[Requests]HP Pavilion g4-1000 Series For UEFI

[donovan6000]

I didn't even see that you got back to me before. I'll post something new for you to test later today! Thanks!

[gujiangjiang]

I didn't even see that you got back to me before. I'll post something new for you to test later today! Thanks!

Ok

thanks for your hard work

Didn't you see my replay a few weeks ago?



Sent from my iPhone using Tapatalk

[zft561068]

Hey gujiangjiang,

Can you test out this rom and let me know it if bricks. This is just to test out some RSA stuff, so there's nothing unlocked. Thanks

I am from chinese.
I tested this rom, It is goog,no bricks .
I having using WIN + B for recovery bios .
I think me to do test for other bios
I known a little English ，I hope you can Understand me say.


I want using EFI .
I have used ADV and POWER MENU ，System Configuration be have "EFI Boot",but NO EFI BOOT in "Boot Option ",I boot from usb EFI is fail.
I hope you goodluck!

My computer is hp g4 1049tu
core i3 2310M
HD3000 VGA
HM65 Chipset
6G DDR3 RAM （I append 4G RAM）
board ： HP 166D
using insydeflash ROM file : 0166CFxx.bin ( XX is 06 、07 、14.......and 66)
BIOS : insydeh20 rev 3.5
I flashed my bios is Greater than 200 （ the count = good + bricks)
I have flashed 0166CFxx.bin ( XX is 06 、07 、14、15 、23、24、32、33、34、41、52、62、63、64、65、66）
also I have flashed sp53128_UlkMenus_ByCamiloml 、sp53872_AHCI_ByCamiloml、sp55717_166xOnly_AdvMenu_ByCamiloml， The sp53128_UlkMenus_ByCamiloml
is good to flashed and adv enable ,but changed bios set a little is to be bricks. The sp53872_AHCI_ByCamiloml is also is HP . (I using 0166CF24.bin in sp53872_AHCI_ByCamiloml )
The sp55717_166xOnly_AdvMenu_ByCamiloml flashed is bricks ( It is only 01666F52.bin)
I also flahed 0166CF24.bin (path by me) ，the ADV 、POWER menu also haved ,but I from usb boot by EFI mode is no work.

---

Hey gujiangjiang,

Can you test out this rom and let me know it if bricks. This is just to test out some RSA stuff, so there's nothing unlocked. Thanks

Hello,donovan6K,

My friend had just test this BIOS ,But sadly bricked.

I test this ROM but no bricked.
and this is good news
The F32 changed a little going to flashing is bricked before.
Now donovan6000 changed F32 and flashing is no bricked.
as you see ,I don't say F24 ,and I say F32 ,I flashing this BIOS ，see BIOS Version is F32 ,and I see donovan6000 using F32 's FE3542FE-C1D3-4EF8-657C-8048606FF670_714.ROM in this BIOS
I know a little English , I hope you can understand do not laugh at me
I hope you goodluck!

modify：
Very strange, but saw dozens of minutes in the bios, did not change any options. Because some of the things to be busy, and then press the power button to shut down. Several minutes later, when the re-opening of computers, computer black screen, capslock flash lamp 2, bios indicate failure. Had to win + b were restored. --translate by http://translate.google.cn/

（Chinese：很奇怪，只是在bios里看了几十分钟，没有更改任何选项。因为要忙一些事，然后直接按电源键关机了。几十分钟后，重开电脑时，电脑黑屏了，capslock灯2闪，示意bios故障。只好win+b进行了恢复。）

[zft561068]

Hey gujiangjiang,

Can you test out this rom and let me know it if bricks. This is just to test out some RSA stuff, so there's nothing unlocked. Thanks

I am from chinese.
I tested this rom, It is goog,no bricks .
I having using WIN + B for recovery bios .
I think me to do test for other bios
I known a little English ，I hope you can Understand me say.


I want using EFI .
I have used ADV and POWER MENU ，System Configuration be have "EFI Boot",but NO EFI BOOT in "Boot Option ",I boot from usb EFI is fail.
I hope you goodluck!

My computer is hp g4 1049tu
core i3 2310M
HD3000 VGA
HM65 Chipset
6G DDR3 RAM （I append 4G RAM）
board ： HP 166D
using insydeflash ROM file : 0166CFxx.bin ( XX is 06 、07 、14.......and 66)
BIOS : insydeh20 rev 3.5
I flashed my bios is Greater than 200 （ the count = good + bricks)
I have flashed 0166CFxx.bin ( XX is 06 、07 、14、15 、23、24、32、33、34、41、52、62、63、64、65、66）
also I have flashed sp53128_UlkMenus_ByCamiloml 、sp53872_AHCI_ByCamiloml、sp55717_166xOnly_AdvMenu_ByCamiloml， The sp53128_UlkMenus_ByCamiloml
is good to flashed and adv enable ,but changed bios set a little is to be bricks. The sp53872_AHCI_ByCamiloml is also is HP . (I using 0166CF24.bin in sp53872_AHCI_ByCamiloml )
The sp55717_166xOnly_AdvMenu_ByCamiloml flashed is bricks ( It is only 01666F52.bin)
I also flahed 0166CF24.bin (path by me) ，the ADV 、POWER menu also haved ,but I from usb boot by EFI mode is no work.

---

Hey gujiangjiang,

Can you test out this rom and let me know it if bricks. This is just to test out some RSA stuff, so there's nothing unlocked. Thanks

Hello,donovan6K,

My friend had just test this BIOS ,But sadly bricked.

I test this ROM but no bricked.
and this is good news
The F32 changed a little going to flashing is bricked before.
Now donovan6000 changed F32 and flashing is no bricked.
as you see ,I don't say F24 ,and I say F32 ,I flashing this BIOS ，see BIOS Version is F32 ,and I see donovan6000 using F32 's FE3542FE-C1D3-4EF8-657C-8048606FF670_714.ROM in this BIOS
I know a little English , I hope you can understand do not laugh at me
I hope you goodluck!

modify：
Very strange, but saw dozens of minutes in the bios, did not change any options. Because some of the things to be busy, and then press the power button to shut down. Several minutes later, when the re-opening of computers, computer black screen, capslock flash lamp 2, bios indicate failure. Had to win + b were restored. --translate by http://translate.google.cn/

（Chinese：很奇怪，只是在bios里看了几十分钟，没有更改任何选项。因为要忙一些事，然后直接按电源键关机了。几十分钟后，重开电脑时，电脑黑屏了，capslock灯2闪，示意bios故障。只好win+b进行了恢复。）

Latest news:
When using win + B recovery, based on previous experience:
bios already exists in computer the version > = F32, then recovery use the version > = F32 and use phoenixtool unlock 0166CFXX.bin to 0166CFXX.bin.dec 、RSA.SIG ,Then rename 0166CFXX.bin.dec to 0166C.bin and RSA.SIG to 0166C.SIG ,Then win+B recovery ,

bios already exists in computer the version < F32, then recovery use the version < F32 and use phoenixtool unlock 0166CFXX.bin to 0166CFXX.bin.dec 、RSA.SIG ,Then rename 0166CFXX.bin.dec to 0166C.bin and RSA.SIG to 0166C.SIG ,Then win+B recovery ,

But Flash bios file after this test, to win + B recovery, can not be restored with the F32, F24 is used to recover. Although this test the first time into bios bios shows the F32 version.
Also: Brick conditions of this test bios as same as sp53128_UlkMenus_ByCamiloml

最新消息：
在用win+B恢复时，根据以前的经验，bios已经存在的是>=F32版的，则要用>=F32版的bin文件利用phoenixtool解开的bin.dec和sig文件进行win+B 恢复，而bios已经存在的是<F32版本的，则要用<F32版本的bin文件利用phoenixtool解开的bin.dec和sig文件进行win+B 恢复，而Flash了 这个测试bios文件后，要win+B恢复，用F32的不能恢复，用F24的才能恢复。虽然这个测试bios第一次进入bios时显示的是F32版。
另外：这个测试bios的砖状况和sp53128_UlkMenus_ByCamiloml差不多

Latest news:
The F24 version In BIOS my computer, went into the flash second the test BIOS, still no brick after the system boots, enter the BIOS displays still brush into the F32 version. Find some strange things, when the insydeflash into the BIOS file downloaded from hp, the computer will automatically restart, the screen briefly flashes 0.5 seconds, and will continue to power down automatically restart a second time, then the BIOS will display "Press ESC ... ... "prompt, but theinsydeflash into the test BIOS, the system will only automatically restart once and display the " Press ESC ...... "prompt, wait a minute, I will manually shut down, and then manually boot, simulation the second restart, to see whether it will brick?

Chinese：
最新消息：
在BIOS是F24的情况下，又继续刷入了一次该test BIOS，系统启动后仍然没有砖，进入BIOS显示仍然刷入的是F32版。发现一些奇怪的事，刷入从hp下载的BIOS文件时，电脑会自动重启，屏幕短暂闪亮0.5秒，然后会掉电继续自动重启第二次，然后会显示BIOS的"Press ESC......“提示，但是刷入该 test BIOS时，系统仅仅自动重启一次就会显示BIOS的"Press ESC......“提示 ，等一下我会手动关机，然后再手动开机，模拟第二次重启，看是否会砖？

The bad news, this time in the BIOS, choose the Exit no saving, the computer will automatically restart a brick, capslock flashing lights 2
Chinese：
不好的消息，这次在BIOS里选择了 Exit no saving ,电脑自动重启就 砖了 ，capslock灯2闪

This test BIOS is not good.
Thanks!

[zft561068]

Here you go. You'll find an EFI boot setting under the system configurations tabs. Eventhough this setting exists, I've never seen anyone successfuly get EFI working perfectly on one of these older HP laptops. Insyde and HP decided to remove a lot of EFI functionality. All we can do is unlock options, so if it doesn't work then there's nothing we can do about it

And try to come back to this forum during the next couple of days. I have one more thing I want you to test regarding RSA bios modding. Hopefully this test will be able to dtell us if the signature verification check is in the PEI or DXE region of the rom

Helllo donocan6000,i test the ROM,works fine,but have some mistake.
1.
Look those Square between the menu...

2.UEFI Boot might not work even turn on the EFI Boot.
I think,Can anyone add the EFI Modules to this BIOS to become EFI Boot.

Thanks.
Reagrds!

me flash this test BIOS ,no see the menu item as you send image. flash this test BIOS ,I BIOS have seven item ,using my modify test BIOS ,I BIOS have enght item.

[gujiangjiang]

What happend now?

Sent from my HP Pavilion g4 Notebook PC using Tapatalk

[zft561068]

What happend now?

Sent from my HP Pavilion g4 Notebook PC using Tapatalk

that is not working , flash the bios files and turn on computer only see going in bios set ones ,and late computer bios is bad , must be using win +b to recovery the bios.

I using clover efi replace CryptRSA.efi and modify the biso files XXXXXXXXXXXXXXXXXXXXXXXXXXXXX.rom , that XXXXXXXXXXXXXXXXXXXXXXXXXXXXX.rom file have the SHA1 , the file is 20 byte. that
SHA1 is CryptRSA.efi , and replace SHA1 ,that last the SHA1 is clover efi SHA1 .

using clover efi ,turn on the comuputer press F2 ,that clover is runing ,using clover ,me run the windows7 、windows81 、Ubuntu14.04 ，archlinxu 140705 and OSX 10.9.4
all OS system is working ,but have teh question : the windows7 and windows81 sleep is not work. the hd3000vga lost the subsys id , but the Ven DEV is have ，the hd3000vga driver is installed and work. not find more question .

I know little English ,sorry！ write is not good。

[gabiz_ro]

In F2 mode BIOS isn't fully initialized.
BDS execution flowchart follow other paths and missing subsys id I think is related to OemServicesDriver not being used in that mode.
Same thing encountered by me for ATI card.

Sleep isn't working becouse AcpiS3Save isn't build to do this since isn't supposed to sleep and wake from system diagnostics.

[zft561068]

In F2 mode BIOS isn't fully initialized.
BDS execution flowchart follow other paths and missing subsys id I think is related to OemServicesDriver not being used in that mode.
Same thing encountered by me for ATI card.

Sleep isn't working becouse AcpiS3Save isn't build to do this since isn't supposed to sleep and wake from system diagnostics.

Thinks !

---

Insyde and HP decided to remove a lot of EFI functionality.

Indeed,but.
CryptRSA.efi is running fine as efi.
Open in IDA and I see there is one export, named InitializeDriver
If this can be extracted modded to launch bootloaders instead SystemDiagnostics and have this inserted into BIOS.
There is in BDS code that check 7E offset in NV area.
Add some code (don't know in what module) to check that 7E and if EFI enabled then call or launch this.

As already probably see in one of my message,changing a conditional jump in BDS module I get listed (if EFI enabled in BIOS) Internal EFI shell as boot option,but error on booting.
Since that function check offset 7E I was thinking that is one of that who create boot options.
Can be decoded info from dmpstore Variable Boot000X to see what is linked to EFI shell?


Looking at dumps from ram I see that BDS module call a functions inside MonitorKey module and one in OemOdmDriver or something like that (not on laptop now,and may be wrong name from memory)

Don't remember where and now I can't find it again I read about a something that return code is something LegacyBios and then all go legacy and EFI disabled but don't remember what source code was.

Also what is that VideoMem.udm,I ignored until now but opened in IDA and I see that is not related to Videomem only ,found inside functions that looks like or related to boot options

@ gujiangjiang
Something similar I encountered when I was using another SetupUtility module (FE354 ....) from other BIOS.
Some blocks of squares in some area.
Could be strings missing or in other language or wrong address for string and can't display that characters

gujiangjiang what is set as language in BIOS,switch to english if is something else.
Also that strings doesn't look right,there are strings from help area assigned to parameters name look like.

You are a genius

I used Google to translate the above, but I do not really understand,

---

I get Internal efi shell in F9 menu,is loading now but drivers Ps2Mouse,DiskIo,Fat and Partition doesn't get loaded as result no device are accessible.
Replaced with other drivers,Partition and Fat are loaded but no DiskIo so still no device are accessible.

You're a professional!

I used Google to translate the above, but I do not really understand, can you explain a little more detail? How did you get F9 internal EFI SHELL?
Thank You!

[gujiangjiang]

In F2 mode BIOS isn't fully initialized.
BDS execution flowchart follow other paths and missing subsys id I think is related to OemServicesDriver not being used in that mode.
Same thing encountered by me for ATI card.

Sleep isn't working becouse AcpiS3Save isn't build to do this since isn't supposed to sleep and wake from system diagnostics.

Thinks !

---

Insyde and HP decided to remove a lot of EFI functionality.

Indeed,but.
CryptRSA.efi is running fine as efi.
Open in IDA and I see there is one export, named InitializeDriver
If this can be extracted modded to launch bootloaders instead SystemDiagnostics and have this inserted into BIOS.
There is in BDS code that check 7E offset in NV area.
Add some code (don't know in what module) to check that 7E and if EFI enabled then call or launch this.

As already probably see in one of my message,changing a conditional jump in BDS module I get listed (if EFI enabled in BIOS) Internal EFI shell as boot option,but error on booting.
Since that function check offset 7E I was thinking that is one of that who create boot options.
Can be decoded info from dmpstore Variable Boot000X to see what is linked to EFI shell?


Looking at dumps from ram I see that BDS module call a functions inside MonitorKey module and one in OemOdmDriver or something like that (not on laptop now,and may be wrong name from memory)

Don't remember where and now I can't find it again I read about a something that return code is something LegacyBios and then all go legacy and EFI disabled but don't remember what source code was.

Also what is that VideoMem.udm,I ignored until now but opened in IDA and I see that is not related to Videomem only ,found inside functions that looks like or related to boot options

@ gujiangjiang
Something similar I encountered when I was using another SetupUtility module (FE354 ....) from other BIOS.
Some blocks of squares in some area.
Could be strings missing or in other language or wrong address for string and can't display that characters

gujiangjiang what is set as language in BIOS,switch to english if is something else.
Also that strings doesn't look right,there are strings from help area assigned to parameters name look like.

You are a genius

I used Google to translate the above, but I do not really understand,

---

I get Internal efi shell in F9 menu,is loading now but drivers Ps2Mouse,DiskIo,Fat and Partition doesn't get loaded as result no device are accessible.
Replaced with other drivers,Partition and Fat are loaded but no DiskIo so still no device are accessible.

You're a professional!

I used Google to translate the above, but I do not really understand, can you explain a little more detail? How did you get F9 internal EFI SHELL?
Thank You!

OK.Can you add me QQ:870529317

You mean that you can boot from EFI but can't sleep?