[Request] HP Omen 16 BIOS mod

Hello everyone,

I need guidance about editing UEFI variables and possible BootGuard/HP protections on my HP Omen laptop. Specs and current state below:

Model: HP Omen 16-wf1070nw (B82PLEA)

CPU: Intel 14th Gen (HX 700 series)

GPU: NVIDIA RTX 4070 Laptop

BIOS vendor: Insyde (InsydeH2O)

BIOS version: F.18 (08C77)

Intel ME: 16.1.38.2676

Embedded Controller: 09.39

What I want to achieve

1. Disable Undervolt Protection (so I can undervolt with ThrottleStop/XTU)

2. Disable CFG Lock

3. Disable Overclocking Lock / enable Overclocking Feature

Ideally I want full CPU control (undervolt + OC).

What I will do:

I will dump the full SPI flash with a CH341A programmer and verify the backup.

I will open the BIOS image with UEFITool and IFRExtractor to locate the relevant setup variables (VarStore / VarOffset). I plan to edit only the variable bytes (e.g. flip 0x01 ↔ 0x00) in the VarStore/NVRAM region in the dump.

Note: attempts to change these variables from the EFI shell / tools on the running system return write-protected, so I’m using a programmer to edit the dump.

I will run MEAnalyzer on the full dump to check ME and BootGuard status.

My key questions:

1. If I only hex-edit the BIOS dump to flip the Undervolt Protection byte in the VarStore/NVRAM (e.g. 0x01 → 0x00), will BootGuard or HP_BBUpdate reject the image on boot? Or is editing a VarStore byte effectively the same as toggling that option inside the BIOS setup?

2. Are there known cases on recent HP Omen (Insyde, 13th/14th gen) where even simple VarStore edits were detected and rejected (by BBUpdate / SureStart / other checks)?

3. Which variables are strictly necessary to unlock for full CPU tuning (undervolt + OC)? From IFR and other threads I currently target:

CFG Lock

Overclocking Lock

Undervolt Protection

Overclocking Feature

BIOS Lock (PCH / RTC related locks)

Am I missing anything important?

Try H2OEZE to unlock more settings

It doesn’t work - write protected. After correct modification of 2 bits on dump from spi programmer, laptop every time claims - bios corrupted, reflashing.. I’m wondering how it’s flashing the correct BIOS version again — I don’t think there’s a second chip with a 16 MB BIOS stored on it.