[Tutorial] - Play Mario Kart 8 with All DLC for FREE without CFW

Discussion in 'Wii U - Tutorials' started by raphamotta, Mar 13, 2017.

  1. raphamotta
    OP

    Member raphamotta GBAtemp Fan

    Joined:
    Jul 12, 2013
    Messages:
    407
    Country:
    Antarctica
    This guide uses the FREE DLC "Mercedes Benz" to do the trick. You need download it on eshop.

    In this tutorial I'll show you how to play Mario kart 8 with all DLCs unlocked without start a CFW or something for this. It should work with others games with multiple DLC like Wii Sports Club, Super Smash Bros, Hyrule Warriors and others. Of course you need a legit DLC from game you want to play.

    For Super Smash Bros detail follow this link:

    https://gbatemp.net/threads/tutoria...-without-cfw-or-aocpatcher-on-sysnand.464178/


    For Zelda BOTW follow:
    http://gbatemp.net/threads/play-zelda-botw-with-all-dlc-for-free-without-cfw.469520

    What you need:
    Warning: Spoilers inside!
    1 - First if you have any illegitimate MK8 DLC installed, just delete it using using Data manager on WiiU Config
    2 - Download the DLC on eshop
    3 - Make sure your SD card is formatted in FAT32
    4 - Download the DLC of MK8 of your region with WiiU USB Helper and put it in your SD card in na folder called "install" in the root.
    5 - Go to Homebrew Launcher and choose App Store or go to wiiubru.com/go on you browser and choose App Store. If you don't know what's Homebrew Launcher is give a look in this guide (parts I, II and III) and choose start App Store.
    6 - In App Store Download Tik2SD + FTPiiU_Everywhere + WUP Installer GX2 + Mocha CFW + Homebrew Launcher
    7 - Launch Homebrew Launcher and go to Mocha_CFW (use default options). Then go to WUP Installer GX2 and choose install the DLC of MK8 you just download wherever is your game (nand or USB).
    8 - Back to Homebrew Launcher, go to Tik2SD and backup your tickets. Put your SD in PC and look at tik2sd folder. Open keys.txt and search where your MK8 DLC is installed. The name you need to search is 0005000c1010ec00 or 0005000c1010ed00 or 0005000c1010eb00. In my case (US) it says "0009/00000015.tik".
    9 - Now it's time for hex editing.
    Thanks to @Rahzadan we have a VERY detailed tutorial for it. Go to this thread and after the hex editing go to step 10 below.
    Warning: Spoilers inside!
    10 - Now put your SD back in WiiU. Open Homebrew Launcher and launch FTPiiU_everywhere (make sure you had launch Mocha CFW or other CFW before that)
    11 - Go to your MK8 ticket location inside WiiU memory using a FTP browser like FileZilla or even Windows Explorer with the IP of your WiiU. Its in "storage_slc/rights/ticket/apps/xxxx/xxx.tik". Replace that ticket with the one you just modified.
    12 - Open your MK8 game and enjoy play with all contents without CFW!

    TL;DR: Download the free DLC, install all DLC packet with a fake ticket, locate your ticket inside WiiU, swap the legit ticket with the fake ticket inside the tik file so that the legit ticket appears first.

    Thank to @nexusmtz and @Madridi
     
    Last edited by raphamotta, May 5, 2017
    zeldaism, Jhnsn, trunske and 11 others like this.


  2. suzsuzuki

    Member suzsuzuki GBAtemp Regular

    Joined:
    Aug 25, 2016
    Messages:
    139
    Country:
    Brazil
    Many thanks it worked for me and for @aljpn91 :).
     
    raphamotta likes this.
  3. ShadowOne333

    Member ShadowOne333 GBAtemp Guru

    Joined:
    Jan 17, 2013
    Messages:
    6,153
    Country:
    Mexico
    The part where the Hex editing starts is really confusing or not well explained.
    I got completely lost up to that part.

    We need to have the fake/non-legit DLC installed first.
    Then we get the legit DLC and dump the title.tik from that one, along with the keys.txt I assume.
    Then after that what do we do?
    What title.tik are we replacing with which one?

    Do we grab the legit tik to make it fake and upload that one to the path, or do we edit the fake tik with the legit tik data to upload it?
     
  4. raphamotta
    OP

    Member raphamotta GBAtemp Fan

    Joined:
    Jul 12, 2013
    Messages:
    407
    Country:
    Antarctica
    Ok. After you install both DLC (fake and legit) use tik2sd and dump your tickets. Then search in keys.txt where is your DLC tickets. Open this file "000000xx.tik" and search for this ticket
    Warning: Spoilers inside!

    The blue highlight needs to be your DLC ID (I believe you have and US console, then it's 0005000c1010ec00. Where in in the tk file this ticket, If it's in the beginning of tik file you don't need to do anything, you're ready to play without CFW. If it's in the middle or end, searche fot the legit ticket (same ID, 0005000c1010ec00) then swap the both tickets, this way the legit ticket needs to be above the fake ticket in the tik file.
     
    Last edited by raphamotta, Mar 14, 2017
  5. ShadowOne333

    Member ShadowOne333 GBAtemp Guru

    Joined:
    Jan 17, 2013
    Messages:
    6,153
    Country:
    Mexico
    The blue highlight is the Title ID for the DLC, which in this case simply changes the eighth digit to C instead of 0 (digital game) or E (game update).

    Now the question is, what is the part which needs to be swapped?
    Is it ONLY the title iD highlighted? or is it the part covered in black?

    If I got it right, we need to put the part at the very beginning of the ticket at 0x0000, instead of 0x06A0 or wherever it is. Am I right?
     
  6. raphamotta
    OP

    Member raphamotta GBAtemp Fan

    Joined:
    Jul 12, 2013
    Messages:
    407
    Country:
    Antarctica
    Sorry if it's confusing. Your questions are very good I need to improve this tutorial.

    The picture shows the whole ticket, you need to swap it whole, not just a part of it. The fake ticket needs to be under the legit ticket just like in this picture

    Warning: Spoilers inside!
     
    ShadowOne333 likes this.
  7. ShadowOne333

    Member ShadowOne333 GBAtemp Guru

    Joined:
    Jan 17, 2013
    Messages:
    6,153
    Country:
    Mexico
    Yeah sorry if I'm making too much questions, is just that the Hex editing part of the tutorial is somewhat vague.
    Also, the image does not provide much help. Are you saying that basically we need to copy paste the WHOLE tik file from the legit ticket into the beginning of the original and leave the fake one below it?

    I'm not sure if it's too much to ask, but could you make a short recording of the steps for the Hex editing section? THat would help clarify exactly what is being done.
     
  8. raphamotta
    OP

    Member raphamotta GBAtemp Fan

    Joined:
    Jul 12, 2013
    Messages:
    407
    Country:
    Antarctica
    Ok what's the name of your tik file with both ticket into it (the fake one and the legit one? 00000015.tik? Open this on hex editor. How many tickets you can see inside this tik file?
     
  9. ShadowOne333

    Member ShadowOne333 GBAtemp Guru

    Joined:
    Jan 17, 2013
    Messages:
    6,153
    Country:
    Mexico
    I'm not home at the moment to test out, but what exactly do you mean by "ticket" inside the tik file?
    The blue highlighted part? That's the title ID, not a ticket.
    The ticket itself is the whole TIK file in itself. The other part the tik file uses is the title key, which is different from the title ID.
     
  10. raphamotta
    OP

    Member raphamotta GBAtemp Fan

    Joined:
    Jul 12, 2013
    Messages:
    407
    Country:
    Antarctica
    The tik file contains 1, 2 or more tickets inside it. Each ticket has the structure I showed in the first post and the blue highlight part is just a way to identifies the game of this ticket.

    When you install 2x DLC of a game, the legit one and the fake one, each ticket will be inside the tik file. That's why you need to have at least 2 MK8 tickets inside your tik file, the fake one and the legit one. It can be more tickets from others games too,,
     
    Last edited by raphamotta, Mar 14, 2017
    ShadowOne333 likes this.
  11. ShadowOne333

    Member ShadowOne333 GBAtemp Guru

    Joined:
    Jan 17, 2013
    Messages:
    6,153
    Country:
    Mexico
    Ah I see.
    So the blue part is just a way to verify that the TIK file you opened matches that of the game DLC you want.
    Got that.

    And the part that you have to copy is the one specified in keys.txt after the "@"?
    Which supposedly begins at either 0x000 or 0x6A0.
    How long are these tickets? For example if one begins at 0x000, at what offset does it end?
     
  12. raphamotta
    OP

    Member raphamotta GBAtemp Fan

    Joined:
    Jul 12, 2013
    Messages:
    407
    Country:
    Antarctica
    Sorry I pressed enter before finish my post. I edited it.
     
  13. Madridi

    Member Madridi Card Collector

    Joined:
    May 9, 2008
    Messages:
    2,767
    Location:
    Doha
    Country:
    Qatar
    @raphamotta
    The problem he is having is that, while the keys.txt does tell you where the ticket starts, it doesn't tell you where it ends. So, if someone doesn't understand the structure of the .tik file, it can indeed be confusing.
     
    ShadowOne333 likes this.
  14. raphamotta
    OP

    Member raphamotta GBAtemp Fan

    Joined:
    Jul 12, 2013
    Messages:
    407
    Country:
    Antarctica
    The size of the tickets can change, 0x000 and 0x6A0 is just my case. In your case can be other numbers. In my case 0x000 or 0x6A0.says where the ticket starts. The end you need to see visually but in general the ticket has tha same size os the ticket in the picture I showed in the first post.
     
  15. Madridi

    Member Madridi Card Collector

    Joined:
    May 9, 2008
    Messages:
    2,767
    Location:
    Doha
    Country:
    Qatar
    Some additional info from your other thread:
    [Tutorial] - Play SSB, MK8 and other games All Unlocked on sysnand without CFW or AOCPtcher
     
    raphamotta likes this.
  16. raphamotta
    OP

    Member raphamotta GBAtemp Fan

    Joined:
    Jul 12, 2013
    Messages:
    407
    Country:
    Antarctica
    You are right. As you said the ticket can have more than one size, so that's why he needs to verify it visually.

    @ShadowOne333 In this case the MK8 DLC ticket has 848 bytes (350 in hex)
     
    ShadowOne333 likes this.
  17. ShadowOne333

    Member ShadowOne333 GBAtemp Guru

    Joined:
    Jan 17, 2013
    Messages:
    6,153
    Country:
    Mexico
    Ah very well, that clarifies a bit.
    So the size for each ticket changes, and the starting offset for each ticket is told in the keys.txt file.

    So you simply change the order of the tickets so that the legit one always appears first?
     
    raphamotta likes this.
  18. raphamotta
    OP

    Member raphamotta GBAtemp Fan

    Joined:
    Jul 12, 2013
    Messages:
    407
    Country:
    Antarctica
    That's it!
     
  19. ShadowOne333

    Member ShadowOne333 GBAtemp Guru

    Joined:
    Jan 17, 2013
    Messages:
    6,153
    Country:
    Mexico
    Cool :)
    The3 same applies for 2+ DLC? Like if I had three or more, the legit one should always be the one on top?
    I think I got it now, I will give this a try with BotW (if that has DLC already XD) and see how it goes :D

    Thank you for your patience!
     
  20. raphamotta
    OP

    Member raphamotta GBAtemp Fan

    Joined:
    Jul 12, 2013
    Messages:
    407
    Country:
    Antarctica
    It applies for legit DLC from each game you want to play. For Zelda BOTW you need a legit DLC and AFAIK there's only one DLC for all content. So, this method applies for games with multiple DLC like MK8 (that has Free DLC), SSB, Wii Sports Club, etc
     
    ShadowOne333 likes this.

Share This Page