Syscon Update

Syscon updates are stored in a packet format.

Packets

Each packet shares a common header.

Offset	Size	Description
0x0	0x1	Packet ID
0x1	0x1	Header Size (always 0x10)
0x2	0x2	Packet Size

0x01

This packet seems to be a update header field.

Offset	Size	Description
0x0	0x4	Packet Header
0x4	0x4	Update version
0x8	0x4	Device version
0xC	0x4	Unknown/Unused

Update version - Device version seen

3.30 PCH
11 05 03 01 38 50 80 00
01 03 04 01 30 30 72 00
03 06 03 01 30 30 70 00
0D 06 00 01 00 32 60 00
0D 06 00 01 00 30 60 00
0D 06 00 01 00 20 60 00
0B 06 00 01 00 10 60 00
0D 06 00 01 00 60 40 00

3.15 PCH
11 05 03 01 38 50 80 00
03 06 03 01 30 30 70 00
0D 06 00 01 00 32 60 00
0D 06 00 01 00 30 60 00
0D 06 00 01 00 20 60 00
0B 06 00 01 00 10 60 00
0D 06 00 01 00 60 40 00

1.81 PCH
0B 06 00 01 00 32 60 00
0B 06 00 01 00 30 60 00
0B 06 00 01 00 20 60 00
0B 06 00 01 00 10 60 00
0B 06 00 01 00 60 40 00

1.80 PCH
0B 06 00 01 00 32 60 00
0B 06 00 01 00 30 60 00
0B 06 00 01 00 20 60 00
0B 06 00 01 00 10 60 00
0B 06 00 01 00 60 40 00

1.80 PDEL
0B 06 00 01 00 10 60 00
0B 06 00 01 00 60 41 00
0B 06 00 01 00 52 41 00
06 03 00 01 03 26 10 00


1.69 PDEL
06 03 00 01 00 40 41 00
06 03 00 01 00 50 41 00
03 02 09 00 00 50 31 00
06 03 00 01 00 10 41 00
06 03 00 01 00 52 41 00
06 03 00 01 03 26 10 00
06 03 00 01 00 52 31 00

0x02

This packet seems to be an additional header

Offset	Size	Description
0x0	0x4	Packet Header
0x4	0x4	Unknown/Unused
0x8	0x4	Unknown/Always 1
0xC	0x4	Unknown/Unused

0x03

Offset	Size	Description
0x0	0x4	Packet Header
0x4	0x1C	Unknown

0x10

This is a data packet. The updater sends the data directly to syscon. The data seems to be AES-256 CBC encrypted and some devices use the same key but not others.

Offset	Size	Description
0x0	0x4	Packet Header
0x4	0x4	Data packet number
0x8	0x4	Data size
0xC	0x4	Unknown/Unused
0x10	Variable	Data

0x20

Offset	Size	Description
0x0	0x4	Packet Header
0x4	0x14	Unknown (SHA1?)