de_Fuse, a Wii U modchip in development by ShinyQuagsire

tumblr_991e04845ab30223dd16b2d1624b6f4c_b49fe612_500.jpg

The Wii U was truly the black sheep of the main Nintendo consoles, but in terms of homebrew capabilities, it was but a diamond in the rough. While the Wii U is way past its heyday by almost a decade, the homebrew community still continues to thrive and develop great things for the system.

One of these developers, @shinyquagsire23, has made some research and advancements towards creating a modchip for the Wii U, which he titled "de_Fuse". The modchip started when Shiny Quasire started looking at the then unhacked Wii Mini console, in an attempt to glitch boot0 on it, and while getting curious if it could work on Wii U, he found that a similar exploit could be attempted for it, with the only downsides being OTP dumps being impossible due it being all 00s and the driver for boot0 being limited to SDHC cards.

While the necessity of having a modchip for the Wii U is not a must since Wii U already has coldboot exploits and many other things like Aroma that could serve a similar purpose, the main purpose of this modchip is to allow booting a Wii U console straight from the SD card, without having to rely on the Wii U's internal eMMC chip to boot into the console. This due to the recent news about some Wii U consoles bricking entirely due to failures in the eMMC chip, so giving players the option to boot from SD card would be a relief to this delicate issue that plagues the console.

72a7403a2705acdef1d456e392cbcbfc94439cd0.jpg

The rest of the information is highly technical and dives into the eFuses, OTP, boot0, boot1 and SRAM of the console, so those interested in a more in-depth and detailed information regarding the process can read it in Shiny Quagsire's own article about de_Fuse on his webpage.

The modchip is currently in early stages of development, and it currently requires an FPGA of sorts, but it hasn't been standardized in terms of schematics or parts. However, Shiny Quagsire is trying to aim for a $25-$35 dlls range when its finished (or lower), based on RP2040 chip. Those interested and willing to collaborate and help out throughout its development can do so through Shiny Quagsire's GitHub repository for the modchip, where he keeps all of the coding and research for it open source.

:arrow: de_Fuse, the One True Pwn article
:arrow: GitHub Repository
 

ableto288

Member
Newcomer
Joined
Nov 22, 2018
Messages
13
Trophies
0
Age
23
Location
Andalucía, Spain
XP
228
Country
Spain
HELP PLEASE

Error code: c3
Starting... 3138:1
Results:
01
02
03
04
05
08
09
0a
0b
0c
0d
0e
0f
13
14
15
18
19
1a
1b
1c
1d
25
30
b1
00
00
Error code: 00
Starting... 3137:0
Results:
01
02
03
04
05
08
09
0a
0b
0c
0d
0e
c3
01
00
00
Error code: c3
Starting... 3137:1
Results:
01
02
03
04
05
08
09
0a
0b
0c
0d
0e
c3
01
00
00
 

ableto288

Member
Newcomer
Joined
Nov 22, 2018
Messages
13
Trophies
0
Age
23
Location
Andalucía, Spain
XP
228
Country
Spain
Check if the wireing is correct and that you flashed the boot1.img to a 2GB or smaller SDSC card.
all wiring is ok but now error changed



Error code: 00
Starting... 3011:1
Results:
01
02
03
04
05
08
09
0a
0b
0c
0d
0e
0f
13
14
15
18
19
1a
1b
1c
1d
25
00
00
Error code: 00
Starting... 3010:0
Results:
01
02
03
04
05
08
09
0a
0b
0c
0d
0e
0f
13
14
15
18
19
1a
1b
1c
1d
1e
00
00
Error code: 00
Starting... 3010:1
 

SDIO

Well-Known Member
Member
Joined
Feb 13, 2023
Messages
2,263
Trophies
0
Age
28
XP
1,382
Country
Germany
From the readme
the final line is 0x1E and the error code is 0x00, that is an invalid SD card. Invalid SD cards seem to hang boot0

It's it a sdsc card (not sdhc). Is it 2GB or smaller?
 

ableto288

Member
Newcomer
Joined
Nov 22, 2018
Messages
13
Trophies
0
Age
23
Location
Andalucía, Spain
XP
228
Country
Spain
Then maybe try another one
Now it get stuck here,maybe its a hw failure...
[pico] Changed state: WIIU_STATE_NEEDS_DEFUSE -> WIIU_STATE_DEFUSED
[pico] Changed state: WIIU_STATE_DEFUSED -> WIIU_STATE_MONITORING
[pico] Changed state: WIIU_STATE_MONITORING -> WIIU_CHECK_IF_POWERED_OFF
[pico] Changed state: WIIU_CHECK_IF_POWERED_OFF -> WIIU_STATE_POWERED_OFF
[pico] Changed state: WIIU_STATE_POWERED_OFF -> WIIU_STATE_NEEDS_DEFUSE
Starting... 3224:0
Results:
Winner! 0xf368
02
01
03
00
02
08
0a
09
0b
08
0a
09
03
00
02
08
0b
08
0a
09
0b
22
88
00
00
[pico] Changed state: WIIU_STATE_NEEDS_DEFUSE -> WIIU_STATE_DEFUSED
[pico] Changed state: WIIU_STATE_DEFUSED -> WIIU_STATE_MONITORING
[pico] Changed state: WIIU_STATE_MONITORING -> WIIU_CHECK_IF_POWERED_OFF
[pico] Changed state: WIIU_CHECK_IF_POWERED_OFF -> WIIU_STATE_POWERED_OFF
 

SDIO

Well-Known Member
Member
Joined
Feb 13, 2023
Messages
2,263
Trophies
0
Age
28
XP
1,382
Country
Germany
Looks like some of the wires for the debug port are switched. Check if you connected them correctly. Looks like you swapped debug0 and debug1 and debug2 seems to be missing
 

ableto288

Member
Newcomer
Joined
Nov 22, 2018
Messages
13
Trophies
0
Age
23
Location
Andalucía, Spain
XP
228
Country
Spain
Looks like some of the wires for the debug port are switched. Check if you connected them correctly. Looks like you swapped debug0 and debug1 and debug2 seems to be missing

Thank you very much for so much help, I think I'm starting to hate this Wiiu, it's the 4th defuse I've done and this one doesn't stop giving me problems. Now it get stuck in :

fa [pico] Changed state: WIIU_STATE_MONITORING -> WIIU_CHECK_IF_POWERED_OFF
[pico] Changed state: WIIU_CHECK_IF_POWERED_OFF -> WIIU_STATE_POWERED_OFF
[pico] Changed state: WIIU_STATE_POWERED_OFF -> WIIU_STATE_NEEDS_DEFUSE
Starting... 3224:0
Results:
Winner! 0xf368
01
02
03
04
05
08
09
0a
0b
0c
0d
0e
03
04
05
08
0b
0c
0d
0e
0f
25
88
00
00
[pico] Changed state: WIIU_STATE_NEEDS_DEFUSE -> WIIU_STATE_DEFUSED
[pico] Changed state: WIIU_STATE_DEFUSED -> WIIU_STATE_MONITORING
UªUªUªUªUªUªUªUªbe[Pico] Switching to data mode...

fe 02 02 03 01 00 00 43 46 25 10 00 28 4d 45 4d
32 4d 45 4d 30 50 52 53 48 84 80 00 00 5d 5d 00
01 6d 6d 00 01 5d 5e 00 04 5d 5e 00 08 ef a2 82
d9 01 00 02 00 00 00 00 10 01 00 02 10 5d 5d 00
04 6d 6d 00 01 6d 6d 00 02 6d 6d 00 03 6d 6d 00
04 6d 6d 00 05 6d 6d 00 ff f0 0f ca ff f0 0f ca
fa
 

SDIO

Well-Known Member
Member
Joined
Feb 13, 2023
Messages
2,263
Trophies
0
Age
28
XP
1,382
Country
Germany
Make sure the fw.img is good. Else that could hint to bad DDR2 ram. I had one that did the same and when I investigated further it was bad memory.

We could see what happens if we place minute into sram instead of the dram.
I think you would need to replace all the >mem2 with >sram0 and then also adjust the sram size. https://github.com/shinyquagsire23/minute_minute/blob/master/stub.ld#L44

It should look more like boot1 linkscript: https://github.com/shinyquagsire23/minute_minute/blob/master/stub_boot1.ld

Maybe you want to experiment a little bit yourself with that.
 
Last edited by SDIO,

SDIO

Well-Known Member
Member
Joined
Feb 13, 2023
Messages
2,263
Trophies
0
Age
28
XP
1,382
Country
Germany
There are a few ways:
  • just boot without defuse (by not supplying power to the pico)
  • compile stroopwafel yourself with #define DISABLE_DISK_DRIVE 0
  • get the latest stroopwafel and minute release from my forks
 
  • Like
Reactions: voddy

voddy

Member
Newcomer
Joined
Apr 24, 2023
Messages
24
Trophies
0
XP
199
Country
Germany
There are a few ways:
  • just boot without defuse (by not supplying power to the pico)
  • compile stroopwafel yourself with #define DISABLE_DISK_DRIVE 0
  • get the latest stroopwafel and minute release from my forks
i chose option 3 and it works. Thank you so much! the disc drive is activated again and reads discs.
 

SDIO

Well-Known Member
Member
Joined
Feb 13, 2023
Messages
2,263
Trophies
0
Age
28
XP
1,382
Country
Germany
I would still recommend everyone to dump their Discs before they rot away or the drive dies.
Why do you need a permanent defuse? I also have defuse on two of my consoles, but I only power the pico when needed
 

voddy

Member
Newcomer
Joined
Apr 24, 2023
Messages
24
Trophies
0
XP
199
Country
Germany
I would still recommend everyone to dump their Discs before they rot away or the drive dies.
Why do you need a permanent defuse? I also have defuse on two of my consoles, but I only power the pico when needed
there is no real reason for it tbh. i just wanted to try soldering to it and install it in advance if my nand ever gets corrupted.
i dumped my nand and all the other stuff just in case (and after that i was too lazy to remove it again)
it was working the way it should until i tried out my new discs.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    K3Nv2 @ K3Nv2: Lol rappers still promoting crypto