Insyde hacking - New Vaio Z - Advanced menu in BIOS

Is it possible to deactivate discrete graphics in bios? Still looking for a working linux configuration.

windows wise is it ok to patch the nvcv.inf of the latest driver (2 lines device and string)? Am I missing something? I'm getting Code 31, Windows cannot load driver...

 

If you have a hacked BIOS, set video switching to static and put the hardware switch to stamina. That will effectively disable Nvidia card.

Code 31 is due to unsigned driver, AFAIK. Again, having hacked BIOS and setting video switching to static helps in that you can then install integrated (Intel) and discrete (Nvidia) drivers separately and get much newer versions at that. The process is described here.

 

Thanks mate, but can't get it to stop doing that double Wifi thing.
Disabling PCI-E makes no difference.
Windows works like a charm, but I want to use Linux based software, like Ubuntu or Knoppix. Unfortunately I can't get it to be permanent in any of these. When I use command sudo iwconfig wlan0 off or something like that it does disable it. But as soon as I start connecting to networks, it enables both of them at the same time. Is this the best Linux can do? Why not a setting like in Windows where you have the possibility to disable the adapter and it stays off???
Or am I missing something?

Hope anyone can help.

 

hi Guys, I'm having a problem:

I have captured the DUMP.ROM by booting into FreeDOS, the DUMP.ROM has been updated (without errors) using the advanced_menu.py script using PortablePython1.1 - no problems to this point.

However when I try to write the patched BIOS back to the system using:

flashZ1.exe new.rom /f

it says:

Error: IHISI 15h fail. Internal Error 28 FFC00000
FBTS permission is denied by user

Do I need to elevate or something to be able to run it? Have searched the forum but can't find anything on this.

Cheers

EDIT - BIOS Version is R2074C3

 

Hi guys - don't worry, solved it.

I installed the latest BIOS from the Sony Website (it starts with "R3") and then repeated the procedure. It then worked

Cheers

 

OK, I've tried many times without success...

I have an old VGN-Z11VN, and with the newest BIOS release (R2171M3) I have the Advanced menu shown, but it only has the Virtualization option, not fastboot, IDE/AHCI and other "cool" options.

I've checked my BIOS with a Hex editor and found $VSS twice, one at offset 144100 and other at 0016A2.

Is there a way to know the right VSS_OFFSET and VSS_SIZE values from the BIOS file?

Thanks,
Luiz

 

Already figured out what was wrong.

I was trying to do the mod in the file I've downloaded from Sony, not on Dump image.
The downloaded file is compressed, so the offset size is wrong. Just picked up the dump, changed the VS register to 0x25A and the offset to 0x3B108C and now I have the advanced and full power menu on BIOS R2170M3.

Thank you guys for the awesome work.

Best regards,
Luiz

 

Hi all,

I goofed up and I think I'll need some help to get back up and running. I have a VPCZ137GG (Asian model purchased in Hong Kong).

A few months back I successfully followed these instructions and hacked my bios which allowed me to upgrade my video drivers. All went well thanks to the awesome instructions posted here.

This weekend my Wifi died, I suspect due to outright hardware failure, but I'm still under an extended warranty. Before sending it in for repairs I figure I better reverse the bios hack but it turns out I've lost (probably deleted) my pre-hack original bios dump backup!

The Sony BIOS update executable refuses to work when run because I'm already running R3031C3 and hence it figures I'm already up to date.

The US BIOS dump "Original.ROM" that's available from Computercowboy's VPC-Z_BIOS.zip unsurprisingly seems to not get along with my Asian model when I attempt to flash it back.

 

Don't flash dumps from other users, you will overwrite your serial and service tag numbers with those of the other user and I am very sure that Sony will notice this. I will provide you with rollback instructions when I get back home later.

 

Thanks very much in advance for both the warning and the offer to help with rollback instructions! I'll hold up on doing anything foolish!

 

Sorry for the delay. I extracted the original BIOS ROM updater and uploaded it here: R3031C3-Original.zip

Download the file, unpack it and run InsydeFlash.exe. Press start and it should flash the official BIOS ROM. Tested on my EU Z11.

If it does not work, you can also copy R3031C3.ROM to your freedos thumbdrive and use the flashZ1.exe / flash it.exe DOS flasher utility to flash it back. If the DOS flasher exe is flashZ1 for example, you type in:

flashZ1 R3031C3.ROM /B

Please report if this has worked for you.

 

Not sure what I'm doing wrong, but I have a feeling it's something small and simple. If anyone could explain to me what I'm doing wrong or point me in the right direction, it would be greatly appreciated. I have searched this thread/forum, other forums and google for a solution but have come up with 0. Maybe I'm just not seeing it.

I have 2 VPCZ1 models, a Z1190x and a Z12JHX. My main reason for flashing for the advanced options is to enable VGA Switching. I'm planning to install FreeBSD and want to disable the Intel graphics and use the nvidia graphics for X use, as hybrid graphics is not supported.

The Z12JHX is my main laptop that I'm trying to flash, but was wanting to flash the Z1190X first to see if disabling the Intel graphics and enabling the nvidia graphics would work properly, as I need a working laptop and can't afford to have much down time.

I have BIOS version R3031C3 on both, and have came up with the same problem on both models.

I have booted to FreeDOS with a flash drive and used the insyde fla tool to extract the ROM, but i think I'm extracting it wrong because the size is coming up to be less than 1MB(compressed?) and has multiple 0's in the ROM. I have used multiple flash drives(2gb, 4gb, and a 16gb) thinking this would fix it, but did not. I have rebooted into linux AND windows, trying to use the python script(advanced_menu.py) with portable version recommended for windows with VSS sig errors, same problem in Linux python. I have tried to use a hex editor to modify the offsets but the VSS part is not found. I have tried extracting the ROM for both models to see if this issue occurs in both, and it does. What am I doing wrong?

Thanks in advance


@edit - Tried extracting the BIOS again and was able to pull a ROM a little over 2MB which isn't full of 0's and seems to be the right one... but when using a hex editor to find the VSS offset, I can't find the hex sequence or the ASCII VSS part at all...


@edit - I have realized my mistake and thought I'd edit because I saw others complaining of the same issue. When extracting the ROM, I was dumping it to the FreeDOS first boot partition that did not have enough space. I did not realize this because it would say the ROM was dumped successfully and not complaining about running out of space, so I thought the dump was done ok. After pyr0 mentioned the ROM should be 4MB it clicked, so I saved the ROM to the other partition(FLASIT.EXE C:\DUMP.ROM /g) and continued the process without errors.. until I rebooted from setting the VGA Policy to Static(see below).

thanks pyr0! Hope this might help others who overlook this minor issue.

@ NEW ISSUE - After flashing the BIOS with the advanced options I set the VGA Policy to Static and rebooted. Now no matter where the graphics switch is, on boot the LED for Stamina lights up and the screen is blank as if the graphics card isnt even registering. The computer boots up as the LED's are working and the backlit keyboard comes on but no matter how i boot, the screen still remains blank. I've also tried booting up and plugging in the HDMI to see if the video is being thrown to HD-out, but no success. I could probably boot into bios and switch it by just hitting the keys, but dont want to guessimate and flip another advanced switch on/off that could really fry the hardware. I've only tried this on my Z1190X, as I didnt want to have any issues like this on my main Z12JHX.

I'm thinking about flashing the advanced options BIOS on my Z12JHX and seeing what keys I have to press to switch it back to Auto, then replicating those keystrokes on my Z1190X. I'm wondering if that is my only resolution to this issue and thinking about whether this problem will occur on my Z12JHX as well. Any suggestions, and what do you think about replicating the keystrokes to switching the VGA Policy back to Auto?

 

The BIOS ROM dump should be exactly 4MB (4.194.304 bytes) in size. The dumped ROM does have large 00-area in the first half of the 4MB but that is ok. There are some pretty large FF-padding areas as well. The actual BIOS binaries is roughly 1.5MB.

FLASH.EXE DUMP.ROM /G
should do the trick (replace FLASH.EXE for your Isyde flasher filename).

If not, you can also use my BIOS backup tool out of windows - originally from my signature links:

Create a backup of your stock BIOS - you might need it later for warranty reasons etc.:

- Download this BIOS Backup tool
- Extract it and run the contained file dump_BIOS.bat. Read the note and confirm. Then you will find the Backup Image as DUMP.ROM in the same directory.

 

It worked great... thank you so much pyr0!

I foolishly left the VGA Switching Policy as Static - but I presume I need only rehack it (this time backing up my bios), toggle the VGA Switching Policy to and then return it to factory again.

Thanks again!

 

Nobody else has had a problem like this? I'd say it's a hardware failure, but the hardware was working before the flash. So if it is a hardware failure due to the flashing, I think people should know about it before killing their own graphics. I've seen others say they flashed theirs with BIOS R3031C3 without a problem, so I'm in a loss as to what happend.

Would flashing the advanced BIOS on my Z12JHX result in the same keystrokes being used to set the VGA Policy to Static?

 

When it is running on stamina, HDMI does not work. Try VGA connector.

Try following to reset your laptop:
Power both your laptops up into BIOS setup. Then navigate with your working Z12JHX to load DEFAULT SETUP VALUES (press F9) and replicate on your Z11.

This should wipe the static setting and give you back factory defaults.

------------

If you want to access Switching mode setting, press following keys to navigate:

F2 - enter BIOS
Right - go from Main tab to Advanced tab
Down - Peripheral Configuration
Enter - Enter Peripheral Configuration
5x Down - Go to VGA switching Policy
Enter - Change setting

There you have AUTO Dynamic Static (Auto and dynamic are the same)

Press up or down
Enter
F10 to save
Comfirm with enter
Should reboot automatically.

 

Thanks pyr0, appreciate it. After using those keystrokes to set back to auto, the display is back on.

I then tried to reset to static again to see if the problem still happens, and it does. The display works with either Auto or Dynamic on, but the display is blank with Static switching on.

Is there any reason you can think of that would cause this? I have NOT tried the VGA-out yet because i can't find my VGA-out cable.

 

Perhaps it is just some confusion in the VSS registers (setup variables) that happened between reflashing. As I suggested, reset to setup defaults and try again.

If it does not work, send me a BIOS dump and I will manually reset your VSS registers back into place.

 

I have restored it to default BIOS, extracted again, applied advanced options with the python script, re-flashed to advanced options again with the same no display result whenever i set VGA Policy to Static. I then disabled Static by using the keystrokes you provided to get the display working again.

If there was a hardware problem with the nvidia graphics, wouldn't it be possible to set the switch to the intel card and boot off that, or would it cause both cards to error out giving the no display problem?

 

I tried using CowboyComputer's Bios ZIP.

But I get the following error when putting in FLASH HACKED.ROM /F

The error reads:

IHISI 15h fail Internal Error 20
FFC00000
FBTS permission is denied by user.

What does this mean?

 

Okaay, finally got it to work!

One problem. I changed VGA to static in the BIOS, but now the brightness won't adjust at all. Any thoughts?

 

Maybe this thread will be of more help to you:
http://forum.notebookreview.com/sony/602497-latest-vpc-z1-330m-drivers-bios-hack-people.html

 

Probably a stupid question but, is possible to backup or restore the BIOS firmware from Windows directly, like the official Sony flash utility does?

 

where do i get latest fla for insydeh2o bios (want to dump my acer aspire v3-771g)

 

Followed the instructions, python script ran without issue, but it seems I've bricked my VPCZ1190X. The machine turns on, but has no display (backlight doesn't even turn on). Any recovery from this?

 

go back to bios and flash the original dump.rom?

 

Sure, but I can't get it to boot to do that...

 

I tend to think that the flash did not complete properly, or that the patching process went wrong. I don't know what to do in this case, if just the BIOS were in a chip that you could unplug and reprogram outside with a programmer

 

Quick and urgent question people! The BIOS on my Z13 (VPCZ13M9E/B) is hacked according to the first post by the previous owner. Unfortunately I need to send the laptop for service, and based on what I read through the posts this will invalidate my warranty, right? So, the question is, how can I restore my original BIOS back (the previous owner hasn't kept the original image). So far I downloaded the BIOS image from Sony site, but unfortunately it will not restore, as it reports that the BIOS now is the current version, or in other words, the one I running now is same version to the one I am trying to restore back from the file I have downloaded. Any help is welcomed!

 

Do you have the original dump.rom?

 

No, unfortunately not! As I said the previous owner didn't keep it! Pls tell me that there is a way....

 

Do a backup of your actual BIOS with the FLASHZ1.exe

When you have it check its size in bytes (from windows explorer -> properties). In my case is 4.194.304 bytes.

 

Try official BIOS first, I think this version does not check for actual version, i.e. will install over same or newer bios.

BIOS Update version R3031C3 : Download : Sony Indonesia

 

@Paloseco

Yes this is indeed the one I have downloaded already and refuses to update since my BIOS version is the same to the one downloaded.

Well back up with FLASHZ and then what?

 

Check with Okteta hex editor ( here's a version for windows) on dumped bios, at position 003522B8 in hex if you have the value 01 and a lot of zeros around. If so, change the 01 to 00, save and reflash, at your own risk.

For now, I think the unpatch perl script is not available.

 

Pls confirm that this the right way to backup my rom: flashz1.exe myhackedbios.rom /g

 

yes, /g stands for GET and /f for FLASH.

If you have problems booting FreeDOS use the real DOS.

 

Thanx, trying it now, and reporting in a few mins.

 

OK, well just got my rom file. Looked in with Free Hex Editor, and offset 003522B8 is all zeros: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

 

Ok, probably in your bios the 01 bytes go in a different possition. Let's try now reverse patching (unpatch) the custom bios.


Get the advanced_menu.py and replace the line

PATCH_VALUE = 0x01

with

PATCH_VALUE = 0x00


And using python:

Code:

python advanced_menu.py myhackedbios.rom original.rom

Should go ok

Code:

Updating VSS...
Updating BIOS...
Writing output...
Done

Then flash the original.rom

 

OK, did it in linux (my machine is dual boot), not so fond of windows myself! My installed version of python according to python --version is 2.7.3. So, here is what I did so far:

1. edited advanced_menu.py as you said

2. delk@Darwin:~/Desktop$ python advanced_menu.py MYHACKED.ROM UNPATCHED.ROM

which returned:

Code:

Loading BIOS...
Loading VSS...
Old state:
Variable 'Setup'
 Attributes: 0x00000007
 Status: 0x7f
 VendorGUID: f4 27 4a a0 00 df 42 4d b5 52 39 51 13 02 11 3d
 Value (0x320 bytes):
  00000000  00 00 00 00 00 00 00 00  01 00 00 03 04 00 00 00  |................|
  00000010  01 03 00 03 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000030  00 00 00 01 00 00 01 00  00 02 00 00 00 00 00 01  |................|
  00000040  01 00 00 01 01 00 01 01  01 00 00 00 02 02 00 01  |................|
  00000050  20 00 00 00 00 00 00 00  00 00 01 01 00 00 00 00  | ...............|
  00000060  00 00 00 00 00 00 00 01  01 00 00 80 00 00 00 00  |................|
  00000070  00 00 01 01 00 01 01 00  00 00 01 00 01 00 00 00  |................|
  00000080  01 00 00 00 00 02 00 00  00 00 01 01 00 00 00 00  |................|
  00000090  00 01 00 00 00 00 00 00  00 00 07 03 02 06 00 00  |................|
  000000a0  00 00 18 92 01 00 18 91  00 00 00 00 01 00 00 01  |................|
  000000b0  00 00 00 00 00 01 00 01  00 00 00 00 00 01 00 01  |................|
  000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  000000e0  00 00 00 00 00 00 01 01  00 00 00 00 00 01 00 00  |................|
  000000f0  00 00 02 02 00 00 00 03  00 01 01 01 01 01 01 01  |................|
  00000100  01 01 01 01 01 01 01 01  01 01 01 01 01 01 00 00  |................|
  00000110  00 00 00 00 00 00 00 00  00 00 00 01 00 00 00 00  |................|
  00000120  00 00 03 01 00 00 00 00  01 01 01 00 00 00 00 00  |................|
  00000130  04 04 00 00 04 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000140  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000150  00 00 00 00 00 00 00 00  09 09 09 09 09 09 09 09  |................|
  00000160  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000170  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000180  01 01 01 01 01 00 00 00  00 00 01 00 00 00 00 00  |................|
  00000190  01 01 03 01 01 00 00 01  03 46 5d 01 01 01 01 00  |.........F].....|
  000001a0  00 01 01 01 01 01 02 00  00 00 00 00 00 00 00 00  |................|
  000001b0  00 00 01 01 00 00 37 01  02 32 64 01 01 01 01 01  |......7..2d.....|
  000001c0  01 00 00 00 01 00 00 06  04 00 01 05 01 01 01 00  |................|
  000001d0  00 00 ff ff 00 ff 01 00  ff 03 00 ff 03 02 00 00  |................|
  000001e0  00 00 00 01 00 01 00 01  01 01 01 01 01 00 00 00  |................|
  000001f0  00 00 00 04 01 01 05 00  00 31 00 00 00 01 00 00  |.........1......|
  00000200  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000210  00 00 00 00 00 00 00 00  00 00 00 01 01 01 00 00  |................|
  00000220  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000230  01 02 01 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000240  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000250  00 00 00 00 00 00 00 00  01 00 00 00 00 00 00 00  |................|
  00000260  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000270  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000280  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000290  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  000002a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  000002b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  000002c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  000002d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  000002e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  000002f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000300  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000310  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
Patched state:
Variable 'Setup'
 Attributes: 0x00000007
 Status: 0x7f
 VendorGUID: f4 27 4a a0 00 df 42 4d b5 52 39 51 13 02 11 3d
 Value (0x320 bytes):
  00000000  00 00 00 00 00 00 00 00  01 00 00 03 04 00 00 00  |................|
  00000010  01 03 00 03 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000030  00 00 00 01 00 00 01 00  00 02 00 00 00 00 00 01  |................|
  00000040  01 00 00 01 01 00 01 01  01 00 00 00 02 02 00 01  |................|
  00000050  20 00 00 00 00 00 00 00  00 00 01 01 00 00 00 00  | ...............|
  00000060  00 00 00 00 00 00 00 01  01 00 00 80 00 00 00 00  |................|
  00000070  00 00 01 01 00 01 01 00  00 00 01 00 01 00 00 00  |................|
  00000080  01 00 00 00 00 02 00 00  00 00 01 01 00 00 00 00  |................|
  00000090  00 01 00 00 00 00 00 00  00 00 07 03 02 06 00 00  |................|
  000000a0  00 00 18 92 01 00 18 91  00 00 00 00 01 00 00 01  |................|
  000000b0  00 00 00 00 00 01 00 01  00 00 00 00 00 01 00 01  |................|
  000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  000000e0  00 00 00 00 00 00 01 01  00 00 00 00 00 01 00 00  |................|
  000000f0  00 00 02 02 00 00 00 03  00 01 01 01 01 01 01 01  |................|
  00000100  01 01 01 01 01 01 01 01  01 01 01 01 01 01 00 00  |................|
  00000110  00 00 00 00 00 00 00 00  00 00 00 01 00 00 00 00  |................|
  00000120  00 00 03 01 00 00 00 00  01 01 01 00 00 00 00 00  |................|
  00000130  04 04 00 00 04 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000140  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000150  00 00 00 00 00 00 00 00  09 09 09 09 09 09 09 09  |................|
  00000160  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000170  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000180  01 01 01 01 01 00 00 00  00 00 01 00 00 00 00 00  |................|
  00000190  01 01 03 01 01 00 00 01  03 46 5d 01 01 01 01 00  |.........F].....|
  000001a0  00 01 01 01 01 01 02 00  00 00 00 00 00 00 00 00  |................|
  000001b0  00 00 01 01 00 00 37 01  02 32 64 01 01 01 01 01  |......7..2d.....|
  000001c0  01 00 00 00 01 00 00 06  04 00 01 05 01 01 01 00  |................|
  000001d0  00 00 ff ff 00 ff 01 00  ff 03 00 ff 03 02 00 00  |................|
  000001e0  00 00 00 01 00 01 00 01  01 01 01 01 01 00 00 00  |................|
  000001f0  00 00 00 04 01 01 05 00  00 31 00 00 00 01 00 00  |.........1......|
  00000200  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000210  00 00 00 00 00 00 00 00  00 00 00 01 01 01 00 00  |................|
  00000220  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000230  01 02 01 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000240  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000250  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000260  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000270  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000280  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000290  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  000002a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  000002b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  000002c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  000002d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  000002e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  000002f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000300  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000310  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
Updating VSS...
Updating BIOS...
Writing output...
Done

 

Seems good. Would be great as well know the differences in there between the two files. Do on your mac

Code:

cmp -l MYHACKED.ROM UNPATCHED.ROM

 

No am not on a Mac! Am running Ubuntu 12.04 on my Z (patched kernel with bumblebee and vaio tools). Well,

Code:

delk@Darwin:~/Desktop$ cmp -l MYHACKED.ROM UNPATCHED.ROM

returns

3491834 1 0

 

Well, it means that at 0x3547FA is where the rom was patched, you can see the 0 and the 1 on the files with the hex editor.

 

Hmmm...am looking at it right now and for some weird reason not such address (0x3547FA) exists on the hex editor (Bless Hex Editor) in both files!

Actually, the closest adresses i could find are: 003547fd in MYHACKED.ROM and 003547fb in UNPATCHED.ROM

 

Well because maybe your hex editor displays bytes in groups of two, so 10 (or 00) is at the next address, 3547fa+1, but is impossible that it's shown at different position in the two files. Maybe you are confusing an equal value at other address.

 

Maybe...which hex editor are you using?

 

I use Okteta (there's for mac too). I've tried Ultraedit but is buggy. There's Araxis Merge for mac that is binary comparer. If there were more than one difference between the two files, cmp will notice it.

 

OK, installed Okteta at Ubuntu.

There is a difference (as correctly cmp reports) but appears in 0x3547F0 not 0x3547FA in both ROM files

 

Try cmp at ubuntu again. I would like to see a capture of Okteta at the difference, is not possible to show at different position than cmp, there must be something wrong.

You can view the differences too with od

Code:

od -t x1  -j  0x3547F0 -N 15 original.rom
od -t x1  -j  0x3547F0 -N 15 hacked.rom