Forum RSS Feed Follow @ Twitter Follow On Facebook

Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
[-]
Welcome
You have to register before you can post on our site.

Username:


Password:





[-]
Latest Threads
[REQUEST] Acer Nitro 5 AN515-54 BIOS Unl...
Last Post: Dudu2002
Today 12:44 PM
» Replies: 137
» Views: 95095
[REQUEST] GIGABYTE G6 MF (2024) Bios Unl...
Last Post: Dudu2002
Today 12:43 PM
» Replies: 4
» Views: 20535
disabling amd prochot with moded bios.
Last Post: lucillegross2
Today 01:25 AM
» Replies: 1
» Views: 604
Gigabyte GA-EP45-UD3P (Rev 1.0) - BIOS F...
Last Post: zamar26
Yesterday 09:54 AM
» Replies: 17
» Views: 18215
UNLOCKED BIOS S3810 WITH LIMIT 8GB RAM
Last Post: DeathBringer
Yesterday 07:29 AM
» Replies: 11
» Views: 1015
[REQUEST] Acer Predator Helios 500 PH517...
Last Post: MaksaMax
10-21-2025 06:11 PM
» Replies: 46
» Views: 24059
[Request] Mod JGINYUE X99-M D4 BIOS
Last Post: polmzqwe
10-21-2025 11:54 AM
» Replies: 0
» Views: 191
2x CPU Dell Workstation BIOS modding
Last Post: amyleon
10-21-2025 06:59 AM
» Replies: 1
» Views: 1539
Lenovo X250 WAN whitelist remove
Last Post: rahimali
10-20-2025 11:59 AM
» Replies: 12
» Views: 4170
[REQUEST] HP Elitebook 8560w Whitelist R...
Last Post: daedaluus
10-20-2025 11:16 AM
» Replies: 26
» Views: 16942
How to peek inside a bios that comes as ...
Last Post: amyleon
10-20-2025 10:46 AM
» Replies: 1
» Views: 1480
BTC79X9 Core unlock
Last Post: Stahan
10-20-2025 05:27 AM
» Replies: 0
» Views: 251
Biostar N68S3B to disable TDP check
Last Post: DeathBringer
10-20-2025 03:24 AM
» Replies: 3
» Views: 357
[REQUEST] Lenovo Thinkpad T420s (8CETxxW...
Last Post: fr4nk
10-19-2025 09:35 PM
» Replies: 196
» Views: 122555
BIOS P09ABE and 32GB RAM with 2 16GB mod...
Last Post: DeathBringer
10-19-2025 11:16 AM
» Replies: 3
» Views: 608
Microcode Update for HP Compaq DC7900 (7...
Last Post: MarkF
10-19-2025 09:53 AM
» Replies: 20
» Views: 11350
[Request] AM3 support for ECS RS485M-M
Last Post: DeathBringer
10-19-2025 02:03 AM
» Replies: 7
» Views: 1126
Intel Xeon E3 1270 V5 for LGA 1151 (ASUS...
Last Post: DeathBringer
10-18-2025 03:26 PM
» Replies: 6
» Views: 637
ASUS M2N4-SLI new cpu
Last Post: Vlad94
10-18-2025 02:52 PM
» Replies: 9
» Views: 2270
[REQUEST] Lenovo Flex 2-14 (A0CNxxWW) Wh...
Last Post: Dudu2002
10-18-2025 11:51 AM
» Replies: 246
» Views: 119676

[REQUEST] HP Pavilion dv6-3026er (BIOS F.29, InsydeH2O) — Unlock Advanced Menu
#1
Question 
System: HP Pavilion dv6-3026er
BIOS Vendor: InsydeH2O
BIOS Version: F.29 (11/07/2011)
BIOS Dump Size: 0x00280000–0x003FFFFF (1.5MB region)
CPU: Intel® Core™ i7 M 620 @ 2.67GHz
OS Used: Lubuntu 25.04 (x86_64)
Flash Tool Used: flashrom 1.4.0

CMOS access: I/O port dump (range 0x00–0xFF); real size unknown
IFR Extracted: using ifrextractor
I’m requesting help unlocking the Advanced tab in the BIOS setup of my HP Pavilion dv6-3026er laptop. The system uses an InsydeH2O BIOS (version F.29), and I’ve confirmed from the IFR that the Advanced formset exists, but is suppressed under the condition:
Code:
Suppress If:
  Variable 0x85 != 0x2
  AND
  Variable 0x86 != 0x1
This likely checks for "Supervisor-level access" and authentication, but my BIOS UI has no visible Supervisor password option, and attempts using Administrator/User passwords have not enabled the menu.
I would like to unlock this menu with minimal risk, preferably through CMOS or other soft methods. If a patched BIOS is the only option, I’m comfortable flashing only the BIOS region.
System & Flash Details
Code:
❯ sudo flashrom -p internal
Chipset: Intel HM55
Flash Chip: Eon EN25F32 (4MB SPI)
FREG0: Flash Descriptor region — read-only
FREG1: BIOS region (0x00280000-0x003FFFFF) — read-write
FREG2: Intel ME region — locked
❯ sudo flashrom -p internal --ifd -i bios -r bios_dump.bin
BIOS dump (4MB) extracted successfully, but with FF or 00 on the beginning.
Boot Mode: Legacy-only (UEFI present internally but not supported by firmware loader)
No UEFI shell available
Dumped only the first 256 bytes, which may not cover full CMOS. Some values appear duplicated (possibly mirrors or mapped copies), and others change dynamically.
Code:
Example CMOS diff (reboot only):
0x40: 0x0B → 0x0C
0x70: 0x29 → 0x55
0x8C: 0x00 → 0x40
0xF0: 0x29 → 0x55
Despite multiple tests, I couldn’t identify values matching Var 0x85 or 0x86, suggesting those may be stored in NVRAM or protected storage. The CMOS changes appear to reflect dynamic status, boot state, or other feature flags.
Attached Files:
bios_dump.bin in zip:
.zip   bios_dump.zip (Size: 1.18 MB / Downloads: 1)
 — BIOS region dump (via flashrom --ifd -i bios)
setup_ifr.txt:
.txt   setup_ifr.txt (Size: 192.45 KB / Downloads: 1)
 — IFR extracted from SetupUtility
cmos_boot_second.txt:
.txt   cmos_boot_second.txt (Size: 3.59 KB / Downloads: 1)  
— CMOS snapshot (256-byte I/O dump)
If possible, a non-invasive unlock method using CMOS flags, key combos (e.g. F10+A), or known mappings
If not, a patched BIOS image with Suppress If
condition bypassed — only affecting the BIOS region, not Intel ME/GbE/EC
(Hardware SPI flasher is available, ch341a)
I'd really appreciate any help with this. Have a great day, everyone! Big Grin
find
quote


Forum Jump:


Users browsing this thread: 2 Guest(s)