Tutorial  Updated

Play Zelda BOTW with All DLC for FREE without CFW

It's confirmed. It works!

This guide uses the FREE DLC "Language pack" to do the trick. You need download it on eshop.


In this tutorial I'll show you how to play Zelda BOTW with all DLCs unlocked without start a CFW or something for this. It should work with others games with multiple DLC like MK8, Wii Sports Club, Super Smash Bros, Hyrule Warriors and others. Of course you need a legit DLC from game you want to play.

For Super Smash Bros detail follow this link:

https://gbatemp.net/threads/tutoria...-without-cfw-or-aocpatcher-on-sysnand.464178/


For MK8 detail follow this link:

https://gbatemp.net/threads/tutorial-play-mario-kart-8-with-all-dlc-for-free-without-cfw.464407/#post-7173356

What you need:
  • Zelda BOTW "Language Pack" downloaded from eshop. You need the latest update and download it from game options (needs a legit DLC)
  • Mocha CFW, Haxchi CFW, or any other (just in the beginning)
  • WiiU App Store (or Tik2SD + FTPiiU_Everywhere + WUP Installer GX2 +
    Mocha CFW + Homebrew Launcher
    )
  • WiiU USB Helper
  • SD Card
  • PC
  • Hex Editor (HxD for Windows)
1 - First if you have any illegitimate Zelda BOTW DLC installed, just delete it using using Data manager on WiiU Config
2 - Download the DLC on eshop
3 - Make sure your SD card is formatted in FAT32
4 - Download the DLC of Zelda BOTW of your region with WiiU USB Helper and put it in your SD card in na folder called "install" in the root.
5 - Go to Homebrew Launcher and choose App Store or go to wiiubru.com/go on you browser and choose App Store. If you don't know what's Homebrew Launcher is give a look in this guide (parts I, II and III) and choose start App Store.
6 - In App Store Download Tik2SD + FTPiiU_Everywhere + WUP Installer GX2 + Mocha CFW + Homebrew Launcher
7 - Launch Homebrew Launcher and go to Mocha_CFW (use default options). Then go to WUP Installer GX2 and choose install the DLC of Zelda BOTW you just download wherever is your game (nand or USB).
8 - Back to Homebrew Launcher, go to Tik2SD and backup your tickets. Put your SD in PC and look at tik2sd folder. Open keys.txt and search where your Zelda BOTW DLC is installed. The name you need to search is 0005000c101c9400 or 0005000c101c9500 or 0005000c101c9300.
9 - Now it's time for hex editing.
Use the link from www.marcrobledo.com/wiiu-tik-fixer/ (thanks @marc_max )
open the folder and in tik2sd wich the ticket from you game is , than drop on the site above, you gonna see 2 tickets, click in fix, and download the file , than go to step 10.
If you want to do manually, then thanks to @Rahzadan we have a VERY detailed tutorial for it. Go to this thread and after the hex editing go to step 10 below.
If you followed the @Rahzadan tutorial or used the @marc_max website above, go to step 10. I'll keep this part only for log
purpose.

Locate your ticket in your SD card according with keys.txt. Open with an hex editor (in my case it's on 0009 folder and the name is 00000015.tik. Backup the ticket.

Look that you gonna have 2x finds in the key.txt file. In my case 0009/00000015.tik@0x6a0 and 0009/00000015.tik@0x0. The number after the "@" shows where the ticket starts inside the tik file. It means probably the fake ticket is in beginning of tik (0x0) file and my legit ticket starts in 0x6a0 (note is in hexadecimal).

The fake ticket is like this, a lot of same numbers:

2MSoJA9.png


In this case it shows SSB ticket, but for Zelda BOTW ticket is the same thing, just another Game ID.

Pay attention in the blue highlight. It shows the game ID. If it says a number other than 0005000c101c9400 or 0005000c101c9500 or 0005000c101c9300 it means the ticket is from another game!

The trick here is swap the fake ticket with the legit ticket, that way the legit ticket always come first in the tik file! This picture can demonstrate what I mean:
rVtT6FJ.png


In this case it shows SSB ticket, but for Zelda BOTW ticket is the same thing.

Maybe there's another game ticket inside the tik file, maybe not. Anyway, just copy and past with your hex editor the fake ticket with the legit ticket. Pay attention and don't touch other game tickets in the tik file!

If your legit ticket comes first you don't need swap the tickets! You already can play with all DLC unlocked! I believe it can happens if you download the free DLC after install the fake DLC.

After the swap save your ticket in your PC.
10 - Now put your SD back in WiiU. Open Homebrew Launcher and launch FTPiiU_everywhere (make sure you had launch Mocha CFW or other CFW before that)
11 - Go to your Zelda BOTW ticket location inside WiiU memory using a FTP browser like FileZilla or even Windows Explorer with the IP of your WiiU. Its in "storage_slc/rights/ticket/apps/xxxx/xxx.tik". Replace that ticket with the one you just modified.
12 - Open your Zelda BOTW game and enjoy play with all contents without CFW!

TL;DR: Download the free DLC, install all DLC packet with a fake ticket, locate your ticket inside WiiU, swap the legit ticket with the fake ticket inside the tik file so that the legit ticket appears first.

Thank to @nexusmtz and @Madridi
 
Last edited by raphamotta,

huma_dawii

Well-Known Member
Member
Joined
Apr 3, 2014
Messages
3,879
Trophies
2
Age
33
Location
Planet Earth
XP
4,267
Country
United States
If anyone deserves to by paid for their labor - it's the developers of this game. They made an awesome experience and should be fully compensated.
If you worked hard on something, you'd want to get paid, right?

PS. Buy the game, buy the DLC. It's money well spent.
The DLC is definitively NOT WORTH IT.
 

Fourflour

New Member
Newbie
Joined
Dec 5, 2018
Messages
1
Trophies
0
Age
33
XP
52
Country
Netherlands
how do i know if update and dlc are installed, when i am in game it still shows that dlc is available in the store, nothing about already being installed. I am not quiet sure how the wii u works. I got this device from launch and haven't used it for years, till i found this topic and gave it a try :)

game starts flawless btw. thanks!

any way i would like to get some tips and info :)
 

Adnante

New Member
Newbie
Joined
Nov 14, 2017
Messages
4
Trophies
0
Age
38
XP
76
Country
Bosnia and Herzegovina
Hello
Yestrday i found my old wii u but usb drive is faulty so i tried again instal zelda and dlc but i cannot swp the tickets can somebody help me
 

tosswii

New Member
Newbie
Joined
Jan 30, 2019
Messages
3
Trophies
0
Age
113
XP
62
Country
United States
Couple quick questions:
  1. Is Mocha actually necessary for this? Any reason I couldn't just run tik2sd, WUP Installer, and FTPiiU Everywhere directly from the Homebrew Launcher? I ask because I'm keeping my system as stock as possible (no Homebrew Channel, no Haxchi, I just use the browser exploit whenever I want to launch Homebrew) and don't want to install HBC to run homebrew from Mocha.
  2. Shouldn't we be running tik2sd once prior to installing any DLC WUPs, thus ensuring we have a tik backup that consists entirely of properly signed tickets and no fake ones?
 

raphamotta

Well-Known Member
OP
Member
Joined
Jul 12, 2013
Messages
685
Trophies
1
Age
40
XP
2,222
Country
how do i know if update and dlc are installed, when i am in game it still shows that dlc is available in the store, nothing about already being installed. I am not quiet sure how the wii u works. I got this device from launch and haven't used it for years, till i found this topic and gave it a try :)

game starts flawless btw. thanks!

any way i would like to get some tips and info :)
Sorry the late response, did you try the tutorial again?

Hello
Yestrday i found my old wii u but usb drive is faulty so i tried again instal zelda and dlc but i cannot swp the tickets can somebody help me
What session of the tutorial did you have trouble? Did you try to use the website to swap the tickets?

Couple quick questions:
  1. Is Mocha actually necessary for this? Any reason I couldn't just run tik2sd, WUP Installer, and FTPiiU Everywhere directly from the Homebrew Launcher? I ask because I'm keeping my system as stock as possible (no Homebrew Channel, no Haxchi, I just use the browser exploit whenever I want to launch Homebrew) and don't want to install HBC to run homebrew from Mocha.
  2. Shouldn't we be running tik2sd once prior to installing any DLC WUPs, thus ensuring we have a tik backup that consists entirely of properly signed tickets and no fake ones?
1 - Browser exploit is fine. You just need any exploit to do the trick.

2 - You need to run tik2sd after the install because you need to know where the ticket is installed.
 

tosswii

New Member
Newbie
Joined
Jan 30, 2019
Messages
3
Trophies
0
Age
113
XP
62
Country
United States
1 - Browser exploit is fine. You just need any exploit to do the trick.

2 - You need to run tik2sd after the install because you need to know where the ticket is installed.
Hey, thanks for the reply. I figured any exploit would work, but just wanted to be sure in case Mocha was doing something permissions or file access related behind the scenes I didn't know about. Learning as I go here regarding the Wii U. :)

As for the tickets backup, I get that tik2sd is used to locate the correct .tik file, I was just thinking it might be a good idea to have a "clean" backup of the system tickets prior to any generated/invalid tickets getting installed.

Also, I just spent a little bit of time researching the ticket file format and digging around in my own tickets that I dumped. As best I can tell, what's happening is that WUP Installer is prepending the bogus generated ticket .tik file of the DLC it's installing onto the existing legitimate free DLC ticket .tik file, rather than appending it onto the end, thus the need for the swap via hex editing or the fixer site.

However, since all DLC for a given game shares the same title ID (e.g. the BOTW free language pack DLC and the full expansion DLC both share title ID 0005000c101c9400), wouldn't the system be looking for a single ticket within the .tik? That is, isn't the reason the ticket swap even works in the first place is because the system is only expecting/reading the first 848 bytes of the .tik and it never even looks at the bogus ticket that comes after it?

Therefore, rather than doing the swap, wouldn't it actually work and be more correct to strip the generated ticket out entirely, leaving just the original ticket (or simply restore a backup of the free DLC's corresponding .tik taken prior to installing the DLC with WUP installer)? I'm curious if anyone has tried doing either. I'd give it a shot myself, but I'm hesitant to start messing with anything that resides on the NAND since I'm totally new to the Wii U.

I could be way off base here, as like I said, I'm totally new to the Wii U scene and this is just what I've learned based on examining the .tik files and reading about their format over the past couple hours.
 

nexusmtz

Well-Known Member
Member
Joined
Feb 17, 2016
Messages
1,386
Trophies
0
XP
1,425
Country
United States
I was just thinking it might be a good idea to have a "clean" backup of the system tickets prior to any generated/invalid tickets getting installed.
There's no harm in grabbing a 'before' snapshot, but since you have to do it again to find your ticket location, and the only title that will be affected is the one you're working on, it's a bit redundant.
As best I can tell, what's happening is that WUP Installer is prepending the bogus generated ticket .tik file of the DLC it's installing onto the existing legitimate free DLC ticket .tik file, rather than appending it onto the end, thus the need for the swap via hex editing or the fixer site.
The system manipulates the tickets, not the app, but yes, if the system appended, it would just work on its own.
However, since all DLC for a given game shares the same title ID (e.g. the BOTW free language pack DLC and the full expansion DLC both share title ID 0005000c101c9400), wouldn't the system be looking for a single ticket within the .tik? That is, isn't the reason the ticket swap even works in the first place is because the system is only expecting/reading the first 848 bytes of the .tik and it never even looks at the bogus ticket that comes after it?
The swap works because only the first ticket's signature is validated, but the items allowed by all tickets are accumulated. All tickets are read.
Therefore, rather than doing the swap, wouldn't it actually work and be more correct to strip the generated ticket out entirely, leaving just the original ticket (or simply restore a backup of the free DLC's corresponding .tik taken prior to installing the DLC with WUP installer)?
If you only have the free DLC's ticket, then you only get the free DLC items. And since the first ticket's signature must be valid (unless you're running cfw) you can't mess with that ticket to turn on more items.
 

tosswii

New Member
Newbie
Joined
Jan 30, 2019
Messages
3
Trophies
0
Age
113
XP
62
Country
United States
There's no harm in grabbing a 'before' snapshot, but since you have to do it again to find your ticket location, and the only title that will be affected is the one you're working on, it's a bit redundant.
The system manipulates the tickets, not the app, but yes, if the system appended, it would just work on its own.
The swap works because only the first ticket's signature is validated, but the items allowed by all tickets are accumulated. All tickets are read.
If you only have the free DLC's ticket, then you only get the free DLC items. And since the first ticket's signature must be valid (unless you're running cfw) you can't mess with that ticket to turn on more items.
Thanks for the explanations, much appreciated!
 
D

Deleted User

Guest
It's confirmed. It works!

This guide uses the FREE DLC "Language pack" to do the trick. You need download it on eshop.


In this tutorial I'll show you how to play Zelda BOTW with all DLCs unlocked without start a CFW or something for this. It should work with others games with multiple DLC like MK8, Wii Sports Club, Super Smash Bros, Hyrule Warriors and others. Of course you need a legit DLC from game you want to play.

For Super Smash Bros detail follow this link:

https://gbatemp.net/threads/tutoria...-without-cfw-or-aocpatcher-on-sysnand.464178/


For MK8 detail follow this link:

https://gbatemp.net/threads/tutorial-play-mario-kart-8-with-all-dlc-for-free-without-cfw.464407/#post-7173356

What you need:
  • Zelda BOTW "Language Pack" downloaded from eshop. You need the latest update and download it from game options (needs a legit DLC)
  • Mocha CFW, Haxchi CFW, or any other (just in the beginning)
  • WiiU App Store (or Tik2SD + FTPiiU_Everywhere + WUP Installer GX2 +
    Mocha CFW + Homebrew Launcher
    )
  • WiiU USB Helper
  • SD Card
  • PC
  • Hex Editor (HxD for Windows)
1 - First if you have any illegitimate Zelda BOTW DLC installed, just delete it using using Data manager on WiiU Config
2 - Download the DLC on eshop
3 - Make sure your SD card is formatted in FAT32
4 - Download the DLC of Zelda BOTW of your region with WiiU USB Helper and put it in your SD card in na folder called "install" in the root.
5 - Go to Homebrew Launcher and choose App Store or go to wiiubru.com/go on you browser and choose App Store. If you don't know what's Homebrew Launcher is give a look in this guide (parts I, II and III) and choose start App Store.
6 - In App Store Download Tik2SD + FTPiiU_Everywhere + WUP Installer GX2 + Mocha CFW + Homebrew Launcher
7 - Launch Homebrew Launcher and go to Mocha_CFW (use default options). Then go to WUP Installer GX2 and choose install the DLC of Zelda BOTW you just download wherever is your game (nand or USB).
8 - Back to Homebrew Launcher, go to Tik2SD and backup your tickets. Put your SD in PC and look at tik2sd folder. Open keys.txt and search where your Zelda BOTW DLC is installed. The name you need to search is 0005000c101c9400 or 0005000c101c9500 or 0005000c101c9300.
9 - Now it's time for hex editing.
Use the link from www.marcrobledo.com/wiiu-tik-fixer/ (thanks @marc_max )
open the folder and in tik2sd wich the ticket from you game is , than drop on the site above, you gonna see 2 tickets, click in fix, and download the file , than go to step 10.
If you want to do manually, then thanks to @Rahzadan we have a VERY detailed tutorial for it. Go to this thread and after the hex editing go to step 10 below.
If you followed the @Rahzadan tutorial or used the @marc_max website above, go to step 10. I'll keep this part only for log
purpose.

Locate your ticket in your SD card according with keys.txt. Open with an hex editor (in my case it's on 0009 folder and the name is 00000015.tik. Backup the ticket.

Look that you gonna have 2x finds in the key.txt file. In my case 0009/00000015.tik@0x6a0 and 0009/00000015.tik@0x0. The number after the "@" shows where the ticket starts inside the tik file. It means probably the fake ticket is in beginning of tik (0x0) file and my legit ticket starts in 0x6a0 (note is in hexadecimal).

The fake ticket is like this, a lot of same numbers:

2MSoJA9.png


In this case it shows SSB ticket, but for Zelda BOTW ticket is the same thing, just another Game ID.

Pay attention in the blue highlight. It shows the game ID. If it says a number other than 0005000c101c9400 or 0005000c101c9500 or 0005000c101c9300 it means the ticket is from another game!

The trick here is swap the fake ticket with the legit ticket, that way the legit ticket always come first in the tik file! This picture can demonstrate what I mean:
rVtT6FJ.png


In this case it shows SSB ticket, but for Zelda BOTW ticket is the same thing.

Maybe there's another game ticket inside the tik file, maybe not. Anyway, just copy and past with your hex editor the fake ticket with the legit ticket. Pay attention and don't touch other game tickets in the tik file!

If your legit ticket comes first you don't need swap the tickets! You already can play with all DLC unlocked! I believe it can happens if you download the free DLC after install the fake DLC.

After the swap save your ticket in your PC.
10 - Now put your SD back in WiiU. Open Homebrew Launcher and launch FTPiiU_everywhere (make sure you had launch Mocha CFW or other CFW before that)
11 - Go to your Zelda BOTW ticket location inside WiiU memory using a FTP browser like FileZilla or even Windows Explorer with the IP of your WiiU. Its in "storage_slc/rights/ticket/apps/xxxx/xxx.tik". Replace that ticket with the one you just modified.
12 - Open your Zelda BOTW game and enjoy play with all contents without CFW!

TL;DR: Download the free DLC, install all DLC packet with a fake ticket, locate your ticket inside WiiU, swap the legit ticket with the fake ticket inside the tik file so that the legit ticket appears first.

Thank to @nexusmtz and @Madridi
Can I do this with smash? And can I use this to modify the homebrew launcher (channel’s) title.tik?
 

nexusmtz

Well-Known Member
Member
Joined
Feb 17, 2016
Messages
1,386
Trophies
0
XP
1,425
Country
United States
If I Need Legit DLC, Why is this Necessary? Crack DLC With Legit DLC? What is This?
Yes, you need one legitimate DLC item from the game to unlock all of that game's DLC items. The legitimate item can be free, such as BOTW's language pack. So, after following this procedure, you have a game (with all of its DLC) available for play without having to run your CFW anymore before playing that game, and possibly without buying anything.
 

Jabaroo

New Member
Newbie
Joined
Jun 10, 2019
Messages
1
Trophies
0
Age
23
XP
42
Country
Australia
I am trying this now but how do i locate the Botw .tik file in filezilla, i have navigated to the location but there are alot of folders? please help
 

TSP184

Well-Known Member
Newcomer
Joined
Oct 26, 2018
Messages
77
Trophies
0
XP
800
Country
France
Hello. Is this still possible without Wii U USB Helper ? It's discontinued.

Edit : Nevermind. I didn't realize it was taken by someone else.
 
Last edited by TSP184,

diamantaeres

New Member
Newbie
Joined
Jan 29, 2022
Messages
4
Trophies
0
Age
40
XP
44
Country
Spain
Hello!

I'm using tiramisù and launch the homebrew environment only when I need it

I know that for example if I don't run it, I can't play by injected games.

I have a genuine copy of Botw. Will the dlc work all the times or only if I launch tiramisu?

Thanks!
 

raphamotta

Well-Known Member
OP
Member
Joined
Jul 12, 2013
Messages
685
Trophies
1
Age
40
XP
2,222
Country
Hello!

I'm using tiramisù and launch the homebrew environment only when I need it

I know that for example if I don't run it, I can't play by injected games.

I have a genuine copy of Botw. Will the dlc work all the times or only if I launch tiramisu?

Thanks!
Will work all, the time without enable tiramisu.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    SylverReZ @ SylverReZ: https://www.youtube.com/watch?v=hke2YUirpf4 +1