Forum RSS Feed Follow @ Twitter Follow On Facebook

Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
[-]
Welcome
You have to register before you can post on our site.

Username:


Password:





[-]
Latest Threads
i7 2860QM how to raise power limit?
Last Post: DeathBringer
Today 02:40 PM
» Replies: 1
» Views: 49
[REQUEST] Lenovo G710 BIOS Whitelist Rem...
Last Post: chaoszwerg
Today 02:24 PM
» Replies: 490
» Views: 216987
[REQUEST] Lenovo Yoga 7 Pro 82Y7 unlock
Last Post: WalkTheEarth
Today 02:20 PM
» Replies: 0
» Views: 45
[REQUEST] Acer Aspire 8930(G) BIOS Unloc...
Last Post: Ilias manolopoulos
Today 01:52 PM
» Replies: 58
» Views: 43313
ASUS M11AD > Haswell Refresh
Last Post: JCY1962
Today 12:40 PM
» Replies: 22
» Views: 7585
overclocking msi b150 gaming m3
Last Post: J1419
Yesterday 05:51 PM
» Replies: 0
» Views: 151
Asus K72jr repair
Last Post: Moddo73@PROXIMUS
Yesterday 02:08 PM
» Replies: 0
» Views: 131
[REQUEST] Lenovo Z50-70 & Z40-70 (9BCNxx...
Last Post: Dudu2002
Yesterday 01:29 PM
» Replies: 757
» Views: 320212
Excalibur G900.1160 BİOS unlock request
Last Post: Dudu2002
Yesterday 01:28 PM
» Replies: 7
» Views: 958
[REQUEST] Sony Vaio VPCEH & VPCEJ series...
Last Post: mariukonie
Yesterday 09:17 AM
» Replies: 241
» Views: 153874
[Request] BIOS mod for Acer EG43M (P01-A...
Last Post: DeathBringer
Yesterday 08:50 AM
» Replies: 7
» Views: 329
HOW TO FLASH MODIFIED OR ORIGINAL BIOS
Last Post: Ali987
Yesterday 03:16 AM
» Replies: 20
» Views: 72016
[REQUEST] Lenovo ThinkPad Yoga S1 (GQETx...
Last Post: Dudu2002
Yesterday 03:05 AM
» Replies: 116
» Views: 56460
Hp 11-ak0040nr add option to boot from i...
Last Post: Xanmx
07-05-2025 05:47 PM
» Replies: 0
» Views: 238
Lenovo Y550 BIOS Unlocking (Advanced Men...
Last Post: NiTrOwow
07-05-2025 08:28 AM
» Replies: 4
» Views: 1014
[GUIDE] How to modify AMI MSI BIOS to un...
Last Post: solver_001
07-05-2025 06:34 AM
» Replies: 56
» Views: 334764
[REQUEST] Lenovo ThinkPad T450(s) (JBETx...
Last Post: s_l_24
07-05-2025 04:09 AM
» Replies: 148
» Views: 104012
[REQUEST] Acer Nitro 5 AN515-54 BIOS Unl...
Last Post: 2u75
07-04-2025 03:37 AM
» Replies: 131
» Views: 64996
[REQUEST] Acer Nitro 5 AN517-51 BIOS Unl...
Last Post: Dudu2002
07-03-2025 04:08 PM
» Replies: 18
» Views: 12930
[REQUEST] Lenovo IdeaPad Z570 (45CNxxWW)...
Last Post: andkul
07-03-2025 09:52 AM
» Replies: 96
» Views: 114777

[REQUEST] HP Pavilion dv6-3026er (BIOS F.29, InsydeH2O) — Unlock Advanced Menu
#1
Question 
System: HP Pavilion dv6-3026er
BIOS Vendor: InsydeH2O
BIOS Version: F.29 (11/07/2011)
BIOS Dump Size: 0x00280000–0x003FFFFF (1.5MB region)
CPU: Intel® Core™ i7 M 620 @ 2.67GHz
OS Used: Lubuntu 25.04 (x86_64)
Flash Tool Used: flashrom 1.4.0

CMOS access: I/O port dump (range 0x00–0xFF); real size unknown
IFR Extracted: using ifrextractor
I’m requesting help unlocking the Advanced tab in the BIOS setup of my HP Pavilion dv6-3026er laptop. The system uses an InsydeH2O BIOS (version F.29), and I’ve confirmed from the IFR that the Advanced formset exists, but is suppressed under the condition:
Code:
Suppress If:
  Variable 0x85 != 0x2
  AND
  Variable 0x86 != 0x1
This likely checks for "Supervisor-level access" and authentication, but my BIOS UI has no visible Supervisor password option, and attempts using Administrator/User passwords have not enabled the menu.
I would like to unlock this menu with minimal risk, preferably through CMOS or other soft methods. If a patched BIOS is the only option, I’m comfortable flashing only the BIOS region.
System & Flash Details
Code:
❯ sudo flashrom -p internal
Chipset: Intel HM55
Flash Chip: Eon EN25F32 (4MB SPI)
FREG0: Flash Descriptor region — read-only
FREG1: BIOS region (0x00280000-0x003FFFFF) — read-write
FREG2: Intel ME region — locked
❯ sudo flashrom -p internal --ifd -i bios -r bios_dump.bin
BIOS dump (4MB) extracted successfully, but with FF or 00 on the beginning.
Boot Mode: Legacy-only (UEFI present internally but not supported by firmware loader)
No UEFI shell available
Dumped only the first 256 bytes, which may not cover full CMOS. Some values appear duplicated (possibly mirrors or mapped copies), and others change dynamically.
Code:
Example CMOS diff (reboot only):
0x40: 0x0B → 0x0C
0x70: 0x29 → 0x55
0x8C: 0x00 → 0x40
0xF0: 0x29 → 0x55
Despite multiple tests, I couldn’t identify values matching Var 0x85 or 0x86, suggesting those may be stored in NVRAM or protected storage. The CMOS changes appear to reflect dynamic status, boot state, or other feature flags.
Attached Files:
bios_dump.bin in zip:
.zip   bios_dump.zip (Size: 1.18 MB / Downloads: 1)
 — BIOS region dump (via flashrom --ifd -i bios)
setup_ifr.txt:
.txt   setup_ifr.txt (Size: 192.45 KB / Downloads: 1)
 — IFR extracted from SetupUtility
cmos_boot_second.txt:
.txt   cmos_boot_second.txt (Size: 3.59 KB / Downloads: 1)  
— CMOS snapshot (256-byte I/O dump)
If possible, a non-invasive unlock method using CMOS flags, key combos (e.g. F10+A), or known mappings
If not, a patched BIOS image with Suppress If
condition bypassed — only affecting the BIOS region, not Intel ME/GbE/EC
(Hardware SPI flasher is available, ch341a)
I'd really appreciate any help with this. Have a great day, everyone! Big Grin
find
quote


Forum Jump:


Users browsing this thread: 1 Guest(s)