Tool to Insert/Replace SLIC in Phoenix / Insyde / Dell / EFI BIOSes

Discussion in 'MDL Projects and Applications' started by andyp, Nov 26, 2009.

  1. samir0558

    samir0558 MDL Novice

    Joined:
    Jul 22, 2011
    Messages:
    6
    Likes Received:
    2
    Trophy Points:
    0
    thnak you, great work
     
  2. andyp

    andyp SLIC Tools Author

    Joined:
    Aug 8, 2008
    Messages:
    1,671
    Likes Received:
    2,536
    Trophy Points:
    60
  3. CodeRush

    CodeRush MDL Member

    Joined:
    Jun 20, 2011
    Messages:
    221
    Likes Received:
    667
    Trophy Points:
    10
    #3723 CodeRush, Dec 2, 2013
    Last edited by a moderator: Apr 20, 2017
    andyp, I haven't any big experience with cryptography too, but I think we can only verify validity of the capsule, because we don't have ASUS/Asrock/etc. private keys.
    There are definitely RSA2048 and SHA256 there, look at his definitions.
    Code:
    typedef struct {
      WIN_CERTIFICATE   Hdr;
      EFI_GUID          CertType;
    //  UINT8            CertData[1];
    //    EFI_CERT_BLOCK_RSA_2048_SHA256  CertData;
    } WIN_CERTIFICATE_UEFI_GUID_1;
    
    typedef struct {
        WIN_CERTIFICATE_UEFI_GUID_1      Hdr;        // 24
        EFI_CERT_BLOCK_RSA_2048_SHA256   CertData;   // 16+256+256
    } AMI_CERTIFICATE_RSA2048_SHA256;
    
    typedef struct {
        AMI_CERTIFICATE_RSA2048_SHA256   SignCert;   // 24+16+256+256
        EFI_CERT_BLOCK_RSA_2048_SHA256   RootCert;   // 16+256+256
    } FW_CERTIFICATE;
    
    I don't know exactly, if the capsule can be signed with out own key - I hope so, but for there is no need to do it, because "afuwin64 /gan" disables the header verification and flashes modified image as is.
     
  4. andyp

    andyp SLIC Tools Author

    Joined:
    Aug 8, 2008
    Messages:
    1,671
    Likes Received:
    2,536
    Trophy Points:
    60
    #3724 andyp, Dec 2, 2013
    Last edited by a moderator: Apr 20, 2017
    (OP)
    Hi

    We can only verify. But it would be handy as often people mod ASUS EFIs and then get caught by the verification failed msg. I didn't know about the /gan flag though.

    I have found those structs. Was having a play last night but didn't get far.

    Thanks
    Andy

     
  5. CodeRush

    CodeRush MDL Member

    Joined:
    Jun 20, 2011
    Messages:
    221
    Likes Received:
    667
    Trophy Points:
    10
  6. RoachemGood

    RoachemGood MDL Novice

    Joined:
    Dec 6, 2013
    Messages:
    6
    Likes Received:
    1
    Trophy Points:
    0
    I have a P4m900-M4 rev6.2 biostar motherboard with supposedly phoenix Technologies,LTD bios and the tool reports not phoenix bios? am I missing something?
     
  7. Tito

    Tito Super Mod / Adviser Staff Member

    Joined:
    Nov 30, 2009
    Messages:
    17,888
    Likes Received:
    16,542
    Trophy Points:
    340
  8. charnow

    charnow MDL Novice

    Joined:
    Nov 14, 2012
    Messages:
    10
    Likes Received:
    11
    Trophy Points:
    0
  9. andyp

    andyp SLIC Tools Author

    Joined:
    Aug 8, 2008
    Messages:
    1,671
    Likes Received:
    2,536
    Trophy Points:
    60
  10. Beheadedstraw

    Beheadedstraw MDL Novice

    Joined:
    Jun 22, 2013
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    0
  11. charnow

    charnow MDL Novice

    Joined:
    Nov 14, 2012
    Messages:
    10
    Likes Received:
    11
    Trophy Points:
    0
    Could the problem be that these bios files also contain a UEFI component?

     
  12. andyp

    andyp SLIC Tools Author

    Joined:
    Aug 8, 2008
    Messages:
    1,671
    Likes Received:
    2,536
    Trophy Points:
    60
  13. Tito

    Tito Super Mod / Adviser Staff Member

    Joined:
    Nov 30, 2009
    Messages:
    17,888
    Likes Received:
    16,542
    Trophy Points:
    340
  14. andyp

    andyp SLIC Tools Author

    Joined:
    Aug 8, 2008
    Messages:
    1,671
    Likes Received:
    2,536
    Trophy Points:
    60
    Because that's really what it is. It inserts code to generate a SLIC table using the EFI API at boot. It only worked on a few boards. SSV2 is an outdated term really - it referred to AMI BIOS mods where the modules were all kept the same size (MSI boards needed it). I think it meant Super Static V2 - which actually has no meaning at all these days.

    A
     
  15. sebus

    sebus MDL Guru

    Joined:
    Jul 23, 2008
    Messages:
    6,201
    Likes Received:
    1,945
    Trophy Points:
    210
  16. andyp

    andyp SLIC Tools Author

    Joined:
    Aug 8, 2008
    Messages:
    1,671
    Likes Received:
    2,536
    Trophy Points:
    60
    No... I can't for the life of me figure out the structure. Its not a traditional Dell pattern
    A

     
  17. andyp

    andyp SLIC Tools Author

    Joined:
    Aug 8, 2008
    Messages:
    1,671
    Likes Received:
    2,536
    Trophy Points:
    60
  18. omnious

    omnious MDL Novice

    Joined:
    Dec 15, 2013
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    0