How To: Hack Nintendo Wii With System Menu 4.2

Anything done to your console is at your own RISK!

This will allow you to play burned backups of games that you own. You will also be able to run any homebrew software on your Wii.

If you’re not on 4.2, Do NOT Update. It’s much more difficult to hack.

This is for people stuck on 4.2 with no cIOS. Make sure your sd card is formatted to FAT32 or FAT16 and your Wii is connected to the net through Wi-Fi (although it should be possible to do offline), then download this pack, Unzip the pack and place the files and folders onto the root of your sd card. Your sd card should like this:



Step 1 – Installing Homebrew Channel and Bootmii

a. On your wii’s main menu, click the SD Menu icon. Afterwards, insert the SD Card into the Wii. A Pop up saying Load boot.dol/elf? should appear. Select Yes.

b. The Hackmii Installer should now run. Make sure to install Homebrew Channel and Bootmii as an IOS and/or boot2. Always install it as boot2 if your wii can.

Step 2 – Backup Your Wii’s NAND

It is highly recommended to make a NAND Backup with bootmii as it can save you from 99% of bricks. That is, if you can install bootmii as boot2. You’ll need a SD Card with atleast 550 MB free on it. Also note bootmii can be picky about SD Cards so its best to avoid generic ones.

a) Place the SD Card into your wii and power it on. If bootmii was installed as boot2, the bootmii screen should automatically appear, if it was installed as an IOS, then you’ll have to go to homebrew channel, press ‘home’ on your wiimote then select ‘Load Bootmii’

b) Navigate using the power/reset/eject buttons on the front of your console and select the icon with the gears on it. If the console buttons don’t work, you’ll have to use a gamecube controller.

c) Now select the icon that has an arrow pointing to a SD Card but from the chip. Then follow the on-screen instructions to backup your NAND.

d) In 10 – 15 minutes, the NAND Backup should be complete. You may have gotten a few bad blocks but any number of bad blocks under 80 is normal and fine. Once all is done, you can exit bootmii.

e) Remove the SD Card from your wii and insert into your PC, backup the ‘bootmii’ folder, the ‘NAND.bin’ file and ‘key.bin’ file from your sd card onto a safe place on your PC. Once these files/folders are on your PC, delete them from your SD Card. If you do not and bootmii as boot2 is installed, it will load everytime!

If you were to ever brick, just copy the bootmii folder and ‘NAND.bin’ from your PC onto the root of your SD Card. Then repeat parts a, b & c but this time selecting the icon that points to the chip. While bootmii/boot2 can save you from full bricks, bootmii/IOS cannot! It is not recommended to use bootmii as an IOS to restore your NAND!

Step 3 – Restoring The Bug Into IOS36

Pre-Note: If you have no working Wi-Fi Connection, you can try selecting ‘Load iOS from SD Card’ instead of ‘Download from NUS’

a) Load Homebrew Channel and run DOP-Mii, on the IOS Selection Screen, select ‘Install An iOS w/ fakesign’ by pressing down on the d-pad then A on the wiimote. You should now be in the trucha bug restorer portion of DOP-Mii. Load IOS36 and select Downgrade IOS15. Each time it asks, select ‘Download from NUS’ Make sure you get no errors. If Loading IOS36 doesn’t work for this step, press B for no IOS reload when asked to load IOS. Although It should do these steps almost automatically, I’ll just include the info.

b) In the fakesign installation, once iOS15 is downgraded, it should begin patching iOS36.. Make sure to install the patched IOS36 with all these patches selected (Just Say Yes to All of the ones that come up)
Install IOS to slot (36)
Hash Check (trucha) Yes
ES_Identify Yes
NAND Permissions Yes

Then Press A on Install Patched IOS36. Again, everytime it asks, choose ‘Download from NUS’

c) On the same fakesign installation. Load IOS36 and select Restore IOS15. Each time it asks, select ‘Download from NUS’

Once done, return to homebrew channel.

Step 4 – Delete The Stubbed IOS

a)Re-run Homebrew Channel and Load DOP-Mii again. Choose the first option by pressing A (iOS:36), You should now be taken to a menu with three options: iOS, BC, mIOS. Select iOS by pressing A. Go to iOS222. Under currently installed, you should ‘Stub’, Press – on your wiimote and press A to confirm. Do the same un-installation process for iOS223, iOS249 and iOS250 also. Do NOT remove any Other IOS!

Once done, exit.

Step 5 – Installing cIOS249-rev17

a) Re-run Homebrew Channel and load cIOS38-rev17 Installer. Choose IOS36 and press A and then choose Network Install (requires wi-fi) or Wad Install (offline) and press A.

cIOS249 Installed.

Step 6 – Install and Patch A Few More IOS

a) Load up homebrew, then load up DOP-Mii. Load IOS36 or IOS249, select IOS menu, Navigate to IOS53, press + to install and say yes for Sig Hash Check (Trucha Bug) but say NO to the other patches. Do the same for IOS55. Next press home to return to homebrew channel.

b) Load up homebrew channel once more, then load up WAD Manager. Load IOS249, SD Slot and NAND Emulation: Disabled, navigate to the wad folder, highlight IOS60patched.wad and press A. Make sure action is set to install and Install the wad. After a successful install, Press Home to go back to homebrew channel.

c) Do the same for IOS70patched.wad. Make Sure the action is Set to INSTALL!

Step 7 – Installing Priiloader (Brick Protection and System Hacks)

Before continuing, download your hacks.ini file from here, unzip it and place the hacks.ini onto the root of your SD Card.

a) Load Homebrew Channel and run Priiloader v0.4 (rev78) installer.

b) Press + on the wiimote to install.

c) Your wii should reboot into Priiloader after the installation (If it doesn’t, power off your Wii and hold reset on the console while turning it on). Go to System Menu Hacks and enable ‘Block Disc Updates’ and any other hacks you would like, select ‘Save Settings’ when finish. Press B on the wiimote to go back to the main menu, next go to Settings and use the d-pad to set Autoboot: System Menu. Then select Save Settings. Press B to go back to the main menu.

d) In the main menu, select homebrew channel to load the homebrew channel and proceed with Step 8.

Step 8 – Backup Launchers

Pre-Note: If you have a newer Wii, it probably has the D3-2 Drive which prevents you from loading DVD Backups. This means you’ll have to use a USB Loader

a) Load WAD Manager from Homebrew Channel, navigate into the wad folder and highlight either USB_Loader_GX_r929.wad or Neogamma_R9_beta10.wad. (Neogamma for Disc loading and USB Loader for USB HDD loading.)

b) Press A on the wiimote and set action to Install WAD. Give it time to install with no errors.

c) Press Home on the wiimote to exit.

Congratulations, Enjoy your Softmodded Wii.

Leave a Reply