Forum RSS Feed Follow @ Twitter Follow On Facebook

Thread Rating:
  • 1 Vote(s) - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5
[-]
Welcome
You have to register before you can post on our site.

Username:


Password:





[-]
Latest Threads
Lenovo Y550 BIOS Unlocking (Advanced Men...
Last Post: kentsergeo
Today 12:15 AM
» Replies: 5
» Views: 1042
i7 2860QM how to raise power limit?
Last Post: DeathBringer
Yesterday 02:40 PM
» Replies: 1
» Views: 88
[REQUEST] Lenovo G710 BIOS Whitelist Rem...
Last Post: chaoszwerg
Yesterday 02:24 PM
» Replies: 490
» Views: 217083
[REQUEST] Lenovo Yoga 7 Pro 82Y7 unlock
Last Post: WalkTheEarth
Yesterday 02:20 PM
» Replies: 0
» Views: 80
[REQUEST] Acer Aspire 8930(G) BIOS Unloc...
Last Post: Ilias manolopoulos
Yesterday 01:52 PM
» Replies: 58
» Views: 43365
ASUS M11AD > Haswell Refresh
Last Post: JCY1962
Yesterday 12:40 PM
» Replies: 22
» Views: 7625
overclocking msi b150 gaming m3
Last Post: J1419
07-06-2025 05:51 PM
» Replies: 0
» Views: 175
Asus K72jr repair
Last Post: Moddo73@PROXIMUS
07-06-2025 02:08 PM
» Replies: 0
» Views: 150
[REQUEST] Lenovo Z50-70 & Z40-70 (9BCNxx...
Last Post: Dudu2002
07-06-2025 01:29 PM
» Replies: 757
» Views: 320334
Excalibur G900.1160 BİOS unlock request
Last Post: Dudu2002
07-06-2025 01:28 PM
» Replies: 7
» Views: 970
[REQUEST] Sony Vaio VPCEH & VPCEJ series...
Last Post: mariukonie
07-06-2025 09:17 AM
» Replies: 241
» Views: 153972
[Request] BIOS mod for Acer EG43M (P01-A...
Last Post: DeathBringer
07-06-2025 08:50 AM
» Replies: 7
» Views: 373
HOW TO FLASH MODIFIED OR ORIGINAL BIOS
Last Post: Ali987
07-06-2025 03:16 AM
» Replies: 20
» Views: 72041
[REQUEST] Lenovo ThinkPad Yoga S1 (GQETx...
Last Post: Dudu2002
07-06-2025 03:05 AM
» Replies: 116
» Views: 56479
Hp 11-ak0040nr add option to boot from i...
Last Post: Xanmx
07-05-2025 05:47 PM
» Replies: 0
» Views: 255
[GUIDE] How to modify AMI MSI BIOS to un...
Last Post: solver_001
07-05-2025 06:34 AM
» Replies: 56
» Views: 334869
[REQUEST] Lenovo ThinkPad T450(s) (JBETx...
Last Post: s_l_24
07-05-2025 04:09 AM
» Replies: 148
» Views: 104057
[REQUEST] Acer Nitro 5 AN515-54 BIOS Unl...
Last Post: 2u75
07-04-2025 03:37 AM
» Replies: 131
» Views: 65056
[REQUEST] Acer Nitro 5 AN517-51 BIOS Unl...
Last Post: Dudu2002
07-03-2025 04:08 PM
» Replies: 18
» Views: 12953
[REQUEST] Lenovo IdeaPad Z570 (45CNxxWW)...
Last Post: andkul
07-03-2025 09:52 AM
» Replies: 96
» Views: 114806

Xiaomi Mi Notebook Pro
#1
Hello everyone, i want to unlock XTU advanced settings in my BIOS, In version 0401 of my bios the option is unlocked, but now on 0502 it's not, i don't know if i can just downgrade and if there is other differences between this 2 version.

Can you help us ? all the community arround this computer want to know if we can downgrade or unlock the current bios.

I have the I7 8GO RAM, there is other version: I7 16go RAM and i5 8Go RAM.


Attached Files
.zip   XMAKB5R0P0502.zip (Size: 5.31 MB / Downloads: 24)
.rar   XMAKB5R0P0401 (Bios dump) Flash with with caution.rar (Size: 4.72 MB / Downloads: 27)
.rar   Xiaomi Mi Notebook Pro Bios 0300.rar (Size: 4.91 MB / Downloads: 34)
find
quote
#2
(02-28-2018, 09:17 AM)NomenAK Wrote: Hello everyone, i want to unlock XTU advanced settings in my BIOS, In version 0401 of my bios the option is unlocked, but now on 0502 it's not, i don't know if i can just downgrade and if there is other differences between this 2 version.

Can you help us ? all the community arround this computer want to know if we can downgrade or unlock the current bios.

I have the I7 8GO RAM, there is other version: I7 16go RAM and i5 8Go RAM.
Hi
Your bios is rewrite protected
Bios mod can be flashed using SPI-programmer+SOIC8 clip only
find
quote
#3
Do you think i can Downgrade my bios (0502) to the 0401 version ?
find
quote
#4
Hello guys! I got Xiaomi Mi Notebook Pro, which have pretty beautiful but useless BIOS (which is InsydeH2O by the way). So, after some research I tried to change variables i need:
  1. via setup_var method (gave me can't change variable via efi error 0x0....008)
  2. setup_var2 (said that variable is out of scope).
  3. I tried Flash Register Protection disabling as described here, but I used Air variables so I guess it doesn't worked.
I don't understand how modders determine which bit in dump is need to be changed, there is no guides about it. But it passed without any errors and nvram changed, so i guess the only working way to change variables without flashing modded BIOS  is to change H2OUVE dump and send it to NVRAM.(I don't want to flash modded BIOS as I didn't got SOIC8 clip atm, already ordered it but it's month of waiting).
H2OUVE modding sounds quite easy but as I don't know how to do this (I don't understand the algorithm of changing bits in certain place) it's impossible without community. So, I'm asking for help! I'm attaching the BIOS .bin file and IFR extracted vars, also I uploaded vars.txt dump from H2OUVE.
The modifications i want to use:
  1. CFG Lock - Disabled
  2. DVMT Pre-alloc - 64M
  3. Intel Speed Shift - Enabled
Not necessary but still really pleasured:
  1. Advanced menu (there is some conditions in bios which can enable it, i guess at least one of them is changable via NVRAM)
  2. DVMT Max GFX size to MAX
  3. Flash Protection Range Registers - Disabled (allows to flash modified bios via FPT)
The main reason of the post is to understand how that HEX magic is working at all, I really didn't found any valuable guides, only examples but not actually way to determine what you need to change, for example this piece of PowerShell code patches H2OUVE dump to disable Flash Protected Registers Registers, but I really can't understand what it does, what is offset? Dear modders of this forum, please, explain this, maybe there will be less stupid questions after.
Code:
$location = Get-Location
$bytes = [System.IO.File]::ReadAllBytes("$location\nvram.bin")
$text = [System.Text.Encoding]::Default.GetString($bytes)
$offset_bytes = 0x32, 0x35, 0x30
$offset_text = [System.Text.Encoding]::Default.GetString($offset_bytes)
$offset = $text.IndexOf($offset_text) + 0x1E
$bytes[$offset] = 0x30
[System.IO.File]::WriteAllBytes("$location\nvram.bin", $bytes)
I'll post vars.txt in 10 mins as i rolled back to BIOS 300. Here you go, vars.txt from stock untouched BIOS 603.
P.S Also, that BIOS is installing via H2OFFT for 64-bit UEFI Shell, which is quite new for me as I get used to exe. It doesn't matter as it doing same operations, but there are some interesting files. For example there is unlockme.sh (which is maybe unlocking Intel ME, because after this it's switching to Manufacture mod), it gives a command SndEcCmd.efi C9E D00. I attached full installer downloaded from Xiaomi site if it's interesting for you. By the way, can I do anything useful with this?


Attached Files
.bin   XMAKB5R0P0603.BIN (Size: 8.65 MB / Downloads: 11)
.txt   IFR0603.txt (Size: 1.21 MB / Downloads: 10)
.txt   vars603.txt (Size: 155.24 KB / Downloads: 9)
.zip   XMAKB5R0P0603.zip (Size: 5.36 MB / Downloads: 23)
find
quote
#5
(03-03-2018, 06:25 AM)NomenAK Wrote: Do you think i can Downgrade my bios (0502) to the 0401 version ?

You can downgrade it to 0300 which is still x4 PCIe M.2 and also allows XTU undervolting. You need to change platform.ini by changing [Bios_Version_Check] from Flag=1 to Flag=0. Succesfully downgraded from 0603 to 0300.
P.S By the way my post was moved and it's reasonable. There is one more MiBook Pro thread, here it is, can it be moved here too?
find
quote
#6
(02-28-2018, 12:34 PM)Dudu2002 Wrote: Your bios is rewrite protected
Bios mod can be flashed using SPI-programmer+SOIC8 clip only
Boring. Any chance it would work like on Mi Notebook Air with FPRR variable? It is locked too, but it's still available to unlock it via NVRAM variables and flash via Intel FPT. See here
find
quote
#7
Update: I will get my SOIC8 clip in 4-5 days, and I have Raspberry Pi + flashrom as programmer (so I can flash it via direct method). But I don't understand how to modify bios via HEX - any brave guys who can do this? I will test it ASAP, already did full backup with unlocked ME.
find
quote
#8
(06-13-2018, 03:59 PM)PavelIT2307 Wrote: Update: I will get my SOIC8 clip in 4-5 days, and I have Raspberry Pi + flashrom as programmer (so I can flash it via direct method). But I don't understand how to modify bios via HEX - any brave guys who can do this? I will test it ASAP, already did full backup with unlocked ME.
Hi
First make bios dump
find
quote
#9
(06-14-2018, 12:25 AM)Dudu2002 Wrote:
(06-13-2018, 03:59 PM)PavelIT2307 Wrote: Update: I will get my SOIC8 clip in 4-5 days, and I have Raspberry Pi + flashrom as programmer (so I can flash it via direct method). But I don't understand how to modify bios via HEX - any brave guys who can do this? I will test it ASAP, already did full backup with unlocked ME.
Hi
First make bios dump

Bump!
Any movements here? Why do you need a dump if BIN is provided in the first post?
I'm looking for advanced menu in this bios to disable switchable GPU feature and force Nvidia MX150 only. Is there a way to do that?
find
quote


Forum Jump:


Users browsing this thread: 2 Guest(s)