Bios-Doctor BIOS and Firmware Modding Forum Bios-Doctor – BIOS & Firmware Modding Forum
    • Home Page
    • Categories
    • Recent
    • Popular
    • World
    • Tags
    • Users
    • Groups
    • Register
    • Login
    • Profile
    • Following 0
    • Followers 0
    • Topics 1
    • Shares 0
    • Posts 1
    • Groups 0
    F Offline
    1. Bios-Doctor - BIOS & Firmware Unlock
    2. ferez21
    3. Posts
    Bios-Doctor Telegram channel

    Posts

    Recent Best Controversial
    • Thunderobot R15 V350SNX-HL Insyde BIOS - Remove CpuSetup write protection

      Hi @black-raven,
      I was hoping you could help me with modding my bios. Willing to provide compensation as needed.
      Thank you in advance

      Laptop: Thunderobot 911 / R15 (V350SNX-HL)
      Board: Clevo V350SNX-HL
      BIOS: Insyde H2O 1.07.P16RQLM1 (01/11/2024)
      CPU: Intel Core i7-13650HX
      OS: Linux

      GOALS:

      1. Remove write protection on CpuSetup EFI variable
        (GUID: B08F97FF-E6E8-4193-A997-5E9E9B0ADB32)
        to allow disabling CFG Lock at offset 0x43 for CPU undervolting.
      2. Unlock advanced BIOS menu options if applicable
        (power limits, XMP, voltage settings, fan control, etc.)

      CONFIRMED:

      • CpuSetup is write-protected at firmware level
      • setup_var.efi returns WRITE_PROTECTED from UEFI shell
      • modGRUBShell setup_var_cv returns error 0x8000000000000008
      • MSR 0x3A = 5 (CFG lock enabled), MSR writes blocked
      • Fpt.efi dump and flash tools available and working
      • Intel Boot Guard may be active (13th gen Clevo platform)

      CONFIRMED LOCKS (from IFR extraction of actual BIOS dump):

      • CFG Lock: CpuSetup offset 0x43 = 0x01 (need 0x00)
      • Overclocking Lock: CpuSetup offset 0x10E = 0x01 (need 0x00)
      • UnderVolt Protection:CpuSetup offset 0x381 = 0x01 (need 0x00)
      • BIOS Lock: PchSetup offset 0x1C = 0x01 (need 0x00)

      All blocked by CpuSetup write protection at firmware level.
      Full 32MB BIOS dump attached (obtained via Fpt.efi from UEFI shell).
      Flash tool available: Fpt.efi + FlashMe.nsh from Clevo package.

      BIOS dump download: https://drive.google.com/file/d/1Y_jlPgkbAxnmZEeUmuEbGzWmb2ufLgu3/view?usp=sharing

      Thank you

      posted in Insyde H2O BIOSes Unlocking Requests
      F
      ferez21