The Ultimate Razer Blade Unlock Guide

This is the ultimate guide to unlock your Razer Blade, I wanted to make a 2021 version of all the guides combined to make it easier for all of us. I don't know if this would work with a AMD version, and I don't recommend it. Therefor this guide is only for People with a Intel Razer Blade.



DISCLAIMER: I am not responsible for any damage caused by a wrong change! ITS UP TO YOU. Any wrong change or flash can disable your Blade within seconds! Be care full and read everything twice if you are not experienced enough. IF you don't understand something, ASK, before you make any change.

Have your Blade plugged in all the time, you change something critical!


Credits go to this amazing people with their original guides and help:

David Kirchik, for the Powerlimit removal!

stranula, for all the unlocks he made und found!

MagillaGorilla, to found a way to unlock the BIOS without any hardware programmer!

ZeroBarrier, that helped me a lot, to understand all of this and his mini guide!



In this Guide we will take care of things Razer apparently can’t do. We will unlock the BIOS, mod it, make some nice changes and unlock the good old overclocking features. Which will lead into a cooler and faster Blade at the same time. And that’s not everything. We also can take care of the GPU, where we can flash a vBIOS with a higher TDP to unlock more power.

This is the ULTIMATE UNLOCK and UNLEASH GUIDE!​

I will complete this guide in the next days more and more. THIS GUIDE IS NOT FINISHED YET

First of, we should make some preparation before we start.

- Ask your self if your Blade is able to handle the extra heat and power
- Are you willing to do this, mostly your guarantee is gone after this guide.
- Do you willing to take the risk of bricking your device?


All changes however are revertable!

Welcome to the Ultimate Guide​

This is the first step we need to do, to unlock the BIOS, Overclocking and make it flashable.

The tools we need for this part:
1. a bootable USB-stick
2. ru.efi and copy it to your bootable USB stick.
3. UEFItool
4. IRFextract
5. UniExtractor
6. a BIOS for your Razer Blade (can be extracted from a BIOS Updater Tool, with UniExtract, or saved from your ram)


The harder part is to find a BIOS for your Blade. The eisest way is to download a BIOS updater for your Blade, and extract the files with a tool. Search for a .bin file that is as big as 16mb That’s your Bios. Make sure the installed BIOS version is the same as the one you saved!

How do we unlock the BIOS with RU.efi:
​

IF you have your BIOS, open UEFITool, insert the BIOS here. Now open the search and type CFG LOCK in and search. On the bottom of the picture you can see that UEFITool found "CFG LOCK". Just click down there to instantly navigate to the needed page. After you found the section, right click and click on "export as it is" and name it sec. Like this:

Spoiler: open me

Spoiler: open me

Now you need to convert the sec file into a readable file for notepad. You need the IFRextract.exe. First off, rename it as IFR for easier access via the CMD.

Open a CMD as admin, navigate to the folder where your ifr.exe is. Make sure your sec file is in the same folder as IFR.


Note here: the sec file has to be in the same folder as IFR, otherwise it won’t work. Also, if you don’t know how to navigate in a CMD, just google "How to navigate via a CMD" Keep in mind that you have the to rename the exported file as "sec" for the command. Otherwise you have to type:

Spoiler: open me

Code:

"ifr YOURFILENAME.sct YOURFILENAME.txt"

Using IFRextractor:
​

Type the following command to create a readable file for notepad:

Spoiler: open me

Code:

ifr sec.sct sec.txt

It should look like this in the CMD window:

Spoiler: open me

And after the tool finished like this:

Spoiler: open me

Finding all the hex values you will need:​

Now open the Sec.txt file and use the search tab and search for CFG LOCK, OVERLOCKING LOCK, BIOS LOCK and FPRR. Find the hex values, like below:

Spoiler: open me

Note: don't copy my values! your values can be different as mine!


When you found all the values, note them somewhere down (smartphone, etc) , you can’t access your laptop while being in the RU.EFI editor.

Using the RU.efi hex editor:​

Reboot your laptop and go to the BIOS first, disable secure boot and reboot. Now open the Boot Menu, select the USB drive.

Type ru.efi and press enter

Just press any key to continue.

Press Alt + = to browse.

First go to the CpuSetup page. Here are the hex values for CFG LOCK and OVERCLOCKING LOCK. Change both from 01 to 00. Press ALT + W to save the config for CpuSetup.

Now press ALT + = again and go to PchSetup. This time search for the hex values for BIOS LOCK and FPRR, same here change both from 01 to 00 ( in most cases FRPP is already at 00, no changes needed here)


Now press CTRL + W again to save.

Reboot and enable secure boot in the BIOS again.

Now you are able to flash the BIOS and use ThrottleStop or XTU.
Note: I recommend to install ThrottleStop. ONLY XTU ver. 6.5.2.40 works if you want to use XTU, all other versions will be locked!



This was part 1 of the guide. You now have a flashable bios. Now we can dumb the unlocked BIOS again and make some changes to it in part 2.

Unlock all the hidden menu's and functions:
​

Welcome to the second part. Here you will be able to un-hide the Overclocking Performance Menu for your blade.

the important: Credits go to stranula for his original guide.


Lets get started.

What tools we need in this part:

• AMIBCP (need to find it self)
• AfuWinGuix64 5.X or newer
• UEFITool
  
• A hex editor like this one https://hexed.it/?hl=en
• CSME System Tools for your specific CPU

CSME System Tools for your respective CPU - (for Intel Flash Programming Tool) 10th gen requires: CSME System Tools v14.0.11-r1 and 11th gen requires: CSME v15.0 r10
from here.

read the linked guide and download the correct version.

Edit the BIOS:
​

We have two ways of dumping the BIOS. First is via AFUWINGUIx64, open the program and click save to save your BIOS. Or use CSME System Tools (Intel Flash Programming Tool) where you can also dump your BIOS. Which we also need to flash the modified BIOS later on.

open a CMD window in the same folder as FPTW is and type the following command

• FPTW64 -d nameyourbios.bin -bios (to dump your bios from the ram)

now we have saved our BIOS on our system.

Un-hide the Performance Overclocking Menu:
​

Open the BIOS with our UEFITool. Open the search tab and type: AMITSE

You will get a few results, but check for the on that looks similar to mine:

Spoiler

It should be found between, AMITSE and AMITSESetupData. Right click the PE32 image and "Export as is" name it AMITSE and save. Now we open our saved file with a hex editor.I personally use https://hexed.it/ its simple and good enough for our wants.

The next thing we need is our Sec.txt file from the RU edit. Simply open the file again, this time search for Memory Overclocking Menu, if you can't find anything search for "Memory" and continue.

It should look like this:

Spoiler

In my case my Overclocking Performance Menu ID is 27A5.
Dont copy my values, your values can be different!


Now we head to our beloved hex editor and open the

​

 

Please note that the RBP 17 2020 has its FPRR and Bios Lock value locked.

I tried to change the value using RU.efi and other means. No dice.

 

Would you mind to share a screenshot?

 

Did you press ctrl + w to write to bios after changing the values to FF? If not, that's why it is not working.

 

I tried again to load my XMP profile, the result:

Laptop goes into a blackscreen, resetting the BIOS doesn’t work via "hold the power button for 45 sec" it makes the white flashlight but does nothing. Has to unscrew it again. And again my laptop stays in a sort of safe mode with 800MHz lock, BIOS laggy as hell as windows is.

Now I have to flash again. Memory overclock is done for me for now.

 

i found that my offset for BIOS lock is 0x17 and I think FPRR is 0x6DD

attempts to use setVariable call to either of these offsets would return Safety Violation

Imgur link:
https://imgur.com/a/DKovCdE

 

Setup is the wrong section. It’s CpuSetup for CFG LOCK and OVERCLOCKING LOCK. The rest is on PchSetup.

 

would I be able to change CFG lock and Overclocking lock if BIOS lock and FPRR is active?

I vaguely remember that I tried earlier (and got same result) before I look into bios lock and fprr. Will update once I try again

there had been discussions on this thread:
http://forum.notebookreview.com/thr...otential-to-unlock-all-hidden-options.830993/

Concensus seems to be that for this model, programmers are required.

 

Should be. That’s the part to unlock undervolting.

 

Can the same modified BIOS with unlocked settings be used across other units of the same model type?

 

If we talking about the same machine with the same specs and same bios versions, surely.

 

I’d like to confirm that the change works, and that I can now flash modded BIOS using FPT.

May I ask how did you know that its in those sections (CpuSetup and PchSetup)?

Since when I searched in UEFITools it seemed to list them as being in “Setup”

Or am I missing something?

 

You're not reading the whole thing perhaps?

At the very start of the txt file there are a bunch of VarStore identified with VarStoreID and Name. So when you search for Flash Protection Range Registers, you find something like this:
One Of: Flash Protection Range Registers (FPRR), VarStoreInfo (VarOffset/VarName): 0x6DD, VarStore: 0x17

Then we go back to the top and we find 0x17 and we find this:
VarStore: VarStoreId: 0x17 [4570B7F1-ADE8-4943-8DC3-406472842384], Size: 0x6EC, Name: PchSetup

 

Thanks for the guide @MezZo_Mix it seems the end of the content is missing though?

 

Yes there is a lot I have to add, but sadly not enough time at the moment.