Forum FAQForum FAQ SearchSearch MemberlistMemberlist   UsergroupsUsergroups RegisterRegister ProfileProfile Log in to check your private messagesLog in to check your private messages Wim's BIOS RSS FeedRSS Log inLog in

How to > HP BIOS MiniPCI Fix- nc6000/others
Goto page Previous  1, 2, 3, 4, 5, 6 ... 9, 10, 11  Next
 
Post new topic   Reply to topic    Wim''s BIOS Forum Index -> Notebook BIOS and other problems

Recommended by Wim's BIOS...

BIOS Agent scan: Upgrade your BIOS! Driver Agent scan: Instant Access to 116,215 Device Drivers Updates!

View previous topic :: View next topic  
Author Message
semi
BIOS Newbie


Joined: 27 Oct 2008
Posts: 23

PostPosted: Wed Dec 17, 2008 1:53 pm     Post subject: Reply with quote

hi,

@ fa001
my congratulations! Could you please shoe me the exactly byte string
that crashed the ADDCC?

@ oddi
in principle you have to add the whole checksum difference (68 04 80 DA)
to your global file checksum. that means,
- if one value is positiv, exactly this value is missing on this local value.
- if one value is negativ, exactly this value is too much on this local value.

In your example:

Without changes: global file checksum is AD8E431B
With changes: global file checksum is 4589C241
=> the checksum differences are 68 04 80 DA

this means that all local values are too little.
So you must find an "unused" bytestring which you can
add the checksum differences to correct it globaly.
at best another miniPCI id from your compressed whitelist
that you dont need. In some specialcases, with only one ID on the whitelist like nx9420,
you must search for an ascii string that you
dont need. in example " BOOTWAK"

You cant find the 68 04 80 DA in your biosfile, cause its only
a calculated value.

I will show you the simple algorithm to calculate the checksum differences.

Original BIOS ID:
(1st)E6008680 (2nd)BF431086 (3rd)802225A3

OWN BIOS ID:
(1st)E6001418 (2nd)BF010214 (3rd)186025A3

E6008680
-(E6001418)
=======
00007268(1st)

BF431086
-(BF010214)
=======
00420E72(2nd)

802225A3
-(186025A3)
=======
68(-3E)0000(3rd)

=>

00 00 72 68
00 42 0E 72
+ 68(-3E)00 00
==========
68 04 80 DA => this is the checksum difference

If you add the local values to a bytestring you dont need, and change
this in your biosfile, it will fix the checksum global!

I hope your question is answered? If not, feel free to ask.

Cheers semi
Back to top
View user's profile Send private message Visit poster's website
oddi
New visitors - please read the rules.


Joined: 17 Nov 2008
Posts: 4

PostPosted: Wed Dec 17, 2008 3:25 pm     Post subject: Reply with quote

very tnx, but i need solution about how find correct bytestring and copy to field : "Uncompressed bytes in compressed BIOS-file for correction "
tnx
Back to top
View user's profile Send private message
semi
BIOS Newbie


Joined: 27 Oct 2008
Posts: 23

PostPosted: Wed Dec 17, 2008 3:27 pm     Post subject: Reply with quote

ok, show me your whole compressed whitelist!
Back to top
View user's profile Send private message Visit poster's website
fa001
New visitors - please read the rules.


Joined: 14 Dec 2008
Posts: 9

PostPosted: Tue Dec 23, 2008 4:14 am     Post subject: Reply with quote

semi,

It appears that any lower case letter for a hex digit such as e4 instead of E4 entered into the "Uncompressed Bytes in compressed BIOS-File for correction" will cause a crash. I have used several different ones.
Back to top
View user's profile Send private message
semi
BIOS Newbie


Joined: 27 Oct 2008
Posts: 23

PostPosted: Tue Dec 23, 2008 1:43 pm     Post subject: Reply with quote

You are right fa001,

thanks for your help!

The fixed ADDCC is online...

Cheers Semi
_________________
Awesome Dirty Do Checksum Checker V2
Back to top
View user's profile Send private message Visit poster's website
fa001
New visitors - please read the rules.


Joined: 14 Dec 2008
Posts: 9

PostPosted: Sat Jan 03, 2009 3:52 am     Post subject: Reply with quote

Semi,

Installed your new version but get the following error,
"! C:\Documents and Settings\user\Desktop\ADDCC.rar: Invalid or corrupt authenticity information"

Is this a problem?

- Fred
Back to top
View user's profile Send private message
fa001
New visitors - please read the rules.


Joined: 14 Dec 2008
Posts: 9

PostPosted: Sat Jan 03, 2009 3:57 am     Post subject: Reply with quote

Semi,

Perhaps it is a problem when I try to run the app I get the following,
"The application failed to initalize properly (0xc0000135). Click on OK to terminate the application."

So it will not run on my nc8000.

- Fred
Back to top
View user's profile Send private message
fa001
New visitors - please read the rules.


Joined: 14 Dec 2008
Posts: 9

PostPosted: Sat Jan 03, 2009 4:15 am     Post subject: Reply with quote

Sorry, my bad! The second error is due to not installing .Net. I did know better.
- Fred
Back to top
View user's profile Send private message
drieg
New visitors - please read the rules.


Joined: 18 Feb 2009
Posts: 1

PostPosted: Wed Feb 18, 2009 12:13 pm     Post subject: N620c BIOS FIX Reply with quote

@semi

First of all many thanks for your great work and utilities you made!
I'm trying now to adapt my N620c F.16 BIOS to accept my Broadcom miniPCI Wi-Fi card according to your guide for nc6000. I was able to found whitelist at offset 75D7A:

Code:

Offset     0  1  2  3  4  5  6  7   8  9  A  B  C  D  E  F

00075D70   21 70 86 EB B0 40 01 F8  FF C3 8C 16 13 00 11 0E
00075D80   E5 FD 00 23 26 E6 00 0A  11 04 21 F7 75 10 03 14
00075D90   27 04 00 86 80 BF 43 10  86 80 22 25 23 28 27 C1
00075DA0   25 09 66 80 E1 C1 A7 FF  E4 18 E6 0F 84 F3 9B 00
00075DB0   EF E6 06 E8 1F 33 C0 80  FF CC 40 E8 EE 00 F6 C4
00075DC0   40 FB 75 72 60 20 10 83  F8 00 75 79 69 80 12 C1
00075DD0   A7 EB A4 33 C0 12 2A E7  40 B9 2E 9F 2A 55 E6 3B


So I can recognize at least 3 cards here:
8C16 1300 110EE5(FD)00
(2326)E600(0A110421F775100314270400)
8680(BF)4310 86802225

I have tested W400 HP Wi-Fi card (Atheros MB22g) and it is working:
PCI\VEN_168C&DEV_0013&SUBSYS_00E60E11

And I'd like to change 3rd card (probably Intel PRO 2100) to my Broadcom card:
PCI\VEN_14E4&DEV_4320&SUBSYS_12F4103C

Unfortunatelly I can't decompress my bios file. Neither "compdeconx.exe" nor "compdecw.exe" does not work with my bios file. I've tried remove initial FF values, I've tried change header to 00 10 01 00 hex (to match nc6000 bios header) but still no success. Probably N620c bios file is compressed in a different way than nc6000...

Could you be of any help? How should I proceed? Many thanks in advance...

Here's the link to N620c F.16 BIOS file:
http://h20000.www2.hp.com/bizsupport/TechSuppor...PSG_I22959-107818
Back to top
View user's profile Send private message
semi
BIOS Newbie


Joined: 27 Oct 2008
Posts: 23

PostPosted: Sun Mar 22, 2009 6:47 pm     Post subject: Reply with quote

hi drieg,

the N620c looks like a new bios variation. There are three parts in this bios file.

1. only FF bytes
2. an uncompressed bios-part, I don't know why or for what...
3. the compressed bios-part

I have found a very simple solution for you.

- open the rom.bin with a hexeditor
- search for the header 00100100 (compdecw.exe)
- delete all bytes before the header (exclude the header itself)
- save the bios file under a new name

Volai! The decompress routine will work very fine.

You can find your ID's as is usual in 00020100.dec.

00007290 75 10 04 00 86 80 43 10 86 80 22 25 86 80 43 10 86 80 27 25 00 00 00 00 u.....C..."%..C...'%....

Good luck
Cheers Semi
_________________
Awesome Dirty Do Checksum Checker V2
Back to top
View user's profile Send private message Visit poster's website
aviko
New visitors - please read the rules.


Joined: 23 Mar 2009
Posts: 3

PostPosted: Mon Mar 23, 2009 11:11 pm     Post subject: Reply with quote

Yesterday I found link to this thread on HP support site :) I readed few times and trying to underestand. Unfortunatelly Im more familar with hardware instead of software so I prepared stuff for experiments... Patient is nc4010.

I soldered plcc socket and make spare copy of original bios just in case (via hotswap). Whitelist pulled from extracted latest bios 68BAS:

Code:
Offset      0  1  2  3  4  5  6  7   8  9  A  B  C  D  E  F

000073D0   00 F0 66 61 07 C3 E8 58  A6 C3 E8 A8 A6 C3 E8 55    đfa ĂčXĂčĂčU
000073E0   A7 C3 E8 6F A7 C3 E8 8B  A7 C3 8C 16 13 00 11 0E   ĂčoĂčĂŚ     
000073F0   E5 00 8C 16 13 00 11 0E  E6 00 86 80 43 10 86 80   ĺ Ś     ć C
00007400   22 25 86 80 43 10 86 80  27 25 E4 14 20 43 3C 10   "%C '%  C<
00007410   F4 12 86 80 20 42 3C 10  F5 12 86 80 20 42 3C 10    B< ő B<
00007420   F6 12 E4 14 19 43 3C 10  58 13 50 53 51 52 56 1E      C< X PSQRV
00007430   B0 24 68 C0 EB 9A 76 99  00 F0 8A C8 80 E1 0F 74   $hŔv đČ t
00007440   3C B8 01 00 D3 E0 B9 20  0C 85 C8 74 30 8B D0 F7   <  ŕą  Čt0Đ
00007450   D0 23 C8 8B D9 BE 00 F0  8E DE BE A0 F8 B9 90 00   Đ#ČŮľ đŢľřą
00007460   C1 E9 04 51 B9 04 00 83  C6 03 85 14 74 06 21 04    Qą  Ć t !
00007470   75 02 89 1C 83 C6 03 E2  F1 46 59 E2 E6 1F 5E 5A   u Ć ńFYć ^Z
00007480   59 5B 58 C3 00 00 00 00  00 00 00 00 00 00 00 00   Y[XĂ           



It seems thats only 6 cards here:
EDIT: found 2 more cards

Code:
8C161300110EE500   PCI\VEN_168C&DEV_0013&SUBSYS_00E50E11 ; Atheros (HP WLAN 802.11a/b/g W500)
8C161300110EE600   PCI\VEN_168C&DEV_0013&SUBSYS_00E60E11 ; Atheros (HP WLAN 802.11b/g W400)
8680431086802225   PCI\VEN_8086&DEV_1043&SUBSYS_25228086 ; HP Intel 2100 mPCI 3B - RoW
8680431086802725   PCI\VEN_8086&DEV_1043&SUBSYS_25278086 ; HP Intel 2100 mPCI 3B - MoW
E41420433C10F412   PCI\VEN_14E4&DEV_4320&SUBSYS_12F4103C ; Broadcom 802.11b/g Adapter BCM43XGT
868020423C10F512   PCI\VEN_8086&DEV_4220&SUBSYS_12F5103C ; HPQ 2200 mPCI 3B - MoW Subven 103c   
868020423C10F612   PCI\VEN_8086&DEV_4220&SUBSYS_12F6103C ; HPQ 2200 mPCI 3B - RoW Subven 103c
E41419433C105813   PCI\VEN_14E4&DEV_4319&SUBSYS_1358103C ; Broadcom 802.11a/b/g WLAN BCM43XM1


I have many cards here so i start with something easy:

Intel 2100 toshiba - PCI\VEN_8086&DEV_1043&SUBSYS_25818086

difference is 1 byte subsys so i hope it will work

compressed part with whitelist from original bios:

Code:
Offset      0  1  2  3  4  5  6  7   8  9  A  B  C  D  E  F

00006060   0F 74 31 28 32 BE 2E 33  66 81 C7 00 08 F0 BC 8F    t1(2ľ.3f  đĽŹ
00006070   FD 3D FC 36 E8 58 A6 C3  E8 A8 BE 60 3C 55 A7 C3   =6čXĂčľ`<UĂ
00006080   E8 6F E0 3C 8B FF A7 C3  8C 16 13 00 11 0E FB E5   čoŕ<˙ĂŚ     űĺ
00006090   00 83 3D E6 00 86 80 43  DF 10 86 80 22 25 83 3E    =ć C "%>
000060A0   27 25 FF E4 14 20 43 3C  10 F4 12 7F 86 80 20 42   '%˙  C<  B
000060B0   3C 10 F5 F4 3F DF F6 12  E4 14 19 B0 3F 58 13 EE   < ő?   ?X
000060C0   62 A0 1E B0 24 66 12 C8  80 E1 F7 0F 74 3C 70 10   b $f Č t<p
000060D0   D3 E0 B9 20 FF 0C 85 C8  74 30 8B D0 F7 BF D0 23   ŕą ˙ Čt0ĐżĐ#
000060E0   C8 8B D9 BE 50 DC DE FF  BE A0 F8 B9 90 00 C1 E9   ČŮľPŢ˙ľřą


As I underestand we need 12 bytes to modify: E600868043DF108680222583 looks similar to nc6000 that you put in tutorial. I decided not to destroy another card in whitelist so i found "figurati" - 66 69 67 75 72 61 74 69 (from "Con˙figurati˙on Utili˙ty") somewhere in bios.

I got something like this:

obrazki.elektroda. net/85_1237848088.png

(sorry for breaking links but i didnt know that im writing this post but without them all makes no sence. i will fix it when i wrote that 10 posts i promise)

What you think? Should work right?

As I mentioned I have original bios chip untouched just in case and now notebook is working on new one programmed by hotswapping chips in last step of HPQFlash in windows. Unfortunately chip is under top cover so I put nc4010 into dopcking station and top cover is removed. Keyboard and mouse (regular PS2) is connected via docking station:

obrazki.elektroda. net/41_1237849042.jpg

Now Im going to try this. If it will not work I just put original bios and try again. If it will work ill try with something more difficult. What you think? Can I use some string from messages to correct checksum?

Thank you for this program and tutorial. All looks much clearer when I uncompressed bios and found whole whitelist which wasnt possible for me from original one. If i underestand what im doing it doesnt scares me, even if looks as difficult.

edit:

I just realized I didnt think 4bit - string to change should be 00 86 80 43 DF 10 86 80 22 25 83 3E

RESPECT!
Back to top
View user's profile Send private message
mb_1986
New visitors - please read the rules.


Joined: 26 Mar 2009
Posts: 1

PostPosted: Thu Mar 26, 2009 12:30 pm     Post subject: Reply with quote

I have a problem...

Notebook: HP nx6125 with 68DTT bios

I downloaded bios update - version F.13 from ftp:// ftp. hp. com/pub/softpaq/sp41001-41500/sp41452.exe

I found: E4(7F)1419433C105813(8300D5) - this is original broadcom card,
but I do not see any other cards (???)...

I changed it to: 14(7F)180103581433E9(8300D5) - GN-WI01GS - Gigabyte card...

I fixed the checksum: 3D524F4D204261(FF) -> 7736478A204261FF...

And now bios give me an error: 104-bla bla bla for both cards...

I don't know what is wrong...

Please help... THX

Solved Smile))
Now works Smile))
Problem was bios F.11, on F.13 it works Smile
Thank you very much for this topic Smile))
Back to top
View user's profile Send private message
semi
BIOS Newbie


Joined: 27 Oct 2008
Posts: 23

PostPosted: Thu Mar 26, 2009 9:17 pm     Post subject: Reply with quote

@mb_1986,

my congratulations!

@aviko,

I dont know what exactly your problem or your question is!?

Sure you can basically fix your checksum with an arbitrary Byte-String.
But its not so clever, if you take a Byte-String that appears
more than once in the uncompressed bios file. And its not so
clever too, if you take a Byte-String that is not in the same
uncompressed bios file.

It is also only clever, if you find a "lonly" Byte-String in the
00020100.dec.

But you can do it as you want, than you can check it exactly!

If you change an arbitrary value, a String, in the compressed file.
ONLY this part in the uncompressed file, is allowed to be changed!
If there is more changed, it doesn work, or you stackpointer runs
to nirvana... and your engine will crash or dont boot!

My advice to you: To fix your checksum, use the another ID's that
you dont need. Its very safe and its very unusual that you need all
the six or eight wireless cards atonce! Normaly, only one...

Cheers Semi
_________________
Awesome Dirty Do Checksum Checker V2
Back to top
View user's profile Send private message Visit poster's website
aviko
New visitors - please read the rules.


Joined: 23 Mar 2009
Posts: 3

PostPosted: Thu Mar 26, 2009 11:48 pm     Post subject: Reply with quote

well, finally i decided to edit only these parts as in tutorial and it works fine
Back to top
View user's profile Send private message
Fisch
New visitors - please read the rules.


Joined: 03 Apr 2009
Posts: 2

PostPosted: Fri Apr 03, 2009 5:59 pm     Post subject: Reply with quote

hi, i want to patch my hp nc4200 for a atheros card

but, i cant find the complete intel card in the bios file and also cant decompress it

its the latest bios F.0F >> tiny.cc/akNg8

Code:
PCI\VEN_8086&DEV_4220&SUBSYS_12F6103C           &REV_05\4&AD1B67F&0&20F0     intel

_____________

PCI\VEN_168C&DEV_0013&SUBSYS_E9111458           &REV_01\4&AD1B67F&0&20F0    atheros



thanks for helping / danke fr eure Hilfe

this is the third day in stand by Rolling Eyes
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Wim''s BIOS Forum Index -> Notebook BIOS and other problems All times are GMT
Goto page Previous  1, 2, 3, 4, 5, 6 ... 9, 10, 11  Next
Page 5 of 11

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group
phpBB SEO