Hardware/Espresso
Jump to navigation
Jump to search
Espresso is the code name for the Wii U's PowerPC processor. Unlike the Broadway, the Espresso contains a secure boot ROM so that if the Starbuck is taken over, Espresso code execution should not be possible.
MSR
| Bits | Description |
|---|---|
| 0 | LE |
| 1 | RI |
| 2 | PM |
| 3 | Reserved |
| 4 | DR |
| 5 | IR |
| 6 | IP |
| 7 | Reserved |
| 8 | FE1 |
| 9 | BE |
| 10 | SE |
| 11 | FE0 |
| 12 | ME |
| 13 | FP |
| 14 | PR |
| 15 | EE |
| 16 | ILE |
| 17 | Reserved |
| 18 | POW |
| 19-31 | Reserved |
SPR
| Index | Name |
|---|---|
| 0x1 | XER |
| 0x8 | LR |
| 0x9 | CTR |
| 0x12 | DSISR |
| 0x13 | DAR |
| 0x16 | DEC |
| 0x19 | SDR1 |
| 0x1A | SRR0 |
| 0x1B | SRR1 |
| 0x10C | UTBL |
| 0x10D | UTBU |
| 0x110 | SPRG0 |
| 0x111 | SPRG1 |
| 0x112 | SPRG2 |
| 0x113 | SPRG3 |
| 0x11A | EAR |
| 0x11C | TBL |
| 0x11D | TBU |
| 0x11F | PVR |
| 0x210 | IBAT0U |
| 0x211 | IBAT0L |
| 0x212 | IBAT1U |
| 0x213 | IBAT1L |
| 0x214 | IBAT2U |
| 0x215 | IBAT2L |
| 0x216 | IBAT3U |
| 0x217 | IBAT3L |
| 0x218 | DBAT0U |
| 0x219 | DBAT0L |
| 0x21A | DBAT1U |
| 0x21B | DBAT1L |
| 0x21C | DBAT2U |
| 0x21D | DBAT2L |
| 0x21E | DBAT3U |
| 0x21F | DBAT3L |
| 0x230 | IBAT4U |
| 0x231 | IBAT4L |
| 0x232 | IBAT5U |
| 0x233 | IBAT5L |
| 0x234 | IBAT6U |
| 0x235 | IBAT6L |
| 0x236 | IBAT7U |
| 0x237 | IBAT7L |
| 0x238 | DBAT4U |
| 0x239 | DBAT4L |
| 0x23A | DBAT5U |
| 0x23B | DBAT5L |
| 0x23C | DBAT6U |
| 0x23D | DBAT6L |
| 0x23E | DBAT7U |
| 0x23F | DBAT7L |
| 0x380 | UGQR0 |
| 0x381 | UGQR1 |
| 0x382 | UGQR2 |
| 0x383 | UGQR3 |
| 0x384 | UGQR4 |
| 0x385 | UGQR5 |
| 0x386 | UGQR6 |
| 0x387 | UGQR7 |
| 0x388 | UHID2 |
| 0x389 | UWPAR |
| 0x38A | UDMAU |
| 0x38B | UDMAL |
| 0x390 | GQR0 |
| 0x391 | GQR1 |
| 0x392 | GQR2 |
| 0x393 | GQR3 |
| 0x394 | GQR4 |
| 0x395 | GQR5 |
| 0x396 | GQR6 |
| 0x397 | GQR7 |
| 0x398 | HID2 |
| 0x399 | WPAR |
| 0x39A | DMA_U |
| 0x39B | DMA_L |
| 0x39C | ECID0 |
| 0x39D | ECID1 |
| 0x39E | ECID2 |
| 0x3A8 | UMMCR0 |
| 0x3A9 | UPMC1 |
| 0x3AA | UPMC2 |
| 0x3AB | USIA |
| 0x3AC | UMMCR1 |
| 0x3AD | UPMC3 |
| 0x3AE | UPMC4 |
| 0x3B0 | HID5 |
| 0x3B2 | PCSR |
| 0x3B3 | SCR |
| 0x3B4 | CAR |
| 0x3B5 | BCR |
| 0x3B6 | WPSAR |
| 0x3B8 | MMCR0 |
| 0x3B9 | PMC1 |
| 0x3BA | PMC2 |
| 0x3BB | SIA |
| 0x3BC | MMCR1 |
| 0x3BD | PMC3 |
| 0x3BE | PMC4 |
| 0x3D0 | DCATE |
| 0x3D1 | DCATR |
| 0x3D8 | DMATL0 |
| 0x3D9 | DMATU0 |
| 0x3DA | DMATR0 |
| 0x3DB | DMATL1 |
| 0x3DC | DMATU1 |
| 0x3DD | DMATR1 |
| 0x3EF | PIR |
| 0x3F0 | HID0 |
| 0x3F1 | HID1 |
| 0x3F2 | IABR |
| 0x3F3 | HID4 |
| 0x3F4 | TDCL |
| 0x3F5 | DABR |
| 0x3F9 | L2CR |
| 0x3FA | TDCH |
| 0x3FB | ICTC |
| 0x3FC | THRM1 |
| 0x3FD | THRM2 |
| 0x3FE | THRM3 |
DMA_U
| Bits | Description |
|---|---|
| 0-4 | DMA_LEN_U |
| 5-31 | MEM_ADDR |
DMA_L
| Bits | Description |
|---|---|
| 0 | DMA_F |
| 1 | DMA_T |
| 2-3 | DMA_LEN_L |
| 4 | DMA_LD |
| 5-31 | LC_ADDR |
L2CR
| Bits | Description |
|---|---|
| 0 | L2IP |
| 1-17 | Reserved |
| 18 | L2TS |
| 19 | L2WT |
| 20 | Reserved |
| 21 | L2I |
| 22 | L2DO |
| 23-27 | Reserved |
| 28-29 | L2SIZ |
| 30 | L2CE |
| 31 | L2E |
HID0
| Bits | Description |
|---|---|
| 0 | NOOPTI |
| 1 | Reserved |
| 2 | BHT |
| 3 | ABE |
| 4 | Reserved |
| 5 | BTIC |
| 6 | DCFA |
| 7 | SGE |
| 8 | IFEM |
| 9 | SPD |
| 10 | DCFI |
| 11 | ICFI |
| 12 | DLOCK |
| 13 | ILOCK |
| 14 | DCE |
| 15 | ICE |
| 16 | NHR |
| 17-19 | Reserved |
| 20 | DPM |
| 21 | SLEEP |
| 22 | NAP |
| 23 | DOZE |
| 24 | PAR |
| 25 | ECLK |
| 26 | Reserved |
| 27 | BCLK |
| 28 | EBD |
| 29 | EBA |
| 30 | DBP |
| 31 | EMCP |
HID1
| Bits | Description |
|---|---|
| 0-26 | Reserved |
| 27 | PC4 |
| 28 | PC3 |
| 29 | PC2 |
| 30 | PC1 |
| 31 | PC0 |
HID2
| Bits | Description |
|---|---|
| 0-15 | Reserved |
| 16 | DQOEE |
| 17 | DCMEE |
| 18 | DNCEE |
| 19 | DCHEE |
| 20 | DQOERR |
| 21 | DCMERR |
| 22 | DNCERR |
| 23 | DCHERR |
| 24-27 | DMAQL |
| 28 | LCE |
| 29 | PSE |
| 30 | WPE |
| 31 | LSQE |
HID4
| Bits | Description |
|---|---|
| 0-19 | Reserved |
| 20 | L2CFI |
| 21 | L2MUM |
| 22 | DBP |
| 23 | LPE |
| 24 | ST0 |
| 25 | SBE |
| 26 | Reserved |
| 27-28 | BPD |
| 29-30 | L2FM |
| 31 | H4A |
HID5
| Bits | Description |
|---|---|
| 0-7 | Reserved |
| 8 | |
| 9 | |
| 10-13 | Reserved |
| 14 | |
| 15 | Reserved |
| 16 | |
| 17 | Reserved |
| 18 | |
| 19 | |
| 20 | |
| 21 | |
| 22 | Reserved |
| 23 | Enable L2CR |
| 24 | Enable L2CR_L2SIZ |
| 25 | Enable UDMA |
| 26 | |
| 27 | |
| 28 | Reserved |
| 29 | |
| 30 | PIRE |
| 31 | H5A |
SCR
| Bits | Description |
|---|---|
| 0-17 | Reserved |
| 18 | Core 0 pending ICI |
| 19 | Core 1 pending ICI |
| 20 | Core 2 pending ICI |
| 21 | Wake up Core 2 |
| 22 | Wake up Core 1 |
| 23 | Wake up Core 0 |
| 24 | |
| 25 | If unset when booting from alternate ancast keys, errors and loops forever. |
| 26 | If bit26 and bit27 are set, uses vWii ancast keys. |
| 27 | If bit27 and bit26 are set, uses vWii ancast keys. |
| 28 | Keystore 20..3f enabled (clear only). Set just after reading provisioning u32? |
| 29 | Keystore 00..1f enabled (clear only) |
| 30 | Bootrom enabled (clear only) |
| 31 | Set before exiting bootrom? If somehow set before then, uses a secret alternate set of ancast keys and prod ECC? |
vWii Mode Clock
While entering in vWii mode, Cafe2Wii reboots the PPC and sets the clock multiplier to 3x. This can be disabled by changing in Cafe2Wii an OR 0x20 to BIC 0x20 in LT_MEMCMPT and an OR 0x99 to OR 0x9D in LT_SYSPROT.