(UEFI) Dell XPS 15z L511z modded BIOS - and HOWTO

[jkbuha]

only one way to find out...
does anyone have the latest winflash.rar for me to try?

[kasar]

@timewalker

well, if you manage to unlock the fd by software, tell me asap plz, so I stop messing with all this dangerous stuff

for some reason I think I am lucky,I think I had killed my laptop over 9000 times with bad flashes or electronical damages while doing all those blind tests

looks like I have a guardian angel or something, lol!


@jkbuha, well, I started including the new version of winflash with the bioses relases for the people requesting voltage changes, they aparently had no issues with the flashing process ^^

[TimeWalker]

Tried with 1.5.2.0 (found in A13) .. it indeed doesn't update anything, just updated BIOS region and programs EC.
We can't use Windows WinFlash of later version to actually flash since all it does is only passes the arguments to Slp20.pfae which invokes the corresponding efi module (OemSlp20.efi) to run PFlash.efi C8AB0F4E-26FE-40F1-9579-EA8D30D503A4_x_x.ROM with the arguments we have passed to WinFlash. It essentially acts as a bridge between Windows (make it restart, go to S3 and start the flasher) and the actual SHELL Flasher inside the capsule. We need to be packing a newer v1.5.66.0 version of PFlash.efi found on the Store Terminal Panel's FTP
ftp://ftp.icg.eu/Drivers/Printers/.../Dr...ol/Phoenix

...but the standalone module is different structurally to what's packed inside the capsule. And I've yet to figure how to pack a newer one in. Also I'm not sure if after all this hassle it will actually update FD using the method I have proposed above - by replacing 000h to FFFh in the 180000h byte padding section.

[TimeWalker]

Tried adding both the header (before MZ):

Code:

64 05 11 02 B0 CD 1B FC 31 7D AA 49 93 6A A4 60 0D 9D D0 83 1C 00 02 00 06 19 93 0E 04 05 11 10

And the footer:

Code:

00 00 00 00 42 00 00 15 53 00 79 00 73 00 74 00 65 00 6D 00 46 00 6C 00 61 00 73 00 68 00 55 00 70 00 64 00 61 00 74 00 65 00 44 00 72 00 69 00 76 00 65 00 72 00 44 00 78 00 65 00 2E 00 65 00 66 00 69 00 00 00 00 00

(SystemFlashUpdateDriverDxe.efi)
1. Both together - system restarted, entered S3, resumed from S3, scanned the DVD drive, showed the Dell splash logo with 640x480 resolution and hung
2. Just the header - system started, entered S3, resumed from S3, scanned the DVD drive, showed the same stretched Dell splash and proceeded to boot windows successfully
3. Just the footer - same as (1).

Man, Dell is so behind with the versioning .. using 1.5.2 when 1.5.66 is out .. the [censored] is wrong with this company ?
Any thoughts ?

P.S. F*ck, why in the world won't Phoenix Tool unpack L502x BIOSes for me. Someone try loading up the backup2.rom (seems least corrupted) that @kasar has posted in his backups.rar archive. Try and see if it's any different structure wise from our regular F33 capsule.. I would like to know where do padding layers go in such a case.

[kasar]

this evening I will be a little busy taking apart the whole laptop again and doing the mentionated modifications , and I can say this kind of stuff take its time, so I will be away for some hours.

as for the bios disasembly, I think I uploaded and posted it to some other part of this topic, but I will upload it again anyway.


I attached also the original l502x A12 wph file , not sure what is the point you are stuck at:

here is the link: http://www.mediafire.com/?wd22jqn3u2z4ngi

[TimeWalker]

I tried on my Acer Aspire 751h which runs Windows 7 Home Basic and it didn't unpack the L502x bios either..
What is the PhoenixTool version you are using?
I actually wanted you to unpack the backup2.rom which you have posted .. the one you took with a programmer ...

[kasar]

I used v1.93 and now I switched to v2.02

no issues with anything related with it.


well, there is something weird I noticed when it open the l502x files.

I have installed HXD hex editor, and it is asociated with rom files, when I open a file with phoenix tool, it automatically open the rom files with hex editor too, if I close the hxd window, it get error, and if I leave the window opened and dont interact with it (for example I keep doing another stuff on windows), it open it without issues and automatically closes the hxd window when the phoenix tool ends opening the file, weid I know, but well, give a try to that


ah, ok, I see, well I attached the backup2.rom and the dumpfolder from phoenixtool

http://www.mediafire.com/?j77gmq19m3x5jhg

[TimeWalker]

hahaha .. there's our VSS table we were looking for like half a year ago:


My theory was correct .. the padding layer holds other region data. There's FD and ME inside the PADDING-00000000_0_2.ROM .. so we have to make our way through the hassle of adapting the new PFlash.efi into the capsule. Or I guess we could try flashing ME back to 7.0.4.1197 by injecting the data into appropriate offset range in the padding.

---

Nope .. just swapped the 0xFFs for an entire ME firmware in the range 00038000h - 0017FFFFh
Specified the /ME flag to WinFlash and ended up having the same fw version as before flash .. no bueno.

[humanitybg]

Hey guys, what happened with GT540/550 upgrade? And kasar, did you manage to do the overvolt thing you posted a while ago? =)

[TimeWalker]

Hey guys, what happened with GT540/550 upgrade? And kasar, did you manage to do the overvolt thing you posted a while ago? =)

http://forum.notebookreview.com/dell-xps...-more.html

Shortly:
- Hard to find nVidia Optimus-compatible updated roms
- Altering voltage table was a piece of cake ... but results weren't that great