When there is a new System Menu, many people complain that there is no hacks.ini for the new System Menu yet, so they can't use preloader hacks on the new System Menu. So I decided I'd write a quick tutorial on how to port the hacks from one System Menu to another. This works between different versions and different regions as well. So if you have a Japanese Wii and are annoyed there are no hacks, this will work for you as well.
What you need:
Now take a look at the patch, or "hack", you want to port. (You do them one at a time)
Let's take for example, the Move Disc Channel hack from System Menu 3.2E
Let's take a look at that. The first line with the [ and ] is the name. The next line tells preloader which System Menu version this patch is for. The next line is the offset, which tells preloader where in the system menu to patch the value. The final line tells preloader what to make the value at that offset. Now the problem is, the offset is different for different System Menus. And that's what we need to change.
Now the offset in the hacks.ini is not the one used by hex editors, so we need to do a quick calculation. Open up Windows Calculator and press View>Scientific, then select the Hex option. Then type in the offset from the hack (if there are several, do the first one) WITH the 0x at the start(You need to type the x on your keyboard I think), and then subtract 0x8132FAE0 from it. Now we have the offset we need.
Now open up the decrypted 00000008.app from the System Menu you have the hacks.ini of (in this case 3.2E) in a hex editor. You need to find in your hex editor the option of going to a certain address. In XVI32 it's under Address>Goto, but different hex editors may vary. Type in the offset we just got in Windows Calculator. This will take you to that address. This shows us what the value should be, before its patched by preloader. You then need to copy 8 numbers (4 little boxes) from that address onwards. Copy this into notepad. You also need to copy several "boxes" either side. Note that if the string at the address is 00000000, the hack can't be ported this way because it is an advanced patch, and this method works only for simple hacks.
Now open up the decrypted 00000008.app from the destination System Menu in a hex editor. You now need to search for the hex string you just copied from the last System Menu. Search for it, and when its found, hit search again. Hopefully it wont find it again, meaning this is the place. If it does find it again, go back to the first system menu and copy a few more boxes from either side as well, and try again. Do this until there is only one result.
Now you need to find the offset in this System Menu. So look at the first digit from the string you copied from the original System Menu and find it in the new one. Take down the address of the currently highlighted box. In XVI32, this is displayed in the bottom left corner. Write this down somewhere.
Now go back to Windows calcuator and put it back in Hex. Then type in the address of the value in the new System Menu and add 8132FAE0 (no 0x). This gives you the new offset. Then just go into notepad and type up your hacks.ini. You need to add 0x to the answer you got in calculator to get the offset.
(here I ported it to 4.0U, even though it already exists for this System Menu, it was just for the sake of this tutorial)
The first line remains the same. The second line is the new System Menu version, same as the one used for NUSD. The next line is the new offset, and the last line is the value, and that remains the same.
If the hack you are porting contains more than one offset and value, you just do the same for each one.
And then its ready for use. If you do port something to a new System Menu, please post at the wiki on WiiBrew.org
Hopefully this was/will be useful to someone at some stage. If you need me to, I can clarify any parts as well. Just give us a shout.
Oh, and thanks to : Crediar, for making preloader, da_letter_a, for a mentioning something that proved very helpful, WB3000 for NUSD and depeha, for his tutorial on phone port patching at : http://walkmans.wordpress.com/2008/01/07/patch-porting/
EDIT: Added screenshots.
What you need:
- NUSD
- Key.bin (This is easy, just open a Hex Editor and paste the key in as a hex string and save as key.bin)
- A hex editor (Any should do, I use XVI32)
- Notepad
- Calculator with Hex function, Windows calculator will do
- Preloader hacks.ini file for any system menu
Now take a look at the patch, or "hack", you want to port. (You do them one at a time)
Let's take for example, the Move Disc Channel hack from System Menu 3.2E
Code:
[Move Disc channel]
version=290
offset=0x813A7E84
value=0x60000000Let's take a look at that. The first line with the [ and ] is the name. The next line tells preloader which System Menu version this patch is for. The next line is the offset, which tells preloader where in the system menu to patch the value. The final line tells preloader what to make the value at that offset. Now the problem is, the offset is different for different System Menus. And that's what we need to change.
Now the offset in the hacks.ini is not the one used by hex editors, so we need to do a quick calculation. Open up Windows Calculator and press View>Scientific, then select the Hex option. Then type in the offset from the hack (if there are several, do the first one) WITH the 0x at the start(You need to type the x on your keyboard I think), and then subtract 0x8132FAE0 from it. Now we have the offset we need.
Now open up the decrypted 00000008.app from the System Menu you have the hacks.ini of (in this case 3.2E) in a hex editor. You need to find in your hex editor the option of going to a certain address. In XVI32 it's under Address>Goto, but different hex editors may vary. Type in the offset we just got in Windows Calculator. This will take you to that address. This shows us what the value should be, before its patched by preloader. You then need to copy 8 numbers (4 little boxes) from that address onwards. Copy this into notepad. You also need to copy several "boxes" either side. Note that if the string at the address is 00000000, the hack can't be ported this way because it is an advanced patch, and this method works only for simple hacks.
Now open up the decrypted 00000008.app from the destination System Menu in a hex editor. You now need to search for the hex string you just copied from the last System Menu. Search for it, and when its found, hit search again. Hopefully it wont find it again, meaning this is the place. If it does find it again, go back to the first system menu and copy a few more boxes from either side as well, and try again. Do this until there is only one result.
Now you need to find the offset in this System Menu. So look at the first digit from the string you copied from the original System Menu and find it in the new one. Take down the address of the currently highlighted box. In XVI32, this is displayed in the bottom left corner. Write this down somewhere.
Now go back to Windows calcuator and put it back in Hex. Then type in the address of the value in the new System Menu and add 8132FAE0 (no 0x). This gives you the new offset. Then just go into notepad and type up your hacks.ini. You need to add 0x to the answer you got in calculator to get the offset.
Code:
[Move Disc Channel]
version=417
offset=0x813AF388
value=0x60000000(here I ported it to 4.0U, even though it already exists for this System Menu, it was just for the sake of this tutorial)
The first line remains the same. The second line is the new System Menu version, same as the one used for NUSD. The next line is the new offset, and the last line is the value, and that remains the same.
If the hack you are porting contains more than one offset and value, you just do the same for each one.
And then its ready for use. If you do port something to a new System Menu, please post at the wiki on WiiBrew.org
Hopefully this was/will be useful to someone at some stage. If you need me to, I can clarify any parts as well. Just give us a shout.
Oh, and thanks to : Crediar, for making preloader, da_letter_a, for a mentioning something that proved very helpful, WB3000 for NUSD and depeha, for his tutorial on phone port patching at : http://walkmans.wordpress.com/2008/01/07/patch-porting/
EDIT: Added screenshots.
