'd like to get more archives so I can start learning about the model format and create a viewer, but unfortunately I don't have access to them.

 

[Ericthegreat]

Seems interesting, what is it exactly?

 

[Antidote]

Judging by the data, most likely models.

 

[Gh0sti]

so the beginnings of rom hacking and injecting custom made models?

 

[Antidote]

Unlikely, unless the keys get dumped, or GW has support for decrypted ROMS it's not going to happen.

EDIT:
And even if GW had support for decrypted ROMS, it would still require the keys be dumped.

At this point it's more of a curiosity, however it's still fun to poke around and try and figure out the model formats, just look at what happened with OoT3D

 

[Kaphotics]

BCH's are just models. Smea has a conversion script called "bch2obj.py" and "bch2png.py" if you use it correctly with BCH files...

Here's what a converted BCH can look like:

bonus: http://i.imgur.com/Zv9EFrd.png

 

[Antidote]

NICE, thanks a bunch

EDIT:
It seems ALBW has a slightly different format, will need to take a look.

 

[PokeChampion]

So Kaphotics. You could inject your own created Pokemon into an X or Y ROM by using that particular program?

 

[NCDyson]

fascinating. how did you get ahold of it?

 

[PokeChampion]

Taking Smealum's work of hacking. I believe. But differently. To be considering so

 

[Bond697]

So Kaphotics. You could inject your own created Pokemon into an X or Y ROM by using that particular program?

no, myself and slashmolder figured out rom decryption. he just opened one of the models ripped from one of the garcs and posted a picture.

 

[The Real Jdbye]

I managed to get my hands on ALBW's ActorCommon.szs and was able to reverse the format (though the SFNT section is mysteriously empty) and with that:

SUCCESS!
If anyone is interested in the code just ask, I'd like to get more archives so I can start learning about the model format and create a viewer, but unfortunately I don't have access to them.

How did you do that? Would love to be able to rip the soundtrack from games.

 

[Slashmolder]

Might as well just post the code to extract szs.

 

[PokeChampion]

Hey Slashmolder! So you could do exactly what Smealum did as well?

 

[mathieulh]

Unlikely, unless the keys get dumped, or GW has support for decrypted ROMS it's not going to happen.

EDIT:
And even if GW had support for decrypted ROMS, it would still require the keys be dumped.

At this point it's more of a curiosity, however it's still fun to poke around and try and figure out the model formats, just look at what happened with OoT3D

You don't dump the keys, you decrypt the rom on the 3DS.

 

[PokeChampion]

Maybe you could put the created Pokemon that you made onto an X or Y ROM in the the cartridge or on the 3DS.

 

[Huntereb]

Can't wait to start editing games like we did on the Wii! This is great actual news!

 

[Antidote]

You don't dump the keys, you decrypt the rom on the 3DS.

I'm going to be blunt, you're clueless as to how this works, yes you can use the 3DS' built in AES engine to decrypt the ROM, however that's not useful to the average person when they don't have the know-how nor the equipment. Ultimately the key for decrypting payloads/ROMS WILL HAVE TO BE DUMPED, in order for it to be useful.

 

[Coto]

I'm going to be blunt, you're clueless as to how this works, yes you can use the 3DS' built in AES engine to decrypt the ROM, however that's not useful to the average person when they don't have the know-how nor the equipment. Ultimately the key for decrypting payloads/ROMS WILL HAVE TO BE DUMPED, in order for it to be useful.

but if the rom was encrypted with old keys it's possible to use flawed ones to get it decrypted.

 

[Thirty3Three]

I'm going to be blunt, you're clueless as to how this works, yes you can use the 3DS' built in AES engine to decrypt the ROM, however that's not useful to the average person when they don't have the know-how nor the equipment. Ultimately the key for decrypting payloads/ROMS WILL HAVE TO BE DUMPED, in order for it to be useful.

He has the same name as a well-known hacker. Just saying. Not saying you're wrong but... if he's the same dude...