Hacking Hacking Super Mario RPG VC wad

ShadowSonic

New Member
OP
Newbie
Joined
Sep 30, 2008
Messages
4
Trophies
0
XP
54
Country
United States
This is basically a copy and pasta from another board I posted on but my main point should be implied (i hope)

So in Super Mario RPG for the VC, there are some differences, like Moleville being darker then normal and Flame Wall being transparent/missing colors. I want to know if these are problems with the SNES emulator on the Wii itself or if Nintendo/Square-Enix actually edited the game.

Now here's the ROM part. If you know anything about .WAD files and the Homebrew Channel, it'll be easier to understand.

Ok anyway, so to install a Virtual Console/WiiWare game onto your Wii, they turn the dumps into .WAD files and using a custom WAD installer from your Wii, you can get free VC/WiiWare games. So basically, the .WAD is a game.

Within a .WAD file, you can decrypted it into pieces using a program such as WADTool. They come out as SMRPG NTSC.000.des (with SMRPG NTSC.wad being the .wad file). Ranging from 000 to 007 files from the SMRPG .wad file.

Now within those 00x.des files is the actual 'ROM' version of the game. In this case, its SMRPG NTSC.005.des. It's usually the biggest file out of the group (this being the 2nd largest). When you've extracted the contents the 005.des file, using a program such as U8 Tools, you get a some files, one of which is the rom. When it came out, it came out as LZ77JCBE.rom, which is the ROM. Now I'm not certain if doing this to other games like NES VC games or N64 games actually come out with a playable ROM to use on an emulator, but I know changing LZ77JCBE.rom to something like SMRPG.smc and booting it up in Snes9x/Zsnes won't make it playable.

-Side note- Reading on a forum, I think GBAtemp (thats where I learned how to extract .wad's and etc), someone did say they extracted Sin and Punishment and got the .rom file out and changed it to SP.v64 and it actually did boot up in an emulator. The .rom file extracted out and an actual commercial rom size where the same, if not, almost similar. But in this case of SMRPG, a commercial SMRPG ROM is about 4 MB, while the extracted .rom file is only around 3 MB. My thinking is that they might have shrank/compressed/made it smaller by deleting unused data like taking out blank spaces where it wasn't needed. Or maybe they had to modify the whole thing with it having the SA-1 chip and all.

So how can I tell this LZ77JCBE.rom file is the actual SMRPG "ROM"? Well I loaded it up into a hex editor and, belive it or not, there ARE actual similarities to a commercial ROM. Like if you open up a commercial SMRPG ROM into a hex editor, and load up the LZ77JCBE.rom into a hex editor and put them side by side (having the window sizes the same height/width), you can actually scroll down on both and you can find almost the same data. While the commercial SMRPG rom has actual ASCII readable words viewed in a hex editor, loading up the LZ77JCBE.rom file will show similar results but there's obviously been some kind of compression or some kind of thing. You can spot letters here and there and make out words in your head and whatnot, but its hard to actually edit anything you want.

Things I've tried doing using the LZ77JCBE.rom file:
loading it up in Tile Layer Pro to see possible editable gfx (doesn't work)
loading it up in SNESPal to find Palette color patterns (didn't work)
loading it up as a .smc file in snes9x/zsnes (didn't work)
-
I loaded it up in a hex editor and found the lettering for the Jump text for Mario's special's and simply changed it but I haven't figured out exactly how to put this all back together as a .wad.

Other things I've tried:
injecting a SMRPG rom into a SMRPG.wad file (didn't work)

=-=-=-=-=

So basically in nutshell, I extracted a "ROM" version from the Super Mario RPG Virtual Console .wad file and want to know if anyone would be willing to help me find out how to go about converting it into an bootable ROM in a SNES emulator, or help trying to hack/edit it.

Of course something like this, could be on a whole nother playing field on its own. In which, editors/emulators would have to be modified heavily to make this "ROM" file compadible.

-=-=--=-=-=

Tree List of Files:

SMRPG_NTSC.wad
--->(decrypted using WADTool)
___SMRPG NTSC.000.des
___SMRPG NTSC.001.des
___SMRPG NTSC.002.des
----------->(extracted using U8 Tool)
________wwwlib-rvl.lz7 (unknown)
___SMRPG NTSC.003.des
----------->WiiNTLG-Regular.ttc (font file)
___SMRPG NTSC.004.des
___SMRPG NTSC.005.des
----------->banner.tpl (picture used for Wii Channel)
________home.csv
________home_nosave.csv
________Huf8JCBE.pcm
________JCBE.var
________LZ77emanual.arc (digital manual)
________LZ77JCBE.rom ("ROM")
________Opera.arc (something for Opera Browser?)
___SMRPG NTSC.006.des
___SMRPG NTSC.007.des


If you guys can give me ANY details on what I should know, PLEASE tell me. Like what are some of those file are used for or something like that.
 

Pikachu025

Well-Known Member
Member
Joined
May 3, 2006
Messages
972
Trophies
0
Age
33
Location
Austria
XP
396
Country
Australia
Recently, some VC games (especially N64) are compressed using some LZ compression to save space. I don't know the exact details, but there are tools to decompress/recompress available.
 

sr_corsario

Well-Known Member
Member
Joined
Jun 11, 2008
Messages
424
Trophies
1
Age
44
XP
1,260
Country
gbalzss e original_mario_rpg_game.smc LZ77JCBE.rom

Where:

gbalzss -->the program to decode/encode (d/e)
e --> Encode
original_mario_rpg_game.smc -->game to encode
LZ77JCBE.rom -->the final encode name

Very "easy"

ShadowSonic You did a good explanation (more ore lease...) but that info its "a litle bit" old. There are "some" mod versions of MRPG yet... (any way at least you had a look on the wad file and spent time to report it. More than "usual" for others...)
 

ShadowSonic

New Member
OP
Newbie
Joined
Sep 30, 2008
Messages
4
Trophies
0
XP
54
Country
United States
sr_corsario said:
gbalzss e original_mario_rpg_game.smc LZ77JCBE.rom

Where:

gbalzss -->the program to decode/encode (d/e)
e --> Encode
original_mario_rpg_game.smc -->game to encode
LZ77JCBE.rom -->the final encode name

Very "easy"

ShadowSonic You did a good explanation (more ore lease...) but that info its "a litle bit" old. There are "some" mod versions of MRPG yet... (any way at least you had a look on the wad file and spent time to report it. More than "usual" for others...)

Sorry but, I didn't completely understand what you said.
 

lolsjoel

Well-Known Member
Member
Joined
Nov 19, 2003
Messages
936
Trophies
0
Age
38
Website
www.0RANGECHiCKEN.co.nr
XP
401
Country
United States
Using a command line tool, GBALZSS, you can decompress the LZ77JCBE.rom file to get the actual SMRPG ROM contained inside the WAD. Using that same tool, you can compress the original SNES SMRPG ROM and overwrite the LZ77JCBE.rom in the WAD with the compressed SNES ROM.

That's all sr_corsario was saying. If you're using GBALZSS you type:

Code:
gbalzss.exe d LZ77JCBE.rom VC_SMRPG.smc
to decompress the VC ROM which would, presumably make it bootable with an emulator.

Or use:

Code:
gbalzss.exe d SNES_SMRPG.smc LZ77JCBE.rom
to compress the SNES ROM to use on the VC WAD.
 

ShadowSonic

New Member
OP
Newbie
Joined
Sep 30, 2008
Messages
4
Trophies
0
XP
54
Country
United States
Ahhh thats much better to understand. Also, I had no clue on how to use gbalzss.exe program that came with U8 Tools. I tried googling for a tutorial or something but I couldn't find one. Also, I guess I couldn't run it through the Command Prompt so I did it through the Run action and it worked (sorry, I really don't use the Run function or DOS)

Ok so I decompressed the rom from the LZ77JCBE.rom file. I was gladly surprised the file that came out was the same (if not, 99% close) file size as a commercial smrpg rom.

But the sad news, it didn't boot in Snes9x or Zsnes. I opened it up with a hex editor and while you can make out alot more of the script in ascii form, it isn't 100% the same. I also tried opening it in Tile Layer Pro to see any editable gfx, but none showed up. Also tried looking for same palettes but that didn't get any results either. Neither did loading it up in Lazy Shell.

So now I have the actual, decompress ROM but no clue what to do now with it. It isn't the same as an actual SMRPG ROM (was expecting this to happen). And I would try and use gbalzss.exe to compress a commercial SMRPG ROM into that .rom file and make a .wad out of that, but my guesses are its either 1) not going to work 2)brick my Wii.
 

ciper

Well-Known Member
Member
Joined
Jun 6, 2007
Messages
179
Trophies
0
XP
37
Country
United States
This may be an odd way to do this but what if you injected the standard SMRPG rom into this VC title? It should work and may prove/disprove that the emulator is at fault for the changes.
 

sr_corsario

Well-Known Member
Member
Joined
Jun 11, 2008
Messages
424
Trophies
1
Age
44
XP
1,260
Country
ciper At the momment there arent any other way to do it. Injectors (in general) dont recognice a snes game compressed with LZ77, and for instance cant replace it for another. (probably "easy" to implement)
 

Sonicandtails

Well-Known Member
Member
Joined
Apr 10, 2003
Messages
432
Trophies
0
Website
Visit site
XP
346
Country
United States
The LZSS encryption is different then seen before. Acmlm, internet-famous ROM hacker and ex-forum owner, hand decoded the ROM. I'm not distributing it, but I can tell you what I've seen in it so far.

For starters, the sound is really low or funky mostly, this has to do with the .pcm being used alongside the ROM when on the VC. Yes, Flame Wall has been changed along with several other effects that might induce brain trauma to one person out of a million. Here's a screenshot directly from the ROM for proof...

LZ77JCBE_00000.png


The colors in Molevile or whatever are indeed darker...

LZ77JCBE_00005.png


And that's about it for now.
 

U-said-it

Member
Newcomer
Joined
Oct 9, 2008
Messages
24
Trophies
0
XP
81
Country
United States
Does anyone know if this has been done with the PAL version of Super Mario RPG? I've been trying to find a way to extract my VC rom from it's lz77 compression, but I haven't had any luck. BTW - Has Acmlm released a patch for his work on the rom? As in a ips or maybe a rup patch to be applied to the original rom?
 

Sonicandtails

Well-Known Member
Member
Joined
Apr 10, 2003
Messages
432
Trophies
0
Website
Visit site
XP
346
Country
United States
U-said-it said:
Does anyone know if this has been done with the PAL version of Super Mario RPG? I've been trying to find a way to extract my VC rom from it's lz77 compression, but I haven't had any luck. BTW - Has Acmlm released a patch for his work on the rom? As in a ips or maybe a rup patch to be applied to the original rom?
The majority of the game is intact, but the changes would still be copyrighted code, so I can't release an IPS patch here. If you would like to speak privately on this to recieve it...Perhaps a message?
 

Framework43

I'm International
Member
Joined
Sep 3, 2008
Messages
304
Trophies
0
XP
223
Country
United States
Wait?!
The VC version of the game is edited so that the need of SA-1 Chip emulation is not needed?
Because if thats true maybe we can get it working on our snes emulators for the ds or something ^^
 

sampson

Well-Known Member
Newcomer
Joined
Jul 25, 2008
Messages
92
Trophies
0
XP
202
Country
United States
fyi when you decrypt using the l7 decrypter it always fucks up the header. i noticed this with paper mario. if you compare a decompressed one to a legit rom there is only minor differences between the two. correct the header and it will work in your emulator.
 

OSW

Wii King
Former Staff
Joined
Oct 30, 2006
Messages
4,787
Trophies
0
XP
482
Country
I'd like to know, do people think that Snes9x emulates SMRPG better or worse than the Virtual Console?
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    K3Nv2 @ K3Nv2: https://youtu.be/MddR6PTmGKg?si=mU2EO5hoE7XXSbSr