[REQUEST] HP Gaming Pavilion 15-cx0xxx BIOS Unlock

[rhysperry111]

Hi, I am using a HP Pavillion 15 and am slightly annoyed at it's lack of advanced options. The main option that I would like to have is to disable my graphics card as I do not use it and I would also like to set a custom boot logo.

Thank you in advance to anyone who helps me with this.


I am not quite sure which files to provide so I will provide all the ones I have found:
https://www.dropbox.com/sh/m159dzr1eq7c0...Yhoxa?dl=0

I could not upload the firmware as it passes the maximum file size

[Tryzzel]

Exact name: HP Gaming Pavilion – 15-cx0004ng 
Bios: Insyde F.21 Rev.A (Date 11/29/2019)
Link to Bios: HP Support
 
Hello bios-mods Community,

I would appreciate if somebody could unlock my BIOS to remove the whitelist and to have access to more options.

I did the RSA signed check with Andy´s phoenix tool and I couldn’t find any “Decrypted” message in it. I checked the files “08477.bin” and “08478.bin”.

Thanks for your help!

Regards,
Tryzzel

[gearninja]

Hey,

First, i'd like to salute this community for being all for sharing and progress through collaboration. I'm believe that unlocking the BIOS I have have could help a lot of people, it's on the HP Pavillion 15 cx0056wm laptop, but it's very on other cx00xxx laptops, if not the same, it mentioned the model with [censored] in the BIOS. Hp for some reason decided to not provide an option to access advanced settings, it's not cool, it makes the laptop like a "black box".

Anyways, I started looking for modded BIOS updates, didn't find any for that laptop, but a lot of people are looking for it as mentioned, so I decided to research doing it on my own. I need to disable CFG-Lock to be able to run Mac, because it uses the MSR 0x0E CPU register which is protected by the BIOS by default, that's why I'm using version F.21 and not the latest one, the latest one doesn't seem to have it at all, not sure if that means that it's disabled by default, but I don't want to try and not be able to downgrade.

I found a really cool tool that's been leaked from Intel, they later decided to publish it themselves anyways, it's called Insyder BIOS Editor (InsydeH2O_03.04/H2OEZE) it allows seeing the BIOS menu and replacing different modules, but I don't have a tool to modify the exported file, so I had to find another way. I found out about a cool guide that's especially for Hp laptops, it consists getting the .bin, using PhoenixTool (to get the .rom files, but I used UEFITool to find the GUID since it has search) to export two EFI structures, DXE core and SetupUtility, then using a Hex editor to find the data offsets of the menu tabs and finally using IDA Pro to find the display tabs conditional checks to determine whether to view them or not based on the manufacturer's settings, patching them using a Hex Editor, and loading them into the original bin using the Insyder tool to be ready flashing. I believe that I can just enable the settings through Insyde tools, change the default settings, that is, but i'm interested in solving it for others too, if that works then I could do without patching it, but I rather have all the settings in the BIOS, so it's a win-win.

I'm at the point where I need to find the offsets in the structure using a Hex Editor, but I can't find non of the menu options written in the format mentioned in the guide, with space and 0x00 between bytes, nor through their regular names, I only found Advanced mentioned, but it could be something else, someone more experience might know.

I skipped that step just to try, loaded the .rom into IDA and looked for the byte sequence mentioned in the guide for menu header data and I found them , but I need the tabs offsets to know exactly where to look.

The question is, could the EFI structure data be encrypted on top of the regular compression? I checked the decompress option upon extracting. Why is Hp making it hard on the modding community 

Guide link: https://dlscrib.com/unlock-bios_588a1b8b...3_txt.html
F.21 BIOS update link (for model cx0056wm):  https://ftp.hp.com/pub/softpaq/sp100501-...100754.exe
HxD (Hex Editor): https://mh-nexus.de/en/downloads.php?product=HxD20
IDA Pro (free version): https://www.hex-rays.com/products/ida/su..._freeware/
IFRExtract (could be needed using other methods, like the extract module method using Insyde Editor, the output needed to be modified after, so it need to be decrypted/decompress if it's encrypted/compresses before being able to edit it, and then a way to recompile is needed after, the replace module in Insyde Editor is to be uses after, I left it as an attatchement)

I've attatched the things needed in the process, in case someone wants to try.

I'd appreciate it if anyone could shed some light, i'm still only a beginner when it comes to BIOS modding, I only get the general idea 

P.s: I got the bios bins from the official exe through making a recovery USB, although the USB recovery mode didn't work for me to flash, I used the update feature. The .fd files in BIOSUpdate.exe extracted didn't load in the Insyder Editor. To update later I'll try the USB hotkey method while having the .bin in the USB, seems to be a common option.

[Breaeth]

Hello, first i would like to say that this forum is abolutely wonderful !

So my pc is a HP pavillon 15-cx0xxx

1) my bios, it's a rev5.0  https://ibb.co/TDffcr1
2) Système information: https://ibb.co/fMzsxCh
3) My actual bios image : https://ftp.hp.com/pub/softpaq/sp103501-...103604.exe
I don't know if it's usefull but there is all the bios image that i can have, this is on the page : https://support.hp.com/us-en/drivers/sel...c/20284020

Thanks for all replies !

Also for the little history, the screen of my laptops il almost dead so i would like to transform it in a pc desktop. But for this i need to modify the bios for always boot on the external screen, but i can't acces to the advanced settings, because hp is evil, and i have already try everything on internet to have acces to it and this is my ultimate solution to serch some help
I know that a russian succed to reach to the advanced settings with the same pc but on the InsydeH20 F.04 that i can't install because the version are "incompatible" but this is the same pc so i don't really understand why  
Here the vidéo where he succeed : https://www.youtube.com/watch?v=EOINOacJ3co this is all in russian and i'm not russian but i would like to make 3 times fn+ tabs but i need F.04 to succed i think
Ps : this is my first post so i hope i have make things right

[Maxinator500]

I have only this solution so far: sp87344.zip.

[Breaeth]

I have only this solution so far: sp87344.zip.

Thanks you you so much for your quick answer !  
I just make the manipulations and it work i have F .04 now !

But even when i press fn+tab 3 times at the same time and save and reboot nothing happens...
I have try this multiple time but still nothing happens. I have also try A+F10 for go in   bios but same result i still don't have advanced option... 
I feel a bit stupide also your answer was in the description section of the video i have sent but i don't read russian .
Anyway thanks you a lot

[Maxinator500]

i still don't have advanced option...  :(

It is very tricky to hit a key in time. If you can't do it with one press, try pressing "A" quickly several times throughout the entire power-on stage.

[Breaeth]

i still don't have advanced option... 

It is very tricky to hit a key in time. If you can't do it with one press, try pressing "A" quickly several times throughout the entire power-on stage.

I use a clamp to have a good precision when pressing fn+tab à the same time ? Is there precise time to wait between every push of fn+tab at the same time ?
I didn't get the "try pressing "A" quickly several times throughout the entire power-on stage. "
I have press A several time quickly and pressing F10 for go in bios and still nothing appens, am i doing something wrong ?

[Maxinator500]

am i doing something wrong ?

Can't tell. I have nothing to do with that video. Sorry.

[Breaeth]

am i doing something wrong ?

Can't tell. I have nothing to do with that video. Sorry.

Thank you at least we have try