Lenovo E530 upload modified bios

[Guest]

Manufacturer: Lenovo

Model: E530 NZQMAMB

Bios Type: Phoenix SecureCore Tiano

BIOS Version: H0ET70WW (2.04)

I'm trying to flash a modified bios H0ET70WW (2.04) using fpt.

I already tried to disable the Error 28 using prr but it doesn't work.

Intel (R) Flash Programming Tool. Version:  8.1.10.1286 
Copyright (c) 2007 - 2012, Intel Corporation. All rights reserved.Platform: Intel(R) HM77 Express Chipset 
Reading HSFSTS register... Flash Descriptor: Valid 
    --- Flash Devices Found ---
    W25Q64BV    ID:0xEF4017    Size: 8192KB (65536Kb)
    W25Q32BV    ID:0xEF4016    Size: 4096KB (32768Kb)
    --- Flash Image Information --
    Signature: VALID
    Number of Flash Components: 2
        Component 1 - 8192KB (65536Kb)
        Component 2 - 4096KB (32768Kb)
    Regions:
        Descriptor - Base: 0x000000, Limit: 0x000FFF
        BIOS       - Base: 0x800000, Limit: 0xBFFFFF
        ME         - Base: 0x001000, Limit: 0x7FFFFF
        GbE        - Not present
        PDR        - Not present
    Master Region Access:
        CPU/BIOS - ID: 0x0000, Read: 0x0B, Write: 0x0A
        ME       - ID: 0x0000, Read: 0x0D, Write: 0x0C
        GbE      - ID: 0x0118, Read: 0x08, Write: 0x08
Total Accessable SPI Memory: 12288KB, Total Installed SPI Memory : 12288KB
FPT Operation Passed

without the -bios attribute

I get error 25: The host cpu has no write acess ... You must modifie the descriptor setting to give host access to this region.

Intel (R) Flash Programming Tool. Version:  8.1.10.1286 
Copyright (c) 2007 - 2012, Intel Corporation. All rights reserved.
Number of LPC Devices supported: 174
LPC Device Id: 1E57.
Platform: Intel(R) HM77 Express Chipset 
Initializing SPI utilities
Reading HSFSTS register... Flash Descriptor: Valid 
Region Limits as programmed into the SPI Registers 
    FREG0 -  DESC Region:Base Address: 0x000000   Limit :  0x000FFF 
    FREG1 -  BIOS Region:Base Address: 0x800000   Limit :  0xBFFFFF 
    FREG2 -  ME   Region:Base Address: 0x001000   Limit :  0x7FFFFF 
    FREG3 -  GbE  Region:Base Address: 0x1FFF000   Limit :  0x000FFF 
    FREG4 -  PDR  Region:Base Address: 0x1FFF000   Limit :  0x000FFF 
Address Limit 0xC00000    Maximum Memory 12288kB 

    --- Flash Devices Found ---
    W25Q64BV    ID:0xEF4017    Size: 8192KB (65536Kb)
    W25Q32BV    ID:0xEF4016    Size: 4096KB (32768Kb)
Using hardware sequencing.
Reading region information from flash descriptor.
Base: 0x000000, Limit: 0x000FFF
Base: 0x800000, Limit: 0xBFFFFF
Base: 0x001000, Limit: 0x7FFFFF
FW Status Register1: 0x1E000245
FW Status Register2: 0x62000106
Reading LPC BC register... 0x00000009
WriteFileToFlash( flash.rom, 0x0, 0x0 )...
Reading file "flash.rom" into memory...
PDR Region does not exist.
    WriteStartAddress :  0x00000000 
    WriteEndAddress   :  0x003FFFFE 
    MeStartAddress    :  0x00001000 
    MeEndAddress      :  0x007FFFFF 
Need to disable ME based on Address overlap ...
FW Status Register1: 0x1E000245
FW Status Register2: 0x62000106
Current ME State ( 0x6 ) : Host Comm 
Disabling the ME 
FW Status Register1: 0x1E000245
FW Status Register2: 0x62000106
Current ME State ( 0x6 ) : Host Comm 
Initialization of the HECI Client completed. 
Preparing message data for ME Disable Request command...
ME Disable Request command successfully sent ...
FW Status Register1: 0x1E000245
FW Status Register2: 0x62000106
Current ME State ( 0x6 ) : Host Comm 
...
The ME failed to disable. 
ME failure to disable. 
GBE Region does not exist.
WriteBufferToFlash. Address = 0x0, Length = 0x3fffff
Error 25: The host CPU does not have write access to the target flash area.  To enable write access for this operation you must modify the descriptor settings to give host access to this region.

modifie the descriptor settings is also not possible as far as I know because it's read-only so to change and upload make no sense.

So what can I try next?

I'm still a noob.