It's confirmed. It works!

This guide uses the FREE DLC "Language pack" to do the trick. You need download it on eshop.

In this tutorial I'll show you how to play Zelda BOTW with all DLCs unlocked without start a CFW or something for this. It should work with others games with multiple DLC like MK8, Wii Sports Club, Super Smash Bros, Hyrule Warriors and others. Of course you need a legit DLC from game you want to play.

For Super Smash Bros detail follow this link:

https://gbatemp.net/threads/tutoria...-without-cfw-or-aocpatcher-on-sysnand.464178/

For MK8 detail follow this link:

https://gbatemp.net/threads/tutorial-play-mario-kart-8-with-all-dlc-for-free-without-cfw.464407/#post-7173356

What you need:

Spoiler

• Zelda BOTW "Language Pack" downloaded from eshop. You need the latest update and download it from game options (needs a legit DLC)
• Mocha CFW, Haxchi CFW, or any other (just in the beginning)
• WiiU App Store (or Tik2SD + FTPiiU_Everywhere + WUP Installer GX2 +
  Mocha CFW + Homebrew Launcher)
• WiiU USB Helper
• SD Card
• PC
• Hex Editor (HxD for Windows)

1 - First if you have any illegitimate Zelda BOTW DLC installed, just delete it using using Data manager on WiiU Config
2 - Download the DLC on eshop
3 - Make sure your SD card is formatted in FAT32
4 - Download the DLC of Zelda BOTW of your region with WiiU USB Helper and put it in your SD card in na folder called "install" in the root.
5 - Go to Homebrew Launcher and choose App Store or go to wiiubru.com/go on you browser and choose App Store. If you don't know what's Homebrew Launcher is give a look in this guide (parts I, II and III) and choose start App Store.
6 - In App Store Download Tik2SD + FTPiiU_Everywhere + WUP Installer GX2 + Mocha CFW + Homebrew Launcher
7 - Launch Homebrew Launcher and go to Mocha_CFW (use default options). Then go to WUP Installer GX2 and choose install the DLC of Zelda BOTW you just download wherever is your game (nand or USB).
8 - Back to Homebrew Launcher, go to Tik2SD and backup your tickets. Put your SD in PC and look at tik2sd folder. Open keys.txt and search where your Zelda BOTW DLC is installed. The name you need to search is 0005000c101c9400 or 0005000c101c9500 or 0005000c101c9300.
9 - Now it's time for hex editing.
Use the link from www.marcrobledo.com/wiiu-tik-fixer/ (thanks @marc_max )
open the folder and in tik2sd wich the ticket from you game is , than drop on the site above, you gonna see 2 tickets, click in fix, and download the file , than go to step 10.

Spoiler

If you want to do manually, then thanks to @Rahzadan we have a VERY detailed tutorial for it. Go to this thread and after the hex editing go to step 10 below.

Spoiler

If you followed the @Rahzadan tutorial or used the @marc_max website above, go to step 10. I'll keep this part only for log
purpose.

Spoiler

Locate your ticket in your SD card according with keys.txt. Open with an hex editor (in my case it's on 0009 folder and the name is 00000015.tik. Backup the ticket.

Look that you gonna have 2x finds in the key.txt file. In my case 0009/00000015.tik@0x6a0 and 0009/00000015.tik@0x0. The number after the "@" shows where the ticket starts inside the tik file. It means probably the fake ticket is in beginning of tik (0x0) file and my legit ticket starts in 0x6a0 (note is in hexadecimal).

The fake ticket is like this, a lot of same numbers:

Spoiler

In this case it shows SSB ticket, but for Zelda BOTW ticket is the same thing, just another Game ID.

Pay attention in the blue highlight. It shows the game ID. If it says a number other than 0005000c101c9400 or 0005000c101c9500 or 0005000c101c9300 it means the ticket is from another game!

The trick here is swap the fake ticket with the legit ticket, that way the legit ticket always come first in the tik file! This picture can demonstrate what I mean:

Spoiler

In this case it shows SSB ticket, but for Zelda BOTW ticket is the same thing.

Maybe there's another game ticket inside the tik file, maybe not. Anyway, just copy and past with your hex editor the fake ticket with the legit ticket. Pay attention and don't touch other game tickets in the tik file!

If your legit ticket comes first you don't need swap the tickets! You already can play with all DLC unlocked! I believe it can happens if you download the free DLC after install the fake DLC.

After the swap save your ticket in your PC.

10 - Now put your SD back in WiiU. Open Homebrew Launcher and launch FTPiiU_everywhere (make sure you had launch Mocha CFW or other CFW before that)
11 - Go to your Zelda BOTW ticket location inside WiiU memory using a FTP browser like FileZilla or even Windows Explorer with the IP of your WiiU. Its in "storage_slc/rights/ticket/apps/xxxx/xxx.tik". Replace that ticket with the one you just modified.
12 - Open your Zelda BOTW game and enjoy play with all contents without CFW!

TL;DR: Download the free DLC, install all DLC packet with a fake ticket, locate your ticket inside WiiU, swap the legit ticket with the fake ticket inside the tik file so that the legit ticket appears first.

Thank to @nexusmtz and @Madridi

 

[Madridi]

I think you quoted the wrong person @raphamotta .. I know how to do it manually.

Also, @marc_max .. how would your program detect how many tickets are in one tik file? And would it know the size of the ticket it sees? (The size is not always 848 bytes)

In fact, different size tickets can be found on the same tik file

Is there some sort of countermeasures in place?

 

[Cyan]

tickets are not always the same size?
I thought the "ticket file" had different size due to the possibility to have multiple "ticket" inside. but a ticket is always 848 bytes.
the ticket file is multiple of 848.

Or am I wrong?
anyway, if the ticket is not 848, the ticket size had to be somewhere in the ticket's header. (not the ticket file's header)
I don't think it has any size info, so it should have a fixed size.

 

[Madridi]

tickets are not always the same size?
I thought the "ticket file" had different size due to the possibility to have multiple "ticket" inside. but a ticket is always 848 bytes.
the ticket file is multiple of 848.

Or am I wrong?
anyway, if the ticket is not 848, the ticket size had to be somewhere in the ticket's header. (not the ticket file's header)
I don't think it has any size info, so it should have a fixed size.

Yeah, some are 696 bytes (eshop games I believe).

The tik file has different sizes because it has multiple tickets, that's true. But those multiple tickets could also be different sizes

 

[Cyan]

ahh, you are right. I thought it was 1696 (2x848)
then the size should be specified in the ticket, or the ticket type (or version) might determine its size?

is there a place to get the ticket format ?
Wiibrew has the wii version, but it matches the wiiu ticket only up to 0x01E3

 

[marc_max]

Also, @marc_max .. how would your program detect how many tickets are in one tik file? And would it know the size of the ticket it sees? (The size is not always 848 bytes)

It works with 696 and 848 bytes tickets.

 

[naddel81]

the trick is great, don't get me wrong, but why not just launch haxchi and press B? takes 5 seconds and you are done.

 

[suzsuzuki]

the trick is great, don't get me wrong, but why not just launch haxchi and press B? takes 5 seconds and you are done.

Well, why not?

For me this trick is great because I don't play most eshop games, and play a lot of BOTW, MK, Smash, etc... I use haxchi rarely

 

[nexusmtz]

but why not just launch haxchi and press B?

And why not just have haxchi's default be sysmenu and avoid pressing B entirely? It's all about choices. CFW is one way to unlock the DLC, ticket manipulation is another.

It's better that a method be documented, even if it seems less efficient, since it prevents others from having to stumble upon it on their own.

Also, for some people, finding exploits like this is part of the entertainment value of owning a hackable console.

 

[Cyber Akuma]

OK look this:

https://gbatemp.net/threads/tutorial-hex-editing-unlocking-dlc-without-cfw-or-sigpatch.469698/

And download HxD, open your file and tell us if you see 2 tickets like this:
It can has more than 2 tickets too if in the file has another games.

EDIT: Sorry @Madridi my friend I quoted you instead of @Cyber Akuma

Argh, sorry! For some reason I wasn't getting notifications that people had replied to this topic.

Ok, so, I realized a big mistake I was making was installing my purchased DLC while under CFW, so of course it works if I do that... but when I try re-downloading it without CFW, it fails to install! I get Error 105-3687 when I start the game.

Unfortunately, the tickets for both games have other items in them, and I don't have a copy from before I attempted to install my own DLC. I am not sure what to do.

 

[Madridi]

Argh, sorry! For some reason I wasn't getting notifications that people had replied to this topic.

Ok, so, I realized a big mistake I was making was installing my purchased DLC while under CFW, so of course it works if I do that... but when I try re-downloading it without CFW, it fails to install! I get Error 105-3687 when I start the game.

Unfortunately, the tickets for both games have other items in them, and I don't have a copy from before I attempted to install my own DLC. I am not sure what to do.

That said normal for notifications. He added your name and quote as an edit. You don't get a notification on edits. Unless you had followed this stopic, it's normal.

As for your issue, you're saying it works under cfw but not under normal usage, with that eshop error? Most likely, you need to swap the positions of your ticket. Open your tik file, if your fake one is listed before your legit one, swap them.

That's the reason this happens usually

 

[Cyber Akuma]

That said normal for notifications. He added your name and quote as an edit. You don't get a notification on edits. Unless you had followed this stopic, it's normal.

As for your issue, you're saying it works under cfw but not under normal usage, with that eshop error? Most likely, you need to swap the positions of your ticket. Open your tik file, if your fake one is listed before your legit one, swap them.

That's the reason this happens usually

When I load the .tik files in that site though, I only see a single legitimate ticket.

Should I attempt to re-install my downloaded DLC and then check the tik again?

 

[Madridi]

When I load the .tik files in that site though, I only see a single legitimate ticket.

Should I attempt to re-install my downloaded DLC and then check the tik again?

If you're getting errors then a ticket exists. But do that anyway

Also you have to make another tik2sd dump afterwards

 

[Cyber Akuma]

If you're getting errors then a ticket exists. But do that anyway

Also you have to make another tik2sd dump afterwards

Sorry, let me clarify. I deleted all the DLC, and then re-downloaded my purchased DLC through the eshop seeing if that would work, but it failed to install.

I am saying should I also install the downloaded DLC (not from eshop) as well before doing another tik2sd dump?

 

[Madridi]

Sorry, let me clarify. I deleted all the DLC, and then re-downloaded my purchased DLC through the eshop seeing if that would work, but it failed to install.

I am saying should I also install the downloaded DLC (not from eshop) as well before doing another tik2sd dump?

Deleting all dlc doesn't remove its ticket. It will have to be removed manually afaik

 

[Cyber Akuma]

Deleting all dlc doesn't remove its ticket. It will have to be removed manually afaik

You mean manually remove all the DLC from the ticket? Would I be able to leave the other stuff not related to the DLC intact?

 

[Madridi]

You mean manually remove all the DLC from the ticket? Would I be able to leave the other stuff not related to the DLC intact?

Yes, if you know what you are doing.

You have to create a fresh dump of tik2sd, then you have to use the text file from tik2sd to determine each DLC's location, then open each of those tik files and delete only the dlc tiks (not the entire thing).

Naturally, might be a dangerous process if you mess something up

 

[Cyber Akuma]

AAARRRGGGHHH!

Wow... I'm an idiot! I figured out why nothing made sense, why I could see no bad entries in the ticket file, why trying to fix the ticket wasn't working....

.... I was looking at the wrong tickets!

i didn't realize that the game itself and it's DLCs would be on different tickets! When I did it for BotW and Smash, the Ticket IDs were listed in the guides, so I just used those. Since there was no guide for Pikmin or Tokyo Mirage Sessions, I looked up the ticket IDs myself... but I didn't realize the Ticket ID would be different for the game and for the DLC and was using the game's Ticket IDs. I finally realized this when confused why it was not working I tried to lookup the Smash ticket that I know was working and it showed up as only the game and nothing else with no bad tickets in the list... and it wasn't even the same ticket that I apparently edited last time, that's when I realized there was several ticket lists, one of which was for DLC.

Anyway, while I got it working now, it was stil a little iffy, so I wanted to make sure if none of this possibly screwed something up:

So after patching the tickets, I installed them back on my WiiU overwriting the old ones, and then installed the DLC through WUP GX2 (I didn't re-install the purchased DLC from the store because I didn't know if now that I have a ticket that gives me all the DLC this would confuse the store into thinking I owned it all and cause a red flag).

The games would complain every time I boot them up that some purchased DLC was missing and to check the download manager, but when started the DLC appeared to be there.

I checked the download manager, and it showed bad installs for the DLC and asked me to delete them from there. When I did though and went back to the eshop just to check it thankfully only showed the DLC I had purchased... but it didn't have an option to re-download it, seemed to assume I already had it installed.

I went to memory management and still saw the DLC installed there somehow.... it appears to be working in the games too and that error message is gone.

So if this mess resolved then? Confused why it would think there was uninstalled DLC, and when I chose delete from the download manager it didn't delete anything and the eshop could tell the DLC was installed...

 

[raphamotta]

AAARRRGGGHHH!

Wow... I'm an idiot! I figured out why nothing made sense, why I could see no bad entries in the ticket file, why trying to fix the ticket wasn't working....

.... I was looking at the wrong tickets!

i didn't realize that the game itself and it's DLCs would be on different tickets! When I did it for BotW and Smash, the Ticket IDs were listed in the guides, so I just used those. Since there was no guide for Pikmin or Tokyo Mirage Sessions, I looked up the ticket IDs myself... but I didn't realize the Ticket ID would be different for the game and for the DLC and was using the game's Ticket IDs. I finally realized this when confused why it was not working I tried to lookup the Smash ticket that I know was working and it showed up as only the game and nothing else with no bad tickets in the list... and it wasn't even the same ticket that I apparently edited last time, that's when I realized there was several ticket lists, one of which was for DLC.

Anyway, while I got it working now, it was stil a little iffy, so I wanted to make sure if none of this possibly screwed something up:

So after patching the tickets, I installed them back on my WiiU overwriting the old ones, and then installed the DLC through WUP GX2 (I didn't re-install the purchased DLC from the store because I didn't know if now that I have a ticket that gives me all the DLC this would confuse the store into thinking I owned it all and cause a red flag).

The games would complain every time I boot them up that some purchased DLC was missing and to check the download manager, but when started the DLC appeared to be there.

I checked the download manager, and it showed bad installs for the DLC and asked me to delete them from there. When I did though and went back to the eshop just to check it thankfully only showed the DLC I had purchased... but it didn't have an option to re-download it, seemed to assume I already had it installed.

I went to memory management and still saw the DLC installed there somehow.... it appears to be working in the games too and that error message is gone.

So if this mess resolved then? Confused why it would think there was uninstalled DLC, and when I chose delete from the download manager it didn't delete anything and the eshop could tell the DLC was installed...

Well it seems you figured out your error and fixed all things. In fact only the fake DLC could be installed without the legit, if the tickets are swapped. But don't forget to do a backup os you tickets now, using tik2sd just in case.

 

[Ratatattat]

So how does one get FREE DLC "Language pack" from Nintendo or is that a specific BOTW update?

 

[djnate27]

If anyone deserves to by paid for their labor - it's the developers of this game. They made an awesome experience and should be fully compensated.
If you worked hard on something, you'd want to get paid, right?

PS. Buy the game, buy the DLC. It's money well spent.