Hacking IDA Pro plugin to support Switch NRO binaries

[adam235]

https://twitter.com/Blips_and_Chitz/status/857259800526286850

 

[ShadowOne333]

So the Switch executable files are .NRO?
Interesting... Wonder what they stand for.

 

[Alkéryn]

Nintendo Read Only ?
it have to be Nintendo something
EDIT: yeah it make no sense but first thing that come to my mind

 

[ShadowOne333]

Maybe it stands for Nintendo's Really Obnoxious by not giving us a proper browser nor Virtual Console on the Switch.

 

[tech3475]

N could stand for NX.

Remember dol for dolphin?

 

[daxtsu]

Possibly NX Relocatable Object, similar to CRO on the 3DS. Basically, dylib/so/dll. We'll know more in the coming months, though.

 

[BullyWiiPlaza]

Any way to get binaries though?

 

[DeadlyFoez]

N could stand for NX.

Remember dol for dolphin?

You do realize that the 'N' in 'NX' does already stand for Nintendo? :facepalm:

 

[tech3475]

You do realize that the 'N' in 'NX' does already stand for Nintendo? :facepalm:

I've never seen anywhere say what NX officially stood for, usually it was refered to as 'the NX' or 'Nintendo NX'.

I've tried to it look up and the closest I found was that the current CEO doesn't believe there's any meaning behind it.

"As for the codename NX, I don't believe that there's any real meaning behind it, and to be perfectly honest, I don't know where it came from," says Kimishima, laughing when I ask. "Or perhaps Mr. Iwata had meant to tell me and then never got the chance."

http://time.com/4131306/nintendo-kimishima-interview/

 

[WiiFoundLove]

What is the IDA Pro Loader and what does it?

 

[GerbilSoft]

Possibly NX Relocatable Object, similar to CRO on the 3DS. Basically, dylib/so/dll. We'll know more in the coming months, though.

I would not be surprised if Switch used position-independent executables for the main game executable in addition to libraries. That's been the standard on Windows since Vista¹, and has been slowly trickling down to Linux distributions. (Ubuntu 16.10 is fully recompiled as PIE.)

PIE makes runtime attacks somewhat harder, since the executable base addresses aren't fixed. There are ways to work around it, though.

¹ Technically, Windows doesn't actually use PIE. Executables are compiled with a fixed base address and a relocation section, which allows the dynamic linker to randomize the base address. Most other OSes do use PIE, though.

 

[BullyWiiPlaza]

What is the IDA Pro Loader and what does it?

It allows you to explore the code easier and possibly find valuable information/vulnerabilities to make an exploit.

 

[jimmyleen]

It allows you to explore the code easier and possibly find valuable information/vulnerabilities to make an exploit.

Or easier for people to report code problems to Nintendo and get paid in return.

 

[adrifcastr]

-snip-

 

[Arck]

snip

you can ask ReSwitched team, they have one afaik

 

[adrifcastr]

you can ask ReSwitched team, they have one afaik

but HOW THE HECK, did they get one, -snip-

 

[Arck]

real dev (?)
Anyway that not really the question, but in that way you can make stuff faster

 

[adrifcastr]

real dev (?)
Anyway that not really the question, but in that way you can make stuff faster

-snip- Thanks.

 

[jt_1258]

-snip-

but HOW THE HECK, did they get one, -snip-

-snip- Thanks.

theses snips are driving me crazy as to wondering what they are

 

[adrifcastr]

theses snips are driving me crazy as to wondering what they are

Let's say I kinda broke something i shouldn't do.