not quite sure how you'd do this over vwii, from what I remember from cafe2wii, the physical wiiu mem1 you use in vwii mode starts at 0x800000 instead of 0x0 which is used for this exploit. maybe I just glanced over at it wrong, I really didnt go into cafe2wii too deeply. Also the mem2 stuff may be mapped out differently as well.