[TOOL] SREP (SmokelessRuntimeEFIPatcher)

Well it didn’t work. I tried to load the resizebar efi driver using an Uefi Shell by ‘load rebar.efi’ → Success message. Then I directly chain loaded the windows boot loader and the option for rebar greyed out and not available. Sorry if off topic. Would the Smokeless tool work better to load the rebar efi file?

Note: Well aware that a straight bios mod would be better but the intended victim machine at work I rather not risk with a bios flash. Thanks

What the option?
You mean ReBarState.exe?

try to do with the bcfg driver add…

cause that is better,and almost the same as inserting into the rom, it allow to load the driver before the READY_TO_BOOT flag, and maybe that’s whats preventing it to load… properly

SREP loading method in this version is not much different from the load of UEFI Shell…
so I guess that the result will be the same, and both appen after the READY_TO_BOOT event

I mean in the AMD Adrenaline Performance control panel tab.

Anyhow I had no luck getting it to work despite seeing the added driver
in the bios boot menu. Not sure if its the video card or the machine itself.

Will try updating gop driver perhaps. Going off topic so will stop talking.

Will try on another one later.

Thanks

hello, I was able to enter advanced bios settings on my L5pro 2022 using your method, but i can’t find option to set voltage curve optimizer. the only option to change voltage is P0state settings.
here’s my SREP_Config.cfg
SREP_Config.zip (393 Bytes)



i tried to put PState0 Freq to 4200 MHz leaving voltage option as it is, saved settings and restarted, but it is not booting. power button lights up and keyboard RGB is working, but screen doesn’t show anything. everything resembles this case ([TOOL] Lenovo (H20) Bios Unlocker and Locker - #42 by AARCH64_EL3).
so i followed the steps from the forum, named USB JUCrisis and bios JUCrisis.bin (taking first 2 letters of BIOS JUCN59WW and adding Crisis), but after holding fn + R for a while it doesn’t beep or give other kind of signals. maybe bios and USB name should be different, as you mentioned it depents on model.

(The file name is saved in the raw section of PCDDxe)

i don’t know where to look for this(

my model is Lenovo Legion 5 pro 2022, 16ARH7H.
bios JUCN59WW.
can you pls help me?
@AARCH64_EL3

ooh finally, i managed to find correct filename for bios reset. it turns out to be the same scheme as for legion 7, first 4 symbols of the bios name. beep sound came on and it restarted just as normal after 10 mins.
thank you anyways, without knowing about emergency bios reset i couldn’t fix it.

it may sound crazy, but i still want to set voltage lower for better temps. will entering advanced CBS and PBS settings allow me to control voltage?

Voltage Control is available only on HX CPU, if you have a HX cpu use UXTU/ryzenadj to tune it

sad to know that, guess power limit and boost disabling are my only options

Hey, I’ve tried the intresting tooling SREP and found myself flashed about the possibilities (awesome idea: mod it in ram to prevent flash protection) . I am pretty new in modding bios (have some background long years ago with software mods=IDA) => whats the current prefered tooling for gathering the required jump points for patches? @Sweet_Kitten => just saw your graph with the process analysis (IDA still accurate?): would make thing that much easier beside of tracing mass of lines of ASM.

For studies I am trying to mod my HP x360 16’ to unlocked…

Hello.

It is accuratly disassembling x32 code. But it has problems with 16 bit.

I changed my mind about srep usefulness. After trial and error, the tool was effective to unlock only specific Insyde bios.

Hi! Is this topic still alive? I’m also trying to unlock different bios of Clevo laptops, and SREP helps a lot in this. But I use third-party solutions, I can’t do it myself because there is no explanation anywhere how to do it. Maybe there is an instruction, an algorithm of actions how to do it? I will be grateful for the information!

@Xazanavi
Hello.
Are you interested in the command syntax of SREP? Or which way you can get values for Patch command?

The method itself is interesting. I don’t understand where to get the values and how to unlock them. I’m new to this.

Well, I already posted info on this for some user. You may find the following post and onward ones helpful.

2 Likes

Oh, great! Thank you very much. I’m going to study it.

I don’t understand what’s wrong with YouTube, I’m writing to you under the video, the messages are deleted. IMG_4271.MOV — Яндекс Диск here’s a look at how I do it on Clevo bios. If you have a telegram, you can find me by the nickname Xazanavi, we have a group on Chinese laptops.

Several of them saved just fine. Maybe YT detected other comments as spam.

I think you’ve said nonsense about the meaning of opcodes. But if it works, it works. equals 0 doesn’t mean setup item is hidden.

Is there any need to find you on Telegram? I think I have already answered your question regarding the location of hex values. Or there are things you want to discuss?

Yes, it actually works, there is no error, equals 0 implies exactly the disabled option. Tested on different Clevo devices, with different processors. And it works even on modern devices. Another question is how to bypass protection on processors of the 12th generation and higher?

And yes, as you wrote earlier, fptw does not want to flash because of write protection. How to remove the protection and could not find the information. All posts are for older bios versions only. I’ll keep looking. Why I wanted to contact you via telegram, it’s easier to communicate there.