Thunderobot R15 V350SNX-HL Insyde BIOS - Remove CpuSetup write protection

[ferez21]

Hi @black-raven,
I was hoping you could help me with modding my bios. Willing to provide compensation as needed.
Thank you in advance

Laptop: Thunderobot 911 / R15 (V350SNX-HL)
Board: Clevo V350SNX-HL
BIOS: Insyde H2O 1.07.P16RQLM1 (01/11/2024)
CPU: Intel Core i7-13650HX
OS: Linux

GOALS:

1. Remove write protection on CpuSetup EFI variable
   (GUID: B08F97FF-E6E8-4193-A997-5E9E9B0ADB32)
   to allow disabling CFG Lock at offset 0x43 for CPU undervolting.
2. Unlock advanced BIOS menu options if applicable
   (power limits, XMP, voltage settings, fan control, etc.)

CONFIRMED:

• CpuSetup is write-protected at firmware level
• setup_var.efi returns WRITE_PROTECTED from UEFI shell
• modGRUBShell setup_var_cv returns error 0x8000000000000008
• MSR 0x3A = 5 (CFG lock enabled), MSR writes blocked
• Fpt.efi dump and flash tools available and working
• Intel Boot Guard may be active (13th gen Clevo platform)

CONFIRMED LOCKS (from IFR extraction of actual BIOS dump):

• CFG Lock: CpuSetup offset 0x43 = 0x01 (need 0x00)
• Overclocking Lock: CpuSetup offset 0x10E = 0x01 (need 0x00)
• UnderVolt Protection:CpuSetup offset 0x381 = 0x01 (need 0x00)
• BIOS Lock: PchSetup offset 0x1C = 0x01 (need 0x00)

All blocked by CpuSetup write protection at firmware level.
Full 32MB BIOS dump attached (obtained via Fpt.efi from UEFI shell).
Flash tool available: Fpt.efi + FlashMe.nsh from Clevo package.

BIOS dump download: https://drive.google.com/file/d/1Y_jlPgkbAxnmZEeUmuEbGzWmb2ufLgu3/view?usp=sharing

Thank you

[Black Raven]

@ferez21 said:

aptop: Thunderobot 911 / R15 (V350SNX-HL)

Hi
BIOS guard, Intel boot guard
need to generate new RSA keys
Check your private chat