Try our *UPDATED* boardview, bios, & schematic search. Over 2.3 million files for download!

mec 16xx dump with info block

Collapse
X
 
  • Time
  • Show
Clear All
new posts

  • pokyss1
    replied
    Originally posted by rickjansen01
    Hello
    Can someone remove the password from this mec1663 flash and eeprom dump
    X1 Yoga gen 5
    PF-2CG9F9
    20UB-S05E00
    Best regards Chris
    HEllo i have the sem machine you hellp my haw to read mec withe svod 4 thax.

    Leave a comment:


  • Heaton41
    replied
    thank you for information badcaps is the best

    Leave a comment:


  • Maxpower3
    commented on 's reply
    If it's about the password, there are other solutions.
    https://www.youtube.com/@M._.x._.Pow...?query=mec1663
    https://www.badcaps.net/forum/troubl...ss#post3713959

  • peste
    replied
    Originally posted by Heaton41
    Hello every one i want to ask if i can read the mec1663 chip with T48 programmer and if i can how to do that and thank you in advance
    you can't with this programmer..but you can with these..
    https://www.youtube.com/watch?v=sKVIr33v5zg
    https://www.badcaps.net/forum/troubl...ssword-removal

    Leave a comment:


  • Heaton41
    replied
    Hello every one i want to ask if i can read the mec1663 chip with T48 programmer and if i can how to do that and thank you in advance

    Leave a comment:


  • fatihkudu
    replied
    Originally posted by Maxpower3
    try
    Click image for larger version

Name:	image.png
Views:	956
Size:	775.2 KB
ID:	3536926
    thank you perfect

    Leave a comment:


  • webhost
    replied
    Originally posted by vuquanghoanh

    I did it your way. For Thinkpad X1 Carbon Gen 7th "FX90 NM-B861 Rev: 1.0". I can read the EC dump but it's only 192 Kb
    Unluckily, I blew out this resistor. I re-soldered it but the laptop couldn't boot up.
    Does anyone know the value of this resistor?
    Thank you
    Hello Brother

    I just want ask you , wich software do you use for extracte Mec bin from original bios .

    Thank you .

    Leave a comment:


  • Skene
    replied
    Originally posted by monolith-2001
    Attempting to read MEC1663 blocks JTAG and prevents the read operation.
    s there a way to unblock JTAG and continue reading?

    Programmer:SUCCESSOR BASE2
    X1 Carbon Gen8
    20UA
    PF-1SJ5XP
    Click image for larger version Name:	MEC1663.jpg Views:	0 Size:	52.1 KB ID:	3170421
    HELLO
    Ihave the same problem did u slove the problem ?

    Leave a comment:


  • arber1232
    replied
    i found just write x1 Yoga 4th ....not x1 yoga Gen 4

    Leave a comment:


  • arber1232
    replied
    Originally posted by volinakis
    Re: mec 16xx dump with info block

    Solved, finally! Had to edit plnsrv.ini, model wasn't in list.
    hey how are i have same problem with x1 yoga 4 th how to do that error with brand name

    Leave a comment:


  • Stefan Steff
    replied
    Originally posted by osman68i
    Hi Badcaps Team,

    T15 Gen1 with bios lock.

    SN: PF2RVTMS

    I have checked the dump but I cant find the location of the pass
    Try to read 384kB and then you will find the location.

    Leave a comment:


  • osman68i
    replied
    Hi Badcaps Team,

    T15 Gen1 with bios lock.

    SN: PF2RVTMS

    I have checked the dump but I cant find the location of the pass
    Attached Files

    Premium supporters get full download access and other benefits.

    Leave a comment:


  • antongoikoetxea
    replied
    Thanks to everyone for the help.
    My case was a ThinkPad X1 Carbon Gen 7 with motherboard NM-C661. I used an SVOD3 and the pinout from the picture I’m attaching. The reset is not needed when using the pull-down resistor.

    In the SVOD software I selected EEPROM, and once the dump was read I changed the data from 0x300–0x34F to FF. After reprogramming, the password issue was solved.

    Many thanks again to all, and I hope this can help anyone else who has the same model.
    Attached Files

    Premium supporters get full download access and other benefits.

    Leave a comment:


  • Maxpower3
    replied
    Originally posted by djacksod
    I am posting the mec1663 Lenovo T14 nm-c931 1st gen intel 10th that I read, the eeprom address where the password is located is at offset 0x300.
    lines 350 and 360 should not be deleted
    Click image for larger version

Name:	image.png
Views:	756
Size:	16.2 KB
ID:	3690542
    It's easier to find your way around with the decrypted file



    Last edited by Maxpower3; 07-25-2025, 12:37 PM.

    Leave a comment:


  • djacksod
    replied
    I am posting the mec1663 Lenovo T14 nm-c931 1st gen intel 10th that I read, the eeprom address where the password is located is at offset 0x300.
    Attached Files

    Premium supporters get full download access and other benefits.

    Leave a comment:


  • jaglion19
    replied
    Originally posted by hoaca388

    This is what you read, from top to bottom.


    Click image for larger version

Name:	2025-04-15 16_27_48-HxD - [F__MEC1633_256K_20250415_15118.BIN].png
Views:	802
Size:	649.8 KB
ID:	3615434
    I have a Dell e7440 la-9591p motherboard, no matter what I did on the device, I couldn't start it. It uses MEC5075. On the first page, someone shared the jtag paths for tx390, I searched from the schematic and found the same legs. Can I make this read by soldering it in the same way as SWOD? or with rt809f? or what are its legs? Also, I think the place where it says rp1 is for jtag, but there is a resistor with 103 written on it. Can I remove it, solder the 5 paths and 3 gnds and read it?
    Attached Files

    Premium supporters get full download access and other benefits.

    Leave a comment:


  • saman mawlod
    replied
    [QUOTE=hoaca388;n3615433]


    lenovo p52
    type 20ma-s6hh00
    sn pf-1ns7hl
    mec1653
    can unlock
    Attached Files

    Premium supporters get full download access and other benefits.

    Leave a comment:


  • khaledmosa99
    replied
    hello i got thinkpad t14 gen1 20s0 with burn mec1663 i replaced it with a new one i got the jtag connection with my vertyanove programmer try to cut ec when i write it i got blinking white led 3 times only can some one help me to fined the file flash+epperom
    nm-c931 rev 1.0 my s/n PF2A58EN
    thank all for help

    Leave a comment:


  • pokyss1
    replied
    Originally posted by nesredin
    hello how to read and write with rt809f mec1663 with this x1 carbon
    NM-B861 REV 1.0​
    yes

    Leave a comment:


  • nesredin
    replied
    Originally posted by vuquanghoanh

    I followed Maxpower3's instructions and it worked. Follow him, you will also succeed.
    Let's thank Maxpower3.
    hello how to read and write with rt809f mec1663 with this x1 carbon
    NM-B861 REV 1.0​

    Leave a comment:

Related Topics

Collapse

  • BigPete
    Panasonic LED TV Dead after EMMC dump
    by BigPete
    I recently took a dump of the 4GB EMMC dump of a new and working Panasonic main board and now the TV won't turn on.
    The dump was successful and the program finished without errors.
    I used a XGecu T48 to do the dump.
    I actually had a few issues getting it to go and I might write up something as a bit of a guide as I couldn't find much in English to go from.
    One thing I did do was connect a 1kohm resistor from the 1.2v line to the RSTN pin as per the instructions, could this have caused issues?
    I also shorted out the crystal of the adjoining ECU together and at one...
    03-15-2026, 03:08 AM
  • s.izadbakhsh
    Monster Abra A5 V19.3 - Tongfang GM5AGFO MB V1.1 - BIOS Dump Clean ME Request
    by s.izadbakhsh
    Hi everyone,

    I need a working BIOS dump for a Monster Abra A5 V19.3 laptop.

    Here are the motherboard details:
    • Model: Tongfang GM5AGFO MB V1.1
    • CPU: Intel 12th Gen (Alder Lake)

    The laptop is currently in a boot loop (turns on and off immediately). I have desoldered the SPI Flash IC (GigaDevice GD25R256DYIG) and read the original 32MB dump.

    Note: I have already tried testing another BIOS dump found online, but the laptop behaves exactly the same (on/off boot loop) with both the original dump and the other file.

    Could someone please provide...
    06-24-2026, 09:10 AM
  • delosit
    Lenovo IdeaPad XiaoXin Chao7000-15ARR – only motherboard available, need help reconstructing clean BIOS
    by delosit
    Hello everyone,

    I’m working on a Lenovo IdeaPad XiaoXin Chao7000-15ARR (Ryzen platform) and I need some help with BIOS reconstruction.

    Unfortunately I only have the bare motherboard (no original chassis, no sticker, no working system).
    The laptop came with black screen.

    What I have:
    - Original SPI dump read from the board (W25Q64DW 1.8V, 8MB)
    - Official Lenovo BIOS update (.CAP file)
    - Photos of the motherboard (front and back)
    - Board powers on, but with original dump it stays black screen

    What I tested:
    ...
    01-15-2026, 09:11 AM
  • Trademark
    Acer Predator Triton 16 PT16-51-99GL (DA0ZQDMB8AE Rev. E) - Looking for original 32MB BIOS dump (Winbond W25Q256JVEN)
    by Trademark
    Hello everyone,

    I’m hoping someone can help me locate a verified original BIOS dump for my Acer laptop.

    This is NOT a BIOS password removal request.

    I’m looking for an original 32MB SPI BIOS dump to use as a reference in case my BIOS firmware is corrupted. My plan is to first dump and back up my own BIOS as soon as my programmer arrives. I am not planning to blindly flash someone else’s BIOS.

    Laptop Information
    • Model: Acer Predator Triton 16 PT16-51-99GL
    • Motherboard: DA0ZQDMB8AE Rev. E
    • Main SPI flash: Winbond W25Q256JVEN (32MB)
    • Secondary
    ...
    07-22-2026, 08:57 AM
  • weisian
    VSX-1021 - Update Error 1, DSP replaced, potentially need working firmware dump
    by weisian
    Hi all,

    I have a VSX-1021 that dropped the UE22 error on me and is no longer was working. I've then done the following:
    1. Tried updating the firmware with a firmware I found online but it hangs at 20% and ultimately shows "Update Error 1". I didn't check prior to attempting the firmware upgrade but the firmware after shows "***" for the DSP numbers. This was before I looked online that pushing an update through with a bad DSP chip could corrupt the firmware.
    2. Tried reflowing the original DSP chip (D810K013BZKB4000) but firmware version remains "***"...
    03-12-2026, 05:54 AM
  • Loading...
  • No more items.
Working...