I've been reading on this forum for a while now and finally decided to make an account. One theory that comes to mind is Dolphin. Dolphin has been demonstrated to be able to read/write from the Wiimote memory when connected to a PC. The Wiimote has 6 kilobytes of memory reserved for Miis. If we boot up the Mii Channel, we can import a first 6kb of data from a PC that makes the wii transport any future mii data to a buffer. Then, we can slowly transfer 6kb at a time, disconnecting the wiimote, connecting it to a pc, writing 6kb, and back. It's a very time consuming process but could be done. Once all of the mii data is in the Wii's buffer we hijacked earlier, then we could use a final 6kb to run the code in the buffer. then we can dump the nand or just the keys onto a usb drive plugged in. From there, it's free roaming. That's just one of my theories that comes to mind.