Contribute
Register

[Guide] Lenovo G50-70 and Z50-70 Bios whitelist removal

Today I managed to do one more thing successfully.

To have same BIOS and EC version with all modifications from the entire topic.

20200501_145500.jpg


Leaving 9AEC26WW is not safe at all on the laptop.
Because a sleep bug is a potential threat and is known as Wake-from-sleep vulnerability leaving UEFIs open to attack

look --- > http://blog.cr4.sh/2015/02/exploiting-uefi-boot-script-table.html

So, in the end when you flash modified BIOS with

Code:
fptw64.exe -f bios.bin -bios

Extract 9acn32ww.exe with 7-Zip.

You will have similiar folder
Capture.PNG


put inside folder this platform.ini from attachment

start InsydeFlash.exe

It will only flash EC - over the old one:wave:
 

Attachments

  • platform.ini.zip
    9.1 KB · Views: 237
Final step on the saga. I completely disabled the intel ME :)

Code:
python me_cleaner.py bios.bin -S -O bios1.bin

miko@mikos-MacBook-Pro me_cleaner-master % python me_cleaner.py bios.bin -S -O bios1.bin
Full image detected
Found FPT header at 0x1010
Found 1 partition(s)
Found FTPR header: FTPR partition spans from 0x4b000 to 0xd1000
ME/TXE firmware version 9.5.15.1730 (generation 2)
Public key match: Intel ME, firmware versions 9.5.x.x, 10.x.x.x
The AltMeDisable bit is NOT SET
Reading partitions list...
FTPR (0x0004b000 - 0x0000d1000, 0x00086000 total bytes): NOT removed
Removing partition entries in FPT...
Removing EFFS presence flag...
Correcting checksum (0x04)...
Reading FTPR modules list...
UPDATE           (LZMA   , 0x0b09a3 - 0x0b0aad       ): removed
ROMP             (Huffman, fragmented data, ~1 KiB   ): NOT removed, essential
BUP              (Huffman, fragmented data, ~80 KiB  ): NOT removed, essential
KERNEL           (Huffman, fragmented data, ~215 KiB ): removed
POLICY           (Huffman, fragmented data, ~97 KiB  ): removed
FTPM             (LZMA   , 0x0b0aad - 0x0bec2b       ): removed
HOSTCOMM         (LZMA   , 0x0bec2b - 0x0c725f       ): removed
TDT              (LZMA   , 0x0c725f - 0x0cc590       ): removed
FPF              (LZMA   , 0x0cc590 - 0x0ce0a5       ): removed
The ME minimum size should be 434176 bytes (0x6a000 bytes)
The ME region can be reduced up to:
00001000:0006afff me
Setting the AltMeDisable bit in PCHSTRP10 to disable Intel ME...
Checking the FTPR RSA signature... VALID
Done! Good luck!


look
 
Last edited:
I bought this SOIC8 SOP8 Test Clip + CH341A Flash BIOS USB Programmer
s-l1600.jpg.b27c0710519c3c4fe4478c968183750e.jpg

It costs about 10 bucks. Interestingly, when a full G50-70 Bios dump is made with it, it is about 8MB (8192 kB, SPI)
 
Thank you for this wonderful guide!

I finally succeeded on changing my Lenovo G50-70 default single band wi-fi network card with a Lenovo SW10A11648 / 00JT482 Realtek RTL8821AE 802.11AC + Bluetooth 4.0 NGFF P/N SW10A11648.

I updated my laptop with latest bios available from Lenovo (9ACN29WW V29 - 9acn30ww.exe) and then modified it following your guide: all went exactly as you described.

I have to admit the hardest part of the task was to find a fptw64.exe copy working on my Windows 10 x64 2004 version.

Fortunately, after very long and unsuccessful Google searches, I found it on the package Intel ME System Tools v10.0 r7.rar available on the following page:


I also found Phoenixtool256.zip tool at the following link:


A very strong hearthbeat while flashing modded BIOS and restarting laptop, but all went OK!

Thank you again!!
 
Last edited:
Hi, I am currently using the modified version of BIOS v26 for my Lenovo G50-70. I had no intention of updating it, because everything works perfectly, but I also have Windows 10 Home in dual boot and the May update did not arrive. So I contacted support and they told me to update the BIOS. If anyone has had this same problem, his opinion is welcome. So at this point my question is: (omitting the part where I find the links and I can correctly perform all the other steps of the procedure) to install the updated original version of the BIOS (v32), starting from my modified version of the v26, I have to do some particular steps or just update it normally?
I apologize for writing so much, and thank you in advance for anyone who can help me.
 
Hi, I am currently using the modified version of BIOS v26 for my Lenovo G50-70. I had no intention of updating it, because everything works perfectly, but I also have Windows 10 Home in dual boot and the May update did not arrive. So I contacted support and they told me to update the BIOS. If anyone has had this same problem, his opinion is welcome. So at this point my question is: (omitting the part where I find the links and I can correctly perform all the other steps of the procedure) to install the updated original version of the BIOS (v32), starting from my modified version of the v26, I have to do some particular steps or just update it normally?
I apologize for writing so much, and thank you in advance for anyone who can help me.
Downgrade to original v26
Update to v32
Dump and modify v32
Downgrade again to original v26
Flash modified v32
 
Downgrade to original v26
Update to v32
Dump and modify v32
Downgrade again to original v26
Flash modified v32
OK understood. Thank you so much.
 
@daigosx
I have this issue where after following all the steps and flashing the moded bios, I'm getting Error 252: Image file "bios.bin" not found. I can't quite pinpoint what's causing this. See related images. I was hoping someone else had a similar issue but no one seem to have encountered this across 34 pages of posts.
 

Attachments

  • Capture2.JPG
    Capture2.JPG
    47.9 KB · Views: 162
  • Capture1.JPG
    Capture1.JPG
    53.2 KB · Views: 158
Lenovo Z50-70
It was incredible, it was not easy, but it worked!
I registered just to thank everyone!
Thanks a lot!
 
Hi,
is this guide applicable for Y50-70 ?
 
Back
Top