Good morning,
I buyed a dead Surface Pro 5, restored it and found that the bios had a password.
With RPi and a cable I managed to recover the Bios.
Tryed (comparing another bios from Surface Pro 4) with Hex editor to FF some adresses, I managed to boot the bios without password, but brobably broke VSS/NVRAM region.
An user from another forum had a look to the bios and said this:
Quote:Luckily for you this BIOS is booting, you broke the VSS Store/NVRAM, so before I even look into BIOS or what you edited, we know password is stored in VSS/NVRAM or something there pulls password from another location but it can't load now due to this region is broken
Since you broke the entire section, no NVRAM can be loaded. You may or may not have removed the password, it's simply not loaded due to it's all broken now.
This is why your driver installs fail, product name, family, SKU etc is all stored in NVRAM (windows keys, serial, UUID is too)
What you FF'd out, is the following, none of which is the actual password entry. GUID names is mainly what you FF'd and it's contents after = sign below (which is not much)
AuthVarKeyDatabase = 00
VendorKeysNV = 01
MemoryOverwriteRequestControlLock = 00
RTC (Real Time Clock) = FF 07 00 00
RTC Alarm = 98 00 06 09 00 00 00 00 00 00 00 00 FF 07 00 00
CapsuleLongModuffer = AA (you only FF'd one byte of this modules GUID Header name entry, rest of GUID and module remains)
So, password still remains there, somewhere between 600000 and 640000, or something there is invoked to read the password from another location.
I looked but didn't recognize any modules that look to hold a password, but as I mentioned I'm not familiar with removing these passwords.
Can anuone help me remove password from original BIOS?
Here<--- is the original BIOS
Here<--- is the modded one with hex editor.
Thanks!
