Badcaps.net Forum
Go Back   Badcaps Forums > Troubleshooting Hardware & Devices and Electronics Theory > Troubleshooting Laptops, Tablets, and Mobile Devices > BIOS Requests ONLY!
Register FAQ Calendar Search Today's Posts Mark Forums Read

 
Thread Tools Display Modes
Old 06-09-2020, 07:10 AM   #1
Chaos-Acid
New Member
 
Join Date: Jun 2020
City & State: Dorset
My Country: UK
I'm a: Knowledge Seeker
Posts: 9
Question Surface 3 Clean Bios? (noob)

Hi all,

been lurking for a couple of weeks now, managed to get my hands on a cheap surface 3, UEFI password locked though..

I'm a complete noob at this and i think i've dumped the bios, anyone able to show me how to get the password or upload a clean bios for me to update with?

Many thanks to you all!
Attached Files
File Type: rar Output.rar (2.9 KB, 37 views)
Chaos-Acid is offline   Reply With Quote
Old 06-09-2020, 08:12 AM   #2
RethoricalCheese
Badcaps Veteran
 
Join Date: Mar 2013
City & State: Tartu
My Country: Estonia
I'm a: Knowledge Seeker
Posts: 1,230
Default Re: Surface 3 Clean Bios? (noob)

Your rar file is 2.9KB thus invalid. Use flash programming tool (fptw64.exe -bios -d surface3.bin) to read bios region. Then upload it and I can get the password from there.

I think you need TXE2 flash programming tool for that.
RethoricalCheese is offline   Reply With Quote
Old 06-09-2020, 09:31 AM   #3
Chaos-Acid
New Member
 
Join Date: Jun 2020
City & State: Dorset
My Country: UK
I'm a: Knowledge Seeker
Posts: 9
Default Re: Surface 3 Clean Bios? (noob)

Yah, i think i'm getting that issue at the moment, using \Intel ME System Tools v10.0 r7\MEInfo\WIN64>MEInfoWin64.exe

i get the error Error 9460: Unknown or unsupported hardware platform

So i assume i have to go right back a version, the TXE2 version?

Also thank you for your help and sorry - i'm such a noob.
Havent been a windows user since XP..
Chaos-Acid is offline   Reply With Quote
Old 06-09-2020, 09:51 AM   #4
RethoricalCheese
Badcaps Veteran
 
Join Date: Mar 2013
City & State: Tartu
My Country: Estonia
I'm a: Knowledge Seeker
Posts: 1,230
Default Re: Surface 3 Clean Bios? (noob)

Yes, as I said, TXE2 should work.
RethoricalCheese is offline   Reply With Quote
Old 06-12-2020, 02:46 AM   #5
Chaos-Acid
New Member
 
Join Date: Jun 2020
City & State: Dorset
My Country: UK
I'm a: Knowledge Seeker
Posts: 9
Default Re: Surface 3 Clean Bios? (noob)

Thank you - I think i found the correct version and the command you gave me worked!
___________
Intel (R) Flash Programming Tool. Version: 2.0.5.3107
Copyright (c) 2007 - 2015, Intel Corporation. All rights reserved.

Platform: Cherry Trail
Reading HSFSTS register... Flash Descriptor: Valid

--- Flash Devices Found ---
MX25U6435F ID:0xC22537 Size: 8192KB (65536Kb)


- Reading Flash [0x800000] 4096KB of 4096KB - 100% complete.
Writing flash contents to file "surface3.bin"...

Memory Dump Complete
FPT Operation Passed
_________________

Thank you again for your help, i'm learning a lot researching all these
Chaos-Acid is offline   Reply With Quote
Old 06-12-2020, 02:48 AM   #6
Chaos-Acid
New Member
 
Join Date: Jun 2020
City & State: Dorset
My Country: UK
I'm a: Knowledge Seeker
Posts: 9
Default Re: Surface 3 Clean Bios? (noob)

Attachement:
Attached Files
File Type: rar surface3.rar (1.98 MB, 81 views)
Chaos-Acid is offline   Reply With Quote
Old 06-12-2020, 04:08 AM   #7
RethoricalCheese
Badcaps Veteran
 
Join Date: Mar 2013
City & State: Tartu
My Country: Estonia
I'm a: Knowledge Seeker
Posts: 1,230
Default Re: Surface 3 Clean Bios? (noob)

1234567890
RethoricalCheese is offline   Reply With Quote
Old 06-12-2020, 04:30 AM   #8
Chaos-Acid
New Member
 
Join Date: Jun 2020
City & State: Dorset
My Country: UK
I'm a: Knowledge Seeker
Posts: 9
Default Re: Surface 3 Clean Bios? (noob)

Quote:
Originally Posted by RethoricalCheese View Post
1234567890
hhahahah, ofcourse that worked!! why didn't i try that when i was trying to guess it in the first place!!!!

Thank you as always my friend - if i may ask, how did you find it out - i assume by looking through the dump and finding a hex key?
Chaos-Acid is offline   Reply With Quote
Old 06-12-2020, 06:13 AM   #9
RethoricalCheese
Badcaps Veteran
 
Join Date: Mar 2013
City & State: Tartu
My Country: Estonia
I'm a: Knowledge Seeker
Posts: 1,230
Default Re: Surface 3 Clean Bios? (noob)

It is located in AMITSESetup section but it is slightly encrypted so some decryption is needed.
RethoricalCheese is offline   Reply With Quote
Old 06-12-2020, 07:34 AM   #10
Chaos-Acid
New Member
 
Join Date: Jun 2020
City & State: Dorset
My Country: UK
I'm a: Knowledge Seeker
Posts: 9
Default Re: Surface 3 Clean Bios? (noob)

oh amazing! wow, you sir are a god among men and i cannot thank you enough!!
Chaos-Acid is offline   Reply With Quote
Old 06-13-2020, 06:47 AM   #11
keczuk
Member
 
Join Date: Dec 2019
City & State: Internet
My Country: WWW
I'm a: Knowledge Seeker
Posts: 60
Default Re: Surface 3 Clean Bios? (noob)

Quote:
Originally Posted by RethoricalCheese View Post
It is located in AMITSESetup section but it is slightly encrypted so some decryption is needed.
wow i try check this file, and don't see AMITSESetup section. Can you tell more about this ?
keczuk is offline   Reply With Quote
Old 06-13-2020, 09:28 AM   #12
lapfix
Badcaps Veteran
 
Join Date: Mar 2020
City & State: my house
My Country: my workshop
I'm a: Knowledge Seeker
Posts: 1,093
Default Re: Surface 3 Clean Bios? (noob)

Quote:
Originally Posted by keczuk View Post
wow i try check this file, and don't see AMITSESetup section. Can you tell more about this ?
You can use search on UEFI Views , but as RethoricalCheese say : it's encrypted !
lapfix is offline   Reply With Quote
Old 06-14-2020, 05:19 AM   #13
KingBonecrusher
Member
 
Join Date: Jun 2020
City & State: Netherlands
My Country: Netherlands
I'm a: Knowledge Seeker
Posts: 28
Default Re: Surface 3 Clean Bios? (noob)

Hi!

If i`am correct AMI uses an XOR key to encrypt the SHA1 hash of the stored password (maybe scancode)? Would you provide some more infos how to recover the sha1 hash or password?
KingBonecrusher is offline   Reply With Quote
Old 06-14-2020, 07:27 AM   #14
KingBonecrusher
Member
 
Join Date: Jun 2020
City & State: Netherlands
My Country: Netherlands
I'm a: Knowledge Seeker
Posts: 28
Default Re: Surface 3 Clean Bios? (noob)

Quote:
Originally Posted by KingBonecrusher View Post
Hi!

If i`am correct AMI uses an XOR key to encrypt the SHA1 hash of the stored password (maybe scancode)? Would you provide some more infos how to recover the sha1 hash or password?
Ok, found the solution...

Code:
3132333435363738393000000000000000000000
Rest is simple
KingBonecrusher is offline   Reply With Quote
Old 06-14-2020, 02:04 PM   #15
RethoricalCheese
Badcaps Veteran
 
Join Date: Mar 2013
City & State: Tartu
My Country: Estonia
I'm a: Knowledge Seeker
Posts: 1,230
Default Re: Surface 3 Clean Bios? (noob)

Well done!
RethoricalCheese is offline   Reply With Quote
Old 06-15-2020, 12:59 AM   #16
keczuk
Member
 
Join Date: Dec 2019
City & State: Internet
My Country: WWW
I'm a: Knowledge Seeker
Posts: 60
Default Re: Surface 3 Clean Bios? (noob)

Quote:
Originally Posted by KingBonecrusher View Post
Ok, found the solution...

Code:
3132333435363738393000000000000000000000
Rest is simple
Still cant find in this bios file encrypted password. Some one can show where is lockated this encrypted password ?
keczuk is offline   Reply With Quote
Old 06-15-2020, 04:57 AM   #17
RethoricalCheese
Badcaps Veteran
 
Join Date: Mar 2013
City & State: Tartu
My Country: Estonia
I'm a: Knowledge Seeker
Posts: 1,230
Default Re: Surface 3 Clean Bios? (noob)

Open with uefitool. Open search, write AMITSESetup. You will get maybe 10 of those. Usually only 1 or 2 of them have content.
RethoricalCheese is offline   Reply With Quote
Old 06-15-2020, 12:12 PM   #18
KingBonecrusher
Member
 
Join Date: Jun 2020
City & State: Netherlands
My Country: Netherlands
I'm a: Knowledge Seeker
Posts: 28
Default Re: Surface 3 Clean Bios? (noob)

Check the AMITseSetup variable body with UEFITool, there is:

Code:
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000006A93842622BA584D
F2E014744A07E09A0A2EBEC1E95444E8
9F7BFA0E55A2B0350BC9665CC1EF1C83
01
You need only:

Code:
6A93842622BA584D
F2E014744A07E09A0A2EBEC1E95444E8
9F7BFA0E55A2B0350BC9665CC1EF1C83
This needs to be decrypted with the known AMI XOR Key...
KingBonecrusher is offline   Reply With Quote
Old 06-17-2020, 02:34 AM   #19
keczuk
Member
 
Join Date: Dec 2019
City & State: Internet
My Country: WWW
I'm a: Knowledge Seeker
Posts: 60
Default Re: Surface 3 Clean Bios? (noob)

Quote:
Originally Posted by KingBonecrusher View Post
Check the AMITseSetup variable body with UEFITool, there is:

Code:
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000006A93842622BA584D
F2E014744A07E09A0A2EBEC1E95444E8
9F7BFA0E55A2B0350BC9665CC1EF1C83
01
You need only:

Code:
6A93842622BA584D
F2E014744A07E09A0A2EBEC1E95444E8
9F7BFA0E55A2B0350BC9665CC1EF1C83
This needs to be decrypted with the known AMI XOR Key...

https://md5decrypt.net/Xor/

This site working for decrypt ??
keczuk is offline   Reply With Quote
Old 07-06-2020, 03:04 AM   #20
keczuk
Member
 
Join Date: Dec 2019
City & State: Internet
My Country: WWW
I'm a: Knowledge Seeker
Posts: 60
Default Re: Surface 3 Clean Bios? (noob)

no one help ?
keczuk is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump



Badcaps.net Technical Forums 2003 - 2022
Powered by vBulletin ®
Copyright ©2000 - 2022, Jelsoft Enterprises Ltd.
All times are GMT -6. The time now is 03:23 PM.
Did you find this forum helpful?