AMD Radeon Pro WX 4150/4170 Mobile - custom VBIOS FOR HP ZBook + iMac

[bigguygeo]

AIDA64 Acpi browser to query VRMB (edited)

dmem to view address and buffer size (edited)

edit memory with hexedit

patched few date symbols (edited)

No results

I thought it would work, but nope



VRMB and VRMS discovery by @theroadw




////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// ////////////////////////////// //////////////////////////////////////////////////////////////
//////////////////////////////////////////



Third shadowed vbios location







/////////////////////////////////
/////////////////////////////////
/////////////////////////////////
/////////////////////////////////
Shadowed locations:
34D49018 - Unknown
37E3901C - VRMB
37EAF000 - VFCT



??????
VFCT IS CREATED BY GOP. As my gpu contains GOP, it will be always created. So VFCT is vbios for GOP

 

[bigguygeo]

/////////////
VFCT IS CREATED BY GOP. As my gpu contains GOP, it will be always created. So VFCT is vbios for GOP

I have found 5 shadowed vbioses at ram for supported GPUs

/////////////

Strato vbios locations at ram:

9C0E00001530003000440034000000 = 0xF BYTES
FFFFFFFFFFFF = 0x6 BYTES
804FBF2BFCB769418C0C90 97C42E6B7238AA02002AF800F804F80019 = 0x1c BYTES

0x2CC18414
0x2DDAB410

0x34CED018 - MXM (Reserved by default for mxm SPI ROM)
0x34CFB818 - MXM GOP (Reserved by default for mxm SPI ROM)

0x37E3901C - MXM - ACPI VRMB
0x37E4781C - MXM GOP (Reserved by default for mxm SPI ROM)

0x37EAF068 - MXM - ACPI VCFT GOP


WX4150 ID (AT RAM)
0x34E1A478
0x369F8002
0x0F100000




Intel VBIOS is at:
0x2DCC3040
0x34CCA020
0x34CDB034
0x3CB30064

 

[bigguygeo]

Finally got a proof that non of oses use mxm spi read event. So possibly that those hidden addresses are storing the vbios used by default. So even clover does not have access to mxm. I done four Catalina boot: uma, hybrid, discrete and with load vbios option at clover

 

[W1zzard]

Do you have access to the full BIOS in the location pointed to by the VCFT table, or only part of it?

 

[bigguygeo]

Do you have access to the full BIOS in the location pointed to by the VCFT table, or only part of it?

Full vbios generated by amd gop driver

 

[W1zzard]

So I looked some more into the VCFT table (which seems to be AMD-only)

Struct definition around here: https://elixir.bootlin.com/linux/v4.1.45/source/drivers/gpu/drm/radeon/atombios.h#L7950

With a 6800 XT

this table is only 44 KB long in total and contains only part of the full VBIOS

The full VBIOS is 1 MB

 

[bigguygeo]

So I looked some more into the VCFT table (which seems to be AMD-only)

Struct definition around here: https://elixir.bootlin.com/linux/v4.1.45/source/drivers/gpu/drm/radeon/atombios.h#L7950

With a 6800 XT

this table is only 44 KB long in total and contains only part of the full VBIOS

The full VBIOS is 1 MB

Yes, that vbios is acpi way to interact with hardware. If you compare in with original vbios, you will see that in firmware module it has post states and other editions. Also the display part is injected and a lot other stuff: https://www.techpowerup.com/forums/...custom-vbios-for-hp-zbook.279373/post-4572977


What app is showing you structure viewer?


I suspect that VFCT is generated by GOP driver which which is second part of bios and PCI connected efi compressed driver. You can easy decompress driver.

 

[W1zzard]

What app is showing you structure viewer?

Hex Editor Neo. You have to define the structs yourself though

 

[bigguygeo]

Easy RAM dump method:

IMPORTANT: At efishell environment there is no thermal control, so CPU will heat, but fans wont work. If bios is set to quite mode (fans on without AC) then it will work for 2-3 minutes and system will perform safety shutdown. But this can damage CPU

Boot EFISHEELL first as default boot and recommend storage with recording speed at least 40 mb\s (/EFI/BOOT/BOOTX64.efi). Nothing before that should be loaded, even BIOS. Boot fresh after 15-30 seconds of full system shutdown to release capacitors, otherwise you will get dirty ram or a lot of win/clover/macos data there

After efisheel loaded:

Mount fs0
Fs0:
Ls
Mkdir ramdump1
Cd ramdump1
hexditor

After hex editor executed:

Ctrl+M


Dump address map:
00000000
05000000
0A000000
0F000000
14000000
19000000
1E000000
23000000
28000000
2D000000
32000000
37000000
3C000000
41000000
46000000
4B000000
50000000
55000000
5A000000
5F000000
64000000
69000000

Buffer=05000000

05000000 = 83,886,080 bytes (83.9 MB on disk)

Then press Ctrl+G
Write 00000000
Press F4 to set input
Press Ctrl+G
Write 04FFFFFF
Press F5 to set output
Press Ctrl+X to cut buffer
Press Ctrl+O to open file
It will ask you to patch ram, Press N - No
Write filename (example 00+05.bin) 00 start address, 05 buffer size
After new empty file will be opened, press Ctrl+V to paste buffer
Press Ctrl+S to save buffer to disk
Press UP or any key which is not influence on data at buffer to unfreeze hex editor
Press Enter to confirm Save

You will see at left bottom corner: XXXXXX lines were saved


After the file was saved press Ctrl+M and make same procedure with new Address


I don't see reason to dump empty space, after 55 I have only FFFFFFFFFFFF



Efisheel and RU efi which can run on ZBook

 

[bigguygeo]

NEW VERSION WHICH IS MORE STABLE FOR MOVING ALL MODULES OFFSETS AT 3 CLICKS !






//////////////////////////////////////////////////////////////




Apple Pitcairn Saturn Tonga Venus Whistler EFI
GOPS

 

[bigguygeo]

Clockrequest pin is important for nvidia mxm gpus but not for amd.

Working on pci to mxm adapter modding:

 

[bigguygeo]

MUX IC PS8461 Schematic for Zbook G5, G6

 

[bigguygeo]

NPCE586HA0MX

ZBOOK G3 SPI
Connection to EC

 

[vinanator]

Hi, I was wondering if you guys think a dell wx4150 with these vbios would work in a hp z1 g3 aio? It originally came with the same part # m2000m as the zbook g3, and the internal display is connected via edp through a mux. Thanks and sorry if this is off topic

Edit: I understand I will need copper shims for the heatsink and fans will be stuck at 100%, but should work if I do the thermal ic mod

 

[bigguygeo]

hp z1 g3 aio

Zbook G1 15?

 

[vinanator]

Zbook G1 15?

No, its an all in one desktop system, HP Z1 G3. It has mxm-a graphics, the options were 2 quadro cards which have the same part number as the ones in the Zbook 15 G3. I'm looking at purchasing a Z1 G3 desktop and upgrading its quadro M2000M to a WX4150, like you guys are doing here in the Zbooks. What I want to specifically ask is: 1) Will a green pcb dell card work with the vbios posted here? 2) The internal display is connected via edp through a mux chip, and the 3 DP out ports are also through a mux and then through a thunderbolt controller. Will the vbios for the zbooks allow atleast the internal display and one DP out? Or will this require a "connectors patch" described on the first page? 3) Do you think theres a chance this will even work?
Here is a schematic of the internals if you would like to take a look: https://www.manualslib.com/manual/1390462/Hp-Z1-G3.html?page=14#manual
Thanks in advance

 

[bigguygeo]

No, its an all in one desktop system, HP Z1 G3. It has mxm-a graphics, the options were 2 quadro cards which have the same part number as the ones in the Zbook 15 G3. I'm looking at purchasing a Z1 G3 desktop and upgrading its quadro M2000M to a WX4150, like you guys are doing here in the Zbooks. What I want to specifically ask is: 1) Will a green pcb dell card work with the vbios posted here? 2) The internal display is connected via edp through a mux chip, and the 3 DP out ports are also through a mux and then through a thunderbolt controller. Will the vbios for the zbooks allow atleast the internal display and one DP out? Or will this require a "connectors patch" described on the first page? 3) Do you think theres a chance this will even work?
Here is a schematic of the internals if you would like to take a look: https://www.manualslib.com/manual/1390462/Hp-Z1-G3.html?page=14#manual
Thanks in advance

Wow! I have never heard about this desktop! Very interesting device! Yeah the bios should require a modification. Also I think that this desktop will require some additional modifications. Do you have soldering skills and heat gun? Anyway you will always get an error message of gpu failure, also secure boot will be unavailable.


I will try to search for images and documents for this desktop. Also for bios modding you will require to have a skills for multimeter usage. I think dp port tracing will be required.

Green dell is okay but It could be without thermal controller and smbus jumpers which should be added after

 

[vinanator]

Wow! I have never heard about this desktop! Very interesting device! Yeah the bios should require a modification. Also I think that this desktop will require some additional modifications. Do you have soldering skills and heat gun? Anyway you will always get an error message of gpu failure, also secure boot will be unavailable.


I will try to search for images and documents for this desktop. Also for bios modding you will require to have a skills for multimeter usage. I think dp port tracing will be required.

Green dell is okay but It could be without thermal controller and smbus jumpers which should be added after

I have a soldering gun and skills but I have never tried small parts on a circuit board. I unfortunately do not have a soldering hot air gun, but I can buy one. What sort of modifications need to be done?

I have a multimeter and know how to use it so thats no problem.

I sadly can only find dell cards for sale, if the card is missing the thermal controller how hard would it be to add the parts for someone who's never soldered on such a small scale? I can probably find an old circuit board to practice with.

Also I should mention I plan to dualboot the machine with windows and mac os, which i know is probably a whole other challenge but I atleast have some experience with hackintoshing. But, to be honest I may have gotten myself in way over my head with this whole idea. The motivation for it is to learn about mxm, but it looks like I'm going to need more help than I expected (I hoped maybe the zbook was similar enough to just use the vbios and have it work). Truthfully I do not have the knowledge to do an uncharted upgrade like this without my hand being held the whole time, if you think this is a bad idea please let me know.

 

[bigguygeo]

I have a soldering gun and skills but I have never tried small parts on a circuit board. I unfortunately do not have a soldering hot air gun, but I can buy one. What sort of modifications need to be done?

I have a multimeter and know how to use it so thats no problem.

I sadly can only find dell cards for sale, if the card is missing the thermal controller how hard would it be to add the parts for someone who's never soldered on such a small scale? I can probably find an old circuit board to practice with.

Also I should mention I plan to dualboot the machine with windows and mac os, which i know is probably a whole other challenge but I atleast have some experience with hackintoshing. But, to be honest I may have gotten myself in way over my head with this whole idea. The motivation for it is to learn about mxm, but it looks like I'm going to need more help than I expected (I hoped maybe the zbook was similar enough to just use the vbios and have it work). Truthfully I do not have the knowledge to do an uncharted upgrade like this without my hand being held the whole time, if you think this is a bad idea please let me know.

Check my 1 post. Thermal controller replacement is easy.

 

[bigguygeo]

The way is about How to restore EC recovery flash
This flash contain next info:

upd_01Padding_Non-empty_Padding => ec_01Padding_Non-empty_Padding.pad


0x2000 - BIOS DESCRIPTOR REGION
0x3000 - Region_GbE_GbE_region
0x5000 - VSS_entry_Auth_20AB3EB1-3C8F-4A4C-B87E-372426066D97_HP_MUD_body
0x5186 - VSS_entry_Auth_20AB3EB1-3C8F-4A4C-B87E-372426066D97_BuildId_body
0x51F6 - VSS_entry_Auth_20AB3EB1-3C8F-4A4C-B87E-372426066D97_FactoryConfig_body
0x53EA - VSS_entry_Auth_20AB3EB1-3C8F-4A4C-B87E-372426066D97_FactoryConfigFlags_body

0x6000 - Unknown
0x8000 - Unknown
0x9000 - Unknown

0x0B6000 - upd_01Padding_Non-empty_Padding will start at Offset

=================================================================================================================================
upd_02Volume_FFSv3_EfiFirmwareFileSystem3Guid => ec_02Volume_FFSv3_EfiFirmwareFileSystem3Guid
=================================================================================================================================
upd_04Padding_Non-empty_Padding => ec_03Padding_Non-empty_Padding

0x10F000 - upd_04Padding_Non-empty_Padding

=================================================================================================================================
upd_05Volume_FFSv2_EfiFirmwareFileSystem2Guid => ec_04Volume_FFSv2_EfiFirmwareFileSystem2Guid
upd_10Padding_Non-empty_Padding => ec_05Padding_Non-empty_Padding
upd_11Volume_FFSv2_B73FE497-B92E-416E-8326-45AD0D270091 => ec_06Volume_FFSv2_B73FE497-B92E-416E-8326-45AD0D270091
upd_12Volume_FFSv2_F924054A-05C4-457A-A1F3-22C5F42078CB => ec_07Volume_FFSv2_F924054A-05C4-457A-A1F3-22C5F42078CB

 

[bigguygeo]

Tool to grab registers:

How can I enable "Disable and Lock Turbo Power Limits" in Linux based system to solve 6 watt throttling issue on 8250u.

Hello, I have an issue with my laptop asus x411un with i5-8250u processor. I recently noticed that it's working quite slowly and started investigation. It turned out that under load laptop is throttled by power to only 6 watts on processor (clock drops to 0.8 - 1.2 Ghz). For example when I start...

www.techpowerup.com

SSDT-x6_0-Cpu0Ist_127 - this acpi from BIOS 01.27 which has the best perfomance. just drop existing and replace. maybe some methods are missing, this is related to flashed bios build

 

[bigguygeo]

[In Process] Zbook G3 / G4 Thunderbolt hotplug (Thunderbolt Enable) + S0, S3​

[Pre Final] Zbook G3 / G4 Thunderbolt hotplug (Thunderbolt Enable) + S0, S3

Hi everyone! The latest build is on the link: Github repositories As it easier to synchronize with desktop and modifications The entire thread is for research posts and discussion Follow the manual to make all things working correct. Please report of any glitches or problems of build...

www.tonymacx86.com

FOR HACKINTOSH OR FUN​

 

[ssj92]

Hi, I stumbled upon this thread and it may be what I am looking for. Instead of W4150 I have a RX 580 MXM (same as WX7100M) coming.

From my understanding the vBIOS will need to be edited in order for it to work in my older Alienware M17xR3 (I had 8970m working before by removing uefi gop).

This laptop needs vBIOS with no uefi gop (no VBE7 for polaris to make this easy for me) but also the display output needs to support eDP so the internal panel can work with it. ( I have no idea if the rx 580 already has this support but will dump vBIOS with programmer when I get it). There are a few RX 580 Mobile MXM vBIOS on the TPU vBIOS collection I could try.

Is what is being done here to WX4150 , modifying the outputs? If so can this also be done to RX 580 mxm card? Looks like @bigguygeo has good knowledge of this topic

 

[bigguygeo]

Hi, I stumbled upon this thread and it may be what I am looking for. Instead of W4150 I have a RX 580 MXM (same as WX7100M) coming.

From my understanding the vBIOS will need to be edited in order for it to work in my older Alienware M17xR3 (I had 8970m working before by removing uefi gop).

This laptop needs vBIOS with no uefi gop (no VBE7 for polaris to make this easy for me) but also the display output needs to support eDP so the internal panel can work with it. ( I have no idea if the rx 580 already has this support but will dump vBIOS with programmer when I get it). There are a few RX 580 Mobile MXM vBIOS on the TPU vBIOS collection I could try.

Is what is being done here to WX4150 , modifying the outputs? If so can this also be done to RX 580 mxm card? Looks like @bigguygeo has good knowledge of this topic

Hi! You can dump vbios with amdflash tool or gpuz. To know which DP ports are connected to the gpu is the best with schematics or boardview of laptop. Mxm has DP_A, DP_B, DP_C, DP_D, DP_E, DP_F. The port are enabling by the vbios, the next is to connect transmission to the ports, enable hotplug gpio and connect it to the port. And the last is to add eDP to one of ports. Don’t forget to post the original vbios


It was some time ago, but I will try to remember it.

And check if your laptop is not muxless, otherwise it will use Enduro virtual displays

 

[ssj92]

Hi! You can dump vbios with amdflash tool or gpuz. To know which DP ports are connected to the gpu is the best with schematics or boardview of laptop. Mxm has DP_A, DP_B, DP_C, DP_D, DP_E, DP_F. The port are enabling by the vbios, the next is to connect transmission to the ports, enable hotplug gpio and connect it to the port. And the last is to add eDP to one of ports. Don’t forget to post the original vbios


It was some time ago, but I will try to remember it.

And check if your laptop is not muxless, otherwise it will use Enduro virtual displays

I have attached some schematics, I have the full set, but let me know if this one helps. The card should arrive next Wednesday or Thursday.

This laptop has the 120hz eDP panel so Intel iGPU is not enabled at all. I also have a 60hz LVDS panel laying around, that one enables intel iGPU but I have unlocked BIOS so I can turn it off as well.