Bios modded, but how to flash it? Lenovo s410p

[ss41]

Hi,

I modified the BIOS image file of my Lenovo s410p using PhoenixTool v2.56 (altered the WLAN whitelist) and now I want to flash it.. but how? (Insyde BIOS)
You would think that I completed the hardest part but I'm having far more difficulty finding the right flash tool... already went through a number of them without any success. How do I know which flash tool to use? Any recommendation?
There's no (official) BIOS update available for the Lenovo s410p, otherwise I would know exactly what tool to use and use that to flash my image.

Thanks!

[BDMaster]

Hi,

I modified the BIOS image file of my Lenovo s410p using PhoenixTool v2.56 (altered the WLAN whitelist) and now I want to flash it.. but how? (Insyde BIOS)
You would think that I completed the hardest part but I'm having far more difficulty finding the right flash tool... already went through a number of them without any success. How do I know which flash tool to use? Any recommendation?
There's no (official) BIOS update available for the Lenovo s410p, otherwise I would know exactly what tool to use and use that to flash my image.

Thanks!

Ok friend,
There are many difficulties to Mod a Bios some are connected on how to get Bios File amd as today all bioses are Capsulated and Signed this part is just difficult !
So I want to look before You will reflash your Bios if It is all ok !
Use this tool and run It as Administrator then upload here the result file :

http://rghost.net/52417082

Let me know
Regards

[ss41]

Great, thanks!

Ran & uploaded to https://www.sendspace.com/file/7jdh6o

Just to explain what I have been doing:
My co-worker dumped the BIOS with a (dump-only) tool, then I modded it with PhoenixTool v2.56: https://www.sendspace.com/file/gfsfal (=modded BIOS)
I opened the BIOS, then figured out I had to be in the 1st image in DxeOem (608FBD1D-15E1-40C4-9443-662ECC0C07AA), extracted, hexedit one whitelist ID, and click replace, exit. Seemed to go well.
I changed the 8086:08B2 to 8086:08B1 in the whitelist, yeah.. one bit . Although when comparing the bios image files byte for byte (FC /B) it changed a lot more, compression I guess?

Thanks for your help!

[BDMaster]

Great, thanks!

Ran & uploaded to https://www.sendspace.com/file/7jdh6o

Just to explain what I have been doing:
My co-worker dumped the BIOS with a (dump-only) tool, then I modded it with PhoenixTool v2.56: https://www.sendspace.com/file/gfsfal (=modded BIOS)
I opened the BIOS, then figured out I had to be in the 1st image in DxeOem (608FBD1D-15E1-40C4-9443-662ECC0C07AA), extracted, hexedit one whitelist ID, and click replace, exit. Seemed to go well.
I changed the 8086:08B2 to 8086:08B1 in the whitelist, yeah.. one bit . Although when comparing the bios image files byte for byte (FC /B) it changed a lot more, compression I guess?

Thanks for your help!

Yes friend this is the YEN and TTAV134 first way modding mode changing the PCI /Ven IDs !
Weel done, but if You want to change WWan card again You have to patch Bios again !
But actualy We are modding the Assembly Code to bypass the Whitelist check !
All work is done well as You avoid to use the Capsulated Bios unflashable and signed.
Now to write back the modded version You have to use FPT tool Dos version 9.5 and Svl7 (Marco Modder TechInferno Tool), copy into modified folder renaming It like bios.bin and then copy all files from modified folder to USB Dos Bootable Stick !
Boot from USB Dos and run flash.bat :

http://rghost.net/56772083

Let me know
Regards

http://rghost.net/52544682

http://rghost.net/56845545

[ss41]

Ok. I just booted into DOS and ran the flash tool. Once it was finished I turned the laptop off, and then on again. Now I have a black screen. I read somewhere that sometimes the original BIOS may be flashing the new BIOS so left it on for a while.. not daring to turn it off.. but it has been 8 minutes now. Should I turn it off & on again and hope it (still) boots?

---

Hmm okay I turned it off after 15 minutes, tried to boot it, no luck. Removed battery, plugged it in again, still. when I push the power button I hear the fan spinning up but that's it, nothing on the screen.

[BDMaster]

Ok. I just booted into DOS and ran the flash tool. Once it was finished I turned the laptop off, and then on again. Now I have a black screen. I read somewhere that sometimes the original BIOS may be flashing the new BIOS so left it on for a while.. not daring to turn it off.. but it has been 8 minutes now. Should I turn it off & on again and hope it (still) boots?

---

Hmm okay I turned it off after 15 minutes, tried to boot it, no luck. Removed battery, plugged it in again, still. when I push the power button I hear the fan spinning up but that's it, nothing on the screen.

I didn't check your Bios Mod so I cannot say You have a good File as You said that all You have done was right and in the right way doe !
I am sorry friend, let me know if You got some error flashing Bios !
You saw someting strange on video ?
I will compare your Bios Backup and Modded one now and I will say if It's all ok !
Something when PMTool when repack Bios can do some mistakes !
Regards

Something is gone wrong on your Bios Modded compare your two files Bios Backup (result contains 8.1. . .bin) and your bios.bin modded bios
and You will look that is missing the end's chunk of file !!!




I can redo all procedure to get a new file but I don't know if We can Recovery your laptop !

I found two modules that antivirus (they are RSA Crypt and check) want to eliminate (may be You don't switch off your antivir and It deleted from DUMP folder)
To mod Bios is not so easy friend !
And your Bios hasn't a Recovery Name, using PMTool You can get the Recovery Bios Name to use for prepare Bios for Recovery and your lacked of It !!!
Better thing is to buy an SPI External USB Programmer with Pomona Soic Clip and write It directly !

http://www.ecuvonix.com/gq4x-programmer-...anguage=en

I am using this one (It's lonely to reprogram Bios on-board) I soldered pin to pin 8 wires cable to chip legs and have a socket external to
reprogram my Bios every time I want !
Let me know friend, I am sorry I feel what You feel as I have done the same thing once . . .
Regards

[ss41]

Made these pics during the flashing: http://imgur.com/QDAFSQg,Lczz12f

Something is gone wrong on your Bios Modded compare your two files Bios Backup (result contains 8.1. . .bin) and your bios.bin modded bios
and You will look that is missing the end's chunk of file !!!

Oh-oh...

What's next? How do I recover? I heard about (win)crisis but I can't seem to trigger it.

---

Oh okay, so this model doesn't support recovery?

Before I flashed this BIOS I tried to test recovery, just in case, by making this crisis disk. Then, after booting in 1-2 seconds I saw this:
"Flash crisis recovery disk
Remove and press any key"
So I thought there would be a recovery method if the flash would go bad, so I could "safely" try the flashing.

Anyway, that was all before the flash. Now, I can't seem to trigger it...

[BDMaster]

Hi friend,
this is for You the Whitelist Module GUID You found is right :

608FBD1D-15E1-40C4-9443-662ECC0C07AA_792.ROM

Ths is your Whitelist Lock :



We have to eliminate this Infinite Loop that is at the Code End !!!



01059 : 74 4C to 74 00 jz short loc_10A7 to jz $+2

01068 : 75 24 to 75 00 jnz short loc_108E to jz $+2

01074 : 75 18 to 75 00 jnz short loc_108E to jz $+2

01080 : 75 0C to 75 00 jnz short loc_108E to jz $+2

0108C : 74 44 to EB 44 jz short loc_10D2 to jmp short loc_10D2

010A5 : 75 BE to EB BE jnz short loc_1065 to jmp short loc_1065

These are offset and value to modify by your HexEditor !
Or You cna use CodeRush UEFIPatch Tool only modifying Patches.txt file adding GUID name and O offset followed by hx Bytes :

# DxeOemDrive | Whitelist | 74-75-75-75=00 75-75=EB
608FBD1D-15E1-40C4-9443-662ECC0C07AA 10 O:01059:7400 O:01068:7500 O:01074:7500 O:01080:7500 O:0108C:EB44 O:010A5:EBBE

and You will modify your Bios without touch nothing !
Regards






Regards

[xsiriox]

Hello!!!

I followed your tutorial with ida and I did a modification to remove the whitelist check (I hope), but I cant flash back the bios: I used fpt and phash16..

In fpt I got:
Error 201: [FPT.exe] cannot be run on the current platform.
Please contact your vendor.

Here my files..
https://dl.dropboxusercontent.com/u/2803...CN32WW.rar

If someone can help me, it would be very appreciated!

ThankYou

[BDMaster]

Hello!!!

I followed your tutorial with ida and I did a modification to remove the whitelist check (I hope), but I cant flash back the bios: I used fpt and phash16..

In fpt I got:
Error 201: [FPT.exe] cannot be run on the current platform.
Please contact your vendor.

Here my files..
https://dl.dropboxusercontent.com/u/2803...CN32WW.rar

If someone can help me, it would be very appreciated!

ThankYou

Hi friend,
how did You get your Bios Backup to modify It ?
Which program You used to ?
Normaly FPT is Intel Tool so it don't work on AMD CPU !
You have an AMD CPU ?
In wich way You used phlash16.exe ?
All Backups I saw were 6.656 KB size and done by FPT 9.5 tool, They showed all error 280 = Eeprom Write Protect notmoddable !!!
Let me know
Regards

P.S. Bios Mod good job !