Hacking Downgrade for System Menu 4.0

[Aurora Wright]

Requisites:
- this archive;
- WiFi connection/LAN Adapter! (if you want to do it offline, see here but it's really dangerous...)
- BannerBomb.
- Your Wii MUSTN'T have a serial number starting with LU64 or LU65. Use the HackMii Installer to install The Homebrew Channel, but you can't downgrade (yet).
No cIOS required!

1) Unpack the archive linked above.
2) Do a full backup of your SD card on the PC, and DELETE everything from the card.
3) Copy BannerBomb to the SD card.
4) Copy the content of the "SD Root" folder in the archive to the root of the SD card.
5) On the Wii, launch boot.dol using BannerBomb, then go to "downgradetools" in the SD and choose notDVDX34.dol. Pick "Downgrade IOS35", wait for it to end and come back to the menu, then exit.
- If it says that "you're a pirate" delete also all your VC/WiiWare pirated channels (with AnyTitle Deleter or WAD Manager), execute NandClean.dol, choose to delete "dvdx 3.4's gift" and try again

6) Launch PatchMii IOS Downgrader.dol, you may need to launch it from LoadMii 1 or 2 times, until it's needed

7) When it says "IOS 249 (Rev 5) loaded successfully", install all of the IOSes except IOS35 (with trucha patch). If you want, you can also install System Menu 3.2 or 4.0, but MAKE SURE that its IOS has been installed correctly:
- System Menu 3.2 requires IOS30;
- System Menu 4.0 requires IOS60.

Note: The cIOS that is now installed on your console doesn't have "backup loading" capabilities, use cIOS Installer by Waninkoko to get this.

Thanks to comex for DVDX 3.4 and BannerBomb, to WiiPower for providing a version of the WAD Manager source compatible with the latest devkitPro and libogc, to WB3000 for NUS Downloader and to tona for IOS50&WiiShop Installer and PatchMii cIOS Installer.

 

[gloscherrybomb]

Is this proven to work? Surely the wii will block stage 9?

 

[Aurora Wright]

Is this proven to work? Surely the wii will block stage 9?

No, IOS35 is downgraded by DVDX 3.4 to a trucha-friendly version

 

[gloscherrybomb]

Interesting, I'd love to test it out, is it brick proof? Bit worried about being the first. If you're correct though I love you like a fat kid loves cake.

 

[Aurora Wright]

Interesting, I'd love to test it out, is it brick proof? Bit worried about being the first. If you're correct though I love you like a fat kid loves cake.

It has been tested successfully

 

[gloscherrybomb]

One more question, I'm on linux so cant use the bat. Is the file definitely called cios_fix.wad and is there only one version?

 

[nl255]

Would this work on a stock 4.0 wii assuming a way could be found to run a .dol file, such as Comdex's BaNNeRBoMB?

 

[Aurora Wright]

Would this work on a stock 4.0 wii assuming a way could be found to run a .dol file, such as Comdex's BaNNeRBoMB?

Yes, and this way we could also install the HBC wad (unfortunately, the exploit that the HBC installer used has been fixed).
@gloscherrybomb: yes, it's called "cios_fix.wad"

 

[Brian117]

I just used AnyRegionChanger from on 4.0 and went back to 3.2U and my Wii was fine.

 

[gloscherrybomb]

Thats because you already had a cios Brain! Some of us have been desperate for this!

 

[Aurora Wright]

I just used AnyRegionChanger from on 4.0 and went back to 3.2U and my Wii was fine.

If you have trucha-enabled IOSes/cIOS (you probably used waninkoko's tool to upgrade to 4.0) that's perfectly normal.

 

[Brian117]

Well yeah...but to be honest, who would NOT use the cIOS? Wouldn't you want to look more into the firmware first than to update right away?

Meh. Sorry.

 

[gloscherrybomb]

It's not necessarily our fault... younger siblings and stuff! And anyway so what if people were stupid and moved the homebrew channel to sd or upgraded without a cios.

 

[nl255]

Well yeah...but to be honest, who would NOT use the cIOS? Wouldn't you want to look more into the firmware first than to update right away?

Meh. Sorry.

It will be far more useful once a new save exploit or the bannerbomb exploit is released, as you will be able to softmod a brand new, just purchased, wii with system menu 4.0. It will also be useful for people who sent their systems in for repair, as nintendo will update to 4.0 before sending it back.

 

[BIG MOE]

good work Davi92 , now the missing link is the HBC installation on new ver4.0 SM with a new exploit

so Comdex work is the one I'm waiting for

, Davi92 keep it up buddy

 

[nl255]

It's not necessarily our fault... younger siblings and stuff! And anyway so what if people were stupid and moved the homebrew channel to sd or upgraded without a cios.

You can prevent upgrading (via the offical updater) by turning on parental controls, even if you set everything to unrestricted. Also, you can re-install the homebrew channel by using a wad of it, though you must either have preloader (to load a wad installer) or cioscorp/modchip (to boot a hbc installer iso). Note that you can't use the normal installer ISO, you have to use the one designed for 4.0 available by searching this forum.

 

[AmitZ]

Can it be done without the HBC?
My friend wants to downgrade just so he could install the HBC.

 

[Hells Guardian]

There is currently no way to execute homebrew code on an unmoded wii with version 4.0 on it yet. There should be a new exploit out soon enough...... I hope..... Either way it does happen to be true that the banner bomb exploit is looking quite promising... If nothing else there will likely be another exploit released soon enough.

BTW Does anyone know exactly what Nintendo did to actually block the Twilight hack this time around?

 

[gloscherrybomb]

I'm getting a ret -1 error when I try to find the wad in WMIOS254/boot.dol what am I doing wrong?

 

[gloscherrybomb]

I misnamed the wad folder, however now I get a ret -1035 when I try to install the wad!