unfortunately it looks like they've tied something to the protection (rather than simple checksum) to prevent ROM modification, so hacking the ROM isn't as straightforward as it should be