USE AT YOUR OWN RISK,I won't be responsible for any damage.

Tested on Legion 5 4800H (Bios: EUCN31WW), should work on every bios with the "!cE" variable as described below:

This was found after reversing the BIOS, In particular DebugPageDxe, there there are many check(some involving the PS/2 IO port, some CMOS IO/port, PCD->GetBool) and if at leas one is true EFI variables ("!Fn+D") and ("!cE") are created.
This mean that Could exist also keyboard Combination to enable the advanced menu, but I didn't bother to reverse further, as was not worth it.

On next boot if that "!Fn+D" is set, "!Fn+D" and "!cE" are cleared so next boot, will be locked again.
Then On H20FormBrowserDXE there there is a check on the presence of an EFI variable, and If present the bios is unlocked.

These utility simply create and destroy only the "!cE" variable, (Is just a couple of line of code):Feel free to reverse if not belive me.
Not creating the "!Fn+D" prevent that the bios is automatically locked, but I from my reversing effort, this variable seem to have no other effect.

To check if your bios is "Vulnerable" search for "cE!" unicode text in UEFI tool, if two result are found (one on DebugPageDxe and the other on H20FormBrowserDXE)

How run it: it a simple EFI app, if you don't know how run it, this Utility is not for you.

If someone is Interested, I can make a writeup on the reversing effort.

Tools Used and Resource:
* UefiTool
* UEFI Spec
* Ghidra

Ps: I don't know how many of these unlocked settings are effectively working, I didn't wanted to brick my laptop changing stuff like PSTATE or DRAM timing.

Good job. Why didn't you release it even earlier?

Zitat von Sweet Kitten im Beitrag #2

---

Good job. Why didn't you release it even earlier?

---

has this been tested on EUCN33WW i shared my bios file on the attachments yesterday i don't wanna risk breaking my system