HP Unlocker: Remove admin passwords from HP UEFI/BIOS images. Need help? Contact me for professional BIOS repair services in Germany: https://georg-sieber.de/?page=blog-bios

HPUnlocker.py

#!/usr/bin/python3
# Python 3.7.0 (v3.7.0:1bf9cc5093, Jun 27 2018, 04:59:51) [MSC v.1914 64 bit (AMD64)]

import mmap, shutil, sys

if len(sys.argv) != 2:
    print('Please provide a HP BIOS image .bin file as first parameter!')
    sys.exit(1)

path = sys.argv[1]
splitpath = path.split('.')
newpath = splitpath[0] + '_unlocked.' + splitpath[1]
shutil.copyfile(path, newpath)
loc_old = 0
word = b'U\x00s\x00e\x00r\x00C\x00r\x00e\x00d'
oldword = b'$VSS'
oldword_key = b'B\x00i\x00o\x00s\x00U\x00s\x00e\x00r'
oldword_end = b'\xaaU'

with open(newpath, 'r+') as (f):
    with mmap.mmap(f.fileno(), 0) as (m):
        m.seek(0)
        loc = m.find(oldword)
        if loc == -1:
            m.seek(0)
            loc = m.find(word)
            if loc == -1:
                print('ERROR: Unable to find HP BIOS password - is this a correct HP BIOS image?')
                sys.exit(1)

            print('New BIOS detected')
            for j in range(0, 100):
                if j > 9 and j < 14:
                    m[loc + 16 + j:loc + 17 + j] = b'\xff'
                else:
                    m[loc + 16 + j:loc + 17 + j] = b'\x00'

        else:
            print('Old BIOS detected')
            while True:
                loc_start = m.find(oldword_key, loc_old + 2)
                loc_len = m.find(oldword_end, loc_start) - loc_start - 22
                print(loc_start)
                if loc_start == -1:
                    break
                for i in range(0, loc_len):
                    m[loc_start + 22 + i:loc_start + 23 + i] = b'\xff'

                loc_old = loc_start

            m.flush()
            m.seek(0)
            f.seek(0)

        print('OK')

Hello, do you have to drop the bin on this file and it generates an unlocked bin?

If you compile this script with pyinstaller into an .exe, you can drop a .bin file on it.

Otherwise, if you just execute it with python, simply provide the path to the .bin as first command line parameter.
python3 HPUnlocker.py myfile.bin

(Dropping a file onto an .exe is exactly the same: Windows appends the path of the dropped file as first command line parameter.)

Hi, could you please provide all the steps?
How do I get the .bin file, and when I execute the script, what do I do with it?

Hello, is this tool can unlock hp elitebook 640 g9 bios locked.bin?
I currently, looking for alternative to old hp unlocker or rcunlocker so I just want to know if this one will work. Thanks

Probably... why not give it a try and let us know here? @arvinzx20

Thanks for the reply, @schorschii but the problem is it seems this tool looks like the same as the RCunlocker and hpunlocker it doesn't work to me except for older hp laptops 2018 below. The reason why I ask this is if this is the same as these two tools or if this is the updated one that supports modern units.?
I mean, it usually supports only for 16mb but for laptop like EliteBook 640 g9 bios with winbond it's 32mb size so do you think this one will work?

Thanks for the reply, @schorschii but the problem is it seems this tool looks like the same as the RCunlocker and hpunlocker it doesn't work to me except for older hp laptops 2018 below. The reason why I ask this is if this is the same as these two tools or if this is the updated one that supports modern units.? I mean, it usually supports only for 16mb but for laptop like EliteBook 640 g9 bios with winbond it's 32mb size so do you think this one will work?

Hi. Did you get the unlocker for g9?