Jump to content


Popular Content

Showing content with the highest reputation on 01/17/23 in all areas

  1. Update: Moral Hazard used MESET.EXE on his clevo to force a dump and flash, but did not gain BCLK control. Update 2: SUCCESS by kasar on a Dell xps 15 (L502X) here! Unfortunately he needed to disable the ME region lock by desoldering and flashing the BIOS chip though. Update 3: SUCCESS by me on Clevo P150EM here! Mod relied on Clevo-only program to unlock ME region. Update 4: SUCCESS by Rhadamanthis on MSI gt780 dxr Update 5: SUCCESS by Akimox on HP 2570p here! At the hardware level, all 6 and likely 7 series laptops support overclocking. The problem is OEMs disable this ability except on laptops like the m18x. Clock configuration is NOT controlled by the BIOS. It is controlled by the Intel ME FW (management engine firmware), a BIOS extension. Only a few bits must be changed from a overclocking disabled ME FW to make it an overclocking enabled ME FW. Gigabyte accidentally leaked an intel utility that can read the ME FW, edit it, and write the new version back to the flash ROM, along with all the necessary documentation to make the correct changes. This flash ROM contains not only the ME FW, but the BIOS, flash descriptor, and 2 other regions called the GbE and PDR. There is one problem, which is that all laptop manufacturers (except ASUS) disable read/write access to the flash ROM. The read/write locks are contained in the flash descriptor. The security settings in the flash descriptor can be ignored by setting a special flag on BIOS startup known as the flash descriptor override, which enables read/write access to all regions. This override is used when you run a BIOS update. At this time there are methods to enable the flash descriptor override for HP and Clevo systems only. After setting the override and rebooting you can dump your whole flash image, edit the ME FW, rebuild the image, and flash. It is possible to flash either the ME FW region only, or the whole image. Obviously flashing the whole image is risky since you will also be flashing your BIOS, so I suggest just flashing the ME region. 6 series are more tolerable of corrupting the ME FW than 7 series. 7 series cannot run without a functional ME FW. 6 series can run without one as long as the BIOS detects that the ME FW is corrupt, and thus refuses to run its settings, however, the laptop can sill be bricked anyway if the BIOS thinks the ME FW is functional while it really is not, and attempts to run the inoperable clocking settings. Some of you may be aware of fwupdlcl.exe which can update the ME FW without enabling the flash descriptor override. This does not work for our purposes since it does not perform a full flash. It does not overwrite the hardware config portion of the ME FW, which is where clock configuration is done. However, if someone could figure out what this program does to write its partial image, it may be possible to use that knowledge to flash a full image. So here's the Intel Utilities and docs: 6 series chipset Link removed since the leaked FITC builds invalid images. Use the ME8 FPT and documentation for now. 7 series chipset: http://www.mediafire.com/?iwscmnadf5icnxq (thanks to kasar) MESET.exe to unlock Clevos: http://www.mediafire.com/?465pknsgc2z83s8 ME_Port by svet to unlock MSIs: https://www.dropbox.com/s/spmvxmz9pal1j6l/ME_Port.com BE CAREFUL WHEN USING FPTW64! It will happily overwrite your BIOS without any warning if you enter the wrong command. Even if you do things properly, still be prepared to have a dead ME FW and whatever the consequences of that may be. Although it is unlikely, trying to enable overclocking through my suggestions can kill your motherboard. There are a few combinations of mistakes that can be made which will most certainly do so. You have been warned, so don't blame me if you do. Also if you do, do NOT go RMA your laptop and make your manufacturer pay for what you caused. You took the risk, so you pay for the necessary repairs even if under warranty. If things go wrong I will do everything I can to help you recover, but please accept responsibility for trying this. Ok now that all that is out of the way so people can't justifiably yell at me. Back to how to try this. 1. Enable your flash descriptor override. Clevo users can use MESET.exe. MSI users can use ME_Port. HP users can use the keyboard sequence "WIN+left_arrow+right_arrow" during POST (got this info from Tech Inferno Fan). ASUS users don't have to do anything since they don't have the lock engaged. The rest of you guys are at this time out of luck. 2. So you'll first need to dump your ME FW image. This is done by running fptw64 in windows or fpt in DOS. It needs to be run in a cmd window with admin rights. The command to do so is "fptw64 -d imagename", where imagename is whatever name you want for your flash image dump. Prema found out that at least on Clevos, attempting to dump only the ME FW leaves out the clock control segment, so you need to dump the whole flash image. Note that you're also getting the flash descriptor when you dump everything, so you can edit it to not require the flash descriptor override to do any flash image reads and writes. 3. Now you need to change some bits to enable overclocking. By some, I mean you probably have to change quite a lot. The good news is that the settings on 6 and 7 series systems seem to be identical. When I edited my image, I followed the intel docs in the ME8 download. I've linked my original overclocked MW FW for comparison. You only need to make changes in the "ICC" section and subsections in FTIC. You can edit the ME FW as part of an entire flash image, or by itself. I edited it by itself, but have since then done several BIOS mods and flashing the whole image worked out fine. My modded P150/170EM ME FW: meoc.bin This image is just for reference to make sure you didn't miss anything. Don't just flash this ME FW. It might work, but there has been issues with flashing someone else's ME FW on HP and Dell systems and others may be affected. Dump and edit your own, or ask me to and I will if I have the time. Some manufacturers have additional changes. When it doubt read the manual or ask me if something should be changed or not. The Utility for editing the images is FTIC. This program has a GUI so it does not have to be run from cmd. Open your image and open the overclocking enabled image. Settings that are different from FTIC's generic 6 and 7 series file will be highlighted in yellow. What you need to edit is the ICC profiles under ICC Data. You can have up to 8 profiles. I think active profile changes depending on if you are say plugged in, on battery, on standby, temps are too high, etc. I don't really know how you identify which profile(s) much be changed, so I think you should just change all of them to make sure that if the flash works and you don't get overclocking, that you know you didn't miss something and that overclocking is impossible, so you don't waste time thinking about it and trying things. The number 1 thing to check that I found to make sure things don't go bad is your "clock source select" under "FCIM/BTM specific ICC registers". If it is 0x00011A33, then your laptop uses the PLL built into the PCH and you can keep going through trying this mod. It will be 0x00011A34 for enabling overclocking. If it is something else besides these 2, STOP NOW. This means that your PCH's PLL is not being used, and that instead an external PLL is feeding the PCH clocks to distribute. If you set your laptop to use the PCH's PLL, I think the PCH will get both clocks and you'll get a laptop with unintelligible clock signals. That would be bad. After making the changes you need to rebuild the ME FW image. You will then have a full image, and if you reopen this new image in FITC, FITC will create a new folder with the MW FW all by itself. You can use the full image or the MW FW image to flash. 4. Now the fun exciting part where we do the flash. I recommend doing it in DOS. The command to flash the ME FW only is "fpt -me -f filename", where filename is the name of your flash image. Don't forget the .bin extension. If you are flashing the entire ROM then you do need to leave out the "-me". If flashing the ME FW only and used the "build compact image" option in FITC, you should get a warning that the flash image is smaller than the total ME Region area that the flash descriptor says you can use, so the area after the file length will not be changed. This is OK and flash anyway. The image FTIC creates is not padded at the end, which causes the warning to occur. If you built a full image it is padded, so you don't get this warning. 5. You can now use Intel XTU to overclock. If you already installed it, you may have to reinstall it. BCLK can be changed in windows and takes effect immediately. Remember guys, this is risky stuff, especially if you have a 7 series laptop. If you're careful though everything should turn out fine.
    1 point

  • Newsletter

    Want to keep up to date with all our latest news and information?
    Sign Up
  • Create New...

Important Information

By using this site, you agree to our Terms of Use. We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.