353 replies to this topic

[MacDELLintosh]

{censored} you rule dood, dont stop, keep it coming for forever mang

[beta992]

Is everything OK?
Last line looks weird. (Patch pattern not found)

C:\xx>PMPatch.exe original.bios patched.bios
PMPatch 0.5.10
PowerManagement module at 0031FBC8 patched.
AMI nest modules not found.
Phoenix nest modules not found.
CpuPei module at 003DC1C0 not patched: Patch pattern not found.
Output file generated.

[k3nny]

Yes, it is. "PowerManagement module at 0031FBC8 patched.".

[PandaMadness]

Hi CodeRush!
Just wanted to ask you what exact command do I need to use from the FTK to flash the patched BIOS to my MoBo?
In your post on Hardforum you describe the list of commands that FTK has, but I am confused between biosrefl and reflash.
Also, to k3nny, I noticed that you have the same motherboard as me (asus p8z77-v lk), so I ask if you can describe your flashing process step by step, if you can, please?

[beta992]

k3nny, on 09 February 2013 - 02:49 PM, said:

Yes, it is. "PowerManagement module at 0031FBC8 patched.".

OK, thanks.

What does this mean?

CpuPei module at 003DC1C0 not patched: Patch pattern not found.

[slave-zeo]

Confirmed working on Asus p8p67 Rev.3 B3. Kills onboard audio (

Realtek ALC892)

in OS X But that was expected (sound works fine in linux and windows). No power management kexts needed and speedstepping (overclocking) now works on my 2600k.

[yeh]

I got two mobs here:

nVidia 790i Ultra
Intel DX48BT2

Are these worth trying considering the security stuff associated with the Intel and that the nVidia board isn't exactly common/popular?

[CodeRush]

PandaMadness, on 09 February 2013 - 04:08 PM, said:

Hi CodeRush!
Just wanted to ask you what exact command do I need to use from the FTK to flash the patched BIOS to my MoBo?
In your post on Hardforum you describe the list of commands that FTK has, but I am confused between biosrefl and reflash.
Also, to k3nny, I noticed that you have the same motherboard as me (asus p8z77-v lk), so I ask if you can describe your flashing process step by step, if you can, please?

biosrefl is enough.

beta992, on 09 February 2013 - 05:52 PM, said:

OK, thanks.

What does this mean?

CpuPei module at 003DC1C0 not patched: Patch pattern not found.

There are two separate places for 0xE2 register lock. Onl old ME7 BIOSes is was in CpuPei module, in new ME8 BIOSes it is in PowerManagement module. So, if PM module is patched, there is a little chance that CpuPei has a lock string to patch. But in case that a lock is present in both modules, I must check both of them. In your case PM is patched, in CP there is no pattern to patch. It's OK.

yeh, on 10 February 2013 - 06:32 AM, said:

I got two mobs here:

nVidia 790i Ultra
Intel DX48BT2

Are these worth trying considering the security stuff associated with the Intel and that the nVidia board isn't exactly common/popular?

Not an UEFI BIOS in both cases, AFAIK. Nothing to do here.

[edensystem]

Hi code Rush,
Your patcher worked well, and also, what mean the Phoenix patch after the powermanagement patch ?
But then, the flashing failed ..  it seems I've got an RSA signed bios as I get on reboot "InsydeH2o secure flash - invalid firmware image "  ( VAIO SVE1712C5E )
With FTK, it tells me that the regions are locked, here's the output with "fpt -i" command

Intel (R) Flash Programming Tool. Version: 8.1.10.1286
Copyright (c) 2007 - 2012, Intel Corporation. All rights reserved.

Platform: Intel(R) HM76 Express Chipset
Reading HSFSTS register... Flash Descriptor: Valid

--- Flash Devices Found ---
W25Q64BV ID:0xEF4017 Size: 8192KB (65536Kb)

--- Flash Image Information --
Signature: VALID
Number of Flash Components: 1
	 Component 1 - 8192KB (65536Kb)
Regions:
	 Descriptor - Base: 0x000000, Limit: 0x000FFF
	 BIOS	 - Base: 0x180000, Limit: 0x7FFFFF
	 ME		 - Base: 0x001000, Limit: 0x17FFFF
	 GbE	 - Not present
	 PDR	 - Not present
Master Region Access:
	 CPU/BIOS - ID: 0x0000, Read: 0x0B, Write: 0x0A
	 ME	 - ID: 0x0000, Read: 0x0D, Write: 0x0C
	 GbE	 - ID: 0x0118, Read: 0x08, Write: 0x08

Total Accessable SPI Memory: 8192KB, Total Installed SPI Memory : 8192KB

FPT Operation Passed

After allowing writing region with pinmod, will the same code aply to unlock by a patch as you said here ?

CodeRush, on 20 January 2013 - 08:14 PM, said:

After unlocking access to all regions, you can make a dump of Descriptor region by executing fpt -desc -d desc.bin, and edit it with Hex-editor to remove locks completely.
This values are to be set:

Regards

[PandaMadness]

Thanks CodeRush!
Successfully flashed my MB with a PMPatched .cap file and FTK. You rule!
Asus p8z77-v lk motherboard, flashed in ms-dos mode as advised.
I have retained the patched bios file and backup.bin file created by FTK. Do you need them for further research?

[CodeRush]

edensystem, on 12 February 2013 - 02:03 PM, said:

1. What mean the Phoenix patch after the powermanagement patch?
2. After allowing writing region with pinmod, will the same code aply to unlock by a patch as you said here ?

1. Your PowerManagement module is located inside another big module, I call it "nest". There are 2 kinds of nest modules with different UUIDs, one I have found on AMI BIOSes and another on Phoenix. The nest module must be unpacked, PM module inside of it must be patched and nest module must be repacked and reinserted. So says the output.
2. Yes.

PandaMadness, on 12 February 2013 - 02:11 PM, said:

Successfully flashed my MB with a PMPatched .cap file and FTK. You rule!
Asus p8z77-v lk motherboard, flashed in ms-dos mode as advised.
I have retained the patched bios file and backup.bin file created by FTK. Do you need them for further research?

No, I have about 10 backups of this board and need no more.
Glad to help.

[Dr. Hurt]

@CodeRush,
Sorry for going a bit off-topic but would it be possible to create a utility that patches nVida or ATi vbios to add native resolution to the cards' VESA modes? I'm basically talking about a GUI utility to automate the process described here: http://www.insanelym...hl__ vesa mode

I think this'll help a lot of people and thought that you're probably the only one who could create such a utility.

[CodeRush]

@Dr. Hurt, I'm in the middle of business trip now and I can't write anything, but I will look at that topic after I return to Germany. About 5-10. Mar., if nothing goes wrong.

[donovan6000]

Doesn't work with my bios. Is this only for sandy bridge cpus? Or has it worked on any Nehalem ones? I've looked through my bios and I think it might be locking bit 15 in the smmplatform module instead of the usual places because of this function that's in smmplatform. I'd prefer to have someone with more expirence look it over before I change anything. Thanks. I've attached my bios, the powermanagement2 module, and the smmplatform module.   

Attached Files

•  bios.zip   1.81MB   4 downloads

[tempest0]

Sorry but, ¿works at asus A55VD laptop?. Like this: http://my.asus.com/N...formance/A55VD/

[CodeRush]

tempest0, on 15 February 2013 - 01:34 AM, said:

Sorry but, ¿works at asus A55VD laptop?. Like this: http://my.asus.com/N...formance/A55VD/

The patcher itself works on this BIOS, but patched BIOS must be tested.

rush@rush-netbook:~/Downloads/PMPatch/build$ ./PMPatch ~/Downloads/K55VDAS.407 ~/out.bin
PMPatch 0.5.10
PowerManagement module at 001A4F00 patched.
AMI nest modules not found.
Phoenix nest modules not found.
CpuPei module at 005A18D8 not patched: Patch pattern not found.
Output file generated.

@donovan6000, thank you, will look at SMM module after 5. Mar.

[Sandokan7100]

Hi CodeRush,
Thanks for your hard work!

I am based on a B75 ASUS motherboard, the model is P8B75-M LX with CPU Intel i5-3550, running fine on Lion 10.7.5 but without any PowerManagement feature (am using NullCPU...).

I've just tried PMPatch on Windows and got this:

C:\BIOSWORK>PMPatch.exe P8B75-M-LX-ASUS-0803.CAP patched.bios
PMPatch 0.5.10
PowerManagement module at 00296508 patched.
AMI nest modules not found.
Phoenix nest modules not found.
CpuPei module at 00790D88 not patched: Patch pattern not found.
CpuPei module at 007D0D88 not patched: Patch pattern not found.
Output file generated.
-----------------------------------

Now, which is the next step to flash this? I suppose the Asus utilities will not allow to patch the modified one for B75 right?

Another thing: yesterday I tried the other method, by manually patching using Phoenixtools: have found the famous pattern (change from 75 to eb...) and then successfully flashed the new bios. But I still need the NullCPU kext, without it I have KP on the ApplePowerManagement kext. Do you think your patched bios will differ?

Thanks.
S.

[k3nny]

@Sandokan7100:
If you did your patch correctly, the results should not differ.
Did you try doing a CMOS reset?

[Sandokan7100]

No I didn't.

Is it really necessary to clear CMOS after flashing the BIOS? I think it only clear the user settings as bios passwords, date and other settings, not the bios code.

S.

[k3nny]

I had the same problem earlier and a CMOS reset solved it. Probably it is indeed a bit "overkill" but it worked.
It depends on how you flash the BIOS, I guess.