What you need:
- NUSD
- Key.bin (This is easy, just open a Hex Editor and paste EB E4 2A 22 5E 85 93 E4 48 D9 C5 45 73 81 AA F7 in as a hex string and save as key.bin)
- A hex editor (Any should do, I use XVI32)
- Notepad
- Calculator with Hex function, Windows calculator will do
- Preloader hacks.ini file for any system menu
First thing, get everything listed above. Then fire up NUSD, with key.bin in the same folder, and download the System Menu you have the hacks.ini for and the System Menu you want to port it to. Make sure you tick decrypt as well. The title will be 0000000100000002, and the version depends on which version and region you want. You should be able to find which one you need on wiibrew.org.
Now take a look at the patch, or "hack", you want to port. (You do them one at a time)
Let's take for example, the Move Disc Channel hack from System Menu 3.2E
[Move Disc channel]
version=290
offset=0x813A7E84
value=0x60000000
Let's take a look at that. The first line with the [ and ] is the name. The next line tells preloader which System Menu version this patch is for. The next line is the offset, which tells preloader where in the system menu to patch the value. The final line tells preloader what to make the value at that offset. Now the problem is, the offset is different for different System Menus. And that's what we need to change.
Now the offset in the hacks.ini is not the one used by hex editors, so we need to do a quick calculation. Open up Windows Calculator and press View>Scientific, then select the Hex option. Then type in the offset from the hack (if there are several, do the first one) WITH the 0x at the start(You need to type the x on your keyboard I think), and then subtract 0x8132FAE0 from it. Now we have the offset we need.
Now open up the decrypted 00000008.app from the System Menu you have the hacks.ini of (in this case 3.2E) in a hex editor. You need to find in your hex editor the option of going to a certain address. In XVI32 it's under Address>Goto, but different hex editors may vary. Type in the offset we just got in Windows Calculator. This will take you to that address. This shows us what the value should be, before its patched by preloader. You then need to copy 8 numbers (4 little boxes) from that address onwards. Copy this into notepad. You also need to copy several "boxes" either side.
Now open up the decrypted 00000008.app from the destination System Menu in a hex editor. You now need to search for the hex string you just copied from the last System Menu. Search for it, and when its found, hit search again. Hopefully it wont find it again, meaning this is the place. If it does find it again, go back to the first system menu and copy a few more boxes from either side as well, and try again. Do this until there is only one result.
Now you need to find the offset in this System Menu. So look at the first digit from the string you copied from the original System Menu and find it in the new one. Take down the address of the currently highlighted box. In XVI32, this is displayed in the bottom left corner. Write this down somewhere.
Now go back to Windows calcuator and put it back in Hex. Then type in the address of the value in the new System Menu and add 8132FAE0 (no 0x). This gives you the new offset. Then just go into notepad and type up your hacks.ini. You need to add 0x to the answer you got in calculator to get the offset.
[Move Disc Channel]
version=417
offset=0x813AF388
value=0x60000000
(here I ported it to 4.0U, even though it already exists for this System Menu, it was just for the sake of this tutorial)
The first line remains the same. The second line is the new System Menu version, same as the one used for NUSD. The next line is the new offset, and the last line is the value, and that remains the same.
If the hack you are porting contains more than one offset and value, you just do the same for each one.
And then its ready for use. If you do port something to a new System Menu, please post at the wiki on WiiBrew.org
Hopefully this was/will be useful to someone at some stage. If you need me to, I can clarify any parts as well. Just give us a shout.
Oh, and thanks to : Crediar, for making preloader, da_letter_a, for a mentioning something that proved very helpful, WB3000 for NUSD and depeha, for his tutorial on phone port patching at : http://walkmans.wordpress.com/2008/01/07/patch-porting/
