de_Fuse, a Wii U modchip in development by ShinyQuagsire

tumblr_991e04845ab30223dd16b2d1624b6f4c_b49fe612_500.jpg

The Wii U was truly the black sheep of the main Nintendo consoles, but in terms of homebrew capabilities, it was but a diamond in the rough. While the Wii U is way past its heyday by almost a decade, the homebrew community still continues to thrive and develop great things for the system.

One of these developers, @shinyquagsire23, has made some research and advancements towards creating a modchip for the Wii U, which he titled "de_Fuse". The modchip started when Shiny Quasire started looking at the then unhacked Wii Mini console, in an attempt to glitch boot0 on it, and while getting curious if it could work on Wii U, he found that a similar exploit could be attempted for it, with the only downsides being OTP dumps being impossible due it being all 00s and the driver for boot0 being limited to SDHC cards.

While the necessity of having a modchip for the Wii U is not a must since Wii U already has coldboot exploits and many other things like Aroma that could serve a similar purpose, the main purpose of this modchip is to allow booting a Wii U console straight from the SD card, without having to rely on the Wii U's internal eMMC chip to boot into the console. This due to the recent news about some Wii U consoles bricking entirely due to failures in the eMMC chip, so giving players the option to boot from SD card would be a relief to this delicate issue that plagues the console.

72a7403a2705acdef1d456e392cbcbfc94439cd0.jpg

The rest of the information is highly technical and dives into the eFuses, OTP, boot0, boot1 and SRAM of the console, so those interested in a more in-depth and detailed information regarding the process can read it in Shiny Quagsire's own article about de_Fuse on his webpage.

The modchip is currently in early stages of development, and it currently requires an FPGA of sorts, but it hasn't been standardized in terms of schematics or parts. However, Shiny Quagsire is trying to aim for a $25-$35 dlls range when its finished (or lower), based on RP2040 chip. Those interested and willing to collaborate and help out throughout its development can do so through Shiny Quagsire's GitHub repository for the modchip, where he keeps all of the coding and research for it open source.

:arrow: de_Fuse, the One True Pwn article
:arrow: GitHub Repository
 
Hi,

My Wii U's eMMC was corrupted (blinking blue, no output at all). So I wanted to try deFuse as a last ditch effort.

I've soldered on my pico, checked every wire, tried multiple versions of every file, but every time my Wii U get's stuck with a solid purple light and this output:

Starting... 3224
Results:
Winner! 0xf368
01
02
03
04
05
08
09
0a
0b
0c
0d
0e
13
14
15
18
1b
1c
1d
1e
1f
25
88
00
00
[pico] Changed state: WIIU_STATE_NEEDS_DEFUSE -> WIIU_STATE_DEFUSED
[pico] Changed state: WIIU_STATE_DEFUSED -> WIIU_STATE_MONITORING
U�U�U�U�U�U�U�U�be[Pico] Switching to data mode...

fe 00 02 07 21 00 00 43 46 25 10 00 28 4d 45 4d
32 4d 45 4d 30 50 52 53 48 5d 5d 00 01 5d 5d 00
02 84 00 00 00 ef a2 82 d9 01 00 02 00 00 00 00
10 01 00 02 10 5d 5d 00 04 f0 00 00 00

The final output above sometimes has additional few characters but nothing much.
Weirdly enough I found a boot0_memtest online which I tried running, and it works.

What could be the issue and the solution?

Thanks.
 
It's not often I hear of a quality issue with Nintendo hardware:

The DS Lite hinge
The Wii U EMMC chip
The Switch Pro Controller d-pad
The Switch 2 Pro Controller d-pad

Is that the full list?
 

Site & Scene News