ME Analyzer: Intel Engine Firmware Analysis Tool Discussion

Engine Firmware Repository Database r48:

Latest ME 11.0 CON H SKU to 11.0.10.1002
Latest ME 10.0 5MB SKU to 10.0.50.1004
Latest TXE 1.1 1.375MB IT SKU to 1.1.4.1148
Added ME 11.0.10.1002_CON_H_XX_PRD_RGN
Added ME 10.0.50.1004_5MB_PRD_RGN
Added ME 7.1.20.1111_1.5MB_CPT_PRD_UPD
Added TXE 1.1.4.1148_1.375MB_IT_PRD_RGN

Note: ReUpload for new ME 11.0 firmware.

plutomaniac
Hi. Please tell me how I do extract me fw from existing bios.bin file. Thank you.

2016-04-23_094907.jpg

ME Analyzer v1.5.0 :

Added robust Engine firmware Manifest Header detection
Added hash validation checks for all Engine firmware
Added early support for TXE 3.x APL/BXT firmware
Added early support for ME 11.5 KBL-UPT firmware
Added Kernel extraction for SPS 4.x and TXE 3.x
Added Lenovo OEMID 405 for all post-SKL firmware
Improved detection of ME 11.0 SKL-SPT firmware
Improved detection of ME 11.x Partial Update images
Fixed wrong database version display in special cases
Fixed wrong UEFI Strip -msg output in special cases
Performance improvements and redundand checks removal
Updated Intel Engine Firmware Repository Database to r49

Engine Firmware Repository Database r49 :

Added SHA-1 hashes to all Engine firmware
Added ME 11.0.0.1198_CON_LP_C0_PRD_EXTR
Added ME 9.1.37.1002_1.5MB_PRD_RGN
Removed ME 9.1.37.1002_1.5MB_PRD_EXTR
Renamed ME 6.0.21.1188_IGN_IP_PRD_EXTR
Renamed ME 6.0.20.1185_IGN_IP_PRD_EXTR
Renamed ME 6.0.20.1185_IGN_IP_PRE_EXTR
Renamed ME 2.6.1.1030_AMT_PRD_EXTR
Renamed ME 2.5.0.1094_AMT_PRD_UPD
Renamed ME 2.0.2.1114_QST_PRD_UPD

@plutomaniac You should let ME Analyser detect Lenovo 405 OEM ID from SandyBridge and onwards. My Lenovo X130e is a SandyBridge Celeron laptop.

@ rootuser123:

As said here, the issue is implementation-related. For post-SKL I can determine easily where the OEMID is because the new structure is better. For pre-SKL I had to do whole file searches which may be fine for the ME firmware itself but for full SPI images it can cause false positives at other regions especially since that pattern is way too small and common. I will look into it, maybe try in some cases only but donā€™t get your hopes up.

ME Analyzer v1.5.1 :

Fixed wrong Release detection for old ME 11.0 firmware
Fixed issue that caused parameters -info and -? to not work
Fixed rare issue that caused UBU Pre-Menu mode to not work
Updated Intel Engine Firmware Repository Database to r50

Engine Firmware Repository Database r50 :

Latest ME 11.0 COR H SKU to 11.0.10.1002
Added ME 11.0.10.1002_COR_H_XX_PRD_RGN

ME Analyzer v1.5.2 :

Added ME 11.x & TXE 3.x Production Version (PV) bit detection
Fixed wrong UEFIStrip mode (-extr) output for SPS firmware
Updated Intel Engine Firmware Repository Database to r51

Engine Firmware Repository Database r51 :

Latest TXE 1.2 1.375MB MD SKU to 1.2.1.1161
Added ME 11.0.0.1202_COR_H_D0_PRE_RGN
Added ME 11.0.0.1202_COR_LP_B1_PRE_RGN
Added TXE 1.2.1.1161_1.375MB_MD_PRD_EXTR
Added SPS 03.01.03.030_PRD_REC
Added SPS 03.01.03.030_PRD_OPR

Hi plutomaniac,

with ME Analyzer v1.5.2 you have new old Bug, Msvcr100.dll are missing, old source codeā€¦

hello morpheus67,

What operating system and architecture do you have? Was 1.5.1 working properly?

Can someone else verify that as a problem?

ā€¦v.1.5.0 O.K. / v1.5.1 not tested, OS = Win 10 PRO 64-bit build 10586.318, new/old problem with 1.52 ? Copy this file Msvcr100.dll from old versionā€¦ and nowā€¦ ubu with update 4.

withmsvcr100dll.jpg

withoutmsvcr100dll.jpg

The dll wasnā€™t bundled separately with any recent version of MEA because itā€™s not needed. Itā€™s already inserted into the executable and the debug log while building also clearly states so. I have the same OS/architecture and Iā€™m not facing such issue. The only difference between 1.5.1 and 1.5.2 is the newer version of PyInstaller but from my testing, that dll is indeed included. So I donā€™t know. Maybe this is a computer-specific issue. If I get more reports, Iā€™ll look into it further by downgrading PyInstaller or similar. For now though, I donā€™t want to go through all that trouble.

Win 10 PRO 64-bit build 10586.318 also hereā€¦no problem with MEA.

Also win10 x64, no problem with MEA 1.52.

And Win 7 Max 64bit, Win 8.1 SL & Ent 64bit, Win 10 Pro 64 bit - MEA 1.5.2 working no problem.

Thank you everyone for your feedback, Iā€™ll leave it as it is.

ā€¦ strange issue with MEA 1.5.2, another Test. Test-System = GA-EP45-UD3P Bios F11d / OS = Win7 sp1 and the same Error here with Bios 2.50 from extreme6, missing fileā€¦ but whateverā€¦ copy the missing file to MEA and done, curious another System and the same Error. I Love Bugs.

The only difference Iā€™m seeing is the OS language.

@ ex58, SoniX, Pacman :

Are you all using English as an OS language or something else?

I got US-en.

All OS Russian Edition (RU-ru).
UAC - full disabled.
AV - ESET NOD32 Smart Secutity 8.0.319.1

The fact that SoniX has RU means itā€™s not related. Thx for the replies.

@morpheus67

Can you compress and attach me the .dll that you have verified to work?