How to > HP BIOS MiniPCI Fix- nc6000/others

[boredwild]

Had another look at semi's instructions and found another little tutorial on correcting checksums: http://www.xtremesystems.org/forums/sho ... p?t=180607

In a previous post you list your 4 differences: -19 -05 -82 -BD. If you change these to positive values and sum them together, we see that you are changing the checksum by a total of 15D (smaller), so we have to make the checksum of the new bin bigger by 15D. However, we cannot do this in just one hex bit as the largest value is FF. Therefore, we could increase the value of the checksum by changing one "zero" bit to FF and another bit to 15D-FF=5E.

The 68BDD.bin ends in "00 00", so we should be able to stick our "5E FF" in right there. Shouldn't be any active code there, but if it doesn't work, we could try to stick this string in further from the end, amidst the sea of "00"s.

I can't try this yet as I won't be able to get a SMT PLCC socket until next week. Then the first task is to revive the machine...

[semi]

hey fellow's,

here is a new version of ADDCC with a little Tutorial

Awesome Dirty Do Checksum Checker + Tutorial + two decompressor



There was an error with the correction method. The reason was in the
nature of the things... Cause there are some very little differences with
the carry's. I think it's "wrong" to calculate the checksum
global!! It works much more better if you calculate it local...

@boredwild and @Xb0xGuru,

please post me your bios file, and the two ID's. The newone and
the oldone. Is that your newest bios file?
NC6000 F.15 (30 Aug 2006)

If I have your ID's, I will post you a STEP by STEP tutorial.

[boredwild]

That is the bios file I am using.
Here is the Device Instance ID for my TI card:

PCI\VEN_104C&DEV_9066&SUBSYS_9067104C&REV_00\ 4&16793A72&0&20F0

Thanks for your help.

[semi]

@boredwild,

first, here comes your patched bios file with your wish ID and with fixed checksum.

NC6000 Patched BIOS F.15

The tutorial follows tomorrow...

Here is it! It was a little bit more work that I thought...

Cheers Semi

[boredwild]

Groovy. I'm sure Xb0x wouldn't mind giving it a try with his numbers, as his box is already set up with a chip socket. Mine's not ready yet...

[oddi]

Plss. help
Then try patch HPQFLASH.exe , after patch, exe crashed

error signature:

AppName: hpqflash.exe AppVer: 3.10.6.1 ModName: hpqflash.exe
ModVer: 3.10.6.1 Offset: 000012ca

p.s.: patched exe from f.15 for windows

plss upload ptached HPQFLASH.exe
many tnx

[edit] may i found problem: then start patched HPflash with miss rom.cab in same directory - hpflash tell " rom.cab missing". Copy rom.cab in same directory - hpflash - crashed
Somebody help

[Xb0xGuru]

Groovy. I'm sure Xb0x wouldn't mind giving it a try with his numbers, as his box is already set up with a chip socket. Mine's not ready yet...

I would do had I not just moved home! Once I get myself sorted out I'll be giving it a try.

[semi]

smoothly oddi,

i can't really understand your problem(s)...

from which model your are talking about? F.15! NC6000?

I try it on the NC6000 HPQFlash F.15 and it works fine.
NC6000 F.15 for Windows (30 Aug 2006)
An Error without the ROM.CAB and No Error with it.

I can't flash it cause they are different models.

Here is the patched bios for boredwild's engine with the patched HPQFlash.exe
NC6000 Patched BIOS and Patched HPQFlash F.15

If it still crashes, try with the rompaq.exe in a dos-mode.

good luck

[oddi]

opss sorry for my bad info
btw - laptop is NC6000, wireless is Creatix.

Ok my progress:
under windows - not patched i dont know why, HPflash crashed
under dos- build boot floppy disk with f.15 bios and replace with patched 68BDD.bin - work perfect )))

btw - i need little info :

in original NC6000 bios support Wifi cards is:

MB22ag_01, PCI\VEN_168C&DEV_0013&SUBSYS_00E50E11 (HP WLAN 802.11a/b/g W500)
MB22g_01, PCI\VEN_168C&DEV_0013&SUBSYS_00E60E11 (HP WLAN 802.11b/g W400)



PCI\VEN_8086&DEV_1043&SUBSYS_25228086 ; Intel 2100 mPCI 3B - RoW
PCI\VEN_8086&DEV_1043&SUBSYS_25278086 ; Intel 2100 mPCI 3B - MoW


BCM43XGT, PCI\VEN_14E4&DEV_4320&SUBSYS_12F4103C



PCI\VEN_8086&DEV_4220&SUBSYS_12F5103C ; HPQ 2200 mPCI 3B - MoW Subven 103c
PCI\VEN_8086&DEV_4220&SUBSYS_12F6103C ; HPQ 2200 mPCI 3B - RoW Subven 103c

Checksum bytestrings for all wifi is: 3C10F4FF12868020 ?

tnx

[edit] i found problem for HPflash under windows , tested with file from attach from previous post
then i build cab file with cabpack - flash.exe crashed !
with cab from attach archive - hpflash worked !

[ipe]

Hey semi,

Can I patch an HPQ NX9420 bios, using ADDCC.exe?

The rom.bin file (inside rom.cab) seems to be uncompressed and compdecw.exe fails with it.

I want to replace

PCI\VEN_8086&DEV_4222&SUBSYS_135C103C&REV_02\4&4878531&0&00E1

with a new one:

PCI\VEN_8086&DEV_4235&SUBSYS_10018086&REV_004&4878531&0&00E1

The original bios file can be downloaded
here

Thanks so much for any help...

Felipe

--------------
P.D. I don't know how to deal with 3C57105b1383005c8400, where I expected to find 3C105C13

[semi]

Hey Felipe,

yes you can!

But you only can change it on this ID: E4 14 19 43 3C 10 58 13.

There is no other ID for correct the checksum. But you can
take a string you dont need in normal use.

20 42 6F 6F 74 57 61 6B = " BootWak"

The decompressor dont work, cause they are diffrent headers
in the bios.

NC4000,NC4010,NC6000 header is: 00100100
(compdecw.exe)

and
nx9420,NC4200 header is:01001401
I have made some changes in the source from compdecw.exe,
and than it works with the other header!
(compdeconx.exe)

But the uncompress routine is an other, and compdeconx.exe will
not all bytes uncompress correctly. Be careful!!

Look at the download ahead. Now both decompressors are in.

You have to delete some FF's in your bios file. Cause the 1st header
starts not an the beginning of the file. Without deleting the FF's,
the decompressor will still show some errors!

Later if you finaly change your bios file, you must not delete the FF's!!
It's only for the decompressor routine!

Cheers Semi

[ipe]

First of all, thnks so much!!

I've removed the first (64k) FF's at the beginning of rom.bin, and compdecx.exe works fine now.

I've opened 00021000 and found 86802242 (ven/dev) 3c105b13 (nearly my original wifi subsys identifier)

But didn't find E414 1943 3C 10 58 13, but E414 1243. Ialso didn´t find a long whitelist, but only these two devices.

I will try again this afternoon...

Thanks, semi,

Felipe

[kbenjila]

I also have a nc6000 with an other card. I read that a few people succesfully flashed the nc6000...can anybody help me out:
my device id's are
PCI\VEN_8086&DEV_4220&SUBSYS_27418086&REV_05\4&16793A72&0&20F0
PCI\VEN_8086&DEV_1043&SUBSYS_25818086&REV_04\4&16793A72&0&20F0.

(rom f15)

thank you so much

[boredwild]

Got my NC6000 working again, finally. Took another chance and flashed the revised binary with semi's changes for my TI wireless card. It has worked through several days and many reboots, so I am convinced that it is stable. However wireless radio button has no effect. Maybe this is to be expected since the card is not an HP-approved chipset. Perhaps the BIOS is not able to turn the radio on/off(?). Anyone know if there is a way to "reassign" HP's "quick launch" buttons?

[semi]

hey boredwild,

my congratulations!

Yes I know the button problem...

I am not sure, but I think some chipsets has different commands and
instructions. And if the TI card dont understand the on off command,
he doesnt know what to do!!

In linux you can define any button as you like. ... ifconfig eth0 up / down
in example.

But in Windows I cant find any smart tool to do this job.

The wlan button is only to set the antenna on off. Not for deaktivate
or aktivate the wireless device!!

Cheers Semi