Summary

• Install Homebrew Channel
• Download latest version of necessary files and prepare SD card
• Install BootMii
• Backup Wii’s NAND flash using BootMii
• Downgrade to System Menu 4.2 if at System Menu 4.3
• Install IOS36 with TRUCHA exploit
• Verify TRUCHA exploit
• Delete STUB IOSes with DOP-Mii
• Install cIOS222
• Install cIOS249

1. Install Homebrew Channel

1. 1. See previous episode for instructions on the Smash Stack hack

2. Download latest version of necessary files and prepare SD card

   1. WeHackWii package
      1. http://wehackwii.pbworks.com/w/page/8844451/WeHackWii-Package
   2. Latest version of DOP-Mii (replaces outdated DOP-Mii in WeHackWii package)
      1. http://wiibrew.org/wiki/DOP-Mii:_WiiBrew_Edition
   3. HackMii Installer (BootMii ELF files)
      1. http://bootmii.org/download/
   4. Unzip WeHackWii and place contents in the root of the SD card
   5. Delete the DOP-Mii folder from the apps folder on the SD card
   6. Unzip the updated DOP-Mii and place into the apps folders on the SD card
   7. Create a BootMii folder inside of your apps folder on the SD card
   8. Place the ELF files from the HackMii Installer zip file into the BootMii folder

3. Install BootMii

   1. Launch the Homebrew Channel and Load the BootMii app
   2. If you own a Wii with the boot1 exploit (<November 2008) then install BootMii as boot2, otherwise you’ll have to install BootMii as an IOS

4. Backup Wii’s NAND flash using BootMii

   1. Navigate the BootMii menu using Power to change selection, and Reset to select
   2. Navigate to the Gears icon, and select
   3. Navigate to the Chip with Arrow Pointing to SD Card icon, and select

5. Downgrade to System Menu 4.2 (if already at 4.2 skip to step 6)

   1. Launch DOP-Mii from the Homebrew Channel
   2. Select IOS58 + AHBPROT which will load a patched IOS58 into memory
   3. Select System Menu
   4. Select System Menu 4.2 by pressing left on the wii remote’s d-pad
   5. Press + on the wii remote to downgrade to System Menu 4.2

6. Install IOS36 with TRUCHA exploit (this is juicy part)

   1. Launch DOP-Mii from the Homebrew Channel
   2. Select IOS58 + AHBPROT
   3. Select IOS, BC, MIOS
   4. Navigate to IOS46 using left on the wii remote’s d-pad
   5. Press down on the remote’s d-pad to select the different versions of IOS36
   6. Navigate to an earlier version of IOS36 with the ES_Identify and FakeSign bugs
      1. Information about the selected version will be displayed in the information box below. Text in yellow will be displayed indicating the current version of IOS36 is exploitable
   7. Press + on the wii remote to install the selected version of IOS36

7. Verify TRUCHA exploit

   1. Launch DOP-Mii from the Homebrew Channel
   2. Select Scan the Wii’s Internals (SysCheck)
      1. This will scan all installed IOSes and display if they are vulnerable to the ES_Identify and FakeSign exploit
   3. Make *SURE* that the row for IOS36 has ENABLED for the FakeSign and ES_Identify column

8. Delete STUB IOSes with DOP-Mii

   1. Launch DOP-Mii from the Homebrew Channel
   2. Launch IOS58 + AHBPROT
   3. Select IOS, BC, MIOS
   4. Navigate to the first IOS installed (usually IOS4) using left on the wii remote’s d-pad
   5. Next to the selected IOS, there is a box (Installed Version) that will display if the selected IOS has a STUB version installed
   6. Navigate through all IOSes, look for STUB in the Installed Version window area
   7. Upon finding a STUB version, not the Version that is the STUB
   8. Press down on the remote’s d-pad to go the Version navigation of the selected IOS
   9. Navigate to the left with the remote’s d-pad and select the Version that is a STUB
   10. Press - on the remote to Uninstall it

9. Install cIOS222

   1. NOTE: Remove all GameCube memory cards and controllers!
   2. Launch cIOS222 Installer v4 from the Homebrew Channel
   3. Select IOS <36> to use for installation (navigate versions with d-pad)
   4. Install as Custom IOS 222
   5. Use IOS38 merged with IOS37
10. Install cIOS249
    1. NOTE: Remove all GameCube memory cards and controllers!
    2. Launch cIOS249 Installer rev17 from the Homebrew Channel
    3. Select IOS <36> to use for installation (navigate versions with d-pad)
    4. Select <WAD Installation> (which is the default)