Forum RSS Feed Follow @ Twitter Follow On Facebook

Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
[-]
Welcome
You have to register before you can post on our site.

Username:


Password:





[-]
Latest Threads
[REQUEST] Acer TravelMate 5760(G,Z) BIOS...
Last Post: kris0725pl
Today 04:46 AM
» Replies: 51
» Views: 14736
i7 4790 support for HP Z230 SFF
Last Post: xtinct16
Yesterday 11:18 PM
» Replies: 1
» Views: 161
Asus Strix G512LV Bios Unlock
Last Post: Zypher4
Yesterday 09:33 PM
» Replies: 41
» Views: 10621
[Request] Thunderobot Zero
Last Post: genius239
Yesterday 08:27 PM
» Replies: 121
» Views: 25005
[Request] Bios support for Intel D865GSA
Last Post: ToolDragoon
Yesterday 06:30 PM
» Replies: 9
» Views: 464
REQUEST Bios packarbell EG70v213
Last Post: Yoyo40120
Yesterday 02:49 PM
» Replies: 0
» Views: 108
[REQUEST] Lenovo G400S (7BCNxxWW) Whitel...
Last Post: Tinho42
Yesterday 01:04 PM
» Replies: 219
» Views: 63499
Lenovo IdeaPad Z565 36CN23WW(V2.09)/Insy...
Last Post: azm9s
Yesterday 10:25 AM
» Replies: 0
» Views: 129
[REQUEST] Lenovo G480 (5ECNxxWW) Whiteli...
Last Post: kroomuay
Yesterday 09:40 AM
» Replies: 120
» Views: 39936
[REQUEST] ASUS FX504GD_FX80GD BIOS UNLOC...
Last Post: genius239
Yesterday 05:40 AM
» Replies: 9
» Views: 401
Unlock BIOS HP 250 G8 (27J99EA)
Last Post: ivanmazepa
Yesterday 04:15 AM
» Replies: 4
» Views: 479
[REQUEST] Acer Nitro 5 AN515-55 BIOS Unl...
Last Post: Dudu2002
Yesterday 01:24 AM
» Replies: 119
» Views: 34599
[REQUEST] Lenovo Y50-70 (9ECNxxWW) BIOS ...
Last Post: Dudu2002
08-07-2022 01:56 PM
» Replies: 2334
» Views: 617178
[Request] Packard Bell EasyNote TE11HC B...
Last Post: Dudu2002
08-07-2022 01:03 PM
» Replies: 141
» Views: 51507
[REQUEST] Lenovo IdeaPad L340 (BGCNxxWW)...
Last Post: Dudu2002
08-07-2022 01:02 PM
» Replies: 55
» Views: 11289
[REQUEST] HP envy m6-1161se bios mod ple...
Last Post: aspirasjun
08-07-2022 11:53 AM
» Replies: 0
» Views: 86
Unlock advanced settings f.40 insydeh20
Last Post: vloff
08-07-2022 04:39 AM
» Replies: 1
» Views: 217
Unlock Request Acer Nitro 5 AN515-57
Last Post: Dudu2002
08-07-2022 02:27 AM
» Replies: 21
» Views: 3774
[REQUEST] Lenovo ThinkPad T450(s) (JBETx...
Last Post: Dudu2002
08-07-2022 02:24 AM
» Replies: 161
» Views: 65630
[REQUEST] Sony VAIO VGN-FW21 (R1100Y0) B...
Last Post: Boost
08-06-2022 08:09 AM
» Replies: 8
» Views: 1708

Request Asus ROG Strix G15 G513IM-HN002 bios full unlock
#1
Smile 
Hello, I would like to request a bios unlock for the G513IM. The thing is... I tried to mod it myself but im not confident in my skills!
Bios dump made with: https://drive.google.com/file/d/1MFx7wfC...sp=sharing
Modded the bios with AMIBCPv5.02: https://drive.google.com/file/d/1tFGedYP...sp=sharing
Self-modded bios: https://drive.google.com/file/d/154UQuXf...sp=sharing Huh
The main things that i want to be unlocked are CPU OC & Memory OC
Many thanks!
*Couldn't attach the .rom: https://drive.google.com/file/d/1lYL0hpJ...sp=sharing
find
quote
#2
I've got the same exact laptop but the G17! (4800H & 3060)
I want the same thing, CPU & Memory multipliers, kinda mad ASUS didn't include this on their high-end laptops, and no MUX on top of that..
If you'd like to experiment with each other add me on discord Oblivious#8859 Smile
find
quote
#3
Hello H34TO & Oblivious,

I will take a look at this BIOS mod request later on tonight. Good on you for trying things out!

Just in case we need it later, here is the 74-page documentation for the W25Q16JW BIOS chip that @H34TO mentioned in the other G513 thread: https://www.winbond.com/resource-files/W...20Plus.pdf

Fortunately, this chip is a different model than the chip in the other G513/517 notebooks in this thread (https://www.bios-mods.com/forum/Thread-R...AMD?page=7). The other chip requires the following procedure:
Quote:At first, I thought that it might be difficult to do this as the pins are small (not tiny like many other chips on the motherboard, but still very little wiggle room). Fortunately, the 3 pins we need to connect together are on 3 of the edges of the BIOS chip.

The pull up resister, which has a button, will be attached to a breadboard, as will the resister, to simplify things. The resister - without the button pressed - will initially connect the /VCC (power) pin to the /CS (let's call it the "input" pin to match up with diagrams from guides) to put the /CS pin in a high voltage state. On power up, the button will be pressed to connect the /CS pin to the /GND (ground) pin instead. This will bring the /CS pin to a low voltage state, which is the parameter required for allowing read/write operations to take place.

~Steven

!!!!!PLEASE READ!!!!!! Our Ukrainian friends are undergoing atrocities right now and need support. There are two things you can do for starters:

1.) Donate to one of various organizations offering medical, military, and psychological support to those impacted: Support Organizations

2.) Combat misinformation on social media. 

Also, please feel free to PM me if I have not replied again about your BIOS mod request after 5 days.
www find
quote
#4
(01-26-2022, 06:54 PM)Sml6397 Wrote: Hello H34TO & Oblivious,

I will take a look at this BIOS mod request later on tonight. Good on you for trying things out!

Just in case we need it later, here is the 74-page documentation for the W25Q16JW BIOS chip that @H34TO mentioned in the other G513 thread: https://www.winbond.com/resource-files/W...20Plus.pdf

Fortunately, this chip is a different model than the chip in the other G513/517 notebooks in this thread (https://www.bios-mods.com/forum/Thread-R...AMD?page=7). The other chip requires the following procedure:
Quote:At first, I thought that it might be difficult to do this as the pins are small (not tiny like many other chips on the motherboard, but still very little wiggle room). Fortunately, the 3 pins we need to connect together are on 3 of the edges of the BIOS chip.

The pull up resister, which has a button, will be attached to a breadboard, as will the resister, to simplify things. The resister - without the button pressed - will initially connect the /VCC (power) pin to the /CS (let's call it the "input" pin to match up with diagrams from guides) to put the /CS pin in a high voltage state. On power up, the button will be pressed to connect the /CS pin to the /GND (ground) pin instead. This will bring the /CS pin to a low voltage state, which is the parameter required for allowing read/write operations to take place.

~Steven
Hello, so... yesterday I found out that the 25Q16JW flash chip is the VBios for the 3060 hence the 2MB bios dump; First I was confused that I noticed it is Q16(16Mbit) not Q128(128Mbit), after some digging around, me and Oblivious found the right chip; Unfortunetly its not a DIP SMD one, but good thing there are copper traces for a DIP one, maybe I will be able to solder some wires to it!
EDIT: My bios chip might be a W74M12JW with a HMAC!OObliviou[size=1]Obliviou[/size] Oblivious
find
quote
#5
Quote:EDIT: My bios chip might be a W74M12JW with a HMAC!

Yeah, this is the BIOS chip. The other G513/G517 models on the original thread have this same chip: https://www.bios-mods.com/forum/Thread-R...#pid188379

The link for the documentation for this chip went down, but I have a copy, which I have attached to this post. This chip has two features that could make hardware flashing the chip more difficult: HMAC authentication (as you mentioned) and a required voltage modulation on the /CS pin using a pull-up resister to enable read/write functionality. Software flashing appears to not be feasible with this chip based on previous tests.

I am hoping that the manufacturer did not actually implement the optional HMAC authentication capabilities of the BIOS chip (similarly to how Intel BootGuard usually isn't enabled). If they did, I am not sure how to bypass that. I am pretty sure though that at least the voltage modulation will be required here.

If you want to go ahead with this, I can modify this BIOS image. First, we will need to get the voltage modulation part down. To test if we are successful, we will need to get two consistent BIOS dumps in a row. This means two things:
1.) The 2 dumps are identical to each other with a hex comparison.
2.) The data inside forms a coherent BIOS image that can be opened and extracted in UEFITool.

I imagine that getting identical dumps will mean that we met the voltage requirement for activating the BIOS chip for reads/writes. I imagine that if the data also makes sense, then HMAC isn't implemented. Or it's only implemented for writes, but the fact that AFU has software read permissions to the chip suggests that they might not block hardware reading attempts with an SPI programmer.

On the other thread with this BIOS chip, we have inconsistent, mostly garbage data. This suggests that the chip isn't getting enough voltage for proper reads (as we haven't tried modulating the voltage yet). Based on occasional identical segments of data from dumps, I'm leaning toward HMAC not being implemented- at least for hardware dumping/flashing - which would constitute good news for us.

Let me know if you want to proceed. CH341A SPI programmers tend to be $10-$11 USD, a (potentially necessary) better clip for connecting to the BIOS chip is usually around $20-$25 USD, and I imagine equipment for a pull-up resister might be less than $5 USD. You will also need a 1.8V converter module for the CH341A. This is a few dollars. The better clip is only required if the included one doesn't make a good connection, but it might be a good idea for our purposes since there are multiple things that could cause a bad BIOS dump here.

If we can get past the voltage requirement and find that there is no HMAC implemented, I can provide a BIOS mod for not only your 2 notebooks, but also 6 others on the other thread.


Attached Files
.pdf   w74m12jw20reva.pdf (Size: 1.29 MB / Downloads: 6)

!!!!!PLEASE READ!!!!!! Our Ukrainian friends are undergoing atrocities right now and need support. There are two things you can do for starters:

1.) Donate to one of various organizations offering medical, military, and psychological support to those impacted: Support Organizations

2.) Combat misinformation on social media. 

Also, please feel free to PM me if I have not replied again about your BIOS mod request after 5 days.
www find
quote
#6
(01-30-2022, 09:38 PM)Sml6397 Wrote:
Quote:EDIT: My bios chip might be a W74M12JW with a HMAC!

Yeah, this is the BIOS chip. The other G513/G517 models on the original thread have this same chip: https://www.bios-mods.com/forum/Thread-R...#pid188379

The link for the documentation for this chip went down, but I have a copy, which I have attached to this post. This chip has two features that could make hardware flashing the chip more difficult: HMAC authentication (as you mentioned) and a required voltage modulation on the /CS pin using a pull-up resister to enable read/write functionality. Software flashing appears to not be feasible with this chip based on previous tests.

I am hoping that the manufacturer did not actually implement the optional HMAC authentication capabilities of the BIOS chip (similarly to how Intel BootGuard usually isn't enabled). If they did, I am not sure how to bypass that. I am pretty sure though that at least the voltage modulation will be required here.

If you want to go ahead with this, I can modify this BIOS image. First, we will need to get the voltage modulation part down. To test if we are successful, we will need to get two consistent BIOS dumps in a row. This means two things:
1.) The 2 dumps are identical to each other with a hex comparison.
2.) The data inside forms a coherent BIOS image that can be opened and extracted in UEFITool.

I imagine that getting identical dumps will mean that we met the voltage requirement for activating the BIOS chip for reads/writes. I imagine that if the data also makes sense, then HMAC isn't implemented. Or it's only implemented for writes, but the fact that AFU has software read permissions to the chip suggests that they might not block hardware reading attempts with an SPI programmer.

On the other thread with this BIOS chip, we have inconsistent, mostly garbage data. This suggests that the chip isn't getting enough voltage for proper reads (as we haven't tried modulating the voltage yet). Based on occasional identical segments of data from dumps, I'm leaning toward HMAC not being implemented- at least for hardware dumping/flashing - which would constitute good news for us.

Let me know if you want to proceed. CH341A SPI programmers tend to be $10-$11 USD, a (potentially necessary) better clip for connecting to the BIOS chip is usually around $20-$25 USD, and I imagine equipment for a pull-up resister might be less than $5 USD. You will also need a 1.8V converter module for the CH341A. This is a few dollars. The better clip is only required if the included one doesn't make a good connection, but it might be a good idea for our purposes since there are multiple things that could cause a bad BIOS dump here.

If we can get past the voltage requirement and find that there is no HMAC implemented, I can provide a BIOS mod for not only your 2 notebooks, but also 6 others on the other thread.
Hello, i already have the SPI progrogrammer, clips, 1.8V logic level shifter (LLS) and the resistor. BTW in would be easier to communicate directly with you and also would be easier to solve this bios flashing mistery.... sooo... what I'm trying to say is that you could friend me on Discord ( H34TO#0668 ) or gmail ( h43to.code@gmail.com )
Edit: i already modded the LLS with the resistor (its between VCC and /CS) btw it's a 10K res, i think it sould be good enough if not i can change it to a 5k or a 1k res



Attached Files Thumbnail(s)
       
find
quote
#7
(02-02-2022, 06:41 AM)H34TO Wrote: Hello, i already have the SPI progrogrammer, clips, 1.8V logic level shifter (LLS) and the resistor. BTW in would be easier to communicate directly with you and also would be easier to solve this bios flashing mistery.... sooo... what I'm trying to say is that you could friend me on Discord ( H34TO#0668 ) or gmail ( h43to.code@gmail.com )
Edit: i already modded the LLS with the resistor (its between VCC and /CS) btw it's a 10K res, i think it sould be good enough if not i can change it to a 5k or a 1k res


That's awesome! I've been able to mod these 8 notebooks' BIOS images for some time now, but no one has had the know-how/tools (including me) to begin getting around the hardware flashing voltage problem. I've never really played with resisters, so I wouldn't know where to start with whether we need 10k, 5k, etc. resistance.

Immediately after I post this message, you should get a friend request from someone whose name has a vowel as its second character Smile . I'm thinking this weekend, maybe Saturday or Sunday, would be a good time to work on this. The first thing we should do is get at least 2 identical and coherent BIOS dumps. If we can do this, we can also likely flash a BIOS mod, provided HMAC isn't required for writes.

To anyone else awaiting a BIOS mod for this or similar notebooks - if we are successful, full details of how to perform the BIOS flash will be put on this thread.

!!!!!PLEASE READ!!!!!! Our Ukrainian friends are undergoing atrocities right now and need support. There are two things you can do for starters:

1.) Donate to one of various organizations offering medical, military, and psychological support to those impacted: Support Organizations

2.) Combat misinformation on social media. 

Also, please feel free to PM me if I have not replied again about your BIOS mod request after 5 days.
www find
quote
#8
Hello guys! Recently I've been working with some people to solve the AMD AMI BIOS flashing mistery, but it's getting harder and harder to find new info, that why I made a Discord server where I and others post our findings. Invite link: https://discord.gg/M9MvMH58yV
find
quote


Forum Jump:


Users browsing this thread: 1 Guest(s)