Jump to content
InsanelyMac Forum
CodeRush

[UEFIPatch] UEFI patching utility

Recommended Posts

Thanks for report. Try disabling the patch, if kernel goes to panic - there is a new locking code somewhere. If not - ASUS made us a gift. :)

Share this post


Link to post
Share on other sites
Advertisement

Hi guys,  I have many successful installations on socket 775 motherboards, but recently I'm happy owner of ASUS Z87-DELUXE, so I'm try to patch my BIOS (Z87-DELUXE-ASUS-1007) with PMPatch but it fails:

-----------------------------------------------------------------------------------------------

PMPatch 0.5.12
PowerManagement modules not found.
AMI nest modules not found.
Phoenix nest modules not found.
CpuPei module at 00670E20 not patched: Patch pattern not found.
CpuPei module at 00770E20 not patched: Patch pattern not found.

-----------------------------------------------------------------------------------------------

 

What can be made, help me out pls. ?

Share this post


Link to post
Share on other sites

Not implemented yet, sorry. Will do in 1-3 days, no time for programming now.

Will make you a modified BIOS tomorrow.

Share this post


Link to post
Share on other sites

Not implemented yet, sorry. Will do in 1-3 days, no time for programming now.

Will make you a modified BIOS tomorrow.

 

Amazing, thank you friend.

Share this post


Link to post
Share on other sites

I don't know if 10.9 support Haswell power management with vanilla kexts (10.8 has no such support, AFAIK), but you can try and report.

Here is your patched BIOS: 

attachicon.gifZ87-DELUXE-ASUS-1007_PM.zip

Flash it using USB BIOS Flashback.

 

Hi, i just successfully complete the BIOS flashing using the "USB BIOS Flashback" function ( USB thumb, and the button on the back site ). All other attempts was ending with "Security Verification Failed", and now I am able to see the boot screen from the Flash Thumb. Thank you again for the file. Now I'll try the Mavericks ...

Share this post


Link to post
Share on other sites

Created a blog a while ago where I've posted a few bios modding tutorials. Just finished one where I went over how I found and patched the native power management lock in my own bios. Might be worth reading to help others create patches that don't currently exists in PMPatch. You can check It out here  :D

Share this post


Link to post
Share on other sites

Hi,
I am trying to modify the bios on my ASUS ROG CG8565, it supposedly has a P8Z68-V-PRO, but the bios differs and is locked down, no overclock settings for my i7-2600k apart from the Turbo up to 4.2Ghz so if you know how to get another P8Z68-V-PRO to flash without failing signature verification, that would be awesome.

But anyway, I am trying to modify the actual CG8565 bios 3508 with PMPatch for use with OS X 10.9. PMPatch produces the following results...
 

C:\>PMPatch.exe P8Z68-V-PRO-ASUS-CG8565-3508.ROM P8Z68-CG8565-3508-PMPATCH.ROM
PMPatch 0.5.12
PowerManagement module at 00422288 patched.
AMI nest modules not found.
Phoenix nest modules not found.
CpuPei module at 0079FD88 not patched: Patch pattern not found.
CpuPei module at 007DFD88 not patched: Patch pattern not found.

Output file generated.

all good, it flashes fine. but I still get a kernel panic (see attachment) after I remove NullCPUPowerManagement

 

AMe351n.jpg

 

thanks for your time on such a great tool, can see it works for alot of people... hope I become one of them :)

Share this post


Link to post
Share on other sites

if you know how to get another P8Z68-V-PRO to flash without failing signature verification, that would be awesome.

Yes, I know one. Check out the link to FTK guide in my signature. Prepare DOS-bootable FTK-drive as I described there, boot from it and try backup command. If it doesn't fail, send me the resulting file "backup.bin", and I can prepare an unlocked BIOS for you. Then flash it with flashprp command and that's it.

Share this post


Link to post
Share on other sites

Yes, I have found the locking code in CpuPei module of ASUS Rampage IV Extreme latest BIOS, and prepared modified BIOS file for Rampage Dev, but it looks like there is no way to use AICPM.kext even with patched BIOS and 10.9 DP.

The locking code itself can be found in CpuPei modules and it's similar to the code for old P67/Z68 BIOSes with ME 7:

fffdf6ad: 81 fb e0 06 03 00     cmp    $0x306e0,%ebx // Compare EBX with 0x0306E0 
fffdf6b3: 75 0c                 jne    0xfffdf6c1 // If not equal, jump over 3 next lines
fffdf6b5: 0d 00 80 00 18        or     $0x18008000,%eax // Setting bits 26, 27 and 15 <-- lock bit
fffdf6ba: eb 05                 jmp    0xfffdf6c1 // Jump over the next line
fffdf6bc: 0d 00 80 00 00        or     $0x8000,%eax // Setting bit 15 <-- lock bit
fffdf6c1: 6a ff                 push   $0xffffffff   // And mask 1
fffdf6c3: 6a f8                 push   $0xfffffff8 // And mask 2
fffdf6c5: 6a 00                 push   $0x0 // Or mask 1
fffdf6c7: 50                    push   %eax // Or mask 2
fffdf6c8: 56                    push   %esi // 0xE2 stored here
fffdf6c9: e8 c1 0f 00 00        call   0xfffe068f // WRMSR inside
The patch itself is 0d00800018eb050d00800000 -> 0d00000018eb050d00000000, but I brings nothing, so I haven't integrated it to PMPatch yet.

Share this post


Link to post
Share on other sites

Yes, I have found the locking code in CpuPei module of ASUS Rampage IV Extreme latest BIOS, and prepared modified BIOS file for Rampage Dev, but it looks like there is no way to use AICPM.kext even with patched BIOS and 10.9 DP.

The locking code itself can be found in CpuPei modules and it's similar to the code for old P67/Z68 BIOSes with ME 7:

fffdf6ad: 81 fb e0 06 03 00     cmp    $0x306e0,%ebx // Compare EBX with 0x0306E0 
fffdf6b3: 75 0c                 jne    0xfffdf6c1 // If not equal, jump over 3 next lines
fffdf6b5: 0d 00 80 00 18        or     $0x18008000,%eax // Setting bits 26, 27 and 15 <-- lock bit
fffdf6ba: eb 05                 jmp    0xfffdf6c1 // Jump over the next line
fffdf6bc: 0d 00 80 00 00        or     $0x8000,%eax // Setting bit 15 <-- lock bit
fffdf6c1: 6a ff                 push   $0xffffffff   // And mask 1
fffdf6c3: 6a f8                 push   $0xfffffff8 // And mask 2
fffdf6c5: 6a 00                 push   $0x0 // Or mask 1
fffdf6c7: 50                    push   %eax // Or mask 2
fffdf6c8: 56                    push   %esi // 0xE2 stored here
fffdf6c9: e8 c1 0f 00 00        call   0xfffe068f // WRMSR inside
The patch itself is 0d00800018eb050d00800000 -> 0d00000018eb050d00000000, but I brings nothing, so I haven't integrated it to PMPatch yet.

 

so this is a a problem serius for future ?

Share this post


Link to post
Share on other sites

I can't predict the future, but for now on it's impossible to use native AICPM.kext on X79/C602 even with unlocked 0xE2.

Share this post


Link to post
Share on other sites

This seems like the exact same issue I'm having on the z68-v lx... bios is patched but I still need a patched AICPM.kext to actually boot... I wonder if there's some new protection we're missing?

Share this post


Link to post
Share on other sites

I can't predict the future, but for now on it's impossible to use native AICPM.kext on X79/C602 even with unlocked 0xE2.

:rolleyes: mhmm ...

I am very confident about yourself, I hope so much that you can do something positive for the future

Share this post


Link to post
Share on other sites

Then you need to dump your BIOS with FTK biosbck command, patch the dumped biosbck.bin file abd then flash it using restore command. Read the guide about FTK in my signature.

Share this post


Link to post
Share on other sites

Hey!

 

I´m trying to patch my Gigabyte GA-Q77M-D2H lately but without success! I did the following things:

 

 

Microsoft Windows [Version 6.1.7601]
Copyright © 2009 Microsoft Corporation. Alle Rechte vorbehalten.

C:\Windows\system32>cd C:\Users\Gerrit\Desktop\Win64

C:\Users\Gerrit\Desktop\Win64>fpt -bios -d dump.bin

Intel ® Flash Programming Tool. Version:  8.1.10.1286
Copyright © 2007 - 2012, Intel Corporation. All rights reserved.

Platform: Intel® Q77 Express Chipset
Reading HSFSTS register... Flash Descriptor: Valid

    --- Flash Devices Found ---
    MX25L6405D    ID:0xC22017    Size: 8192KB (65536Kb)


- Reading Flash [0x800000] 3072KB of 3072KB - 100% complete.
Writing flash contents to file "dump.bin"...

Memory Dump Complete
FPT Operation Passed

C:\Users\Gerrit\Desktop\Win64>fpt -i

Intel ® Flash Programming Tool. Version:  8.1.10.1286
Copyright © 2007 - 2012, Intel Corporation. All rights reserved.

Platform: Intel® Q77 Express Chipset
Reading HSFSTS register... Flash Descriptor: Valid

    --- Flash Devices Found ---
    MX25L6405D    ID:0xC22017    Size: 8192KB (65536Kb)

    --- Flash Image Information --
    Signature: VALID
    Number of Flash Components: 1
        Component 1 - 8192KB (65536Kb)
    Regions:
        Descriptor - Base: 0x000000, Limit: 0x000FFF
        BIOS       - Base: 0x500000, Limit: 0x7FFFFF
        ME         - Base: 0x003000, Limit: 0x4FFFFF
        GbE        - Base: 0x001000, Limit: 0x002FFF
        PDR        - Not present
    Master Region Access:
        CPU/BIOS - ID: 0x0000, Read: 0xFF, Write: 0xFF
        ME       - ID: 0x0000, Read: 0xFF, Write: 0xFF
        GbE      - ID: 0x0118, Read: 0xFF, Write: 0xFF

Total Accessable SPI Memory: 8192KB, Total Installed SPI Memory : 8192KB

FPT Operation Passed

C:\Users\Gerrit\Desktop\Win64>PMPatch.exe dump.bin mod.bin
PMPatch 0.5.11
PowerManagement modules not found.
Trying to apply patch #1
Nested PowerManagement module at 003A59C4 not patched: Patch pattern not found.
AMI nest module at 00040048 not patched: PowerManagement modules not found in ne
sted module.
Phoenix nest modules not found.
CpuPei module at 002B4A90 not patched: Patch pattern not found.

 

 

Here is my bios-dump: https://dl.dropboxusercontent.com/u/26565887/dump.zip

 

I hope you can help me!

 

Thanks!!

Share this post


Link to post
Share on other sites

Then you need to dump your BIOS with FTK biosbck command, patch the dumped biosbck.bin file abd then flash it using restore command. Read the guide about FTK in my signature.

Thank you :) patched and restored I hope it works

Share this post


Link to post
Share on other sites

Thats a good question :)

 

I´ll look it up with MSRDumper and post it here, just if someone else searches for the same topic!

 

 

//Edit: You are absolutely right, I removed the Nullcpu from my installerstick and it simply boots up !

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.



  • Similar Content

    • By notacone
      These are the Original iMac17,1 Firmware 0105_B20 ACPI Tables.
      They have been extracted from the firmware file provided in 10.12.4 update, so they are clean and unloaded.
      All tables are available in hex cut/new file/paste order so they are untouched and unloaded.
      I believe these files can serve to better study Skylake architecture implementation in Sierra.
      10.12.4-10.12.6 : IM171_0105_B20-10.12.4.firmware update ACPI Tables.zip
      10.13.0+ : IM171_0110_B00 10.13.0GM ACPI Tables.zip
    • By partha.slg123
      Hackintosh High Sierra 10.13.3 USB Installer Boot Into USB DIrectly Enter Exit Option Menu. Clover Boot Menu Not Showing. Plz Help .................
       

       
      My System Specification :

      CPU : Core i5 6400
      MB : Asus H110M-CS
      RAM : 8GB DDR 4
      HDD : WD 1TB For Windows And WD 500 GB For Hackintosh
      Bootloader : Clover
    • By gorans
      Hi,
       
      after updating HS my WOL stopped working. It worked for sure in El Capitan, not sure in what version of HS stopped to work. I'm using Ozmosis as bootloader and IntelMausiEthernet (in S/L/E) for network. I created ssdt.aml with ssdtPRGen, and put it in EFI/Oz/Acpi/Load/.
      WOL is enabled in BIOS, wake for network access is checked
      pmset -g System-wide power settings: DestroyFVKeyOnStandby 0 Currently in use: standby 0 Sleep On Power Button 1 womp 1 hibernatefile /var/vm/sleepimage powernap 0 networkoversleep 1 disksleep 10 sleep 15 autopoweroffdelay 28800 hibernatemode 0 autopoweroff 0 ttyskeepawake 1 displaysleep 15 standbydelay 10800 If I put machine to sleep, WOL works for a short time, but not working if I let it sleep for a while.
       
      I deleted Ethernet in Network, rebooted and recreated it, but still the same.
       
      Hardware:
      MOBO:     Gigabyte Z97-D3H rev 1.1
      processor:    i5-4460 Haswell
      graphic:    Gigabyte GeForce GT 740 OC GDDR5 2GB (GV-N740D5OC-2GI)
      memory:    2 x 8GB Kingston
      disks:    Samsung SSD 850 EVO 120GB
              Seagate 2TB
              LG DVD±RW
      Sound:     VoodooHDA
      Network:    IntelMausiEthernet.kext
       
      Any advice?
       
      Best regards,
      Goran
    • By M3G4DR01D
      Hello everyone, I have an Asus gl502vmk (i7 kabylake + GTX 1060 6 gb) laptop and I tried all the patches/kexts to get the brightness with fn keys/touchpad (I2C ELAN 1200 works with VooDoo I2C kext v1.0 but no gestures/preference pane)/Keyboard backlight to work but no success so far, any help would be appreciated, thanks in advance.
      [EDIT] (10/04/2018)
      Battery status now works, thanks to @RehabMan turned out to be incorrect SMBIOS (used iMac instead of Mbp) lol, but it drains crazy fast (~1.5 - 2 hours while on standby (all apps quited!), on windows 10 it lasts 4 - 5 hours, and on linux it lasts 6 ~ 7 hours!)
      And with VoodooI2C v2.0.1 + VoodooI2CHID kext and patched DSDT, the touchpad is now detected in the sys pref pane but still no input.
      Sound works with VoodooHDA v2.9.1, but the only issue is that the jack sense isn't working (the output device doesn't auto switch to headphone when connected)
       
      [EDIT 2] (11/04/2018)
      The system brightness now works thanks to @onejay09 but I have no brightness slider, and there are 4 extra brightness levels (brightness stops increasing after 12 levels)  and the brightness keys are not mapped correctly, plus the brightness decreases when I plug in the ac adapter, then increases if I unplug it???, the brightness level isn't also saved after reboot.
      battery still drains crazy fast (~1.5 - 2 hours, even with brightness at 50%, so apparently it is a power management issue).
      and I also have shutdowns while in sleep mode (I tried darkwake=10 and darkwake-0 and darkwake=no)
       
      P.S. I have uploaded my new report files, thanks!
       
      Latest report files (11/04/2018): https://www95.zippyshare.com/v/AMOpP0AY/file.html
    • By liuhongxin1993
      ASUS X99-E-10G WS
      I76950X
      Request to optimize
      Sleep/Wake issues, CPU Power States


      origin.zip
      ioregMac Pro.zip
      config.plist
      kexts.zip
×