mec 16xx dump with info block

[dimah77]

Re: mec 16xx dump with info block

Ok now that that is solved ill share my diagram and instructions.
T14s - MEC-1663 - Jtag - Pinout - Bios Password Removal



Now next issue setting Serial / Model / Etc.
Lenovo T14s (NM-B891)
Iv Tried to Use Lenovo Maintenance Utility 1.89 (i7tm38us)
But I get and error *EEPROM Overflow

Same issue here: https://www.badcaps.net/forum/showth...EPROM+overflow

Hi,
You are using MEC-1633#ISP in RT809H Settings, the resulting file is 192k, is this the correct size? shouldn't it be 256 or 290?

[coolshrimp]

Re: mec 16xx dump with info block

Hi,
You are using MEC-1633#ISP in RT809H Settings, the resulting file is 192k, is this the correct size? shouldn't it be 256 or 290?

Using MEC-1633#ISP Worked for me and others recommended but there is a MEC-16xx 256k option that could be selected instead.

[dimah77]

Re: mec 16xx dump with info block

Using MEC-1633#ISP Worked for me and others recommended but there is a MEC-16xx 256k option that could be selected instead.

I work on a T14 G1, I tested your settings, and also with 256K, I got a 256K file with more data then the 192k at the end of the file

[coolshrimp]

Re: mec 16xx dump with info block

I work on a T14 G1, I tested your settings, and also with 256K, I got a 256K file with more data then the 192k at the end of the file

I looked at my file and you’re right there is more info at the end that was cut off.
On mine the cut off was just blank padding no content so likely why it had no effect.
So the 256k would be a better option.
Depending what MEC chip your Reading the size may be different.

[dimah77]

Re: mec 16xx dump with info block

I looked at my file and you're right there is more info at the end that was cut off.
On mine the cut off was just blank padding no content so likely why it had no effect.
So the 256k would be a better option.
Depending what MEC chip your Reading the size may be different.

it's a MEC-1663 , after read-erase-wait 2 mn without power-write-put back resistor , still password there. (192k file), not tested to write 256k yet

[ymifdal]

Re: mec 16xx dump with info block

it's a MEC-1663 , after read-erase-wait 2 mn without power-write-put back resistor , still password there. (192k file), not tested to write 256k yet

to my knowledge, choosing either 192k or 256k is fine, same result
and so if you did the "read erase remove all power sources including cmos batt" and the password is still there, then it is probably not a bios password you are dealing with, just remove the SSD it should work fine it's a hard disk password

[dimah77]

Re: mec 16xx dump with info block

to my knowledge, choosing either 192k or 256k is fine, same result
and so if you did the "read erase remove all power sources including cmos batt" and the password is still there, then it is probably not a bios password you are dealing with, just remove the SSD it should work fine it's a hard disk password

Using RT809F, choosing MEC1633-256K , unlock done.
Don't choose MEC1633#ISP , it provide 192K file and password is not removed after write back.

[dinarte]

Re: mec 16xx dump with info block

has someone figuered out how to unlock the AMD version as well?

[couillu76]

Re: mec 16xx dump with info block

that it! after weeks of trying to unlock my x13 gen 1 laptop with my svod4 i finally manage to unlock it with an rt809h it was easy thank for all your infos on this website it help, but i did it with the rt809h not with the svod4

[ajbernasko]

Re: mec 16xx dump with info block

Hello, This board is for the Lenovo X1 Yoga gen 5, I need to read the MEC1663 chip but I am asking if the indicated red button is the JTAG pins outs ?
Also I knocked out one resistor and i believe it is 10K 0201 resistor.


thank you in advance.

[anhbanxoi]

Re: mec 16xx dump with info block

Hello, This board is for the Lenovo X1 Yoga gen 5, I need to read the MEC1663 chip but I am asking if the indicated red button is the JTAG pins outs ?
Also I knocked out one resistor and i believe it is 10K 0201 resistor.


thank you in advance.

Yes, somebody connected like the attachment photo.

[ajbernasko]

Re: mec 16xx dump with info block

Yes, somebody connected like the attachment photo.

Thank you for your reply, I have the same cable with RT809H, I will try it out and let the forum know.

[AHMED14NET]

Re: mec 16xx dump with info block

How did you make jtag for t490 mec 1663

[dimah77]

Re: mec 16xx dump with info block

how did you make jtag for t490 mec 1663

like this ... without RST

[ajbernasko]

Re: mec 16xx dump with info block

Yes, somebody connected like the attachment photo.

Please can you help me label which one it is TMS, RST, TDI, TDO and GND. Thank you

[dimah77]

Re: mec 16xx dump with info block

Please can you help me label which one it is TMS, RST, TDI, TDO and GND. Thank you

like this :

[ajbernasko]

Re: mec 16xx dump with info block

like this :

Yes I saw the flying configuarions from previows post and or on the RT809H but this is different. On your image looks like the jtag pin number 5 is GND but on the x1 Yoga Gen 5 pin number 6 is GND

[javieromex]

Re: mec 16xx dump with info block

Hello!
Anyone can help me?

Lenovo: ThinkPad T14 Gen 1
MB: NM-C931 with MEC1663
Issue: Need to remove BIOS PASSWORD
SVOD4

I moved R8715 to R8716 position and solder the wires to the JTAG Port, I am getting this from the SVOD: (see image)

And when clicking read, it reads the MEC but I cannot see any data on the HEX section. (The machine does power up)

I am afraid to clic on erase and brick the computer!

Any help?

Thanks!

[mazoot]

Re: mec 16xx dump with info block

MEC1663 has 290 kb not 192kb probably your svod4 cannot flash normal this chip,or settings not normal read manual

[javieromex]

Re: mec 16xx dump with info block

MEC1663 has 290 kb not 192kb probably your svod4 cannot flash normal this chip,or settings not normal read manual

Thanks four your answer

I am able to "Confic MEC" with 288K but same result, when reading nothing appears on the HEX.

How can I read manual?