I would like to let you know that I have successfully carried this out on the following device:
ThinkPad X13 Yoga Gen 1
20SY-S4JC00
LBB-2 MB 19733-1
UEFI BIOS N2UET474W (1.27)
EC FW: N2UHT27W (1.10)

I have soldered a micro switch with thin isolated copper wires between R1854 (LPC_AD_CPU_P0) and GND. The resistor can be found in the area between Wifi module and CPU (see boardview).
After the Lenovo boot logo appeared I have pressed the button until error messages are shown on the screen. Then (as shown in the videos) supervisor password is disabled,...

Thank you. But at the end replacing only the key and the bytes after CE CB (as SMDFlea has proposed) was absolutely sufficient. I have repeated the BIOS file patching. Maybe I have done anything wrong during my first try.

Now I could upgrade from Ver1.49 to Ver1.59 and already have my own license key.

Thank you for your help!...

The described Windows Key replacement seems to work, but doesn't survives an official BIOS update. Btw, to have a reliable programmer, I have bought a new Xgecu T76 + SO8 clip adapter. This programmer shows if pins are not connected properly and seems to be dependable.

Here my reproducible steps:
1. program BIOS file Type_20KE_BIOS_Ver_149_CSME_Clean+WinKey.rar from thread: https://www.badcaps.net/forum/troubl...-%E2%80%94-me-...

Ok, thanks anyway for the clarification. I thought it was generic and should work for all ThinkPad BIOSes.

I didn't want to change the serial number, but rather insert the Windows key....

When I compare your screenshots and my before after BIOS recovery hexfiles, I see, that the absolute start address of this block you mentioned varies in all cases.
Should I copy the windows key block (you have marked in your screenshots) to the same address? Or is the absolut address not relevant and the EC chip or the CPU "finds" this block by a special pattern?...

Dear EvilBzyk,

I had a corrupted BIOS for a Thinkpad X280. I have already described my problem here:
https://www.badcaps.net/forum/troubl...35#post3822135

Means, I have a running X280 again (without Windows key) but I could extract the original Windows key of that device from the corrupted BIOS.
Now I found your script and wanted to give it a try injecting this key into the BIOS again. Maybe I'm a good...

First of all, a big thank you to the forum. You've already helped me a lot and saved me a lot of time.

I received an X280 with a corrupted BIOS. I then tried to dump the BIOS using my CH341 V1.7. I was able to read the BIOS "in-circuit."
Since I already have an almost identical X280, I thought I'd read the BIOS from that one and write it to the other.
Unfortunately, I couldn't get a usable BIOS. The checksums were always different.
Then I thought I'd give up. But unfortunately, my own X280 wouldn't boot anymore either. Somehow, my CH341 V1.7 seems to...