Tutorial  Updated

Play SSB, MK8 and other games All Unlocked on sysnand without CFW or AOCPtcher

This guide needs at least one legit DLC from each game you try. It works with FREE DLC too for other games like Mario Kart 8 and Zelda BOTW!!

In this tutorial I'll show you how to play Super Smash Bros with all DLCs unlocked without start a CFW or AOCPatcher for this. It should work with others games with multiple DLC like Wii Sports Club, Mario Kart 8, Hyrule Warriors and others. Of course you need a legit DLC from game you want to play.

For Mario kart 8 detail follow this link:
https://gbatemp.net/threads/tutoria...dlc-for-free-without-cfw.464407/#post-7173356


For Zelda BOTW follow:
http://gbatemp.net/threads/play-zelda-botw-with-all-dlc-for-free-without-cfw.469520

What you need:
  • At least one DLC bought in eshop. Anyone works. (needs a legit DLC)
  • Mocha CFW, Haxchi CFW, or any other SigPatcher (just in the beginning)
  • WiiU App Store (or Tik2SD + FTPiiU_Everywhere + WUP Installer GX2 +
    Mocha CFW + Homebrew Launcher

    )
  • WiiU USB Helper
  • SD Card
  • PC
  • Hex Editor (HxD for Windows)
1 - First if you have any illegitimate SSB DLC installed, just delete it using using Data manager on WiiU Config
2 - Buy any DLC on eshop (the cheaper one?)
3 - Make sure your SD card is formatted in FAT32
4 - Download the DLC of SSM of your region with WiiU USB Helper and put it in your SD card in na folder called "install" in the root.
5 - Go to Homebrew Launcher and choose App Store or go to wiiubru.com/go on you browser and choose App Store. If you don't know what's Homebrew Launcher is give a look in this guide (parts I, II and III) and choose start App Store.
6 - In App Store Download Tik2SD + FTPiiU_Everywhere + WUP Installer GX2 + Mocha CFW + Homebrew Launcher
7 - Launch Homebrew Launcher and go to Mocha_CFW (use default options). Then go to WUP Installer GX2 and choose install the DLC of SSB you just download wherever is your game (nand or USB).
8 - Back to Homebrew Launcher, go to Tik2SD and backup your tickets. Put your SD in PC and look at tik2sd folder. Open keys.txt and search where your SSB DLC is installed. The name you need to search is 0005000c10144f00 or 0005000c10145000 or 0005000c10110e00. In my case (US) it says "0002/00000012.tik".
9 - Now it's time for hex editing.
Use the link from www.marcrobledo.com/wiiu-tik-fixer/ (thanks @marc_max )
open the folder and in tik2sd wich the ticket from you game is , than drop on the site above, you gonna see 2 tickets, click in fix, and download the file , than go to step 10.
If you want to do manually, then thanks to @Rahzadan we have a VERY detailed tutorial for it. Go to this thread and after the hex editing go to step 10 below.
If you followed the @Rahzadan tutorial or used the @marc_max website above, go to step 10. I'll keep this part only for log
purpose.

Locate your ticket in your SD card according with keys.txt. Open with an hex editor (in my case it's on 0002 folder and the name is 00000012.tik. Backup the ticket.

Look that you gonna have 2x finds in the key.txt file. In my case 0002/00000012.tik@0x6a0 and 0002/00000012.tik@0x0. The number after the "@" shows where the ticket starts inside the tik file. It means probably the fake ticket is in beginning of tik (0x0) file and my legit ticket starts in 0x6a0 (note is in hexadecimal)

The fake ticket is like this, a lot of same numbers:

2MSoJA9.png

Pay attention in the blue highlight. It shows the game ID, it means this ticket is from SSM US version. If it says a number other than 0005000c10144f00, 0005000c10145000 or 0005000c10110e00 it means the ticket is from another game!

The trick here is swap the fake ticket with the legit ticket, that way the legit ticket always come first in the tik file! This picture can demonstrate what I mean:
rVtT6FJ.png

Maybe there's another game ticket inside the tik file, maybe not. Anyway, just copy and past with your hex editor the fake ticket with the legit ticket. Pay attention and don't touch other game tickets in the tik file!

After the swap save your ticket in your PC.
10 - Now put your SD back in WiiU. Open Homebrew Launcher and launch FTPiiU_everywhere (make sure you had launch Mocha CFW or other CFW before that)
11 - Go to your SSBM ticket location inside WiiU memory using a FTP browser like FileZilla or even Windows Explorer with the IP of your WiiU. Its in "storage_slc/rights/ticket/apps/xxxx/xxx.tik". Replace that ticket with the one you just modified.
12 - Open your SSB game and enjoy play with all contents without CFW!

TL;DR: Buy a cheap DLC, install all DLC packet with a fake ticket, locate your ticket inside WiiU, swap the legit ticket with the fake ticket inside the tik file so that the legit ticket appears first.

Thank to @nexusmtz, @Wuigi and @Madridi
 

Attachments

  • ssm fake ticket.png
    ssm fake ticket.png
    13.6 KB · Views: 1,173
  • ssb ticket.png
    ssb ticket.png
    4.8 KB · Views: 1,074
Last edited by raphamotta,

Madridi

Card Collector
Member
Joined
May 9, 2008
Messages
3,562
Trophies
2
Age
38
Location
Doha
XP
3,071
Country
Qatar
@raphamotta

So I've given the tutorial a good read, and I have some questions as I do it slightly differently:

- The portion about FTPiiU, did you mean FTPiiU or FTPiiU_everwhere? Cause I don't think FTPiiU sees anything besides your sd

- Assuming it is indeed FTPiiU_everywhere, would a sigpatcher really be sufficient? I believe you still need CBHC or mocha (different FTPiiU_everywhere versions for both) as the NAND access are handled differently according to @nexusmtz .. So while a sigpatcher is enough to install fake signed dlc, I don't think it's enough to get NAND access.

Thanks :)
 
  • Like
Reactions: raphamotta

raphamotta

Well-Known Member
OP
Member
Joined
Jul 12, 2013
Messages
685
Trophies
1
Age
40
XP
2,222
Country
@raphamotta

So I've given the tutorial a good read, and I have some questions as I do it slightly differently:

- The portion about FTPiiU, did you mean FTPiiU or FTPiiU_everwhere? Cause I don't think FTPiiU sees anything besides your sd

- Assuming it is indeed FTPiiU_everywhere, would a sigpatcher really be sufficient? I believe you still need CBHC or mocha (different FTPiiU_everywhere versions for both) as the NAND access are handled differently according to @nexusmtz .. So while a sigpatcher is enough to install fake signed dlc, I don't think it's enough to get NAND access.

Thanks :)

Oh.. thanks! You are right! It's FTPiiU_Everywhere! And I use haxchi CFW so I thought a simple sigpatcher going to work but I tested and didn't. It really needs mocha or haxchi CFW (or maybe the old fw.img). Thanks for correcting me I'll edit the tutorial.
 
  • Like
Reactions: Madridi

Madridi

Card Collector
Member
Joined
May 9, 2008
Messages
3,562
Trophies
2
Age
38
Location
Doha
XP
3,071
Country
Qatar
Oh.. thanks! You are right! It's FTPiiU_Everywhere! And I use haxchi CFW so I thought a simple sigpatcher going to work but I tested and didn't. It really needs mocha or haxchi CFW (or maybe the old fw.img). Thanks for correcting me I'll edit the tutorial.
Glad to help :)
You might need a warning explaining which version if FTPiiU_everywhere to use depending in your set up
 
  • Like
Reactions: raphamotta

nexusmtz

Well-Known Member
Member
Joined
Feb 17, 2016
Messages
1,386
Trophies
0
XP
1,425
Country
United States
I'm using v0.4u2 and I gonna test if it works with mocha on sysnand
Fix94's 4u2 works on Mocha for this.
@Madridi, you must use ftpiiu_everwhere. You should use the build that matches your CFW so you don't wonder why some paths don't work, but for tickets, it's ok to use either, contrary to what we talked about last month. (I just tried it again to make sure) I'd use dimok's v0.4 with mocha, but getting into that might be too much for a tutorial.
 
  • Like
Reactions: Madridi

raphamotta

Well-Known Member
OP
Member
Joined
Jul 12, 2013
Messages
685
Trophies
1
Age
40
XP
2,222
Country
Fix94's 4u2 works on Mocha for this.
@Madridi, you must use ftpiiu_everwhere. You should use the build that matches your CFW so you don't wonder why some paths don't work, but for tickets, it's ok to use either, contrary to what we talked about last month. (I just tried it again to make sure) I'd use dimok's v0.4 with mocha, but getting into that might be too much for a tutorial.
Yes, I just tested with mocha cfw and ftpiiu everywhere 4u2 works fine. Anyway thanks for the advice.
 
  • Like
Reactions: Madridi

Madridi

Card Collector
Member
Joined
May 9, 2008
Messages
3,562
Trophies
2
Age
38
Location
Doha
XP
3,071
Country
Qatar
Fix94's 4u2 works on Mocha for this.
@Madridi, you must use ftpiiu_everwhere. You should use the build that matches your CFW so you don't wonder why some paths don't work, but for tickets, it's ok to use either, contrary to what we talked about last month. (I just tried it again to make sure) I'd use dimok's v0.4 with mocha, but getting into that might be too much for a tutorial.
Oh so accessing tickets with work with any dimok or Fix94's version, just not all the other paths? Good to know. It certainly simplifies this tutorial.

That being said, I anticipate problems for those using FTPiiU_everywhere for the first time! thinking fix94's version would work on mocha completely fine for everything.

Dimok has a 0.4? Mine is at 0.1. Can you provide a link for that please?
 

WarMachine77

Well-Known Member
Member
Joined
Jan 29, 2010
Messages
176
Trophies
0
XP
286
Country
United States
Hi! When you mention that it works for other games, is the hex code we're looking for the exact same?

Wanted to try this with Hyrule Warriors and Mario Kart 8. The hex editing is what worries me since it leaves little room for error...do you see yourself making a front-end application for this?

Thanks regardless, this is very exciting.
 
  • Like
Reactions: raphamotta

raphamotta

Well-Known Member
OP
Member
Joined
Jul 12, 2013
Messages
685
Trophies
1
Age
40
XP
2,222
Country
Hi! When you mention that it works for other games, is the hex code we're looking for the exact same?

Wanted to try this with Hyrule Warriors and Mario Kart 8. The hex editing is what worries me since it leaves little room for error...do you see yourself making a front-end application for this?

Thanks regardless, this is very exciting.
Yes it's almost the same. Just the blue highlight part changes with the game ID.

A front end app it's a good idea. A simple script could do the hex editing. Maybe someone with programming skills could do this in 20 minutes. If no one try this I gonna try next weekend, I just need to learn more about programming :)
 
Last edited by raphamotta,

WarMachine77

Well-Known Member
Member
Joined
Jan 29, 2010
Messages
176
Trophies
0
XP
286
Country
United States
That's awesome! I guess for now I was wondering where I'd find the hex value/game ID that you found for SSB (0005000c10144f00 or 0005000c10145000 or 0005000c10110e00) for those other games.

I know Hyrule Warriors is BWPE01 for the title ID, but I'm not sure what I should be looking for here. Thanks again :)

EDIT: Whoops, sorry, just saw this : http://wiiubrew.org/wiki/Title_database
 
  • Like
Reactions: raphamotta

raphamotta

Well-Known Member
OP
Member
Joined
Jul 12, 2013
Messages
685
Trophies
1
Age
40
XP
2,222
Country
That's awesome! I guess for now I was wondering where I'd find the hex value/game ID that you found for SSB (0005000c10144f00 or 0005000c10145000 or 0005000c10110e00) for those other games.

I know Hyrule Warriors is BWPE01 for the title ID, but I'm not sure what I should be looking for here. Thanks again :)

EDIT: Whoops, sorry, just saw this : http://wiiubrew.org/wiki/Title_database

That's right, just search the ID of your Hyrule Warriors DLC region (0005000C..... )
 
  • Like
Reactions: WarMachine77

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    Psionic Roshambo @ Psionic Roshambo: https://m.youtube.com/watch?v=lDRjqI-fBVI&pp=ygUPVml0Z2luIG1hZ2ljaWFu