Tutorial  Updated

Play Mario Kart 8 with All DLC for FREE without CFW

This guide uses the FREE DLC "Mercedes Benz" to do the trick. You need download it on eshop.

In this tutorial I'll show you how to play Mario kart 8 with all DLCs unlocked without start a CFW or something for this. It should work with others games with multiple DLC like Wii Sports Club, Super Smash Bros, Hyrule Warriors and others. Of course you need a legit DLC from game you want to play.

For Super Smash Bros detail follow this link:

https://gbatemp.net/threads/tutoria...-without-cfw-or-aocpatcher-on-sysnand.464178/


For Zelda BOTW follow:
http://gbatemp.net/threads/play-zelda-botw-with-all-dlc-for-free-without-cfw.469520

What you need:
  • Mercedes Benz DLC downloaded from eshop. (needs a legit DLC)
  • Mocha CFW, Haxchi CFW, or any other (just in the beginning)
  • WiiU App Store (or Tik2SD + FTPiiU_Everywhere + WUP Installer GX2 +
    Mocha CFW + Homebrew Launcher
    )
  • WiiU USB Helper
  • SD Card
  • PC
  • Hex Editor (HxD for Windows)
1 - First if you have any illegitimate MK8 DLC installed, just delete it using using Data manager on WiiU Config
2 - Download the DLC on eshop
3 - Make sure your SD card is formatted in FAT32
4 - Download the DLC of MK8 of your region with WiiU USB Helper and put it in your SD card in na folder called "install" in the root.
5 - Go to Homebrew Launcher and choose App Store or go to wiiubru.com/go on you browser and choose App Store. If you don't know what's Homebrew Launcher is give a look in this guide (parts I, II and III) and choose start App Store.
6 - In App Store Download Tik2SD + FTPiiU_Everywhere + WUP Installer GX2 + Mocha CFW + Homebrew Launcher
7 - Launch Homebrew Launcher and go to Mocha_CFW (use default options). Then go to WUP Installer GX2 and choose install the DLC of MK8 you just download wherever is your game (nand or USB).
8 - Back to Homebrew Launcher, go to Tik2SD and backup your tickets. Put your SD in PC and look at tik2sd folder. Open keys.txt and search where your MK8 DLC is installed. The name you need to search is 0005000c1010ec00 or 0005000c1010ed00 or 0005000c1010eb00. In my case (US) it says "0009/00000015.tik".
9 - Now it's time for hex editing.
Thanks to @Rahzadan we have a VERY detailed tutorial for it. Go to this thread and after the hex editing go to step 10 below.
If you followed the @Rahzadan tutorial go to step 10. I'll keep this part only for log
purpose.

Locate your ticket in your SD card according with keys.txt. Open with an hex editor (in my case it's on 0009 folder and the name is 00000015.tik. Backup the ticket.

Look that you gonna have 2x finds in the key.txt file. In my case 0009/00000015.tik@0x6a0 and 0009/00000015.tik@0x0. The number after the "@" shows where the ticket starts inside the tik file. It means probably the fake ticket is in beginning of tik (0x0) file and my legit ticket starts in 0x6a0 (note is in hexadecimal).

The fake ticket is like this, a lot of same numbers:

2MSoJA9.png


In this case it shows SSB ticket, but for MK8 ticket is the same thing, just another Game ID.

Pay attention in the blue highlight. It shows the game ID. If it says a number other than 0005000c1010ec00 or 0005000c1010ed00 or 0005000c1010eb00 it means the ticket is from another game!

The trick here is swap the fake ticket with the legit ticket, that way the legit ticket always come first in the tik file! This picture can demonstrate what I mean:
rVtT6FJ.png


In this case it shows SSB ticket, but for MK8 ticket is the same thing.

Maybe there's another game ticket inside the tik file, maybe not. Anyway, just copy and past with your hex editor the fake ticket with the legit ticket. Pay attention and don't touch other game tickets in the tik file!

If your legit ticket comes first you don't need swap the tickets! You already can play with all DLC unlocked! I believe it can happens if you download the free DLC after install the fake DLC.

After the swap save your ticket in your PC.
10 - Now put your SD back in WiiU. Open Homebrew Launcher and launch FTPiiU_everywhere (make sure you had launch Mocha CFW or other CFW before that)
11 - Go to your MK8 ticket location inside WiiU memory using a FTP browser like FileZilla or even Windows Explorer with the IP of your WiiU. Its in "storage_slc/rights/ticket/apps/xxxx/xxx.tik". Replace that ticket with the one you just modified.
12 - Open your MK8 game and enjoy play with all contents without CFW!

TL;DR: Download the free DLC, install all DLC packet with a fake ticket, locate your ticket inside WiiU, swap the legit ticket with the fake ticket inside the tik file so that the legit ticket appears first.

Thank to @nexusmtz and @Madridi
 
Last edited by raphamotta,
D

Deleted-384698

Guest
attempted this twice from scratch (deleting tik and game even), not sure why but it doesn't want to work, it's even extremely easy in that the fake/legit tickets are the only tickets in the file and it's easy to see where they start and stop because the first stops where the second starts @ 0x350 and the second goes to the end

but for some reason it will not work
 

nexusmtz

Well-Known Member
Member
Joined
Feb 17, 2016
Messages
1,386
Trophies
0
XP
1,425
Country
United States
attempted this twice from scratch (deleting tik and game even), not sure why but it doesn't want to work, it's even extremely easy in that the fake/legit tickets are the only tickets in the file and it's easy to see where they start and stop because the first stops where the second starts @ 0x350 and the second goes to the end

but for some reason it will not work
Can you tell us what 'it will not work' means? What error do you get when you start the game? Which ticket bucket file did you change?
 
D

Deleted-384698

Guest
Can you tell us what 'it will not work' means? What error do you get when you start the game? Which ticket bucket file did you change?
Same error as if I had not done anything, that the DLC is corrupted, but it works fine with sig patch or mocha.
Mine was 00009/00000015.tik as indicated by the txt file. Curiously, both appear to be repetitive, so I'm wondering if, because you have to download the DLC all together through the tools available, it includes the Merc DLC and thus overwrites the valid ticket for it with the fake, though I don't know if it works that way.
 

nexusmtz

Well-Known Member
Member
Joined
Feb 17, 2016
Messages
1,386
Trophies
0
XP
1,425
Country
United States
Same error as if I had not done anything, that the DLC is corrupted, but it works fine with sig patch or mocha.
Mine was 00009/00000015.tik as indicated by the txt file. Curiously, both appear to be repetitive, so I'm wondering if, because you have to download the DLC all together through the tools available, it includes the Merc DLC and thus overwrites the valid ticket for it with the fake, though I don't know if it works that way.
Both tickets have the repeating DISEASED ISABELLA (D15EA5ED15ABE11A)?

If the only tickets in that file are the two MK8 DLC tickets, you can delete the file, go into eShop, exit eShop, and look at the file under storage_slc via ftp_everywhere. That'll be your legit ticket. (eShop replaces missing tickets while the slot machine is running, and naturally, any ticket eShop gives you will be legit.) Make sure it's there, then install the DLC with the fake ticket using WUPInstaller and look again. Both tickets should then be there, but in the wrong order.
 
D

Deleted-384698

Guest
bizarrely i did this again and both tickets ended up being copies of the legit ticket, but overwrote the second legit with a fake from a backup i made and it works now

really weird
must have been bless hex editor being a buggy piece of shit

it appears what the hex editor was deciding to do was to instead of cut and paste, copy and overwrite the proceeding bytes, but present it as though it had pushed them forward or back, only to reveal it had effectively duplicated the series of bytes when reopened

there are no good hex editors in linux
 
  • Like
Reactions: nexusmtz

justhed0n

Active Member
Newcomer
Joined
Aug 17, 2009
Messages
27
Trophies
0
XP
313
Country
Thanks for the tut, got it working in the end by backing up the tiks after downloading the free DLC and copied that into the fake tik,when I added the DLC
 

Shibva

Member
Newcomer
Joined
Aug 26, 2020
Messages
22
Trophies
0
Age
17
XP
56
Country
United States
I'm kinda new to the hacking scene and I don't have very high IQ. Which one do I edit? Or is there no way to tell based on the picture?

image.jpg
 

Attachments

  • upload_2020-8-29_3-47-58.png
    upload_2020-8-29_3-47-58.png
    420.8 KB · Views: 190

godreborn

Welcome to the Machine
Member
Joined
Oct 10, 2009
Messages
38,471
Trophies
3
XP
29,138
Country
United States
I'm kinda new to the hacking scene and I don't have very high IQ. Which one do I edit? Or is there no way to tell based on the picture?

View attachment 223079

I only skimmed the tutorial, but the ticket you want isn't in your list. I suspect a different region, because the one 0009 00000015.tx 0x0 and 0x350 are nearly the same title id. look for one that says diseased isabella like the picture in the op.
 

godreborn

Welcome to the Machine
Member
Joined
Oct 10, 2009
Messages
38,471
Trophies
3
XP
29,138
Country
United States
it looks like it's just moving a legit ticket above a fake one. very easy stuff. use paste+insert, because there's a paste+write as well, which will overwrite the hex.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    Xdqwerty @ Xdqwerty: *yawn*