[REQUEST] Lenovo Thinkpad W530 (G5ETxxWW) Whitelist Removal

[haarp]

The turbo ratios are a CPU matter alone, if I can tell the CPU to go faster, it will. The only way the hardware can prevent that is by setting 0x194.

Thanks for trying!

[haarp]

Update:

This is still relevant. I'm offering a 100 USD bounty for a successful 0x194 unlock!

[Da Vinci Code]

Alright, your new mod sent in PM!Check it!

[haarp]

MSR still locked, unfortunately

Also I have the Wifi card now. The modded BIOS freezes during boot when the card is inserted

[Da Vinci Code]

I sent new mod in PM!
You also have unlocked Advanced tab.
Try to change follow options:
Clock Manipulation->ICC Success
SMM LOCK->Disabled
Bios Lock->Disabled
RTC Lock->disabled
Turbo Mode Power Limit Lock->disabled
After that run this tool as admin and upload results (not works under win10)
https://www.sendspace.com/file/x64ra8
I'll give you little gift-you not needed programmer anymore to flash bios mod.

[haarp]

The whitelist removal works now, it boots with the card inserted! Thanks.

0x194 is still locked. None of the mentioned options helps (yes, I tried)

https://www.sendspace.com/file/3rn2nx

[Da Vinci Code]

New mod sent in PM!
-MSR 0x194 set to 0
-disabled bios rewrite protection.
Run tool again and upload result81.png

[haarp]

New mod sent in PM!
-MSR 0x194 set to 0
-disabled bios rewrite protection.
Run tool again and upload result81.png

You did it! You did it!! 0x194 is unlocked! Thank you so much!

Can you please post or PM me a summary how you unlocked it? I'll send the reward then

Thanks!!

[Da Vinci Code]

Hello!Nice to hear solved problem
As i said before, i removed conditional jump and make it to unconditional
Look here code
mov ecx, 194h -MSR 0x194
call sub_5EE0
mov [rsp+28h+arg_0], rax
mov rax, [rbx+38h]
test byte ptr [rax], 8
jz short loc_558A -conditional jump to one of two choices
bts dword ptr [rsp+28h+arg_0], 14h - 20 Bit Test and Set to 1
jmp short loc_5590
loc_558A:
btr dword ptr [rsp+28h+arg_0], 14h- 20 Bit Test and Reset to 0
So i changed jz short loc_558A to jmp short loc_558A, reseting function located in this block.So btr dword ptr [rsp+28h+arg_0], 14h- 20 Bit Test and Reset to 0 this code must execute permanently, so MSR 0x194 is running without limitation.
In my past mods i understood wrong request and make changes for code which go to block with switching 20th bit to 1,it was my mistake.
However we must check my third mod is disabled bios rewrite protection.
Can you run tool again and look at result81.png or result95.png?
Do you still see error?

[Da Vinci Code]

So finally you have 3 unlocked features:
-disabled whitelist (request)
-MSR 0x194 set to 0 (request)
-unlocked Advanced tab
We must check if rewrite protection is still here.
If we are successed, you can flash new bios using Intel FPT