Jump to content
InsanelyMac Forum
CodeRush

[UEFIPatch] UEFI patching utility

Recommended Posts

Hi Minihack,

 

can you post a link to the original bios, it had a CAP header, right?

Maybe the FFS checksums can be corrected, so you can flash the ROM unlocked.

I've been asking you earlier but you didn't respond.

Sorry, I missed that post. Here is a link to the original bios download: ZOTAC H87ITX-A-E BIOS and update utility

Many thanks for your help. That link obviously is for the bios before doing the PMpatch, and if it worked right for me the file "newbios" in my zip was simply the one patched by Coderush's utility under windows.

Flashing my newbios file to the board failed (under DOS using the various tools) as it gave me a response along the lines that a secure session could not be performed.

Share this post


Link to post
Share on other sites
Advertisement

Sorry, I missed that post. Here is a link to the original bios download: ZOTAC H87ITX-A-E BIOS and update utility

Many thanks for your help. That link obviously is for the bios before doing the PMpatch, and if it worked right for me the file "newbios" in my zip was simply the one patched by Coderush's utility under windows.

Flashing my newbios file to the board failed (under DOS using the various tools) as it gave me a response along the lines that a secure session could not be performed.

Try this one, it's flashlock removed + pmpatched + FFS checksums corrected.

Should be possible to start a secure flash session now. If it works you can use even fpt or flashrom.

When it's done and you had no probs to flash it I'll explain in detail how to do it yourself next time ; )

pa287.zip

Share this post


Link to post
Share on other sites

BonBon6, security verification has nothing to do with FFS checksums (which must be corrected for any sectioned file), so it can't be bypassed so easily. 

AMI Aptio BIOSes have extended capsule header, where RSA2048 signature and SHA1 checksum of whole BIOS are located. Checksum can be corrected, but signature is a problem. Phoenix and InsydeH2O BIOSes have normal capsule header but extended volume headers with the same signature. If you don't have an AMI or Phoenix private key stolen - you can't sign your modified BIOS, I think. I wish I'm wrong, BTW. :)

Share this post


Link to post
Share on other sites

BonBon6, security verification has nothing to do with FFS checksums (which must be corrected for any sectioned file), so it can't be bypassed so easily. 

AMI Aptio BIOSes have extended capsule header, where RSA2048 signature and SHA1 checksum of whole BIOS are located. Checksum can be corrected, but signature is a problem. Phoenix and InsydeH2O BIOSes have normal capsule header but extended volume headers with the same signature. If you don't have an AMI or Phoenix private key stolen - you can't sign your modified BIOS, I think. I wish I'm wrong, BTW. :)

 

Thanks CodeRush,

 

I read at MDL the ROMs can be flashed again when using OA30.txt key with new module option - but looks like that's possible only on Asus boards ;)

Share this post


Link to post
Share on other sites

@ CodeRush

 

I have tried the PMPatch WinVers. 0.5.13 on the 7720A15.exe of the Dell bios for Inspiron 17R SE 7720 (i7 3630qm) without success. On the with Universal Bios Backup Toolkit 2.0 backuped DellInc.-A15.rom done PMPatch I have  got this output:

 

PMPatch 0.5.13
PowerManagement modules not found.
PowerMgmtDxe/PowerManagement2.efi modules not found.
AMI nest modules not found.
Trying to apply patch #1
Nested PowerMgmtDxe/powerManagement2.efi module at 003429A8 patched.
Phoenix nest module at 00280048 patched.
CpuPei modules not found.
Output file generated.

 

Is it save to flash this patched rom?  I have read about some bricked SE 7720 with i7 3630 after flashing a moded unlocked bios. Which tool should I use for flashing the patched rom?

 

Thanks.

Share this post


Link to post
Share on other sites

it's not safe in the first place because Universal Bios Backup tool clearly states it cannot guarantee it's making a complete copy of your BIOS chip.

Unpack the OEM .exe with either 7zip or start the updater and got to %TEMP% (Win+R > %TEMP%) and copy the flasher folder that contains the bios capsule. Then patch the capsule with PMPatch, reflash using original WinFlash flasher utility.

Share this post


Link to post
Share on other sites

it's not safe in the first place because Universal Bios Backup tool clearly states it cannot guarantee it's making a complete copy of your BIOS chip.

Unpack the OEM .exe with either 7zip or start the updater and got to %TEMP% (Win+R > %TEMP%) and copy the flasher folder that contains the bios capsule. Then patch the capsule with PMPatch, reflash using original WinFlash flasher utility.

Thanks, flash went fine.

Share this post


Link to post
Share on other sites

We have found that AICPM.kext from 10.9 DP1 can be patched to enable SB-E processors but power management will not work.

Thanks to SunKi for this 2 patches:

 

Quote

1. sudo perl -pi -e 's|\x74\x2f\x48\x89|\x90\x90\x48\x89|' /System/Library/Extensions/AppleIntelCPUPowerManagement.kext/Contents/MacOS/AppleIntelCPUPowerManagement

2. sudo perl -pi -e 's|\x74\xe7\x48\xc7|\x90\x90\x48\xc7|' /System/Library/Extensions/AppleIntelCPUPowerManagement.kext/Contents/MacOS/AppleIntelCPUPowerManagement

 

Hey man would be possible you update this patch for use in 10.8.5 since this doesn't work. Thanks in advance

Share this post


Link to post
Share on other sites

I get an error when I tried to patched my rom. I get the following error :

PMPatch 0.5.11
PowerManagement modules not found.
AMI nest modules not found.
Phoenix nest modules not found.
CpuPei module at 0066FE40 not patched: Patch pattern not found.
CpuPei module at 0076FE40 not patched: Patch pattern not found.

I was wondering if someone could help me or patch it for me.

My motherboard is an ASUS B85M-G.

 

Thank you,

 

Cope98

Share this post


Link to post
Share on other sites

I get an error when I tried to patched my rom. I get the following error :

...

I was wondering if someone could help me or patch it for me.

My motherboard is an ASUS B85M-G.

 

Thank you,

 

Cope98

 

Hey Cope98,

 

you could have helped yourself using PMpatch 0.5.13:

PMPatch 0.5.13
PowerManagement modules not found.
PowerMgmtDxe/PowerManagement2.efi module at 002B0748 patched.
AMI nest modules not found.
Phoenix nest modules not found.
CpuPei module at 0066FE40 not patched: Patch pattern not found.
CpuPei module at 0076FE40 not patched: Patch pattern not found.
Output file generated.

patched ROM uploaded

 

regardz

Share this post


Link to post
Share on other sites

Ok i have a Asrock Z87 Extreme 4 main board is there a patched UEFI out for it  ? i can't get osx working on this board 

Share this post


Link to post
Share on other sites

Hi CodeRush,

I'm going to help my friend patch his ASUS X202E. I got these logs in terminal:

XXX-macpro:~ XXX$ /Users/XXX/Downloads/PMPatch /Users/XXX/Downloads/X202EAS.210.CAP /Users/XXX/Desktop/X202EAS.210.CAP 
PMPatch 0.5.13
PowerManagement module at 00191108 patched.
PowerMgmtDxe/PowerManagement2.efi modules not found.
AMI nest modules not found.
Phoenix nest modules not found.
CpuPei module at 005A0F60 not patched: Patch pattern not found.
Output file generated.

Is this UEFI generated from PMPatch fine to flash?

 

Original UEFI is right here. "BIOS 210 (X202E)"

Share this post


Link to post
Share on other sites

Hi CodeRush,

I'm going to help my friend patch his ASUS X202E. I got these logs in terminal:

XXX-macpro:~ XXX$ /Users/XXX/Downloads/PMPatch /Users/XXX/Downloads/X202EAS.210.CAP /Users/XXX/Desktop/X202EAS.210.CAP 
PMPatch 0.5.13
PowerManagement module at 00191108 patched.
PowerMgmtDxe/PowerManagement2.efi modules not found.
AMI nest modules not found.
Phoenix nest modules not found.
CpuPei module at 005A0F60 not patched: Patch pattern not found.
Output file generated.

Is this UEFI generated from PMPatch fine to flash?

 

Original UEFI is right here. "BIOS 210 (X202E)"

patch from windows:

$>pmpatch X202EVAS.200.CAP X202EVAS.200-pmpatch.CAP
PMPatch 0.5.13
PowerManagement module at 00190838 patched.
PowerMgmtDxe/PowerManagement2.efi modules not found.
AMI nest modules not found.
Phoenix nest modules not found.
CpuPei module at 005A1720 not patched: Patch pattern not found.
Output file generated.

PowerManagement module at                  00190838 patched

Same on for your log but different offset: 00191108 patched

 

Fine to flash. If biosregion isn't flashlocked. :ninja:

Share this post


Link to post
Share on other sites

patch from windows:

$>pmpatch X202EVAS.200.CAP X202EVAS.200-pmpatch.CAP
PMPatch 0.5.13
PowerManagement module at 00190838 patched.
PowerMgmtDxe/PowerManagement2.efi modules not found.
AMI nest modules not found.
Phoenix nest modules not found.
CpuPei module at 005A1720 not patched: Patch pattern not found.
Output file generated.

PowerManagement module at                  00190838 patched

Same on for your log but different offset: 00191108 patched

 

Fine to flash. If biosregion isn't flashlocked. :ninja:

Thanks!  :D

So I patch it again in Parallels. I found out the MD5 are the same although the offset is reported different.

Share this post


Link to post
Share on other sites

Thanks!  :D

So I patch it again in Parallels. I found out the MD5 are the same although the offset is reported different.

 

Yes, maybe due to different lzma-libs on windows and unix/linux tool.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.



  • Similar Content

    • By notacone
      These are the Original iMac17,1 Firmware 0105_B20 ACPI Tables.
      They have been extracted from the firmware file provided in 10.12.4 update, so they are clean and unloaded.
      All tables are available in hex cut/new file/paste order so they are untouched and unloaded.
      I believe these files can serve to better study Skylake architecture implementation in Sierra.
      10.12.4-10.12.6 : IM171_0105_B20-10.12.4.firmware update ACPI Tables.zip
      10.13.0+ : IM171_0110_B00 10.13.0GM ACPI Tables.zip
    • By partha.slg123
      Hackintosh High Sierra 10.13.3 USB Installer Boot Into USB DIrectly Enter Exit Option Menu. Clover Boot Menu Not Showing. Plz Help .................
       

       
      My System Specification :

      CPU : Core i5 6400
      MB : Asus H110M-CS
      RAM : 8GB DDR 4
      HDD : WD 1TB For Windows And WD 500 GB For Hackintosh
      Bootloader : Clover
    • By gorans
      Hi,
       
      after updating HS my WOL stopped working. It worked for sure in El Capitan, not sure in what version of HS stopped to work. I'm using Ozmosis as bootloader and IntelMausiEthernet (in S/L/E) for network. I created ssdt.aml with ssdtPRGen, and put it in EFI/Oz/Acpi/Load/.
      WOL is enabled in BIOS, wake for network access is checked
      pmset -g System-wide power settings: DestroyFVKeyOnStandby 0 Currently in use: standby 0 Sleep On Power Button 1 womp 1 hibernatefile /var/vm/sleepimage powernap 0 networkoversleep 1 disksleep 10 sleep 15 autopoweroffdelay 28800 hibernatemode 0 autopoweroff 0 ttyskeepawake 1 displaysleep 15 standbydelay 10800 If I put machine to sleep, WOL works for a short time, but not working if I let it sleep for a while.
       
      I deleted Ethernet in Network, rebooted and recreated it, but still the same.
       
      Hardware:
      MOBO:     Gigabyte Z97-D3H rev 1.1
      processor:    i5-4460 Haswell
      graphic:    Gigabyte GeForce GT 740 OC GDDR5 2GB (GV-N740D5OC-2GI)
      memory:    2 x 8GB Kingston
      disks:    Samsung SSD 850 EVO 120GB
              Seagate 2TB
              LG DVD±RW
      Sound:     VoodooHDA
      Network:    IntelMausiEthernet.kext
       
      Any advice?
       
      Best regards,
      Goran
    • By M3G4DR01D
      Hello everyone, I have an Asus gl502vmk (i7 kabylake + GTX 1060 6 gb) laptop and I tried all the patches/kexts to get the brightness with fn keys/touchpad (I2C ELAN 1200 works with VooDoo I2C kext v1.0 but no gestures/preference pane)/Keyboard backlight to work but no success so far, any help would be appreciated, thanks in advance.
      [EDIT] (10/04/2018)
      Battery status now works, thanks to @RehabMan turned out to be incorrect SMBIOS (used iMac instead of Mbp) lol, but it drains crazy fast (~1.5 - 2 hours while on standby (all apps quited!), on windows 10 it lasts 4 - 5 hours, and on linux it lasts 6 ~ 7 hours!)
      And with VoodooI2C v2.0.1 + VoodooI2CHID kext and patched DSDT, the touchpad is now detected in the sys pref pane but still no input.
      Sound works with VoodooHDA v2.9.1, but the only issue is that the jack sense isn't working (the output device doesn't auto switch to headphone when connected)
       
      [EDIT 2] (11/04/2018)
      The system brightness now works thanks to @onejay09 but I have no brightness slider, and there are 4 extra brightness levels (brightness stops increasing after 12 levels)  and the brightness keys are not mapped correctly, plus the brightness decreases when I plug in the ac adapter, then increases if I unplug it???, the brightness level isn't also saved after reboot.
      battery still drains crazy fast (~1.5 - 2 hours, even with brightness at 50%, so apparently it is a power management issue).
      and I also have shutdowns while in sleep mode (I tried darkwake=10 and darkwake-0 and darkwake=no)
       
      P.S. I have uploaded my new report files, thanks!
       
      Latest report files (11/04/2018): https://www95.zippyshare.com/v/AMOpP0AY/file.html
    • By liuhongxin1993
      ASUS X99-E-10G WS
      I76950X
      Request to optimize
      Sleep/Wake issues, CPU Power States


      origin.zip
      ioregMac Pro.zip
      config.plist
      kexts.zip
×