This is no request thread! HP COMPAQ bioses, how to modify the bios?

Discussion in 'BIOS Mods' started by Yen, Aug 6, 2009.

  1. gregg

    gregg MDL Novice

    Aug 7, 2009
    29
    0
    0
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. Yen

    Yen Administrator
    Staff Member

    May 6, 2007
    10,574
    9,794
    340
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. sebus

    sebus MDL Guru

    Jul 23, 2008
    5,440
    1,594
    180
    These are the HEX values for v 3.x.x of the HPQFlash.exe
    v4.x.x do NOT have such values

    sebus
     
  4. Yen

    Yen Administrator
    Staff Member

    May 6, 2007
    10,574
    9,794
    340
    Unfortunately are these mod instruction almost unusable.....I have tried but there are more occurrences of the byte sequence when cut..mutante knows how to preform....anyway to patch the rompaq.exe would be more interesting.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. Yen

    Yen Administrator
    Staff Member

    May 6, 2007
    10,574
    9,794
    340
    #65 Yen, Aug 9, 2009
    Last edited by a moderator: Apr 20, 2017 at 1:44 PM
    This are the differences mutante did at 4.2.5.3. to patch:
    Code:
    Search for differences
    
    1. E:\temp6\HPQFlash_patched.exe: 1.193.264 bytes
    2. E:\temp6\HPQFlash.exe: 1.193.264 bytes
    Offsets: hexadec.
    
     E00EE:	B8	6A
     E00EF:	01	00
     E00F0:	00	6A
     E00F2:	00	51
     E00F3:	50	8B
     E00F4:	90	4C
     E00F5:	90	24
     E00F6:	90	18
     E00F7:	90	52
     E00F8:	90	50
     E00F9:	90	51
     E00FA:	90	FF
     E00FB:	90	54
     E00FC:	90	24
     E00FD:	90	3C
     E00FE:	90	50
    
    16 difference(s) found.
    
    Now have to figure how to perform at yours, sebus.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. mutante

    mutante MDL Novice

    Jul 20, 2009
    27
    0
    0
    I can try :)

    Whe you execute HPQFlash.exe it creates and load (using LoadLibrary) flashdll.dll I have dissaembled it to see tht it uses MS Crypto API I have seen something like this

    .text:10008042 mov ecx, [esp+44h+var_28]
    .text:10008046 mov edx, [esp+44h+var_8]
    .text:1000804A mov eax, [esp+44h+Memory]
    .text:1000804E push 0
    .text:10008050 push 0
    .text:10008052 push ecx
    .text:10008053 mov ecx, [esp+50h+var_38]
    .text:10008057 push edx
    .text:10008058 push eax
    .text:10008059 push ecx
    .text:1000805A call [esp+5Ch+var_20]
    .text:1000805E push eax
    .text:1000805F push offset aSignedbycompaq ; "SignedByCompaq: Verify signature in ROM"...
    .text:10008064 mov [esp+4Ch+var_2C], eax
    .text:10008068 call sub_10006120
    .text:1000806D add esp, 8

    The routine on 1000805A checks the signature, if it is OK eax will be 1, so I have changed the code to make always eax = 1

    I can go deep but I don't want to make people crazy if its not necessary :)


     
  7. Yen

    Yen Administrator
    Staff Member

    May 6, 2007
    10,574
    9,794
    340
    At this matter I'm a noob ;)

    Are you able to patch rompaq as well?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  8. mutante

    mutante MDL Novice

    Jul 20, 2009
    27
    0
    0
    I can try it but why you dont like this? which is the problem?

    I'm noob to BIOS :)

    I'm sure both can learn :)
     
  9. gregg

    gregg MDL Novice

    Aug 7, 2009
    29
    0
    0
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  10. Yen

    Yen Administrator
    Staff Member

    May 6, 2007
    10,574
    9,794
    340
    You are right, mutante, and welcome here at MDL. Your disassembly skills are fascinating to me.

    No, I like it........sebus sure can try...

    rompaq checks for checksums at biosfile, if they are wrong it refuses to flash!
    I want to know about the checksums and HPQ flash didn't update the SLIC, you can read before.

    I want to know if rompaq.exe would update the SLIC.....it still remained at marker 2.0...at 2 bioses before....

    Thank you for trying...;)
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  11. Remco Koot

    Remco Koot MDL Novice

    Oct 8, 2008
    4
    0
    0
    Hi,

    For info: I also tried the patched HPQFlash from mutante and modded flash for my 8510p , flashed normally. But after reboot no 2.1 slic.

    Thanks for the hard work & progress so far...

    RK
     
  12. jiriteach

    jiriteach MDL Novice

    Jul 30, 2009
    49
    0
    0
    Have been trying many differnet combinations.

    HPQFlash works but doesn't update to SLIC 2.1. This could be the BIOS I had?

    I am trying with Yen's BIOS now and the latest HPQFlash I got from mutante.

    Fingers crossed! :)
     
  13. gregg

    gregg MDL Novice

    Aug 7, 2009
    29
    0
    0
    I have same issue with 8710w. Bios seems to be updated but SLIC is version 2.0 after update.

    We hope mutante can patch rompaq and we'll try patch Bios from Dos.
    We stay tuned

    PS: Which dissasembler did you use to patch HPQFlash? IDA Pro?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  14. mutante

    mutante MDL Novice

    Jul 20, 2009
    27
    0
    0
    Yes it was IDA

    Hummm when you say no SLIC 2.1, what does it mean? that SLIC 2.0 is there? or no SLIC?

    Yen do you think that each ACPI table has a checksum and they are not flashed if this checksum fails?
     
  15. Hotpepper

    Hotpepper MDL Novice

    Aug 1, 2009
    24
    2
    0
    Hi,

    ok I updated a HP nx6325 from SLIC 2.0 to SLIC 2.1 with the method of in memory exchange.

    Here's how I've done it:

    1. Start HPQFlash and follow procedure until it says "Next" will start the update.
    2. Starting HxDen with Administration rights (as the HPQFlash).
    3. Load HP SLIC 2.1 Bin into HxDen.
    4. Open Memory of HPQFlash from HxDen and search for "SLIC".
    5. Replace the areas of RSA Key and SLIC Marker in memory and when finished save and close HxDen.
    6. Click next in HPQFlash to start BIOS update.

    7. Have SLIC 2.1 :)
     
  16. jiriteach

    jiriteach MDL Novice

    Jul 30, 2009
    49
    0
    0
    For me SLIC 2.0 is there. And it's still SLIC 2.0 even after the flash.

    It's as if, HPQFlash or the ROM is not being applied even though it looks like its working fine.
     
  17. gregg

    gregg MDL Novice

    Aug 7, 2009
    29
    0
    0
    Yes, SLIC 2.0 is keeped after Bios Upgrade. Bios seems to be flashed but after reboot, SLIC is not updated.

    @Hotpepper: That sounds good!! I'll try to update my 8710w with HxDen tonight and give you my results
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...