Intel BIOS

Discussion in 'Windows Vista' started by bennyboy, May 16, 2008.

  1. bennyboy

    bennyboy MDL Member

    May 9, 2007
    170
    0
    10
    My new Intel board has arrived. What steps can I take to investigate it more? I understand we need to find out how it is compressed.... any ideas on how I can do this or do we need inside knowledge? We need to start modding these BIOSes, There is a BIOS recovery jumper switch on this board so Ill try anything.

    Can anyone tell me what I can do to investigate the BIOS a bit more?
     
  2. Sergej

    Sergej MDL Novice

    May 9, 2008
    10
    0
    0
    I've not got an Intel mainboard.
    But I tried looking for a chance of ****ing an Intel BIOS.
    Used a BIOS for Intel DG33FB and it's a pure Intel one.
    With ITK (Intel Tool Kit) and a memory dumping program, it was proven to show already a couple of strings of "RSDT" & "SLIC".
    I do not know if these are actually reflected as ACPI tables or not because I've not got a real board...
     
  3. Yen

    Yen Admin
    Staff Member

    May 6, 2007
    11,368
    11,240
    340
    #3 Yen, Jun 11, 2008
    Last edited: Jun 11, 2008
    This sounds interesting!

    A approach to modify Intel bioses could be to open the bios with ITK, edit / modify code directly at physical memory and rebuild the bios with ITK!

    Could you please post more details about how you did it? I want to have a look at this code to see if it's decompressed code and if it can be modified.
    I'll try to open a Intel bios with ITK and have a look at physical memory next days......winhex allows to write into RAM.........

    Thank you!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. bennyboy

    bennyboy MDL Member

    May 9, 2007
    170
    0
    10
    I literally just came accross ITK a couple of days ago it does look very promising. I have an Intel DQ965WC with a pure Intel BIOS. With ITK you can modify most aspects of the BIOS and even rebuild your own custom BIOS with it's own windows based installer. We must be able to at least learn more about the Instel BIOS with this. Please can you tell me how you did it?
     
  5. bennyboy

    bennyboy MDL Member

    May 9, 2007
    170
    0
    10
    Yep, I can confirm that they are there with my DQ965WC BIOS. Yen can you please look into it, I don't know enough about it to edit it from the RAM. My Motherboard also has a recovery ROM on the board so I will try anything that's thrown at me!
     
  6. Yen

    Yen Admin
    Staff Member

    May 6, 2007
    11,368
    11,240
    340
    #7 Yen, Jun 12, 2008
    Last edited: Jun 13, 2008
    Let's work together!

    Even though I've tried ITK many times before, I was able to modify Intel bios for SLP1.0 activation only so far.
    ITK itself IS NOT able to show decopressed code of the bios....
    IMO chances are not good to make a mod....

    To complete informations I need the Acpi table report of AcpiScope. Install it and go to file --->load information--->from bios.
    Save and upload the *.ATS report.

    In case of vista 64 bit installed try this to get AcpiScope to run:

    Press F8 at startup, disable driver enforcement, install AcpiScope.......this will last for one session only......

    PS: I'm busy this days, but very interested to make a Intel mod, so it can take some time.......
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. Yen

    Yen Admin
    Staff Member

    May 6, 2007
    11,368
    11,240
    340
    #8 Yen, Jun 13, 2008
    Last edited by a moderator: Apr 20, 2017
    There is really a empty SLIC
    Code:
    Offset      0  1  2  3  4  5  6  7   8  9  A  B  C  D  E  F
    
    0D6DF6B0   53 4C 49 43 76 01 00 00  01 00 20 20 20 20 20 20   SLICv.....      
    0D6DF6C0   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ................
    0D6DF6D0   00 00 00 00 00 00 00 00  9C 00 00 00 06 02 00 00   ........œ.......
    0D6DF6E0   00 24 00 00 31 41 53 52  00 04 00 00 01 01 00 00   .$..1ASR........
    0D6DF6F0   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ................
    0D6DF700   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ................
    0D6DF710   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ................
    0D6DF720   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ................
    0D6DF730   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ................
    0D6DF740   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ................
    0D6DF750   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ................
    0D6DF760   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ................
    0D6DF770   01 00 00 00 B6 00 00 00  00 20 00 00 73 4F 45 4D   ....¶.... ..sOEM
    0D6DF780   49 44 4C 42 41 54 4D 45  4F 73 57 49 4E 44 4F 57   IDLBATMEOsWINDOW
    0D6DF790   53 20 00 00 00 00 00 00  00 00 00 00 00 00 00 00   S ..............
    0D6DF7A0   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ................
    0D6DF7B0   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ................
    0D6DF7C0   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ................
    0D6DF7D0   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ................
    0D6DF7E0   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ................
    0D6DF7F0   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ................
    0D6DF800   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ................
    0D6DF810   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ................
    0D6DF820   00 00 00 00 00 00                                  ......
    
    Just to fill it and re-save the bios is a chance...somewhere code to set to enable it???.....stay tuned this weekend.
    Need the *.ATS report additionally.

    THX
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  8. Sergej

    Sergej MDL Novice

    May 9, 2008
    10
    0
    0
    #9 Sergej, Jun 13, 2008
    Last edited: Jun 13, 2008
    Hi.

    ITK is at present the only program which we know can decompress and embed additional info into a configuration file (.ITK).

    Perhaps there exist hidden commands for ACPI tables and/or probably Intel has another program(s) for their internal use.

    Even though the former is the case, anyway, we need to know the "inside" of the program.

    This means we've got to disa**emble or dec*mp*le the ITK program itself.
     
  9. Yen

    Yen Admin
    Staff Member

    May 6, 2007
    11,368
    11,240
    340
    Hmm, IMO we have to try if the modified code of the decompressed bios found at phisical memory will be compressed at rebuild of bios. I will try to fill up the SLIC and to rebuild the bios. After that I will do a byte to byte comparison.......

    If yes we ARE ABLE to modify the bios, if not we can't at all......


    We also can save the decompressed binary from physical memory, reverse the decompressed code to understand the bios AND to enable the SLIC if needed.

    To reverse the tool itself isn't necessary, because (IMO) the bios code itself enables the SLIC. ITK isn't anticipated to handle SLIC.....

    I also will try to get a Intel bios with SLIC already to compare....

    I know that the "Chinese" have tried a lot with ITK, without success so far....


    @bennyboy

    What about your report???;):)
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  10. bennyboy

    bennyboy MDL Member

    May 9, 2007
    170
    0
    10
    Yeah sorry, I couldn't get ACPISCOPE or HWDIRECT to work (I am running 64bit). So I am preparing a 32bit XP partition as I type this. I will submit the report ASAP. Thanks.
     
  11. bennyboy

    bennyboy MDL Member

    May 9, 2007
    170
    0
    10
    @Yen

    Any luck?
     
  12. Yen

    Yen Admin
    Staff Member

    May 6, 2007
    11,368
    11,240
    340
    Bad news. There is no SLIC found at ACPI namespace. So we have to find the code to enable it first. Only to fill up the SLIC and rebuild won't work. OEMID is 'INTEL ' OEMTABLEID is 'DQ965WC'. Both to modify as well.
    I'll have again a look at it at weekend..........
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  13. bennyboy

    bennyboy MDL Member

    May 9, 2007
    170
    0
    10

    Okay mate thanks. :D
     
  14. bennyboy

    bennyboy MDL Member

    May 9, 2007
    170
    0
    10
    @Yen

    Hello again. Have you had another look at the BIOS?
     
  15. Yen

    Yen Admin
    Staff Member

    May 6, 2007
    11,368
    11,240
    340
    No, not yet.
    But when I have time for it, I'll have a look again. I had a look at Chinese sites about, but no information found.:(
    Too bad that Zhaoliang isn't active anymore.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  16. Orbiting234

    Orbiting234 MDL Member

    Jul 20, 2008
    162
    89
    10
    #18 Orbiting234, Jul 25, 2008
    Last edited by a moderator: Jul 29, 2008
    ****, I too was looking at the ITK file format since I'd love for this to be feasible on the Little Valley 2 mobo (D201GLY2). Curse Intel and their proprietary format...
     
  17. Yen

    Yen Admin
    Staff Member

    May 6, 2007
    11,368
    11,240
    340
    More bad news: It seems that oemfans.cn is down, it was founded by Zhaoliang. But someone with a preinstalled machine (and intelbios) could post his bios.........ITK decompresses the bios temporary and you can look for code at physical memory......
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  18. ssmurf

    ssmurf MDL Novice

    Jun 24, 2008
    2
    0
    0