Welcome
|
You have to register before you can post on our site.
|
|
[REQUEST] HP Pavilion dv7-7171er UNLOCK FOR A FEE
|
Posts: 64
Threads: 3
Joined: Apr 2013
Reputation:
8
04-28-2013, 03:03 PM
(This post was last modified: 04-29-2013, 05:29 AM by Falseclock.)
-Motherboard Manufacturer and Model : Hewlett-Packard HP Pavilion dv7 Notebook PC, HP Pavilion dv7-7171er, (B3Q57EA)
-Bios Revision : 3.7
-Bios Version: F.26
-Bios Type : Insyde EFI
-Bios file: 01818.bin
-Bios SLIC :v2.1
Version 00020001h
OEM ID HPQOEM
OEM Table ID SLIC-MPC
-Bios Links :
Latest vendor's BIOS: BIOS F.26 - sp61457
Latest exctractable by Phoenix tool 2.1.4: BIOS F.0A - sp57274
Mods needed: Advanced menu, (Want to have availability of Raid setup, VT-D support (VT-X option is visible, but not VT-D))
Purpose: Virtualization
Ready to pay fee for your work.
Posts: 409
Threads: 2
Joined: Jan 2013
Reputation:
51
(04-28-2013, 03:03 PM)Falseclock Wrote: -Motherboard Manufacturer and Model : Hewlett-Packard HP Pavilion dv7 Notebook PC, HP Pavilion dv7-7171er, (B3Q57EA)
-Bios Revision : 3.7
-Bios Version: F.26
-Bios Type : Insyde EFI
-Bios file: 01818.bin
-Bios SLIC :v2.1
Version 00020001h
OEM ID HPQOEM
OEM Table ID SLIC-MPC
-Bios Links :
Latest vendor's BIOS: BIOS F.26 - sp61457
Latest exctractable by Phoenix tool 2.1.4: BIOS F.0A - sp57274
Mods needed: Advanced menu, (Want to have availability of Raid setup, VT-D support (VT-X option is visible, but not VT-D))
Purpose: Virtualization
Ready to pay fee for your work.
Unfortunately, I think your bios are RSA signed. This has proved to be impossible to flash after modding. I have been working on a way to get around this though. Are you willing to test some stuff? Beware, modding bios always has some risk to it. You could end up bricking your computer.
Posts: 64
Threads: 3
Joined: Apr 2013
Reputation:
8
04-30-2013, 12:07 AM
(This post was last modified: 04-30-2013, 02:01 AM by Falseclock.)
(04-29-2013, 09:30 PM)donovan6000 Wrote: Unfortunately, I think your bios are RSA signed. This has proved to be impossible to flash after modding. I have been working on a way to get around this though. Are you willing to test some stuff? Beware, modding bios always has some risk to it. You could end up bricking your computer.
Do you know success cases? Like this?
http://computercowboy.com/VAIO/VPC-Z1/BI...e_VT-x.jpg
http://computercowboy.com/VAIO/VPC-Z1/BI...e_VT-d.jpg
By the way. I already patched my bios:
1. unpacked with Phoenix tool
2. With IDA found where advanced menu is hidden
3. patched with HEX editor.
now want to flash some how. Stock flasher saying signature error.
FYI, latest version of bios are crypted, but I downgraded to latest unencrypted version and patched that version.
Posts: 3
Threads: 1
Joined: Apr 2013
Reputation:
0
Im wanting to have my bios modded but im new at this and am willing to do a step by step i want to have an advanced menu unlocked for my bios my bios is BIOS Version/Date INSYDE R0210Z8, 5/2/2011
the computer is a Sony vaio intel core i3 if any of that information helps let me know i have been trying to mod my bios ever since i bought this computer lol
Posts: 64
Threads: 3
Joined: Apr 2013
Reputation:
8
04-30-2013, 03:06 AM
(This post was last modified: 04-30-2013, 04:33 AM by Falseclock.)
(04-29-2013, 09:30 PM)donovan6000 Wrote: Unfortunately, I think your bios are RSA signed. This has proved to be impossible to flash after modding. I have been working on a way to get around this though. Are you willing to test some stuff? Beware, modding bios always has some risk to it. You could end up bricking your computer.
I have HP 655 and can test on it )))
This is cheap notebook and I can use it as investment
It also has Insyde H20 bios, Rev 3.7, Ver F.13
Posts: 64
Threads: 3
Joined: Apr 2013
Reputation:
8
04-30-2013, 06:11 AM
(This post was last modified: 04-30-2013, 06:29 AM by Falseclock.)
Can anybody guide how to find offset of variables in BIOS?
Code: .text:0000000180001B05 loc_180001B05: ; CODE XREF: DllEntryPoint+67j
.text:0000000180001B05 mov qword ptr [rax], 75746553h
.text:0000000180001B0C lea rax, loc_18000174C
.text:0000000180001B13 mov rcx, rdi
.text:0000000180001B16 mov [rdi+20h], rax
.text:0000000180001B1A lea rax, loc_180001214
.text:0000000180001B21 mov [rdi+28h], rax
.text:0000000180001B25 mov cs:byte_180087EE0, 0
.text:0000000180001B2C mov byte ptr [rdi+10h], 1
.text:0000000180001B30 call sub_180000BAC
.text:0000000180001B35 lea rcx, [rdi+8]
.text:0000000180001B39 lea r9, [rdi+10h]
.text:0000000180001B3D and qword ptr [rcx], 0
.text:0000000180001B41 mov rax, cs:qword_180087FE0
.text:0000000180001B48 lea rdx, unk_180087BF8
.text:0000000180001B4F xor r8d, r8d
.text:0000000180001B52 call qword ptr [rax+80h]
.text:0000000180001B58 mov rbx, rax
.text:0000000180001B5B test rax, rax
.text:0000000180001B5E jns short loc_180001B6F
.text:0000000180001B60 mov rdx, cs:qword_180087FE0
.text:0000000180001B67 mov rcx, rdi
.text:0000000180001B6A call qword ptr [rdx+48h]
.text:0000000180001B6D jmp short loc_180001B74
.text:0000000180001B6F ; ---------------------------------------------------------------------------
this line - is Advanced menu in my BIOS
Code: --- IDA ---
.text:0000000180001B25 mov cs:byte_180087EE0, 0
--- HEX ---
C6 05 B4 63 08 00 00
how to find it's real offset in BIOS? I need to change it to 1
Code: --- HEX ---
C6 05 B4 63 08 00 01
I want to set this var through BOOTX64.EFI
Posts: 64
Threads: 3
Joined: Apr 2013
Reputation:
8
04-30-2013, 08:20 AM
(This post was last modified: 04-30-2013, 08:21 AM by Falseclock.)
Another good news!
I found method how to dump current Insyde H20 BIOS from memory
So now I have decrypted dumps of 3 last BIOS'es, which are EFI and originally encrypted.
It means I can use Phoenix tool for modding.
))))
Posts: 409
Threads: 2
Joined: Jan 2013
Reputation:
51
(04-30-2013, 12:07 AM)Falseclock Wrote: (04-29-2013, 09:30 PM)donovan6000 Wrote: Unfortunately, I think your bios are RSA signed. This has proved to be impossible to flash after modding. I have been working on a way to get around this though. Are you willing to test some stuff? Beware, modding bios always has some risk to it. You could end up bricking your computer.
Do you know success cases? Like this?
http://computercowboy.com/VAIO/VPC-Z1/BI...e_VT-x.jpg
http://computercowboy.com/VAIO/VPC-Z1/BI...e_VT-d.jpg
By the way. I already patched my bios:
1. unpacked with Phoenix tool
2. With IDA found where advanced menu is hidden
3. patched with HEX editor.
now want to flash some how. Stock flasher saying signature error.
FYI, latest version of bios are crypted, but I downgraded to latest unencrypted version and patched that version.
Nope, I don't think there've been any successful cases with RSA bios. The pics you posted are for a Sony VAIO VPC-Z1, and that doesn't have RSA signed bios
If your using bios that aren't encrypted then they are not RSA signed. So just modify iscflash.dll to bypass the signature error. Then everything should work fine.
Posts: 2
Threads: 1
Joined: Apr 2013
Reputation:
0
Hello Falseclock
I have a compatible notebook HP Pavilion DV7 7001er same BIOS 01818
I tried to patch the Advanced menu on firmware F05 after Patching Insydeflash not written back: "...cant downgrade..."
I was search all Internet and saw all your messages about your identical punishment.
If you get luck, please post it step by step manuals full working method. IMHO would be interesting for everyone.
Posts: 64
Threads: 3
Joined: Apr 2013
Reputation:
8
(04-30-2013, 07:44 PM)donovan6000 Wrote: If your using bios that aren't encrypted then they are not RSA signed. So just modify iscflash.dll to bypass the signature error. Then everything should work fine.
It is encrypted cause I dumped bios before flashing the same version over.
I patched dll to be able flash modded bios, but system does not recognize modded bios even if I change only logo.
to you know how to bypass some checks after flashing modded bios?
|
Users browsing this thread: 4 Guest(s)
|