[REQUEST] Lenovo Thinkpad W530 (G5ETxxWW) Whitelist Removal

[haarp]

Will this benefit others? Will it allow people to flash modded BIOS without hardware flashers?

Otherwise, it's not that important, and I would suggest we leave it at that.

I do have a dump of the MX25L6405D, if you're interested, but I'm getting a bit tired of flashing and rebooting

[haarp]

Here's the dump of the larger chip. Note however that it is also modded.

https://www.sendspace.com/file/qlr1rp

[Da Vinci Code]

https://www.sendspace.com/file/z2owrx

[haarp]

Oh, sorry, I won't be able to flash that. I would have to take apart *everything* to reach the chip for programming

[Da Vinci Code]

Don't worry, that is OK!
I just want tell you that read/write permissions located in Descriptor region from 8 mb chip.
This region can be read using PGM only, dump from Intel FPT and Backup tool v.2.0 not save Full firmware, so i cannot modify Descriptor without disassembling laptop

[haarp]

Hmm. There might still be a way.

Is the descriptor region part of the EC? The EC can be modded without a programmer. See this project: https://github.com/hamishcoleman/thinkpad-ec

The patches for my EC are located in w530.G4HT39WW.img.d.

Here is the EC image (I think) - you'll probably need the non-enc version, but I uploaded both: https://www.sendspace.com/filegroup/fzu1...3eTAl0lOlQ

If you can modify the EC image, I can flash it without a programmer! I just need a hexpatch, similar like the ones in w530.G4HT39WW.img.d.

[Da Vinci Code]

Alright, let's look at fpt-info.txt in results folder.
You can find this text
Master Region Access:
CPU/BIOS - ID: 0x0000, Read: 0x0B, Write: 0x0A
ME - ID: 0x0000, Read: 0x0D, Write: 0x0C
GbE - ID: 0x0118, Read: 0x08, Write: 0x08
It is conbination of hex values located at offset 0x000080 of full firmware.
00 0b 0a 00 00 0d 0c 18 01 08 08 00...this conbination found in dump of 8 mb size only.
As i said before, Descriptor region located in large chip.
I have tried to patch SecurityFlashUpdating module but protections is still enabled.
So permissions can be changed in Descriptor region only, but Intel FPT and Backup Tool havent access to it.I removed permissions in your last dump of big chip,so you can flash it and check write protection.
Bios image consists of 5 regions at minimum: Descriptor, Me region (private data),PDR and GBe regions (it are empty in most causes),bios region (main body of bios).Descriptor(contains permissions and info about bios image uncluding version and platform) and Bios region can be updated only during flash procedure from Winflash.exe or InsydeFlash.exe (for Insydeh20 bioses).Private data like serial numbers,UUID, Macs can be changes using special software Lenovo DMI Tools.

[haarp]

In which region can the EC (Embedded Controller) firmware be found?

[Da Vinci Code]

EC is separate firmware, it usually uncluded in update part of bios
EC firmware located in small chip if there are two chips presented.EC and Main bios firmware are different, however one region of Main bios can be added to content of small chip (EC), it's Me region in most causes.

[ShikiSuen]

Greetings. Could someone please help me ditch the whitelist of the UEFI firmware for my ThinkPad W530?
https://drive.google.com/file/d/0B-iJ3mw...0wwbVcyem8

P.S.: The UEFI firmware is provided as an img file for USB / CDROM booting update. My ThinkPad has some problem (unable to boot from any of Windows installer media or Windows PE) and has only macOS installed, made the USB / CDROM update be the only way for UEFI update. Currently I hadn't decided which WIFI module I am going to buy but I just need a modified version of the firmware I uploaded without WIFI whitelist feature. I will appreciate if someone could do me this favor, thanks.