Hi there

Got a labtop in second hand, the guy just forgot the password. The labtop is fine, so I cannot risk too much messing with the BIOS.

The Big problem there is that he doesn't boot from usb, never Sadly

BIOS Vendor: TIMI
BIOS Version: XMGCF500P0604
BIOS Release Date: 10/02/2018
BIOS Start Segment: E000
BIOS Size: 16384 KBytes
System BIOS Version: 1.6
Embedded Controller Firmware Version: 1.4
Intel ME Version: 12.0, Build 1091, Hot Fix 3

Original (from the manufacturer) and Backup BIOS dump (from the machine): https://www.dropbox.com/sh/1drdee495buso...KMVgJYbq8a?dl=0
Backup was made with FPTW64.

What did I tried:
- every option on platform.ini... nothing works, it looks that is ignoring the file
- comparing the binaries of backup and original
- Seeing multiple programs with BIOS info.

Please help me, if it is something that takes a lot of time, you could try to explain to me and I try to do by myself.
I'm really lost right now.

I think this is an InsydeH2O Bios, 10 characters of password.

It's a Xiaomi Gaming Labtop.

Thank you

SOLVED (but I really don't know HOW... so I can post here)

@davser

More information is needed...

What EXACTLY is the issue? Are you trying to recover/bypass a password, or flash a new BIOS firmware?

Make is Xiaomi, what is the model?

If you are trying to recover/bypass a password...EXACTLY which password is the issue? BIOS pw? Hard Drive pw? ...?

If it is the BIOS password, there are several ways to "bypass" it.

If it's the Hard Drive (BitLocker, etc.), without the password or other (USB) recovery method, your information is gone. Reformat and reuse the drive.

If you are trying to flash a new BIOS and you are getting an error, screenshots of the error messages would be helpful (or write them down).

Hi

I already know the password, a guy helped me talking to me in PM. However I don't know the method... but he retrieve the password very quickly.
I really don't know what he used. If I know, I will explain here. I guess he must used an hex editor or something...
I was really interested knowing that, but is just curiosity. Practical terms I already know the password.

A couple of guys told it was impossible and that I needed hardware.

Is the master BIOS password.

Zitat von davser im Beitrag #3

---

I already know the password, a guy helped me talking to me in PM. However I don't know the method... but he retrieve the password very quickly.

---

Zitat von davser im Beitrag #3

---

I already know the password, a guy helped me talking to me in PM. However I don't know the method... but he retrieve the password very quickly.

---

Zitat von DeathBringer im Beitrag #4

---

It was me. :)

---

Well, knowing the password, it was relatively easy to understand the process.

I really don't know if this is the method for all Insyde BIOS, but I'm sure this works on a Xiaomi Gaming Labtop or maybe other Xiaomi Labtop.

The main difficult here is really not getting the password from the dump. I did not get it, because I saw some information saying that it was needed some hardware.

Also I used a very limited HexEditor that could not give me a full screen view of the hex characters converted.

The problem was that the H2OFFT (Insyde Firmware Flash Tools) that I downloaded, kept saying that it was the wrong version. I downloaded several versions, none of them worked.

Then I read in a page something about the Intel Management Engine... (ME). I discovered that I needed the H20FFT for my version of ME.

I found that version, and finally worked, mine was v12. I got the dump. I saw my version with HWInfo.

Later another guy sent me a installer, that I never saw elsewhere, that trries to install all the versions of the H20FFT until he catches yours (nice idea!).

The software also test if your BIOS is write protected... mine was, so I was sure that I need some hardware to rewrite BIOS.

Best chance was discover the password with an HexEditor, with no risk at all of crashing the BIOS.

Then @DeathBringer saw my dump, he just said that no cables were needed, and caught my needed password.

I didn't have much experience in hex editors, so I lost confidence to look on the dump (it could not be that easy, I thought).

Well it is, the password was near a line saying something like "Master pw".

So, a nice trick will be search for "pw" or "master" inside the dump.

I hope I can help someone with this.

Thanks @DeathBringer (for password) and other guy (for the all versions FFT).

Hello
I have got same problem.
My BIOS is protected by some password..
Can You help me? I also have Xiaomi device. There is 10 digit password and the hash is not generated..

@lewiad95
Can you boot in Windows?
Have you a hardware programmer to read BIOS chip?

@DeathBringer
Yes, I can boot into OS, but I don't have hardware programmer.
I read in manual for Insyde H20FFT software that it can make BIOS backup but there is no any example how to do it.

@lewiad95
Try to use Universal BIOS Backup ToolKit 2.0 to make suitable backup.

@DeathBringer
I have an error: "Can not identyfi the BIOS !"

@lewiad95
Set manually custom size to 8192K.

Zitat von DeathBringer im Beitrag #12

---

@lewiad95
Set manually custom size to 8192K.

---

Zitat von lewiad95 im Beitrag #13

---

Can You help how to decode backuped rom?

---

Zitat von DeathBringer im Beitrag #14

---

Zitat von lewiad95 im Beitrag #13

---

Can You help how to decode backuped rom?

---

I need to see it.

---