Some people may found that some insyde BIOS will be invaild and unable to boot after modifying, that’s because there are 20 Bytes checksum within BIOS padding area like this: [[File:QQ??20200331185109.jpg|none|fullsize]] Fortunately, I found a method to bypass the sanity check function by reversing engineering the Insyde H2O UEFI firmware PEI module. I want to know wether there is anybody who is interested in this? If so, I will continue to write the tutorial. (forgive my poor English:)
Yes, I have a hp envy x360 15-cn-0000 notebook, which uses a insyde h20 bios, after I flashed a modified bios by using a ch341 programmer, it could not boot, could you please write the guide in detail, and the tools you used, thanks!
Definetly interested, in combination of insyde-tools/H20UVE, this could remove the restriction and could make a simpler modification tool more available.
I have trouble reproducing STEP 2 PART 4 : BIOS verification identifier, your BIOS shows that it has $SH2 identifier, my BIOS dump shows up no results for the padding. Question : In what package/location did you find the padding/verification string? I could try finding them with H20UVE/IDA.
Maybe a list of "known" strings could be made, for quicker/faster identification.
yes, this is the bios files I got by using ftpw.exe tool, the bios region，description region，and ME region，add up 16MB. Anyway, thanks for your help! @gao2001
The identifiers of the verification codes are various, and the identifiers of different brands and different periods are different. Some BIOSes do not even use identifiers, and instead use absolute addresses or offsets to locate check codes. Finding the location of this verification code is actually very simple. You can judge which one is the area for verification by comparing the BIOS of the same model and different versions. Under normal circumstances, the check code will be in the padding area, and will not exist in any DXE or PEI module. When you have determined which part is the verification code, you can use UEFITool to find the absolute address or offset, and then search in the BIOS which module the address exists in.
Its an HP Omen 17-w101na, may you find it and tell where/how you found the identifier. Thanks 4 tha effort!
Hewlett-Packard’s BIOS verification procedure is extremely complex. The algorithm and verification method are changed almost every year. So to modify HP’s BIOS will be a little harder. I have found the area where the verification code is located, but the verification procedure is still to be cracked. In 2019, HP uses an absolute address to locate the verification code, which means there is no identifier to refer to. I am trying to solve this problem, it may take a few more days.
thanks for your great effort can you help me modify my notebook:hp 15q-aj006TX I want to remove the whitelist, I modify the bios with the tutorial on internet, when i flash the modified bios back with programmer, the notebook can not boot it can be a RSA or checksum error cause this problem, can you help me I have follow with your tutorial, but i can not find the code I have upload the original bios, can you help me modify it, thanks
