@Lost_N_BIOS


Many thanks to you!
Yeah,I just flashed the bios region but all failed.When ME region was protected,there should be error 25 or 26.And Error 28 is for FPRR I think.

I think the progress is interesting to solving the problem,when I have some idea of it,I will share with you at once!

@gloobox - BIOS region flash BY ITSELF is all we should be testing here, FD unlock or jumper overrides the rest and your image of what was locked showed only BIOS region being locked.
So please test ONLY BIOS region flashing >> FPTw.exe -bios -f filename.bin

Does that fail ^^ ? If yes, then all edits to bypass have failed too.
You may want to test previous edit attempts I sent you too, if you were not trying a BIOS region only flash, I may have solved it for you long ago and you didn't know because you were not trying BIOS region only flash

@Lost_N_BIOS
I had texted "FPTw.exe -bios -f filename.bin",but failed.

Btw,I recognize something special about FPRR.
I succeed in flashing LENOVO notebook(forget the name) by running the PRR first,so could we run or flash or do something first to destroy the FPRR before flashing the modded bios?

Yes, sometimes on some PRR/PRR2 work if FPRR/PRR is controlled by a BIOS setting, but if it's in a module then it wont work and module needs edited and programmed in to disable it.

@Niolin @coopernick @EDECAT @gloobox - See here, if any of you still need to do BIOS mods and do not have programmer yet, DeathBringer posted solution so we can flash with FPT
UPDATE MICROCODE FOR I7 4790 ES (CONFIDENTIAL

@Lost_N_BIOS I have the same problem on a HP EliteDesk 800 G1 Tower. The original BIOS that I extracted using the FPT from Intel ME System Tools v9.1 is attached with this post.

Writing the same file back to the BIOS using FPT is giving me an error
Error 280: Failed to disable write protection for the BIOS space!

I tried using the UEFITool_v0.28.0 to modify the BIOS and inject the NvmExpressDxe_4.ffs into the BIN but the reload after the injection was complete gave me a checksum error.
parseFile: invalid data checksum 5Ah, should be AAh

The same thing happened when I used the small version of the FFS NvmExpressDxe_Small.ffs as well.

The software pack from HP containing the latest BIOS is present on the HP portal for this device

I have modified the file (rom.bin) present in the link above successfully using both MMTool and UEFITool but the flashing operation using the BIOS option to "Flash ROM" or using DOSFlash have both failed with "verification error". Interestingly this rom.bin is 16384KB in size while the FPT output is only 10752KB

Can you please let me know if there is something that I am doing wrong? Also, it appears that I will have to use the SPI flash programmer + SOIC8 test clip cable to fix this. I will be able to do that part once I have the right BIOS mod available.

Can you suggest if I should try using the MMTool for this? Any other options to modify the BIOS to get it to boot from the M.2 Crucial 250GB NVMe disk?

I am also in fight for nvme working properly.

Found this simple tutorial (for z220):
1. fptw64 -I which should tell you bios address start. for HP z220 it was 0xA90000
2. fptw64 -BIOS -D backup.rom
3. mod and add NvmExpressDxe_4.ffs to backup.rom save it as modded.rom
4. use a hex editor like frhed to delete the end of the file leaving only first 0x55FFFF bytes
5. fptw64 -A 0xA90000 -L 0x55FFFF -F modded.rom

And this infor for unprotected BIOS range info: for the HP EliteDesk 800 G1 mini bios starts at 0x580000 and the length should be 0x980000
to avoid the protected region. 0x580000 + 0x980000 = F0FFFF

so in a nutshell our BIOS starts at 0x580000, length to unprotected 0x980000. I have dumped BIOS, modified it with injection of NVME module, trimmed it to be 0x980000 + 1 EOF length but still when i do flashing:

fpt.exe -A 0x580000 -L 0x980000 -F modded.rom

I get Error 280: Failed to disable write protection for the BIOS space.

Any guess how to overcome this?

I made a mistake in the calculations its supposed to be 98FFFF not 980000. Luckily adding NVME boot didn't change that far so I was fine when I did it to mine. Have you done the first part and booted up to the UEFI command and disabled write protection? I think this is the part you're missing. Follow the the instructions in the link bellow. Just that post #6 by Deathbringer

read this post here:
https://www.bios-mods.com/forum/Thread-M...66545#pid166545

Post #6 is what you're missing. I did it all of this to my 800 g1 mini and it boots from an inland nvme drive from microcenter now. Let me know if u have any more questions. I'm lucky I checked the forums today
or I would have missed your question. I'll keep an out in case you need help.

Its been a while so i don't remember 980000 might have not have been a mistake. I think it was just the length of the file I wanted to upload so my changes take place.

@dman79 many thanks for this reference to the post Deathbringer, will try this as well and report back.

skip step 8. that was for modifying microcode.

Zitat von dman79 im Beitrag #41

---

skip step 8. that was for modifying microcode.

---

Well, looks like something went wrong :)
What i did is:
1. dumped bios, modded it by inserting NvmE module, trunked to be 0x98FFFF length
2. disabled write protection as here https://www.bios-mods.com/forum/Thread-M...66545#pid166545
3. flashed the file from p1 with fpt -A 0x580000 -L 0x98FFFF -F modded.rom

flash went well with no error messages but after rebooting i can see black screen only so it is not booting up, just the fan gets high RPM in a minute or so...

@dman79, any idea on what could go wrong? will start googling for how to recover it....

tried to do cmos reset with battery off, put native firmware file on fat32 USB stick and boot with it - all failed. so look like i would need to go with external hardware flasher...

tried to remove memory to check if it beeps at boot - silence. this means that bootblock is dead... :(