11-09-2012, 06:30 AM
(This post was last modified: 11-09-2012, 06:46 AM by TimeWalker.)
I'm positive I have the latest build. The checksum is off 100%.
Here's what the header looks like for the BIOS1.WPH when compressed after applying the patchset:
http://pastie.org/5350637
The last two bytes are what I assume for integrity check. And for my applied patchset they are in fact wrong.
You can reproduce this by taking your original BIOS1.WPH and changing these bytes to anything you desire -> the result is that capsule will not be possible to decompress.
The first byte should always be 0xB1 because the header crc doesn't change .. but 0x16 is correct ... and those will indicate capsule's integrity.
If I open up the output capsule with HEX editor and swap 0x56 with 0xB1 the capsule can be decompressed thereafter. So the algo is a little bit off somewhere.
Also fun fact .. the modules the app has presumably patched are gone .. if you decompress the capsule there aren't:
CFEF94C4-4167-466A-8893-8779459DFA86 - PlatformSetupAdvancedDxe.efi
F7731B4C-58A2-4DF4-8980-5645D39ECE58 - PowerManagement2.efi
in the PhoenixTool's output any longer.. they're completely absent.
In fact not only these modules are absent but whole lot other modules too ..
Here's what the header looks like for the BIOS1.WPH when compressed after applying the patchset:
http://pastie.org/5350637
The last two bytes are what I assume for integrity check. And for my applied patchset they are in fact wrong.
You can reproduce this by taking your original BIOS1.WPH and changing these bytes to anything you desire -> the result is that capsule will not be possible to decompress.
The first byte should always be 0xB1 because the header crc doesn't change .. but 0x16 is correct ... and those will indicate capsule's integrity.
If I open up the output capsule with HEX editor and swap 0x56 with 0xB1 the capsule can be decompressed thereafter. So the algo is a little bit off somewhere.
Also fun fact .. the modules the app has presumably patched are gone .. if you decompress the capsule there aren't:
CFEF94C4-4167-466A-8893-8779459DFA86 - PlatformSetupAdvancedDxe.efi
F7731B4C-58A2-4DF4-8980-5645D39ECE58 - PowerManagement2.efi
in the PhoenixTool's output any longer.. they're completely absent.
In fact not only these modules are absent but whole lot other modules too ..