Tool to Insert/Replace SLIC in Phoenix / Insyde / Dell / EFI BIOSes

Discussion in 'MDL Projects and Applications' started by andyp, Nov 26, 2009.

  1. ar_seven_am

    ar_seven_am MDL Senior Member

    Mar 7, 2010
    398
    129
    10
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. andyp

    andyp SLIC Tools Author

    Aug 8, 2008
    1,673
    2,570
    60
    Hmmm..... to be fair i'm not an expert on which switches to flash etc.

    Given it is acer and has a complete SLIC you should be able to mod with the tool, select No SLIC in advanced and then just mod - this should change one byte only in mod_5100

    If it was anything else I would say do an SSV2 - the fact the only SLIC string is in mod_5100 is very similar to some sony's and i am pretty sure and ssv2 always works

    Again regarding recovery, i'm not an expert. I just disassemble and code!!!!

    I'll let one of the others answer regarding the flashing/recovery

    Andy

     
  3. andyp

    andyp SLIC Tools Author

    Aug 8, 2008
    1,673
    2,570
    60
    #1083 andyp, Oct 4, 2010
    Last edited by a moderator: Apr 20, 2017
    (OP)
    Code:
    seg000:000039E0                 mov     edi, ds:dword_10
    seg000:000039E6                 mov     ax, 2Eh ; '.'
    seg000:000039EA                 mov     ecx, 1
    seg000:000039EF                 push    small 1
    seg000:000039F2                 push    small [cs:word_9642]
    seg000:000039FA                 push    small 0E7Ch
    seg000:000039FE                 call    near ptr sub_9590
    seg000:00003A03                 cmp     al, 2
    seg000:00003A05                 jb     short locret_3A3F -> PATCHED TO JMP
    seg000:00003A07 ; ---------------------------------------------------------------------------
    seg000:00003A07                 mov     esi, edi
    seg000:00003A09                 add     esi, es:[edi+4]
    seg000:00003A0D
    seg000:00003A0D loc_3A0D:                               ; CODE XREF: seg000:00003A1Fj
    seg000:00003A0D                 mov     ebx, es:[edi+24h]
    seg000:00003A11                 cmp     dword ptr es:[ebx], 43494C53h   ; 'SLIC'
    seg000:00003A18                 jz      short loc_3A23
    seg000:00003A1A                 add     edi, 4
    seg000:00003A1D                 cmp     edi, esi
    seg000:00003A1F                 jbe     short loc_3A0D
    seg000:00003A21                 jmp     short loc_3A3E
    seg000:00003A23 ; ---------------------------------------------------------------------------
    seg000:00003A23
    seg000:00003A23 loc_3A23:                               ; CODE XREF: seg000:00003A18j
    seg000:00003A23                 mov     edi, ebx
    seg000:00003A25                 mov     ebx, 0C0h ; '+'   ; Marker length
    seg000:00003A2A                 mov     ecx, 0B6h ; 'Â'   ; Marker offset
    seg000:00003A2F
    seg000:00003A2F loc_3A2F:                               ; CODE XREF: seg000:00003A35j
    seg000:00003A2F                 mov     byte ptr es:[ebx+edi], 0
    seg000:00003A34                 inc     ebx
    seg000:00003A35                 loop    loc_3A2F
    seg000:00003A37                 call    sub_213
    seg000:00003A3C                 jmp     short locret_3A3F
    seg000:00003A3E ; ---------------------------------------------------------------------------
    seg000:00003A3E
    seg000:00003A3E loc_3A3E:                               ; CODE XREF: seg000:00003A21j
    seg000:00003A3E                 stc
    seg000:00003A3F
    seg000:00003A3F locret_3A3F:                            ; CODE XREF: seg000:00003A05j
    seg000:00003A3F                                         ; seg000:00003A3Cj
    seg000:00003A3F                 retn
    
    This is the code I am patching. It certainly seems to look for a SLIC table and if found and a certain flag not set with blank C0 bytes from B6 relative offset - which must be the marker I presume.
    I don't think it is a flashing problem.

    Andy
     
  4. ar_seven_am

    ar_seven_am MDL Senior Member

    Mar 7, 2010
    398
    129
    10
    #1084 ar_seven_am, Oct 4, 2010
    Last edited by a moderator: Apr 20, 2017
    Confirm it work, n I test in another lappy, it's compaq presario cq42-105TU, but it's inside bios, just left the bios flashing command switch default n use the new phoenix tools 1.58 (the new one) with advanced option, no slics. The good news is it didn't erase the dmi area, uuuuuuugh if I know that before I don't have to bother to write in notepad n make some batch command to restore, thx Andyp, u do great job, may God bless u with ur knowledge :D
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. andyp

    andyp SLIC Tools Author

    Aug 8, 2008
    1,673
    2,570
    60
    No worries. Thanks for letting me know. Could you let me know which BIOS, as this might be a more generic patch than just Acer.

    Andy
     
  6. Serg008

    Serg008 MDL BIOS/EFI Guru

    Feb 23, 2010
    23,347
    10,326
    390
    Del
    (problem solved)
     
  7. ar_seven_am

    ar_seven_am MDL Senior Member

    Mar 7, 2010
    398
    129
    10
    It's F17A version, but the newest its F24A, both work with this unlock method, before that I've try the SLP marker for HP but it's unsupported, so I began to experiment with this since it had the same case as Acer Aspire 4741 (incomplete marker but it had complete slics in bios).
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  8. andyp

    andyp SLIC Tools Author

    Aug 8, 2008
    1,673
    2,570
    60
    Thanks
    Andy
     
  9. andyp

    andyp SLIC Tools Author

    Aug 8, 2008
    1,673
    2,570
    60
    #1089 andyp, Oct 5, 2010
    Last edited by a moderator: Apr 20, 2017
    (OP)
  10. Aleckazee

    Aleckazee MDL Novice

    Oct 8, 2010
    1
    0
    0
    Hi, I'm new to this thread but basically, I have a problem. I'm trying to decompose my BIOS in my HP Envy 14 (BIOS version F.13A) but PhoenixTool tells me that it's not a Phoenix/Dell/Insyde/EFI BIOS. I'm not sure if I'm doing something wrong or if it simply can't be done on my laptop. If it's any help, I'm trying to edit my Graphics core clock and memory speeds as well as the voltage. Normally I wouldn't do this but HP underclocked and undervolted the graphics cards in all the Envy 14s so there's less heat and longer battery life I think.
    Sorry if this is a stupid or covered question but I am new to this BIOS flashing/editing stuff.
     
  11. anmg

    anmg MDL Senior Member

    Jul 28, 2009
    304
    309
    10
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  12. kizwan

    kizwan MDL Member

    Mar 6, 2010
    189
    31
    10
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  13. prydox

    prydox MDL Novice

    Oct 12, 2010
    5
    0
    0
    hey. yes i want to recover my bios.
    i also tried the CRISIS disk. but im using a Win7 System to create the USB DISK, and there are no files on the stick.
    Any ideas how i can create the recover disk with using win 7?
     
  14. kizwan

    kizwan MDL Member

    Mar 6, 2010
    189
    31
    10
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...