It's confirmed. It works!

This guide uses the FREE DLC "Language pack" to do the trick. You need download it on eshop.

In this tutorial I'll show you how to play Zelda BOTW with all DLCs unlocked without start a CFW or something for this. It should work with others games with multiple DLC like MK8, Wii Sports Club, Super Smash Bros, Hyrule Warriors and others. Of course you need a legit DLC from game you want to play.

For Super Smash Bros detail follow this link:

https://gbatemp.net/threads/tutoria...-without-cfw-or-aocpatcher-on-sysnand.464178/

For MK8 detail follow this link:

https://gbatemp.net/threads/tutorial-play-mario-kart-8-with-all-dlc-for-free-without-cfw.464407/#post-7173356

What you need:

Spoiler

• Zelda BOTW "Language Pack" downloaded from eshop. You need the latest update and download it from game options (needs a legit DLC)
• Mocha CFW, Haxchi CFW, or any other (just in the beginning)
• WiiU App Store (or Tik2SD + FTPiiU_Everywhere + WUP Installer GX2 +
  Mocha CFW + Homebrew Launcher)
• WiiU USB Helper
• SD Card
• PC
• Hex Editor (HxD for Windows)

1 - First if you have any illegitimate Zelda BOTW DLC installed, just delete it using using Data manager on WiiU Config
2 - Download the DLC on eshop
3 - Make sure your SD card is formatted in FAT32
4 - Download the DLC of Zelda BOTW of your region with WiiU USB Helper and put it in your SD card in na folder called "install" in the root.
5 - Go to Homebrew Launcher and choose App Store or go to wiiubru.com/go on you browser and choose App Store. If you don't know what's Homebrew Launcher is give a look in this guide (parts I, II and III) and choose start App Store.
6 - In App Store Download Tik2SD + FTPiiU_Everywhere + WUP Installer GX2 + Mocha CFW + Homebrew Launcher
7 - Launch Homebrew Launcher and go to Mocha_CFW (use default options). Then go to WUP Installer GX2 and choose install the DLC of Zelda BOTW you just download wherever is your game (nand or USB).
8 - Back to Homebrew Launcher, go to Tik2SD and backup your tickets. Put your SD in PC and look at tik2sd folder. Open keys.txt and search where your Zelda BOTW DLC is installed. The name you need to search is 0005000c101c9400 or 0005000c101c9500 or 0005000c101c9300.
9 - Now it's time for hex editing.
Use the link from www.marcrobledo.com/wiiu-tik-fixer/ (thanks @marc_max )
open the folder and in tik2sd wich the ticket from you game is , than drop on the site above, you gonna see 2 tickets, click in fix, and download the file , than go to step 10.

Spoiler

If you want to do manually, then thanks to @Rahzadan we have a VERY detailed tutorial for it. Go to this thread and after the hex editing go to step 10 below.

Spoiler

If you followed the @Rahzadan tutorial or used the @marc_max website above, go to step 10. I'll keep this part only for log
purpose.

Spoiler

Locate your ticket in your SD card according with keys.txt. Open with an hex editor (in my case it's on 0009 folder and the name is 00000015.tik. Backup the ticket.

Look that you gonna have 2x finds in the key.txt file. In my case 0009/00000015.tik@0x6a0 and 0009/00000015.tik@0x0. The number after the "@" shows where the ticket starts inside the tik file. It means probably the fake ticket is in beginning of tik (0x0) file and my legit ticket starts in 0x6a0 (note is in hexadecimal).

The fake ticket is like this, a lot of same numbers:

Spoiler

In this case it shows SSB ticket, but for Zelda BOTW ticket is the same thing, just another Game ID.

Pay attention in the blue highlight. It shows the game ID. If it says a number other than 0005000c101c9400 or 0005000c101c9500 or 0005000c101c9300 it means the ticket is from another game!

The trick here is swap the fake ticket with the legit ticket, that way the legit ticket always come first in the tik file! This picture can demonstrate what I mean:

Spoiler

In this case it shows SSB ticket, but for Zelda BOTW ticket is the same thing.

Maybe there's another game ticket inside the tik file, maybe not. Anyway, just copy and past with your hex editor the fake ticket with the legit ticket. Pay attention and don't touch other game tickets in the tik file!

If your legit ticket comes first you don't need swap the tickets! You already can play with all DLC unlocked! I believe it can happens if you download the free DLC after install the fake DLC.

After the swap save your ticket in your PC.

10 - Now put your SD back in WiiU. Open Homebrew Launcher and launch FTPiiU_everywhere (make sure you had launch Mocha CFW or other CFW before that)
11 - Go to your Zelda BOTW ticket location inside WiiU memory using a FTP browser like FileZilla or even Windows Explorer with the IP of your WiiU. Its in "storage_slc/rights/ticket/apps/xxxx/xxx.tik". Replace that ticket with the one you just modified.
12 - Open your Zelda BOTW game and enjoy play with all contents without CFW!

TL;DR: Download the free DLC, install all DLC packet with a fake ticket, locate your ticket inside WiiU, swap the legit ticket with the fake ticket inside the tik file so that the legit ticket appears first.

Thank to @nexusmtz and @Madridi

 

[raphamotta]

@raphamotta I'm actually pretty good at writing tutorials (I've done several for my daily job). Using your tutorial, I've successfully gotten this procedure to work for all games with free DLC (to unlock all DLC without using CFW).

I might do a more detailed / "for dummies" tutorial on this that has a very high amount of detail. I used "frhed" hex editor instead of HxD since frhed is freeware, but any hex editor will do the trick.

I may do it in the form of a YouTube video instead.

Thoughts?

Hello @Rahzadan. Great, that's my first tutorial. At work I do more hardware things. Fell free to change this tutorial, I can add your changes if you like.

A video tutorial will be nice, most of people have trouble on hex editing. I think it's an advanced thing for most here. I can add you video here, will be awesome. But remember to hide the game keys because it's not allowed here.

 

[Rahzadan]

So I cut EVERYTHING starting from 350 all the way up to the end of the file, and pasted it at the beginning of the file.
If you do this correctly, now the legit key starts at 0x0000 and the fake one at 0x350, effectively making the console think it is legit as well.

You can also cut everything from 0x0 to 0x34F (fake ticket), which will then automatically push your legit ticket to the top, then paste the fake ticket at the very end (starting at 0x350). This is assuming that the .tik file (bucket) only contains 2 tickets (the real and fake one for THIS game).

If the .tik file contains one or more tickets for a DIFFERENT game, you will need to refer to your keys.txt file from tik2sd for what offset the tickets start at.

EDIT: Also wanted to note that you can usually tell how many tickets are in a .tik file by the size of the file. Most tickets appear to be exactly 848 bytes (not all are, however). If the .tik is 1696 bytes, it likely only has your real + fake ticket for that game. If it's 2544 bytes, then it will have 3 tickets in it.

 

[baselhamad]

somebody do a tutorial video about that

 

[Rahzadan]

I'm going to write a new tutorial after work this evening specifically about the hex editing portion of this guide, since most people seem to be having trouble with it. It should be detailed enough that your grandmother could do it I'll post it as a separate thread in this forum.

 

[marc_max]

It should be relatively easy to create a script that sorts tickets.

 

[ShadowOne333]

It should be relatively easy to create a script that sorts tickets.

Yep it should be rather easy to make a BAT or SH file for both Windows and Linux users.
I might do so, however I'm not sure what kind of software or program would help with hex editing files by requesting a specific offset of it.
I'll take a read to make one for Linux hopefully.

 

[marc_max]

Yep it should be rather easy to make a BAT or SH file for both Windows and Linux users.
I might do so, however I'm not sure what kind of software or program would help with hex editing files by requesting a specific offset of it.
I'll take a read to make one for Linux hopefully.

I can write something in HTML5 so it's compatible in any platform :-)

 

[ShadowOne333]

I can write something in HTML5 so it's compatible in any platform :-)

That'd be even better

 

[Rahzadan]

Could functionality be added to WUP Installer GX2 (and/or Wii U USB Helper) to simply always place the contents of title.tik at the BOTTOM of the .tik during installation? Might be something to ask the developer of WUP Installer GX2.

 

[nexusmtz]

Could functionality be added to WUP Installer GX2 (and/or Wii U USB Helper) to simply always place the contents of title.tik at the BOTTOM of the .tik during installation? Might be something to ask the developer of WUP Installer GX2.

WUP Installer doesn't install the tickets, the system does. That's why WUP Installer doesn't need iosuhax. All WUP Installer does is to tell the Wii U to install what's in directory /vol/storage_sdcard/install/xyz. If there's a ticket there, it gets put at the front of the file.

WUP Installer could manipulate the ticket bucket after the fact, but then you start getting into iosuhax and all that. Basically, it's a different program at that point. A better path would be to develop the utility separate of WUP Installer (in a modular fashion), then put it out there for someone to integrate with WUP Installer.

 

[raphamotta]

Yep it should be rather easy to make a BAT or SH file for both Windows and Linux users.
I might do so, however I'm not sure what kind of software or program would help with hex editing files by requesting a specific offset of it.
I'll take a read to make one for Linux hopefully.

I remember @AboodXD made an application in python to edit the ticket for Brazilian method. Maybe he can help on something.

 

[AboodXD]

I remember @AboodXD made an application in python to edit the ticket for Brazilian method. Maybe he can help on something.

Well, yeah, I could easily do that, but I'm currently busy with Miyamoto NSMBU editor, BFRES and BFSAR tools, and OtherSMBU.
(Basically, I'm busy with more important stuff)

 

[marc_max]

I'm working on a small program to sort tickets, this hopefully will help most users.

 

[marc_max]

I've tested and seems to work flawlessly :-)
However, it only works with 848 bytes tickets (is there any other size?).

I'll try to make a more beautiful version tomorrow.


http://www.marcrobledo.com/wiiu-tik-fixer/

 

[raphamotta]

Well, yeah, I could easily do that, but I'm currently busy with Miyamoto NSMBU editor, BFRES and BFSAR tools, and OtherSMBU.
(Basically, I'm busy with more important stuff)

Ok thanks

 

[angela18]

It worked for me with a 2kB ticket

 

[raphamotta]

I've tested and seems to work flawlessly :-)
However, it only works with 848 bytes tickets (is there any other size?).

I'll try to make a more beautiful version tomorrow.

Many thanks! I gonna test when I back from work!

 

[Rahzadan]

It worked for me with a 2kB ticket

I think he means 848 byte lone tickets. the 2kb you're referring to is probably the ticket bucket which is the whole .tik file. There can be multiple 848 byte tickets in a single .tik file.

--------------------- MERGED ---------------------------

I've tested and seems to work flawlessly :-)
However, it only works with 848 bytes tickets (is there any other size?).

I'll try to make a more beautiful version tomorrow.

Does it work on multi-ticket buckets where there are more than 2 or 3 848 byte tickets in 1 bucket, or will it only work on 2 ticket buckets?

 

[marc_max]

Does it work on multi-ticket buckets where there are more than 2 or 3 848 byte tickets in 1 bucket, or will it only work on 2 ticket buckets?

It should work as long as the ticket size is 848.

 

[Lacius]

So I've got a strange issue. The following is what it says in my keys.txt after doing everything before swapping anything in a hex editor:

(0004/00000005.tik@0x0) 0005000c101c9400 (BOTW USA DLC)
(0004/00000005.tik@0x350) 000500001f600a00 (PAPER MARIO Color Splash GAME)

(0007/0000001e.tik@0x0) 0005000c101c9400 (BOTW USA DLC)
(0007/0000001e.tik@0x350) 0005000c101c9500 (BOTW EUR DLC)

However, what is in the keys.txt doesn't match what's actually in those files. Here's what's actually in the above files (differences in bold):

(0004/00000005.tik@0x0) 0005000c101c4d00 (Xenoblade Chronicles X USA DLC)
(0004/00000005.tik@0x350) 0005000013374842 (Homebrew Launcher)

(0007/0000001e.tik@0x0) 0005000c101c9400 (BOTW USA DLC)
(0007/0000001e.tik@0x350) 0005000c101c9400 (BOTW USA DLC)

When attempting to swap the illegitimate BOTW USA DLC and the legitimate BOTW USA DLC in 0007/0000001e.tik, I still get a data management error when trying to launch BOTW USA without CFW. So, my two questions are:

1. Why doesn't what's in keys.txt match the actual files?
2. When swapping the BOTW USA DLC titles, why doesn't that work?

Thank you.

Somehow, I had edited the keys.txt without realizing it (probably by accidentally typing or pasting something in the middle of it), which caused the discrepancies. I'll let you know if I get it working.