General method to remove whitelist from Insyde BIOS

[kbhaze]

Hello all!! I would like to preface this post by saying that I am by no means a bios guru. I am a novice programmer, and I find assembly language extremely frustrating to work with. My post is simply to try and make some peoples attempts a little easier. I have stood on the backs of geniuses to make this solution possible, and it would be an extremely rude to not offer massive gratitude to andy, hspumanti, ttav134, camiloml, and yen for all of their hard work and knowledge. This method is for removing the whitelist from the 2 MB Insyde bios. This update to the guide is completely without warranty and has only been tested on the dv7-4267cl F.27 bios. ***This method will make any approved wireless module cause a failed boot***
The tools used were:

Andy's Tool v1.9
HxD Hex editor

Process:
**Remove your wireless card before proceeding to step 2**
1. Obtain the most recent bios from HP's website and extract the spXXXXX.exe
2. Use InsydeFlash to flash to desired bios version (un-modded)
3. Decrypt the original .bin file in the extracted directory using Andy's Tool
4. In Andy's Tool, click OK for the first two dialogs.
5. Before clicking the go button, select dynamic for the method and select do not
alter any ACPI tables, no SLIC, and allow user to modify other modules under
advanced settings.
6. Click GO. **Do not click OK on the third dialog until the mod is complete.**
7. Locate the ROM file containing the wireless module error using HxD. The ROM
files are located in the dump folder in the extracted directory.
7a. This can be a very time consuming process as you have to search each
ROM. The string is different than the original guide, and I searched for
the hex string <<6D 00 6F 00 64 00 75 00 6C 00 65 00>> until I found
the exact error message in the text pane of HxD.
7b. The exact ROM file for me was
91472655-50E0-4D81-9AF6-239E6F431B8C_2_614.ROM.
8. The code for the 2 MB bios is somewhat obfuscated, and no longer uses a
JNZ jump, but rather uses a JS jump. This calls a signed integer from the
ZF register to determine the result of the test as opposed to calling a test
result directly. The JS Hex value is <<0F 88>>, and the exact instance we
are looking for is the first instance in the module.
9. Replace the 88 with 89 (this changes the jump condition to switch the true and
false paths).
10. Click the save icon in HxD and close the program.
11. Click OK in the third dialog in Andy's tool.
12. Delete the original .bin file and remove the _SLIC from the new .bin file name.
13. Use a patched version of iscflash.dll and the corresponding InsydeFlash.exe
version to flash to the newly created .bin file.
14. Install your unapproved wireless card and enjoy .

This works very well for me as I do not intend to install any HP approved WiFi card ever again. If my new card ever dies, I will spend extra to not ever use an approved card as opposed to switching back to any HP approved part. If this is not the case for you, do not use this process.

~Cheers
kbhaze