Remove_SMM... UEFI.

[imranromi]

Re: Remove_SMM... UEFI.

imranromi Please, send me your BIOS image, i try to program keygen for you.

i have all lenovo algorithm generate key so i use different algorithm solve my problem

[Marian97]

Re: Remove_SMM... UEFI.

I've tried the DXE driver found on this thread called 2E.zip but it doesn't do anything.
The system turns on like before throwing the error 0199. The thing that is different is that when I press F1 in order to show me the screen for supervisor password, the system turns off.

Do you have any idea? Can someone help me inject a allservice DXE driver into my bios dump please? Or at least upload a good DXE driver here.

Thanks!

[alucard6666]

Re: Remove_SMM... UEFI.

You need inject not only lenovotranslateservice, but translateservice + other files(I do not know witch file excatly). 2E.zip (lenovotranslateservice) is only interface of allservice patch, all work doing in other files.

[alucard6666]

Re: Remove_SMM... UEFI.

i have all lenovo algorithm generate key so i use different algorithm solve my problem

I need lenovotranslateservice or BIOS image that you used, to see algorithm that generate key. I try to disassembly lenovotranslateservice to see algorithm, then write keygen.

[Marian97]

Re: Remove_SMM... UEFI.

You need inject not only lenovotranslateservice, but translateservice + other files(I do not know witch file excatly). 2E.zip (lenovotranslateservice) is only interface of allservice patch, all work doing in other files.

So what are the other files? Do you have them?

[said7002]

Re: Remove_SMM... UEFI.

extract dxe drive from bios pathched

[Marian97]

Re: Remove_SMM... UEFI.

Ok, so things are getting a little messy around here.
Let me check if what I know and understand is right.

I have my bios dump from my locked X250 called, let's say original.bin.
I have two files from this thread called 2e and pe32_image... Etc
I replaced my lenovotrabslateservice with both of them, one at a time and none worked. Not even the allservice branding at boot.

So now you are telling me that lenovotranslateservice is not the only dxe driver that needs to be replaced, and that I should get the other one from a patch bios?
Which is this patched bios and what are the other dxe drivers I need to extract from them?

[alucard6666]

Re: Remove_SMM... UEFI.

I have my bios dump from my locked X250 called, let's say original.bin.
I have two files from this thread called 2e and pe32_image... Etc
I replaced my lenovotrabslateservice with both of them, one at a time and none worked. Not even the allservice branding at boot.

1. You do not need replace lenovotranslateservice twice. Only one file should be used(2E or pe32_image).
2. All password reset work takes place in BootOption section.

I think to patch BIOS you need at least 3 files: lenovotranslateservice, BootOption, SystemPipsNeededbyDXE core.
I try to patch BIOS, but... something wrong with GUID. My laptop freeze after enter right key.

[alucard6666]

Re: Remove_SMM... UEFI.

i have all lenovo algorithm generate key so i use different algorithm solve my problem

You have working solution?

[Marian97]

Re: Remove_SMM... UEFI.

1. You do not need replace lenovotranslateservice twice. Only one file should be used(2E or pe32_image).
2. All password reset work takes place in BootOption section.

I think to patch BIOS you need at least 3 files: lenovotranslateservice, BootOption, SystemPipsNeededbyDXE core.
I try to patch BIOS, but... something wrong with GUID. My laptop freeze after enter right key.

I didn't replaced lenovotranslateservice twice. I tried both files separately an none of them worked because you said there should be more of them.

What BIOS did you tried to patch?

Do you have the other files needed?

[alucard6666]

Re: Remove_SMM... UEFI.

I didn't replaced lenovotranslateservice twice. I tried both files separately an none of them worked because you said there should be more of them.

What BIOS did you tried to patch?

Do you have the other files needed?

Try this:

https://drive.google.com/open?id=1n_...mFiSbL5i8m7vZu

[Marian97]

Re: Remove_SMM... UEFI.

Thank you! I will try it tonight.

I see there are fbd files. Do I replace only the Pe32 image or the whole module?
I suppose the whole module because pe32 images are efi files.

[alucard6666]

Re: Remove_SMM... UEFI.

Thank you! I will try it tonight.

I see there are fbd files. Do I replace only the Pe32 image or the whole module?
I suppose the whole module because pe32 images are efi files.

You can extract modules from you BIOS with whole or PE32 body option and see differents in WinDIFF, and then decide. Or try to both metod)

[Marian97]

Re: Remove_SMM... UEFI.

Try this:

https://drive.google.com/open?id=1n_...mFiSbL5i8m7vZu

It didn't worked. It booted like before, the same 0199 error, nothing changed.

Did it worked for you?

I replaced the 3 files using Replace body option in EFITool and then flashed the bios back to the chip. Nothing change.
Did I forget to do something?

[alucard6666]

Re: Remove_SMM... UEFI.

It didn't worked. It booted like before, the same 0199 error, nothing changed.

Did it worked for you?

I replaced the 3 files using Replace body option in EFITool and then flashed the bios back to the chip. Nothing change.
Did I forget to do something?

What 199 error means?

You can try this instruction from allservice:

1. Make sure CMOS is cleared by removing the 3V cell completely. Also make sure laptop's main battery is out and disconnect the internal front battery if used (many new Lenovo may have an internal battery, the black box) by removing its connector from the motherboard.
It is important that the laptop will have NO battery attached.

2. Plug in the AC adapter and wait for a few seconds, the laptop will start by itself (if not, press the Power button and start it). You may hear some beeps then you will see the Lenovo splash image, quickly press F1 to get the SVP password prompt and enter "1234" for SVP and press Enter.

Tip: If the laptop beeps and the power stays ON but there's no display then a quick fix is to insert a locked HDD in the laptop and start again.
The HDD must be ATA locked (in another laptop or in this one, has no importance) and this will force our DXE security module to load and the BIOS will start.

Next page will show you Allservice DXE driver loading and showing "Press any key..". Wait about 20-30 seconds before pressing a key.
Next it will display the warning message and the laptop hardware ID. At this moment, press CTRL-ALT-DEL to do a warm reboot.
Do not disconnect the AC during this process!

3. Now repeat as in step 2: Press F1 to get the SVP prompt and enter "1234", then wait about 20-30 seconds before pressing any key and generate the hardware ID again.
Write down this hardware ID and email it to us. While waiting to receive the response key form us, DO NOT TURN OFF the laptop and DO NOT PRESS ANY KEY!

[Marian97]

Re: Remove_SMM... UEFI.

All right, it seems like it does what you say if I enter the 1234 password. Let me do exactly like you said and I'll come back with the hwid in a couple of minutes.

Thank you!

[Marian97]

Re: Remove_SMM... UEFI.

0199 system security - security password retry count exceeded

This is the error you get when you enter the wrong SVP password too many times. Then you get locked out of the system. You can't access the BIOS or anything else.

[Marian97]

Re: Remove_SMM... UEFI.

OK, I did as you said, the Hardware ID is 6401946

[drgn997]

Re: Remove_SMM... UEFI.

@Marian97
Check PM.

[alucard6666]

Re: Remove_SMM... UEFI.

OK, I did as you said, the Hardware ID is 6401946

Sorry, but I dont have keygen for 7 digits HW ID, I only have for 9 digits HW ID. Try to inject other lenovotranslateservice shared in this thread, link https://drive.google.com/open?id=13n...WtACdXwTcaTjPP I already shared my keygen in this thread.