Contribute
Register

[Guide] Lenovo G50-70 and Z50-70 Bios whitelist removal

Status
Not open for further replies.
Thanks, this also worked with the Lenovo Yoga 2 Pro
 
Can you please help me to patch another BIOS? From Lenovo G550 the bios file is LENOVO-18CN42WW(V2.51).rom. The dump directory contains no file how described in page 1 (11D378C2-B472-412F-AD87-1BE4CD8B33A6_xxxx.ROM). Which file do I have to edit? I send you directory list.

PS: I'm so happy! I found 18CN42WW-Bios original and whitelist removed Version 2.55.
And it worked fine. No error message after installing Intel Wireless AC 7260.
 

Attachments

  • dir.txt
    34.4 KB · Views: 479
Last edited:
This question may be embarrassing is there a chance that this can work on lenovo g510 i5-4200?
 
Hello guys, this guide can work on lenovo y50-70, 4700hq and 860m gtx? i need to remove whitelist
 
before reflashing make sure the bytes are exactly as the image in the bin file then proceed then you will have higher chance of success
 
I have a Lenovo G50-70, I followed the procedure step by step, but when I run fptw64 I get something like that:
- Reading Flash - 100% complete.
- Erasing Flash Block - 100% complete.
- Programming Flash - 100% complete.
- Verifying Flash 100% complete.
Error 204: Data verify mismatch found
The BIOS is not corrupted anyway, I tried rebooting and it just works as it did before, I can access BIOS setup as well.
Update: it seems like the tool doesn't write anything to my BIOS at all. A friend of mine has a G50-70, I extracted his bios and tried to flash it on mine, but I got error 204 again. It seems like the tool erases the part that has to be modified, writes the modified BIOS and reads again in order to be sure that it wrote what it had to be written. I tried to flash several times, and when I try to flash the original bios I had backed up when I first tried the procedure, the tool skips the operation because it says that the bios I want to flash is the same BIOS I already have. I also noticed something strange, I'm not able to update using any Lenovo tool anymore, when the system reboots it takes me to the clover screen, and if I change any setting in the BIOS setup and save, when I reboot it's just like if I didn't make any modifications, it always loads the bios default settings. Another strange thing is that if I try to access the bios setup using FN + F2 the notebook gets stuck, I can still access the bios using the novo button anyway. I receive the windows 10 slow ring preview builds, could it be a problem? I tried to flash using fpt.efi from EFI shell, but I get error 28 as I can't use the sleep bug there.
 
Last edited:
I try from usb and DOS but now get error "280: Failed to disable write protection for the bios space.
I give up !!

Go first back to install the official 9ACN26WW, than go into the bios and disable Secure Boot and enable Bios Downgrade.
Before doing the fptw64.exe depending which version you use, I use FTK10. Close the lid of the laptop till the laptop sleeps, than open up and do the fptw.

I had the same problems and thats how I figured it out, always go back to the 9ACN26WW version after you did the bios altering of the newest version.
 
After doing this all, I also managed to get in the bios the 9ACN32WW done.
In the bios it says now: BIOS version 9ACN32WW and EC Version 9ACN26WW

Is this right? Or should the EC Version also be 9ACN32WW?

Lenovo G50-70 , Z40-70 and Z50-70
Bios whitelist removal howto



Disclaimer

This is a DANGEROUS procedure and it may damage your laptop if you make mistakes. It worked for me and some friends so I decided to share it.
Use the informations contained in this document at your own risk, I take no responsibility for any damage.


Prerequisites



If you have a newer bios installed you can downgrade it: in bios setup enable the Bios Back Flash option and flash the required version (9ACN26WW or 9BCN26WW).
Once you have the proper version installed, load the default settings before proceeding. You can adjust some options but DO NOT CHANGE the Graphic Device related options.
From now on I will refer to the G50-70 bios name, if you have a Z50-70 be aware the filename differs.


Backup Bios

Execute Universal Bios Backup as administrator and backup your actual bios. You will get a file called LENOVO-9ACN26WW.rom , it’s your bios image.
Put it in an empty folder we will use as workspace.


Decompile and Modify Bios

Launch PhoenixTool.exe and open your bios image with it.

View attachment 179109

Your image is now being extracted, be patient and press OK to the two info popup.
When the extraction process finishes, in the Manufacturer dropdown list choose Lenovo and once done press the Advanced button. In the Options window check the options marked with red in the image

View attachment 179110

Press Done. You’ll go back to the previous window where you have now to press Go. Wait until it finishes working and shows you this message:

View attachment 179111

DO NOT PRESS OK YET!!!!
Open the workspace folder where LENOVO-9ACN26WW.rom was and you should find the DUMP directory, navigate into it and look for a file named 11D378C2-B472-412F-AD87-1BE4CD8B33A6_xxxx.ROM .
There will be more than one file with the same name except for the _xxxx part,
open the bigger one (7k) with the hex editor.

View attachment 179112

We are now going to modify the bios, be sure to edit the correct bytes.
At the offsets 2F9, 322 and 366 you will find the value 74, it represents a conditional jump instruction in assembly, change it to EB which is an unconditional jump instruction. When executed it won’t perform the WWAN and WLAN whitelist checks. The next two images will show you the file before and after the edit:

View attachment 179113View attachment 179114

if you found the very same values and modified the file as instructed, save the file and close the hex editor.
You can now press OK on the PhoenixTool popup. It will repack your bios and after a while you will find LENOVO-9ACN26WW_SLIC.rom besides the backup one in the workspace folder. This is your whitelist free bios image.


Flash Modified Bios

Rename LENOVO-9ACN26WW_SLIC.rom to bios.bin and copy it in the same folder where fptw64.exe is.
Use the sleep bug to disable bios write protection (optional but sometimes required): close the lid, wait for the laptop sleep, reopen the lid.
Open a CLI window as administrator, navigate to the folder where ftpw64.exe and bios.bin are and type:
Code:
fptw64.exe -f bios.bin -bios
Press Enter and wait until it ends.
Cross your fingers and reboot.
If you did everything properly your Lenovo G50-70 is now whitelist free.
Remember to enable wifi in the bios setup ;)


Credits

I wish to thank donovan6000 for his excellent guide. Although there are many differences in the bios code it puts me in the right direction.
 
I have a Lenovo G50-70, I followed the procedure step by step, but when I run fptw64 I get something like that:
- Reading Flash - 100% complete.
- Erasing Flash Block - 100% complete.
- Programming Flash - 100% complete.
- Verifying Flash 100% complete.
Error 204: Data verify mismatch found
The BIOS is not corrupted anyway, I tried rebooting and it just works as it did before, I can access BIOS setup as well.
Update: it seems like the tool doesn't write anything to my BIOS at all. A friend of mine has a G50-70, I extracted his bios and tried to flash it on mine, but I got error 204 again. It seems like the tool erases the part that has to be modified, writes the modified BIOS and reads again in order to be sure that it wrote what it had to be written. I tried to flash several times, and when I try to flash the original bios I had backed up when I first tried the procedure, the tool skips the operation because it says that the bios I want to flash is the same BIOS I already have. I also noticed something strange, I'm not able to update using any Lenovo tool anymore, when the system reboots it takes me to the clover screen, and if I change any setting in the BIOS setup and save, when I reboot it's just like if I didn't make any modifications, it always loads the bios default settings. Another strange thing is that if I try to access the bios setup using FN + F2 the notebook gets stuck, I can still access the bios using the novo button anyway. I receive the windows 10 slow ring preview builds, could it be a problem? I tried to flash using fpt.efi from EFI shell, but I get error 28 as I can't use the sleep bug there.
My problem was due to Ubuntu 17.10, which bricked my BIOS. Luckily the problem was solved, FPT works now, finally I have native wifi on my Hackintosh :headbang:
 
Status
Not open for further replies.
Back
Top