Surface Pro 6 + W25Q128JVPQ BIOS

[av77]

Hello,

I'm trying to fix Surface Pro 6 BIOS that stuck at Windows logo.
To make a W25Q128JVPQ dump I've used CH341A (with 3.3V modification) and Raspberry PI.
- CH341A (both Windows and Linux) doesn't work
- rpi + flashrom detects it only from time to time. I was able to read the content once.
- bus pirate works fine however only with lower serialspeed param

 flashrom -p buspirate_spi:dev=/dev/ttyUSB0,spispeed=8M,serialspeed=250000 -c W25Q128.V -V -r bios.bin

To verify the content I wrote the python script that makes a dump and surprisingly it works every time with no error.
I'm attaching the winbond.py - maybe will be useful for someone.

My question: Does the BIOS need "ME Firmware cleaning" to fix the Surface boot issue.

Thank you.

[av77]

Re: Surface Pro 6 + W25Q128JVPQ BIOS

According to the post https://www.badcaps.net/forum/showthread.php?t=88533

"CSE ME / 11.8.82.3838 / Consumer LP / SPT/KBP-LP C" so the "ME Region.bin" file should be "11.8.82.3838_CON_LP_C_NPDM_PRD_RGN.bin" .
New outimage.bin build via FIT.exe has "File System State - Configured"

W25Q128JVPQ has ben flashed and connected via pogo pins but laptop still doesn't boot.

Attaching original and MEclean - as I'm not sure if it's correct.
Is it possible run such flash via pogo pins (connection was tested) or it rather must be soldered.

[hoaca388]

Re: Surface Pro 6 + W25Q128JVPQ BIOS

According to the post https://www.badcaps.net/forum/showthread.php?t=88533

"CSE ME / 11.8.82.3838 / Consumer LP / SPT/KBP-LP C" so the "ME Region.bin" file should be "11.8.82.3838_CON_LP_C_NPDM_PRD_RGN.bin" .
New outimage.bin build via FIT.exe has "File System State - Configured"

W25Q128JVPQ has ben flashed and connected via pogo pins but laptop still doesn't boot.

Attaching original and MEclean - as I'm not sure if it's correct.
Is it possible run such flash via pogo pins (connection was tested) or it rather must be soldered.

Try

[av77]

Re: Surface Pro 6 + W25Q128JVPQ BIOS

@hoaca388, thank you for preparing the new dump.

flashrom failed twice today so I suppose the chip could be faulty.

Erase/write done.
Verifying flash... FAILED at 0x0000b4ec! Expected=0x70, Found=0xff, failed byte count from 0x00000000-0x00ffffff: 0x10c4


Erase/write done.
Verifying flash... FAILED at 0x00082a70! Expected=0x78, Found=0xff, failed byte count from 0x00000000-0x00ffffff: 0x11e

Once I got new winbond flash will post the results.

[av77]

Re: Surface Pro 6 + W25Q128JVPQ BIOS

After flashing new chip laptop displays windows logo twice and hangs (the logo is visible all the time till power off)

Logic analyzer connected with flash SPI see only command - Read SFDP Register (5Ah).
Platform Controller Hub should read the Intel Flash Descriptor (at offset 0x10) to verify that there is a valid flash - no idea why we do not see it.

[av77]

Re: Surface Pro 6 + W25Q128JVPQ BIOS

Flash with bios_sf6_eb_Compare.bin has been soldered and still the same issue - laptop shuts down after windows logo.
Tried to sniff SPI and communication looks fine. After "Read SFDP Register" (5Ah) it goes to "Fast Read Quad Output" (6Bh)

Would it be possible to use some working dump from other machine or the original need more modifications ?