What do you know about BIOS NVRAM hacking?

Only for programmers and BIOS gurus with technical questions.
IntuitiveNipple
BIOS Newbie
Posts: 31
Joined: Tue May 29, 2007 12:24 am

Thu Oct 11, 2007 11:29 pm

Here's an example of the NVRAM token symbols. In the following two comments I'm going to include the full text of the files mentioned here since they are so rare - hopefully search engines will index them and help others find this information.

When compiling the Phoenix BIOS a couple of files are created. Sometimes one or both of these files are included in the BIOS update packages shipped by motherboard manufacturers.
  • nvtoken.lst - the symbols and related Token IDs
  • nvram.lst - the symbols, location in CMOS, bit-size, and optionally the Token ID
Example from nvtoken.lst:

Code: Select all

cmosInstalledOS                         	EQU  002A6h
cmosCPU_VT_Sup                          	EQU  002A9h
cmosCPU_VT_Ena                          	EQU  002ACh
cmosCPU_NX_Dis                          	EQU  002AFh
cmosCPU_ATM                             	EQU  002B2h
Example from nvram.lst:

Code: Select all

.D = DEFAULTS  F = FIXEDFIELD  L = STACKLESS    S = STRUCFIELD  B = BYTESTRING
.O = OVERRIDE  C = CRC/CKSM    M = MEMBERFIELD  K = CHECKSUM    R = READONLY
.E = OEMOVERRIDE

.Token   Start     Std         Attributes
.   Media     Width      Mfg               Name
02a3  0  00f8  04  0000  0000         K    cmosLanguage
02ac  0  00fc  01  0000  0001   O     K    cmosCPU_VT_Ena
02dc  0  00fd  05  0007  0000         K    cmosCpuFreqStrapHi
IntuitiveNipple
BIOS Newbie
Posts: 31
Joined: Tue May 29, 2007 12:24 am

Thu Oct 11, 2007 11:36 pm

Code: Select all

.[NVRAMMAP-002]

.D = DEFAULTS  F = FIXEDFIELD  L = STACKLESS    S = STRUCFIELD  B = BYTESTRING
.O = OVERRIDE  C = CRC/CKSM    M = MEMBERFIELD  K = CHECKSUM    R = READONLY
.E = OEMOVERRIDE

.Token   Start     Std         Attributes
.   Media     Width      Mfg               Name
01d1  0  0000  50  0000  0000    F         rsvd_0_0
01d4  0  0050  08  0000  0000    F         cmosRegA
01d7  0  0058  01  0000  0000    F         cmosDaylightSavings
01da  0  0059  07  0000  0000    F   L     cmosRegB
01dd  0  0060  08  0000  0000    F   L     cmosRegC
01e0  0  0068  07  0000  0000    F         rsvd_D_0
01e3  0  006f  01  0000  0000    F   L     cmosValidRamBit
01e6  0  0070  02  0000  0000    F         rsvd_E_0
01e9  0  0072  01  0000  0000    F   L     cmosTimeFailedBit
01ec  0  0073  01  0000  0000    F   L     cmosDiskFailedBit
01ef  0  0074  01  0000  0000    F         rsvd_E_4
01f2  0  0075  01  0000  0000    F   L     cmosBadConfigBit
01f5  0  0076  01  0000  0000    F   L     cmosBadChecksumBit
01f8  0  0077  01  0000  0000    F   L     cmosBadPowerbit
01fb  0  0078  08  0000  0000    F   L     cmosShutdown
01fe  0  0080  08  0040  0044    F  S K    cmosFddType
0201  0  0080  04  0000  0000   OF M  K    cmosFdd1Type
0204  0  0084  04  0000  0004   OF M  K    cmosFdd0Type
0009  0  0088  01  0001  0001        LK    cmosAGPEnabled
0114  0  0089  01  0001  0001        LK    cmosAPICEnable
01a7  0  008a  01  0001  0001        LK    cmosSmscUart1Address
01aa  0  008b  01  0000  0000        LK    cmosSmscUart2Address
02af  0  008c  01  0000  0000        LK    cmosCPU_NX_Dis
02b2  0  008d  01  0000  0000        LK    cmosCPU_ATM
02b5  0  008e  01  0000  0000        LK    cmosCPU_CPUID
02b8  0  008f  01  0000  0000   O    LK    cmosCPU_FastStrn
0207  0  0090  04  0000  0000    F    K    cmosFdisk1Type
020a  0  0094  04  0000  0000    F    K    cmosFdisk0Type
02bb  0  0098  01  0000  0000        LK    cmosCPU_CompFPU
02be  0  0099  01  0000  0000        LK    cmosCPU_SpltLk
02c1  0  009a  01  0000  0000        LK    cmosCPU_MachCheck
02c4  0  009b  01  0000  0000        LK    cmosCPU_AdjSector
02c7  0  009c  01  0001  0001   O    LK    cmosCPU_EchoTPR
02ca  0  009d  02  0000  0000        LK    cmosCPU_GV
03e7  0  009f  01  0000  0000        LK    cmosSLPEnable
020d  0  00a0  08  0001  0001    F    K    cmosEquipment
0210  0  00a8  10  0000  0000    F    K    cmosBaseRam
0213  0  00b8  10  0000  0000    F    K    cmosExtRam
0216  0  00c8  08  0000  0000    F    K    cmosFdisk0ExtType
0219  0  00d0  08  0000  0000    F    K    cmosFdisk1ExtType
02d9  0  00d8  05  0000  0000        LK    cmosCpuFreqStrap
03f9  0  00dd  01  0001  0001        LK    cmosHTEnable
047d  0  00de  01  0000  0000   O    LK    cmosInvCfg
04aa  0  00df  01  0001  0001        LK    cmosPegPortEnable
046e  0  00e0  04  0002  0002        LK    cmosIGDPanelType
047a  0  00e4  04  0000  0000        LK    cmosIGDBootType
0480  0  00e8  02  0001  0001        LK    cmosIGDStolenMemorySize
0483  0  00ea  02  0000  0000        LK    cmosIGDTotalMemorySize
04ad  0  00ec  01  0001  0001        LK    cmosIGDF0Enable
0666  0  00ed  01  0001  0001   O    LK    cmosPort80hCycles
06d2  0  00ee  01  0000  0000        LK    cmosOnesAll
016e  0  00ef  01  0001  0001         K    cmosFastC4Enable
06d5  0  00f0  02  0002  0002   O    LK    cmosOnAcLoss
027c  0  00f2  05  0000  0000         K    cmosFirstWareLanguage
0297  0  00f7  01  0000  0000         K    cmosS5PMEDisable
02a3  0  00f8  04  0000  0000         K    cmosLanguage
02ac  0  00fc  01  0000  0001   O     K    cmosCPU_VT_Ena
02dc  0  00fd  05  0007  0000         K    cmosCpuFreqStrapHi
02df  0  0102  01  0000  0000         K    cmosKeyclick
02e2  0  0103  03  0000  0000         K    cmosKeyboardRate
02e5  0  0106  02  0001  0001         K    cmosKeyboardDelay
0318  0  0108  01  0000  0000         K    cmosPciHpEnable
031b  0  0109  03  0001  0000         K    cmosPciHpBusGap
031e  0  010c  03  0005  0000   O     K    cmosPciHpIO
0321  0  010f  03  0006  0000   O     K    cmosPciHpMem
0330  0  0112  03  0000  0000         K    cmosFirstSpaceDriveNum
0333  0  0115  05  001f  001f         K    cmosFirstSpacePsaIndex
0336  0  011a  01  0000  0000         K    cmosDiagScreenOnly
0339  0  011b  02  0001  0001         K    cmosPostMemTest
033f  0  011d  01  0000  0001         K    cmosQkBootEnable
0342  0  011e  01  0000  0000         K    cmosOpenVaultPsa
0345  0  011f  01  0000  0000         K    cmosOpenCustomPsa
0348  0  0120  01  0000  0000         K    cmosVaultPsaStatus
034b  0  0121  01  0000  0000         K    cmosMaintenanceMode
034e  0  0122  01  0000  0000         K    CmosS4wakeupmode
0351  0  0123  03  0002  0000         K    CmosVideoMode
0354  0  0126  02  0000  0000         K    cmosFwAuthLevel
035a  0  0128  01  0001  0001         K    cmosacpiEnable
03cf  0  0129  01  0001  0001         K    cmosFddAccess
03d2  0  012a  01  0001  0001         K    cmosMpSpecRev
03d5  0  012b  01  0000  0000         K    cmosMpDirectPCIEntries
03ea  0  012c  03  0000  0000         K    cmosHddPreDelay
03f3  0  012f  01  0000  0000         K    cmosPasswordOnBoot
03f6  0  0130  01  0000  0000         K    cmosHddProtect
03ff  0  0131  01  0001  0001         K    cmosCacheL3Enb
040b  0  0132  03  0000  0000         K    cmosCacheA000
040e  0  0135  03  0000  0000         K    cmosCacheB000
041a  0  0138  03  0000  0000         K    cmosCacheD000
041d  0  013b  03  0000  0000         K    cmosCacheD400
0420  0  013e  03  0000  0000         K    cmosCacheD800
0423  0  0141  03  0000  0000         K    cmosCacheDC00
0426  0  0144  03  0005  0005         K    cmosCacheE000
0447  0  0147  03  0007  0007       S K    cmosEventLogControl
044a  0  0147  01  0001  0001      M  K    cmosEventLogEnable
044d  0  0148  01  0001  0001      M  K    cmosECCLogEnable
0450  0  0149  01  0001  0001      M  K    cmosPostLogEnable
0453  0  014a  01  0000  0000         K    cmosSetupEvntLogClr
0462  0  014b  10  ffff  ffff         K    cmosGPNVLockValue
0465  0  015b  10  0000  0000         K    cmosStructTableLength
0468  0  016b  01  0001  0001         K    cmosIGDF1Enable
04bc  0  016c  01  0000  0000   O     K    cmosSummaryScreen
04e6  0  016d  01  0000  0000         K    cmosMbExtraRemovable0
04e9  0  016e  01  0000  0000         K    cmosMbExtraRemovable1
04ec  0  016f  01  0000  0000         K    cmosMbExtraRemovable2
021c  0  0170  08  0000  0000    FC        cmosChecksumHi
021f  0  0178  08  0000  0000    FC        cmosChecksumLo
0222  0  0180  10  0000  0000    F         cmosExtended
0225  0  0190  08  0020  0020   OF         cmosCentury
0228  0  0198  01  0000  0000    F   L     cmosInPostBit
022b  0  0199  01  0000  0000    F   L     cmosConfigFailedBit
022e  0  019a  01  0000  0000    F   L     cmosResume
0231  0  019b  01  0000  0000    F   L     cmosExtCachePresent
0234  0  019c  02  0000  0000    F  SL     cmosCR0
0237  0  019c  01  0000  0000    F M L     cmosCR0NW
023a  0  019d  01  0000  0000    F M L     cmosCR0CD
023d  0  019e  01  0000  0000    F   L     cmosCoprocessor387
0240  0  019f  01  0000  0000    F   L     cmosExpansionInstalled
0243  0  01a0  08  0000  0000    F  SL     cmosCpuType
0246  0  01a0  06  0000  0000    F M L     cmosCpuTypeNumber
0249  0  01a6  02  0000  0000    F M L     cmosCpuTypeFamily
02a0  0  01a8  01  0000  0000        L     cmosA20EnableStatus
02e8  0  01a9  01  0000  0000        L     cmosDontClearMem
02eb  0  01aa  01  0000  0000        L     cmosProcessWarmStart
035d  0  01ab  01  0000  0000        L     cmosacpiSaveMode
03e4  0  01ac  01  0001  0001        L     cmosCPU_Multi_Cr
06f6  0  01ad  03  0000  0000        L     cmosRFDAttemptsPlus1
0360  0  01b0  08  0086  0086        L     cmosSBF
0369  0  01b8  08  0000  0000        L     cmosacpiHwSignature
02f1  0  01c0  10  0000  0000    F         cmosSecurNvIch1
02f4  0  01d0  10  0000  0000    F         cmosSecurNvIch2
02f7  0  01e0  10  0000  0000    F         cmosSecurNvIch3
02fa  0  01f0  10  0000  0000    F         cmosSecurNvIch4
03d8  0  0200  08  0000  0000        L     cmosBspBistLow0
03db  0  0208  08  0000  0000        L     cmosBspBistLow8
03de  0  0210  08  0000  0000        L     cmosBspBistHigh0
03e1  0  0218  08  0000  0000        L     cmosBspBistHigh8
06f9  0  0220  01  0000  0000        L     cmosacpiS4BiosEnable
027f  0  0221  01  0000  0000              ssRESET
0285  0  0222  10  0000  0000              cmosCSRSavedCRC
0288  0  0232  10  0000  0000              cmosCSRSavedChecksum
029a  0  0242  02  0000  0000              cmosCsrRestoreCondition
029d  0  0244  10  0000  0000              cmosExtMemCnt
02a9  0  0254  01  0000  0000              cmosCPU_VT_Sup
02cd  0  0255  01  0000  0000              cmosCPU_SMX_Sup
02d3  0  0256  10  0000  0000     C        cmosCRC
02d6  0  0266  01  0000  0000              cmosCpuFreqReset
02ee  0  0267  10  0000  0000              cmosAbove4GBSize
0327  0  0277  01  0000  0000              cmosBootFirstSpace
032a  0  0278  01  0000  0000              cmosFirstSpaceFound
032d  0  0279  01  0000  0000              cmosFirstSpaceMfgMode
033c  0  027a  01  0000  0000              cmosQkBootErrStat
0363  0  027b  02  0000  0000              cmosLastBootedOS
0366  0  027d  01  0000  0000              cmosIntelViivDrvr
03ed  0  027e  10  0000  0000              cmosUserPassword
03f0  0  028e  10  0000  0000              cmosSuperPassword
0402  0  029e  01  0000  0000              cmosCacheL3Present
0438  0  029f  02  0001  0001       S      cmosSmbiosLogStatus
043b  0  029f  01  0001  0001      M       cmosSmbiosLogValid
043e  0  02a0  01  0000  0000      M       cmosSmbiosLogFull
0441  0  02a1  08  0000  0000              cmosSmbiosLogChangeToken
0444  0  02a9  01  0000  0000              cmosSmbiosUnreadEvents
04bf  0  02aa  06  0009  0009   O     K    cmosIPLOrder0
04c2  0  02b0  06  0005  0005   O     K    cmosIPLOrder1
04c5  0  02b6  06  000d  000d   O     K    cmosIPLOrder2
04c8  0  02bc  06  0022  0022   O     K    cmosIPLOrder3
04cb  0  02c2  06  0011  0011   O     K    cmosIPLOrder4
04ce  0  02c8  06  0000  0000   O     K    cmosIPLOrder5
04d1  0  02ce  06  0014  0014   O     K    cmosIPLOrder6
04d4  0  02d4  06  00ff  00ff         K    cmosIPLOrder7
04dd  0  02da  08  0000  0000         K    cmosCurrentIPL
04e0  0  02e2  08  00fe  00fe         K    cmosSelectionIPL
04e3  0  02ea  01  0000  0000              cmosInBootMenu
04ef  0  02eb  01  0000  0000         K    cmosMbExtraRemovable3
04f2  0  02ec  01  0000  0000         K    cmosMbExtraRemovable4
04f5  0  02ed  01  0000  0000         K    cmosMbExtraRemovable5
04f8  0  02ee  01  0000  0000         K    cmosMbExtraRemovable6
04fb  0  02ef  01  0000  0000         K    cmosMbExtraRemovable7
04fe  0  02f0  01  0000  0000         K    cmosMbExtraRemovable8
0501  0  02f1  01  0000  0000         K    cmosMbExtraRemovable9
0504  0  02f2  01  0000  0000         K    cmosMbExtraRemovableA
0507  0  02f3  01  0000  0000         K    cmosMbExtraRemovableB
050a  0  02f4  01  0001  0001         K    cmosSystemBIOS
050d  0  02f5  01  0001  0001         K    cmosVideoBIOS
0510  0  02f6  01  0000  0000         K    cmosMemoryHole
0513  0  02f7  01  0000  0000         K    cmosCsShadowC800
0516  0  02f8  01  0000  0000         K    cmosCsShadowCC00
0519  0  02f9  01  0000  0000         K    cmosCsShadowD000
051c  0  02fa  01  0000  0000         K    cmosCsShadowD400
051f  0  02fb  01  0000  0000         K    cmosCsShadowD800
0522  0  02fc  01  0000  0000         K    cmosCsShadowDC00
062d  0  02fd  01  0001  0001         K    cmosHddDosCompat
0630  0  02fe  10  0000  0000         K    cmosCylinders0
0633  0  030e  04  0000  0000         K    cmosHeads0
0636  0  0312  06  0000  0000         K    cmosSectors0
0639  0  0318  03  0000  0000         K    cmosProtocolType0
063c  0  031b  10  0000  0000         K    cmosCylinders1
063f  0  032b  04  0000  0000         K    cmosHeads1
0642  0  032f  06  0000  0000         K    cmosSectors1
0645  0  0335  03  0000  0000         K    cmosProtocolType1
0648  0  0338  02  0002  0002         K    cmosHdd0Sel
064b  0  033a  02  0002  0002         K    cmosHdd1Sel
064e  0  033c  02  0001  0001         K    cmosFdiskIdeEnable
0669  0  033e  01  0001  0001   O     K    cmosUsbLegacy
0672  0  033f  01  0001  0001   O     K    cmosUSB3Enable
0675  0  0340  01  0001  0001   O     K    cmosUSB4Enable
067b  0  0341  01  0001  0001   O     K    cmosPnpClearESCD
0684  0  0342  04  0001  0001         K    cmosPciIrq1
069c  0  0346  01  0000  0000         K    cmosExcludeIRQ3
0270  0  0347  01  0000  0000    F         cmosfailflag
0273  0  0348  08  0000  0000    F         cmoscounter
067e  0  0350  08  0000  0000              cmosPnpMaxCsn
0681  0  0358  08  0000  0000              cmosPnpReadDataPort
0687  0  0360  04  0001  0001         K    cmosPciIrq2
068a  0  0364  04  0001  0001         K    cmosPciIrq3
068d  0  0368  04  0001  0001         K    cmosPciIrq4
0690  0  036c  04  0001  0001         K    cmosPciIrq5
0693  0  0370  04  0001  0001         K    cmosPciIrq6
0696  0  0374  04  0001  0001         K    cmosPciIrq7
0699  0  0378  04  0001  0001         K    cmosPciIrq8
069f  0  037c  01  0000  0000         K    cmosExcludeIRQ4
06a2  0  037d  01  0000  0000         K    cmosExcludeIRQ5
06a5  0  037e  01  0000  0000         K    cmosExcludeIRQ7
06a8  0  037f  01  0000  0000         K    cmosExcludeIRQ9
06ab  0  0380  01  0000  0000         K    cmosExcludeIRQ10
06ae  0  0381  01  0000  0000         K    cmosExcludeIRQ11
06b1  0  0382  01  0000  0000         K    cmosExcludeIRQ12
06b4  0  0383  01  0000  0000         K    cmosExcludeIRQ14
06b7  0  0384  01  0000  0000         K    cmosExcludeIRQ15
06ba  0  0385  02  0000  0000         K    cmosConsoleConfig
06bd  0  0387  03  0004  0004         K    cmosConsoleBaudRate
06c0  0  038a  03  0003  0003         K    cmosConsoleType
06c3  0  038d  02  0000  0000   O     K    cmosConsoleFlowControl
06c6  0  038f  01  0000  0000         K    cmosConsoleConnect
06c9  0  0390  01  0000  0000         K    cmosConsoleEnAftPst
06cc  0  0391  03  0000  0000         K    cmosConsoleVidPages
06cf  0  0394  01  0000  0000         K    cmosPwrBtn
06d8  0  0395  01  0000  0000              cmosCalledInPOST
06db  0  0396  03  0001  0001   O     K    cmosPmPMMode
06de  0  0399  03  0000  0000         K    cmosPmStandbyTimer
06e1  0  039c  03  0000  0000         K    cmosPmSuspendTimer
06e4  0  039f  01  0000  0000         K    cmosPmResTime
06e7  0  03a0  07  0000  0000         K    cmosPmResTimeSec
06ea  0  03a7  07  0000  0000         K    cmosPmResTimeMin
06ed  0  03ae  06  0000  0000         K    cmosPmResTimeHour
06f0  0  03b4  04  0000  0000         K    cmosPmHDDTimer
06f3  0  03b8  04  0000  0000         K    cmosPmVideoTimer
06fc  0  03bc  01  0000  0000         K    cmosPmSuspendMode
06ff  0  03bd  01  0000  0000         K    cmosPmResRing
0702  0  03be  02  0000  0000         K    cmosPmIntrdsel
0705  0  03c0  02  0002  0002         K    cmossions374ComAConfig
0708  0  03c2  02  0000  0000         K    cmossions374ComAAddr
070b  0  03c4  01  0001  0001         K    cmossions374ComAIrq
070e  0  03c5  02  0002  0002         K    cmosSioNs374ComBConfig
0711  0  03c7  03  0000  0000         K    cmosSioNs374ComBMode
0714  0  03ca  02  0001  0001         K    cmosSioNs374ComBAddr
0717  0  03cc  01  0000  0000         K    cmosSioNs374ComBIrq
071a  0  03cd  02  0001  0001         K    cmossions374FdcConfig
071d  0  03cf  01  0000  0000         K    cmossions374FdcAddr
0720  0  03d0  02  0002  0002         K    cmossions374LptConfig
0723  0  03d2  02  0003  0003         K    cmossions374LptMode
0729  0  03d4  01  0001  0001         K    cmossions374LptIrq
072f  0  03d5  01  0000  0000         K    cmosMcdSecured
0456  0  03e0  08  0000  0000    F  S      cmosEventLogClrByte
0459  0  03e0  01  0000  0000    F M       cmosEventLogClr
045c  0  03e1  07  0000  0000    F M       cmosEventLogClrRsvd
045f  0  03e8  10  0000  0000    F         cmosEventLogClrCksum
012f  0  03ff  01  0001  0001    F         cmosDummy
026a  1  0000  20  0000  0000    F         cmossaveebp
026d  1  0020  20  0000  0000    F         cmossaveebx
0159  1  0040  01  0001  0001        LK    cmosCmpEnable
0282  1  0041  01  0001  0001        LK    cmosEnableDevE2Oprom
03fc  1  0042  01  0001  0001   O    L     cmosMemCacheEnable
046b  1  0043  02  0000  0000        LK    cmosIGDPanelScaling
0000  1  0045  03  0000  0000         K    cmosDviSSEnable
0252  1  0048  08  0000  0000        L     cmosCSReg_EBP0
0255  1  0050  08  0000  0000        L     cmosCSReg_EBP1
0258  1  0058  08  0001  0001        L     cmosCSReg_EBP2
025b  1  0060  08  0000  0000        L     cmosCSReg_EBP3
025e  1  0068  08  0000  0000        L     cmosCSReg_EBX2
0261  1  0070  08  0000  0000        L     cmosCSReg_EBX3
0264  1  0078  08  0000  0000        L     cmosCSReg_SSKPD0
0267  1  0080  08  0000  0000        L     cmosCSReg_SSKPD1
04b0  1  0088  08  0000  0000        L     cmosCH0RCVENSlave
04b3  1  0090  08  0000  0000        L     cmosCH1RCVENSlave
04b6  1  0098  08  0000  0000        L     cmosCoarseRCVEN
04b9  1  00a0  08  0000  0000        L     cmosMediumRCVEN
0003  1  00a8  01  0000  0000   O     K    cmosAC97AudioEnable
0006  1  00a9  01  0001  0001         K    cmosAC97ModemEnable
000c  1  00aa  08  0000  0000       S K    cmosCommandByte1
000f  1  00aa  01  0000  0000      M  K    cmosEnableDev1Oprom
0012  1  00ab  01  0000  0000      M  K    cmosEnable1
0015  1  00ac  01  0000  0000      M  K    cmosPciDev1Master
0018  1  00ad  01  0000  0000      M  K    cmosCh1NativeIde1
001b  1  00ae  01  0000  0000      M  K    cmosCh2NativeIde1
001e  1  00af  03  0000  0000      M  K    cmosPciDev1Latency
0021  1  00b2  08  0000  0000       S K    cmosCommandByte2
0024  1  00b2  01  0000  0000      M  K    cmosEnableDev2Oprom
0027  1  00b3  01  0000  0000      M  K    cmosEnable2
002a  1  00b4  01  0000  0000      M  K    cmosPciDev2Master
002d  1  00b5  01  0000  0000      M  K    cmosCh1NativeIde2
0030  1  00b6  01  0000  0000      M  K    cmosCh2NativeIde2
0033  1  00b7  03  0000  0000      M  K    cmosPciDev2Latency
0036  1  00ba  08  0000  0000       S K    cmosCommandByte3
0039  1  00ba  01  0000  0000      M  K    cmosEnableDev3Oprom
003c  1  00bb  01  0000  0000      M  K    cmosEnable3
003f  1  00bc  01  0000  0000      M  K    cmosPciDev3Master
0042  1  00bd  01  0000  0000      M  K    cmosCh1NativeIde3
0045  1  00be  01  0000  0000      M  K    cmosCh2NativeIde3
0048  1  00bf  03  0000  0000      M  K    cmosPciDev3Latency
004b  1  00c2  08  0000  0000       S K    cmosCommandByte4
004e  1  00c2  01  0000  0000      M  K    cmosEnableDev4Oprom
0051  1  00c3  01  0000  0000      M  K    cmosEnable4
0054  1  00c4  01  0000  0000      M  K    cmosPciDev4Master
0057  1  00c5  01  0000  0000      M  K    cmosCh1NativeIde4
005a  1  00c6  01  0000  0000      M  K    cmosCh2NativeIde4
005d  1  00c7  03  0000  0000      M  K    cmosPciDev4Latency
0060  1  00ca  08  0000  0000       S K    cmosCommandByte5
0063  1  00ca  01  0000  0000      M  K    cmosEnableDev5Oprom
0066  1  00cb  01  0000  0000      M  K    cmosEnable5
0069  1  00cc  01  0000  0000      M  K    cmosPciDev5Master
006c  1  00cd  01  0000  0000      M  K    cmosCh1NativeIde5
006f  1  00ce  01  0000  0000      M  K    cmosCh2NativeIde5
0072  1  00cf  03  0000  0000      M  K    cmosPciDev5Latency
0075  1  00d2  08  0000  0000       S K    cmosCommandByte6
0078  1  00d2  01  0000  0000      M  K    cmosEnableDev6Oprom
007b  1  00d3  01  0000  0000      M  K    cmosEnable6
007e  1  00d4  01  0000  0000      M  K    cmosPciDev6Master
0081  1  00d5  01  0000  0000      M  K    cmosCh1NativeIde6
0084  1  00d6  01  0000  0000      M  K    cmosCh2NativeIde6
0087  1  00d7  03  0000  0000      M  K    cmosPciDev6Latency
008a  1  00da  08  0000  0000       S K    cmosCommandByte7
008d  1  00da  01  0000  0000      M  K    cmosEnableDev7Oprom
0090  1  00db  01  0000  0000      M  K    cmosEnable7
0093  1  00dc  01  0000  0000      M  K    cmosPciDev7Master
0096  1  00dd  01  0000  0000      M  K    cmosCh1NativeIde7
0099  1  00de  01  0000  0000      M  K    cmosCh2NativeIde7
009c  1  00df  03  0000  0000      M  K    cmosPciDev7Latency
009f  1  00e2  08  0000  0000       S K    cmosCommandByte8
00a2  1  00e2  01  0000  0000      M  K    cmosEnableDev8Oprom
00a5  1  00e3  01  0000  0000      M  K    cmosEnable8
00a8  1  00e4  01  0000  0000      M  K    cmosPciDev8Master
00ab  1  00e5  01  0000  0000      M  K    cmosCh1NativeIde8
00ae  1  00e6  01  0000  0000      M  K    cmosCh2NativeIde8
00b1  1  00e7  03  0000  0000      M  K    cmosPciDev8Latency
00b4  1  00ea  08  0000  0000       S K    cmosCommandByte9
00b7  1  00ea  01  0000  0000      M  K    cmosEnableDev9Oprom
00ba  1  00eb  01  0000  0000      M  K    cmosEnable9
00bd  1  00ec  01  0000  0000      M  K    cmosPciDev9Master
00c0  1  00ed  01  0000  0000      M  K    cmosCh1NativeIde9
00c3  1  00ee  01  0000  0000      M  K    cmosCh2NativeIde9
00c6  1  00ef  03  0000  0000      M  K    cmosPciDev9Latency
00c9  1  00f2  08  0000  0000       S K    cmosCommandByteA
00cc  1  00f2  01  0000  0000      M  K    cmosEnableDevAOprom
00cf  1  00f3  01  0000  0000      M  K    cmosEnableA
00d2  1  00f4  01  0000  0000      M  K    cmosPciDevAMaster
00d5  1  00f5  01  0000  0000      M  K    cmosCh1NativeIdeA
00d8  1  00f6  01  0000  0000      M  K    cmosCh2NativeIdeA
00db  1  00f7  03  0000  0000      M  K    cmosPciDevALatency
00de  1  00fa  08  0000  0000       S K    cmosCommandByteB
00e1  1  00fa  01  0000  0000      M  K    cmosEnableDevBOprom
00e4  1  00fb  01  0000  0000      M  K    cmosEnableB
00e7  1  00fc  01  0000  0000      M  K    cmosPciDevBMaster
00ea  1  00fd  01  0000  0000      M  K    cmosCh1NativeIdeB
00ed  1  00fe  01  0000  0000      M  K    cmosCh2NativeIdeB
00f0  1  00ff  03  0000  0000      M  K    cmosPciDevBLatency
00f3  1  0102  01  0000  0000         K    cmosSATACombinedMode
00f6  1  0103  01  0000  0000         K    cmosSataAhciMode
00f9  1  0104  01  0001  0000   O     K    cmosSataVacantPortDisable
00fc  1  0105  01  0000  0000         K    cmosSataPort0HPMode
00ff  1  0106  01  0000  0000         K    cmosSataPort0ISMode
0102  1  0107  01  0000  0000         K    cmosSataPort1HPMode
0105  1  0108  01  0000  0000         K    cmosSataPort1ISMode
0108  1  0109  01  0000  0000         K    cmosSataPort2HPMode
010b  1  010a  01  0000  0000         K    cmosSataPort2ISMode
010e  1  010b  01  0000  0000         K    cmosSataPort3HPMode
0111  1  010c  01  0000  0000         K    cmosSataPort3ISMode
0117  1  010d  02  0002  0002         K    cmosPort1Enb
011a  1  010f  02  0002  0002         K    cmosPort2Enb
011d  1  0111  02  0002  0002         K    cmosPort3Enb
0120  1  0113  02  0002  0002         K    cmosPort4Enb
0123  1  0115  02  0002  0002         K    cmosPort5Enb
0126  1  0117  02  0001  0001   O     K    cmosPort6Enb
0129  1  0119  03  0000  0000         K    cmosIGDBrightValue
0132  1  011c  08  0033  0033         K    cmosISTConfig
0135  1  0124  02  0000  0000         K    cmosAlsEnable
0138  1  0126  04  0006  0006         K    cmosATEMPValue
013b  1  012a  04  0000  0000         K    cmosCTEMPValue
013e  1  012e  01  0000  0000         K    cmosEmaEnable
0141  1  012f  01  0000  0000         K    cmosMefEnable
0144  1  0130  01  0001  0001         K    cmosPmTimerInOsEnable
0147  1  0131  04  0000  0000         K    cmosPTC1Value
014a  1  0135  04  000a  000a         K    cmosPTC2Value
014d  1  0139  04  000b  000b         K    cmosPTEMPValue
0150  1  013d  04  0002  0002         K    cmosPTSPValue
0153  1  0141  01  0001  0001         K    cmosRTCS4Wake
0156  1  0142  02  0003  0003         K    cmosAutoThermal
015c  1  0144  02  0000  0000         K    cmosDtsCalibrate
015f  1  0146  06  0000  0000         K    cmosDts1Scf
0162  1  014c  06  0000  0000         K    cmosDts2Scf
0165  1  0152  08  0000  0000         K    cmosDiodeScfTemp
0168  1  015a  01  0001  0000         K    cmosDtsEnable
016b  1  015b  01  0001  0000         K    cmosEnhCStatesEnable
0171  1  015c  02  0003  0003   O     K    cmosPpm
0174  1  015e  01  0001  0000         K    cmosProcHotEnable
0177  1  015f  01  0000  0000   O     K    cmosEnThrmMon
017a  1  0160  01  0001  0000         K    cmosThermalOffset
017d  1  0161  01  0001  0001         K    cmosTscUpdtEnable
0180  1  0162  01  0001  0001         K    cmosAc97ModemPmeEnable
0183  1  0163  01  0000  0000         K    cmosAmtEnable
0186  1  0164  01  0001  0001         K    cmosPcieClkReqEnable
0189  1  0165  01  0001  0001         K    cmosCStatePopDownEnable
018c  1  0166  01  0001  0001         K    cmosCStatePopUpEnable
018f  1  0167  01  0000  0000   O     K    cmosClockRunEnable
0192  1  0168  01  0000  0000         K    cmosPcieForceWxEnable
0195  1  0169  01  0000  0000         K    cmosIchChapEnable
0198  1  016a  02  0000  0000   O     K    cmosLanEnable
019b  1  016c  01  0001  0000         K    cmosRpxAspm
019e  1  016d  01  0001  0000         K    cmosSerialIrqMode
01a1  1  016e  01  0000  0000         K    cmosPxeOprom
01a4  1  016f  01  0001  0001         K    cmosAspmLatCheck
01ad  1  0170  01  0000  0000         K    cmosDTSPD
01b0  1  0171  01  0000  0000         K    cmosPegPortMda
01b3  1  0172  01  0000  0000         K    cmosThermalThrottle
01b6  1  0173  01  0001  0000         K    cmosPegAspm
01b9  1  0174  01  0001  0001         K    cmosPegGpllPdEnable
01bc  1  0175  01  0000  0000         K    cmosPegForceX1
01bf  1  0176  01  0000  0000         K    cmosTSSPD
01c2  1  0177  01  0001  0001         K    cmosCk410Enable
01c5  1  0178  01  0000  0000         K    cmosCompatRevID
01c8  1  0179  01  0000  0000         K    cmosCk410SscEnable
01cb  1  017a  01  0001  0000         K    cmosDb800Enable
01ce  1  017b  02  0000  0000         K    cmosSscEnable
024c  1  017d  08  0000  0000              cmosCsrStatus
0276  1  0185  01  0000  0000         K    cmosLanPower
0279  1  0186  07  0064  0064              cmosBlcValue
028b  1  018d  02  0000  0000         K    cmosUsbHddCapacityType
028e  1  018f  01  0001  0001         K    cmosFanTachoMultiplier1
0291  1  0190  01  0001  0001         K    cmosFanTachoMultiplier3
0294  1  0191  01  0001  0001         K    cmosFanTachoMultiplier4
02a6  1  0192  03  0005  0005   O     K    cmosInstalledOS
02d0  1  0195  02  0001  0001   O     K    cmosNumlock
0312  1  0197  01  0000  0000   O     K    cmos1394Support
0315  1  0198  01  0001  0001         K    cmos1394Enable
0324  1  0199  03  0006  0000   O     K    cmosPciHpPreMem
036c  1  019c  08  0000  0000         K    cmosFdisk2ExtType
036f  1  01a4  03  0000  0000         K    cmosProtocolType2
0372  1  01a7  02  0002  0002         K    cmosHdd2Sel
0375  1  01a9  10  0000  0000         K    cmosCylinders2
0378  1  01b9  04  0000  0000         K    cmosHeads2
0381  1  01bd  03  0000  0000         K    cmosProtocolType3
02fd  1  01c0  10  0000  0000    F         cmosSecurNvIch5
0300  1  01d0  10  0000  0000    F         cmosSecurNvIch6
0303  1  01e0  10  0000  0000    F         cmosSecurNvIch7
0306  1  01f0  10  0000  0000    F         cmosSecurNvIch8
0309  1  0200  10  0000  0000    F         cmosSecurNvIch9
030c  1  0210  08  0000  0000    F         cmosSecurNvIchA
030f  1  0218  02  0000  0000    F         cmosSecurNvIchB
037b  1  021a  06  0000  0000         K    cmosSectors2
037e  1  0220  08  0000  0000         K    cmosFdisk3ExtType
0384  1  0228  02  0002  0002         K    cmosHdd3Sel
0387  1  022a  10  0000  0000         K    cmosCylinders3
038a  1  023a  04  0000  0000         K    cmosHeads3
038d  1  023e  06  0000  0000         K    cmosSectors3
0390  1  0244  01  0000  0000         K    cmos48BitAddr0
0393  1  0245  01  0000  0000         K    cmos48BitAddr1
0396  1  0246  01  0000  0000         K    cmos48BitAddr2
0399  1  0247  01  0000  0000         K    cmos48BitAddr3
039c  1  0248  01  0000  0000         K    cmos48BitAddr4
039f  1  0249  01  0000  0000         K    cmos48BitAddr5
03a2  1  024a  01  0000  0000         K    cmos48BitAddr6
03a5  1  024b  01  0000  0000         K    cmos48BitAddr7
03a8  1  024c  01  0001  0001         K    cmosSmartMonitor
03ab  1  024d  08  0000  0000         K    cmosFdisk4ExtType
03ae  1  0255  03  0000  0000         K    cmosProtocolType4
03b1  1  0258  02  0002  0002         K    cmosHdd4Sel
03b4  1  025a  08  0000  0000         K    cmosFdisk5ExtType
03b7  1  0262  03  0000  0000         K    cmosProtocolType5
03ba  1  0265  02  0002  0002         K    cmosHdd5Sel
03bd  1  0267  08  0000  0000         K    cmosFdisk6ExtType
03c0  1  026f  03  0000  0000         K    cmosProtocolType6
03c3  1  0272  02  0002  0002         K    cmosHdd6Sel
03c6  1  0274  08  0000  0000         K    cmosFdisk7ExtType
03c9  1  027c  03  0000  0000         K    cmosProtocolType7
03cc  1  027f  02  0002  0002         K    cmosHdd7Sel
0405  1  0281  03  0006  0006   O          cmosCache512
0408  1  0284  03  0006  0006   O          cmosCache640
0411  1  0287  03  0005  0005   O          cmosCacheVid
0414  1  028a  03  0005  0005   O          cmosCacheC800
0417  1  028d  03  0005  0005   O          cmosCacheCC00
0429  1  0290  03  0005  0005   O          cmosCacheE400
042c  1  0293  03  0005  0005   O          cmosCacheE800
042f  1  0296  03  0005  0005   O          cmosCacheEC00
0432  1  0299  03  0005  0005   O          cmosCacheSys
0435  1  029c  03  0006  0006   O          cmosCacheExtended
0471  1  029f  01  0000  0000         K    cmosS3PopupEnable
0474  1  02a0  03  0001  0001         K    cmosBiaCfg
0477  1  02a3  02  0001  0001         K    cmosIGDDvmtMode
0486  1  02a5  04  0001  0001         K    cmosSscPercent
0489  1  02a9  02  0000  0000         K    cmosIGDSdtvStandard
048c  1  02ab  02  0000  0000         K    cmosIGDTvMinorNTSC
048f  1  02ad  04  0000  0000         K    cmosIGDTvMinorPAL
0492  1  02b1  03  0000  0000         K    cmosIGDTvMinorSECAM
0495  1  02b4  03  0000  0000         K    cmosIGDHdtvStandard
0498  1  02b7  01  0000  0000         K    cmosIGDTvMinorSMPTE240M
049b  1  02b8  01  0000  0000         K    cmosIGDTvMinorSMPTE295M
049e  1  02b9  02  0000  0000         K    cmosIGDTvMinorSMPTE296M
04a1  1  02bb  02  0000  0000         K    cmosIGDHdtvMinorCEA7702
04a4  1  02bd  03  0000  0000         K    cmosIGDHdtvMinorCEA7703
04a7  1  02c0  01  0000  0000         K    cmosIGDHdtvMinorBT
04d7  1  02c1  01  0001  0000   O     K    cmosDisplaySetupPrompt
04da  1  02c2  01  0001  0000   O     K    cmosDisplayF1Prompt
0525  1  02c3  01  0000  0000         K    cmosSmartEnable0
0528  1  02c4  01  0000  0000         K    cmosSmartEnable1
052b  1  02c5  01  0000  0000         K    cmosSmartEnable2
052e  1  02c6  01  0000  0000         K    cmosSmartEnable3
0531  1  02c7  01  0000  0000         K    cmosSmartEnable4
0534  1  02c8  01  0000  0000         K    cmosSmartEnable5
0537  1  02c9  01  0000  0000         K    cmosSmartEnable6
053a  1  02ca  01  0000  0000         K    cmosSmartEnable7
053d  1  02cb  03  0000  0000         K    cmosUdmaMode0
0540  1  02ce  03  0000  0000         K    cmosUdmaMode1
0543  1  02d1  03  0000  0000         K    cmosUdmaMode2
0546  1  02d4  03  0000  0000         K    cmosUdmaMode3
0549  1  02d7  03  0000  0000         K    cmosUdmaMode4
054c  1  02da  03  0000  0000         K    cmosUdmaMode5
054f  1  02dd  03  0000  0000         K    cmosUdmaMode6
0552  1  02e0  03  0000  0000         K    cmosUdmaMode7
0555  1  02e3  01  0001  0001         K    cmosHdd0Auto
0558  1  02e4  04  0000  0000  D    S K    cmosHdd0MultiInfo
055b  1  02e4  03  0000  0000  D   M  K    cmosHddBlockSize0
055e  1  02e7  01  0000  0000  D   M  K    cmosHdd0MaxMulti
0561  1  02e8  04  0000  0000         K    cmosXferMode0
0564  1  02ec  06  0000  0000         K    cmosFDCycleTimedrv0
0567  1  02f2  01  0000  0000         K    cmosHdd0LBAMode
056a  1  02f3  01  0000  0000         K    cmosRemovable0
056d  1  02f4  01  0000  0000         K    cmosHdd32BitIO0
0570  1  02f5  01  0001  0001         K    cmosHdd1Auto
0573  1  02f6  04  0000  0000  D    S K    cmosHdd1MultiInfo
0576  1  02f6  03  0000  0000  D   M  K    cmosHddBlockSize1
0579  1  02f9  01  0000  0000  D   M  K    cmosHdd1MaxMulti
057c  1  02fa  04  0000  0000         K    cmosXferMode1
057f  1  02fe  06  0000  0000         K    cmosFDCycleTimedrv1
0582  1  0304  01  0000  0000         K    cmosHdd1LBAMode
0585  1  0305  01  0000  0000         K    cmosRemovable1
0588  1  0306  01  0000  0000         K    cmosHdd32BitIO1
058b  1  0307  01  0001  0001         K    cmosHdd2Auto
058e  1  0308  04  0000  0000  D    S K    cmosHdd2MultiInfo
0591  1  0308  03  0000  0000  D   M  K    cmosHddBlockSize2
0594  1  030b  01  0000  0000  D   M  K    cmosHdd2MaxMulti
0597  1  030c  04  0000  0000         K    cmosXferMode2
059a  1  0310  06  0000  0000         K    cmosFDCycleTimedrv2
059d  1  0316  01  0000  0000         K    cmosHdd2LBAMode
05a0  1  0317  01  0000  0000         K    cmosRemovable2
05a3  1  0318  01  0000  0000         K    cmosHdd32BitIO2
05a6  1  0319  01  0001  0001         K    cmosHdd3Auto
05a9  1  031a  04  0000  0000  D    S K    cmosHdd3MultiInfo
05ac  1  031a  03  0000  0000  D   M  K    cmosHddBlockSize3
05af  1  031d  01  0000  0000  D   M  K    cmosHdd3MaxMulti
05b2  1  031e  04  0000  0000         K    cmosXferMode3
05b5  1  0322  06  0000  0000         K    cmosFDCycleTimedrv3
05b8  1  0328  01  0000  0000         K    cmosHdd3LBAMode
05bb  1  0329  01  0000  0000         K    cmosRemovable3
05be  1  032a  01  0000  0000         K    cmosHdd32BitIO3
05c1  1  032b  01  0001  0001         K    cmosHdd4Auto
05c4  1  032c  04  0000  0000  D    S K    cmosHdd4MultiInfo
05c7  1  032c  03  0000  0000  D   M  K    cmosHddBlockSize4
05ca  1  032f  01  0000  0000  D   M  K    cmosHdd4MaxMulti
05cd  1  0330  04  0000  0000         K    cmosXferMode4
05d0  1  0334  06  0000  0000         K    cmosFDCycleTimedrv4
05d3  1  033a  01  0000  0000         K    cmosHdd4LBAMode
05d6  1  033b  01  0000  0000         K    cmosRemovable4
05d9  1  033c  01  0000  0000         K    cmosHdd32BitIO4
05dc  1  033d  01  0001  0001         K    cmosHdd5Auto
05df  1  033e  04  0000  0000  D    S K    cmosHdd5MultiInfo
05e2  1  033e  03  0000  0000  D   M  K    cmosHddBlockSize5
05e5  1  0341  01  0000  0000  D   M  K    cmosHdd5MaxMulti
05e8  1  0342  04  0000  0000         K    cmosXferMode5
05eb  1  0346  06  0000  0000         K    cmosFDCycleTimedrv5
05ee  1  034c  01  0000  0000         K    cmosHdd5LBAMode
05f1  1  034d  01  0000  0000         K    cmosRemovable5
05f4  1  034e  01  0000  0000         K    cmosHdd32BitIO5
05f7  1  034f  01  0001  0001         K    cmosHdd6Auto
05fa  1  0350  04  0000  0000  D    S K    cmosHdd6MultiInfo
05fd  1  0350  03  0000  0000  D   M  K    cmosHddBlockSize6
0600  1  0353  01  0000  0000  D   M  K    cmosHdd6MaxMulti
0603  1  0354  04  0000  0000         K    cmosXferMode6
0606  1  0358  06  0000  0000         K    cmosFDCycleTimedrv6
0609  1  035e  01  0000  0000         K    cmosHdd6LBAMode
060c  1  035f  01  0000  0000         K    cmosRemovable6
060f  1  0360  01  0000  0000         K    cmosHdd32BitIO6
0612  1  0361  01  0001  0001         K    cmosHdd7Auto
0615  1  0362  04  0000  0000  D    S K    cmosHdd7MultiInfo
0618  1  0362  03  0000  0000  D   M  K    cmosHddBlockSize7
061b  1  0365  01  0000  0000  D   M  K    cmosHdd7MaxMulti
061e  1  0366  04  0000  0000         K    cmosXferMode7
0621  1  036a  06  0000  0000         K    cmosFDCycleTimedrv7
0624  1  0370  01  0000  0000         K    cmosHdd7LBAMode
0627  1  0371  01  0000  0000         K    cmosRemovable7
062a  1  0372  01  0000  0000         K    cmosHdd32BitIO7
0651  1  0373  01  0001  0001         K    cmosSATAEnable
0654  1  0374  02  0000  0000         K    cmosATANative
0657  1  0376  01  0000  0000         K    cmosSataRaidEnable
065a  1  0377  01  0001  0001         K    cmosEnergyLakeEnable
065d  1  0378  01  0001  0001   O     K    cmosHPETEnable
0660  1  0379  02  0000  0000   O     K    cmosHPETBase
0663  1  037b  01  0001  0001         K    cmosAzaliaEnable
066c  1  037c  01  0001  0001         K    cmosUSB1Enable
066f  1  037d  01  0001  0001         K    cmosUSB2Enable
0678  1  037e  01  0001  0001   O     K    cmosUSB7Enable
0726  1  037f  02  0000  0000   O     K    cmossions374LptAddr
072c  1  0381  01  0000  0000   O     K    cmossions374LptDma
012c  1  03f8  08  005a  005a    F   LK    cmosFlashSemaphore
024f  4  0000  01  0001  0001           R  cmosCsr2ndBank
0357  4  0001  01  0001  0001           R  cmosPostVgaMode

.Media Starting Positions
0000 - Media 0
0400 - Media 1
0800 - Media 2
0800 - Media 3
0800 - Media 4
0808 - Media 5
0808 - Media 6
0808 - Media 7

.Standard Defaults
  00  00  00  00  00  00  00  00    00  00  00  00  00  00  00  00  
  00  07  00  10  01  00  00  00    00  00  00  a0  02  b1  02  e0  
  40  52  e3  0b  10  07  02  00    d0  fb  ff  07  00  08  00  00  
  00  00  20  00  00  10  86  00    00  00  00  00  00  00  00  00  
  00  00  00  00  00  00  00  00    00  00  00  00  00  00  00  00  
  00  00  00  80  00  24  45  23    46  00  f5  03  f8  03  30  20  
  00  00  00  00  00  00  00  da    07  00  00  00  11  11  11  01  
  00  0e  40  00  00  00  00  00    52  24  1e  00  00  00  00  80  
  00  00  00  00  00  00  00  00    07  00  00  01  00  00  00  00  
  00  00  00  00  00  02  00  00    00  00  00  00  00  00  00  00  
  10  40  d5  30  83  01  41  57    0e  00  00  7c  77  b0  98  04  
  00  99  37  0d  00  01  00  00    00  00  00  00  00  00  00  00  
  00  00  00  00  00  02  00  00    00  10  00  02  40  00  08  00  
  ed  b6  6d  6b  29  00  00  00    06  00  00  00  08  00  20  00  
  80  00  00  02  00  08  00  20    00  80  00  00  02  00  88  79  
  00  00  00  00  00  00  00  00    00  00  00  00  00  00  00  5a  

.Manufacturing Defaults
  03  00  00  00  00  00  00  00    00  00  00  00  00  00  00  00  
  40  07  00  10  01  00  00  00    00  00  00  a0  02  b1  02  10  
  40  00  e0  2b  00  07  02  00    d0  fb  ff  07  00  08  00  00  
  00  00  20  00  00  10  86  00    00  00  00  00  00  00  00  00  
  00  00  00  00  00  00  00  00    00  00  00  00  00  00  00  00  
  00  00  00  80  00  24  45  23    46  00  f5  03  f8  03  30  20  
  00  00  00  00  00  00  00  da    07  00  00  00  11  11  11  01  
  00  0e  40  00  00  00  00  00    52  24  1e  00  00  00  00  80  
  00  00  00  00  00  00  00  00    07  00  00  01  00  00  00  00  
  00  00  00  00  00  02  00  00    00  00  00  00  00  00  00  00  
  00  40  d5  30  83  01  41  57    0e  00  00  30  76  80  90  00  
  00  99  37  01  00  01  00  00    00  00  00  00  00  00  00  00  
  00  00  00  00  00  02  00  00    00  10  00  02  40  00  08  00  
  ed  b6  6d  6b  29  00  00  00    00  00  00  00  08  00  20  00  
  80  00  00  02  00  08  00  20    00  80  00  00  02  00  88  79  
  00  00  00  00  00  00  00  00    00  00  00  00  00  00  00  5a  
IntuitiveNipple
BIOS Newbie
Posts: 31
Joined: Tue May 29, 2007 12:24 am

Thu Oct 11, 2007 11:38 pm

Code: Select all

.[NVEQU-002]
cmosDviSSEnable                         	EQU  00000h
cmosAC97AudioEnable                     	EQU  00003h
cmosAC97ModemEnable                     	EQU  00006h
cmosAGPEnabled                          	EQU  00009h
cmosCommandByte1                        	EQU  0000Ch
cmosEnableDev1Oprom                     	EQU  0000Fh
cmosEnable1                             	EQU  00012h
cmosPciDev1Master                       	EQU  00015h
cmosCh1NativeIde1                       	EQU  00018h
cmosCh2NativeIde1                       	EQU  0001Bh
cmosPciDev1Latency                      	EQU  0001Eh
cmosCommandByte2                        	EQU  00021h
cmosEnableDev2Oprom                     	EQU  00024h
cmosEnable2                             	EQU  00027h
cmosPciDev2Master                       	EQU  0002Ah
cmosCh1NativeIde2                       	EQU  0002Dh
cmosCh2NativeIde2                       	EQU  00030h
cmosPciDev2Latency                      	EQU  00033h
cmosCommandByte3                        	EQU  00036h
cmosEnableDev3Oprom                     	EQU  00039h
cmosEnable3                             	EQU  0003Ch
cmosPciDev3Master                       	EQU  0003Fh
cmosCh1NativeIde3                       	EQU  00042h
cmosCh2NativeIde3                       	EQU  00045h
cmosPciDev3Latency                      	EQU  00048h
cmosCommandByte4                        	EQU  0004Bh
cmosEnableDev4Oprom                     	EQU  0004Eh
cmosEnable4                             	EQU  00051h
cmosPciDev4Master                       	EQU  00054h
cmosCh1NativeIde4                       	EQU  00057h
cmosCh2NativeIde4                       	EQU  0005Ah
cmosPciDev4Latency                      	EQU  0005Dh
cmosCommandByte5                        	EQU  00060h
cmosEnableDev5Oprom                     	EQU  00063h
cmosEnable5                             	EQU  00066h
cmosPciDev5Master                       	EQU  00069h
cmosCh1NativeIde5                       	EQU  0006Ch
cmosCh2NativeIde5                       	EQU  0006Fh
cmosPciDev5Latency                      	EQU  00072h
cmosCommandByte6                        	EQU  00075h
cmosEnableDev6Oprom                     	EQU  00078h
cmosEnable6                             	EQU  0007Bh
cmosPciDev6Master                       	EQU  0007Eh
cmosCh1NativeIde6                       	EQU  00081h
cmosCh2NativeIde6                       	EQU  00084h
cmosPciDev6Latency                      	EQU  00087h
cmosCommandByte7                        	EQU  0008Ah
cmosEnableDev7Oprom                     	EQU  0008Dh
cmosEnable7                             	EQU  00090h
cmosPciDev7Master                       	EQU  00093h
cmosCh1NativeIde7                       	EQU  00096h
cmosCh2NativeIde7                       	EQU  00099h
cmosPciDev7Latency                      	EQU  0009Ch
cmosCommandByte8                        	EQU  0009Fh
cmosEnableDev8Oprom                     	EQU  000A2h
cmosEnable8                             	EQU  000A5h
cmosPciDev8Master                       	EQU  000A8h
cmosCh1NativeIde8                       	EQU  000ABh
cmosCh2NativeIde8                       	EQU  000AEh
cmosPciDev8Latency                      	EQU  000B1h
cmosCommandByte9                        	EQU  000B4h
cmosEnableDev9Oprom                     	EQU  000B7h
cmosEnable9                             	EQU  000BAh
cmosPciDev9Master                       	EQU  000BDh
cmosCh1NativeIde9                       	EQU  000C0h
cmosCh2NativeIde9                       	EQU  000C3h
cmosPciDev9Latency                      	EQU  000C6h
cmosCommandByteA                        	EQU  000C9h
cmosEnableDevAOprom                     	EQU  000CCh
cmosEnableA                             	EQU  000CFh
cmosPciDevAMaster                       	EQU  000D2h
cmosCh1NativeIdeA                       	EQU  000D5h
cmosCh2NativeIdeA                       	EQU  000D8h
cmosPciDevALatency                      	EQU  000DBh
cmosCommandByteB                        	EQU  000DEh
cmosEnableDevBOprom                     	EQU  000E1h
cmosEnableB                             	EQU  000E4h
cmosPciDevBMaster                       	EQU  000E7h
cmosCh1NativeIdeB                       	EQU  000EAh
cmosCh2NativeIdeB                       	EQU  000EDh
cmosPciDevBLatency                      	EQU  000F0h
cmosSATACombinedMode                    	EQU  000F3h
cmosSataAhciMode                        	EQU  000F6h
cmosSataVacantPortDisable               	EQU  000F9h
cmosSataPort0HPMode                     	EQU  000FCh
cmosSataPort0ISMode                     	EQU  000FFh
cmosSataPort1HPMode                     	EQU  00102h
cmosSataPort1ISMode                     	EQU  00105h
cmosSataPort2HPMode                     	EQU  00108h
cmosSataPort2ISMode                     	EQU  0010Bh
cmosSataPort3HPMode                     	EQU  0010Eh
cmosSataPort3ISMode                     	EQU  00111h
cmosAPICEnable                          	EQU  00114h
cmosPort1Enb                            	EQU  00117h
cmosPort2Enb                            	EQU  0011Ah
cmosPort3Enb                            	EQU  0011Dh
cmosPort4Enb                            	EQU  00120h
cmosPort5Enb                            	EQU  00123h
cmosPort6Enb                            	EQU  00126h
cmosIGDBrightValue                      	EQU  00129h
cmosFlashSemaphore                      	EQU  0012Ch
cmosDummy                               	EQU  0012Fh
cmosISTConfig                           	EQU  00132h
cmosAlsEnable                           	EQU  00135h
cmosATEMPValue                          	EQU  00138h
cmosCTEMPValue                          	EQU  0013Bh
cmosEmaEnable                           	EQU  0013Eh
cmosMefEnable                           	EQU  00141h
cmosPmTimerInOsEnable                   	EQU  00144h
cmosPTC1Value                           	EQU  00147h
cmosPTC2Value                           	EQU  0014Ah
cmosPTEMPValue                          	EQU  0014Dh
cmosPTSPValue                           	EQU  00150h
cmosRTCS4Wake                           	EQU  00153h
cmosAutoThermal                         	EQU  00156h
cmosCmpEnable                           	EQU  00159h
cmosDtsCalibrate                        	EQU  0015Ch
cmosDts1Scf                             	EQU  0015Fh
cmosDts2Scf                             	EQU  00162h
cmosDiodeScfTemp                        	EQU  00165h
cmosDtsEnable                           	EQU  00168h
cmosEnhCStatesEnable                    	EQU  0016Bh
cmosFastC4Enable                        	EQU  0016Eh
cmosPpm                                 	EQU  00171h
cmosProcHotEnable                       	EQU  00174h
cmosEnThrmMon                           	EQU  00177h
cmosThermalOffset                       	EQU  0017Ah
cmosTscUpdtEnable                       	EQU  0017Dh
cmosAc97ModemPmeEnable                  	EQU  00180h
cmosAmtEnable                           	EQU  00183h
cmosPcieClkReqEnable                    	EQU  00186h
cmosCStatePopDownEnable                 	EQU  00189h
cmosCStatePopUpEnable                   	EQU  0018Ch
cmosClockRunEnable                      	EQU  0018Fh
cmosPcieForceWxEnable                   	EQU  00192h
cmosIchChapEnable                       	EQU  00195h
cmosLanEnable                           	EQU  00198h
cmosRpxAspm                             	EQU  0019Bh
cmosSerialIrqMode                       	EQU  0019Eh
cmosPxeOprom                            	EQU  001A1h
cmosAspmLatCheck                        	EQU  001A4h
cmosSmscUart1Address                    	EQU  001A7h
cmosSmscUart2Address                    	EQU  001AAh
cmosDTSPD                               	EQU  001ADh
cmosPegPortMda                          	EQU  001B0h
cmosThermalThrottle                     	EQU  001B3h
cmosPegAspm                             	EQU  001B6h
cmosPegGpllPdEnable                     	EQU  001B9h
cmosPegForceX1                          	EQU  001BCh
cmosTSSPD                               	EQU  001BFh
cmosCk410Enable                         	EQU  001C2h
cmosCompatRevID                         	EQU  001C5h
cmosCk410SscEnable                      	EQU  001C8h
cmosDb800Enable                         	EQU  001CBh
cmosSscEnable                           	EQU  001CEh
rsvd_0_0                                	EQU  001D1h
cmosRegA                                	EQU  001D4h
cmosDaylightSavings                     	EQU  001D7h
cmosRegB                                	EQU  001DAh
cmosRegC                                	EQU  001DDh
rsvd_D_0                                	EQU  001E0h
cmosValidRamBit                         	EQU  001E3h
rsvd_E_0                                	EQU  001E6h
cmosTimeFailedBit                       	EQU  001E9h
cmosDiskFailedBit                       	EQU  001ECh
rsvd_E_4                                	EQU  001EFh
cmosBadConfigBit                        	EQU  001F2h
cmosBadChecksumBit                      	EQU  001F5h
cmosBadPowerbit                         	EQU  001F8h
cmosShutdown                            	EQU  001FBh
cmosFddType                             	EQU  001FEh
cmosFdd1Type                            	EQU  00201h
cmosFdd0Type                            	EQU  00204h
cmosFdisk1Type                          	EQU  00207h
cmosFdisk0Type                          	EQU  0020Ah
cmosEquipment                           	EQU  0020Dh
cmosBaseRam                             	EQU  00210h
cmosExtRam                              	EQU  00213h
cmosFdisk0ExtType                       	EQU  00216h
cmosFdisk1ExtType                       	EQU  00219h
cmosChecksumHi                          	EQU  0021Ch
cmosChecksumLo                          	EQU  0021Fh
cmosExtended                            	EQU  00222h
cmosCentury                             	EQU  00225h
cmosInPostBit                           	EQU  00228h
cmosConfigFailedBit                     	EQU  0022Bh
cmosResume                              	EQU  0022Eh
cmosExtCachePresent                     	EQU  00231h
cmosCR0                                 	EQU  00234h
cmosCR0NW                               	EQU  00237h
cmosCR0CD                               	EQU  0023Ah
cmosCoprocessor387                      	EQU  0023Dh
cmosExpansionInstalled                  	EQU  00240h
cmosCpuType                             	EQU  00243h
cmosCpuTypeNumber                       	EQU  00246h
cmosCpuTypeFamily                       	EQU  00249h
cmosCsrStatus                           	EQU  0024Ch
cmosCsr2ndBank                          	EQU  0024Fh
cmosCSReg_EBP0                          	EQU  00252h
cmosCSReg_EBP1                          	EQU  00255h
cmosCSReg_EBP2                          	EQU  00258h
cmosCSReg_EBP3                          	EQU  0025Bh
cmosCSReg_EBX2                          	EQU  0025Eh
cmosCSReg_EBX3                          	EQU  00261h
cmosCSReg_SSKPD0                        	EQU  00264h
cmosCSReg_SSKPD1                        	EQU  00267h
cmossaveebp                             	EQU  0026Ah
cmossaveebx                             	EQU  0026Dh
cmosfailflag                            	EQU  00270h
cmoscounter                             	EQU  00273h
cmosLanPower                            	EQU  00276h
cmosBlcValue                            	EQU  00279h
cmosFirstWareLanguage                   	EQU  0027Ch
ssRESET                                 	EQU  0027Fh
cmosEnableDevE2Oprom                    	EQU  00282h
cmosCSRSavedCRC                         	EQU  00285h
cmosCSRSavedChecksum                    	EQU  00288h
cmosUsbHddCapacityType                  	EQU  0028Bh
cmosFanTachoMultiplier1                 	EQU  0028Eh
cmosFanTachoMultiplier3                 	EQU  00291h
cmosFanTachoMultiplier4                 	EQU  00294h
cmosS5PMEDisable                        	EQU  00297h
cmosCsrRestoreCondition                 	EQU  0029Ah
cmosExtMemCnt                           	EQU  0029Dh
cmosA20EnableStatus                     	EQU  002A0h
cmosLanguage                            	EQU  002A3h
cmosInstalledOS                         	EQU  002A6h
cmosCPU_VT_Sup                          	EQU  002A9h
cmosCPU_VT_Ena                          	EQU  002ACh
cmosCPU_NX_Dis                          	EQU  002AFh
cmosCPU_ATM                             	EQU  002B2h
cmosCPU_CPUID                           	EQU  002B5h
cmosCPU_FastStrn                        	EQU  002B8h
cmosCPU_CompFPU                         	EQU  002BBh
cmosCPU_SpltLk                          	EQU  002BEh
cmosCPU_MachCheck                       	EQU  002C1h
cmosCPU_AdjSector                       	EQU  002C4h
cmosCPU_EchoTPR                         	EQU  002C7h
cmosCPU_GV                              	EQU  002CAh
cmosCPU_SMX_Sup                         	EQU  002CDh
cmosNumlock                             	EQU  002D0h
cmosCRC                                 	EQU  002D3h
cmosCpuFreqReset                        	EQU  002D6h
cmosCpuFreqStrap                        	EQU  002D9h
cmosCpuFreqStrapHi                      	EQU  002DCh
cmosKeyclick                            	EQU  002DFh
cmosKeyboardRate                        	EQU  002E2h
cmosKeyboardDelay                       	EQU  002E5h
cmosDontClearMem                        	EQU  002E8h
cmosProcessWarmStart                    	EQU  002EBh
cmosAbove4GBSize                        	EQU  002EEh
cmosSecurNvIch1                         	EQU  002F1h
cmosSecurNvIch2                         	EQU  002F4h
cmosSecurNvIch3                         	EQU  002F7h
cmosSecurNvIch4                         	EQU  002FAh
cmosSecurNvIch5                         	EQU  002FDh
cmosSecurNvIch6                         	EQU  00300h
cmosSecurNvIch7                         	EQU  00303h
cmosSecurNvIch8                         	EQU  00306h
cmosSecurNvIch9                         	EQU  00309h
cmosSecurNvIchA                         	EQU  0030Ch
cmosSecurNvIchB                         	EQU  0030Fh
cmos1394Support                         	EQU  00312h
cmos1394Enable                          	EQU  00315h
cmosPciHpEnable                         	EQU  00318h
cmosPciHpBusGap                         	EQU  0031Bh
cmosPciHpIO                             	EQU  0031Eh
cmosPciHpMem                            	EQU  00321h
cmosPciHpPreMem                         	EQU  00324h
cmosBootFirstSpace                      	EQU  00327h
cmosFirstSpaceFound                     	EQU  0032Ah
cmosFirstSpaceMfgMode                   	EQU  0032Dh
cmosFirstSpaceDriveNum                  	EQU  00330h
cmosFirstSpacePsaIndex                  	EQU  00333h
cmosDiagScreenOnly                      	EQU  00336h
cmosPostMemTest                         	EQU  00339h
cmosQkBootErrStat                       	EQU  0033Ch
cmosQkBootEnable                        	EQU  0033Fh
cmosOpenVaultPsa                        	EQU  00342h
cmosOpenCustomPsa                       	EQU  00345h
cmosVaultPsaStatus                      	EQU  00348h
cmosMaintenanceMode                     	EQU  0034Bh
CmosS4wakeupmode                        	EQU  0034Eh
CmosVideoMode                           	EQU  00351h
cmosFwAuthLevel                         	EQU  00354h
cmosPostVgaMode                         	EQU  00357h
cmosacpiEnable                          	EQU  0035Ah
cmosacpiSaveMode                        	EQU  0035Dh
cmosSBF                                 	EQU  00360h
cmosLastBootedOS                        	EQU  00363h
cmosIntelViivDrvr                       	EQU  00366h
cmosacpiHwSignature                     	EQU  00369h
cmosFdisk2ExtType                       	EQU  0036Ch
cmosProtocolType2                       	EQU  0036Fh
cmosHdd2Sel                             	EQU  00372h
cmosCylinders2                          	EQU  00375h
cmosHeads2                              	EQU  00378h
cmosSectors2                            	EQU  0037Bh
cmosFdisk3ExtType                       	EQU  0037Eh
cmosProtocolType3                       	EQU  00381h
cmosHdd3Sel                             	EQU  00384h
cmosCylinders3                          	EQU  00387h
cmosHeads3                              	EQU  0038Ah
cmosSectors3                            	EQU  0038Dh
cmos48BitAddr0                          	EQU  00390h
cmos48BitAddr1                          	EQU  00393h
cmos48BitAddr2                          	EQU  00396h
cmos48BitAddr3                          	EQU  00399h
cmos48BitAddr4                          	EQU  0039Ch
cmos48BitAddr5                          	EQU  0039Fh
cmos48BitAddr6                          	EQU  003A2h
cmos48BitAddr7                          	EQU  003A5h
cmosSmartMonitor                        	EQU  003A8h
cmosFdisk4ExtType                       	EQU  003ABh
cmosProtocolType4                       	EQU  003AEh
cmosHdd4Sel                             	EQU  003B1h
cmosFdisk5ExtType                       	EQU  003B4h
cmosProtocolType5                       	EQU  003B7h
cmosHdd5Sel                             	EQU  003BAh
cmosFdisk6ExtType                       	EQU  003BDh
cmosProtocolType6                       	EQU  003C0h
cmosHdd6Sel                             	EQU  003C3h
cmosFdisk7ExtType                       	EQU  003C6h
cmosProtocolType7                       	EQU  003C9h
cmosHdd7Sel                             	EQU  003CCh
cmosFddAccess                           	EQU  003CFh
cmosMpSpecRev                           	EQU  003D2h
cmosMpDirectPCIEntries                  	EQU  003D5h
cmosBspBistLow0                         	EQU  003D8h
cmosBspBistLow8                         	EQU  003DBh
cmosBspBistHigh0                        	EQU  003DEh
cmosBspBistHigh8                        	EQU  003E1h
cmosCPU_Multi_Cr                        	EQU  003E4h
cmosSLPEnable                           	EQU  003E7h
cmosHddPreDelay                         	EQU  003EAh
cmosUserPassword                        	EQU  003EDh
cmosSuperPassword                       	EQU  003F0h
cmosPasswordOnBoot                      	EQU  003F3h
cmosHddProtect                          	EQU  003F6h
cmosHTEnable                            	EQU  003F9h
cmosMemCacheEnable                      	EQU  003FCh
cmosCacheL3Enb                          	EQU  003FFh
cmosCacheL3Present                      	EQU  00402h
cmosCache512                            	EQU  00405h
cmosCache640                            	EQU  00408h
cmosCacheA000                           	EQU  0040Bh
cmosCacheB000                           	EQU  0040Eh
cmosCacheVid                            	EQU  00411h
cmosCacheC800                           	EQU  00414h
cmosCacheCC00                           	EQU  00417h
cmosCacheD000                           	EQU  0041Ah
cmosCacheD400                           	EQU  0041Dh
cmosCacheD800                           	EQU  00420h
cmosCacheDC00                           	EQU  00423h
cmosCacheE000                           	EQU  00426h
cmosCacheE400                           	EQU  00429h
cmosCacheE800                           	EQU  0042Ch
cmosCacheEC00                           	EQU  0042Fh
cmosCacheSys                            	EQU  00432h
cmosCacheExtended                       	EQU  00435h
cmosSmbiosLogStatus                     	EQU  00438h
cmosSmbiosLogValid                      	EQU  0043Bh
cmosSmbiosLogFull                       	EQU  0043Eh
cmosSmbiosLogChangeToken                	EQU  00441h
cmosSmbiosUnreadEvents                  	EQU  00444h
cmosEventLogControl                     	EQU  00447h
cmosEventLogEnable                      	EQU  0044Ah
cmosECCLogEnable                        	EQU  0044Dh
cmosPostLogEnable                       	EQU  00450h
cmosSetupEvntLogClr                     	EQU  00453h
cmosEventLogClrByte                     	EQU  00456h
cmosEventLogClr                         	EQU  00459h
cmosEventLogClrRsvd                     	EQU  0045Ch
cmosEventLogClrCksum                    	EQU  0045Fh
cmosGPNVLockValue                       	EQU  00462h
cmosStructTableLength                   	EQU  00465h
cmosIGDF1Enable                         	EQU  00468h
cmosIGDPanelScaling                     	EQU  0046Bh
cmosIGDPanelType                        	EQU  0046Eh
cmosS3PopupEnable                       	EQU  00471h
cmosBiaCfg                              	EQU  00474h
cmosIGDDvmtMode                         	EQU  00477h
cmosIGDBootType                         	EQU  0047Ah
cmosInvCfg                              	EQU  0047Dh
cmosIGDStolenMemorySize                 	EQU  00480h
cmosIGDTotalMemorySize                  	EQU  00483h
cmosSscPercent                          	EQU  00486h
cmosIGDSdtvStandard                     	EQU  00489h
cmosIGDTvMinorNTSC                      	EQU  0048Ch
cmosIGDTvMinorPAL                       	EQU  0048Fh
cmosIGDTvMinorSECAM                     	EQU  00492h
cmosIGDHdtvStandard                     	EQU  00495h
cmosIGDTvMinorSMPTE240M                 	EQU  00498h
cmosIGDTvMinorSMPTE295M                 	EQU  0049Bh
cmosIGDTvMinorSMPTE296M                 	EQU  0049Eh
cmosIGDHdtvMinorCEA7702                 	EQU  004A1h
cmosIGDHdtvMinorCEA7703                 	EQU  004A4h
cmosIGDHdtvMinorBT                      	EQU  004A7h
cmosPegPortEnable                       	EQU  004AAh
cmosIGDF0Enable                         	EQU  004ADh
cmosCH0RCVENSlave                       	EQU  004B0h
cmosCH1RCVENSlave                       	EQU  004B3h
cmosCoarseRCVEN                         	EQU  004B6h
cmosMediumRCVEN                         	EQU  004B9h
cmosSummaryScreen                       	EQU  004BCh
cmosIPLOrder0                           	EQU  004BFh
cmosIPLOrder1                           	EQU  004C2h
cmosIPLOrder2                           	EQU  004C5h
cmosIPLOrder3                           	EQU  004C8h
cmosIPLOrder4                           	EQU  004CBh
cmosIPLOrder5                           	EQU  004CEh
cmosIPLOrder6                           	EQU  004D1h
cmosIPLOrder7                           	EQU  004D4h
cmosDisplaySetupPrompt                  	EQU  004D7h
cmosDisplayF1Prompt                     	EQU  004DAh
cmosCurrentIPL                          	EQU  004DDh
cmosSelectionIPL                        	EQU  004E0h
cmosInBootMenu                          	EQU  004E3h
cmosMbExtraRemovable0                   	EQU  004E6h
cmosMbExtraRemovable1                   	EQU  004E9h
cmosMbExtraRemovable2                   	EQU  004ECh
cmosMbExtraRemovable3                   	EQU  004EFh
cmosMbExtraRemovable4                   	EQU  004F2h
cmosMbExtraRemovable5                   	EQU  004F5h
cmosMbExtraRemovable6                   	EQU  004F8h
cmosMbExtraRemovable7                   	EQU  004FBh
cmosMbExtraRemovable8                   	EQU  004FEh
cmosMbExtraRemovable9                   	EQU  00501h
cmosMbExtraRemovableA                   	EQU  00504h
cmosMbExtraRemovableB                   	EQU  00507h
cmosSystemBIOS                          	EQU  0050Ah
cmosVideoBIOS                           	EQU  0050Dh
cmosMemoryHole                          	EQU  00510h
cmosCsShadowC800                        	EQU  00513h
cmosCsShadowCC00                        	EQU  00516h
cmosCsShadowD000                        	EQU  00519h
cmosCsShadowD400                        	EQU  0051Ch
cmosCsShadowD800                        	EQU  0051Fh
cmosCsShadowDC00                        	EQU  00522h
cmosSmartEnable0                        	EQU  00525h
cmosSmartEnable1                        	EQU  00528h
cmosSmartEnable2                        	EQU  0052Bh
cmosSmartEnable3                        	EQU  0052Eh
cmosSmartEnable4                        	EQU  00531h
cmosSmartEnable5                        	EQU  00534h
cmosSmartEnable6                        	EQU  00537h
cmosSmartEnable7                        	EQU  0053Ah
cmosUdmaMode0                           	EQU  0053Dh
cmosUdmaMode1                           	EQU  00540h
cmosUdmaMode2                           	EQU  00543h
cmosUdmaMode3                           	EQU  00546h
cmosUdmaMode4                           	EQU  00549h
cmosUdmaMode5                           	EQU  0054Ch
cmosUdmaMode6                           	EQU  0054Fh
cmosUdmaMode7                           	EQU  00552h
cmosHdd0Auto                            	EQU  00555h
cmosHdd0MultiInfo                       	EQU  00558h
cmosHddBlockSize0                       	EQU  0055Bh
cmosHdd0MaxMulti                        	EQU  0055Eh
cmosXferMode0                           	EQU  00561h
cmosFDCycleTimedrv0                     	EQU  00564h
cmosHdd0LBAMode                         	EQU  00567h
cmosRemovable0                          	EQU  0056Ah
cmosHdd32BitIO0                         	EQU  0056Dh
cmosHdd1Auto                            	EQU  00570h
cmosHdd1MultiInfo                       	EQU  00573h
cmosHddBlockSize1                       	EQU  00576h
cmosHdd1MaxMulti                        	EQU  00579h
cmosXferMode1                           	EQU  0057Ch
cmosFDCycleTimedrv1                     	EQU  0057Fh
cmosHdd1LBAMode                         	EQU  00582h
cmosRemovable1                          	EQU  00585h
cmosHdd32BitIO1                         	EQU  00588h
cmosHdd2Auto                            	EQU  0058Bh
cmosHdd2MultiInfo                       	EQU  0058Eh
cmosHddBlockSize2                       	EQU  00591h
cmosHdd2MaxMulti                        	EQU  00594h
cmosXferMode2                           	EQU  00597h
cmosFDCycleTimedrv2                     	EQU  0059Ah
cmosHdd2LBAMode                         	EQU  0059Dh
cmosRemovable2                          	EQU  005A0h
cmosHdd32BitIO2                         	EQU  005A3h
cmosHdd3Auto                            	EQU  005A6h
cmosHdd3MultiInfo                       	EQU  005A9h
cmosHddBlockSize3                       	EQU  005ACh
cmosHdd3MaxMulti                        	EQU  005AFh
cmosXferMode3                           	EQU  005B2h
cmosFDCycleTimedrv3                     	EQU  005B5h
cmosHdd3LBAMode                         	EQU  005B8h
cmosRemovable3                          	EQU  005BBh
cmosHdd32BitIO3                         	EQU  005BEh
cmosHdd4Auto                            	EQU  005C1h
cmosHdd4MultiInfo                       	EQU  005C4h
cmosHddBlockSize4                       	EQU  005C7h
cmosHdd4MaxMulti                        	EQU  005CAh
cmosXferMode4                           	EQU  005CDh
cmosFDCycleTimedrv4                     	EQU  005D0h
cmosHdd4LBAMode                         	EQU  005D3h
cmosRemovable4                          	EQU  005D6h
cmosHdd32BitIO4                         	EQU  005D9h
cmosHdd5Auto                            	EQU  005DCh
cmosHdd5MultiInfo                       	EQU  005DFh
cmosHddBlockSize5                       	EQU  005E2h
cmosHdd5MaxMulti                        	EQU  005E5h
cmosXferMode5                           	EQU  005E8h
cmosFDCycleTimedrv5                     	EQU  005EBh
cmosHdd5LBAMode                         	EQU  005EEh
cmosRemovable5                          	EQU  005F1h
cmosHdd32BitIO5                         	EQU  005F4h
cmosHdd6Auto                            	EQU  005F7h
cmosHdd6MultiInfo                       	EQU  005FAh
cmosHddBlockSize6                       	EQU  005FDh
cmosHdd6MaxMulti                        	EQU  00600h
cmosXferMode6                           	EQU  00603h
cmosFDCycleTimedrv6                     	EQU  00606h
cmosHdd6LBAMode                         	EQU  00609h
cmosRemovable6                          	EQU  0060Ch
cmosHdd32BitIO6                         	EQU  0060Fh
cmosHdd7Auto                            	EQU  00612h
cmosHdd7MultiInfo                       	EQU  00615h
cmosHddBlockSize7                       	EQU  00618h
cmosHdd7MaxMulti                        	EQU  0061Bh
cmosXferMode7                           	EQU  0061Eh
cmosFDCycleTimedrv7                     	EQU  00621h
cmosHdd7LBAMode                         	EQU  00624h
cmosRemovable7                          	EQU  00627h
cmosHdd32BitIO7                         	EQU  0062Ah
cmosHddDosCompat                        	EQU  0062Dh
cmosCylinders0                          	EQU  00630h
cmosHeads0                              	EQU  00633h
cmosSectors0                            	EQU  00636h
cmosProtocolType0                       	EQU  00639h
cmosCylinders1                          	EQU  0063Ch
cmosHeads1                              	EQU  0063Fh
cmosSectors1                            	EQU  00642h
cmosProtocolType1                       	EQU  00645h
cmosHdd0Sel                             	EQU  00648h
cmosHdd1Sel                             	EQU  0064Bh
cmosFdiskIdeEnable                      	EQU  0064Eh
cmosSATAEnable                          	EQU  00651h
cmosATANative                           	EQU  00654h
cmosSataRaidEnable                      	EQU  00657h
cmosEnergyLakeEnable                    	EQU  0065Ah
cmosHPETEnable                          	EQU  0065Dh
cmosHPETBase                            	EQU  00660h
cmosAzaliaEnable                        	EQU  00663h
cmosPort80hCycles                       	EQU  00666h
cmosUsbLegacy                           	EQU  00669h
cmosUSB1Enable                          	EQU  0066Ch
cmosUSB2Enable                          	EQU  0066Fh
cmosUSB3Enable                          	EQU  00672h
cmosUSB4Enable                          	EQU  00675h
cmosUSB7Enable                          	EQU  00678h
cmosPnpClearESCD                        	EQU  0067Bh
cmosPnpMaxCsn                           	EQU  0067Eh
cmosPnpReadDataPort                     	EQU  00681h
cmosPciIrq1                             	EQU  00684h
cmosPciIrq2                             	EQU  00687h
cmosPciIrq3                             	EQU  0068Ah
cmosPciIrq4                             	EQU  0068Dh
cmosPciIrq5                             	EQU  00690h
cmosPciIrq6                             	EQU  00693h
cmosPciIrq7                             	EQU  00696h
cmosPciIrq8                             	EQU  00699h
cmosExcludeIRQ3                         	EQU  0069Ch
cmosExcludeIRQ4                         	EQU  0069Fh
cmosExcludeIRQ5                         	EQU  006A2h
cmosExcludeIRQ7                         	EQU  006A5h
cmosExcludeIRQ9                         	EQU  006A8h
cmosExcludeIRQ10                        	EQU  006ABh
cmosExcludeIRQ11                        	EQU  006AEh
cmosExcludeIRQ12                        	EQU  006B1h
cmosExcludeIRQ14                        	EQU  006B4h
cmosExcludeIRQ15                        	EQU  006B7h
cmosConsoleConfig                       	EQU  006BAh
cmosConsoleBaudRate                     	EQU  006BDh
cmosConsoleType                         	EQU  006C0h
cmosConsoleFlowControl                  	EQU  006C3h
cmosConsoleConnect                      	EQU  006C6h
cmosConsoleEnAftPst                     	EQU  006C9h
cmosConsoleVidPages                     	EQU  006CCh
cmosPwrBtn                              	EQU  006CFh
cmosOnesAll                             	EQU  006D2h
cmosOnAcLoss                            	EQU  006D5h
cmosCalledInPOST                        	EQU  006D8h
cmosPmPMMode                            	EQU  006DBh
cmosPmStandbyTimer                      	EQU  006DEh
cmosPmSuspendTimer                      	EQU  006E1h
cmosPmResTime                           	EQU  006E4h
cmosPmResTimeSec                        	EQU  006E7h
cmosPmResTimeMin                        	EQU  006EAh
cmosPmResTimeHour                       	EQU  006EDh
cmosPmHDDTimer                          	EQU  006F0h
cmosPmVideoTimer                        	EQU  006F3h
cmosRFDAttemptsPlus1                    	EQU  006F6h
cmosacpiS4BiosEnable                    	EQU  006F9h
cmosPmSuspendMode                       	EQU  006FCh
cmosPmResRing                           	EQU  006FFh
cmosPmIntrdsel                          	EQU  00702h
cmossions374ComAConfig                  	EQU  00705h
cmossions374ComAAddr                    	EQU  00708h
cmossions374ComAIrq                     	EQU  0070Bh
cmosSioNs374ComBConfig                  	EQU  0070Eh
cmosSioNs374ComBMode                    	EQU  00711h
cmosSioNs374ComBAddr                    	EQU  00714h
cmosSioNs374ComBIrq                     	EQU  00717h
cmossions374FdcConfig                   	EQU  0071Ah
cmossions374FdcAddr                     	EQU  0071Dh
cmossions374LptConfig                   	EQU  00720h
cmossions374LptMode                     	EQU  00723h
cmossions374LptAddr                     	EQU  00726h
cmossions374LptIrq                      	EQU  00729h
cmossions374LptDma                      	EQU  0072Ch
cmosMcdSecured                          	EQU  0072Fh
yetin
New visitors - please read the rules.
Posts: 1
Joined: Fri Oct 12, 2007 2:59 am

Fri Oct 12, 2007 3:17 am

When compiling the Phoenix BIOS a couple of files are created. Sometimes one or both of these files are included in the BIOS update packages shipped by motherboard manufacturers.
Specifically, how did you obtain those nvtoken.lst and nvram.lst files? As I understand, those lst files are only for your FE but what about other people's models? Can you kindly provide simple instructions to collecting those files, so other people can post their results, because they seem to be the keys to decrypting what the symcmos utility generates. Were they somehow extracted from the WPH BIOS image file? Thanks!
jwhiteheadcc
New visitors - please read the rules.
Posts: 5
Joined: Fri Oct 12, 2007 9:10 am

Fri Oct 12, 2007 9:22 am

The Dell BIOSes are released in a DOS EXE format (also, windows tool and floppypack image). The A11 and A12 versions for my C400 are definitely Phoenix but I haven't checked the others on Dell's site. I'm hoping that comparisons between the different manufactur's personalized BIOSes will help. Ironicly, I found this site looking for a "Phoenix rom hacking" tool for my Dell C400. I figured why reinvent the wheel as far as BIOS extractors/inserters is concerned. I'll be looking up that editing tool mentioned, thanks all!

To extract the raw uncompressed binary image from the DOS executables:
<executable name> /writeromfile
So for C400_A12.exe, I'd just type "C400_A12 /writeromfile" to get an image file called "C400_A12.ROM". Pretty simple, eh? :)

This thread was a very interesting read, for a BIOS (de/re)coder like me.
IntuitiveNipple
BIOS Newbie
Posts: 31
Joined: Tue May 29, 2007 12:24 am

Fri Oct 12, 2007 9:52 am

yetin wrote:Specifically, how did you obtain those nvtoken.lst and nvram.lst files? As I understand, those lst files are only for your FE but what about other people's models?
No, the examples are not for the Vaio FE range. They are from a server motherboard based on an Intel 945GM chipset.

As I said, some motherboard manufacturers ship their BIOS update packages with the two files included. More often, it is just the nvram.lst file. These files are unintentional leakage - they are supposed to be removed before the update package is shipped to customers, but some Phoenix OEMs that customise their BIOSes (such as Intel) include these files.

To find other examples you'll need to collect and extract as many BIOS update packages as you can and hope the nv*.lst files are included. By building up a collection it is possible to infer the common Token symbols.
IntuitiveNipple
BIOS Newbie
Posts: 31
Joined: Tue May 29, 2007 12:24 am

Fri Oct 12, 2007 4:29 pm

To help hackers learn more about how it all hangs together I'm going to attach the contents of the Phoenix BIOS Editor's compilation log (ROM.LOG) for the BIOS related to the nvram.lst and nvtoken.lst reported here.

I'm also linking to the raw files and in particular the 23,000-line bios.map that contains all the public symbols and addresses/offsets (of real help in understanding the internal structure of the BIOS modules themselves).

In particular, you'll see that the BIOS function I've been calling dispatchManager() is, in fact, called dispatchLocalCall (E140:1BC1h) and it indirectly calls the real dispatchManager (DMCG:015Ch).

You'll also see that BIOS module BCG (in bcg.rom module) contains NVTOKENSEG, which contains (amongst others) the symbol _nvTokenSegStart_ (F000:745Bh). Following this trail you'll discover the symbol nvTokenLabel (F000:7463h) denotes the base (index 0) of the BIOS Token-table - the first entry is cmosDviSSEnable. The end of the table is marked by nvTokenLabelEnd.

From nvtoken.lst we know that cmosCPU_VT_Ena = 002ACh. We can calculate the location in the table of this Token using:

nvtokenLabel + cmos_CPU_VT_Ena
F000:7463 + 002AC = F000:770F

From what little analysis I've done of this so far I'm expecting that the table containing groups of 3-byte entries that hold the data (start, width, media, and flags) reported in nvram.lst.

The BIOS would need start and width to translate a Token ID into the bits used in NVRAM.

From nvram.lst, it appears that:

media uses 4 bits (0 - 7)
start uses up to 16 bits (0 - 65535/32767/16383/8191)
width uses 8 bits (0 - 255)
flags uses 8 bits (00000000 - 11111111)

To fit those into 24 bits (3 bytes) I'd guess they can do away with either:
  • width (8 bits), since it can be calculated from next_start - this_start
  • start (16 bits), since it can be calculated by summing the widths of Token[0] ... Token[n-1]
Or possibly start only uses 12 bits.

This would explain why the Token IDs increment by 3. I guess originally the Token IDs were byte indexes. As NVRAM was required to store many more settings than the original CMOS RAM in the RTC, it looks as if the table was extended to contain 3-byte elements but to maintain backward compatibility the indexing remained based on 1-byte blocks. In other words, each index into the table needs to be a multiple of 3.

The binary ROM images I've looked at so far appear to have these offsets zeroed but I suspect there's some translation at work and we need to locate an alternate starting offset within the BIOS images.

ROM.LOG

Code: Select all

Prepare v2.08.16.00  Mar  7 2005    
(c) Phoenix Technologies Ltd.

SCRIPT FILE: rom.scr
EXECUTION TIMESTAMP: Mon Feb 12 17:26:06 2007


PREPARE/CATENATE Command Parser Ver 2.05.03.00  Mar  7 2005
Parsing: 'rom.scr'

     Line: 87  BANKS -N:1 -S:1024		
     Line: 95  COMPRESS  LZINT			
     Line:100  BOOTBLOCK bb.bin -S:64		
     Line:106  ROMEXEC	  romexec.rom		
     Line:107  ROMEXEC	  preshad.rom -Z	
     Line:108  BIOSCODE  bcg.rom		
     Line:109  BIOSCODE  fixed.rom		
     Line:110  BIOSCODE  packed.rom		
     Line:111  BIOSCODE  opcg.rom		
     Line:112  BIOSCODE  scg.rom		
     Line:113  BIOSCODE  postcode.rom          
     Line:114  BIOSCODE  pnpcode.rom		
     Line:115  DISPLAY	  dispman.rom		
     Line:116  STRINGS	  strings.rom		
     Line:119  DECOMPCODE	decomp.rom	
     Line:124  OPROM  vga.bin -X			
     Line:125  OPROM  b57pxee.bin -x   
     Line:126  OPROM  raid_mob.bin -X			
     Line:131  SETUP	  setup.bin
     Line:132  TEMPLATE  nodes.rom
     Line:137  MISER	miser.rom		
     Line:138  MODULE	smi.rom -C:Q0		
     Line:143  MODULE	usbhigh.rom -C:H0
     Line:148  ACPI	calistga.aml
     Line:149  ACPI	facp.bin
     Line:150  ACPI	apic.bin
     Line:151  ACPI	hpet.bin -X			
     Line:152  ACPI	mcfg.bin
     Line:153  ACPI	tcpa.bin -X			
     Line:158  HOLE -S:64  -A:0xFFF60000	
     Line:162  HOLE -S:56 -A:0xFFF82000		
     Line:167  BIOSENTRY -A:0xFFFE0000
     Line:172  UPDATE	  p6update.rom	-A:0xFFF10000	

Parsing: 'h:\hf5802\ROM.ICR'

     Line:  6  MODULE $(NUBIOS)\FEATURES\SECURITY\TCG\TPM\INFN\9630.002\tpmmpdrv.rom -C:Y0 
     Line:  7  LOGO BOOTSCRN.BIN 
     Line:  8  LOGO SCREEN1.BIN 
     Line:  9  MODULE $(NUBIOS)\MODULES\AUTHMOD\STROMP.bin -C:K0 


PREPARE/CATENATE Command Parser END

Global Compression Mode = LZINT
Module: BOOTBLOCK     
Module: ROMEXEC       
Module: ROMEXEC       
Module: BIOSCODE      * COMPRESSED *
Module: BIOSCODE      * COMPRESSED *
Module: BIOSCODE      * COMPRESSED *
Module: BIOSCODE      * COMPRESSED *
Module: BIOSCODE      * COMPRESSED *
Module: BIOSCODE      * COMPRESSED *
Module: BIOSCODE      * COMPRESSED *
Module: DISPLAY       * COMPRESSED *
Module: STRINGS       * COMPRESSED *
Module: DECOMPCODE    
Module: OPROM         
Module: OPROM         
Module: OPROM         
Module: SETUP         * COMPRESSED *
Module: TEMPLATE      * COMPRESSED *
Module: MISER         * COMPRESSED *
Module: MODULE        * COMPRESSED *
ERROR: Compressed file is >= Expanded file!
Module: MODULE        * COMPRESSED *
Module: ACPI          * COMPRESSED *
Module: ACPI          * COMPRESSED *
Module: ACPI          * COMPRESSED *
Module: ACPI          
Module: ACPI          * COMPRESSED *
Module: ACPI          
Module: UPDATE        
Module: MODULE        * COMPRESSED *
Module: LOGO          * COMPRESSED *
Module: LOGO          * COMPRESSED *
Module: MODULE        * COMPRESSED *
32 Files Processed    22 Files Compressed.

Prepare Completed with    1 Errors.
Catenate v2.98.17.00  Feb 17 2005    
(c) Phoenix Technologies Ltd.

Catenate Start 02/12/07 17:26:09

PREPARE/CATENATE Command Parser Ver 2.05.02.00  Feb 16 2005
Parsing: 'rom.scr'

     Line: 87  BANKS -N:1 -S:1024		
     Line: 95  COMPRESS  LZINT			
     Line:100  BOOTBLOCK bb.bin -S:64		
     Line:106  ROMEXEC	  romexec.rom		
     Line:107  ROMEXEC	  preshad.rom -Z	
     Line:108  BIOSCODE  bcg.rom		
     Line:109  BIOSCODE  fixed.rom		
     Line:110  BIOSCODE  packed.rom		
     Line:111  BIOSCODE  opcg.rom		
     Line:112  BIOSCODE  scg.rom		
     Line:113  BIOSCODE  postcode.rom          
     Line:114  BIOSCODE  pnpcode.rom		
     Line:115  DISPLAY	  dispman.rom		
     Line:116  STRINGS	  strings.rom		
     Line:119  DECOMPCODE	decomp.rom	
     Line:124  OPROM  vga.bin -X			
     Line:125  OPROM  b57pxee.bin -x   
     Line:126  OPROM  raid_mob.bin -X			
     Line:131  SETUP	  setup.bin
     Line:132  TEMPLATE  nodes.rom
     Line:137  MISER	miser.rom		
     Line:138  MODULE	smi.rom -C:Q0		
     Line:143  MODULE	usbhigh.rom -C:H0
     Line:148  ACPI	calistga.aml
     Line:149  ACPI	facp.bin
     Line:150  ACPI	apic.bin
     Line:151  ACPI	hpet.bin -X			
     Line:152  ACPI	mcfg.bin
     Line:153  ACPI	tcpa.bin -X			
     Line:158  HOLE -S:64  -A:0xFFF60000	
     Line:162  HOLE -S:56 -A:0xFFF82000		
     Line:167  BIOSENTRY -A:0xFFFE0000
     Line:172  UPDATE	  p6update.rom	-A:0xFFF10000	

Parsing: 'h:\hf5802\ROM.ICR'

     Line:  6  MODULE $(NUBIOS)\FEATURES\SECURITY\TCG\TPM\INFN\9630.002\tpmmpdrv.rom -C:Y0 
     Line:  7  LOGO BOOTSCRN.BIN 
     Line:  8  LOGO SCREEN1.BIN 
     Line:  9  MODULE $(NUBIOS)\MODULES\AUTHMOD\STROMP.bin -C:K0 


PREPARE/CATENATE Command Parser END


PART DESCRIPTION: 1 Banks of 1024 kBytes     (1024 KBytes     8 MegaBits)


                            KNOWN CLASS CODES
-------------------------------------------------------------------------
   $ - MAC                  * - AUTOGEN              @ - STARTUP           
   A - ACPI                 B - BIOSCODE             C - UPDATE            
   D - DISPLAY              E - SETUP                F - MARKS             
   G - DECOMPCODE           I - BOOTBLOCK            L - LOGO              
   M - MISER                N - ROMPILOTLOAD         O - NETWORK           
   P - ROMPILOTINIT         R - OPROM                S - STRINGS           
   T - TEMPLATE             U - USER                 W - WAV               
   X - ROMEXEC           
------------------------------------------------------------------------

================================== MODULE MAP ================================
Class Code
. Instance
. .
C I    B   START       END     LENGTH  B  LINK1     B  LINK2    MODULE NAME
----   -----------  ---------  ------  -----------  ----------- ------------
I  0   0 FFFF 0000  FFFF FFFF   10000     -----         -----   BB.MOD
----   0 FFFE FFFD  FFFE FFFF       3     -----         -----   FREE
X  0   0 FFFE 8E5D  FFFE FFFC    71A0  0 FFFE 82EF      -----   ROMEXEC.MOD
D  0   0 FFFE 82EF  FFFE 8E5C     B6E  0 FFFE 7EA4      -----   DISPMAN.MOD
G  0   0 FFFE 7EA4  FFFE 82EE     44B  0 FFFE 7E5C      -----   DECOMP.MOD
H  0   0 FFFE 7E5C  FFFE 7EA3      48  0 FFFE 6566      -----   USBHIGH.MOD
A  0   0 FFFE 6566  FFFE 7E5B    18F6  0 FFFE 64E3      -----   CALISTGA.MOD
A  1   0 FFFE 64E3  FFFE 6565      83  0 FFFE 6474      -----   FACP.MOD
A  2   0 FFFE 6474  FFFE 64E2      6F  0 FFFE 6421      -----   APIC.MOD
A  3   0 FFFE 6421  FFFE 6473      53  0 FFFE 63CF      -----   HPET.MOD
A  4   0 FFFE 63CF  FFFE 6420      52  0 FFFE 6381      -----   MCFG.MOD
A  5   0 FFFE 6381  FFFE 63CE      4E  0 FFFE 59E6      -----   TCPA.MOD
Y  0   0 FFFE 59E6  FFFE 6380     99B  0 FFFE 59A3      -----   h:\hf5802\FEATURES\SECURITY\TCG\TPM\INFN\9630.002\TPMMPDRV.MOD
*  0   0 FFFE 59A3  FFFE 59E5      43  0 FFFE 4FE0      -----   AUTOGEN.MOD
B  0   0 FFFE 4FE0  FFFE 59A2     9C3  0 FFFE 0005  0 FFF9 0000 BCG.MOD (0)
X  1   0 FFFE 0005  FFFE 4FDF    4FDB  0 FFFD B059      -----   PRESHAD.MOD
----   0 FFFE 0004  FFFE 0004       1     -----         -----   FREE
----   0 FFFE 0000  FFFE 0003       4     -----         -----   BIOSENTRY
S  0   0 FFFD B059  FFFD FFFF    4FA7  0 FFFC B03E      -----   STRINGS.MOD
R  0   0 FFFC B03E  FFFD B058   1001B  0 FFFB C023      -----   VGA.MOD
R  1   0 FFFB C023  FFFC B03D    F01B  0 FFFA E408      -----   B57PXEE.MOD
R  2   0 FFFA E408  FFFB C022    DC1B  0 FFFA A3CC      -----   RAID_MOB.MOD
E  0   0 FFFA A3CC  FFFA E407    403C  0 FFFA 6511      -----   SETUP.MOD
T  0   0 FFFA 6511  FFFA A3CB    3EBB  0 FFFA 11C8      -----   NODES.MOD
M  0   0 FFFA 11C8  FFFA 6510    5349  0 FFF9 A2AB      -----   MISER.MOD
Q  0   0 FFF9 A2AB  FFFA 11C7    6F1D  0 FFF9 8142      -----   SMI.MOD
L  0   0 FFF9 8142  FFF9 A2AA    2169  0 FFF9 7548      -----   BOOTSCRN.MOD
L  1   0 FFF9 7548  FFF9 8141     BFA  0 FFF9 2C39      -----   SCREEN1.MOD
K  0   0 FFF9 2C39  FFF9 7547    490F  0 FFF7 2B48      -----   h:\hf5802\MODULES\AUTHMOD\STROMP.MOD
----   0 FFF9 0000  FFF9 2C38    2C39     -----     0 FFF7 DD37 BCG.MOD (1)
----   0 FFF8 2000  FFF8 FFFF    E000     -----         -----   (null)
----   0 FFF8 0000  FFF8 1FFF    2000     -----         -----   ESCD
----   0 FFF7 DD37  FFF7 FFFF    22C9     -----         -----   BCG.MOD (2)
B  1   0 FFF7 2B48  FFF7 DD36    B1EF  0 FFF7 0000      -----   FIXED.MOD (0)
B  2   0 FFF7 0000  FFF7 2B47    2B48  0 FFF5 56FE  0 FFF5 758A PACKED.MOD (0)
----   0 FFF6 0000  FFF6 FFFF   10000     -----         -----   (null)
----   0 FFF5 758A  FFF5 FFFF    8A76     -----         -----   PACKED.MOD (1)
B  3   0 FFF5 56FE  FFF5 7589    1E8C  0 FFF5 4211      -----   OPCG.MOD (0)
B  4   0 FFF5 4211  FFF5 56FD    14ED  0 FFF5 1516      -----   SCG.MOD (0)
B  5   0 FFF5 1516  FFF5 4210    2CFB  0 FFF4 8512      -----   POSTCODE.MOD (0)
B  6   0 FFF4 8512  FFF5 1515    9004  0 FFF1 0000      -----   PNPCODE.MOD (0)
----   0 FFF1 F81B  FFF4 8511   28CF7     -----         -----   FREE
C  0   0 FFF1 0000  FFF1 F81A    F81B     -----         -----   P6UPDATE.MOD
----   0 FFF0 0000  FFF0 FFFF   10000     -----         -----   FREE

==============================================================================
1st Link = Bank 0  Address: FFFE 8E5D

NOTES: Link1 is the module linkage chain.
       Link2 is the linkage within a fragmented module.

Total BIOS Size:     C7305h/  815877
Total Free Space:    38CFBh/  232699
ROM Size:           100000h/ 1048576

CHECKSUM AT: 0EFFFC(in File)   VALUE: BC

0 Errors/0 Warnings.

Catenate Done 02/12/07 17:26:10
Dhalsim
New visitors - please read the rules.
Posts: 4
Joined: Sat Oct 20, 2007 3:01 pm

Sat Oct 20, 2007 3:31 pm

Hi all there,

First of all I was very happy to join this forum. This is the very first forum I registered in about 5 years, I decided not to register anymore in forums but I really cannot resist to this one.

So thanks for the great advices by poeople near here i was able to patch the bios of an Acer 5684 (bios version 3.50) in order to enable the VT flag.
I disassambled the BIOSCOD6.ROM in my bios version and I easly found this branch of code:

Code: Select all


0000C4F5  6660              pushad
0000C4F7  6633C0            xor eax,eax
0000C4FA  FEC0              inc al
0000C4FC  0FA2              cpuid
0000C4FE  3D460F            cmp ax,0xf46
0000C501  730A              jnc 0xc50d
0000C503  3DE106            cmp ax,0x6e1
0000C506  7243              jc 0xc54b
0000C508  3D000F            cmp ax,0xf00
0000C50B  773E              ja 0xc54b
0000C50D  66B93A000000      mov ecx,0x3a
0000C513  0F32              rdmsr
0000C515  668BD8            mov ebx,eax
0000C518  B80F03            mov ax,0x30f
0000C51B  9A3F3D00F0        call 0xf000:0x3d3f
0000C520  741C              jz 0xc53e
0000C522  B81203            mov ax,0x312
0000C525  9A3F3D00F0        call 0xf000:0x3d3f
0000C52A  7412              jz 0xc53e
0000C52C  6683CB04          or ebx,byte +0x4
0000C530  B83003            mov ax,0x330
0000C533  9A3F3D00F0        call 0xf000:0x3d3f
0000C538  7404              jz 0xc53e
0000C53A  6683CB02          or ebx,byte +0x2
0000C53E  668BC3            mov eax,ebx
0000C541  A801              test al,0x1
0000C543  7506              jnz 0xc54b
0000C545  6683C801          or eax,byte +0x1
0000C549  0F30              wrmsr
0000C54B  6661              popad
0000C54D  C3                ret

This function is cleary the one that enable or disable the VT Flag but it doesn't show very different beheaviour of the Vaio's ones. It checks almost three different tokens in order to enable. When I dump the cmos values using symcmos with my surprise it shows only one of the three tokens, the other two are 3 byte indexed so symcmos should be able to modify. Finally I manually add the remaining tokens: et voilà the VT flags enabled and perfectly working !

So the tokens to modify/add are:

Code: Select all

...
(0x30f) [0001] // not present in symcmos dump 
...
(0x312) [0001]  // present but 0000 value
...
(0x330) [0001] // not present in symcmos dump

Note: I added the tokens in order in the file, you should not insert the comments on the right to succesfully load the file with symcmos.

Also I notice that the code in this bios seems not to lock the VT flag nor lock it on a "power cycle". I do not verify this but with a simple program I should be able to hack the VT flag without the need to patch the nvram registers but as I do not need to modify the bios settings at all I created an USB key that do the trick with symcmos finally having VT enabled for all the variety OS I have installed on my system without the need to launch any program at boot time. Another elegant solution I considered due to the fact of bios not locking the VT in a power cycle is write a personalized MBR that can enable the VT flag for all OS, but at this point I have no time for this.

For those interested I post also the symcmos dump header:

Code: Select all

(   SYMBOLIC CMOS EDITOR - Version  643710-032   )
(   BIOS Version: NAPA0001.86C.0036.D.0702131325     )
...
EDIT:
I also produced with phoenix bios editor a bios version patched with nop istructions replacing the three jz. I do not flash it because the bad experiences people having rebuilding bioses with phoenix bios editor.

Linux and vmware-server issues using VT flag enabled:

My system is a gentoo 64bit kernel version 2.6.22-gentoo-r8, when loading kvm module or compiling it directly into kernel image vmware-server-1.0.4 locks up the system trying to start a 64bit virtual machines. A simply workaround is simply not load kvm.
pribambas
New visitors - please read the rules.
Posts: 1
Joined: Sat Nov 10, 2007 10:25 am

Sat Nov 10, 2007 10:56 am

Maybe it will be useful for anyone

Sony vaio sz650n/c, bios version R0081S5

(0183) [0001] - enables AHCI
(02EB) [0001] - enables VT-x


Sony vaio sz650n/c, bios version R0101S5

(0189) [0001] - enables AHCI
(02F1) [0001] - enables VT-x
Vaio SZ5 XN/C
New visitors - please read the rules.
Posts: 1
Joined: Thu Nov 15, 2007 5:20 pm

Thu Nov 15, 2007 5:25 pm

If it may be of some use to others, on my Sony Vaio SZ5XN/C (model VGN-SZ5XN_C) with BIOS version R0112N0, I had to set the
(0354) address to value [0001] to enable VT.
trebiani
New visitors - please read the rules.
Posts: 6
Joined: Mon Aug 13, 2007 9:58 pm

Thu Nov 22, 2007 4:55 pm

Vaio SZ5 XN/C wrote:I had to set the (0354) address to value [0001] to enable VT.
i try to enable vt on my sony vaio VGN-AR21S
i'm not sure how to do this - can someone please help me?
IntuitiveNipple
BIOS Newbie
Posts: 31
Joined: Tue May 29, 2007 12:24 am

Fri Nov 23, 2007 10:06 pm

pribambas wrote:Maybe it will be useful for anyone

Sony vaio sz650n/c, bios version R0081S5

(0183) [0001] - enables AHCI
(02EB) [0001] - enables VT-x


Sony vaio sz650n/c, bios version R0101S5

(0189) [0001] - enables AHCI
(02F1) [0001] - enables VT-x
I wonder if the difference between AHCI and VT (0x168) can be translated to other BIOSes? In other words, as discovering the VT code in the BIOS module is easiest, once we have the Token ID of VT is it possible to say that the AHCI Token ID is VT - 0x168 ?
wil
New visitors - please read the rules.
Posts: 1
Joined: Mon Nov 26, 2007 12:23 pm

Mon Nov 26, 2007 12:28 pm

Hi,

On my VGN-TZ21XN the VT flag is at 0363.
Tested and approved !
The bios version is R0052N7 and the code is also in BIOSCOD6.rom.

I will try to activate AHCI later.

Wil
K0ld4
New visitors - please read the rules.
Posts: 3
Joined: Sun Nov 25, 2007 8:25 pm

Fri Nov 30, 2007 5:25 pm

I reversed tokens on my Acer TM8210, but i have problem with CRC. Everytime i write updated tokens to nvram so my BIOS refuse it and reset CMOS to factory state.
Is there any chance to deal with it?
trebiani
New visitors - please read the rules.
Posts: 6
Joined: Mon Aug 13, 2007 9:58 pm

Fri Nov 30, 2007 7:07 pm

trebiani wrote:i'm not sure how to do this - can someone please help me?
here is a great howto: http://opensolaris.org/jive/thread.jspa ... 05&#181505

now i have VT enabled on my AR21S !

that's what i changed: (0195) [0001]
Post Reply