Look at the source of fstoolbox.
First of all, you need to execute ISFS_Initialize() before you are able to use ISFS_ commands to access files on nand. How to actually access them, you will see in fstoolbox' source, but there's a problem. You need the rights to access the file you want. If you have updated via nintendo or got your Wii with 3.3v2 or higher, none of your IOS has something that allows you to access the files from the system menu.
If you have 3.2, load IOS36(it has to be v1042) and use ES_Idenitfy to identify as system menu or as "SU"(see AnyTitleDeleter source). With that you are allowed to read a few files(but not all), including the system menu .dol.
If you have a cIOS, do nothing, cIOS has patched nand permissions especially to allow reading and writing all files on nand with the ISFS_ commands.
If you have preloader, use the system menu IOS(on 4.0/4.1 it's IOS60) and then use ES_Identify.
If you have none of this, you can't access the system menu files. A downgrade to 3.2 is not an option, as downgrade is fail and bricks new Wiis. Sorry, i can't describe here how to get your Wii in a state you are able to do what you want, because all tools that allow this, allow piracy at the same time.
Another option would be to write a mini project of course. There you don't have to worry about permissions, but it's more complicated, there's no example code, and requires another development environment.
PS: WARNING: If you read files from nand, always round the buffer size up to 32 bytes chunks. The ISFS_Read command returns more data than it should and you get an eception if you only allocate as much as required memory.Edited 1 time(s). Last edit at 10/03/2009 11:39AM by WiiPower.