• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

AMD Radeon Pro WX 4150/4170 Mobile - custom VBIOS FOR HP ZBook + iMac

Joined
May 22, 2020
Messages
122 (0.17/day)
Location
Ukraine
AIDA64 Acpi browser to query VRMB (edited)

dmem to view address and buffer size (edited)

edit memory with hexedit

patched few date symbols (edited)

No results

I thought it would work, but nope



VRMB and VRMS discovery by @theroadw




////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// ////////////////////////////// //////////////////////////////////////////////////////////////
//////////////////////////////////////////
C16A52E5-BD7E-4832-AD94-AC92BD498D81.png
00111265-F7A9-49F3-BFB8-DBD435106F36.jpeg
D73DC228-B434-48AC-9862-CC76293B0D77.jpeg
Third shadowed vbios location







/////////////////////////////////
/////////////////////////////////
/////////////////////////////////
/////////////////////////////////
Shadowed locations:
34D49018 - Unknown
37E3901C - VRMB
37EAF000 - VFCT




??????
VFCT IS CREATED BY GOP. As my gpu contains GOP, it will be always created. So VFCT is vbios for GOP
 
Last edited:
Joined
May 22, 2020
Messages
122 (0.17/day)
Location
Ukraine
/////////////
VFCT IS CREATED BY GOP. As my gpu contains GOP, it will be always created. So VFCT is vbios for GOP

I have found 5 shadowed vbioses at ram for supported GPUs

/////////////

Strato vbios locations at ram:

9C0E00001530003000440034000000 = 0xF BYTES
FFFFFFFFFFFF = 0x6 BYTES
804FBF2BFCB769418C0C90 97C42E6B7238AA02002AF800F804F80019 = 0x1c BYTES

0x2CC18414
0x2DDAB410

0x34CED018 - MXM (Reserved by default for mxm SPI ROM)
0x34CFB818 - MXM GOP (Reserved by default for mxm SPI ROM)

0x37E3901C - MXM - ACPI VRMB
0x37E4781C - MXM GOP (Reserved by default for mxm SPI ROM)

0x37EAF068 - MXM - ACPI VCFT GOP


WX4150 ID (AT RAM)
0x34E1A478
0x369F8002
0x0F100000





Intel VBIOS is at:
0x2DCC3040
0x34CCA020
0x34CDB034
0x3CB30064
 
Last edited:
Joined
May 22, 2020
Messages
122 (0.17/day)
Location
Ukraine
Finally got a proof that non of oses use mxm spi read event. So possibly that those hidden addresses are storing the vbios used by default. So even clover does not have access to mxm. I done four Catalina boot: uma, hybrid, discrete and with load vbios option at clover

69CB6B50-33C6-4871-B8F3-1C23341530D0.png
 

W1zzard

Administrator
Staff member
Joined
May 14, 2004
Messages
24,031 (3.65/day)
Processor Core i7-8700K
Memory 32 GB
Video Card(s) RTX 3080
Display(s) 30" 2560x1600 + 19" 1280x1024
Software Windows 10 64-bit
Do you have access to the full BIOS in the location pointed to by the VCFT table, or only part of it?
 

W1zzard

Administrator
Staff member
Joined
May 14, 2004
Messages
24,031 (3.65/day)
Processor Core i7-8700K
Memory 32 GB
Video Card(s) RTX 3080
Display(s) 30" 2560x1600 + 19" 1280x1024
Software Windows 10 64-bit
Joined
May 22, 2020
Messages
122 (0.17/day)
Location
Ukraine
So I looked some more into the VCFT table (which seems to be AMD-only)

Struct definition around here: https://elixir.bootlin.com/linux/v4.1.45/source/drivers/gpu/drm/radeon/atombios.h#L7950

With a 6800 XT


this table is only 44 KB long in total and contains only part of the full VBIOS


The full VBIOS is 1 MB
Yes, that vbios is acpi way to interact with hardware. If you compare in with original vbios, you will see that in firmware module it has post states and other editions. Also the display part is injected and a lot other stuff: https://www.techpowerup.com/forums/...custom-vbios-for-hp-zbook.279373/post-4572977


What app is showing you structure viewer?


I suspect that VFCT is generated by GOP driver which which is second part of bios and PCI connected efi compressed driver. You can easy decompress driver.VFCT.png
 
Joined
May 22, 2020
Messages
122 (0.17/day)
Location
Ukraine
Easy RAM dump method:

IMPORTANT: At efishell environment there is no thermal control, so CPU will heat, but fans wont work. If bios is set to quite mode (fans on without AC) then it will work for 2-3 minutes and system will perform safety shutdown. But this can damage CPU


Boot EFISHEELL first as default boot and recommend storage with recording speed at least 40 mb\s (/EFI/BOOT/BOOTX64.efi). Nothing before that should be loaded, even BIOS. Boot fresh after 15-30 seconds of full system shutdown to release capacitors, otherwise you will get dirty ram or a lot of win/clover/macos data there

After efisheel loaded:

Mount fs0
Fs0:
Ls
Mkdir ramdump1
Cd ramdump1
hexditor



After hex editor executed:
Ctrl+M


Dump address map:
00000000
05000000
0A000000
0F000000
14000000
19000000
1E000000
23000000
28000000
2D000000
32000000
37000000
3C000000
41000000
46000000
4B000000
50000000
55000000
5A000000
5F000000
64000000
69000000

Buffer=05000000

05000000 = 83,886,080 bytes (83.9 MB on disk)


Then press Ctrl+G
Write 00000000
Press F4 to set input
Press Ctrl+G
Write 04FFFFFF
Press F5 to set output
Press Ctrl+X to cut buffer
Press Ctrl+O to open file
It will ask you to patch ram, Press N - No
Write filename (example 00+05.bin) 00 start address, 05 buffer size
After new empty file will be opened, press Ctrl+V to paste buffer
Press Ctrl+S to save buffer to disk
Press UP or any key which is not influence on data at buffer to unfreeze hex editor
Press Enter to confirm Save

You will see at left bottom corner: XXXXXX lines were saved


After the file was saved press Ctrl+M and make same procedure with new Address


I don't see reason to dump empty space, after 55 I have only FFFFFFFFFFFF



Efisheel and RU efi which can run on ZBook
 

Attachments

  • EFI.zip
    533.1 KB · Views: 42
Last edited:
Joined
May 22, 2020
Messages
122 (0.17/day)
Location
Ukraine
1639137767961.png


NEW VERSION WHICH IS MORE STABLE FOR MOVING ALL MODULES OFFSETS AT 3 CLICKS !






//////////////////////////////////////////////////////////////




Apple Pitcairn Saturn Tonga Venus Whistler EFI
GOPS
 

Attachments

  • RepositionAllModules_V2.zip
    16.1 KB · Views: 30
  • Apple_Pitcairn-Saturn-Tonga-Venus-Whistler_GOPS.zip
    280 KB · Views: 25
Last edited:
Joined
May 22, 2020
Messages
122 (0.17/day)
Location
Ukraine
Clockrequest pin is important for nvidia mxm gpus but not for amd.

Working on pci to mxm adapter modding:
B87DD612-D91C-417C-8C5A-A58A75136478.jpeg914421F6-F3F9-4E36-8A5B-1AAAC87E6F3B.jpegCAF0E1A2-8B1F-4449-B118-23E8C267BBF9.jpeg402F38BE-8AAB-4A1A-9F8F-2BEE2E853456.jpeg
 
Joined
May 22, 2020
Messages
122 (0.17/day)
Location
Ukraine
MUX IC PS8461 Schematic for Zbook G5, G6
Screen Shot 2021-12-17 at 11.02.20 AM.png
 

Attachments

  • ESM5 - PC50HS(-G) PC50HR(-G) PC50HP(-G) PC51HS(-G) PC51HR(-G) PC51HP(-G).pdf
    8 MB · Views: 252

vinanator

New Member
Joined
Apr 21, 2022
Messages
3 (0.12/day)
Hi, I was wondering if you guys think a dell wx4150 with these vbios would work in a hp z1 g3 aio? It originally came with the same part # m2000m as the zbook g3, and the internal display is connected via edp through a mux. Thanks and sorry if this is off topic

Edit: I understand I will need copper shims for the heatsink and fans will be stuck at 100%, but should work if I do the thermal ic mod
 
Last edited:

vinanator

New Member
Joined
Apr 21, 2022
Messages
3 (0.12/day)
Zbook G1 15?
No, its an all in one desktop system, HP Z1 G3. It has mxm-a graphics, the options were 2 quadro cards which have the same part number as the ones in the Zbook 15 G3. I'm looking at purchasing a Z1 G3 desktop and upgrading its quadro M2000M to a WX4150, like you guys are doing here in the Zbooks. What I want to specifically ask is: 1) Will a green pcb dell card work with the vbios posted here? 2) The internal display is connected via edp through a mux chip, and the 3 DP out ports are also through a mux and then through a thunderbolt controller. Will the vbios for the zbooks allow atleast the internal display and one DP out? Or will this require a "connectors patch" described on the first page? 3) Do you think theres a chance this will even work?
Here is a schematic of the internals if you would like to take a look: https://www.manualslib.com/manual/1390462/Hp-Z1-G3.html?page=14#manual
Thanks in advance
 
Last edited:
Joined
May 22, 2020
Messages
122 (0.17/day)
Location
Ukraine
No, its an all in one desktop system, HP Z1 G3. It has mxm-a graphics, the options were 2 quadro cards which have the same part number as the ones in the Zbook 15 G3. I'm looking at purchasing a Z1 G3 desktop and upgrading its quadro M2000M to a WX4150, like you guys are doing here in the Zbooks. What I want to specifically ask is: 1) Will a green pcb dell card work with the vbios posted here? 2) The internal display is connected via edp through a mux chip, and the 3 DP out ports are also through a mux and then through a thunderbolt controller. Will the vbios for the zbooks allow atleast the internal display and one DP out? Or will this require a "connectors patch" described on the first page? 3) Do you think theres a chance this will even work?
Here is a schematic of the internals if you would like to take a look: https://www.manualslib.com/manual/1390462/Hp-Z1-G3.html?page=14#manual
Thanks in advance
Wow! I have never heard about this desktop! Very interesting device! Yeah the bios should require a modification. Also I think that this desktop will require some additional modifications. Do you have soldering skills and heat gun? Anyway you will always get an error message of gpu failure, also secure boot will be unavailable.


I will try to search for images and documents for this desktop. Also for bios modding you will require to have a skills for multimeter usage. I think dp port tracing will be required.

Green dell is okay but It could be without thermal controller and smbus jumpers which should be added after
 

vinanator

New Member
Joined
Apr 21, 2022
Messages
3 (0.12/day)
Wow! I have never heard about this desktop! Very interesting device! Yeah the bios should require a modification. Also I think that this desktop will require some additional modifications. Do you have soldering skills and heat gun? Anyway you will always get an error message of gpu failure, also secure boot will be unavailable.


I will try to search for images and documents for this desktop. Also for bios modding you will require to have a skills for multimeter usage. I think dp port tracing will be required.

Green dell is okay but It could be without thermal controller and smbus jumpers which should be added after
I have a soldering gun and skills but I have never tried small parts on a circuit board. I unfortunately do not have a soldering hot air gun, but I can buy one. What sort of modifications need to be done?

I have a multimeter and know how to use it so thats no problem.

I sadly can only find dell cards for sale, if the card is missing the thermal controller how hard would it be to add the parts for someone who's never soldered on such a small scale? I can probably find an old circuit board to practice with.

Also I should mention I plan to dualboot the machine with windows and mac os, which i know is probably a whole other challenge but I atleast have some experience with hackintoshing. But, to be honest I may have gotten myself in way over my head with this whole idea. The motivation for it is to learn about mxm, but it looks like I'm going to need more help than I expected (I hoped maybe the zbook was similar enough to just use the vbios and have it work). Truthfully I do not have the knowledge to do an uncharted upgrade like this without my hand being held the whole time, if you think this is a bad idea please let me know.
 
Joined
May 22, 2020
Messages
122 (0.17/day)
Location
Ukraine
I have a soldering gun and skills but I have never tried small parts on a circuit board. I unfortunately do not have a soldering hot air gun, but I can buy one. What sort of modifications need to be done?

I have a multimeter and know how to use it so thats no problem.

I sadly can only find dell cards for sale, if the card is missing the thermal controller how hard would it be to add the parts for someone who's never soldered on such a small scale? I can probably find an old circuit board to practice with.

Also I should mention I plan to dualboot the machine with windows and mac os, which i know is probably a whole other challenge but I atleast have some experience with hackintoshing. But, to be honest I may have gotten myself in way over my head with this whole idea. The motivation for it is to learn about mxm, but it looks like I'm going to need more help than I expected (I hoped maybe the zbook was similar enough to just use the vbios and have it work). Truthfully I do not have the knowledge to do an uncharted upgrade like this without my hand being held the whole time, if you think this is a bad idea please let me know.
Check my 1 post. Thermal controller replacement is easy.
 
Joined
May 22, 2020
Messages
122 (0.17/day)
Location
Ukraine
The way is about How to restore EC recovery flash
This flash contain next info:
upd_01Padding_Non-empty_Padding => ec_01Padding_Non-empty_Padding.pad


0x2000 - BIOS DESCRIPTOR REGION
0x3000 - Region_GbE_GbE_region
0x5000 - VSS_entry_Auth_20AB3EB1-3C8F-4A4C-B87E-372426066D97_HP_MUD_body
0x5186 - VSS_entry_Auth_20AB3EB1-3C8F-4A4C-B87E-372426066D97_BuildId_body
0x51F6 - VSS_entry_Auth_20AB3EB1-3C8F-4A4C-B87E-372426066D97_FactoryConfig_body
0x53EA - VSS_entry_Auth_20AB3EB1-3C8F-4A4C-B87E-372426066D97_FactoryConfigFlags_body

0x6000 - Unknown
0x8000 - Unknown
0x9000 - Unknown

0x0B6000 - upd_01Padding_Non-empty_Padding will start at Offset

=================================================================================================================================
upd_02Volume_FFSv3_EfiFirmwareFileSystem3Guid => ec_02Volume_FFSv3_EfiFirmwareFileSystem3Guid
=================================================================================================================================
upd_04Padding_Non-empty_Padding => ec_03Padding_Non-empty_Padding

0x10F000 - upd_04Padding_Non-empty_Padding

=================================================================================================================================
upd_05Volume_FFSv2_EfiFirmwareFileSystem2Guid => ec_04Volume_FFSv2_EfiFirmwareFileSystem2Guid
upd_10Padding_Non-empty_Padding => ec_05Padding_Non-empty_Padding
upd_11Volume_FFSv2_B73FE497-B92E-416E-8326-45AD0D270091 => ec_06Volume_FFSv2_B73FE497-B92E-416E-8326-45AD0D270091
upd_12Volume_FFSv2_F924054A-05C4-457A-A1F3-22C5F42078CB => ec_07Volume_FFSv2_F924054A-05C4-457A-A1F3-22C5F42078CB
 

Attachments

  • map.txt
    1.5 KB · Views: 1
Top