[SOLVED] How to unlock MSR 0x194 for 2nd/3rd Gen CPU overclocking

Pleas help i have the same notebook and i will Overcklock my CPU too. How can i get the modded Bios File?

@pseudodeed - new links added at post #17, thanks for the dead link heads up!

Hi Lost_N_Bios,

thank you for the links. I have tried to flash the modded bios with a programmer but unfortunately is hasn’t worked.

Because i have two EEPROM (8MB + 4MB) on my Board i have tried to split the 12MB Bios to two parts so it will fit in the two chips.

Do i need to do something else to flash the modded bios? Can you provide me a proper splitted file or mod my bios?


Thanks in advance!

M6700_Bios_dump.zip (5.98 MB)

It’s OK, that BIOS meant to be “Flashed” Since you need split, here I split file from post #17 However, I recommend you flash the 12MB BIOS, because if you write this mod BIOS to your board with programmer you will loose all your original board details (Serial, Service tag, LAN MAC ID etc)
Here is the split modified BIOS, but I think yuou should wait for Blossomcrown to tell you how to flash, I sent him a PM and tagged him here.
https://www.sendspace.com/file/a7777m

I am not sure what method @Blossomcrown used to flash with, please wait for his reply, I do suggest you flash instead of programming for the above mentioned reason. Unless you modify these BIOS with your service tag and LAN ID etc.

Hi ok. I will waiting.
Sorry I dont know how to modifi the bios.
But thank you for helping.

You’re welcome! And yes I think it’s best to wait, since you don’t know how to flash BIOS for this board instead of program. I could guess, try to help you figure out way to do it, but better to wait on Blossomcrown since he already has been doing recently.
Mod is done already on the BIOS I linked in #17 and above, but yes you would need to edit BIOS with hex editor and or possibly UEFITool if you want to program this BIOS to your board instead of flash, so you could put in your service tag, serial, LAN MAC ID

If he never replies back, I will modify your BIOS dumps instead for you

Ok thank you.

I’m here now :smiley:
Basically,Precision M6700 do got a very tricky BIOS structure as you mentioned,double chip 8M+4M.
Personally i think you could try to find out where is that powermanagement module(whether in 8M or 4M part),and edit that like genius @Lost_N_BIOS did,then reflash it with your programmer(if you have one).This way should work,at least theoretically.
I actually used the method AKA “pinmod” to unlock ME Flash Descriptor and dump/reflash BIOS with Flash Program Tool(since i got no programmer at the beginning).for more details pls go check >this< thread.be advised M6700’s audio chip 92HD93 got different pin assignment with the given example.SDATA_OUT on Pin5 and DVDD on Pin9.
Good luck with modifying:)

Thanks @Blossomcrown ! Sorry, I thought you flashed BIOS, since I sent you 12MB BIOS and you didn’t ask for it to be split. Ohh, wait! You said you unlocked FD, and flashed via software, correct? If yes, that’s good, that’s exactly what I thought you did, what software did you use exactly and what command?
I can send him BIOS with unlocked FD, and then he can flash, or maybe just best to do it all like I mentioned below probably?

@pseudodeed - please send me your dump BIOS again, so I can be sure it’s correctly your dump, then I will put in the modified module for the 194-unlock and send back to you (Also with unlocked FD, so you can flash whatever you want later via FPT)

^^ Lets do this! ^^

From what Blossomcrown said in PM, only ME is locked, so I think we can read/write BIOS region with FPT, thus you can use the orginal mod BIOS to write via >> FPTw -bios -f modbiosname.bin
However, I think that would also overwrite your Serial, Service Tag which Dell official flashing tool wouldn’t. LAN MAC ID is stored in GbE so it would remain the same.
Probably best to just upload your verified dumps for me and I will modify that instead, sorry for pro-longing this, I assumed a flash would be easier overall for either of us, but I think it’s probably not best way to do it now that I think it over.

Or, you could dump your BIOS region, send me that and I could edit it, either way, up to you, here’s how to dump via FPT >> FPTw -bios -d biosregion.bin
You need to use FPT V8 from this package - https://mega.nz/#!CF1l1LJK!K2l6_74FPsGig…Rvp8Efj8a5drZSc

That’s correct.i have my FD unlocked,and dump/flash BIOS with software(FPT).
the point is,on this specific machine Precision M6700,Dell blocked the BIOS access by default and afaik there is no way to change this by “pure” software method.if we want so,we need whether pinmod as i mentioned above or hardware programmer to flash modded bios back to motherboard.
back to @pseudodeed 's question,you could help him change 0x194 settings just like you did for me,i guess whether in 8M+4M form or full 12M should both be ok.but talking about flash back,he has to find a way fit him best(pinmod for 12M or programmer for 8M+4M).

@Lost_N_BIOS my Bios Dump is in Post 43. 8MB+4MB.
I will flash back with the Programmer.
Thank you for helping. It’s really nice.

You’re welcome, and thanks for confirming @pseudodeed - you will still have to do the other things @Blossomcrown did, aside from this unlocked BIOS. Maybe Blossomcrown can give you a short summary of the other stuff you still need to do/set etc.

Here is your modified BIOS, from your dumps, to anyone else reading this later, do not use this BIOS or you may loose your board specific details >> Please flash BIOS in post #17 instead, or send me your FPT dump, FD must be unlocked first
https://www.sendspace.com/file/demr1z

BIOS Lock and SMI Lock are disabled in this BIOS, and FD is unlocked now too, not needed for this mod but helpful for flashing next time around (You will be able to flash any/all regions with FPT)

Sure thing,after @Lost_N_BIOS 's unlocked BIOS installed,we still have a thing or two to do.
Boot in to GRUB shell(request secureboot disabled) and manually set the CPU multiplier as you want,i’ll list em here.
1-Core Ratio Limit
Address 0x25
2-Core Ratio Limit
Address 0x26
3-Core Ratio Limit
Address 0x27
4-Core Ratio Limit
Address 0x28
And those setting value MUST BE DONE WITH HEX VALUE
for example if i want to set 1 core turbo ratio @ 4.0GHz,i should input like this “setup_var 0x25 0x28”(without quote)
remember you have to make sure the 1 core ratio is always higher or equal than 2 core ratio,and 2 core ratio higher or equal than 3 core ratio and so on.
after you set all of this stuff,you could try to boot into system and start some stability test.
Enjoy:D

btw since we are talking about board specific details,im curious about Dell’s never exist factory setting tools(just like nbdmifit.exe for HP),at least it’s never outflow afaik.
if we got this tool or learned how to update DMI info/change settings,it should be pretty easy to (re)write S/N or disable ME or enable TPM module and so on.

Thanks @Blossomcrown - There is tools for Dell DMI (service tag, serial and possibly MAC but that can be done via hex anyway, so can the others if needed) It’s not an issue for me with modding BIOS with that, but for end users it’s often a mess for some to even get into DOS let alone use tools to reset service tags, serial #'s etc.
So when possible, I try to avoid modifying BIOS in a way where they’d have to use other tools later to fix stuff like that.
Do you want a package of those Dell tools?

Disable ME can only be done with Intel FITc tool, and for TPM, I think you can disable that in BIOS via setting, if not surely it can be done via BIOS mod to the settings

@pseudodeed - see also this post #13, for the links to other forum, especially Overclock.net link, there is a software tool there you can use to get some values with
[SOLVED] How to unlock MSR 0x194 for 2nd/3rd Gen CPU overclocking

Yes,I ve seen that tool before.Dell called that platformtag or assettag tool,but it also can be used to set S/N.I already have em,thanks for sharing.
When Dell support provide you a new replace motherboard,there will be a “service menu” let you input SN,decide whether enable or diasble ME/TPM chip and something like that.HP provide a tool(nbdmifit)to recall this service menu when you needed,but Dell not.
As you said,ME could be set enable/disable with FITC.But TPM will never become avaliable if disabled in service menu,because there wont be even a BIOS setting related to TPM since it is “factory set disabled”.(afaik there always a TPM chip on M6700’s motherboard,no matter what specific SKU or MTM it is)
So the problem is,do we have any method recall this service menu out,or directly set TPM chip enable with modded BIOS?

That’s the ones, I think I have two versions. TPM, could probably be re-enabled via a BIOS setting modification, that’s all that tool probably does (Disable or remove the TPM settings section of BIOS)
I see “Suppress If” before TPM and TCM Security, and “Greyout If” right before the main TPM Security menu (I assume one/both are enabled at that setting choice you mention on first bootup) More suppression flags at TPM Owner State and TPM Owner status, Kill TPM etc (several more settings)
Those can be changed via BIOS mod

That sounds great!
Shall we have a try on unlock TPM module? I’ll upload a copy of my BIOS dump here for you:D
https://mega.nz/#!sBlVXI7J!y6xjRChRhNJKQ…wwdTlKO1Y9yzuJE

@pseudodeed 此方法尚未测试完成,请不要把它广泛传播。

@Blossoncrown - Do you have TPM chip, I mean don’t you have to also plug in an add-on chip/module, before any of that shows in BIOS even if enabled?
Please check this text file, via search for TPM, and tell me which exactly by name you want me to unsuppress (or all?)
https://www.sendspace.com/file/0cjcy0