de_Fuse, a Wii U modchip in development by ShinyQuagsire

tumblr_991e04845ab30223dd16b2d1624b6f4c_b49fe612_500.jpg

The Wii U was truly the black sheep of the main Nintendo consoles, but in terms of homebrew capabilities, it was but a diamond in the rough. While the Wii U is way past its heyday by almost a decade, the homebrew community still continues to thrive and develop great things for the system.

One of these developers, @shinyquagsire23, has made some research and advancements towards creating a modchip for the Wii U, which he titled "de_Fuse". The modchip started when Shiny Quasire started looking at the then unhacked Wii Mini console, in an attempt to glitch boot0 on it, and while getting curious if it could work on Wii U, he found that a similar exploit could be attempted for it, with the only downsides being OTP dumps being impossible due it being all 00s and the driver for boot0 being limited to SDHC cards.

While the necessity of having a modchip for the Wii U is not a must since Wii U already has coldboot exploits and many other things like Aroma that could serve a similar purpose, the main purpose of this modchip is to allow booting a Wii U console straight from the SD card, without having to rely on the Wii U's internal eMMC chip to boot into the console. This due to the recent news about some Wii U consoles bricking entirely due to failures in the eMMC chip, so giving players the option to boot from SD card would be a relief to this delicate issue that plagues the console.

72a7403a2705acdef1d456e392cbcbfc94439cd0.jpg

The rest of the information is highly technical and dives into the eFuses, OTP, boot0, boot1 and SRAM of the console, so those interested in a more in-depth and detailed information regarding the process can read it in Shiny Quagsire's own article about de_Fuse on his webpage.

The modchip is currently in early stages of development, and it currently requires an FPGA of sorts, but it hasn't been standardized in terms of schematics or parts. However, Shiny Quagsire is trying to aim for a $25-$35 dlls range when its finished (or lower), based on RP2040 chip. Those interested and willing to collaborate and help out throughout its development can do so through Shiny Quagsire's GitHub repository for the modchip, where he keeps all of the coding and research for it open source.

:arrow: de_Fuse, the One True Pwn article
:arrow: GitHub Repository
 

fringle

Well-Known Member
Member
Joined
Apr 16, 2009
Messages
704
Trophies
1
XP
1,108
Country
Canada
Can someone point me to a guide that shows the solder connections for de_fuse on both the wii u motherboard and the pico? Also wondering if this works on the zero as well or is it just the pico? Have a dead wii u coming next week and may need this in an attempt to recover it.
 

gorgyrip

Well-Known Member
Member
Joined
Aug 28, 2018
Messages
136
Trophies
0
XP
769
Country
Spain
Can someone point me to a guide that shows the solder connections for de_fuse on both the wii u motherboard and the pico? Also wondering if this works on the zero as well or is it just the pico? Have a dead wii u coming next week and may need this in an attempt to recover it.
You have the solder points on the github. Also I have posted in this thread pics with the location of the TP.
Yes, zero will work, I've used it, too.
 

voddy

Member
Newcomer
Joined
Apr 24, 2023
Messages
24
Trophies
0
XP
206
Country
Germany
Can someone point me to a guide that shows the solder connections for de_fuse on both the wii u motherboard and the pico? Also wondering if this works on the zero as well or is it just the pico? Have a dead wii u coming next week and may need this in an attempt to recover it.
https://github.com/shinyquagsire23/wii_u_modchip/tree/main/pico_defuse
and the pics where to find the points:
https://gbatemp.net/threads/de_fuse...-by-shinyquagsire.630931/page-4#post-10135904 (in spoiler tag)
 

kitsune1324

Member
Newcomer
Joined
Aug 9, 2023
Messages
15
Trophies
0
Age
30
XP
81
Country
United States
I've been trying to read through as much as I can so forgive me if I missed anything..
I have the pico soldered to the wii u, followed the instructions, using the latest de_fuse, connected the pico successfully to my pc and can read via serial.

When attempting to boot (as it's running through iterations) I am getting the following error codes: 00, c3, and f3. The final error is:
SD card not valid or inserted, doing a normal boot.
[pico] Changed state: WIIU_STATE_NEEDS_DEFUSE -> WIIU_STATE_NORMAL_BOOT.

I already checked and made sure each header is connected to the correct pads.

I'm testing w/ two identical 1gb micro SD cards (non sdhc) and the folder structure looks like the following:
├── fw.img
└── wiiu
└── ios_plugins
└── wafel_core.ipx

The SD cards were flashed with the boot1.img, then reformated as fat32 (as per instructions) with an allocation size of 4096 bytes and no label. then they had the fw.img and wiiu folders (see above) copied to the sd card(s).

Once a boot is attempted, the wii u seems to (at some point) reformat the sd card and I never get any video out of the console (The original issue is potential nand failure followed by a failed update which got stuck at 98%).


Any thoughts/ideas? Right now I'm going to flash the sd card with just the boot1.img and not reformat/copy any files over and see what happens.
Post automatically merged:

No luck with the SD card just formatted w/ the boot1.img. Once the SD card not valid or inserted error appears I have to again reformat the sd card.
 

SDIO

Well-Known Member
Member
Joined
Feb 13, 2023
Messages
2,355
Trophies
0
Age
28
XP
1,512
Country
Germany
What output do you see in the terminal / putty on the PC?
How do you format the card? Using just the built in format function of windows?
 

kitsune1324

Member
Newcomer
Joined
Aug 9, 2023
Messages
15
Trophies
0
Age
30
XP
81
Country
United States
What output do you see in the terminal / putty on the PC?
How do you format the card? Using just the built in format function of windows?
Here's what I see from putty
Code:
Error code: 00
Starting... 2977
Results:
02
01
03
04
06
08
0a
09
0b
0c
0e
0d
0f
13
14
16
18
1a
19
1b
1c
1e
5e
1e
5e
1e
5e
1e
5e
1e
5e
1e
5e
1e
26
00
00
Error code: 00
Starting... 2976
Results:
02
01
03
04
06
08
0a
09
0b
0c
0e
0d
0f
13
14
16
18
1a
19
1b
1c
1e
5e
1e
5e
1e
5e
1e
5e
1e
5e
1e
5e
1e
26
00
00
Error code: 00
Starting... 2975
Results:
02
01
03
04
06
08
0a
09
0b
0c
0e
0d
0f
13
14
16
18
1a
19
1b
1c
1e
5e
1e
5e
1e
5e
1e
5e
1e
5e
1e
5e
1e
26
00
00
Error code: 00
Starting... 2974
Results:
02
01
03
04
06
08
0a
09
0b
0c
0e
0d
0f
13
14
16
18
1a
19
1b
1c
1e
5e
1e
5e
1e
5e
1e
5e
1e
5e
1e
5e
1e
26
00
00
Error code: 00
Starting... 2973
Results:
02
01
03
04
06
08
0a
09
0b
0c
0e
0d
0f
13
14
16
18
1a
19
1b
1c
1e
5e
1e
5e
1e
5e
1e
5e
1e
5e
1e
5e
1e
26
00
00
Error code: 00
Starting... 2972
Results:
02
01
03
04
06
08
0a
09
0b
0c
0e
0d
0f
13
14
16
18
1a
19
1b
1c
1e
5e
1e
5e
1e
5e
1e
5e
1e
5e
1e
5e
1e
26
00
00
Error code: 00
Starting... 2971
Results:
02
01
03
04
06
08
0a
09
0b
0c
0e
0d
0f
13
14
16
18
1a
19
1b
1c
1e
5e
1e
5e
1e
5e
1e
5e
1e
5e
1e
5e
1e
26
00
00
Error code: 00
Starting... 2970
Results:
02
01
03
04
06
08
0a
09
0b
0c
0e
0d
0f
13
14
16
18
1a
19
1b
1c
1e
5e
1e
5e
1e
5e
1e
5e
1e
5e
1e
5e
1e
26
00
00
Error code: 00
Starting... 2969
Results:
02
01
03
04
06
08
0a
09
0b
0c
0e
0d
13
14
16
18
5b
5c
1c
1e
5e
1e
5e
1e
5e
1e
5e
1e
5e
1e
5e
1e
26
00
00
Error code: 00
Starting... 2968
Results:
02
01
03
04
06
08
0a
09
0b
0c
0e
0d
0f
13
14
16
18
1a
19
1b
1c
1e
5e
1e
5e
1e
5e
1e
5e
1e
5e
1e
5e
1e
26
00
00
Error code: 00
SD card not valid or not inserted, doing a normal boot.
[pico] Changed state: WIIU_STATE_NEEDS_DEFUSE -> WIIU_STATE_NORMAL_BOOT
[pico] Changed state: WIIU_STATE_NORMAL_BOOT -> WIIU_CHECK_IF_POWERED_OFF
[pico] Changed state: WIIU_CHECK_IF_POWERED_OFF -> WIIU_STATE_POWERED_OFF

As far as the format, I used fat32 w/ 4096 byte allocation and no label. I did use windows to format the card to fat32 after using Win32DiskImager to flash the sd card with the boot1.img
 

kitsune1324

Member
Newcomer
Joined
Aug 9, 2023
Messages
15
Trophies
0
Age
30
XP
81
Country
United States
That's the log I just put in. The behavior between the two does not change at all. I have a 32gb sd card I could try but it's sdhc.
 

SDIO

Well-Known Member
Member
Joined
Feb 13, 2023
Messages
2,355
Trophies
0
Age
28
XP
1,512
Country
Germany
nah a 32GB wont work. So looks like your card isn't compatible. Maybe insert/remove it a few times in case the contacts are oxidated, try a differen micro sd adapter and if nothing helps try another card.

What state is your wii u in?
 

kitsune1324

Member
Newcomer
Joined
Aug 9, 2023
Messages
15
Trophies
0
Age
30
XP
81
Country
United States
nah a 32GB wont work. So looks like your card isn't compatible. Maybe insert/remove it a few times in case the contacts are oxidated, try a differen micro sd adapter and if nothing helps try another card.

What state is your wii u in?
I'll try a different SD adapter, one that I know works. Still, it's odd that the cards are getting reformatted unless that's just part of the standard wiiu boot.

Regarding the state it's in, funny enough, you actually pointed me to de_fuse in the thread I started: https://gbatemp.net/threads/dead-system-memory.637749/#post-10221609.

TLDR: potential NAND failure (could boot the wii u and navigate, couldn't open browser or move 99% of saved game data), attempted an update which froze at 98%, now the wii u will only give a black screen when booting, no menus.
 

SDIO

Well-Known Member
Member
Joined
Feb 13, 2023
Messages
2,355
Trophies
0
Age
28
XP
1,512
Country
Germany
maybe the card is broken and doesn't accept any writes. Did you test it without putting it in the wii u, just removing and reinserting into the pc?
 

kitsune1324

Member
Newcomer
Joined
Aug 9, 2023
Messages
15
Trophies
0
Age
30
XP
81
Country
United States
Confirmed both cards are working as expected in windows across multiple machines. I think the issue is when the wii u goes into its normal boot it reformats the card. When it doesn't the card stays in tact. I also tried another Micro SD - SD adapter (known good) and am experiencing the same behavior as above.
 

SDIO

Well-Known Member
Member
Joined
Feb 13, 2023
Messages
2,355
Trophies
0
Age
28
XP
1,512
Country
Germany
the wii u doesn't format sd cards. There must be something else going on. Can you test the cards with h2wtest?
 

kitsune1324

Member
Newcomer
Joined
Aug 9, 2023
Messages
15
Trophies
0
Age
30
XP
81
Country
United States
Micro SD's were bad, don't cheap out with "cloudisk". I picked up a sandisk which h2testw tested without issue.

Good news: It's now defused!! Now to figure out what to do. I'll post an update if/when I unbrick it or have questions!
Post automatically merged:

Looks like I ran into a stop already: Trying to boot, I get the purple LED and putty gives the message
[pico] Changed state: WIIU_STATE_NEEDS_DEFUSE -> WIIU_STATE_DEFUSED
[pico] Changed state: WIIU_STATE_DEFUSED -> WIIU_STATE_MONITORING

After that there is no additional info written out to PUTTY and the LED will turn to a flashing orange after a minute or two, again, nothing written out to PUTTY.

TO confirm, my file structure on the SD card looks like
├── fw.img
└── wiiu
....└── ios_plugins
....└── wafel_core.ipx

I checked the SD card and have no logs, I have also tried booting the wii u without the SD card and without the 3.3v (pico) and nothing's changed (as expected?).

What am I missing here?
 
Last edited by kitsune1324,
  • Like
Reactions: Valery0p and SDIO

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • BigOnYa @ BigOnYa:
    I went to auction at a mom/pops video game store few months ago that was closing, and bought 11 slims for $200, 1 was DOA but 10 work fine. so hella deal. Already rgh3'ed 8 of them. But most younger kids don't even want anymore, unless it plays stupid "fortnight", or newer shit.
  • K3Nv2 @ K3Nv2:
    Think I'm gonna use my giftcard balance on a nice pair of headphones but $100 is still limited
  • K3Nv2 @ K3Nv2:
    Soundcore q30s are nice but they leak so much sound it sounds like speakers
  • Psionic Roshambo @ Psionic Roshambo:
    Ken spend the 100 on a gun and skii mask, wait for a jogger at the park jewelry money and headphones!
    +1
  • K3Nv2 @ K3Nv2:
    If only Amazon sold guns
  • K3Nv2 @ K3Nv2:
    Fucking dick heads think it's a bad idea to get a gun 2 days later
  • BigOnYa @ BigOnYa:
    Wait, I thought you were the dickhe...nvm
  • K3Nv2 @ K3Nv2:
    I got balls on my chin and two dicks on my forehead sir
    +1
  • BigOnYa @ BigOnYa:
    Sorry, no offense there double dickhead chinballs.
  • K3Nv2 @ K3Nv2:
    Chicks still love it
    +1
  • BigOnYa @ BigOnYa:
    "Mommy, look, what is that?". "That's your soon to be daddy."
    +1
  • K3Nv2 @ K3Nv2:
    That you'll only see once
    +2
  • Veho @ Veho:
    Double dickhead chinballs is still better than double dickhead eyeballs.
  • Veho @ Veho:
    As in, the balls will grow in your eye sockets.
  • K3Nv2 @ K3Nv2:
    I paid 5 grand to get them moved to my chin
    +1
  • Veho @ Veho:
    This you?
  • K3Nv2 @ K3Nv2:
    My hair can't be that cool
  • Veho @ Veho:
    Ah, yes, portrait mode, surely the best way to film a row of people. If only there were some way to fit a wider shot, at the expense of height... if only...
  • K3Nv2 @ K3Nv2:
    4k portrait mode?
    +1
    K3Nv2 @ K3Nv2: https://youtu.be/Rx-KuevU4h4?si=1MoSvL-y5fFFHf58 Damn kinda sad for Iran