[REQUEST] HP Pavilion dv7-7171er UNLOCK FOR A FEE

[Falseclock]

-Motherboard Manufacturer and Model : Hewlett-Packard HP Pavilion dv7 Notebook PC, HP Pavilion dv7-7171er, (B3Q57EA)
-Bios Revision : 3.7
-Bios Version: F.26
-Bios Type : Insyde EFI
-Bios file: 01818.bin
-Bios SLIC :v2.1
Version 00020001h
OEM ID HPQOEM
OEM Table ID SLIC-MPC

-Bios Links :
Latest vendor's BIOS: BIOS F.26 - sp61457
Latest exctractable by Phoenix tool 2.1.4: BIOS F.0A - sp57274

Mods needed: Advanced menu, (Want to have availability of Raid setup, VT-D support (VT-X option is visible, but not VT-D))

Purpose: Virtualization

Ready to pay fee for your work.

[donovan6000]

-Motherboard Manufacturer and Model : Hewlett-Packard HP Pavilion dv7 Notebook PC, HP Pavilion dv7-7171er, (B3Q57EA)
-Bios Revision : 3.7
-Bios Version: F.26
-Bios Type : Insyde EFI
-Bios file: 01818.bin
-Bios SLIC :v2.1
Version 00020001h
OEM ID HPQOEM
OEM Table ID SLIC-MPC

-Bios Links :
Latest vendor's BIOS: BIOS F.26 - sp61457
Latest exctractable by Phoenix tool 2.1.4: BIOS F.0A - sp57274

Mods needed: Advanced menu, (Want to have availability of Raid setup, VT-D support (VT-X option is visible, but not VT-D))

Purpose: Virtualization

Ready to pay fee for your work.

Unfortunately, I think your bios are RSA signed. This has proved to be impossible to flash after modding. I have been working on a way to get around this though. Are you willing to test some stuff? Beware, modding bios always has some risk to it. You could end up bricking your computer.

[Falseclock]

Unfortunately, I think your bios are RSA signed. This has proved to be impossible to flash after modding. I have been working on a way to get around this though. Are you willing to test some stuff? Beware, modding bios always has some risk to it. You could end up bricking your computer.

Do you know success cases? Like this?

http://computercowboy.com/VAIO/VPC-Z1/BI...e_VT-x.jpg
http://computercowboy.com/VAIO/VPC-Z1/BI...e_VT-d.jpg

By the way. I already patched my bios:

1. unpacked with Phoenix tool
2. With IDA found where advanced menu is hidden
3. patched with HEX editor.

now want to flash some how. Stock flasher saying signature error.

FYI, latest version of bios are crypted, but I downgraded to latest unencrypted version and patched that version.

[RoyalFlush132]

Im wanting to have my bios modded but im new at this and am willing to do a step by step i want to have an advanced menu unlocked for my bios my bios is BIOS Version/Date INSYDE R0210Z8, 5/2/2011
the computer is a Sony vaio intel core i3 if any of that information helps let me know i have been trying to mod my bios ever since i bought this computer lol

[Falseclock]

Unfortunately, I think your bios are RSA signed. This has proved to be impossible to flash after modding. I have been working on a way to get around this though. Are you willing to test some stuff? Beware, modding bios always has some risk to it. You could end up bricking your computer.

I have HP 655 and can test on it )))

This is cheap notebook and I can use it as investment

It also has Insyde H20 bios, Rev 3.7, Ver F.13

[Falseclock]

Can anybody guide how to find offset of variables in BIOS?

---

Code:

.text:0000000180001B05 loc_180001B05: ; CODE XREF: DllEntryPoint+67j
.text:0000000180001B05 mov qword ptr [rax], 75746553h
.text:0000000180001B0C lea rax, loc_18000174C
.text:0000000180001B13 mov rcx, rdi
.text:0000000180001B16 mov [rdi+20h], rax
.text:0000000180001B1A lea rax, loc_180001214
.text:0000000180001B21 mov [rdi+28h], rax
.text:0000000180001B25 mov cs:byte_180087EE0, 0
.text:0000000180001B2C mov byte ptr [rdi+10h], 1
.text:0000000180001B30 call sub_180000BAC
.text:0000000180001B35 lea rcx, [rdi+8]
.text:0000000180001B39 lea r9, [rdi+10h]
.text:0000000180001B3D and qword ptr [rcx], 0
.text:0000000180001B41 mov rax, cs:qword_180087FE0
.text:0000000180001B48 lea rdx, unk_180087BF8
.text:0000000180001B4F xor r8d, r8d
.text:0000000180001B52 call qword ptr [rax+80h]
.text:0000000180001B58 mov rbx, rax
.text:0000000180001B5B test rax, rax
.text:0000000180001B5E jns short loc_180001B6F
.text:0000000180001B60 mov rdx, cs:qword_180087FE0
.text:0000000180001B67 mov rcx, rdi
.text:0000000180001B6A call qword ptr [rdx+48h]
.text:0000000180001B6D jmp short loc_180001B74
.text:0000000180001B6F ; ---------------------------------------------------------------------------

this line - is Advanced menu in my BIOS

Code:

--- IDA ---
.text:0000000180001B25 mov cs:byte_180087EE0, 0
--- HEX ---
C6 05 B4 63 08 00 00

how to find it's real offset in BIOS? I need to change it to 1

Code:

--- HEX ---
C6 05 B4 63 08 00 01

I want to set this var through BOOTX64.EFI

[Falseclock]

Another good news!

I found method how to dump current Insyde H20 BIOS from memory

So now I have decrypted dumps of 3 last BIOS'es, which are EFI and originally encrypted.

It means I can use Phoenix tool for modding.

))))

[donovan6000]

Unfortunately, I think your bios are RSA signed. This has proved to be impossible to flash after modding. I have been working on a way to get around this though. Are you willing to test some stuff? Beware, modding bios always has some risk to it. You could end up bricking your computer.

Do you know success cases? Like this?

http://computercowboy.com/VAIO/VPC-Z1/BI...e_VT-x.jpg
http://computercowboy.com/VAIO/VPC-Z1/BI...e_VT-d.jpg

By the way. I already patched my bios:

1. unpacked with Phoenix tool
2. With IDA found where advanced menu is hidden
3. patched with HEX editor.

now want to flash some how. Stock flasher saying signature error.

FYI, latest version of bios are crypted, but I downgraded to latest unencrypted version and patched that version.

Nope, I don't think there've been any successful cases with RSA bios. The pics you posted are for a Sony VAIO VPC-Z1, and that doesn't have RSA signed bios

If your using bios that aren't encrypted then they are not RSA signed. So just modify iscflash.dll to bypass the signature error. Then everything should work fine.

[bobrovjr]

Hello Falseclock

I have a compatible notebook HP Pavilion DV7 7001er same BIOS 01818

I tried to patch the Advanced menu on firmware F05 after Patching Insydeflash not written back: "...cant downgrade..."
I was search all Internet and saw all your messages about your identical punishment.

If you get luck, please post it step by step manuals full working method. IMHO would be interesting for everyone.

[Falseclock]

If your using bios that aren't encrypted then they are not RSA signed. So just modify iscflash.dll to bypass the signature error. Then everything should work fine.

It is encrypted cause I dumped bios before flashing the same version over.

I patched dll to be able flash modded bios, but system does not recognize modded bios even if I change only logo.

to you know how to bypass some checks after flashing modded bios?