Guide Whitelist remove for 2014+ Lenovo/thinkpad

[kimipm]

i have success whitelist remove my x1 carbon 2nd gen 2014.  i will share what i have done, i would say that is easy. what i have done is to replace LenovoWmaPolicyDxe module from extracting  Wisar and Leokim patched bios. i would think this method will work most lenovo model as i have test a x1 carbon 3rd gen and T450 patched module. 

First i am not response for anything and it is danger to lose your laptop


   What hardware you need:  window pc , [u]CH341A  and a SOIC8 SOP8 test clip [/u]

           Ebay SOIC8 CLIP &  CH341A

   Software: CH341A Programmer 1.26 (working only CH341AFree.exe)
                   CH341A Programmer 1.13
                   HxD
                    Phoenix/Dell/EFI SLIC mod v2.66
    Patched Module. (Try similar model or year)


        X1 carbon gen3 2015 1.06 N14ET28W whitelist+unlock menu source Leokim
        X240 2014 LenovoWmaPolicyDxe whitelist module source Wisar/BDMASTER
        X230 2013 2.62 G2ETA2WW whitelist module source BDMASTER
        T450s 2015 1.17 JBET52WW whitelist+unlock menu   source stevenmirabito
       X220 2011 1.40 8DET70WW whitelist+unlock menu  source raidriar@nbr/BDMASTER
        T430 2012 1.16 G1ET41WW whitelist module   source ucupsz/BDMASTER

1. Open your laptop and find your bios chip and search for it. My is MXIC MX 5L12873F  it is 16Mb chip
   
2. Connect the ch341a and clip to your window machine and laptop
   
3. Open ch341a programmer 1.13/ CH341A.exe click “chip search” if it find your chip then next step, else rechip the chip/
   
4. Open ch341a programmer  1.26/ CH341AFree.exe choose your bios type/size my is 25 spi flash 16MByte
   
5. Click Read
   
6. After done click Save (bios1.bin)
   
7. Repeat 5) save as bios2.bin
   
8. Open HxD “Crtl+k” compare .   bios1.bin and bios2.bin if they are same go to next step otherwise repeat 5)
   
9. Open a new folder call “patch” and copy your bios1.bin there and rename it to patch.bin
   
10. Open Phoenix/Dell/EFI SLIC mod v2.66 original BIOS /patch/patch.bin , waiting it load then click structure
    
11. On the EFI Structure screen explore the module and find DXE Driver {79E0…….. LenovoWmaPolicy Dxe module
    
12. Click “+” and Click PE32+ image section click the box of compress Inserted/Replaced Modules
    
13. Click Replace and browser the file “79E0EDD7-9D1D-4F41-AE1A-F896169E5216.MOD” from X1 carbon gen3  module or X240 patched module or other
    
14. Click exit then Save
    
15. Click Advanced , click box “No SLIC”, “Always allow user modification of modules” then Done
    
16. Click Go , click ok to any popup window.
    
17. Your patch bios is done (patch/patch.bin) the program of phoenix will overwrite the original file!
    
18. Now it is the time to write to the chip
    
19. Open ch341a programmer  1.26/ CH341AFree.exe choose your bios type/size my is 25 spi flash 16MByte
    
20. Click Erase it will erase your chip . must do it before flash
    
21. After  erased , click Open, to your patch bios file /patch/patch.bin
    
22. Click Write and wait 100%
    
23. Now the mod is done, remove the clip and power on the laptop, it will beep 5 x2 time , it will gone once you go to bios setting and restart.
    

please kindly to share your result or different working LenovoWnaPolicyDxe module model for other.

[dizzy2604]

on step 13 get "module count mismatch" , these patched modules are for bios ver. 2.62 but i am on 2.66 (x230)

[kimipm]

on step 13 get "module count mismatch" , these patched modules are for bios ver. 2.62 but i am on 2.66 (x230)

the program will still make the patch bios. you can try it and you can go back to your original bios if it fail.

[dizzy2604]

on step 13 get "module count mismatch" , these patched modules are for bios ver. 2.62 but i am on 2.66 (x230)

the program will still make the patch bios. you can try it and you can go back to your original bios if it fail.

correct way will be to re-apply (adapted to new offsets) BDMaster patch to 2.66 LenovoWmaPolicyDxe.efi, 

here is patched version for 2.66 http://rgho.st/8TLk7WWyT

Code:

79E0EDD7-9D1D-4F41-AE1A-F896169E5216_2207.ROM LenovoWmaPolicyDxe.efi (X230 2.62 BDMaster)

0C39 : 75 19 to 75 00 jnz short loc_C54 to jnz $+2
0C4E : 0F 84 9F 01 00 00 to 90 E9 9F 01 00 00 jz loc_DF3 to nop + jmp loc_DF3
0CA2 : 75 16 to 75 00 jnz short loc_CBA to jnz $+2
0CB8 : 74 1B to EB 1B jz short loc_CD5 to jmp short loc_CD5
0CCD : 0F 84 0A FF FF FF to 90 E9 00 00 00 00 jz loc_BDD to nop + jmp $+6
0CD3 : EB B6 to EB 00 jmp short loc_C8B to jmp $+2

[dizzy2604]

on step 13 get "module count mismatch" , these patched modules are for bios ver. 2.62 but i am on 2.66 (x230)

the program will still make the patch bios. you can try it and you can go back to your original bios if it fail.

hi kimipm, I succesfuly replaced, re-patched WmaPolicy module, but after step 14 (exit then save) still can't get Advaced button. Advanced button is greyed out. phoenixtool is writing
start extracting
finieshed extracting

any hint?

[dizzy2604]

on step 13 get "module count mismatch" , these patched modules are for bios ver. 2.62 but i am on 2.66 (x230)

the program will still make the patch bios. you can try it and you can go back to your original bios if it fail.

hi kimipm, I succesfuly replaced, re-patched WmaPolicy module, but after step 14 (exit then save) still can't get Advaced button. Advanced button is greyed out. phoenixtool is writing
start extracting
finieshed extracting

any hint?

OK, I have to choose Manufacturer right after BIOS load, to enable Advanced options.

[dizzy2604]

SUCCESS, I am on patched 2.66 BIOS. the only problem is that I forgot my new WLAN card in work, but original one is functional. I  will report tomorrow if whitelist si bypassed.

thank you kimipm

PS> is there any chance to correct BIOS checksum, to avoid startup beeping and make TPM chip functional?

[kimipm]

SUCCESS, I am on patched 2.66 BIOS. the only problem is that I forgot my new WLAN card in work, but original one is functional. I  will report tomorrow if whitelist si bypassed.

thank you kimipm

PS> is there any chance to correct BIOS checksum, to avoid startup beeping and make TPM chip functional?

thank you for trying , you're brave. my x1 isnt beeping after few reboot. sorry I dont know TRM chip, i think it can be done with unlock Advanced Menu module. for x1 3rd, it is 32442D09-1D11-4E27-8AAB-90FE6ACB0489 SystemFormBrowserCoreDxe module. i think it is model specify, so you need master to help with it or keep google it.




Code:

Code:

79E0EDD7-9D1D-4F41-AE1A-F896169E5216_2207.ROM LenovoWmaPolicyDxe.efi (X230 2.62 BDMaster)

0C39 : 75 19 to 75 00 jnz short loc_C54 to jnz $+2
0C4E : 0F 84 9F 01 00 00 to 90 E9 9F 01 00 00 jz loc_DF3 to nop + jmp loc_DF3
0CA2 : 75 16 to 75 00 jnz short loc_CBA to jnz $+2
0CB8 : 74 1B to EB 1B jz short loc_CD5 to jmp short loc_CD5
0CCD : 0F 84 0A FF FF FF to 90 E9 00 00 00 00 jz loc_BDD to nop + jmp $+6
0CD3 : EB B6 to EB 00 jmp short loc_C8B to jmp $+2

yes, it is best to apply to the new bios's module but something it is different. and it is luck BDMaster share his code.

for the Bios checksum here is the info for x230t battery mod checksum fix

[dizzy2604]

SUCCESS, I am on patched 2.66 BIOS. the only problem is that I forgot my new WLAN card in work, but original one is functional. I  will report tomorrow if whitelist si bypassed.

thank you kimipm

PS> is there any chance to correct BIOS checksum, to avoid startup beeping and make TPM chip functional?

thank you for trying , you're brave. my x1 isnt beeping after few reboot. sorry I dont know TRM chip, i think it can be done with unlock Advanced Menu module. for x1 3rd, it is 32442D09-1D11-4E27-8AAB-90FE6ACB0489 SystemFormBrowserCoreDxe module. i think it is model specify, so you need master to help with it or keep google it.




Code:

Code:

79E0EDD7-9D1D-4F41-AE1A-F896169E5216_2207.ROM LenovoWmaPolicyDxe.efi (X230 2.62 BDMaster)

0C39 : 75 19 to 75 00 jnz short loc_C54 to jnz $+2
0C4E : 0F 84 9F 01 00 00 to 90 E9 9F 01 00 00 jz loc_DF3 to nop + jmp loc_DF3
0CA2 : 75 16 to 75 00 jnz short loc_CBA to jnz $+2
0CB8 : 74 1B to EB 1B jz short loc_CD5 to jmp short loc_CD5
0CCD : 0F 84 0A FF FF FF to 90 E9 00 00 00 00 jz loc_BDD to nop + jmp $+6
0CD3 : EB B6 to EB 00 jmp short loc_C8B to jmp $+2

yes, it is best to apply to the new bios's module but something it is different. and it is luck BDMaster share his code.

for the Bios checksum here is the info for x230t battery mod checksum fix

confirmed. Whitelist is removed, new WLAN is working.

[kormoranmen]

Hi,

if anyone can once again upload the mod bios 2.66 for lenovo x230? Above links are broken ;-(

Thanks a lot ;-)