BIOS Version: G4ET62WW (2.04 )

Current Network card: Intel Corporation Centrino Wireless-N 2200 [8086:0891]

IBM COMPATIBLE 486 BIOS COPYRIGHT Phoenix Technologies, Ltd Phoenix BIOS SC-T v2.2

• MX25L6406E (8MB)
• MX25L3206E (4MB) (Under frame) (This is the BIOS chip I need to flash)
• There is another EEPROM on the underside of the bios which contains the bios passwords which I am not going to touch

1. Buy a CH341A and a SOIC8 test clip.
   1. Click here for notes regarding the CH341A
2. Determine current VID:PID via lspci -nn
3. Download Flashrom
4. Download UEFITool
5. Disassemble laptop to access bios chip following the Hardware manual.
6. flashrom -p ch341a_spi -c “MX25L3206E/MX25L3208E” -r ORIGINALBIOS.ROM
7. Read multiple times to verify the data is correct. (Compare via MD5SUM)
   1. Note: If you are getting errors, or inconsistant data, try adjusting the test clip slightly.
8. Open firmware (ORIGINALBIOS.ROM) in UEFItool (Works well under wine)
9. File > Search, Select GUID, search for 79E0EDD7-9D1D-4F41-AE1A-F896169E5216 (LenovoWMAPolicy)
   1. GUID pattern “79E0EDD7-9D1D-4F41-AE1A-F896169E5216” found as “D7EDE0791D9D414FAE1AF896169E5216” in 79E0EDD7-9D1D-4F41-AE1A-F896169E5216 at header-offset 0h
   2. Go to PE32 Image section, right click, “Extract as is”
   3. Save as LenovoWmaPolicyDxe_orig.sct
10. Linux: cp LenovoWmaPolicyDxe_orig.sct LenovoWmaPolicyDxe_mod.sct
11. Using a hex editor, search for whitelist
12. Linux: hexedit LenovoWmaPolicyDxe_mod.sct

TODO: Finish edits to reflect actual steps.

1. /(to search), EC10<enter> (I've chosen to modify the 10EC Vender devices)
2. Change EC10 to 8780 (New device is 8087:07DC)
3. Change 7681 to DC07
4. Ctrl-x (To save & exit)
5. Back in UEFITool
6. Right click on the same PE32 Image section again, select “Replace as is”
7. File > Save Image file, save as G4ET62WW_mod.bin
8. Flash new bios:
9. Verify bios:
10. Reassemble laptop to the point of booting
11. basically, everything up to the trim, keyboard, and display.
12. I used the existing thermal compound for testing, then I cleaned it off to apply new thermal compound prior to final assembly
13. Disconnect AC adapter from wall
14. Being careful no loose connectors are reading on the motherboard, I plugged in the disconnected AC adaptor (this way I can apply power without accidently jostling anything)
15. Plug AC adapter into wall
16. power on via keyboard
17. take note of BIOS message
18. Unplug AC adapter from wall
19. Finish reassembling laptop
20. Note: I'm using a separate Bluetooth adapter, so I'm not concerned about enabling the integrated Bluetooth

1. Download matching firmware (Bootable CD) from Lenovo website
2. Extract firmware
   1. geteltorito will extract the bootable disk image from the downloaded ISO Firmware files

TODO: Revise list as I made an error in reading to hex file

• Supported by flashrom
  • flashrom -p ch341a_spi -V
• T530 flashing directions on Coreboot.org
  • It should be safe to read/flash the chip in situ…

Tested on a similar flash chip

# flashrom -p ch341a_spi -c "MX25L3206E/MX25L3208E" -r T530_BIOS_MX25L3206E -V
flashrom v0.9.9-r1955 on Linux 3.16.0-4-686-pae (i686)
flashrom is free software, get the source code at https://flashrom.org

flashrom was built with GCC 4.9.2, little endian
Command line (7 args): flashrom -p ch341a_spi -c MX25L3206E/MX25L3208E -r T530_BIOS_MX25L3206E -V
Calibrating delay loop... OS timer resolution is 2 usecs, 745M loops per second, 10 myus = 12 us, 100 myus = 101 us, 1000 myus = 1006 us, 10000 myus = 9992 us, 8 myus = 10 us, OK.
Initializing ch341a_spi programmer
Device revision is 3.0.4
The following protocols are supported: SPI.
Probing for Macronix MX25L3206E/MX25L3208E, 4096 kB: probe_spi_rdid_generic: id1 0xc2, id2 0x2016
Found Macronix flash chip "MX25L3206E/MX25L3208E" (4096 kB, SPI) on ch341a_spi.
Chip status register is 0x00.
Chip status register: Status Register Write Disable (SRWD, SRP, ...) is not set
Chip status register: Bit 6 is not set
Chip status register: Block Protect 3 (BP3) is not set
Chip status register: Block Protect 2 (BP2) is not set
Chip status register: Block Protect 1 (BP1) is not set
Chip status register: Block Protect 0 (BP0) is not set
Chip status register: Write Enable Latch (WEL) is not set
Chip status register: Write In Progress (WIP/BUSY) is not set
This chip may contain one-time programmable memory. flashrom cannot read
and may never be able to write it, hence it may not be able to completely
clone the contents of this chip (see man page for details).
Reading flash... done.

• ifdtool

• xxx.PAT are CPU Microcode files
• xxx.hsh are CPU Microcode hash files
• something.FL1 the actual BIOS image.
• There's also .FL2, that's the Embedded controller¹⁾

• https://github.com/LongSoft/UEFITool/releases/tag/A32
  • https://habrahabr.ru/post/211574/
  • Deleting a Whitelist bios in laptops example Lenovo X230
    • GUID: 79E0EDD7-9D1D-4F41-AE1A-F896169E5216_2207
  • Coreboot - T530
    • https://www.coreboot.org/Board:lenovo/x230
    • https://www.flashrom.org/ISP
• https://habrahabr.ru/post/211574/
• http://bioshacking.blogspot.ca/
• Other BIOS mods
  • https://www.bios-mods.com/forum/Thread-T420s-1-41-whitelist-removed-other-changes
• http://www.endeer.cz/bios.tools/bios.html
• http://kornatya.blogspot.ca/2011/10/i2c-projekt-vol3.html?showComment=1417911091378
• Other
  • https://www.bios-mods.com/forum/Thread-TUTORIAL-Lenovo-X230-Tablet-BIOS-Whitelist-Removal-Hardware-Flash
  • https://www.bios-mods.com/forum/archive/index.php?thread-21048.html

Currently: 15.6“, 16×9, 1366×768

http://replacethinkpadscreen.blogspot.ca/2013/01/replacing-t530s-screen.html

Possible replacement: B156HW01 V.4