corna / me_cleaner

Tool for partial deblobbing of Intel ME/TXE firmware images
GNU General Public License v3.0
4.46k stars 277 forks source link

"Unknown image" on ECS BAT-I (Bay Trail J1800) #260

Open romanrm opened 5 years ago

romanrm commented 5 years ago

Flashed the latest vendor BIOS, rebooted, then saved flash contents to a file using the vendor tool "AFUDOSP.exe out.bin /O"

me_cleaner says: Unknown image

Any idea what's wrong?

ifdtool output below.

File out.bin is 5242880 bytes
Peculiar firmware descriptor, assuming Ibex Peak compatibility.
ICH Revision: 5 series Ibex Peak
FLMAP0:    0xc3c0940f
  NR:      3
  FRBA:    0xc00
  NC:      1
  FCBA:    0xf0
FLMAP1:    0x68c3c032
  ISL:     0x68
  FPSBA:   0xc30
  NM:      0
  FMBA:    0x320
FLMAP2:    0x000000b4
  PSL:     0x0000
  FMSBA:   0xb40
FLUMAP1:   0x32353433
  Intel ME VSCC Table Length (VTL):        52
  Intel ME VSCC Table Base Address (VTBA): 0x000330

ME VSCC table:
  JID0:  0x82ffffff
    SPI Componend Vendor ID:            0xff
    SPI Componend Device ID 0:          0xff
    SPI Componend Device ID 1:          0xff
  VSCC0: 0x504e5003
    Lower Erase Opcode:                 0x50
    Lower Write Enable on Write Status: 0x50
    Lower Write Status Required:        Yes
    Lower Write Granularity:            64 bytes
    Lower Block / Sector Erase Size:    8KB
    Upper Erase Opcode:                 0x50
    Upper Write Enable on Write Status: 0x50
    Upper Write Status Required:        No
    Upper Write Granularity:            1 bytes
    Upper Block / Sector Erase Size:    64KB
  JID1:  0x31303530
    SPI Componend Vendor ID:            0x30
    SPI Componend Device ID 0:          0x35
    SPI Componend Device ID 1:          0x30
  VSCC1: 0x4e5f305f
    Lower Erase Opcode:                 0x4e
    Lower Write Enable on Write Status: 0x06
    Lower Write Status Required:        Yes
    Lower Write Granularity:            64 bytes
    Lower Block / Sector Erase Size:    64KB
    Upper Erase Opcode:                 0x30
    Upper Write Enable on Write Status: 0x06
    Upper Write Status Required:        Yes
    Upper Write Granularity:            64 bytes
    Upper Block / Sector Erase Size:    64KB
  JID2:  0x00010056
    SPI Componend Vendor ID:            0x56
    SPI Componend Device ID 0:          0x00
    SPI Componend Device ID 1:          0x01
  VSCC2: 0x41564e00
    Lower Erase Opcode:                 0x41
    Lower Write Enable on Write Status: 0x06
    Lower Write Status Required:        No
    Lower Write Granularity:            64 bytes
    Lower Block / Sector Erase Size:    8KB
    Upper Erase Opcode:                 0x4e
    Upper Write Enable on Write Status: 0x50
    Upper Write Status Required:        No
    Upper Write Granularity:            1 bytes
    Upper Block / Sector Erase Size:    256 Byte
  JID3:  0xff001b52
    SPI Componend Vendor ID:            0x52
    SPI Componend Device ID 0:          0x1b
    SPI Componend Device ID 1:          0x00
  VSCC3: 0x0382ffff
    Lower Erase Opcode:                 0x03
    Lower Write Enable on Write Status: 0x50
    Lower Write Status Required:        No
    Lower Write Granularity:            1 bytes
    Lower Block / Sector Erase Size:    8KB
    Upper Erase Opcode:                 0xff
    Upper Write Enable on Write Status: 0x06
    Upper Write Status Required:        Yes
    Upper Write Granularity:            64 bytes
    Upper Block / Sector Erase Size:    64KB
  JID4:  0x30504e50
    SPI Componend Vendor ID:            0x50
    SPI Componend Device ID 0:          0x4e
    SPI Componend Device ID 1:          0x50
  VSCC4: 0x5f313035
    Lower Erase Opcode:                 0x5f
    Lower Write Enable on Write Status: 0x06
    Lower Write Status Required:        No
    Lower Write Granularity:            1 bytes
    Lower Block / Sector Erase Size:    4KB
    Upper Erase Opcode:                 0x30
    Upper Write Enable on Write Status: 0x06
    Upper Write Status Required:        No
    Upper Write Granularity:            64 bytes
    Upper Block / Sector Erase Size:    4KB
  JID5:  0x564e5f31
    SPI Componend Vendor ID:            0x31
    SPI Componend Device ID 0:          0x5f
    SPI Componend Device ID 1:          0x4e
  VSCC5: 0x00000100
    Lower Erase Opcode:                 0x00
    Lower Write Enable on Write Status: 0x50
    Lower Write Status Required:        No
    Lower Write Granularity:            1 bytes
    Lower Block / Sector Erase Size:    256 Byte
    Upper Erase Opcode:                 0x01
    Upper Write Enable on Write Status: 0x50
    Upper Write Status Required:        No
    Upper Write Granularity:            1 bytes
    Upper Block / Sector Erase Size:    256 Byte
  JID6:  0x5241564e
    SPI Componend Vendor ID:            0x4e
    SPI Componend Device ID 0:          0x56
    SPI Componend Device ID 1:          0x41
  VSCC6: 0xffff0021
    Lower Erase Opcode:                 0xff
    Lower Write Enable on Write Status: 0x06
    Lower Write Status Required:        Yes
    Lower Write Granularity:            64 bytes
    Lower Block / Sector Erase Size:    64KB
    Upper Erase Opcode:                 0x00
    Upper Write Enable on Write Status: 0x50
    Upper Write Status Required:        No
    Upper Write Granularity:            1 bytes
    Upper Block / Sector Erase Size:    4KB
  JID7:  0x4e0482ff
    SPI Componend Vendor ID:            0xff
    SPI Componend Device ID 0:          0x82
    SPI Componend Device ID 1:          0x04
  VSCC7: 0x6f777465
    Lower Erase Opcode:                 0x6f
    Lower Write Enable on Write Status: 0x06
    Lower Write Status Required:        No
    Lower Write Granularity:            64 bytes
    Lower Block / Sector Erase Size:    64KB
    Upper Erase Opcode:                 0x74
    Upper Write Enable on Write Status: 0x50
    Upper Write Status Required:        No
    Upper Write Granularity:            64 bytes
    Upper Block / Sector Erase Size:    4KB

OEM Section:
00: 33 33 34 00 00 00 00 00 00 00 00 00 00 00 00 00
10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
20: 00 00 00 00 00 00 00 00 10 0c 0f 0c 0c 0d 0d 0c
30: 00 10 0c 0f 0c 0c 0d 0d 0c 00 36 32 33 34 32 33

Found Region Section
FLREG0:    0x00000000
  Flash Region 0 (Flash Descriptor): 00000000 - 00000fff 
FLREG1:    0x00000000
  Flash Region 1 (BIOS): 00000000 - 00000fff 
FLREG2:    0x00000000
  Flash Region 2 (Intel ME): 00000000 - 00000fff 
FLREG3:    0x00000000
  Flash Region 3 (GbE): 00000000 - 00000fff 
FLREG4:    0x0d0d0c0f
  Flash Region 4 (Platform Data): 00c0f000 - 00d0dfff 

Found Component Section
FLCOMP     0x00000000
  Dual Output Fast Read Support:       not supported
  Read ID/Read Status Clock Frequency: 20MHz
  Write/Erase Clock Frequency:         20MHz
  Fast Read Clock Frequency:           20MHz
  Fast Read Support:                   not supported
  Read Clock Frequency:                20MHz
  Component 2 Density:                 512KB
  Component 1 Density:                 512KB
FLILL      0x03010007
  Invalid Instruction 3: 0x03
  Invalid Instruction 2: 0x01
  Invalid Instruction 1: 0x00
  Invalid Instruction 0: 0x07
FLPB       0x01020201
  Flash Partition Boundary Address: 0x201000

Found PCH Strap Section
PCHSTRP0:  0x00333132
PCHSTRP1:  0x00000000
PCHSTRP2:  0x00000000
PCHSTRP3:  0x00000000
PCHSTRP4:  0x00000000
PCHSTRP5:  0x00000000
PCHSTRP6:  0x00000000
PCHSTRP7:  0x00000000
PCHSTRP8:  0x00000000
PCHSTRP9:  0x00000000
PCHSTRP10: 0x0c0d0c0e
PCHSTRP11: 0x0b0d0d0b
PCHSTRP12: 0x0d0c0e00
PCHSTRP13: 0x0d0d0b0c
PCHSTRP14: 0x3134000b
PCHSTRP15: 0x32313331
PCHSTRP16: 0x34003432
PCHSTRP17: 0x31333131
AltMeDisable bit is not set

Found Master Section
FLMSTR1:   0x5f305f30 (Host CPU/BIOS)
  Platform Data Region Write Access: enabled
  GbE Region Write Access:           enabled
  Intel ME Region Write Access:      enabled
  Host CPU/BIOS Region Write Access: enabled
  Flash Descriptor Write Access:     enabled
  Platform Data Region Read Access:  enabled
  GbE Region Read Access:            disabled
  Intel ME Region Read Access:       disabled
  Host CPU/BIOS Region Read Access:  disabled
  Flash Descriptor Read Access:      disabled
  Requester ID:                      0x5f30

FLMSTR2:   0x0100564e (Intel ME)
  Platform Data Region Write Access: disabled
  GbE Region Write Access:           disabled
  Intel ME Region Write Access:      disabled
  Host CPU/BIOS Region Write Access: disabled
  Flash Descriptor Write Access:     enabled
  Platform Data Region Read Access:  disabled
  GbE Region Read Access:            disabled
  Intel ME Region Read Access:       disabled
  Host CPU/BIOS Region Read Access:  disabled
  Flash Descriptor Read Access:      disabled
  Requester ID:                      0x564e

FLMSTR3:   0x564e0000 (GbE)
  Platform Data Region Write Access: enabled
  GbE Region Write Access:           disabled
  Intel ME Region Write Access:      enabled
  Host CPU/BIOS Region Write Access: enabled
  Flash Descriptor Write Access:     disabled
  Platform Data Region Read Access:  disabled
  GbE Region Read Access:            enabled
  Intel ME Region Read Access:       enabled
  Host CPU/BIOS Region Read Access:  enabled
  Flash Descriptor Read Access:      disabled
  Requester ID:                      0x0000

Found Processor Strap Section
????:      0x110e1200
????:      0x12110c0f
????:      0x2f31000c
????:      0x312e312d
????:      0x31003230
????:      0x2e312d2f
????:      0x00323031
????:      0x00000000