Jump to content

Lenovo ThinkPad T440p / T440s/ T540 / E440 / E540 unlocked BIOS menu / wlan / wi-fi whitelist mod

Klem

By Klem
in Lenovo

 Share

Recommended Posts

  • Replies 1.3k
  • Created
  • Last Reply

Top Posters In This Topic

Popular Days

Top Posters In This Topic

Popular Days

Popular Posts

Klem
Klem

In this thread you can post your requests for Lenovo ThinkPad T440p / T440s / T540p / E440 / E540. If someone wants upgrade Wi-Fi card and remove whitelist, or unlock hidden additional menus and

Klem
Klem

CH341A programmer: https://www.ebay.com/sch/i.html?_from=R40&_trksid=p2322090.m570.l1313&_nkw=USB+Programmer+Ch341&_sacat=0   https://www.amazon.com/s?k=ch341a&ref=nb_sb

Klem
Klem

Hi! Ok. Your bios mod done. Check PM.

Posted Images

  • Bios Modder
Klem T|I Addict

Klem

Posted
  • Author
  • Bios Modder
Posted
49 minutes ago, dhager said:

Hi Klem,

I would appreciate if you could help me get the WLAN whitelist removed, as well as the Advanced Menu unlocked for my T440P.

I used a SPI programmer CH341A to dump my BIOS from W25Q32FV chip, Bios ver. 2.54.

https://drive.google.com/open?id=1QYV3HjGngvkCwoT44PyN3lDea0D69Esr

Thanks, and I appreciate any help

 

Hi!

Ok. Check PM.

31 minutes ago, QQ2Me said:

Hi Klem,

Could you please remove the WLAN whitelist and unlock the Advanced Menu for my T440P.
I used a SPI programmer CH341A to dump my BIOS from W25Q32FV chip, Bios ver. 2.54.

https://drive.google.com/open?id=17H9OBEomT758zbclDB_zUH3QTHFAWv2X

Thanks in Advance.

 

Hi!

Ok. Check your Inbox.

Link to comment
Share on other sites
  • Bios Modder
Klem T|I Addict

Klem

Posted
  • Author
  • Bios Modder
Posted
7 hours ago, dwzg said:

Hey Klem,

 

I've got a T440p in need for a modded bios with advanced menu unlocked and whitelist removed.

Link to the file is here: https://my.pcloud.com/publink/show?code=XZgkpSkZvPa7O6B0fiSeSzspyKck7B9mEbUk

 

Thanks for your help, I appreciate it.

Hi!

Ok. Check PM.

  • Thumbs Up 1
Link to comment
Share on other sites
lukehmcc Curious Beginner

lukehmcc

Posted
Posted

Hey Klem, hope your holidays are going great!

 

I have a t440p that I just got the bios dump of and would love it if you would remove the wifi whitelist and unlock the advanced bios options.

 

Here's the dump(https://drive.google.com/open?id=1x-o6GXamfdIqsDf2J_69s0uClO5qS4g6)

 

Once again, hope your holidays are going great and I hope to hear back from you soon.

Link to comment
Share on other sites
  • Bios Modder
Klem T|I Addict

Klem

Posted
  • Author
  • Bios Modder
Posted
1 hour ago, lukehmcc said:

Hey Klem, hope your holidays are going great!

 

I have a t440p that I just got the bios dump of and would love it if you would remove the wifi whitelist and unlock the advanced bios options.

 

Here's the dump(https://drive.google.com/open?id=1x-o6GXamfdIqsDf2J_69s0uClO5qS4g6)

 

Once again, hope your holidays are going great and I hope to hear back from you soon.

Hi!

Ok. Check your Inbox. 

Link to comment
Share on other sites
  • Bios Modder
Klem T|I Addict

Klem

Posted
  • Author
  • Bios Modder
Posted (edited)
9 hours ago, Knogle said:

Ahoy.

I got the T540p as well, but the version including a NVIDIA GT730M card. But unfortunately i'm not able to find the BIOS chip there.

Does someone know where it is located on this version of the T540p?

Hi!

In your T540p there are 2 SPI chips:

Chip1:  MX25L6473E (or same analog), size 8MB.
Chip2:  MX25L3273E (or same analog), size 4MB.

Bios placed in Chip2 with 4MB size.

Look at the picture:

 

T540p.jpg

T540p_bios.jpg

W540_T540_bios.jpg

T540p_2.jpg

Edited by Klem
Link to comment
Share on other sites
Knogle Curious Beginner

Knogle

Posted
Posted (edited)

Thanks! I got them. But unfortunately i don't know how to detach this connector.

So somehow i got the clip attached to the chip, but only go this message:

 

Does someone know how to get this connector removed? It may be easier this way.

 

And what exactly do you guys do to remove the whitelist? I would like to know, but i also don't want to steal your job.

I'd be happy if someone could mod my BIOS to remove the whitelist and enable the hidden stuff.

 

Is it possible to include e.g. iPXE instead of the default PXE ROM?

 

//edit: Got it working now somehow. What do you guys need? Just the BIOS dump or also the ME one?

 

Output of binwalk

  

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
0             0x0             UEFI PI Firmware Volume, volume size: 2818048, header size: 0, revision: 0, EFI Firmware File System, GUID: 7A9354D9-0468-444A-CE81-0BF617D890DF
105           0x69            LZMA compressed data, properties: 0x5D, dictionary size: 16777216 bytes, uncompressed size: 10072068 bytes
2822144       0x2B1000        UEFI PI Firmware Volume, volume size: 417792, header size: 0, revision: 0, Variable Storage, GUID: FFF12B8D-7696-4C8B-85A9-2747075B4F50
2822656       0x2B1200        Intel x86 or x64 microcode, sig 0x000306c1, pf_mask 0x32, 2012-06-14, rev 0x-ffed, size 24576
2847232       0x2B7200        Intel x86 or x64 microcode, sig 0x000306c2, pf_mask 0x32, 2012-10-17, rev 0x-fffa, size 22528
2869760       0x2BCA00        Intel x86 or x64 microcode, sig 0x000306c3, pf_mask 0x32, 2019-02-26, rev 0x0027, size 23552
2915895       0x2C7E37        Certificate in DER format (x509 v3), header length: 4, sequence length: 1552
2917495       0x2C8477        Certificate in DER format (x509 v3), header length: 4, sequence length: 1495
2919038       0x2C8A7E        Certificate in DER format (x509 v3), header length: 4, sequence length: 942
2920028       0x2C8E5C        Certificate in DER format (x509 v3), header length: 4, sequence length: 899
2924755       0x2CA0D3        Certificate in DER format (x509 v3), header length: 4, sequence length: 937
2925740       0x2CA4AC        Certificate in DER format (x509 v3), header length: 4, sequence length: 1512
2927416       0x2CAB38        Certificate in DER format (x509 v3), header length: 4, sequence length: 935
3014919       0x2E0107        GIF image data, version "89a", 600 x 260
3021322       0x2E1A0A        Copyright string: "Copyright (C) By Lenovo"
3045644       0x2E790C        GIF image data, version "89a", 546 x 78
3049586       0x2E8872        Copyright string: "Copyright (C) By Lenovo"
3239936       0x317000        UEFI PI Firmware Volume, volume size: 167936, header size: 0, revision: 0, GUID: 00504624-8A59-4EEB-0FBD-6B36E96128E0
3244418       0x318182        Certificate in DER format (x509 v3), header length: 4, sequence length: 1552
3246018       0x3187C2        Certificate in DER format (x509 v3), header length: 4, sequence length: 1495
3247561       0x318DC9        Certificate in DER format (x509 v3), header length: 4, sequence length: 942
3248551       0x3191A7        Certificate in DER format (x509 v3), header length: 4, sequence length: 899
3249630       0x3195DE        Certificate in DER format (x509 v3), header length: 4, sequence length: 937
3250615       0x3199B7        Certificate in DER format (x509 v3), header length: 4, sequence length: 1512
3252203       0x319FEB        Certificate in DER format (x509 v3), header length: 4, sequence length: 935
3407872       0x340000        UEFI PI Firmware Volume, volume size: 786432, header size: 0, revision: 0, EFI Firmware File System, GUID: 7A9354D9-0468-444A-CE81-0BF617D890DF
3408032       0x3400A0        Microsoft executable, portable (PE)
3418016       0x3427A0        Microsoft executable, portable (PE)
3444000       0x348D20        Microsoft executable, portable (PE)
3444639       0x348F9F        mcrypt 2.2 encrypted data, algorithm: blowfish-448, mode: CBC, keymode: 8bit
3461536       0x34D1A0        Microsoft executable, portable (PE)
3464896       0x34DEC0        Microsoft executable, portable (PE)
3472976       0x34FE50        SHA256 hash constants, little endian
3512024       0x3596D8        SHA256 hash constants, little endian
3681600       0x382D40        Microsoft executable, portable (PE)
3686848       0x3841C0        SHA256 hash constants, little endian
3767104       0x397B40        Microsoft executable, portable (PE)
3775808       0x399D40        Microsoft executable, portable (PE)
3788872       0x39D048        SHA256 hash constants, little endian
3818528       0x3A4420        Microsoft executable, portable (PE)
3852448       0x3AC8A0        Microsoft executable, portable (PE)
3856928       0x3ADA20        Microsoft executable, portable (PE)
3859104       0x3AE2A0        Microsoft executable, portable (PE)
3874912       0x3B2060        Microsoft executable, portable (PE)
3877600       0x3B2AE0        Microsoft executable, portable (PE)
3880224       0x3B3520        Microsoft executable, portable (PE)
3881280       0x3B3940        Microsoft executable, portable (PE)
3883936       0x3B43A0        Microsoft executable, portable (PE)
3896128       0x3B7340        Microsoft executable, portable (PE)
3910048       0x3BA9A0        Microsoft executable, portable (PE)
3910912       0x3BAD00        Microsoft executable, portable (PE)
3913184       0x3BB5E0        Microsoft executable, portable (PE)
3916352       0x3BC240        Microsoft executable, portable (PE)
3949608       0x3C4428        SHA256 hash constants, little endian
3967040       0x3C8840        Microsoft executable, portable (PE)
4017216       0x3D4C40        Microsoft executable, portable (PE)
4028576       0x3D78A0        Microsoft executable, portable (PE)
4030016       0x3D7E40        Microsoft executable, portable (PE)
4033184       0x3D8AA0        Microsoft executable, portable (PE)
root@workstation:/home/chairman/Dokumente/CH341A# flashrom --programmer ch341a_spi -r bios_right_chip.bin  -c MX25L3273E
flashrom  on Linux 5.3.0-3-amd64 (x86_64)
flashrom is free software, get the source code at https://flashrom.org

Using clock_gettime for delay loops (clk_id: 1, resolution: 1ns).
Found Macronix flash chip "MX25L3273E" (4096 kB, SPI) on ch341a_spi.
Reading flash... done.
root@workstation:/home/chairman/Dokumente/CH341A# flashrom --programmer ch341a_spi -v bios_right_chip.bin  -c MX25L3273E
flashrom  on Linux 5.3.0-3-amd64 (x86_64)
flashrom is free software, get the source code at https://flashrom.org

Using clock_gettime for delay loops (clk_id: 1, resolution: 1ns).
Found Macronix flash chip "MX25L3273E" (4096 kB, SPI) on ch341a_spi.
Verifying flash... VERIFIED.

root@workstation:/home/chairman/Dokumente/CH341A# flashrom --programmer ch341a_spi -r me_left_chip.bin -c MX25L6436E/MX25L6445E/MX25L6465E/MX25L6473E/MX25L6473F
flashrom  on Linux 5.3.0-3-amd64 (x86_64)
flashrom is free software, get the source code at https://flashrom.org

Using clock_gettime for delay loops (clk_id: 1, resolution: 1ns).
Found Macronix flash chip "MX25L6436E/MX25L6445E/MX25L6465E/MX25L6473E/MX25L6473F" (8192 kB, SPI) on ch341a_spi.
Reading flash... done.
root@workstation:/home/chairman/Dokumente/CH341A# flashrom --programmer ch341a_spi -v me_left_chip.bin -c MX25L6436E/MX25L6445E/MX25L6465E/MX25L6473E/MX25L6473F
flashrom  on Linux 5.3.0-3-amd64 (x86_64)
flashrom is free software, get the source code at https://flashrom.org

Using clock_gettime for delay loops (clk_id: 1, resolution: 1ns).
Found Macronix flash chip "MX25L6436E/MX25L6445E/MX25L6465E/MX25L6473E/MX25L6473F" (8192 kB, SPI) on ch341a_spi.
Verifying flash... VERIFIED.

20191226_111613.jpg

 

20191226_112406.jpg

Edited by Knogle
Link to comment
Share on other sites
  • Bios Modder
Klem T|I Addict

Klem

Posted
  • Author
  • Bios Modder
Posted
1 hour ago, Knogle said:

What do you guys need? Just the BIOS dump or also the ME one

You need to read SPI 2 chip only. 

 

If you meet with some problems with read your bios dump from your bios chip, then

1. Check connection between bios chip and SOIC8 clip. May be you need to rotate SOIC8 clip to 180°.

2. Try to use different software version. All software versions for Ch341A programmer I placed into this link:  https://www.sendspace.com/file/i6ibui

I recommend you use software AsProgrammer_1.4.0

 

Also try watch the video on youtube:

 

Also, you can try to read this article:

 

Link to comment
Share on other sites
Knogle Curious Beginner

Knogle

Posted
Posted

I got it working already, there was some problem with the connection only. It's not that easy to get a good connection using the clip. But now it works.

Here i got the .bin file of Chip 2 (4096kb) which has been verified as well.

 

Sometimes it failed because of connection loss during the transfer. So i verified them and now everything is alright.

I also would like to honor the work of the modder by the contribution of some money..

 

https://repo.openknogle.eu/T540p_Original/bios_right_chip.bin

Link to comment
Share on other sites
  • Bios Modder
Klem T|I Addict

Klem

Posted
  • Author
  • Bios Modder
Posted
25 minutes ago, Knogle said:

I got it working already, there was some problem with the connection only. It's not that easy to get a good connection using the clip. But now it works.

Here i got the .bin file of Chip 2 (4096kb) which has been verified as well.

 

Sometimes it failed because of connection loss during the transfer. So i verified them and now everything is alright.

I also would like to honor the work of the modder by the contribution of some money..

 

https://repo.openknogle.eu/T540p_Original/bios_right_chip.bin

Ok. Check your Inbox.

Link to comment
Share on other sites
Lmanes Curious Beginner

Lmanes

Posted
Posted

Hi Klem,

 

I was playing with a T440p and I updated the BIOS using a command line to bypass the lack of the battery and I bricked the laptop. 

I don't think I flashed the wrong version... https://download.lenovo.com/pccbbs/mobiles/gluj42us.txt

 

The fact is that after the update the laptop automatically booted and started beeping 5 times with the blank screen. It all because of a M.2 SSD that couldn't be recognized by the bios.

 

Now the question... If I get the clip to re-flash the BIOS, should I just use any oficial T440p Lenovo ROMs or do you recommend using a specific basic bios rom file? 

 

Now off-topic... I was checking the work you do... It is pretty impressive your dedication to help the community. I don't recall seeing anyone doing what you do and for so long. It is impressive.

 

Thank you

 

Leo

 

Link to comment
Share on other sites
  • Bios Modder
Klem T|I Addict

Klem

Posted
  • Author
  • Bios Modder
Posted
12 hours ago, Lmanes said:

It all because of a M.2 SSD that couldn't be recognized by the bios.

If you sure, then just disconnect  M.2 SSD.

 

12 hours ago, Lmanes said:

Now the question... If I get the clip to re-flash the BIOS, should I just use any oficial T440p Lenovo ROMs or do you recommend using a specific basic bios rom file?

No, for SPI programmer you need use your bios dump (from your bios chip) only. Because bios dump have different format and size than the file from the manufacturer’s website. Also, each bios dump contain laptop's personal data, like UUID, Service Tag, serial numbers for some hardware, MAC-addresses for lan cards, Windows keys, e.t.c.

 

This thread for requests to unlock bios only. But you can create new thread to find solution for your problem.

Link to comment
Share on other sites
  • Bios Modder
Klem T|I Addict

Klem

Posted
  • Author
  • Bios Modder
Posted
19 minutes ago, royalsymix said:

Hi Klem,

I just got my T440p and would be very happy if you could mod my bios for advanced menu unlocked and wifi whitelist removed.

https://drive.google.com/file/d/1CCeq3kZOIIpZu9JMUDgBEbd2QsSu-k9u/view?usp=sharing

Thanks in Advance.

 

Hi!

Ok. Check PM.

Link to comment
Share on other sites
immune Curious Beginner

immune

Posted
Posted

Hi Klem,

just did my first Biosdump using the SOIC8 Programmer on my trusty W541. It would be very nice if could unlock my Bios and remove the Whitelist.

 

Here is the link to the Dump. Both files in the folder are identical. If only did the Dump on Chip 2 (4mb). I hope this is correct.

 

https://drive.google.com/drive/folders/1cxTiidC3654ZzrmtadpjnlnYsZkVwvzI?usp=sharing

 

Thanks in advance and have a nice day !

Link to comment
Share on other sites
  • Bios Modder
Klem T|I Addict

Klem

Posted
  • Author
  • Bios Modder
Posted
10 hours ago, immune said:

Hi Klem,

just did my first Biosdump using the SOIC8 Programmer on my trusty W541. It would be very nice if could unlock my Bios and remove the Whitelist.

 

Here is the link to the Dump. Both files in the folder are identical. If only did the Dump on Chip 2 (4mb). I hope this is correct.

 

https://drive.google.com/drive/folders/1cxTiidC3654ZzrmtadpjnlnYsZkVwvzI?usp=sharing

 

Thanks in advance and have a nice day !

Hi!

Ok. Check your Inbox.

Link to comment
Share on other sites
  • Bios Modder
Klem T|I Addict

Klem

Posted
  • Author
  • Bios Modder
Posted
On 1/1/2020 at 1:38 AM, Knogle said:

Ahoy!

Thanks for the previous mod.

I got the same request again, could you unlock the WiFi Whitelist as well as the hidden menus?

 

https://repo.openknogle.eu/Johannes_Bios/bios_original.bin

Hi!

Ok. Your new bios mod done. I sent it to you in PM.

Link to comment
Share on other sites
sangraikang Curious Beginner

sangraikang

Posted
Posted (edited)

Hello,

I have Lenovo T440S, and would appreciate if you could help me get the WLAN whitelist and the Advanced Menu unlocked.

I used a SPI programmer CH341A to dump my BIOS from W25Q128.V chip.

The dropbox link is:

https://www.dropbox.com/l/scl/AAD8tCNO-iaYwyvPyBV97f6iNm1QMAI_bhI

Or google drive link:

https://drive.google.com/file/d/1usd3DmOXHlvJxqgBlPvHaE6wzd9A6nae/view?ts=5e0dc7f6

Thanks, and I appreciate any help! 

Edited by sangraikang
adding additional link
Link to comment
Share on other sites
  • Bios Modder
Klem T|I Addict

Klem

Posted
  • Author
  • Bios Modder
Posted
1 hour ago, sangraikang said:

Hello,

I have Lenovo T440S, and would appreciate if you could help me get the WLAN whitelist and the Advanced Menu unlocked.

I used a SPI programmer CH341A to dump my BIOS from W25Q128.V chip.

The dropbox link is:

https://www.dropbox.com/l/scl/AAD8tCNO-iaYwyvPyBV97f6iNm1QMAI_bhI

Or google drive link:

https://drive.google.com/file/d/1usd3DmOXHlvJxqgBlPvHaE6wzd9A6nae/view?ts=5e0dc7f6

Thanks, and I appreciate any help! 

Hi!

Ok. Check PM.

Link to comment
Share on other sites
D-Lew Curious Beginner

D-Lew

Posted
Posted
On 12/31/2019 at 10:40 AM, D-Lew said:

Hi Klem,

 

Thanks for this service - I'm interested in removal of t440p wifi whitelist, and added advanced menus/overclocking options. Here's my dump

 

https://drive.google.com/open?id=1xBSVVazr20c08rgVK5_iLqkZEdnmzrLh

 

Looking forward to hearing back from you

Hi Klem, just bumping my request here. Looks like it got lost earlier. Thank you!

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
 Share
Go to topic listing


Copyright (c) 2023 Tech|Inferno Media. All rights reserved.

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use. We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.

 Accept Cookies  Reject Cookies