DELL BIOS module compression - or: How to modify DELL BIOSes

Dear DELL support team, dear reader,


Introduction:

With the help of: Phoenix BIOS Editor
you are able to modify "normal" Phoenix BIOSes which can use LZINT, LZARI, LZHUF and LZSS compresion methods in their BIOS modules.

Phoenix BIOS Editor title screen


Phoenix BIOS Editor - edit splash screen


Phoenix BIOS Editor - edit strings


Phoenix BIOS Editor - simulate BIOS setup



Following (and more) modifications can be done:
-add/replace/remove BIOS logo
-add/update/remove embedded PCI-AddON Modules
  (e.g. Raid-Controller-BIOSes, newer VGABIOSes for OnBoard graphics cards,
  newer/alternate Ethernet Bootroms,etc...)
-add/update CPU-Microcodes to get more CPUs to run even on older mainboards.
-translate/modify strings in the BIOS
-and much more...


So I thought that modifications would work with Phoenix BIOSes from DELL computers too.
But there were/are different problems:

Problem 1.)
The different DELL-BIOS-Update-packs contain self extracting executables which build
disks which contain the BIOS-Update-files.
  ->To get the BIOS-Update-file you can either use a floppy disk
   or
   you can use different emulators like VMware, Bochs, VirtualPC, etc...
   In the emulation you can execute the DELL-BIOS-Update-pack to get a disk image
   instead a real disk.

   After this you can extract the BIOS-update from the disk image
   using programs like WinImage.

 --->In most cases the BIOS-Updates are executables which contain the
     flash utility & the real/properly binary BIOS update.
     Generally the whole executable is compressed in unknown format.


So, another method was necessary to get a BIOS dump/image from DELL computers without open the DELL computer and without take out/unplug the EEPROM/FLASH-EEPROM.

 ->You can use Phoenix WinPhlash & any 256/512(513)KB BIOS update file.
   Yes, even if you just want to store / backup the BIOS, PhoenixWinPhlash needs any
   working Phoenix BIOS file.

   How to dump your Phoenix(DELL-Phoenix)BIOS:

   a.)
   Download the Winphlash Utility.
   For example from here:
   ftp://ftp.support.acer-euro.com/utilities/winphlash/winphlash-utility.zip

   and install it.

   b.)
   Take any PhoenixBIOS update, for example by/from acer:
   ftp://ftp.support.acer-euro.com/notebook/extensa_3000/bios/3a06_intel.zip
   ...
   or other BIOS updates.

   c.)
   Run WinPhlash for Windows and add the wph file from the 3a06_intel.zip to
   the: "Specify new BIOS file" -field.

   d.)
   Choose: "Backup BIOS only"

   e.)
   Choose: "Advanced settings"
   Then deselect all clickboxes and press Ok.

   f.)
   Now press: "Backup BIOS".


Problem 2.)

After dumping/backup the BIOS from/of different DELL computers I tried the:
"Phoenix BIOS Editor", but without succes.

So I used a hex editor and opened the dumped BIOS file(s), but I could not find any header for a phoenix BIOS module.
 (Phoenix-BIOS-modules can normally found in this way:
  In Phoenix-BIOS files/updates look for ANSI-strings such as: " 11" or " 11.X, 11.A, 11.L, 11.R"
  ' .' [dot]->means different HEX-values

Furthermore I could not find any criteria/characteristics for LZINT, LZARI,... compression methods in the dumped DELL-Phoenix-BIOS.

I just could find "Phoenix BIOS"-strings not more.



So, I have some questions, before I have to do the difficult part which means:
to figure out the compression
 ->{BIOSes have uncompressed (BOOTBlock-)modules with 'unpacking code' for the
    compressed modules :-) :-) :-)}.


First question:
How to detect BIOS-modules and their beginning inside DELL BIOSes?


Second question:
What is the used compression method in DELL BIOSes?


Third question:
Exist BIOS Editors for DELL Phoenix BIOSes?

Message Edited by Borg Number One on 04-09-2005 12:21 PM