solution 4 amd hp notebooks: MINI PCI EXPRESS UNLOCK F.3D

Don't ask how to hack password. (BIOS Passwords)
Post Reply
MaCXyLo
New visitors - please read the rules.
Posts: 4
Joined: Wed Nov 21, 2007 9:41 pm

so lets start:
i think i found a very interesting solution 4 amd notebooks for dv9000series.
MY BIOSVERSION: F.3B

I decrompresed the bios with phnxdeco.0.31.tar.gz.

I opened up BIOSCOD1.rom with winhex.

http://img219.imageshack.us/img219/3331/winnervh5.png <- very interesting. vendor, device and subsys ids for the mini pci express card in my notebook.

PCI\VEN_14E4&DEV_4312&SUBSYS_1361103C&REV_01\4&14C5F9B7&0&0018

The blocks are always backwards. I think i´m very close on a solution ;).

howto repack the bios to a wph file or something like that? please response....

okay i found a tool called catenate.exe.

but the tool have rebuildproblems:
ERROR: Unknown command 'User-Defined' (ROM.SCR:12).
ERROR: Unknown command 'User-Defined' (ROM.SCR:31).
ERROR: Unknown command 'User-Defined' (ROM.SCR:32).
ERROR: Unknown command 'User-Defined' (ROM.SCR:37).
#***************************************************************
# Prepared by: *-=PhoenixDeco, version 0.31 (Linux)=-*
# http://biosgfx.euro.ru, http://biosgfx.narod.ru
# Bug-reports direct to Anthony Borisow, r2m@mail.ru
#***************************************************************
BANKS -N:1 -S:1024
COMPRESS LZINT
BOOTBLOCK bb.rom -S:24
DECOMPCODE DECOMPC0.rom
USER USER1.rom -X
ACPI ACPI1.rom
User-Defined User-De0.rom -X
BIOSCODE BIOSCOD0.rom
ROMEXEC ROMEXEC0.rom
DISPLAY DISPLAY0.rom
SETUP SETUP0.rom
LOGO LOGO0.rom
LOGO LOGO2.rom
ROMEXEC ROMEXEC1.rom
STRINGS STRINGS0.rom
TEMPLATE TEMPLAT0.rom
UPDATE UPDATE0.rom
OPROM OPROM0.rom -X
OPROM OPROM1.rom -X
OPROM OPROM3.rom -X
LOGO LOGO1.rom
OPROM OPROM2.rom -X
OPROM OPROM4.rom -X
USER USER0.rom -X
MISER MISER0.rom
User-Defined User-De0.rom
User-Defined User-De0.rom -X
ACPI ACPI0.rom
LOGO LOGO3.rom
LOGO LOGO4.rom
LOGO LOGO5.rom
User-Defined User-De0.rom
BIOSCODE BIOSCOD1.rom
BIOSCODE BIOSCOD2.rom
BIOSCODE BIOSCOD3.rom
BIOSCODE BIOSCOD4.rom
BIOSCODE BIOSCOD5.rom
PLEASE RESPONSE!
Last edited by MaCXyLo on Sat Dec 22, 2007 1:06 am, edited 1 time in total.
MaCXyLo
New visitors - please read the rules.
Posts: 4
Joined: Wed Nov 21, 2007 9:41 pm

First download and install Phoenix BIOS Editor 2.2.01
http://rapidshare.com/files/77935488/SG ... 2.2.01.rar

Then start Phoenix Editor and open up the *.wph-Data.

All files will be extracted in this folder:
C:\Program Files\Phoenix Technologies Ltd\BIOS Editor\TEMP

Open up BIOSCOD1.ROM in a Hex-Editor and find this lines

Image

First Block: Vendor ID

Second Block: Device ID

Third and fourth block: Subsys ID


E414 1143 3C10 6313
E414 1143 3C10 6413
E414 1143 3C10 6513
E414 1243 3C10 6013
E414 1243 3C10 6113
E414 1243 3C10 6213
E414 1243 3C10 5F13
E414 2843 3C10 6613
E414 2843 3C10 6713
E414 2843 3C10 6813
E414 2843 3C10 6913
E414 1243 3C10 7013
E414 1143 3C10 7413
E414 1143 3C10 7513
E414 1143 3C10 7613
E414 1243 3C10 7113
E414 1243 3C10 7213


This card are officaly supported by Hewlett Packard. The Hex-Blocks are allways block backward. For Example:

BIOS: E414

Reality: 14E4


Now you must find out the Vendor, Device and Subsys-ID of your new card. A other notebook is recommedable to build it in and check the Device Manager inside Windows XP to find out the id´s. Change one string of the Id´s to enable your card.


I´m not sure but the green marked block can be!!! A possibilty to deactivate the whitelist complete but i can´t check this because my notebook is at repair. Change it to F8 when you are keen to experiment and able to fix a bios crash.


Change one Value in the Phoenix Editor and make it regrogressive. Now you are able to save the new BIOS. Press CTRL + U and save it to a new image.


Flash the new image with Winphlash (use google) or use the enclosed flasher when it works.


I´M NOT ACCOUNTABLE FOR DAMAGES ON YOUR NOTEBOOK OR FAILED BIOS FLASHES!!! BIOS HACKING IS ALLWAYS A COMPLEX WORK AND IS DANGOURES!!! WHEN YOU ARE NOT EXPERIENCED ENOUGH DO NOT MAKE ANY EDITS!!!
cp
BIOS Guru
Posts: 1914
Joined: Mon Oct 21, 2002 9:07 pm
Location: Germany

The Hex-Blocks are allways block backward. For Example:

BIOS: E414

Reality: 14E4
just for your information: they are not backwards, this is called little-endian. a quick search will tell what little-endian is :)
If you email me include [WIMSBIOS] in the subject.
Post Reply