Rayman3 BGMusic Extractor by gmsj0001

[gmsj0001]

Finally I worked it out! With the help of VC6, OllyDbg, WinHex, I just copy the music playing section of Rayman3.exe then modify some of it, then write this small tool.

Due to the network in our school, I cannot find a netdisk to release my tool... so the following code is the file of the zip file, if everyone can copy it to WinHex and rebuild the tool by himself or herself? I'm very sorry for this... Humm....

So, good luck with my tool!

Code: Select all

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

[Droolie]

I'll try it as soon as I have installed Hex Workshop on my new computer.
I'll edit this post after I tried it.
EDIT -> Tool extracted, I'm now copying the DATA.HST file from my R3 disc. ^^
EDIT -> Processing... =D
FINAL EDIT -> WONDERFUL! Here, have these 5000 tings! =D
FINAL EDIT 2 -> It's amazing, but there is nothing new.

[stan423321]

The Final Edit 60: Droolies vs. Keyboards!

You mean there are no leftovers, right? Well, R3 was polished game. Polished in not-Polish sense.

[Synthesis]

That's a really cool prog! In what language is it written? Is is possible to view the source-code?

You completed the missing feature in Ray3Get.
The only thing left is that the files generated by your program don't have their original names...

Maybe we could merge our 2 programs (mine is written in C) to make a full-featured Rayman 3 sound extractor that would decode absolutely ALL the sound files from Data.hos/.hst (musics/sfx/speeches) using the .hxc/.bnh files! What do you think about the idea, gmsj0001? Any comment?

[gmsj0001]

i tried to work on the hxc files but failed...

may be my program has no so called workable source code. i use vc to write the console interface, copy the music play section and modify some of the asm code, and merge the two parts into one exe file... sounds strange?

i cannot rewrite the decode section by c++, it's to hard, rayman3 use MMX to decode the music, so i just copy it. this is the main problem. i think if you donn't know much about MMX, you'll have to work in this method too...

[stan423321]

Wait, isn't there in C++ an asm block?

[Synthesis]

i tried to work on the hxc files but failed...

I didn't.
My program extracts all the PCM files from data.hos/.hst and gives them their right names using the hxc files.

By the way, I opened the app with OllyDbg, went to the offset you told me... but I didn't find something useful, only a few "DB"s or something.
How did you manage to get to the sound code? (so I can check if the offser was right, maybe it's because of we have different versions, I have the European one (de, en, es, fr, it)... or maybe it's because it's MMX...)

[gmsj0001]

may be it is because the versions are not same...
i can tell you about how i managed to find the right section, i bp the ReadFile api on the time of FileHandle is the handle of data.hst, then a unpleasure feeling of times of memory read bp... it makes me crazy... i started this project in my hometown, and bring the unfinished project to my school in Shanghai and continued... it's so terrible... and as a result, i learned asm by myself successfully...
here is the entrance of music-play function copyed from my od, you can search for the code. it's a function in wave-class, the ECX regsiter contains "this" pointer...

0042C550 /$ 55 PUSH EBP
0042C551 |. 8BEC MOV EBP,ESP
0042C553 |. 83EC 3C SUB ESP,3C
0042C556 |. 53 PUSH EBX
0042C557 |. 56 PUSH ESI
0042C558 |. 8BF1 MOV ESI,ECX
0042C55A |. 57 PUSH EDI
0042C55B |. 8975 E8 MOV DWORD PTR SS:[EBP-18],ESI
0042C55E |. 8B46 34 MOV EAX,DWORD PTR DS:[ESI+34]
0042C561 |. 8378 04 01 CMP DWORD PTR DS:[EAX+4],1
0042C565 |. 75 0E JNZ SHORT Rayman3.0042C575 ; 未实现
0042C567 |. C745 F8 90BF42>MOV DWORD PTR SS:[EBP-8],Rayman3.0042BF9>
0042C56E |. BB D0C44200 MOV EBX,Rayman3.0042C4D0
0042C573 |. EB 0C JMP SHORT Rayman3.0042C581
0042C575 |> C745 F8 80C342>MOV DWORD PTR SS:[EBP-8],Rayman3.0042C38>
0042C57C |. BB 50C44200 MOV EBX,Rayman3.0042C450
0042C581 |> 8B48 08 MOV ECX,DWORD PTR DS:[EAX+8] ; 长度
0042C584 |. 8B56 68 MOV EDX,DWORD PTR DS:[ESI+68] ; 长度的4倍即解压后的长度
0042C587 |. C1E1 02 SHL ECX,2
0042C58A |. 3BD1 CMP EDX,ECX
0042C58C |. 73 3C JNB SHORT Rayman3.0042C5CA ; 实现
0042C58E |. 85D2 TEST EDX,EDX
0042C590 |. 51 PUSH ECX
0042C591 |. 75 0A JNZ SHORT Rayman3.0042C59D
0042C593 |. E8 781AFEFF CALL Rayman3.0040E010

[Synthesis]

Finally, I found the right code at the offset you specified (after having installed D3DWindower).

There's something that could be interesting at offset 0x0042C4F7.
I really hope I'll eventually know how this ADPCM format is decoded...

EDIT: gmsj0001, I'd also like to know what part of code you copied and what you slightly modified for making your executable.
I think I also need two things:
> The offset of the sound part where the signal is decoded, if possible;
> An offset in memory where the decoded samples are output, if any.

[barnaby64]

Hello, I know that I sound linke a complete noob but can someone post the extractor simply and fully compiled for all of us none programming geniuses out there?

Thanks

[gmsj0001]

i just use fread to get the sound data then give the buffer offsets to the process code then use fwrite to write the normal adpcm data to the output file...
some data i modified is mainly the adpcm decode password..

and, re the lastest post, the tool is just the hex code in the post, you can copy it out and extract it to a exe file then use it to do your things

[barnaby64]

Got winhex, now what do I do? Sorry for not understanding anything

[barnaby64]

Does anyone have this as an exe so they can just send it to me?

[roborayman]

If someone still needs extracted program: http://www.megaupload.com/?d=CR7OKWHF

[deton24]

Reupload:
http://www.mediafire.com/download/xvmgn ... sj0001.zip

Allows to unpack all Rayman 3 music from Data.hst

Probably other versions than English will not work with this tool.
Polish fails.

edit. At least on W10 tool crashes, so maybe it's not that.

[The Jonster]

*deleted*

[deton24]

It seems like gmsj0001 tool crashes for me on W10, I'll write here a diffrent method of extracing Data.hst containing music and voices:

Instruction for voices:
Download https://bitbucket.org/Zenchreal/decubisnd/downloads/
Open Rayman 3 Hoodlum Havoc\Gamedatabin\World\Sound\Data.hst for scanning.
Wait
Select all
Set info>samplerate 22050
1 channel
Save to wav
write random some name
press OK everytime
Voila

Output files are mixed eachother by various languages and music. No filenames preserved.
Maybe Droolie/Synthesis/gmsj0001 did it better. Filenames were somewhere in hxc files.

For proper music decoding pick 2 channels 22050 or 1 channel 44100 (which I suprised why it sounds that good, and both options works).

EN/FR/GER/IT/SPA voices with filenames extracted with Droolie's tool by ICUP321 (filenames preserved):
https://www.dropbox.com/sh/3v7gec6m0s0c ... 6kcza?dl=0
(extracted voices are from PS3, the best quality version).
https://www.youtube.com/watch?v=B8GH--YXql0

Droolies extraction tool for all console versions only:
https://app.box.com/s/el5f1ne3ayj73tdrmj2jvx4hbks6a76g

PC PL voices rip [ Rayman 3 polskie pliki dialogów ] (though some files could slip me) (470 in total):
https://yadi.sk/d/AeeXSzmTK4Lzsw
https://www.youtube.com/watch?v=yf9nTyi ... e=youtu.be

PL videos
https://yadi.sk/d/EYSF5hn0zin5Sg

For Russian, Ukrainian, Czech, Slovak and Hebrew -
Posibly universal file list to filter language files in other exclusive releases of PC version (assuming that file names will be the same for all exclusive language releases):
Still some files are needed to filter out manually, but not so much) -

1. Extract the files in decubisnd with the name "gadka" (save to wav and write "gadka" then confirm)
2. Copy the Recycler files
http://www.maddogsw.com/cmdutils/
to the extracted audio folder
3. Download bat files:
https://yadi.sk/d/XfBJH4qXpFdsyA
4. Copy two bat files there
5. Run bat files
6. Now all your language files are in recycle bin.
Just cut them from there and paste in new folder.
Such script was the easiest to write.
7. Filter out left overs

Every next 5th file name beginning from our first language file of choose was calculated in Excel.
When I hit on some music, or wrong language, I was falling back on the list, and I was trying to find new language file of choose.
Then I merged cells in Excel by "&" formula (A1&B2&C3 for /gadka/_/6/.wav/) and drag to the end of column after creating /gadka/_/11/.wav/ and picking both rows.

The voices extracting script has been rewritten by dr_st:
viewtopic.php?p=1366353#p1366353

[Steo]

Seems gmsj0001 tool crashes for me on W10

Windows 10 is the devil of operating systems.