New AMI BIOS tool for performing SSV2/3 and Dynamic SLIC Modification

Discussion in 'MDL Projects and Applications' started by andyp, Jan 7, 2009.

  1. andyp

    andyp SLIC Tools Author

    Aug 8, 2008
    1,673
    2,570
    60
  2. Yen

    Yen Admin
    Staff Member

    May 6, 2007
    13,107
    14,064
    340
    This is really interesting.
    I'll have a look and will reply..........
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. Yen

    Yen Admin
    Staff Member

    May 6, 2007
    13,107
    14,064
    340
    Some facts are strange:
    The Hwdirect dump shows OEMX table. Length 176h (shown at table length byte) at BFF80470h physical address. The table contains no pubkey (RSA data) and no marker data.

    The maker data is found at 1b module at offset 1AEE9h to 1AF84h. There are also exactly B6h zero bytes as space remaining for the marker field, but no marker data at 1b module.

    There is absolute no marker data found neither at any module nor at the biosfile itself, activation without any maker data?:eek::confused:
    Is the marker found data somewhere, but encrypted?

    Why contains the 1b module the public key data (RSA field) but it's not mapped to OEMX tables' physical address???
    Anyway the 1b module contains a SLIC entry at offset 50EE5h, but AcpiScope doesn't show a SLIC table......also Acpiscope doesn't dump the whole OEMX table, why?

    Hmmmm.......... I'm curious about that OEMX table. Would be that empty table alone be able to activate Vista???

    I don't think so. There must be another mechanism to activate.......
    To play with it would be nice. I need to know what will happen if the RSA data will be removed from the 1b module.......also I would like to know if that OEMX table alone is able to activate.

    Edit: What's that OEMB table? Hmm.... 71h bytes are too less to hold the marker......
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. andyp

    andyp SLIC Tools Author

    Aug 8, 2008
    1,673
    2,570
    60
    Yen - pretty much what I found.

    Mustang Sally - just to confirm:

    1) You have no bootloaders and nothing resembling the remnents of bootloaders.
    2) Windows definitely shows the genuine icon.
    3) What certificate and key did you use (ie ASUS.XRM-MS and 6F2D7 key)??
    4) What SLIC method did your previous BIOS use??

    Andy
     
  5. andyp

    andyp SLIC Tools Author

    Aug 8, 2008
    1,673
    2,570
    60
    I searched for the XOR FFh marker as well. Nil found.

    Andy
     
  6. Mustang Sally

    Mustang Sally MDL Junior Member

    May 9, 2007
    79
    0
    0
    1) this notebook came with vista hp preinstalled
    2)yes it's genuine
    3)I had installed Ultimate with ASUS.XRM-MS and 6F2D7 key, no problems
    4)Previous bios showed the factory asus slic in everest, no slic in everest with new bios.

    Just tried an install on a new hard drive and got the 30 day to activate. tried the asus restore disk and got Cannot load imagex 0 from src WIM file error. (somethings have definately changed) contacted asus and now they want me to rma. will keep everyone posted when i recieve it back. The drive i took out is still activated and genuine.

    thank you everone for your input
     
  7. Yen

    Yen Admin
    Staff Member

    May 6, 2007
    13,107
    14,064
    340
    These points aren’t clear to me, need brain storming:

    The original bios 207 has a SLIC table, it activates Vista, right?
    The original bios 209 has no SLIC, but OEMX table, it activates Vista, right?

    Why your Notebook became unactivated?
    Which bios version was modded to install OSX?

    It came with HP preinstalled NOT Asus??? How do you know it is HP?
    The bios 207 has a ASUS SLIC right? How was it activated? Against HP cert.????
    Probably it uses the Asus certificate, but HP OEM logo????

    The RSA data at bios 209 matches to the _ASUS_Notebook.


    Please clarify, thanks… this is really exciting……
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  8. Mustang Sally

    Mustang Sally MDL Junior Member

    May 9, 2007
    79
    0
    0
    yes
    yes, h/p only not ultimate
    loaded ultimate on another drive (worked with 207)
    both
    sorry thats home premium.

    Thanks Yen
     
  9. BIOSNOIDEA

    BIOSNOIDEA MDL Senior Member

    Mar 8, 2009
    335
    48
    10
    QUOTE
    The original bios 209 has no SLIC, but OEMX table, it activates Vista

    yes, h/p only not ultimate
    UNQUOTE

    I wonder if there are coming with a more powerful and intelligent way of stopping us........
    SLIC sounds like a "generic" OEM systems that allows ANY version provided that certs and key match.
    OEMX is that stands for a "new OEM extended approach"? Looks like only allows the particular OEM disc and version and that is it ?
     
  10. andyp

    andyp SLIC Tools Author

    Aug 8, 2008
    1,673
    2,570
    60
    New version

    v1.02

    FIX: Overflow bug in unlinked module scan code
    FIX: Handle module 1B checksum errors

    Andy
     
  11. BIOSNOIDEA

    BIOSNOIDEA MDL Senior Member

    Mar 8, 2009
    335
    48
    10
    Andy, THANKS ! What will all of us do if a great guy like you did not exist here.

    Cheers
     
  12. BIOSNOIDEA

    BIOSNOIDEA MDL Senior Member

    Mar 8, 2009
    335
    48
    10
    Andy, just for my ignorance........If OEM's use DYNAMIC only, what are the risks after mod,successful OS running, etc,etc, and then a few months down the track you want to put more memory in the machine or use other slots by adding hardware. I am thinking in memory conflicts with a fixed method, or SLIC tables would never touch other modules in a BIOS when expanding a system ?
    Thanks
     
  13. JohnnyC

    JohnnyC MDL Novice

    May 12, 2007
    24
    0
    0
    #353 JohnnyC, Apr 26, 2009
    Last edited by a moderator: May 23, 2017
  14. BIOSNOIDEA

    BIOSNOIDEA MDL Senior Member

    Mar 8, 2009
    335
    48
    10
  15. andyp

    andyp SLIC Tools Author

    Aug 8, 2008
    1,673
    2,570
    60
    #358 andyp, Apr 26, 2009
    Last edited by a moderator: May 23, 2017
    (OP)
  16. Yen

    Yen Admin
    Staff Member

    May 6, 2007
    13,107
    14,064
    340
    This sounds to me that some data (public marker) is stored somewhere additionally.
    Usual SLIC activation works.(207)
    OEMX activation works only with home premium AND only at the drive that comes with the Notebook? It's probably stored at the bootsector, or the preinstalled home premium uses a special bootloader.

    Have you tried to activate a HP home premium install on 'the other' drive using 209?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...