[Request] UEFI Mod for HP dv6-2070et

[Hattor]

Hello,
I would like to be able to unlock the UEFI mod. I did unlock UEFI setting but i cant install Win8 in UEFI mod. i cant boot in UEFI mod,, what should i do for it?

Could you please help me?

on HP support page there is an info about UEFI like this ;

UEFI technology enables a number of improvements in PC security and performance and is implemented in all PCs pre-installed with Windows 8. Some PCs pre-installed with Windows 7 contain UEFI technology and can be modified to deliver these features. However the process requires specialist skills to complete and at this time, HP is not providing instructions to perform this modification.

HP Pavilion dv6-2070et

Motherboard
Model 363C
Manufacturer Hewlett-Packard
BIOS Name Default System BIOS - InsydeH20 Utility ver.3.5
BIOS Vendor Hewlett-Packard
SMBIOS Version F.1D A
BIOS Date 22-Oct-2010

http://h10025.www1.hp.com/ewfrf/wc/softw...73&sw_lang=

[gabiz_ro]

On HP just reveal settings in Setup Utility isn't working.
One reason for EFI boot missing is a check in BDS module.
Look on yours in IDA
sub_18000319C >

Code:

loc_180003292: ;

mov rax, [rsp+0D8h+var_68] ; rsp+70 is empty 00000000
xor esi, esi
test rax, rax
jz loc_180003509 ; so will jump over this part who check available EFI boot

Later on

Code:

loc_1800032EF

cmp byte ptr [rbp+7Eh], 0 ; check if EFI enabled
; but never reach that point
; see loc_180003292
jnz loc_1800034E4

you may see there is a check if offset 7Eh is 0 (rbp is indeed pointing to Setup variable)
0-EFI enabled
1-EFI disabled
But because of rsp+70 being empty at loc_180003292 jz loc_180003509 jump over entire part.

rsp+70 I think is number of devices to check for BOOTX64.EFI and or bootmgfw.efi

Maybe someone with better knowledge can find where and what to patch to enable EFI boot.


For the moment all you can do is jump unconditional instead jump if zero at location 320F
So replace at location 320F of BDS module 74 with EB

On F9 boot menu will be listed EFI bootable devices,but except EFI shell no other works.(Linux or Windows hang with black screen)
EFI System Table is not good I think since Firmware vendor offset point somewhere instead to Insyde string like on correct EFI boot.
That's the one visible,for other elements of system table who knows if are OK or wrong.
And maybe need to replace some driver modules,since some of them are not loaded,maybe because of dependency. FAT, partition, diskio in case originals are not loaded.
Also need to insert efi shell since is not present in BIOS,just in case you need internal efi shell.

[Hattor]

Hello,,
Thank you for your reply,,, I started this with removing Whitelist thing one week ago,, and then i wanted to dual boot OS X and Win8,,, when i was trying to do this, i found a tutorial about booting UEFI is more faster and easy... When i search the internet i found donovan6000's blog.. and i did unlock my bios,, UEFI and Boot Options,, and i unlocked my bios by donovan6000's tutorial: http://donovan6000.blogspot.com.tr/2013/...tings.html
But i am not that expert to modify Bios with IDA,, anyway i saw a thread at here ( http://www.bios-mods.com/forum/Thread-ac...r-unlocked ) and akbar102 says he added some missing modules to bios for UEFI from another bios file,,, but he didnt explain how to do it... so i am wondering if there is a way to add this missing modules from a newer HP bios to my bios?
BTW when i am using donovan6000's tutorial i saw something about Boot Manager,,, but i cant reach at there from my bios,,, only way to reach at there, is booting with clover and exit clover then my computer shows me Boot Manager,, at there i can boot from a file but again i cant see UEFI mods,,, but i can boot from a file...

Edit: When i am looking modules in my bios, I saw something FCDCB9C2-7987-47DF-A9A7-BE3DBA52D50C_743.Rom says Boot Option Policy,,,, when i open it in Hex editor,, there is a text says " Internal EFI Shell " ,,, its something for UEFI ?? something that i can activate?

[gabiz_ro]

Boot option policy seems common with other Insyde BIOS,I don't think EFI boot is missing because of that.
Strange that exiting Clover lead you to Boot Manager,same is doing for me when exiting Efi shell.
For Acer related modules,on their BIOS some modules was missing,don't remember but something like DiskIo,FAT and EmuVariable could be talking about.if my memory is right.

They exist on HP but maybe are not loaded,because some dependency.
Post a link to your actual BIOS,not HP original one and I take a look

[Hattor]

uploaded my bios,,, the clean one,, no whitelist no edit,,, extracted from HP's .exe file

[gabiz_ro]

Be sure you are prepared for recovery,just in case
http://www.4shared.com/rar/uHxpK4-_ce/Hattor.html
Info in readme.txt
Also note that this for me is not a final working solution,except EFI shell all,windows.linux hang in efi mode.
For your case who know,depending on BIOS

[Hattor]

Thank you gabiz_ro,,,well, i dont know how to recovery but if it can be done, i will learn anyway i am not looking for a shell... i just want to boot in UEFI mod,,, actually i just want to install Win8 in UEFI mod,,, GPT and Efi partition,, so i can dual boot OS X easily and faster,, it takes 7-8 min. to boot up with EFI partition and its annoying so if it hangs in EFI mode,, this isnt what i am looking for :S


Edit: i did remove those modules but still not enough space,,, uefi tool says root volume cant be grown

[BDMaster]

Hello,,
Thank you for your reply,,, I started this with removing Whitelist thing one week ago,, and then i wanted to dual boot OS X and Win8,,, when i was trying to do this, i found a tutorial about booting UEFI is more faster and easy... When i search the internet i found donovan6000's blog.. and i did unlock my bios,, UEFI and Boot Options,, and i unlocked my bios by donovan6000's tutorial: http://donovan6000.blogspot.com.tr/2013/...tings.html
But i am not that expert to modify Bios with IDA,, anyway i saw a thread at here ( http://www.bios-mods.com/forum/Thread-ac...r-unlocked ) and akbar102 says he added some missing modules to bios for UEFI from another bios file,,, but he didnt explain how to do it... so i am wondering if there is a way to add this missing modules from a newer HP bios to my bios?
BTW when i am using donovan6000's tutorial i saw something about Boot Manager,,, but i cant reach at there from my bios,,, only way to reach at there, is booting with clover and exit clover then my computer shows me Boot Manager,, at there i can boot from a file but again i cant see UEFI mods,,, but i can boot from a file...

Edit: When i am looking modules in my bios, I saw something FCDCB9C2-7987-47DF-A9A7-BE3DBA52D50C_743.Rom says Boot Option Policy,,,, when i open it in Hex editor,, there is a text says " Internal EFI Shell " ,,, its something for UEFI ?? something that i can activate?

Hi freind,
these are the modules to add and they have to be got from a Bios similar as your (have to get same Structure) :

To Add

EmuVariable
DiskIo
Partition
Fat

Dnovan has done many tests without luck, me too !
I can chocie UEFI and can Format in GPT, but cannot Boot from that Partition !
Ask to Donovan and He can explain better (I have done a lot of time ago).
Regards

[gabiz_ro]

In one of my previous message,where I say to replace conditional jump with simple jump,after replacing all discovered EFI boot option are listed under F9 menu.
Problem is that EFI shell start and work,others like windows or linux bootmanager hangs in short time.
Compared a F2 trick shell boot and a F9 shell boot,same drivers loaded.
All visible difference was at ver command
On F2 boot vendor was Insyde
On F9 boot vendor was few gray lines
Looking into system table I see offset for vendor is same but in one case at specified address was indeed string Insyde but in other case at same addres was some other data that I found it inside some padding module from BIOS image.

I also try to use UEFI SCT ( self certification test) I did try few random test, all I remember was some problem regarding video and some handle,but this could be or not be the real problem.
Also if I remember right I can't run SCT under F2 efi boot mode.Complaint that can't be run under this mode and say something about software level tpl or like that.

To run all test is time consuming,sometimes hang and need to reboot,sometimes reset itself and need presence to boot again in EFI shell and continue test.

Also that subfunction where replaced jump confition,even have reference from other subfunctions in normal startup is called only once but in F9 startup is called 102 times.
But execution path are defined by value of one byte that subfunction itself change value so entire subfunction will be only once executed,for next calls just load bootorder and exit.
Somewhere from 2 to 102 calls to this subfunctions all conditions are OK and as result Bootx64.efi,internal efi shell,bootmgfv.efi are searched and if found added to boot option.
Trying to trace why this is not happening on normal startup I find that if rsp+70 is empty then will jump over checking for EFI bootable sources.
I find address of rsp but can't find a way to write something or is get erased what I write during execution.

[Hattor]

Hello,,
Thank you for your reply,,, I started this with removing Whitelist thing one week ago,, and then i wanted to dual boot OS X and Win8,,, when i was trying to do this, i found a tutorial about booting UEFI is more faster and easy... When i search the internet i found donovan6000's blog.. and i did unlock my bios,, UEFI and Boot Options,, and i unlocked my bios by donovan6000's tutorial: http://donovan6000.blogspot.com.tr/2013/...tings.html
But i am not that expert to modify Bios with IDA,, anyway i saw a thread at here ( http://www.bios-mods.com/forum/Thread-ac...r-unlocked ) and akbar102 says he added some missing modules to bios for UEFI from another bios file,,, but he didnt explain how to do it... so i am wondering if there is a way to add this missing modules from a newer HP bios to my bios?
BTW when i am using donovan6000's tutorial i saw something about Boot Manager,,, but i cant reach at there from my bios,,, only way to reach at there, is booting with clover and exit clover then my computer shows me Boot Manager,, at there i can boot from a file but again i cant see UEFI mods,,, but i can boot from a file...

Edit: When i am looking modules in my bios, I saw something FCDCB9C2-7987-47DF-A9A7-BE3DBA52D50C_743.Rom says Boot Option Policy,,,, when i open it in Hex editor,, there is a text says " Internal EFI Shell " ,,, its something for UEFI ?? something that i can activate?

Hi freind,
these are the modules to add and they have to be got from a Bios similar as your (have to get same Structure) :

To Add

EmuVariable
DiskIo
Partition
Fat

Dnovan has done many tests without luck, me too !
I can chocie UEFI and can Format in GPT, but cannot Boot from that Partition !
Ask to Donovan and He can explain better (I have done a lot of time ago).
Regards

i think my bios already has those modules,,, you mean i need those modules from a new HP bios? like what akbar102 did?

In one of my previous message,where I say to replace conditional jump with simple jump,after replacing all discovered EFI boot option are listed under F9 menu.
Problem is that EFI shell start and work,others like windows or linux bootmanager hangs in short time.
Compared a F2 trick shell boot and a F9 shell boot,same drivers loaded.
All visible difference was at ver command
On F2 boot vendor was Insyde
On F9 boot vendor was few gray lines
Looking into system table I see offset for vendor is same but in one case at specified address was indeed string Insyde but in other case at same addres was some other data that I found it inside some padding module from BIOS image.

I also try to use UEFI SCT ( self certification test) I did try few random test, all I remember was some problem regarding video and some handle,but this could be or not be the real problem.
Also if I remember right I can't run SCT under F2 efi boot mode.Complaint that can't be run under this mode and say something about software level tpl or like that.

To run all test is time consuming,sometimes hang and need to reboot,sometimes reset itself and need presence to boot again in EFI shell and continue test.

Also that subfunction where replaced jump confition,even have reference from other subfunctions in normal startup is called only once but in F9 startup is called 102 times.
But execution path are defined by value of one byte that subfunction itself change value so entire subfunction will be only once executed,for next calls just load bootorder and exit.
Somewhere from 2 to 102 calls to this subfunctions all conditions are OK and as result Bootx64.efi,internal efi shell,bootmgfv.efi are searched and if found added to boot option.
Trying to trace why this is not happening on normal startup I find that if rsp+70 is empty then will jump over checking for EFI bootable sources.
I find address of rsp but can't find a way to write something or is get erased what I write during execution.

i think we can compare a newer bios and our bioses to find out the difference,, what make it to boot UEFI,, no?
As Hp says "However the process requires specialist skills to complete" and i am not that specialist but i think they must provide how to perform this...