Sony Vaio can't modding bios - please help

Discussion in 'BIOS Mods' started by Kassiopaia, Mar 8, 2013.

  1. Kassiopaia

    Kassiopaia MDL Novice

    Oct 16, 2009
    43
    2
    0
    Sorry for my question here, we have problems to mod a Sony Vaio - Notebook.
    I'am also in correspondence with other helpers, but at present no way to find a mod.

    Can anybody help me?
    The slic2.1.bios can't flash from Windows and also from DOS mode (invalid image).

    OS is Win7Ultimate64, original was Windows 8 installed.

    Into bios is "secure boot" disable, the boot mode is "legacy" (UEFI is disable).

    -Manufacturer: SONY
    -Model: SONY Vaio (SVE171G11M)
    -Product: SVE1712C1EW.G4
    -Bios: Insyde Corp.
    -Bios revision: R0160D6
    -ME version: 8.1.0.1248
    -Bios SLIC: 2.1 (for Win 7)
    -Cert: SONY
    -RWE report + Orginal Bios (*.7z - File): http://www.sendspace.com/file/kxjumw
    -Original bios on webside: http://www.sony.de/support/de/product/SVE1712C1EW/downloads/EP0000284596_8231

    Thanks for read and hope for help.
    Sorry for my bad english.
     
  2. Sebashi

    Sebashi MDL Novice

    Feb 23, 2013
    24
    13
    0
    #2 Sebashi, Mar 9, 2013
    Last edited by a moderator: Apr 20, 2017
    Hi :)
    I've got a VAIO SV-E 1712 C5E that I have unlocked bios .
    There is a SecureFlashDxe module in the bios that will display you " H20 Secure Flash - Invalid firmware image " when trying to flash with Insyde tool your modded Bios; but this is not an RSA signed bios as encountered on other platform.

    First, I suggest you to backup your Bios region with Intel FPT from windows or a dos shell.
    To do so, you will have to make a USB bootable Flash disk with only that file on the root, AND, you 'll have to change the boot mode in the bios from UEFI to legacy prior to boot a DOS Usb disk

    Using the command
    Code:
    fpt -bios -d YourBiosDump.bin
    This will be helpfull if you brick the laptop, and of course to work on a copy of it.
    You should get a 6656kb file instead of the 9680 kb R0160D6.bin extracted from sony bios executable.

    Open it with PhoenixTools 2.14 and mod it (note the recovery file name that would be same as mine with R0160D6 bios Z40X64.FD - displayed Z40X64.f? by the tool but never mind )
    Then simply use the recovery process to flash that modded bin from DOS renamed in the recovery filename.
    In this case, there is no screen or warning before flashing begin, the bios settings here are not important.

    1/Let the battery plugged
    2/ Remove the ac cord
    3/ Press FN+ESC keys and while holding them, plug AC cord, wait just 1-2 seconds and press the power button
    4/ Keep the keys for 3 seconds
    5/ release FN+ESC
    6/ deep breath, it should take 65 seconds to flash and sutdown automatically
    7/ Power it ;-p

    But be aware that this flashing process don't check anything, if you flash a 4kb size with the recovery name, it will work, the flashing will take 65 s and you will be screwed as the recovery will not be working anymore as the bios would have been erased.
    I have bricked it 6 times because of one strange USB stick or maybe a corrupted copy , even the original dump give me a loop on boot with DVD drive initialization ...
    So be sure to dump it twice and keep an unmodded one if you have only one PC.
     
  3. Sebashi

    Sebashi MDL Novice

    Feb 23, 2013
    24
    13
    0
    Then if you want to flash securely with FPT, you must change your descriptor settings.
    For that the only trick for now is to connect the pin 1 with the pin 5 of the ALC 269 chip located near to the USB3 port and the line/mic.
    I've done it, it works ;-p
     
  4. LatinMcG

    LatinMcG Bios Borker

    Feb 27, 2011
    5,264
    1,422
    180
    umm what does ALC269 SOUND chip have to do with bios ????? want to burn sound chip ? :clap3:
     
  5. Kassiopaia

    Kassiopaia MDL Novice

    Oct 16, 2009
    43
    2
    0
    #5 Kassiopaia, Mar 9, 2013
    Last edited by a moderator: Apr 20, 2017
    (OP)
    I have flash the original bios and also the slic.bios via emergency method, but is not a slic information into the bios after test under Windows with the "SLIC Dump Tool Kit".
    The images was from a MDL-Guru- member (var1 - bios size 8 388 608 bytes, var2- 6 815 744 bytes).

    After emergency flash method all additional information are gone, such as model name, service tag number, serial number, UUID number - all is loose.
    I have write all this informations on a paper befor flash!

    What can I do?
    I will have a SLIC2.1 into the bios and will return back the individual informations?
    Where are my errors?

    EDIT:
    Note: I have described the bios.mod almost like you. Unfortunately I have previously made ​​a backup. I used to create from the "EP0000284596.exe" unzipped bios file. By PhoenixTool a "9.45 MB (9,911,688 bytes)" was issued large file. Format "*. Bat". This can not flash, there is the error you describe ("H20 Secure Flash - Invalid firmware image"). Can I rename this file to flash (R0160D6_SLIC.bin to Z40X64.fd) and then with the Emergency Flash Method?

    In the Bios is "secure mode" is disabled, the boot mode is "legacy".

    Here my dump / bios: http://www.sendspace.com/file/a12lmx
     
  6. Sebashi

    Sebashi MDL Novice

    Feb 23, 2013
    24
    13
    0
    Yes you can rename the R0160D6.bin file into Z40X64.fd and flash it in recovery process, I've done it. The VAIO secure flash key is in the end of the file , and behond EEPROM ( not flashed , just checked on regular flash )

    Anyway dump your actual bios in case...

    Don't understand when you say "By PhoenixTool a "9.45 MB (9,911,688 bytes)" was issued large file"
    I have opened the original R0160D6.bin with phoenix tools as is....
    But maybe it is related on your SLIC mod when saving ?
    I still use the provided windows 8, I feel it better and it start really quicker than 7, that's why i'm not aware of the slic mod .
     
  7. Sebashi

    Sebashi MDL Novice

    Feb 23, 2013
    24
    13
    0
    #7 Sebashi, Mar 9, 2013
    Last edited: Mar 11, 2013
    [HS]
    Can't post pictures of my board or link because I'm under the 20 post here, but the ALC HDA chip pin 5 (HDA_SDO ) is sampled by the HM76 chipset. So normally it is Low, but if it is set to "high" externally, then the HSFSTS descriptor registers are overriden, and the ME is in debug mode. Then I were able to flash my descriptor from locked to unlocked on ME region (R/W) Bios region (W) Got it from somewhere I can't post the link :D ( <20 post )
    Read the Intel 7 series PCH datasheet (bootstraps section) Or maybe you were kidding me ??? ;-)

    [/HS]
     
  8. Sebashi

    Sebashi MDL Novice

    Feb 23, 2013
    24
    13
    0
    @ Kassiopaia
    Also something interesting maybe, on the VAIO SVE1711 series, the bios to upgrade from seven to windows 8 is different...
    (They were sold with windows 7)
    Check the bios on those boards, they don't have a secure flash module in it .... but don't know if the mainboard is the same, for sure it is based on HM76 also, but for other chip ...
     
  9. LatinMcG

    LatinMcG Bios Borker

    Feb 27, 2011
    5,264
    1,422
    180
    cool research... post links like this http: //blabla .com/allokeafterspaces
     
  10. Sebashi

    Sebashi MDL Novice

    Feb 23, 2013
    24
    13
    0
    http protocol www .bios-mods.com/forum/Thread-UEFI-Dell-XPS-15z-L511z-modded-BIOS-and-HOWTO?page=108
     
  11. Kassiopaia

    Kassiopaia MDL Novice

    Oct 16, 2009
    43
    2
    0
    want to tell me what this contribution?
     
  12. Kassiopaia

    Kassiopaia MDL Novice

    Oct 16, 2009
    43
    2
    0
    s**t, now brick the bios, no reaction - only power led.... very bad.
    How can I unbrick???
     
  13. Sebashi

    Sebashi MDL Novice

    Feb 23, 2013
    24
    13
    0
    #13 Sebashi, Mar 9, 2013
    Last edited: Mar 9, 2013
    By flashing in recovery mode the dump of your bios region I had suggested you to do with FPT before any mod ...

    Try also to reformat your USB stick in fat32 and put a non-corrupted bios Z40X64.fd ... I was once messing with brick each time, even with an original unmoded dump that worked before ... Formatting resolved the problem.
     
  14. Kassiopaia

    Kassiopaia MDL Novice

    Oct 16, 2009
    43
    2
    0
    #14 Kassiopaia, Mar 9, 2013
    Last edited: Mar 9, 2013
    (OP)
    Now are still a rescue way, where the emergency recovery method no longer works?

    The problem is the emerency method will no more working, the file is okay, but the flash will no starting (I see no more activity on the USB FlashDrive- Stick).
     
  15. Sebashi

    Sebashi MDL Novice

    Feb 23, 2013
    24
    13
    0
    I don't know what did you flash ... hope this is the original bios file ?
    Try to open the file that have bricked the laptop with phoenix tools and check the name of the reciovery file.

    I have flashed a modded R0160D6.bin extracted from the update from sony site, got a brick and recover with the dump I've done before that with FPT did you did that ?

    If the name is wrong, the flashing will be unsuccessfull.... did your laptop shutdown automatically , and after how many seconds ?
     
  16. Kassiopaia

    Kassiopaia MDL Novice

    Oct 16, 2009
    43
    2
    0
    At the first flash with emergency recovery mode method with a no modding bios I have see the activity of the stick (blinking) and the notebook automaticly reboot - all okay (only the individual informations like UUID, serial, service tag was loose). The notebooks works.

    After flashing the renamed bios.mod (*.bin to *.fd) reboot the notebook not self, I wait a long time and push power / hard shutdown.

    And now, black screen and only power led, I can't start emergency recovery mode method again, it will not working. I think the bios now is "death", the rescue way was closed with a wrong file.

    Sorry for my bad english.
     
  17. Sebashi

    Sebashi MDL Novice

    Feb 23, 2013
    24
    13
    0
    Open that bios.mod in phoenix tool and check name
     
  18. Sebashi

    Sebashi MDL Novice

    Feb 23, 2013
    24
    13
    0
    #18 Sebashi, Mar 9, 2013
    Last edited: Mar 11, 2013
    The thing is that when the mod is wrong (uuid lost, tag lost.. ) it's better to put the laptop in its original state and restart the work ... you didn't dump for safety as i suggested ...
     
  19. mariusnet

    mariusnet MDL Novice

    Mar 29, 2013
    17
    2
    0
    i-m on the same situation
    i done the R0170D5 bios for SE1512W1ESI on Phoenix Tools Dynamic mode and when i try to flash it with InsideFlash says Firmware Image Error
     
  20. mariusnet

    mariusnet MDL Novice

    Mar 29, 2013
    17
    2
    0
    i was trying to contact Shebashi but the post count problem appear :))