Last active
February 4, 2018 00:19
-
-
Save isidorogv/3b882dc7a45e53ef0a3021aaa8373f7d to your computer and use it in GitHub Desktop.
me_cleaner output
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
python me_cleaner.py -S -r -t -d -O out.bin -D ifd_shrinked.bin -M me_shrinked.bin factory_12m.bin | |
Full image detected | |
The ME/TXE region goes from 0x3000 to 0x500000 | |
Found FPT header at 0x3010 | |
Found 23 partition(s) | |
Found FTPR header: FTPR partition spans from 0x180000 to 0x24a000 | |
ME/TXE firmware version 8.1.40.1416 | |
Public key match: Intel ME, firmware versions 7.x.x.x, 8.x.x.x | |
Reading partitions list... | |
???? (0x000003c0 - 0x000000400, 0x00000040 total bytes): removed | |
FOVD (0x00000400 - 0x000001000, 0x00000c00 total bytes): removed | |
MDES (0x00001000 - 0x000002000, 0x00001000 total bytes): removed | |
FCRS (0x00002000 - 0x000003000, 0x00001000 total bytes): removed | |
EFFS (0x00003000 - 0x0000df000, 0x000dc000 total bytes): removed | |
BIAL (NVRAM partition, no data, 0x0000add0 total bytes): nothing to remove | |
BIEL (NVRAM partition, no data, 0x00003000 total bytes): nothing to remove | |
BIIS (NVRAM partition, no data, 0x00036000 total bytes): nothing to remove | |
NVCL (NVRAM partition, no data, 0x00010511 total bytes): nothing to remove | |
NVCM (NVRAM partition, no data, 0x0000493f total bytes): nothing to remove | |
NVCP (NVRAM partition, no data, 0x0000a553 total bytes): nothing to remove | |
NVJC (NVRAM partition, no data, 0x00004000 total bytes): nothing to remove | |
NVKR (NVRAM partition, no data, 0x0001257d total bytes): nothing to remove | |
NVOS (NVRAM partition, no data, 0x00034af5 total bytes): nothing to remove | |
NVSH (NVRAM partition, no data, 0x00007609 total bytes): nothing to remove | |
NVTD (NVRAM partition, no data, 0x00001eac total bytes): nothing to remove | |
PLDM (NVRAM partition, no data, 0x0000a000 total bytes): nothing to remove | |
GLUT (0x000df000 - 0x0000e3000, 0x00004000 total bytes): removed | |
LOCL (0x000e3000 - 0x0000e7000, 0x00004000 total bytes): removed | |
WCOD (0x000e7000 - 0x000140000, 0x00059000 total bytes): removed | |
MDMV (0x00140000 - 0x000180000, 0x00040000 total bytes): removed | |
FTPR (0x00180000 - 0x00024a000, 0x000ca000 total bytes): NOT removed | |
NFTP (0x0024a000 - 0x0004a4000, 0x0025a000 total bytes): removed | |
Removing partition entries in FPT... | |
Removing EFFS presence flag... | |
Correcting checksum (0x2f)... | |
Reading FTPR modules list... | |
UPDATE (LZMA , 0x1cc507 - 0x1cc6c5 ): removed | |
ROMP (Huffman, fragmented data, ~1 KiB ): NOT removed, essential | |
BUP (Huffman, fragmented data, ~56 KiB ): NOT removed, essential | |
KERNEL (Huffman, fragmented data, ~134 KiB ): removed | |
POLICY (Huffman, fragmented data, ~90 KiB ): removed | |
HOSTCOMM (LZMA , 0x1cc6c5 - 0x1d349f ): removed | |
RSA (LZMA , 0x1d349f - 0x1d86f5 ): removed | |
CLS (LZMA , 0x1d86f5 - 0x1dde8a ): removed | |
TDT (LZMA , 0x1dde8a - 0x1e4580 ): removed | |
FTCS (Huffman, fragmented data, ~17 KiB ): removed | |
ClsPriv (LZMA , 0x1e4580 - 0x1e4961 ): removed | |
SESSMGR (LZMA , 0x1e4961 - 0x1f328b ): removed | |
Relocating FTPR from 0x180000 - 0x24a000 to 0xd00 - 0xcad00... | |
Adjusting FPT entry... | |
Adjusting LUT start offset... | |
Adjusting Huffman start offset... | |
Adjusting chunks offsets... | |
Moving data... | |
The ME minimum size should be 98304 bytes (0x18000 bytes) | |
The ME region can be reduced up to: | |
00003000:0001afff me | |
Setting the AltMeDisable bit in PCHSTRP10 to disable Intel ME... | |
Removing ME/TXE R/W access to the other flash regions... | |
Extracting the descriptor to "ifd_shrinked.bin"... | |
Modifying the regions of the extracted descriptor... | |
00003000:004fffff me --> 00003000:0001afff me | |
00500000:00bfffff bios --> 0001b000:00bfffff bios | |
Extracting and truncating the ME image to "me_shrinked.bin"... | |
Checking the FTPR RSA signature of the extracted ME image... VALID | |
Checking the FTPR RSA signature... VALID | |
Done! Good luck! |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment