• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

How To: Enable SLI on pre-i7/i5 hardware

bluevelvetjacket

New Member
Joined
May 20, 2008
Messages
49 (0.01/day)
From the way you talk about the code I'd almost suspect you might fully know how to bypass the SLI routines W1zzard but haven't done so for legal or motivational reasons :p. I really wouldn't doubt it since you are the one who has done so much digging in the driver code to develop GPU-Z and looked at specifications.

And I've tried many routes also, but what do we breakpoint hmm - and when? :)
 
Joined
Nov 4, 2005
Messages
11,655 (1.73/day)
System Name Compy 386
Processor 7800X3D
Motherboard Asus
Cooling Air for now.....
Memory 64 GB DDR5 6400Mhz
Video Card(s) 7900XTX 310 Merc
Storage Samsung 990 2TB, 2 SP 2TB SSDs and over 10TB spinning
Display(s) 56" Samsung 4K HDR
Audio Device(s) ATI HDMI
Mouse Logitech MX518
Keyboard Razer
Software A lot.
Benchmark Scores Its fast. Enough.
check your check?
 

W1zzard

Administrator
Staff member
Joined
May 14, 2004
Messages
26,958 (3.71/day)
Processor Ryzen 7 5700X
Memory 48 GB
Video Card(s) RTX 4080
Storage 2x HDD RAID 1, 3x M.2 NVMe
Display(s) 30" 2560x1600 + 19" 1280x1024
Software Windows 10 64-bit
if you claim you know where sli is enabled but there are so many code integrity checking functions just run with a debugger like softice. put a breakpoint on memory read on that code location so the debugger stops every time something tries to read from that memory address. then you sit in the code integrity routine because no other code will access the instruction bytes of the sli enable function.
 

Mussels

Freshwater Moderator
Staff member
Joined
Oct 6, 2004
Messages
58,413 (8.21/day)
Location
Oystralia
System Name Rainbow Sparkles (Power efficient, <350W gaming load)
Processor Ryzen R7 5800x3D (Undervolted, 4.45GHz all core)
Motherboard Asus x570-F (BIOS Modded)
Cooling Alphacool Apex UV - Alphacool Eisblock XPX Aurora + EK Quantum ARGB 3090 w/ active backplate
Memory 2x32GB DDR4 3600 Corsair Vengeance RGB @3866 C18-22-22-22-42 TRFC704 (1.4V Hynix MJR - SoC 1.15V)
Video Card(s) Galax RTX 3090 SG 24GB: Underclocked to 1700Mhz 0.750v (375W down to 250W))
Storage 2TB WD SN850 NVME + 1TB Sasmsung 970 Pro NVME + 1TB Intel 6000P NVME USB 3.2
Display(s) Phillips 32 32M1N5800A (4k144), LG 32" (4K60) | Gigabyte G32QC (2k165) | Phillips 328m6fjrmb (2K144)
Case Fractal Design R6
Audio Device(s) Logitech G560 | Corsair Void pro RGB |Blue Yeti mic
Power Supply Fractal Ion+ 2 860W (Platinum) (This thing is God-tier. Silent and TINY)
Mouse Logitech G Pro wireless + Steelseries Prisma XL
Keyboard Razer Huntsman TE ( Sexy white keycaps)
VR HMD Oculus Rift S + Quest 2
Software Windows 11 pro x64 (Yes, it's genuinely a good OS) OpenRGB - ditch the branded bloatware!
Benchmark Scores Nyooom.
if you claim you know where sli is enabled but there are so many code integrity checking functions just run with a debugger like softice. put a breakpoint on memory read on that code location so the debugger stops every time something tries to read from that memory address. then you sit in the code integrity routine because no other code will access the instruction bytes of the sli enable function.

none of that means a thing to me, but i thank you for sharing that advice.
 

opieum

New Member
Joined
Nov 22, 2008
Messages
20 (0.00/day)
I know this thread is a bit dated, But is there any progress on this? Or is the attempt being abandoned until a cracker decrypts the routine? Apparently ASUS and certain other partners have unlocked versions of these drivers. So there has to be something that makes it possible at the driver level. I am guessing a BIOS hack is probably not the way to go as has been suggested elsewhere.
 

Solaris17

Super Dainty Moderator
Staff member
Joined
Aug 16, 2005
Messages
25,776 (3.79/day)
Location
Alabama
System Name Rocinante
Processor I9 14900KS
Motherboard EVGA z690 Dark KINGPIN (modded BIOS)
Cooling EK-AIO Elite 360 D-RGB
Memory 64GB Gskill Trident Z5 DDR5 6000 @6400
Video Card(s) MSI SUPRIM Liquid X 4090
Storage 1x 500GB 980 Pro | 1x 1TB 980 Pro | 1x 8TB Corsair MP400
Display(s) Odyssey OLED G9 G95SC
Case Lian Li o11 Evo Dynamic White
Audio Device(s) Moondrop S8's on Schiit Hel 2e
Power Supply Bequiet! Power Pro 12 1500w
Mouse Lamzu Atlantis mini (White)
Keyboard Monsgeek M3 Lavender, Akko Crystal Blues
VR HMD Quest 3
Software Windows 11
Benchmark Scores I dont have time for that.
to many changes to the drivers this project is on hold.
 

opieum

New Member
Joined
Nov 22, 2008
Messages
20 (0.00/day)
Hmm shame. I am guessing once the x58 support is released it might be a little easier to hack? It would seem so since there will be setups in the wild that will be easy to compare against.
 

Solaris17

Super Dainty Moderator
Staff member
Joined
Aug 16, 2005
Messages
25,776 (3.79/day)
Location
Alabama
System Name Rocinante
Processor I9 14900KS
Motherboard EVGA z690 Dark KINGPIN (modded BIOS)
Cooling EK-AIO Elite 360 D-RGB
Memory 64GB Gskill Trident Z5 DDR5 6000 @6400
Video Card(s) MSI SUPRIM Liquid X 4090
Storage 1x 500GB 980 Pro | 1x 1TB 980 Pro | 1x 8TB Corsair MP400
Display(s) Odyssey OLED G9 G95SC
Case Lian Li o11 Evo Dynamic White
Audio Device(s) Moondrop S8's on Schiit Hel 2e
Power Supply Bequiet! Power Pro 12 1500w
Mouse Lamzu Atlantis mini (White)
Keyboard Monsgeek M3 Lavender, Akko Crystal Blues
VR HMD Quest 3
Software Windows 11
Benchmark Scores I dont have time for that.
Hmm shame. I am guessing once the x58 support is released it might be a little easier to hack? It would seem so since there will be setups in the wild that will be easy to compare against.

no need to hack it in X58 both ATI and SLI are supported through physical chip and bios tattooing
 

Mussels

Freshwater Moderator
Staff member
Joined
Oct 6, 2004
Messages
58,413 (8.21/day)
Location
Oystralia
System Name Rainbow Sparkles (Power efficient, <350W gaming load)
Processor Ryzen R7 5800x3D (Undervolted, 4.45GHz all core)
Motherboard Asus x570-F (BIOS Modded)
Cooling Alphacool Apex UV - Alphacool Eisblock XPX Aurora + EK Quantum ARGB 3090 w/ active backplate
Memory 2x32GB DDR4 3600 Corsair Vengeance RGB @3866 C18-22-22-22-42 TRFC704 (1.4V Hynix MJR - SoC 1.15V)
Video Card(s) Galax RTX 3090 SG 24GB: Underclocked to 1700Mhz 0.750v (375W down to 250W))
Storage 2TB WD SN850 NVME + 1TB Sasmsung 970 Pro NVME + 1TB Intel 6000P NVME USB 3.2
Display(s) Phillips 32 32M1N5800A (4k144), LG 32" (4K60) | Gigabyte G32QC (2k165) | Phillips 328m6fjrmb (2K144)
Case Fractal Design R6
Audio Device(s) Logitech G560 | Corsair Void pro RGB |Blue Yeti mic
Power Supply Fractal Ion+ 2 860W (Platinum) (This thing is God-tier. Silent and TINY)
Mouse Logitech G Pro wireless + Steelseries Prisma XL
Keyboard Razer Huntsman TE ( Sexy white keycaps)
VR HMD Oculus Rift S + Quest 2
Software Windows 11 pro x64 (Yes, it's genuinely a good OS) OpenRGB - ditch the branded bloatware!
Benchmark Scores Nyooom.
no need to hack it in X58 both ATI and SLI are supported through physical chip and bios tattooing

i think his point was supposed to be that with x58 supporting it natively, people could simply compare x58 drivers to other chipsets, and make a hack to cover the changes.
 

Solaris17

Super Dainty Moderator
Staff member
Joined
Aug 16, 2005
Messages
25,776 (3.79/day)
Location
Alabama
System Name Rocinante
Processor I9 14900KS
Motherboard EVGA z690 Dark KINGPIN (modded BIOS)
Cooling EK-AIO Elite 360 D-RGB
Memory 64GB Gskill Trident Z5 DDR5 6000 @6400
Video Card(s) MSI SUPRIM Liquid X 4090
Storage 1x 500GB 980 Pro | 1x 1TB 980 Pro | 1x 8TB Corsair MP400
Display(s) Odyssey OLED G9 G95SC
Case Lian Li o11 Evo Dynamic White
Audio Device(s) Moondrop S8's on Schiit Hel 2e
Power Supply Bequiet! Power Pro 12 1500w
Mouse Lamzu Atlantis mini (White)
Keyboard Monsgeek M3 Lavender, Akko Crystal Blues
VR HMD Quest 3
Software Windows 11
Benchmark Scores I dont have time for that.
i think his point was supposed to be that with x58 supporting it natively, people could simply compare x58 drivers to other chipsets, and make a hack to cover the changes.

the drivers are no diffirent they just changed the integrity check methode to check for the chip (hasnt changed) and to check the bios (has changed) in eather case i cnnot hack a bios on the board to do that...i had originally thought i cold do his but apon attempting it with my early tests i came to the conclusion that not only was i unable to isolate the string in the bios that allowed it but i would need to mod the bios of every single system that someone asked me to mod it for because chipsets bios types and sizes vaery so much between boards that their was no way for me to make a "generic" change
 

Mussels

Freshwater Moderator
Staff member
Joined
Oct 6, 2004
Messages
58,413 (8.21/day)
Location
Oystralia
System Name Rainbow Sparkles (Power efficient, <350W gaming load)
Processor Ryzen R7 5800x3D (Undervolted, 4.45GHz all core)
Motherboard Asus x570-F (BIOS Modded)
Cooling Alphacool Apex UV - Alphacool Eisblock XPX Aurora + EK Quantum ARGB 3090 w/ active backplate
Memory 2x32GB DDR4 3600 Corsair Vengeance RGB @3866 C18-22-22-22-42 TRFC704 (1.4V Hynix MJR - SoC 1.15V)
Video Card(s) Galax RTX 3090 SG 24GB: Underclocked to 1700Mhz 0.750v (375W down to 250W))
Storage 2TB WD SN850 NVME + 1TB Sasmsung 970 Pro NVME + 1TB Intel 6000P NVME USB 3.2
Display(s) Phillips 32 32M1N5800A (4k144), LG 32" (4K60) | Gigabyte G32QC (2k165) | Phillips 328m6fjrmb (2K144)
Case Fractal Design R6
Audio Device(s) Logitech G560 | Corsair Void pro RGB |Blue Yeti mic
Power Supply Fractal Ion+ 2 860W (Platinum) (This thing is God-tier. Silent and TINY)
Mouse Logitech G Pro wireless + Steelseries Prisma XL
Keyboard Razer Huntsman TE ( Sexy white keycaps)
VR HMD Oculus Rift S + Quest 2
Software Windows 11 pro x64 (Yes, it's genuinely a good OS) OpenRGB - ditch the branded bloatware!
Benchmark Scores Nyooom.
the drivers are no diffirent they just changed the integrity check methode to check for the chip (hasnt changed) and to check the bios (has changed) in eather case i cnnot hack a bios on the board to do that...i had originally thought i cold do his but apon attempting it with my early tests i came to the conclusion that not only was i unable to isolate the string in the bios that allowed it but i would need to mod the bios of every single system that someone asked me to mod it for because chipsets bios types and sizes vaery so much between boards that their was no way for me to make a "generic" change

look at the vista OEM hack, that was a bootloaded that faked BIOS stuff. it may be possible to do the same.
 

Solaris17

Super Dainty Moderator
Staff member
Joined
Aug 16, 2005
Messages
25,776 (3.79/day)
Location
Alabama
System Name Rocinante
Processor I9 14900KS
Motherboard EVGA z690 Dark KINGPIN (modded BIOS)
Cooling EK-AIO Elite 360 D-RGB
Memory 64GB Gskill Trident Z5 DDR5 6000 @6400
Video Card(s) MSI SUPRIM Liquid X 4090
Storage 1x 500GB 980 Pro | 1x 1TB 980 Pro | 1x 8TB Corsair MP400
Display(s) Odyssey OLED G9 G95SC
Case Lian Li o11 Evo Dynamic White
Audio Device(s) Moondrop S8's on Schiit Hel 2e
Power Supply Bequiet! Power Pro 12 1500w
Mouse Lamzu Atlantis mini (White)
Keyboard Monsgeek M3 Lavender, Akko Crystal Blues
VR HMD Quest 3
Software Windows 11
Benchmark Scores I dont have time for that.
look at the vista OEM hack, that was a bootloaded that faked BIOS stuff. it may be possible to do the same.

good call but all in good time i have too many projects atm.
 

opieum

New Member
Joined
Nov 22, 2008
Messages
20 (0.00/day)
Yea that was my point. To do a comparison. It should be MUCH easier to do a code comparison. I may wait till next payday and pick up an X58 setup to test out this theory. BIOS hacks of any kind almost seem more trouble than their worth BUT seeing how it worked so well at between the BIOS and OS level with Vista and even Mac OS (different implementations but same idea) it might be a more lasting solution to try. Hell if it could be rolled into the default Vista setup then it makes it so no matter the driver version (because if the key gets changed then it just a matter of installing a patch that updates to a new working key)

Solaris, if you have any pointers and what I could do to get started, I would be happy to try at this with some guidance :p It would be easier to just get this going over all. PM me if you have any docs or info that I can reference to get started (I have some ideas but anything you have with the work you have done is welcome as well) :D
 
Last edited:

opieum

New Member
Joined
Nov 22, 2008
Messages
20 (0.00/day)
HA Here is an update. Via what should be called a penecillin hack :p It was discovered by accident.

http://netkas.org/?p=91 This is a hacker for the Hackintosh scene. But he was working specifically on a hack for EFI and DSTD to enable a Mac Retail CD to boot unmodified and found out how the certification works. Have fun. Sounds like this could be universally applied (seeing as you can run Mac OS on white boxes because of some of his hacks) Mind you the discovery is OS independent. So that should apply across the board.
 

ShadowFold

New Member
Joined
Dec 23, 2007
Messages
16,918 (2.85/day)
Location
Omaha, NE
System Name The ShadowFold Draconis (Ordering soon)
Processor AMD Phenom II X6 1055T 2.8ghz
Motherboard ASUS M4A87TD EVO AM3 AMD 870
Cooling Stock
Memory Kingston ValueRAM 4GB DDR3-1333
Video Card(s) XFX ATi Radeon HD 5850 1gb
Storage Western Digital 640gb
Display(s) Acer 21.5" 5ms Full HD 1920x1080P
Case Antec Nine-Hundred
Audio Device(s) Onboard + Creative "Fatal1ty" Headset
Power Supply Antec Earthwatts 650w
Software Windows 7 Home Premium 64bit
Benchmark Scores -❶-❸-❸-❼-
So you can SLI on a 790FX/GX board with those?
 

zerg32

New Member
Joined
Apr 12, 2009
Messages
2 (0.00/day)
I've repeated the steps from that post for GA-EX58-UD3R-SLI bios.

There is an interesting piece of code:
If (LEqual (FUNC, 0x41494C53))
{
Return (\_SB.PCI0.SLIC)
}

I've looked in the nvlddmkm.sys using IDA Pro for this hex code.
There is something that looks like a WMI call with this code. I'm not able to trace what this function does, cause I'm not experienced IDA user. But in my opinion for IDA/Assembler Guru it'll not be a problem to find how the protection works.

But for X58 it should work already, you just have to modify the acpi table. But I dont have required hardware to test with.

If anyone is interested I can write a short guide how to unpack the bios and edit this acpi tables.
 

cdawall

where the hell are my stars
Joined
Jul 23, 2006
Messages
27,680 (4.29/day)
Location
Houston
System Name All the cores
Processor 2990WX
Motherboard Asrock X399M
Cooling CPU-XSPC RayStorm Neo, 2x240mm+360mm, D5PWM+140mL, GPU-2x360mm, 2xbyski, D4+D5+100mL
Memory 4x16GB G.Skill 3600
Video Card(s) (2) EVGA SC BLACK 1080Ti's
Storage 2x Samsung SM951 512GB, Samsung PM961 512GB
Display(s) Dell UP2414Q 3840X2160@60hz
Case Caselabs Mercury S5+pedestal
Audio Device(s) Fischer HA-02->Fischer FA-002W High edition/FA-003/Jubilate/FA-011 depending on my mood
Power Supply Seasonic Prime 1200w
Mouse Thermaltake Theron, Steam controller
Keyboard Keychron K8
Software W10P
i'm interested on getting SLi running on my 790GX board any guide would be amazing
 

Fitseries3

Eleet Hardware Junkie
Joined
Oct 6, 2007
Messages
15,508 (2.58/day)
Location
Republic of Texas
can you hook me up with quad SLI on p45?

if your really talented maybe you can get septo SLI working for me :D
 

BUCK NASTY

4P Enthusiust
Joined
Aug 8, 2007
Messages
4,974 (0.82/day)
Location
Port St Lucie, FL. U.S.A.
System Name Main Rig
Processor AMD FX-4130 @ 4.8Ghz
Motherboard ASUS M5A99X Evo
Cooling Coolermaster Hyper 212+
Memory 8GB GSkill DDR3 1600
Video Card(s) ASUS GTX 970 Strix @ 1503Mhz Core
Storage Corsair Force 90gb SSD/ WD Caviar Blue 750gb
Display(s) ASUS 24" IPS
Case Coolermaster Centurion 590
Audio Device(s) Onboard
Power Supply Antec TP750 80+
Software Windows 7 Ultimate 64
can you hook me up with quad SLI on p45?

if your really talented maybe you can get septo SLI working for me :D

Mine's easier. I need just regular Sli on my p45. It would be nice now that I have dual 260's:shadedshu
 

zerg32

New Member
Joined
Apr 12, 2009
Messages
2 (0.00/day)
I'll try to write a guide for X58 boards, but it wouldn't be very usefull, because many of them have already sli support.

Is here anybody with X58 board without sli support wanting to try modded bios ?

P.S.
I have P45 myself and hope the some guru will hack the driver.
 

opieum

New Member
Joined
Nov 22, 2008
Messages
20 (0.00/day)
So you can SLI on a 790FX/GX board with those?

The general idea is that you can edit your BIOS to add this in. I would save the page just in case it goes down. Still this is great. I like nvidia cards, but hate their chipsets.
 

eidairaman1

The Exiled Airman
Joined
Jul 2, 2007
Messages
40,435 (6.61/day)
Location
Republic of Texas (True Patriot)
System Name PCGOD
Processor AMD FX 8350@ 5.0GHz
Motherboard Asus TUF 990FX Sabertooth R2 2901 Bios
Cooling Scythe Ashura, 2×BitFenix 230mm Spectre Pro LED (Blue,Green), 2x BitFenix 140mm Spectre Pro LED
Memory 16 GB Gskill Ripjaws X 2133 (2400 OC, 10-10-12-20-20, 1T, 1.65V)
Video Card(s) AMD Radeon 290 Sapphire Vapor-X
Storage Samsung 840 Pro 256GB, WD Velociraptor 1TB
Display(s) NEC Multisync LCD 1700V (Display Port Adapter)
Case AeroCool Xpredator Evil Blue Edition
Audio Device(s) Creative Labs Sound Blaster ZxR
Power Supply Seasonic 1250 XM2 Series (XP3)
Mouse Roccat Kone XTD
Keyboard Roccat Ryos MK Pro
Software Windows 7 Pro 64
if you hadnt read the news Gigabyte Recently enabled SLI across their Entire x58 Chipset Boards.
I've repeated the steps from that post for GA-EX58-UD3R-SLI bios.

There is an interesting piece of code:
If (LEqual (FUNC, 0x41494C53))
{
Return (\_SB.PCI0.SLIC)
}

I've looked in the nvlddmkm.sys using IDA Pro for this hex code.
There is something that looks like a WMI call with this code. I'm not able to trace what this function does, cause I'm not experienced IDA user. But in my opinion for IDA/Assembler Guru it'll not be a problem to find how the protection works.

But for X58 it should work already, you just have to modify the acpi table. But I dont have required hardware to test with.

If anyone is interested I can write a short guide how to unpack the bios and edit this acpi tables.
 

opieum

New Member
Joined
Nov 22, 2008
Messages
20 (0.00/day)
if you hadnt read the news Gigabyte Recently enabled SLI across their Entire x58 Chipset Boards.


Right but the point is the certfication or the so called "cookie" has been found and could be implemented on ANY board anywhere with the right tools. I am going to try this on one of my older non-sli boards I am not using. I will post an update once I have it working. If it works I can post a howto to enable anyone to do this on their own setup
 

opieum

New Member
Joined
Nov 22, 2008
Messages
20 (0.00/day)
@zerg Please write a guide. It will save everyone the time. Maybe over time this can be scripted to be simplified.
 

e.v.o

New Member
Joined
Apr 18, 2009
Messages
14 (0.00/day)
I've repeated the steps from that post for GA-EX58-UD3R-SLI bios.

There is an interesting piece of code:
If (LEqual (FUNC, 0x41494C53))
{
Return (\_SB.PCI0.SLIC)
}

I've looked in the nvlddmkm.sys using IDA Pro for this hex code.
There is something that looks like a WMI call with this code. I'm not able to trace what this function does, cause I'm not experienced IDA user. But in my opinion for IDA/Assembler Guru it'll not be a problem to find how the protection works.

But for X58 it should work already, you just have to modify the acpi table. But I dont have required hardware to test with. Also there is no "nvlddmkm.sys" file on my system.

If anyone is interested I can write a short guide how to unpack the bios and edit this acpi tables.

This is only the return function. There is some more "code" with the cert ahead of it. Look at the UD4 BIOS (F3 and F4).

We only need to know now what else the driver is checking... since the driver is not only looking for the certificate...
 
Top