Tutorial  Updated

Play SSB, MK8 and other games All Unlocked on sysnand without CFW or AOCPtcher

This guide needs at least one legit DLC from each game you try. It works with FREE DLC too for other games like Mario Kart 8 and Zelda BOTW!!

In this tutorial I'll show you how to play Super Smash Bros with all DLCs unlocked without start a CFW or AOCPatcher for this. It should work with others games with multiple DLC like Wii Sports Club, Mario Kart 8, Hyrule Warriors and others. Of course you need a legit DLC from game you want to play.

For Mario kart 8 detail follow this link:
https://gbatemp.net/threads/tutoria...dlc-for-free-without-cfw.464407/#post-7173356


For Zelda BOTW follow:
http://gbatemp.net/threads/play-zelda-botw-with-all-dlc-for-free-without-cfw.469520

What you need:
  • At least one DLC bought in eshop. Anyone works. (needs a legit DLC)
  • Mocha CFW, Haxchi CFW, or any other SigPatcher (just in the beginning)
  • WiiU App Store (or Tik2SD + FTPiiU_Everywhere + WUP Installer GX2 +
    Mocha CFW + Homebrew Launcher

    )
  • WiiU USB Helper
  • SD Card
  • PC
  • Hex Editor (HxD for Windows)
1 - First if you have any illegitimate SSB DLC installed, just delete it using using Data manager on WiiU Config
2 - Buy any DLC on eshop (the cheaper one?)
3 - Make sure your SD card is formatted in FAT32
4 - Download the DLC of SSM of your region with WiiU USB Helper and put it in your SD card in na folder called "install" in the root.
5 - Go to Homebrew Launcher and choose App Store or go to wiiubru.com/go on you browser and choose App Store. If you don't know what's Homebrew Launcher is give a look in this guide (parts I, II and III) and choose start App Store.
6 - In App Store Download Tik2SD + FTPiiU_Everywhere + WUP Installer GX2 + Mocha CFW + Homebrew Launcher
7 - Launch Homebrew Launcher and go to Mocha_CFW (use default options). Then go to WUP Installer GX2 and choose install the DLC of SSB you just download wherever is your game (nand or USB).
8 - Back to Homebrew Launcher, go to Tik2SD and backup your tickets. Put your SD in PC and look at tik2sd folder. Open keys.txt and search where your SSB DLC is installed. The name you need to search is 0005000c10144f00 or 0005000c10145000 or 0005000c10110e00. In my case (US) it says "0002/00000012.tik".
9 - Now it's time for hex editing.
Use the link from www.marcrobledo.com/wiiu-tik-fixer/ (thanks @marc_max )
open the folder and in tik2sd wich the ticket from you game is , than drop on the site above, you gonna see 2 tickets, click in fix, and download the file , than go to step 10.
If you want to do manually, then thanks to @Rahzadan we have a VERY detailed tutorial for it. Go to this thread and after the hex editing go to step 10 below.
If you followed the @Rahzadan tutorial or used the @marc_max website above, go to step 10. I'll keep this part only for log
purpose.

Locate your ticket in your SD card according with keys.txt. Open with an hex editor (in my case it's on 0002 folder and the name is 00000012.tik. Backup the ticket.

Look that you gonna have 2x finds in the key.txt file. In my case 0002/00000012.tik@0x6a0 and 0002/00000012.tik@0x0. The number after the "@" shows where the ticket starts inside the tik file. It means probably the fake ticket is in beginning of tik (0x0) file and my legit ticket starts in 0x6a0 (note is in hexadecimal)

The fake ticket is like this, a lot of same numbers:

2MSoJA9.png

Pay attention in the blue highlight. It shows the game ID, it means this ticket is from SSM US version. If it says a number other than 0005000c10144f00, 0005000c10145000 or 0005000c10110e00 it means the ticket is from another game!

The trick here is swap the fake ticket with the legit ticket, that way the legit ticket always come first in the tik file! This picture can demonstrate what I mean:
rVtT6FJ.png

Maybe there's another game ticket inside the tik file, maybe not. Anyway, just copy and past with your hex editor the fake ticket with the legit ticket. Pay attention and don't touch other game tickets in the tik file!

After the swap save your ticket in your PC.
10 - Now put your SD back in WiiU. Open Homebrew Launcher and launch FTPiiU_everywhere (make sure you had launch Mocha CFW or other CFW before that)
11 - Go to your SSBM ticket location inside WiiU memory using a FTP browser like FileZilla or even Windows Explorer with the IP of your WiiU. Its in "storage_slc/rights/ticket/apps/xxxx/xxx.tik". Replace that ticket with the one you just modified.
12 - Open your SSB game and enjoy play with all contents without CFW!

TL;DR: Buy a cheap DLC, install all DLC packet with a fake ticket, locate your ticket inside WiiU, swap the legit ticket with the fake ticket inside the tik file so that the legit ticket appears first.

Thank to @nexusmtz, @Wuigi and @Madridi
 

Attachments

  • ssm fake ticket.png
    ssm fake ticket.png
    13.6 KB · Views: 1,175
  • ssb ticket.png
    ssb ticket.png
    4.8 KB · Views: 1,076
Last edited by raphamotta,

WarMachine77

Well-Known Member
Member
Joined
Jan 29, 2010
Messages
176
Trophies
0
XP
286
Country
United States
Just trying to wrap my head around the last steps now-Why is an FTP transfer needed on a PC, if the modified file is on your SD and already placed inside the WiiU?

Thanks for being very understanding


EDIT: I NEED TO SLEEP. SORRY I totally read that as, grab the file, put it on your SD card. You're transferring it! No need for the SD card at this point other than as a launcher. Ughhhh
 
Last edited by WarMachine77,

Madridi

Card Collector
Member
Joined
May 9, 2008
Messages
3,562
Trophies
2
Age
38
Location
Doha
XP
3,071
Country
Qatar
Yes it's almost the same. Just the blue highlight part changes with the game ID.

A front end app it's a good idea. A simple script could do the hex editing. Maybe someone with programming skills could do this in 20 minutes. If no one try this I gonna try next weekend, I just need to learn more about programming :)
A script won't work as the .tik file may change from one person to the other (my tik file might have 3 tickets while yours might have 2 for example)

Also, the tickets inside the tik file are not one standard size. They are 2 sizes. Disc tickets are 848 bytes while eshop tickets are 696 bytes.

It's also worth noting that you can identify the start of the ticket with first four bytes. They will always be: 00 01 00 04
 

raphamotta

Well-Known Member
OP
Member
Joined
Jul 12, 2013
Messages
685
Trophies
1
Age
40
XP
2,226
Country
Just trying to wrap my head around the last steps now-Why is an FTP transfer needed on a PC, if the modified file is on your SD and already placed inside the WiiU?

Thanks for being very understanding


EDIT: I NEED TO SLEEP. SORRY I totally read that as, grab the file, put it on your SD card. You're transferring it! No need for the SD card at this point other than as a launcher. Ughhhh

Don't worry. Maybe the tutorial is a little confusing because English is not my mother language. If you find any mistake in English language please let me know. And always backup your tik file, that way if you mess it you can always start again.

A script won't work as the .tik file may change from one person to the other (my tik file might have 3 tickets while yours might have 2 for example)

Also, the tickets inside the tik file are not one standard size. They are 2 sizes. Disc tickets are 848 bytes while eshop tickets are 696 bytes.

It's also worth noting that you can identify the start of the ticket with first four bytes. They will always be: 00 01 00 04

I think it possible to make a script to swap the tickets inside the tik file. Maybe through the game ID we can know where the ticket starts and ends. About the ticket sizes I don't know, maybe there's someway to identifies it. If we can to visually we can figured out how to make a script. My programming skills are a bit rusty, next weekend I'm going to try to write a script in c.
 

suzsuzuki

Well-Known Member
Member
Joined
Aug 25, 2016
Messages
403
Trophies
0
Age
36
XP
471
Country
Brazil
Great tutorial! Now I can play SSB without CFW! And since I don't have haxchi it's perfect! I tried and worked! Nest step is try with Hyrule Warriors, Mario Kart 8 and Just Dance!!
 
  • Like
Reactions: raphamotta

Madridi

Card Collector
Member
Joined
May 9, 2008
Messages
3,562
Trophies
2
Age
38
Location
Doha
XP
3,071
Country
Qatar
I think it possible to make a script to swap the tickets inside the tik file. Maybe through the game ID we can know where the ticket starts and ends. About the ticket sizes I don't know, maybe there's someway to identifies it. If we can to visually we can figured out how to make a script. My programming skills are a bit rusty, next weekend I'm going to try to write a script in c.
Sure, but you might not need to swap the tickets (Not that I've seen a case like this), which is where a visual confirmation is needed. To explain a bit, So what happens is that the last ticket installed goes to the top of the tik file. In our case, we are always installing legit dlc, followed by a fake signed one. But what if the opposite happens? What if someone had fake dlc installed, then went on to buy a legit dlc? I believe the legit one would be on top, making the swap unnecessary.

Also, Game ID can't determine where ticket starts and ends, an easier route would be reading a front end program reading the keys.txt to know the exact position of each ticket. Since it will read all the txt file, it can determine the end of ticket one from the start of ticket 2.

It's doable, but I don't believe that it's as easy as you might think :D

whats the cheapest dlc on eshop atm?
Are you talking about super smash bros? or dlc in general? If you are talking about dlc in general, you're missing something. You need at least one legit DLC from each game you try to do this for, not 1 DLC for all games.

http://www45.zippyshare.com/v/QHVbAby9/file.html from Dimok's libioshax lib post. There's also a debug version on page 3 of that thread.
So I just got around to check this out. Yeah you're talking about the same release one. I thought this was new or something. The v0.1 I talked about I got through here:
http://www.wiiubru.com/appstore/#/app/ftpiiu_everywhere

Not sure where he got 0.1 from, but the date suggested that he might've compiled up to the latest commit, while what you linked to was the original release, which is not up to date (commit wise). The md5 is also different for both.

Functionality wise, I saw no difference between the 2, or the debug version.

Any idea about any of this? and any suggestions on which one I should keep on my SD?
 
  • Like
Reactions: raphamotta

suzsuzuki

Well-Known Member
Member
Joined
Aug 25, 2016
Messages
403
Trophies
0
Age
36
XP
471
Country
Brazil
Hey @raphamotta I just tried with Mercedez Benz Free DLC of MK8 and WORKS!! I'm so happy! Thanks for your tutorial! Maybe some mod can change the title of your thread for something like "[Tutorial] - Play SSB, MK8 and other games All Unlocked on sysnand without CFW". What do you think?
 

raphamotta

Well-Known Member
OP
Member
Joined
Jul 12, 2013
Messages
685
Trophies
1
Age
40
XP
2,226
Country
Hey @raphamotta I just tried with Mercedez Benz Free DLC of MK8 and WORKS!! I'm so happy! Thanks for your tutorial! Maybe some mod can change the title of your thread for something like "[Tutorial] - Play SSB, MK8 and other games All Unlocked on sysnand without CFW". What do you think?

Great! I'm glad it worked. It's a nice ideia to change the thread name. Any mod can do it? I don't know anyone.
 

aljpn91

Banned!
Banned
Joined
Dec 28, 2015
Messages
276
Trophies
0
Age
32
XP
122
Country
Are you talking about super smash bros? or dlc in general? If you are talking about dlc in general, you're missing something. You need at least one legit DLC from each game you try to do this for, not 1 DLC for all games.

thanks for clarifying that up, i missed the first few posts where this was mentioned
how did you get the free mewtwo dlc for smash btw?
 
Last edited by aljpn91,

nexusmtz

Well-Known Member
Member
Joined
Feb 17, 2016
Messages
1,386
Trophies
0
XP
1,425
Country
United States
any suggestions on which one I should keep on my SD?
I don't see anything that would help me match the elf to a commit, so I can't say which is actually later. A later create date suggests that it may have been compiled with a later commit, but that's not conclusive. To me, if an FTP server gives me the files and they are a binary match to what I expect, a specific version doesn't matter. When something doesn't work (like renaming directories) that's when I care about the version, but none of them seem to solve that problem.
 
  • Like
Reactions: Madridi

The Real Jdbye

*is birb*
Member
Joined
Mar 17, 2010
Messages
23,286
Trophies
4
Location
Space
XP
13,843
Country
Norway
Rather than following this, it might be simpler to dump the ticket with Tik2SD first, and replace the ticket in the downloaded DLC with your own before installing.
 

Site & Scene News

Popular threads in this forum

Recent Content

General chit-chat
Help Users
  • No one is chatting at the moment.
    rvtr @ rvtr: Spam bots again.