Skip to content

ByteRipperWeb 0.9-1 — more of the image read, and an ME panel that answers at once

Choose a tag to compare

View all tags
@maxshevelev maxshevelev released this 02 Oct 18:18
· 299 commits to main since this release
v0.9-1
a50fe43

This release brings the web edition level with upstream 0.9: the UEFI panel reads far more of what a vendor's image carries — AMI, Insyde and Dell variable stores, pictures, EC firmware, the Top Swap copy of the boot block — and the ME panel answers at once instead of after its databases have been worked through. It is level with upstream 0.9; the upstream commits made since then (the VSCC table's chip catalogue, the microcode change in sheets of its own) come in the next build.

More of the image read

  • AMI NVAR stores are read into their variables, and a variable's history shows every copy its store keeps and what each one changed.
  • Dell's DVAR stores are read, their variables named from what Dell's Setup forms say each one is, and superseded copies can be hidden.
  • Insyde images: the regions the flash device map lays out are named, the Variable Defaults are read where that map puts them, and the BIOS version the version table states is shown — with the rest of the BVDT: the compiler, the ESRT entry and the $BME$ ranges.
  • EVSA stores, MFSB backup areas and a $VSS store whose size was never set are found by the signature they carry, and an NVRAM store shows how full it is.
  • Pictures — JPEG, PNG, GIF and BMP — are recognised, with a preview under their details.
  • ITE EC firmware is named by the identification it carries; each EC image in a block gets a row and a size of its own.
  • The Top Swap copy of the boot block is named, and you can step between a node and its Top Swap twin.
  • A pad file and a raw file show what they hold, read the way UEFITool reads them; a Mac's microcode volume is read as the microcode it holds; the FIT names what it finds in padding.
  • The flash descriptor's component section is read, and the descriptor's generation is told from its layout.
  • Save a tree node, or its body, to a file from the node's menu.

The ME panel answers at once

  • The first reading is shown straight away. The values that depend on the databases read "Loading…" until they arrive, and the full reading then replaces it. The UEFI panel's ME region opens on that first reading too, and both panels share one reading of the same image.
  • The help page of the ME panel is upstream's, in all three languages.

Smaller things

  • Open… and Open Recent put the file into the active pane, and Compare with… into the other one.
  • The Tools menu has keys in the Windows build: Ctrl+1, Ctrl+2, … open the panels in the menu's order. A browser keeps these keys for its tabs.
  • A part's panel carries its pane's title bar across its whole width.
  • Picking a row in a tool shows its place in the dump without selecting it.
  • No checksum is held against a file that its state marks invalid, and the parser's nesting limit is raised to 32.
  • The version is upstream's release and a build of this edition, so this one is 0.9-1.

Fixes

  • The arrow keys move through a tool's table after a click in it. They used to move the dump's caret, or scroll the table and leave the selected row where it was.
  • A refused microcode change is said in the FIT panel, in red, in the line under its buttons. It used to flash in the pane's status line for two seconds, too briefly to read.
  • The UEFI panel starts over when the pane's file is replaced, instead of showing the tree of the file that was there.
  • When a browser will not give the file behind a picked handle, the app says so.

The page (ByteRipperWeb-0.9-1.html) is the whole app in one file:
open it in Chrome or Edge from disk, no installation and no server. Files
never leave the machine. Opened from disk, a page has no private storage, so
File ▸ Duplicate needs the hosted page or the Windows build.

Windows (ByteRipper-0.9-1-setup.exe installs it for the current user
and starts fastest; -portable.exe and the .zip need no installation): the
same app in a window of its own, x64. Help ▸ Check for Update… installs the
next release from the setup. Not code-signed, so SmartScreen warns on the
first launch: choose More info ▸ Run anyway.

In the browser, the same release: https://maxshevelev.github.io/ByteRipperWeb/ —
and on a Mac, the native app: https://github.com/maxshevelev/ByteRipper/releases/latest

Assets 7
Loading