Clevo S180A [custom hw] unlocking hidden menus

Hi!
I recently got a piece of strange custom hardware (wireless card terminal with 7in multitouch screen, atom z670-based, made by startup that is now dead, so I want to reuse it just as nettop with touchscreen), and trying to unlock hidden bios menus (to tweak settings like video memory size & etc, so I want to unlock all of them).


AMIBCP shows duplicated entryes, but bios shows only #2, 3, 4, 5 and 6. Setting all Access/Use from Default to User (using AMIBCP) does not change anything :frowning:
So I replace all 46 02 occurrences with 47 02 in Setup IFR (after decoding using ifrextract and looking at result), flashed - no result (all as in stock bios).

Changing Show: yes to Show:No for first six menu groups in AMIBCP just hides all menu groups in bios, but stock main page still displayed.

Stock bios: https:// drive. google .com/open?id=19khplDuQdEyy7XOZ_NbzyTma003lUgpL
Modified: https:// drive. google.com/open?id=10iRmGmpVtFBq5HmqwOmDHfnPbMKedMA5

Please link me with actual stock BIOS package if you have it, or dump stock BIOS with FPT or programmer. What you linked above as “Stock BIOS” is not a complete BIOS, or complete BIOS region, or is a bad dump if dumped with programmer.
If you are using a programmer to dump, what is the BIOS chip ID so I can give you best suggested software/version to use. Also, if there is two chips, dump both and send to me, often when this is case it’s best to compile, mod, then split and program back.

If you have modified “Stock BIOS” above, and flashed it, and it was OK and didn’t brick, then OK I guess I can edit that, but it’s not ideal at all.
Also, please show me one properly linked image of stock BIOS as it is, so I can see which menus are visible across top. Actually, please make a zip of images, of one image of each of those sections, so I can also tell which are visible/hidden

Also, on IFR, can you get IFR from setup or OEM setup from the above “Stock BIOS”? Please test now! I can’t get IFR with 3.6 or 0.7 IFR extractor, from neither PE32 module, or the entire body etc. Yes, I know how this works, I do it all day long, and no I don’t want you to send me IFR either
I am asking because either you used some other tool/version, or that BIOS is corrupted as I suspected and I need a proper file to work with first.

If this is Intel CPU system, please do the following, while on NON-Edited BIOS >>

If you have already modified the BIOS in ANY way, you will need to re-flash it back to factory defaults using factory method (NOT FPT)!!!

If you do not have Intel ME drivers installed, install them now from your system driver download page, then start over here after reboot.
Check your BIOS’ main page and see if ME FW version is shown. If not then > DOWNLOAD HWINFO64 HERE <

Once HWINFO is open, look at the large window on the left side, expand motherboard, and find the ME area.
Inside that section is the ME Firmware version. Take note of the version. (ie. write it down or get a screenshot)

Once you have that, go to the thread linked below, and in the section “C.2” find and download the matching ME System Tools Package for your system.
(ie if ME FW version = 10.x get V10 package, if 9.0-9.1 get V9.1 package, if 9.5 or above get V9.5 package etc)
> DOWNLOAD " ME System Tools " packages HERE <

Once downloaded, inside you will find Flash Programming Tool folder, and then inside that a Windows or Win/Win32 folder (NOT x64).
Highlight that Win/Win32 folder, then hold shift and press right click. Choose “open command window here” (Not power shell! >> * See Registry file below *).

If you get an error, reply to this post with a screenshot of it, OR write down the EXACT command entered and the EXACT error given.

((If “open command window here” does not appear, look for the “Simple Registry Edit” below…))

Now you should be at the command prompt.
You are going to BACKUP the factory un-modified firmware, so type the following command:
Command: " FPTw.exe -bios -d biosreg.bin "

>> Attach the saved "biosreg.bin ", placed into a compressed ZIP/RAR file, to your next post!!! <<

Right after you do that, try to write back the BIOS Region dump and see if you get any error(s).
Command: " FPTw.exe -bios -f biosreg.bin "
^^ This step is important! Don’t forget! ^^

If you get an error, reply to this post with a screenshot of it, OR write down the EXACT command entered and the EXACT error given.

Here is a SIMPLE REGISTRY EDIT that adds “Open command window here as Administrator” to the right click menu, instead of Power Shell
Double-click downloaded file to install. Reboot after install may be required
> CLICK HERE TO DOWNLOAD CMD PROMPT REGISTRY ENTRY <

If the windows method above does NOT work for you…
Then you may have to copy all contents from the Flash Programming Tool \ DOS folder to the root of a Bootable USB disk and do the dump from DOS
( DOS command: " FPT.exe -bios -d biosreg.bin " )

This is Intel cpu - https:// ark . intel .com/content/www/ru/ru/ark/products/55663/intel-atom-processor-z670-512k-cache-1-50-ghz.html



Yes, there is two flash chips on mobo - "cFeon qh16" (en25qh16, 16mbit=2mb) and mx25l8006e (8mbit=1mb). Originally this device runs custom linux distro (based on Rosa Linux), and my plans is to use it with debian or something like. There is no selection between Legasy/UEFI boot in BIOS, so I can’t boot DOS until unlocking hidden menus (am I right?), so uefi shell is the only option is this case - but I cant find 32bit fpt.efi tool to dump complete image. :frowning: The only one that i find says "fpt.exe cannot be run on the current platform", so programmer is the only option for me.
"Stock BIOS" i linked is dumped from en25qh16 chip, using ch341a programmer and software:


So I flashed back to "original" (first dumped) image and dumped bios using AMI afuefi tool from "Aptio 4 AMI Firmware Update Utility":
https:// drive. google .com/open?id=1esBDzxmlnDBmsGE4ytolUMGHdCIP7SLu
Second flash chip dump (dumped using programmer metionned previously):
https:// drive. google .com/open?id=1_MRL5VLVQxW09MgOLRgN5_wxQNx91Q4d


IFR extracting:
UEFITool NE alpha 57 (8 may 2020) (downloaded from official github repo releases page) opens dupm_afuefi_orig.bin, but complains: "parse: not a single Volume Top File is found, the image may be corrupted".
I was able to extract 97E409E6-4CC1-11D9-81F6-000000000000 named part from OemSetupPage and from Setup, and both can be sucessfully decoded using "EFI/UEFI IFR Extractor LS v0.3.6" from https:// github .com/LongSoft/Universal-IFR-Extractor/releases.

None of my experiments brick bios, all dumps i have works.

Bios (stock) and motherboard photos:
https:// drive. google .com/open?id=1soPdUtIogxGyhQfL5JS0mjxl8GOMUE3l

You can boot to DOS any time you want, at least you should be able to unless maybe something is set hard to UEFI and CSM is disabled or removed.

No one can view your linked image, it requires sign in. If you can dump BIOS with programmer, erase the chip, and program back in that dump and it’s OK, then whatever software/version you are using is OK.
It just looks like corrupted BIOS image, probably due to the BIOS is split across both chips and should be dumped, edited, split and programmed back that way.

Funny, I tried same version IFR extractor too, and the 0.7 one, neither will give me IFR from either setup area, that’s why I wasn’t sure if this was really corrupted BIOS dump or not.
However, I extracted with NE 55, will try 57 now. Also, please note, I am using the only “clean” file you provided at post #1 - nettop_cfeon_qh16_again_2
Ahh, that was it! For some reason extract from 55 was broken?!?!

Few things here, because this is already very confusing Please upload to tinyupload.com or uploadfiles.io from now on, because I can’t always download from google.
Second, please dump both chips for me and put in a single max compressed zip. Before you do this, flash stock BIOS if you have it, and by that I mean either flash stock BIOS from manufacturer, or put back with programmer the original dump from both chips before you edited anything (or send me those files if you have)
I don’t want anything touched by edits, or by flashing from AFU (except and unless stock packages flashes stock BIOS in this manner, and only then I only want the stock BIOS flashed using stock method before dumped). If you do have stock BIOS package or EXE from manufacturer, also include that

Main goal for me here is clean untouched BIOS, and a complete BIOS not half of it. I do not need images of the motherboard, so do not re-include, since I mistakenly downloaded from above since you said stock BIOS was included (it was not, only BIOS images)


There is no selection between "legacy" / UEFI boot mode in stock BIOS (so it probably set to UEFI, at least FreeDOS won’t boot for me (manual made and Rufus-make) :(.


I can’t get working fpt on it now (to dump both chips at same time), maybe I should install win7 for that.


Ok


https:// ufile .io/oo6bxzhi (find older dump for main chip + "Second flash chip dump" from post #3, uploaded with 30day storage)


I undestand that.


Didnt find anything like this using google, probably they was never publicly released by Clevo and/or startup, that device (Synquera Symplate) was made to.