Hacking Fusee payloads and not a wire in sight (1.0.0 only)

kramer987

Well-Known Member
Member
Joined
Feb 4, 2008
Messages
114
Trophies
1
XP
552
Country
United States
Hah - yes well OK you need a USB cable to push payloads atm but if on 1.0.0 you can enter RCM thru software only without need to tamper with any pins/thin wires/shorting or anything.
That's the gist of this as well as the later instruction to document how to do it all from scratch on Windows only.

interesting. ok then this is the guide for me as i'm on 1.0. but i guess i still need a copy of puyo puyo to get into pegaswitch at least the first time.
 

snoofly

Well-Known Member
OP
Member
Joined
Aug 18, 2015
Messages
1,012
Trophies
0
Age
54
XP
2,133
Country
United Kingdom
interesting. ok then this is the guide for me as i'm on 1.0. but i guess i still need a copy of puyo puyo to get into pegaswitch at least the first time.
Yep 'fraid so.
Sad thing is once you've used it the once to install fake news you can ditch it so if you can source a used copy or borrow one for a couple minutes somehow that'd be good.
 

BL4Z3D247

GBAtemp Stoner
Member
Joined
Oct 22, 2008
Messages
1,942
Trophies
0
Age
39
Location
I'm so high, I don't even know!
XP
1,229
Country
United States
If I'm understanding correctly Windows users just need to:

1. Compile the F-G Loader psf0 file(renamed to loader.nsp)
2. Launch PegaSwitch
3. Go to News/Launch Pegaswitch/Play (see elsewhere for setup of fakenews)
4. Enter RCM mode
5. In Pega terminal run:
>> evalfile usefulscripts/rcm.js (see note below)
6. Get no output
7. Back out on Switch and enter Album app
- get black screen - you are now in RCM mode
8. Connect USB A-C from PC to Switch.
9.Grab file reboot_to_rcm.nsp from Reswitched Discord pin
- credit to stuck_pixel for the precompiled nsp
10. Put this nsp file in the root of your SD.
11. Alter the nspwn script at
https://pastebin.com/UBLJsgse
to point to this file
change line:
var path = utils.str2ab("@Sdcard:/loader.nsp");
to
var path = utils.str2ab("@Sdcard:/reboot_to_rcm.nsp");
and save as rcm.js in atpegaswitch/usefulscripts

Does that sound about right?
 
Last edited by BL4Z3D247,

snoofly

Well-Known Member
OP
Member
Joined
Aug 18, 2015
Messages
1,012
Trophies
0
Age
54
XP
2,133
Country
United Kingdom
loader.nsp is relevant to @LukaFraga 's post at https://gbatemp.net/threads/getting-hbmenu-from-1-0-0-to-3-0-0.501940/
so step 1 is not applicable here.

Essentially :
1. reboot_to_rcm.nsp onto SD root (check the Reswitched Discord pinned messages)
2. Set up rcm.js by small edit to https://pastebin.com/UBLJsgse and put in usefulscripts
3. Run Pega: evalfile usefulscripts/rcm.js
4. Attach USB
5. Run Album
6. Do the python stuff to upload payload.

To boot switch, load news, run pega, run script, back out, run album, run python - hacked in like 20 seconds.
 

ihaveahax

Well-Known Member
Member
Joined
Apr 20, 2015
Messages
6,069
Trophies
2
XP
7,827
Country
United States
$ python3 -mpip install libusb
Additonal Step I needed to avoid a error running script when doing "import usb" ModuleNotFoundError:
$ pip3.6 install pyusb
"python3 -mpip" and "pip3.6" are the same command if python3 is 3.6. you're not supposed to install libusb here(turns out I made this mistake in an earlier post too). so instead, you should do: "python3 -mpip install pyusb"
 
Last edited by ihaveahax,

BL4Z3D247

GBAtemp Stoner
Member
Joined
Oct 22, 2008
Messages
1,942
Trophies
0
Age
39
Location
I'm so high, I don't even know!
XP
1,229
Country
United States
loader.nsp is relevant to @LukaFraga 's post at https://gbatemp.net/threads/getting-hbmenu-from-1-0-0-to-3-0-0.501940/
so step 1 is not applicable here.

Essentially :
1. reboot_to_rcm.nsp onto SD root (check the Reswitched Discord pinned messages)
2. Set up rcm.js by small edit to https://pastebin.com/UBLJsgse and put in usefulscripts
3. Run Pega: evalfile usefulscripts/rcm.js
4. Attach USB
5. Run Album
6. Do the python stuff to upload payload.

To boot switch, load news, run pega, run script, back out, run album, run python - hacked in like 20 seconds.
Awesome, thanks.
 

snoofly

Well-Known Member
OP
Member
Joined
Aug 18, 2015
Messages
1,012
Trophies
0
Age
54
XP
2,133
Country
United Kingdom
"python3 -mpip" and "pip3.6" are the same command if python3 is 3.6. you're not supposed to install libusb here(turns out I made this mistake in an earlier post too). so instead, you should do: "python3 -mpip install pyusb"
thx - edited the OP
 

Goombado

Member
Newcomer
Joined
Oct 16, 2016
Messages
5
Trophies
0
Age
39
XP
100
Country
Hi, I seem to be having a slight issue with rcm.js on my switch. Whenever I run the script through pegaswitch and then enter the album, the switch instantly crashes and gives me the "An error has occurred" screen with Error code 2162-0002. I have reboot_to_rcm.nsp on the root of my sd card, and have altered the script as stated in the instructions. Am I doing something wrong? Thanks
 

snoofly

Well-Known Member
OP
Member
Joined
Aug 18, 2015
Messages
1,012
Trophies
0
Age
54
XP
2,133
Country
United Kingdom
Hi, I seem to be having a slight issue with rcm.js on my switch. Whenever I run the script through pegaswitch and then enter the album, the switch instantly crashes and gives me the "An error has occurred" screen with Error code 2162-0002. I have reboot_to_rcm.nsp on the root of my sd card, and have altered the script as stated in the instructions. Am I doing something wrong? Thanks
Just seen this via a quote to this thread in a recent one.
If this is still a problem:
-do other nspwn scripts work?
-are you definitely on firmware 1.0.0 only?
-can you check there is absolutely no typo in rcm.js?
-did you use the precompiled discord nsp file or your own compiled version?
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    SylverReZ @ SylverReZ: @AncientBoi, My friend passed away 3 days ago. :( +1