Forum RSS Feed Follow @ Twitter Follow @ Twitter

Thread Rating:
  • 1 Vote(s) - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5
HP G62-220CA UEFI Shell Mod
#1
Hi Everyone!

First time poster, long time lurker. I recently stumbled up a post by Donovan6000 that gave me the urge to pull the trigger and flash a modded BIOS. I've tinkered with my BIOS files before but never actually flashed it til now. Here is my README from the zip along with a picture of the shell on my laptop. With this complete and knowing my laptop is one of the few that is RSA signed without the check I'll be experimenting with unlocking menus or whitelists, etc. I haven't found much info on the G62 but hopefully this will bring those users out of hiding! Tongue

Enjoy!

[Image: eoechSK.jpg]

Code:
UEFI support for HP G62-220CA (Possibly others..)

-INFO-
System: HP G62-220CA
Tools Used: UEFI Tool, Universal IFR Extractor, EFI Variable Dumper, A Hex Editor
Original File: SP52598.exe
BIOS Version: F29
Supported Boards: 1444; 1445; 1446

-MODS-

Patched SHA1 verification of CryptRSA.efi with SHA1 of Shell.efi

-BACKGROUND-

After reading his post (http://donovan6000.blogspot.com/2013/08/look-what-i-did.html) on booting the UEFI
Shell via HP's harcoded UEFI implementation, I decided to see what my system was capable of. Using tools from
Donovan6000 I noticed my BIOS has hidden menus along with a setting for UEFI Boot (Pre-enabled of course!).
For my first attempt I decided to keep it simple and just patch the SHA1 verification. With UEFITool I did a
quick search for the SHA1 of the original CryptRSA.efi in my decrypted BIOS and switched it out for the SHA1
of the Shell.efi. Then I patched my InsydeFlash so I can flash my decrypted BIOS, and well in less than 24hrs
I have minimal UEFI support.

-INCLUDED-

Modded 01444F29.bin
Patched InysdeFlash
Shell.efi renamed in correct folder structure

-NOTE-

I, Crahzee, do not take any resposibility or liability for what may, could, might, will, or won't happen if you flash this.
I am providing it as-is, without any further support. If you require a dictionary at any point during this README, maybe
think twice before flashing. If this brings you success, then your welcome and please give credit where its due. If this
brings misfortune, then I hate to say it but I told you so but it isnt the end of the world.

-INSTRUCTIONS-

1. Before continuing, lookup how to recover your BIOS with a USB and Win + B

2. Format a USB drive as FAT32 and change the label to HP_TOOLS

3. Extract the Shell.zip to the root of the USB drive

4. Run InsydeFlash, it will auto flash the modded BIOS and reboot

5. Only have the USB with extracted files plugged in

6. When splash screeen appears press <F2>

7. Welcome to UEFI World!

-CREDITS-

Donovan6000 (http://donovan6000.blogspot.com

DOWNLOAD
find
quote
#2
UEFI Party! Cool

Awesome job. Your the first person I've seen who has been able to recreate this mod Smile

As you've already noticed, the UEFI implemented is not up to the standards that you expect. I had many graphical issues and could never boot into Ubuntu with it. Similar issues are probably what's causing the orange screen then reboot that you mentioned on my blog.
find
quote
#3
Me too.
On your blog is required some accept for posting?
Yesterday I tried few times but out of luck.

As for EFI, my skills on programming are almost 0 but I fight with white list and EFI boot.

For white list I have two methods but on both wifi is OFF when power up or resume laptop,that's annoying.

For EFI I think something block them.
Maybe some boot option policy?
One USB pen formatted GPT and FAT32 is not even listed as boot device.
One USB pen formatted MBR and FAT32 is listed as boot device.
On F9 boot device and also in setup menu where define boot order.

Normal,who cares if is anything on that pen drive?
Could be unformatted once is connected and detected must be present as boot option.Like optical unit,is unloaded but still present in boot option.
Then why pen with GPT is ignored?
find
quote
#4
I noticed something in FE3542FE-C1D3-4EF8-657C-8048606FF670 rom
there is like that
Code:
Offset 0 1 2 3 4 5 6 7 8 9 A B C D E F

0007FA40 CC B8 3C E5 2C D6 74 4F BD DA 31 E5 8D E5 3E 02 ̸<å,ÖtO½Ú1å å>
0007FA50 4C F2 39 77 D7 93 D4 11 9A 3A 00 90 27 3F C1 4D Lò9w×“Ô š: '?ÁM
0007FA60 61 DF E4 8B CA 93 D2 11 AA 0D 00 E0 98 03 2B 8C aßä‹Ê“Ò ª à˜ +Œ
0007FA70 3E 33 A1 E5 B4 E1 55 4D CE EB 35 C3 EF 13 34 43 >3¡å´áUMÎë5Ãï 4C
0007FA80 2C 6D 81 EA E5 CE 02 4F 99 B5 D3 90 5C BB D0 77 ,m êåÎ OµÓ \»Ðw
0007FA90 21 D0 80 AE 8E 61 D4 11 BC D7 00 80 C7 3C 88 81 !ЀŽaÔ ¼× €Ç<ˆ
0007FAA0 26 25 73 B0 C8 38 40 4B 88 77 61 C7 B0 6A AC 45 &%s°È8@KˆwaÇ°j¬E
0007FAB0 3D 54 E4 F3 35 CF EF 6C 35 C4 4F E6 34 4D FC 54 =Täó5Ïïl5ÄOæ4MüT
0007FAC0 30 00 31 00 32 00 33 00 34 00 35 00 36 00 37 00 0 1 2 3 4 5 6 7
0007FAD0 38 00 39 00 41 00 42 00 43 00 44 00 45 00 46 00 8 9 A B C D E F
0007FAE0 6D 79 41 F5 2E A6 54 49 A7 75 95 84 F6 1B 9C DD myAõ.¦TI§u•„ö œÝ
0007FAF0 41 9A 4C 8C 56 BF 27 46 9E 0A C8 38 6D 66 11 5C AšLŒV¿'Fž È8mf \
0007FB00 3D 1E 9A DB CB 45 BB 4A 85 3B E5 38 7F DB 2E 2D = šÛËE»J…;å8 Û.-
0007FB10 3A 01 C9 0F 68 05 A9 4B 9B 7E C9 C3 90 A6 60 9B : É h K›~ÉÃ ¦`›
0007FB20 CD 33 4B 56 2A C9 93 45 90 BF 24 73 E4 3C 63 22 Í3KV*É“E ¿$sä<c"
0007FB30 27 BF D4 4E 92 40 E9 42 80 7D 52 7B 1D 00 C9 BD '¿ÔN’@éB€}R{ ɽ
0007FB40 75 19 E2 F8 99 08 58 4F A4 BE 55 25 A9 C6 D7 7A u âø XO¤¾U%Æ×z
0007FB50 3E 8A A2 D4 F2 DC CF 43 A2 B7 F3 57 2A 7C AB 09 >Š¢ÔòÜÏC¢·óW*|«
0007FB60 0B A7 93 CC 27 EC C5 49 8B 34 13 93 1E FE D6 E2 §“Ì'ìÅI‹4 “ þÖâ
0007FB70 DA 44 27 39 68 DF 3B 4C 96 6B F2 0F 0F 47 BC 23 ÚD'9hß;L–kò G¼#
0007FB80 DF 2E 00 EC E9 15 9E 49 AD B1 3D 7B B1 29 47 F5 ß. ìé žI­±={±)Gõ
0007FB90 29 5B F6 4F 99 B0 6F 4A B6 DA 85 90 E6 62 72 87 )[öO°oJ¶Ú… æbr‡
0007FBA0 64 0E 11 6D B9 AD 16 44 8B 52 E9 FB C1 76 C2 0E d m¹­ D‹RéûÁvÂ
0007FBB0 6F 7F 41 02 4E 00 93 49 81 35 B2 82 81 AA 62 0F o A N “I 5²‚ ªb
0007FBC0 FE 42 35 FE D3 C1 F8 4E 65 7C 80 48 60 6F F6 70 þB5þÓÁøNe|€H`oöp
0007FBD0 1A E0 FB 64 E8 DB 32 49 9F 7B 6C 3D D0 D6 10 E5 àûdèÛ2IŸ{l=ÐÖ å
0007FBE0 F6 A6 4E BC 46 29 E7 4D 9E 49 DA 5B 7E 72 65 FA ö¦N¼F)çMžIÚ[~reú
0007FBF0 76 44 0B 40 81 30 D6 11 87 ED 00 06 29 45 C3 B9 vD @ 0Ö ‡í )Eù

You may notice that is a list of some GUID's
But not GUID like file,something as functions or created by SetupUtility.

I noted them and search for their names and compared with other notebooks that was able to boot in EFI or works by adding modules and enabling menus.
Here is one table.
Code formatting broke align.
[Image: xnvghj.jpg]



Hope somebody find this useful in one way.

As you may see on G62 is missing some.
Did know someone what is that?
Is just some data or are functions available of setup utility or something else.
find
quote
#5
Does anybody have UEFI VARIABLE DUMPER? (not IFR). Please share, thanks!
find
quote
#6
Does the g62 laptop support UEFI setup? How can I do it if I support it? Help please
find
quote
#7
(04-30-2014, 06:33 AM)Crahzee Wrote: Hi Everyone!

First time poster, long time lurker. I recently stumbled up a post by Donovan6000 that gave me the urge to pull the trigger and flash a modded BIOS. I've tinkered with my BIOS files before but never actually flashed it til now. Here is my README from the zip along with a picture of the shell on my laptop. With this complete and knowing my laptop is one of the few that is RSA signed without the check I'll be experimenting with unlocking menus or whitelists, etc. I haven't found much info on the G62 but hopefully this will bring those users out of hiding! Tongue

Enjoy!

[Image: eoechSK.jpg]

Code:
UEFI support for HP G62-220CA (Possibly others..)

-INFO-
System: HP G62-220CA
Tools Used: UEFI Tool, Universal IFR Extractor, EFI Variable Dumper, A Hex Editor
Original File: SP52598.exe
BIOS Version: F29
Supported Boards: 1444; 1445; 1446

-MODS-

Patched SHA1 verification of CryptRSA.efi with SHA1 of Shell.efi

-BACKGROUND-

After reading his post (http://donovan6000.blogspot.com/2013/08/look-what-i-did.html) on booting the UEFI
Shell via HP's harcoded UEFI implementation, I decided to see what my system was capable of. Using tools from
Donovan6000 I noticed my BIOS has hidden menus along with a setting for UEFI Boot (Pre-enabled of course!).
For my first attempt I decided to keep it simple and just patch the SHA1 verification. With UEFITool I did a
quick search for the SHA1 of the original CryptRSA.efi in my decrypted BIOS and switched it out for the SHA1
of the Shell.efi. Then I patched my InsydeFlash so I can flash my decrypted BIOS, and well in less than 24hrs
I have minimal UEFI support.

-INCLUDED-

Modded 01444F29.bin
Patched InysdeFlash
Shell.efi renamed in correct folder structure

-NOTE-

I, Crahzee, do not take any resposibility or liability for what may, could, might, will, or won't happen if you flash this.
I am providing it as-is, without any further support. If you require a dictionary at any point during this README, maybe
think twice before flashing. If this brings you success, then your welcome and please give credit where its due. If this
brings misfortune, then I hate to say it but I told you so but it isnt the end of the world.

-INSTRUCTIONS-

1. Before continuing, lookup how to recover your BIOS with a USB and Win + B

2. Format a USB drive as FAT32 and change the label to HP_TOOLS

3. Extract the Shell.zip to the root of the USB drive

4. Run InsydeFlash, it will auto flash the modded BIOS and reboot

5. Only have the USB with extracted files plugged in

6. When splash screeen appears press <F2>

7. Welcome to UEFI World!

-CREDITS-

Donovan6000 (http://donovan6000.blogspot.com

DOWNLOAD

link is dead does anyone still have the file? thx
find
quote


Forum Jump:


Users browsing this thread: 2 Guest(s)
Expand chat
Expand chat
Expand chat

To join us in the community live chat, please register or log-in