ME Analyzer: Intel Engine Firmware Analysis Tool Discussion

Update 09/05/2015:

ME Analyzer v1.1.1

Added release detection of special/partial EFI FFS firmware images
Fixed ME Utility Cut firmware version error on ME7 & lower systems (v0.2)
Fixed wrong firmware detection (ME 1.x) on some images
Removed red * error report for the unknown ME5 SKU
Updated Engine Firmware Repository Database to r12

Engine Firmware Repository Database r12

Added ME 9.1.20.1035_1.5MB_PRD_RGN
Removed ME 9.1.20.1035_1.5MB_PRD_EXTR
Added ME 7.1.13.1088_5MB_CPT_PRD_EXTR
Added ME 7.1.10.1065_5MB_CPT_PRD_EXTR
Added ME 7.1.3.1053_5MB_CPT_PRD_EXTR
Added ME 6.2.10.1027_5MB_DT_PRD_EXTR
Added ME 6.0.40.1215_5MB_MB_PRD_EXTR
Added TXE 1.1.1.1115_1.375MB_PRD_EXTR

Update 13/05/2015:

ME Analyzer v1.1.4

Added detection of multiple $FPT headers for Recovery (Clevo)
Added proper detection of Intel MERecovery EFI FFS modules
Updated Engine Firmware Repository Database to r14

Engine Firmware Repository Database r14

Added ME 9.6.0.1038_1.5MB_PRD_UPD
Added ME 9.5.45.1922_1.5MB_PRD_UPD
Added ME 9.5.40.1892_1.5MB_PRD_UPD
Added ME 9.5.35.1862_1.5MB_PRD_UPD
Added ME 9.5.30.1808_1.5MB_PRD_UPD
Added ME 9.5.23.1766_1.5MB_PRD_UPD
Added ME 9.5.20.1742_1.5MB_PRD_UPD
Added ME 9.5.15.1730_1.5MB_PRD_UPD
Added ME 9.5.14.1724_1.5MB_PRD_UPD
Added ME 9.5.13.1706_1.5MB_PRD_UPD
Added ME 9.5.12.1688_1.5MB_PRD_UPD
Added ME 9.5.10.1628_1.5MB_PRD_UPD
Added ME 9.5.0.1428_1.5MB_PRD_UPD
Renamed 9.1.0.1110_1.5MB_PRD_RGN to EXTR
Renamed 9.0.20.1427_1.5MB_PRD_RGN to EXTR
Renamed 9.0.20.1447_1.5MB_PRD_RGN to EXTR
Added ME 9.0.31.1487_1.5MB_PRD_UPD
Added ME 9.0.22.1467_1.5MB_PRD_UPD
Added ME 9.0.21.1462_1.5MB_PRD_UPD
Added ME 9.0.20.1447_1.5MB_PRD_UPD
Added ME 9.0.20.1427_1.5MB_PRD_UPD
Added ME 9.0.13.1402_1.5MB_PRD_UPD
Added ME 9.0.10.1372_1.5MB_PRD_UPD
Added ME 9.0.5.1367_1.5MB_PRD_UPD
Added ME 9.0.3.1347_1.5MB_PRD_UPD
Added ME 9.0.2.1345_1.5MB_PRD_UPD
Added ME 9.0.0.1310_1.5MB_PRD_UPD
Added ME 9.0.0.1287_1.5MB_PRD_UPD
Added ME 7.0.2.1164_5MB_CPT_PRD_UPD
Added ME 7.0.2.1164_5MB_CPT_PRD_EXTR

Engine Firmware Repository Database r13

Added ME 9.1.0.1120_5MB_PRD_RGN
Removed ME 9.1.0.1120_5MB_PRD_EXTR
Added ME 9.0.30.1482_1.5MB_PRD_UPD
Added ME 8.1.52.1496_1.5MB_PRD_UPD
Added ME 8.1.40.1416_1.5MB_PRD_UPD
Added ME 6.2.20.1035_5MB_DT_PRD_UPD
Added ME 6.1.30.1074_5MB_DT_PRD_UPD

Updates 14/05/2015

Engine Firmware Repository Database r15

Added ME 9.1.26.1006_1.5MB_PRD_UPD
Added ME 9.1.25.1005_1.5MB_PRD_UPD
Added ME 9.1.21.1000_1.5MB_PRD_UPD
Added ME 9.1.20.1035_1.5MB_PRD_UPD
Added ME 9.1.10.1005_1.5MB_PRD_UPD
Added ME 9.1.2.1010_1.5MB_PRD_UPD
Added ME 9.1.1.1000_1.5MB_PRD_UPD
Added ME 9.1.0.1120_1.5MB_PRD_RGN
Added ME 9.1.0.1120_1.5MB_PRE_RGN
Added ME 9.1.0.1120_1.5MB_PRD_UPD
Removed ME 9.1.0.1120_1.5MB_PRD_EXTR
Added ME 9.1.0.1110_1.5MB_PRD_UPD
Added ME 9.1.0.1035_1.5MB_PRD_UPD
Added ME 9.1.0.1015_1.5MB_PRD_UPD
Added ME 9.0.20.1447_1.5MB_PRD_RGN
Removed ME 9.0.20.1447_1.5MB_PRD_EXTR
Added ME 9.0.20.1447_1.5MB_PRE_RGN
Added ME 7.1.30.1142_1.5MB_CPT_PRD_EXTR
Added ME 6.1.10.1052_5MB_MB_PRD_EXTR
Added ME 2.6.1.1030_AMT_PRD_RGN



http://www.mediafire.com/download/rc7evw…Air_3G_Dual.bin


Ok, this is crazy. What a coincidence. Literately 5 minutes ago I found the exact same firmware at a ZOTAC BIOS.

1.PNG



By searching around I then found THIS thread in which it mentioned a device called Teclast X98 Air 3G Tablet. So I was looking for their download area (still haven’t found it). What a coincidence though…

Thank you for using ME Analyzer and for the firmware, Bugger Vance. There is also a newer version of the tool if you like.


I got the bios version from my previous post from this source:
http://pan.baidu.com/share/home?uk=1399301530

It’s probably the public folder from one of the developers/moderators.

Their official forum:
http://bbs.teclast.com/forum-81-1.html

Unfortunately in chinese only and almost every download link is hidden and requires a reply to make it visible.

Updates 05/06/2015:

ME Analyzer v1.2.0

Added PV status detection for TXE 1 - 2 & ME 8 - 10
Added ME Analyzer Multi-Drop feature for bulk detection
Added ME7.x 5MB Rom-Bypass UPD firmware support
Added ME7.0 5MB Alpha firmware SKU detection and support
Added Dell AIO FlashUtility EXE ME SKU firmware detection
Added proper $MN2/$MAN detection based on Intel DEV_ID
Added detection for all the latest BYT-M/D & BYT-I TXE 1.x firmware
Added pre-fixed detection of TXE 1.x BYT-M/D & BYT-I platforms
Added pre-fixed detection of TXE 2.0 Braswell & CHT platforms
Adjusted latest ME 11 Consumer (1.5MB) SKU to 11.0.0.1131
Adjusted latest ME 9.1 5MB SKU to 9.1.26.1006
Adjusted latest TXE 1.1 1.375MB BYT-M/D SKU to 1.1.2.1120
Adjusted latest TXE 1.1 1.375MB BYT-I SKU to 1.1.1.1130
Adjusted latest TXE 1.0 1.25MB BYT-M/D SKU to 1.0.5.1120
Adjusted latest TXE 1.0 3MB BYT-M/D SKU to 1.0.5.1120
Adjusted latest TXE 1.0 3MB BYT-I SKU to 1.0.6.1120
Adjusted latest SPS 2 Sub-SKU 0 to 02.03.00.251.0
Removed all ME/AMT PCH/ICH detection completely
Fixed TXE 2.0 (Braswell/Cherry Trail) SoC detection
Fixed non-detection of newer SPS 1 - 3 firmware versions
Updated Engine Firmware Repository Database to r16

Engine Firmware Repository Database r16

Added ME 11.0.0.1131_CONS_PRD_EXTR
Added ME 9.5.20.1742_1.5MB_PRD_RGN
Removed ME 9.5.20.1742_1.5MB_PRD_EXTR
Added ME 9.5.14.1724_5MB_PRD_RGN
Added ME 9.5.14.1724_5MB_PRE_RGN
Added ME 9.5.13.1706_5MB_PRD_EXTR
Added ME 9.1.26.1006_5MB_PRD_EXTR
Added ME 9.0.13.1402_1.5MB_PRE_RGN
Added ME 9.0.0.1209_5MB_PRE_RGN
Added ME 8.1.0.1143_5MB_PRD_RGN
Added ME 8.1.0.1143_5MB_PRE_RGN
Added ME 8.0.3.1427_5MB_PRD_RGN
Removed ME 8.0.3.1427_5MB_PRD_EXTR
Added ME 8.0.3.1427_5MB_PRE_RGN
Added ME 7.0.0.1117_5MB_CPT_PRE_RGN
Added ME 7.0.0.1117_5MB_CPT_PRE_UPD
Added ME 7.0.0.1041_5MB_CPT_BYP_RGN
Added ME 7.0.0.1041_5MB_CPT_BYP_UPD
Added ME 6.0.21.1188_IGN_IP_PRD_RGN
Added ME 6.0.21.1188_IGN_IP_PRD_UPD
Added ME 4.2.0.1020_ALL_PRD_EXTR
Added ME 4.1.3.1038_ALL_PRD_EXTR
Added ME 4.0.2.1118_ALL_PRD_EXTR
Added ME 4.0.2.1118_ALL_PRD_UPD
Added TXE 2.0.0.2060_1.375MB_PRD_RGN
Removed TXE 2.0.0.2060_1.375MB_PRD_EXTR
Added TXE 1.1.1.1130_1.375MB_PRD_EXTR
Added TXE 1.0.0.1055_3MB_PRD_RGN
Added SPS 03.00.05.128.0_PRD_RGN
Added SPS 02.03.00.251.0_PRD_RGN
Added SPS 02.02.00.047.1_PRD_RGN
Added SPS 02.01.05.139.0_PRD_RGN
Added SPS 02.01.05.135.0_PRD_RGN
Added SPS 02.01.05.129.0_PRD_RGN
Added SPS 02.01.05.109.0_PRD_RGN
Added SPS 02.01.05.094.0_PRD_RGN
Added SPS 02.01.05.089.0_PRD_RGN
Added SPS 02.01.05.083.0_PRD_RGN
Added SPS 02.01.05.069.1_PRD_RGN
Added SPS 02.00.08.017.1_PRD_RGN
Added SPS 01.01.01.002.1_PRD_RGN

Note: ME Analyzer Multi-Drop

ME Analyzer v1.2.0 includes a new mode called Multi-Drop and it’s accessed via the command option -multi. What does it do?

It’s a feature for careful users who want to scan a wide range of firmware images, be careful!
It’s meant for dropping multiple files at ME Analyzer once and thus let it figure out which of them are new.
If a file is already at the database, is not ME/TXE/SPS firmware, is encrypted etc it will be deleted instantly & permanently!
After it has finished processing all dropped files, the remaining files (if any) are new and need to be reported at the appropriate threads.
* There is a batch file provided called ME_Analyzer_Drop_Multi.bat which automatically enables Multi-Drop and scans all dropped files.

Updates 08/06/2015:

ME Analyzer v1.2.1

Adjusted latest TXE 1.0 1.25MB BYT-I SKU to 1.0.2.1067
Updated pre-fixed detection of TXE 1.x BYT-M/D & BYT-I platforms
Added ME 7.1.22.1165 firmware SKU support as Patsburg (PBG)
Updated Engine Firmware Repository Database to r17

Engine Firmware Repository Database r17

Added ME 10.0.28.1006_1.5MB_PRD_RGN
Added ME 10.0.28.1006_1.5MB_PRE_RGN
Removed ME 10.0.28.1006_1.5MB_PRD_EXTR
Added ME 9.0.0.1310_5MB_PRD_EXTR
Added ME 7.1.85.1216_5MB_ALL_PRD_EXTR
Added ME 7.1.22.1165_5MB_PBG_PRD_UPD
Added ME 6.0.50.1252_IGN_CC_PRE_RGN
Added ME 6.0.50.1252_IGN_CC_PRE_UPD

Updates 19/06/2015:

ME Analyzer v1.2.2

Improved Multi-Drop to not delete valid images with errors
Added ME 4 Rom-Bypass SKU & UPD firmware support
Adjusted latest SPS 2 Sub-SKU 0 to 02.03.00.398.0
Updated Engine Firmware Repository Database to r18

Note: ME 11.0 (Skylake) support has been dropped for now. All Skylake firmware are reported as “rare”. Only Version, Type and Date are shown. If you find any, keep the whole SPI/BIOS image as it is required currently.

Engine Firmware Repository Database r18

Removed ME 11.0 firmware until further notice
Added ME 10.0.38.1000_5MB_PRE_RGN
Added ME 10.0.38.1000_5MB_BYP_RGN
Added ME 10.0.32.1000_5MB_PRD_RGN
Added ME 10.0.25.1048_5MB_PRD_EXTR
Added ME 9.5.20.1742_5MB_PRD_RGN
Removed ME 9.5.20.1742_5MB_PRD_EXTR
Added ME 9.1.26.1006_5MB_PRD_RGN
Removed ME 9.1.26.1006_5MB_PRD_EXTR
Added ME 9.1.26.1006_5MB_PRE_RGN
Added ME 9.1.26.1006_1.5MB_PRE_RGN
Added ME 9.1.25.1005_5MB_PRE_RGN
Added ME 9.1.25.1005_1.5MB_PRE_RGN
Added ME 9.1.2.1010_1.5MB_PRD_RGN
Removed ME 9.1.2.1010_1.5MB_PRD_EXTR
Added ME 9.0.30.1482_5MB_PRE_RGN
Added ME 9.0.30.1482_1.5MB_PRE_RGN
Added ME 8.1.52.1496_1.5MB_PRE_RGN
Added ME 8.1.52.1496_5MB_PRE_RGN
Added ME 8.1.50.1456_5MB_PRD_RGN
Removed Added ME 8.1.50.1456_5MB_PRD_EXTR
Added ME 8.1.0.1035_5MB_PRD_RGN
Added ME 8.1.0.1035_5MB_PRE_RGN
Added ME 8.0.10.1464_5MB_PRE_RGN
Added ME 7.1.80.1214_1.5MB_ALL_PRD_RGN
Added ME 7.1.80.1214_1.5MB_ALL_PRD_UPD
Added ME 7.1.80.1214_1.5MB_ALL_PRE_RGN
Added ME 7.1.80.1214_1.5MB_ALL_PRE_UPD
Added ME 7.1.80.1214_5MB_ALL_PRD_RGN
Added ME 7.1.80.1214_5MB_ALL_PRE_RGN
Added ME 7.1.80.1214_5MB_ALL_PRE_UPD
Added ME 7.1.71.1206_5MB_ALL_PRD_RGN
Removed ME 7.1.71.1206_5MB_ALL_PRD_EXTR
Added ME 7.1.71.1206_5MB_ALL_PRE_RGN
Added ME 7.1.71.1206_5MB_ALL_PRE_UPD
Added ME 7.1.52.1176_5MB_ALL_PRE_RGN
Added ME 7.1.52.1176_5MB_ALL_PRE_UPD
Added ME 7.1.40.1161_5MB_CPT_PRD_RGN
Removed ME 7.1.40.1161_5MB_CPT_PRD_EXTR
Added ME 7.1.40.1161_5MB_CPT_PRE_RGN
Added ME 7.1.40.1161_5MB_CPT_PRE_UPD
Added ME 6.0.3.1195_5MB_MB_PRD_EXTR
Added ME 4.2.20.1036_TPM_PRD_UPD
Added ME 4.2.20.1036_TPM_PRD_EXTR
Added ME 4.2.20.1036_TPM_PRE_UPD
Added ME 4.2.20.1036_TPM_PRE_EXTR
Added ME 4.2.0.1020_AMT_PRD_EXTR
Added ME 4.0.4.1126_AMT_PRD_EXTR
Added ME 4.0.3.1124_TPM_PRD_EXTR
Added ME 4.0.0.1071_AMT_BYP_RGN
Added ME 4.0.0.1071_AMT_BYP_UPD
Added SPS 02.03.00.398.0_PRD_RGN

Engine Firmware Repository Database r19

Added ME 10.0.29.1000_1.5MB_PRD_RGN
Removed ME 10.0.29.1000_1.5MB_PRD_EXTR
Added ME 9.0.0.1209_1.5MB_PRE_RGN
Added ME 3.0.0.1080_AMT_PRD_RGN
Added TXE 2.0.0.1045_1.375MB_PRD_RGN
Added TXE 1.1.1.1115_1.375MB_PRD_RGN
Removed TXE 1.1.1.1115_1.375MB_PRD_EXTR
Added TXE 1.1.1.1115_1.375MB_PRE_RGN
Added SPS 03.00.07.024.1_PRD_RGN

Engine Firmware Repository Database r20

Added ME 9.1.30.1008_5MB_PRD_RGN
Added ME 9.1.10.1005_1.5MB_PRD_RGN
Removed ME 9.1.10.1005_1.5MB_PRD_EXTR
Added ME 9.0.12.1397_1.5MB_PRD_RGN
Added ME 9.0.12.1397_1.5MB_PRE_RGN
Added ME 9.0.0.1310_1.5MB_PRD_RGN
Removed ME 9.0.0.1310_1.5MB_PRD_EXTR
Added ME 8.0.13.1502_1.5MB_PRE_RGN
Added ME 8.0.0.1340_1.5MB_PRD_RGN
Added ME 8.0.0.1262_1.5MB_PRD_RGN
Added ME 8.0.0.1262_1.5MB_PRE_RGN
Added ME 8.0.0.1262_5MB_PRD_EXTR
Added TXE 1.0.7.1133_3MB_PRD_RGN
Added TXE 1.0.5.1099_3MB_PRD_EXTR
Added TXE 1.0.0.1057_3MB_PRD_EXTR
Added SPS 02.02.00.005.1_PRD_RGN

Updates 28/07/2015:

ME Analyzer v1.2.5

ME >= 8 and TXE UPD images won’t be reported as new if RGN/EXTR exists
Adjusted latest ME 10.0 1.5MB SKU to 10.0.45.1022
Adjusted latest ME 9.1 1.5MB SKU to 9.1.30.1008
Adjusted latest ME 9.1 5MB SKU to 9.1.30.1008
Adjusted latest TXE 1.1 1.375MB BYT-MD SKU to 1.1.3.1133
Adjusted latest TXE 1.0 3MB BYT-I SKU to 1.0.7.1133
Adjusted latest SPS 3 Sub-SKU 0 to 03.00.07.171.0
Updated pre-fixed detection of TXE 1.x BYT-M/D & BYT-I platforms
Updated Engine Firmware Repository Database to r21

Engine Firmware Repository Database r21

Added ME 10.0.45.1022_1.5MB_PRD_EXTR
Added ME 10.0.30.1060_5MB_PRD_RGN
Added ME 10.0.30.1060_5MB_PRE_RGN
Adeed ME 10.0.30.1060_5MB_BYP_RGN
Added ME 9.5.23.1766_5MB_PRD_RGN
Added ME 9.1.30.1008_1.5MB_PRD_RGN
Added ME 9.1.30.1008_5MB_PRE_RGN
Added TXE 1.1.3.1133_1.375MB_PRD_EXTR
Added SPS 03.00.07.171.0_PRD_RGN
Removed all UPD images for ME8 and up



http://www95.zippyshare.com/v/1WUGMUHv/file.html

Thank you Wootever, got the rare ME10 firmware.

Updates 07/08/2015:

Engine Firmware Repository Database r22

Added ME 10.0.45.1024_1.5MB_PRD_RGN
Added ME 10.0.45.1024_5MB_PRD_RGN
Added ME 10.0.36.1030_1.5MB_PRD_EXTR
Added ME 9.1.32.1002_5MB_PRD_RGN
Added ME 9.1.30.1008_1.5MB_PRD_RGN
Removed ME 9.1.30.1008_1.5MB_PRD_EXTR
Added ME 9.1.21.1000_5MB_PRD_EXTR
Added ME 8.1.65.1586_5MB_PRD_RGN
Added ME 7.1.21.1128_1.5MB_PBG_PRD_EXTR
Added ME 7.1.21.1128_1.5MB_PBG_PRD_UPD
Added TXE 2.0.0.2073_1.375MB_PRD_EXTR
Added TXE 1.1.4.1145_1.375MB_PRD_RGN
Added TXE 1.1.4.1145_1.375MB_PRE_RGN
Added TXE 1.0.0.1057_3MB_PRD_RGN
Removed TXE 1.0.0.1057_3MB_PRD_EXTR

Note: MEA v1.2.8 and up versions require the database to be named MEA_DB.txt. This is relevant for UBU for now since the latest official release is v1.2.5 and that still requires the old naming scheme of ME_Analyzer_DB.txt.

plutomaniac,
where I can found ME Analyzer v1.2.8 ?
Even, you already testing ME Analyzer v1.2.9 Beta 2.
Thanks.

@ ex58:

Thanks for the interest in MEA development.

MEA v1.2.9 is in beta (#3 currently) as Skylake support is being added. MEA v1.2.8’s big features are full UBU and Extractor support. The next official version will not be released yet but you can find MEA v1.2.8 Beta 3 at the latest versions of UBU (folder MEA). Or from this link which has a newer DB as well (r23, not final but newer).

http://www.mediafire.com/download/5q1qjb…2.8_Beta_3.rar

EDIT: Reuploaded to add the batch scripts. The Run and Utility_Cut executables are not included in this beta build but the old ones can be used (with wrong version headers but ok other than that).

Thanks for prompt reply and 1.2.8.Beta 3 link.
One more question…
I notice in previous UBU (with MEA 1.2.5) Intel firmware displayed date and some other info,
but in latest UBU (with MEA 1.2.8) Intel firmware displayed basic info,but without date of build.
Thx again.

UBU support was added entirely from MEA’s side so it cannot affect UBU in any way. SoniX just calls MEA with a special parameter which changes the print outputs to suit UBU better. So if these microcode details are missing it’s either a design choice by SoniX or an UBU bug.

@SoniX


???
From UBU.bat
MEA.exe …\bios.bin -ubu

wubu.JPG


MEA.exe …\bios.bin

woubu.JPG