Hacking Fusee payloads and not a wire in sight (1.0.0 only)

[kramer987]

Hah - yes well OK you need a USB cable to push payloads atm but if on 1.0.0 you can enter RCM thru software only without need to tamper with any pins/thin wires/shorting or anything.
That's the gist of this as well as the later instruction to document how to do it all from scratch on Windows only.

interesting. ok then this is the guide for me as i'm on 1.0. but i guess i still need a copy of puyo puyo to get into pegaswitch at least the first time.

 

[snoofly]

interesting. ok then this is the guide for me as i'm on 1.0. but i guess i still need a copy of puyo puyo to get into pegaswitch at least the first time.

Yep 'fraid so.
Sad thing is once you've used it the once to install fake news you can ditch it so if you can source a used copy or borrow one for a couple minutes somehow that'd be good.

 

[kramer987]

Yep 'fraid so.
Sad thing is once you've used it the once to install fake news you can ditch it so if you can source a used copy or borrow one for a couple minutes somehow that'd be good.

got a copy i can borrow? lol

 

[Ronhero]

Great work, this is moving along faster then i had imagined

 

[BL4Z3D247]

If I'm understanding correctly Windows users just need to:

1. Compile the F-G Loader psf0 file(renamed to loader.nsp)
2. Launch PegaSwitch
3. Go to News/Launch Pegaswitch/Play (see elsewhere for setup of fakenews)
4. Enter RCM mode
5. In Pega terminal run:
>> evalfile usefulscripts/rcm.js (see note below)
6. Get no output
7. Back out on Switch and enter Album app
- get black screen - you are now in RCM mode
8. Connect USB A-C from PC to Switch.
9.Grab file reboot_to_rcm.nsp from Reswitched Discord pin
- credit to stuck_pixel for the precompiled nsp
10. Put this nsp file in the root of your SD.
11. Alter the nspwn script at
https://pastebin.com/UBLJsgse
to point to this file
change line:
var path = utils.str2ab("@Sdcard:/loader.nsp");
to
var path = utils.str2ab("@Sdcard:/reboot_to_rcm.nsp");
and save as rcm.js in atpegaswitch/usefulscripts

Does that sound about right?

 

[snoofly]

loader.nsp is relevant to @LukaFraga 's post at https://gbatemp.net/threads/getting-hbmenu-from-1-0-0-to-3-0-0.501940/
so step 1 is not applicable here.

Essentially :
1. reboot_to_rcm.nsp onto SD root (check the Reswitched Discord pinned messages)
2. Set up rcm.js by small edit to https://pastebin.com/UBLJsgse and put in usefulscripts
3. Run Pega: evalfile usefulscripts/rcm.js
4. Attach USB
5. Run Album
6. Do the python stuff to upload payload.

To boot switch, load news, run pega, run script, back out, run album, run python - hacked in like 20 seconds.

 

[ihaveahax]

$ python3 -mpip install libusb
Additonal Step I needed to avoid a error running script when doing "import usb" ModuleNotFoundError:
$ pip3.6 install pyusb

"python3 -mpip" and "pip3.6" are the same command if python3 is 3.6. you're not supposed to install libusb here(turns out I made this mistake in an earlier post too). so instead, you should do: "python3 -mpip install pyusb"

 

[BL4Z3D247]

loader.nsp is relevant to @LukaFraga 's post at https://gbatemp.net/threads/getting-hbmenu-from-1-0-0-to-3-0-0.501940/
so step 1 is not applicable here.

Essentially :
1. reboot_to_rcm.nsp onto SD root (check the Reswitched Discord pinned messages)
2. Set up rcm.js by small edit to https://pastebin.com/UBLJsgse and put in usefulscripts
3. Run Pega: evalfile usefulscripts/rcm.js
4. Attach USB
5. Run Album
6. Do the python stuff to upload payload.

To boot switch, load news, run pega, run script, back out, run album, run python - hacked in like 20 seconds.

Awesome, thanks.

 

[snoofly]

"python3 -mpip" and "pip3.6" are the same command if python3 is 3.6. you're not supposed to install libusb here(turns out I made this mistake in an earlier post too). so instead, you should do: "python3 -mpip install pyusb"

thx - edited the OP

 

[TheGreek Boy]

roblabla said on discord that some guys are working on software solution for fusee gelee for 3.0.0 .

 

[Goombado]

Hi, I seem to be having a slight issue with rcm.js on my switch. Whenever I run the script through pegaswitch and then enter the album, the switch instantly crashes and gives me the "An error has occurred" screen with Error code 2162-0002. I have reboot_to_rcm.nsp on the root of my sd card, and have altered the script as stated in the instructions. Am I doing something wrong? Thanks

 

[M7L7NK7]

Have to fight the temptation to just ebay puyo then ebay it after using it

 

[snoofly]

Hi, I seem to be having a slight issue with rcm.js on my switch. Whenever I run the script through pegaswitch and then enter the album, the switch instantly crashes and gives me the "An error has occurred" screen with Error code 2162-0002. I have reboot_to_rcm.nsp on the root of my sd card, and have altered the script as stated in the instructions. Am I doing something wrong? Thanks

Just seen this via a quote to this thread in a recent one.
If this is still a problem:
-do other nspwn scripts work?
-are you definitely on firmware 1.0.0 only?
-can you check there is absolutely no typo in rcm.js?
-did you use the precompiled discord nsp file or your own compiled version?