de_Fuse, a Wii U modchip in development by ShinyQuagsire

tumblr_991e04845ab30223dd16b2d1624b6f4c_b49fe612_500.jpg

The Wii U was truly the black sheep of the main Nintendo consoles, but in terms of homebrew capabilities, it was but a diamond in the rough. While the Wii U is way past its heyday by almost a decade, the homebrew community still continues to thrive and develop great things for the system.

One of these developers, @shinyquagsire23, has made some research and advancements towards creating a modchip for the Wii U, which he titled "de_Fuse". The modchip started when Shiny Quasire started looking at the then unhacked Wii Mini console, in an attempt to glitch boot0 on it, and while getting curious if it could work on Wii U, he found that a similar exploit could be attempted for it, with the only downsides being OTP dumps being impossible due it being all 00s and the driver for boot0 being limited to SDHC cards.

While the necessity of having a modchip for the Wii U is not a must since Wii U already has coldboot exploits and many other things like Aroma that could serve a similar purpose, the main purpose of this modchip is to allow booting a Wii U console straight from the SD card, without having to rely on the Wii U's internal eMMC chip to boot into the console. This due to the recent news about some Wii U consoles bricking entirely due to failures in the eMMC chip, so giving players the option to boot from SD card would be a relief to this delicate issue that plagues the console.

72a7403a2705acdef1d456e392cbcbfc94439cd0.jpg

The rest of the information is highly technical and dives into the eFuses, OTP, boot0, boot1 and SRAM of the console, so those interested in a more in-depth and detailed information regarding the process can read it in Shiny Quagsire's own article about de_Fuse on his webpage.

The modchip is currently in early stages of development, and it currently requires an FPGA of sorts, but it hasn't been standardized in terms of schematics or parts. However, Shiny Quagsire is trying to aim for a $25-$35 dlls range when its finished (or lower), based on RP2040 chip. Those interested and willing to collaborate and help out throughout its development can do so through Shiny Quagsire's GitHub repository for the modchip, where he keeps all of the coding and research for it open source.

:arrow: de_Fuse, the One True Pwn article
:arrow: GitHub Repository
 

pyromixLua

Active Member
Newcomer
Joined
Oct 25, 2022
Messages
31
Trophies
0
Age
17
XP
95
Country
France
Here the termial without the disc drive :

[pico] Changed state: WIIU_STATE_POWERED_OFF -> WIIU_STATE_NEEDS_DEFUSE
Starting... 3224
Results:
01
02
03
04
05
08
09
0a
0b
0c
0d
0e
13
14
15
18
1b
1c
1d
1e
00
00
Error code: 00
Starting... 3223
Results:
Winner! 0xf369
01
02
03
04
05
08
09
0a
0b
0c
0d
0e
13
14
15
18
1b
1c
1d
1e
1f
25
88
89
8a
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
81
01
0f
8f
0f
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
81
01
0f
8f
0f
00
80
00
80
00
80
00
80
00
80
00
80
00
80
00
80
00
80
00
0f
8f
0f
00
80
00
80
00
80
00
80
00
80
00
80
00
80
00
80
00
80
00
0f
8f
0f
00
01
81
01
00
01
81
01
00
01
81
01
00
80
00
80
00
01
81
01
00
80
00
01
81
01
81
01
0f
8f
0f
00
01
81
01
00
80
00
80
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
81
01
0f
8f
0f
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
00
80
00
80
00
80
00
80
00
80
00
0f
8f
0f
00
80
00
80
00
80
00
01
81
01
00
01
81
01
00
80
00
80
00
[pico] Changed state: WIIU_STATE_NEEDS_DEFUSE -> WIIU_STATE_DEFUSED
[pico] Changed state: WIIU_STATE_DEFUSED -> WIIU_STATE_MONITORING
06020501CF%10(MEM2U▒U▒U▒U▒U▒U▒U▒U▒be[Pico] Switching to data mode...

fe
 

SDIO

Well-Known Member
Member
Joined
Feb 13, 2023
Messages
2,263
Trophies
0
Age
28
XP
1,382
Country
Germany
Ok, then please test what happens with my boot1.img
It will hang at one point a little as it is doing a memory test
 

pyromixLua

Active Member
Newcomer
Joined
Oct 25, 2022
Messages
31
Trophies
0
Age
17
XP
95
Country
France
It print hexadecimals :
Code:
Starting... 3125
Results:
Winner! 0xf3cb
01
02
03
04
05
08
09
0a
0b
0c
0d
0e
13
14
15
18
1b
1c
1d
1e
1f
25
88
89
8a
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
81
01
0f
8f
0f
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
81
01
0f
8f
0f
00
80
00
80
00
80
00
80
00
80
00
80
00
80
00
80
00
80
00
0f
8f
0f
00
80
00
80
00
80
00
80
00
80
00
80
00
80
00
80
00
80
00
0f
8f
0f
00
01
81
01
00
01
81
01
00
01
81
01
00
80
00
80
00
01
81
01
00
80
00
01
81
01
81
01
0f
8f
0f
00
01
81
01
00
80
00
80
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
81
01
0f
8f
0f
00
01
81
01
00
01
81
01
00
01
81
01
00
01
81
01
00
80
00
80
00
80
00
80
00
80
00
0f
8f
0f
00
80
00
80
00
80
00
01
81
01
00
01
81
01
00
80
00
80
00
[pico] Changed state: WIIU_STATE_NEEDS_DEFUSE -> WIIU_STATE_DEFUSED
[pico] Changed state: WIIU_STATE_DEFUSED -> WIIU_STATE_MONITORING
06020501CF%10(MEM2U▒U▒U▒U▒U▒U▒U▒U▒be[Pico] Switching to data mode...

fe ba ad aa aa ef 01 ca fe 90 00 00 00 fa fb fc
fd 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00
03 00 00 00 04 00 00 00 05 00 00 00 06 00 00 00
07 00 00 00 08 00 00 00 09 00 00 00 0a 00 00 00
0b 00 00 00 0c
 

SDIO

Well-Known Member
Member
Joined
Feb 13, 2023
Messages
2,263
Trophies
0
Age
28
XP
1,382
Country
Germany
this looks like all your memory is bad.
What board revision do you have? WUP-01? WUP-50? Or anything i between
 

SDIO

Well-Known Member
Member
Joined
Feb 13, 2023
Messages
2,263
Trophies
0
Age
28
XP
1,382
Country
Germany
yeah that is expected, you can turn it off. You could check if the RAM buck converter is generationg ~1.5V
 

gorgyrip

Well-Known Member
Member
Joined
Aug 28, 2018
Messages
136
Trophies
0
XP
754
Country
Spain
With a multimeter. Check the voltage on the inductors
L1012+L1008 - 1v
L1005 -1.15v
L1004 -1.25v
L1009-1.5v
L1010-3.3v STB
L1006-3.3v
L1007-5v
L1003-12v
 

SDIO

Well-Known Member
Member
Joined
Feb 13, 2023
Messages
2,263
Trophies
0
Age
28
XP
1,382
Country
Germany
when it is on measure the voltage across the 3 compontents I marked with an arrow and tell us the voltage
 

Attachments

  • gqSDvioKMCE2DKCr.jpg
    gqSDvioKMCE2DKCr.jpg
    420.6 KB · Views: 19

pyromixLua

Active Member
Newcomer
Joined
Oct 25, 2022
Messages
31
Trophies
0
Age
17
XP
95
Country
France
Please find the different voltage at the 3 capacitors (arrow mark) and at the 8 inductance (which seems to be good comparing to the values of the previous post)

20230824_225342.jpg
 

pyromixLua

Active Member
Newcomer
Joined
Oct 25, 2022
Messages
31
Trophies
0
Age
17
XP
95
Country
France
Hello, good news, I finally managed to access the minute menu! With the latest version of de_fuse of course.
My tv shows me the minute menu. :D
 

Attachments

  • test.txt
    7 KB · Views: 30

SDIO

Well-Known Member
Member
Joined
Feb 13, 2023
Messages
2,263
Trophies
0
Age
28
XP
1,382
Country
Germany
Nice. Wonder what the problem was. Then now go to the backup and restore menu and dump otp.bin with prshhax
 

SDIO

Well-Known Member
Member
Joined
Feb 13, 2023
Messages
2,263
Trophies
0
Age
28
XP
1,382
Country
Germany
Then you can just follow my tutorial on how to rebuild the MLC.

Make sure to make an SLC backup first.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    K3Nv2 @ K3Nv2: Lol rappers still promoting crypto