IBM thinkpad t61 bios hacking

[witek]

Does anybody know if s08 from R400 is good for R61 ?

I have working R400, but is it worth disassembly to read eeprom and write it to R61 ?

[Widisgudd]

Hi to all. I have a r400 model 7439-bd9. Before doing anything I would like to know if the SVP for this TP is TCPA protected. Thanks.

[ferretuk]

There is a chap on ebay who will sell you a bios chip you tell him your model he sends you the chip you solder it in and it works

[babina]

hello, i have Lenovo T61, dumped eeprom and now i need patch and write back, is avaiable patcher for this?must be patched invidualy eeprom or patched eeprom is universal??thanks

[pckolev]

Hey, who wants to send bin file read by eeprom I'll fix it and return it by mail this is my mail


No emails please

[largi]

Anyone have some details on how to modify an eeprom dump correctly?

[amourh59]

hello , i ahve a IBM T400
I have password , i have read the eeprom and i decode dump with ibm pass 2.1 lite
the password is in the line 0x330
i have founde somme like thiS : F 9f Y
I TRY THIS PASSWORD MANY TIMES but it's not word

can you help me please ?
this is the dump :
Attachment 270430Attachment 270430Attachment 270430

[rithien]

hello , i ahve a IBM T400
I have password , i have read the eeprom and i decode dump with ibm pass 2.1 lite
the password is in the line 0x330
i have founde somme like thiS : F 9f Y
I TRY THIS PASSWORD MANY TIMES but it's not word

can you help me please ?
this is the dump :
Attachment 270430Attachment 270430Attachment 270430

Your file doesn't have plain password. If long passwords is enabled only password hash is stored in eeprom memory
Write attachment to memory and your password will be 1234567
ibm_pass1234567.rar

[amourh59]

GREAT THANKS rithien
IT'S WORK

[jjjj72]

I am able to read my eprom from T500 using simple i2cprog connector but password has funny looking characters.
I edited bin file with with password 123457 but when I try to use w24rf08 to rewrite eprom. The program shows error "unable to open source file". Please help

[rithien]

I am able to read my eprom from T500 using simple i2cprog connector but password has funny looking characters.
I edited bin file with with password 123457 but when I try to use w24rf08 to rewrite eprom. The program shows error "unable to open source file". Please help

Ponyprog doesn't read correctly 24rf08
As I remember all eeprom pages is doubled.
Send me your dump to: bios(at)biospassword.eu

[JoeeC]

Hey, Hey,

same on my T400: w24rf08 say "unable to open source file" even if I just try to unlock with the /P switch.

Can I use the previous posted hex file ibm_1234567.bin or do I need a special one?

Here is my eeprom dump:
eep.zip


Greetz from Oktoberfest ;-)

[AndromedaC]

@Rithien - you are a legend:-)!

I was about to send my eeprom dump to allservice.ro, when I came across this thread.
I had already tried inserting ff into 0x338 to 0x33f, and 0x340 to 0x347. when I uploaded using w24rf08, the laptop entered the bios with a simple 'enter', but NONE of the features were editable at all.
I had also tried changing the data to a name(i.e. david) but that gave a 170 error-bad SVP checksum.

Finally I cut and pasted your code from 0x338 - 0x33f and 0x340 - 0x347 to the same place in my dump, uploaded with w24rf08 and bingo! The SVP was 1234567!

My laptop is an R500 BTW

[AndromedaC]

@JoeeC

I have edited your uploaded eeprom to add the 1234567 password, see attached?
eep.zip

[onkeltom]

Hi,

i read eeprom from my T61 with simple-i2cprog and USB to serial converter.
But when I open dump file with ibmpass the line 0x330 shows something like f `,
I can't enter it as SVP. Or is the SVP set with other keyboard layout? My keyboard layout is german.
Please tell me what to do. Any hints?
Please see attached dump.
dump_t61.zip

Greetings,
onkeltom