Quote
The Legend of Zelda: Skyward Sword is a marvelous gem. It's considered one of the best Nintendo Wii titles ever. There's just one little bug in the game that may stop you from completing it.
Reported first by Zelda Informer, the bug is activated if the player speaks to Golo the Goron in the Lanayru Mine after obtaining the song of the Thunder Dragon but before heading to the forest and volcano regions during the Song of the Hero quest. Those regions become inaccessible and the player cannot complete the game. Nintendo hasn't said whether or not it plans to release a fix, either by pressing new discs or allowing players to send in their save files.
The company provided a detailed report of the bug for you to follow so you won't be forced to start over:
We have been made aware of the issue that results in being unable to progress in the Song of the Hero quest. If the game has been saved after completing the sequence of events, it will no longer be possible to proceed through the game on that save file. The only options at that point are to either start the game over or to use an earlier save file to continue.
The situation is caused by performing the following sequence of events during the Song of the Hero quest:
1. At the beginning of the quest, go to Lanayru Desert to retrieve the song of the Thunder Dragon.
2. In the Lanayru Mine, speak with Golo the Goron.
3. Complete the Thunder Dragon's event, and receive his song.
4. Before heading to the forest or volcano regions, speak with Golo in the mine again.
5. At this point, the forest and volcano events will no longer occur, making it impossible to continue.
Solutions:
• This issue WILL NOT OCCUR if the Fire and Water Dragon songs have already been collected before collecting the Thunder Dragon's song. Talking to Golo in the Lanayru Caves will also NOT trigger this issue.
• If the game has been saved after completing the sequence of events, it will no longer be possible to proceed through the game on that save file. The only options at that point are to either start the game over or to use an earlier save file to continue.
I'm guessing we might see another version soon, Could be cool if this was fixable.
Source (http://www.gameinformer.com/b/news/archive/2011/12/06/getting-around-skyward-sword-39-s-game-break-bug.aspx)
Awesome- I hope we can get a hold of a broken save file so we can fix it!!
Quote from: James0x57 on December 07, 2011, 02:55:59 AM
Awesome- I hope we can get a hold of a broken save file so we can fix it!!
Here is a download i found. Its not mine btw, haven't tried it yet
http://www.megaupload.com/?d=FNYUXO17
edit: apparently the third save is the one glitched
are one of the saves right before the glitch too? That would probably be a better position....
It doesn't say. I got the save from gamefaqs
Get a save that is just before step 4 and a save that is right after completing step 4. Then use the SaveGame Manager to extract the unencrypted saves so you can view them in a hex editor.
yep, this download is useless for now since it´s decrypted. :P
Luckily there´s a copy save file option in-game. One profile with "before" bug and one "after" having triggered the bug.
We need to get the encrypted data by using Savegame Manager 1.0 or Savegame Manager GX and compare those two profiles.
Messing a bit around with hex editing until we got the right value(s) to change. Then we can either create a save fixer application or a gecko code that prevents the bug from occuring by finding the correct address. Another advantage is that the save file is quite little. Kudos to the WiiRd community if we can do this. :)
Sadly, I won´t be able to discover it first since I´m not at home until Saturday, damnit. ;D
I get the impression that this game has been programmed in a way that expects the player to progress through the game in a perfectly linear fashion. e.g. to initiate a boss battle, it doesn't just check for the immediate conditions like if a boss key has been obtained, if the boss's door has been opened, etc. but it also checks for other things you've done within the dungeon that aren't pertinent to the boss battle itself.
Game Breaking Bug Glitch Fix [Thomas83Lin]
00955D52 00000015
005A9AE2 00000015
*Only Activate if your experiencing this Glitch Seen Here (http://www.zeldainformer.com/2011/12/nintendo-addresses-the-skyward-sword-game-breaking-song-of-the-hero-glitch.html)*
Notes:
Just for Safety Load your glitched save, then save your game, then reset game without code.
should work on every region. :D
you can test it, on that save i posted.
I'm going to make a full song of hero playthough before actually posting it though
Hackers to the F'n rescue. Cleaning up after yet another Nintendo glitch. Are their QA guys asleep at the Wii?
Quote from: thomas83lin on December 08, 2011, 02:11:21 AM
Game Breaking Bug Glitch Fix [Thomas83Lin]
00955D52 00000015
005A9AE2 00000015
*Only Activate if your experiencing this Glitch Seen Here (http://www.zeldainformer.com/2011/12/nintendo-addresses-the-skyward-sword-game-breaking-song-of-the-hero-glitch.html)*
Notes:
Just for Safety Load your glitched save, then save your game, then reset game without code.
should work on every region. :D
you can test it, on that save i posted.
I'm going to make a full song of hero playthough before actually posting it though
How did you search for that?
Pretty much what my original intentions was, is exactly what Dcx2 summed up, the hardest part was playing all the way back to that point, luckily i got afew old saves, and 1 of them was only a dungeon before that song quest.
Excellent job man!!
If you can get a video of the glitch happening, the code being applied, then the glitch being fixed because of that, then I'll send it to my contact at Joystiq and hopefully get more than a passing mention this time!
Well the Glitched saved is right there, Anyone could make the video, I only have a webcam on my labtop not sure how that would work out.lol
Ahh true enough
What we really need is an application that can decrypt an arbitrary encrypted save in data.bin format, patch the glitch, and then encrypt back into data.bin. This tool could then be distributed and any user could fix their own saves, even if they don't have homebrew.
EDIT:
Bingo! Wiibrew to the rescew! http://wiibrew.org/wiki/Wii_Security#Save_games_on_SD_cards
The save file is first encrypted by a common AES key known as the SD key. It can be found here. http://hackmii.com/2008/04/keys-keys-keys/
Once it is encrypted, a per-console ECC key is then used to sign the encrypted data, however this per-console key is not a problem since there is no restriction on copying someone else's save.
The ECC key is stored as a certificate inside the data.bin. The ECC key is itself signed by Nintendo's private key (which we don't have). However, we can use any existing ECC key and its signature to sign the encrypted data. And it's easy to get an ECC key from your own machine with homebrew; if you don't mind sharing your ECC key then everyone can use it to sign their data.
This same principle can be used to patch the M:OM glitch.
I agree with Dcx2, if someone could code up a small little user friendly app that would be great :)
Segher has some tools. http://wiibrew.org/wiki/Segher%27s_Wii.git
tachtig and twintig work with save files. But his tools only work in Linux. So either get cygwin, or try FE100. http://wiibrew.org/wiki/FE100 But those files are old and/or abandoned, you should go here instead, there are two sets of files to get from two threads in here. http://www.wiidewii.com/read.php?29,15141 http://www.wiidewii.com/read.php?29,5485 <-- eighth post
It also looks like there might be some checksums. Hopefully the Twilight Princess checksum might work for Skyward Sword? But we'd still need a routine for M:OM. http://git.infradead.org/users/segher/wii.git/blob/abfd6293ab97abef5ed973dfe85b1ad0c23e76d7:/zelda-cksum.c
Note that the checksum is different for various games. The Lego games have a different routine. http://git.infradead.org/users/segher/wii.git/blob/78c49eea0f85de8b9863b22519bc469e4b6179c6:/lego-cksum.c
Someone would also have to volunteer their ECC key.
@Dcx2 don't think i'm up for it, but i'm sure someone with a alittle experience at stuff like that, would make a cake walk of it.
@James
Here's that Video of the glitch fix, Its low quality though due to the laptop's webcam
http://www.youtube.com/watch?v=YnRiJOm8usA
edit:
Apparently someone on youtube, posted a Glitch fix video, with a slightly different method, I dunno his method is different and so is his code, He uploaded his video 1 hour before mine, but i did post my code 5 hours before i posted my video. Its strange but it looks legit.
so what are the offsets in the encrypted savegame that needs to be patched? ;D
The video quality isn´t that bad... I´ve seen worse. :)
@dxc2:
Would it be enough to volunteer my ECC key, if I upload my encrypted or decrypted save file?
P.S.
Should this topic stick on Off-topic section? :P
the offset in the decrypted save using 010 editor was 090Eh