ok

@Lost_N_BIOS
Hello my friend. I have tried many methods these days, but I still haven't flushed my modified BIOS. I don't know what to do.

@guangzhishun - Use my guide I linked in post #14, you would be done by now
Here is what you type at grub screen prompt >> Setup_var 0xA12 0x0
Then control alt delete to windows, run following two commands (Backup.bin, keep save, do not edit, if you want to edit it and use that as your mod (Suggested) make a copy to edit)
Run first >> FPTw -bios -d backup.bin
Run second >> FPTw -bios -f modbiosfilename.bin

You need to use FPT from matching Intel ME System Tools package in C.2 section of this thread, that matches your Intel ME FW version (Check on main page of BIOS, or with HWInfo64 app, in large window >> Motherboard section >> ME >> ME FW
Intel Management Engine: Drivers, Firmware & System Tools

If you get size warning using FPT, stop there upload final modified BIOS you are using, and show me screenshot of command entered and error all in one image. Do not attempt to move forward!

Or, if that is too involved, use last link method on post #14 to Linustechtips site.

Can I buy a machine directly connected to the chip for BIOS refresh?

Use this method, it's easiest way, see spoiler "Flashing the Modified UEFI" After you download package on that page from "Prerequisites" section, you only need afuwinx64.exe folder/files, rest you can ignore
https://linustechtips.com/main/topic/592...r-motherboards/

Or yes, you can buy hardware flash tools, you need CH341A flash programmer and SOIC8 test clip cable ($2.50 + $3.50 on ebay)

OK,Thanks

Hope you can get it, this can be done many ways without having to use hardware programmer (And waiting 3-5 weeks for that to arrive, plus you have to learn how to use it too, so may be new struggle there)

Hello,
Since I was looking for help in modding the Setup of the bios for this laptop I own, I just saw this thread and feel the need to share some days of research, test, success, etc :')
I successfully flashed a modified bios but it needs one more UEFI variable to be edited : Me FW Image Re-Flash, 0x7BD to be switched also. This because FPTW was giving me an error about Flash Protection Range Registers.
So now I can freely flash a modded Bios from now.

But I need help with unlocking features with AMIBCP ( or UEFITool maybe ... ).
I tried switching many sections to USER access and discovered that only a small portion is showing in the bios and also that this is somwhat messy in there :)
I'm starting to think that the bios setup interface used is taking only some sections of Setup file in UEFI bios and building its own menu.
I'm looking for a way to show missing features by editing Setup directly like for example changing reference of one entry to another using UEFITool and modding PE32 image section directly. This seems a little complicated and maybe someone can help me find a simplier way ...
I will post some screenshot of amibcp to be more precise and show why I think it is messy also because i'm not sure my english is always that good haha :)
The main problem here is that Setup have a Advanced section with many features to unlock but the advanced section shown in the bios is another one.

EDIT 1 :
Forgot to mention one important thing, I ran into a problem when using setup_var with modified grub efi image because there are 2 Setup variable and it will try to change the wrong one with a out of range error...
To change the UEFI variables I used RU tool and did the modficiation manually ... Also found a github project talking about this case with a modified grub source. did not try it because it needs to be compiled and I don't have linux right now so I used RU :)
for the ppl interested : grub-mod-setup_var

EDIT 2 ; screenshots


In green sections we can edit to show a little more and what we can actually see in bios setup
In blue the advanced section I want to add but not the same as the advanced section in green...


Hidden advanced section with a lot of settings.


Here is an example of what we can found before going down to the real menu.
Some kind of default menu from ami bios ? not available in bios seetings neither

Thanks @Lugburz - that would need edited if you are updating Intel ME, or trying to flash the entire BIOS. FPRR has nothing to do with the ME Re-flash setting. If FPRR is set here, I will disable for him via assembly
For now, we're only going to do a BIOS region update, so removing BIOS Lock should be plenty unless FPRR is locking that region too, which I doubt.

I have that grub I think, with Setup_Var2 and Setup_Var3 commands.

AMIBCP changes NVRAM settings, other changes must be made to the setup module of the BIOS itself.
Some AMIBCP settings will work, some will only work once a setup mod also done, others may never work or require an entirely different mod (@Chipset)

You're English is fine!

Advanced can be done a few ways, possibly with AMIBCP, if not via Setup module and IFR/Hex, usually it's the easy one to enable vs Chipset.
I looked though, and you are correct, it's a mess in there! Not sure how to enable that Advanced, it's doesn't look possible with AMIBCP or IFR/Hex (Nothing is suppressed, looks like it should be visible in IFR, but we know it's not)
Except maybe this (Same form ID as other Advanced, but Question ID 2A throws me off, but blank name again makes this think this might be it
Suppress If {0A 82}
0x28635 QuestionId: 0xD4A equals value in list (0xFFFF) {14 08 4A 0D 01 00 FF FF}
0x2863D Ref: , VarStoreInfo (VarOffset/VarName): 0xFFFF, VarStore: 0x0, QuestionId: 0x2A, FormId: 0x2712 {0F 0F 02 00 02 00 2A 00 00 00 FF FF 00 12 27}
0x2864C End If {29 02}

Maybe I changed 2 vars in the same times and made me think FPRR was needed, I tried so many things you know ... It's the first time i'm digging that much with bios modding.

I can test some things if you have ideas but you have to know before that I'm not really familliar with this IFR (langage or whatever it is) I just looked some to help me understand the bios setup but i'm still trying to figure what all of this means lol
I was mostly thinking about changing a reference from an existing section like SMART settings to redirect to the advanced form and change the SMART settings label in AMIBCP to Advanced2 for example.
It's more like a trick than a proper solution but i'm just a rookie in this and can't see a better way :)

You probably unlocked BIOS lock and ME reflash, to flash entire BIOS + ME section, FPRR cannot be undone via simple var edit. IFR is a textual output of certain BIOS modules you can get sometimes, you use this with hex editing to unlock/switch/enable things permanently in the BIOS itself.
Check out my guide for BIOS lock edit, it will show you how to get setup IFR and then using that you can edit in hex instead of changing at grub screen. - [GUIDE] Grub Fix Intel FPT Error 368 - BIOS Lock Asus/Other Mod BIOS Flash
Same thing, edit in hex, or at grub only grub changes the setting in the currently flashed BIOS and hex changes it permanently into the next BIOS you flash in so that grub edit not needed next time.

Small guide I made here for IFR edit to enable ME Reflash
Intel Management Engine: Drivers, Firmware & System Tools (272)

Editing along the lines you mentioned is way more involved than that, here's a guide one of our forum members Mov AX, 0xDEAD wrote for doing similar to what you just mentioned, it's a ton of advanced work
https://forums.overclockers.ru/viewtopic.php?f=25&t=599984

See also, pages 14-16 for his discussion here about that
[Request] How to Access Locked/Hidden BIOS Menu Settings (14)

Thanks for your support Lost_N_BIOS :)

I will look into all of this and re-read the GUIDE (already know this one, it helped me to find the Bios lock :) )
Not sure I will be able to find something as I don't have much time ( doing this as a hobby and also unhappy Asus customer ...)
In fact, all of this started with the idea to run DIY Egpu and needed CSM support (which I successfully unlocked in AMIBCP) to run a specific tool. But i'm looking now for a way to disable the discrete GPU (PCI express port access)
Happy to be able to unlock some of the bios options, It would be great if I could unlock some overclocking features too.

Anyway, i'll dig a little deeper into this and report anything good (or bad if you're ok to give more help :') ) but i'm not really sure I will success :')

From here what I can do is changing values of hidden section directly in Setup UEFI variable (RU or setup_var) with the corresponding Hex value, if I understand right ?

And what about changing the optimal value in AMIBCP and flashing the edited bios ?

EDIT . link to overclockers russian forum does not show anything for me, got a blank page :(

Ok I looked at the IFR section you where mentionning and now I understand what you're saying ... a little haha

0x2863D Ref: , VarStoreInfo (VarOffset/VarName): 0xFFFF, VarStore: 0x0, QuestionId: 0x2A, FormId: 0x2712 {0F 0F 02 00 02 00 2A 00 00 00 FF FF 00 12 27}

So there is a blank reference here that should be applied if the condition is meet ?
I don't quite understand the condition, 0xD4A is the location of the value to test ? I can understand equals value 0x0 for example but equals value in list ? what list ? where is this list? is it a list of value ?
Is the blank name means it apply a blank name to the advanced form with id 0x2712 ?

Made some more search about this ( maybe I shouldn't make so much post :/ )

I found this

0x4CB53 Suppress If {0A 82}
0x4CB55 QuestionId: 0xD4A equals value in list (0xFFFF) {14 08 4A 0D 01 00 FF FF}
0x4CB5D Gray Out If {19 82}
0x4CB5F QuestionId: 0xD42 equals value 0x1 {12 06 42 0D 01 00}
0x4CB65 Ref: , VarStoreInfo (VarOffset/VarName): 0xFFFF, VarStore: 0x0, QuestionId: 0xD29, FormId: 0x2712 {0F 0F 02 00 02 00 29 0D 00 00 FF FF 00 12 27}
0x4CB74 End If {29 02}
0x4CB76 End If {29 02}

Inside the advanced form shown in the bios
Should be a reference to the other advanced form but hidden because it doesn't have any label ?
If all of this is extracted in the right order it could be shown between EZ Flash 3 Utility and SMART settings in the advanced tab ... but it needs a valid Reference name right ?


Should be located here I think

Also, 0xD4A is it a location in Setup UEFI variable ? if yes, maybe it needs a specific value to be set (but still does not understand "in list" )


Here is a screenshot of the actual advanced tab (with all I could unlock), I realize there is rapid storage settings between those two

EDIT :
Also understood the code you were talking about :

0x28617 Ref: SDIO Configuration, VarStoreInfo (VarOffset/VarName): 0xFFFF, VarStore: 0x0, QuestionId: 0x29, FormId: 0x27E5 {0F 0F 43 16 44 16 29 00 00 00 FF FF 00 E5 27}
0x28626 Subtitle: Statement.Prompt: , Flags: 0x0 {02 87 02 00 00 00 00}
0x2862D End {29 02}
0x2862F Suppress If {0A 82}
0x28631 QuestionId: 0xD4A equals value in list (0xFFFF) {14 08 4A 0D 01 00 FF FF}
0x28639 Ref: , VarStoreInfo (VarOffset/VarName): 0xFFFF, VarStore: 0x0, QuestionId: 0x2A, FormId: 0x2712 {0F 0F 02 00 02 00 2A 00 00 00 FF FF 00 12 27}
0x28648 End If {29 02}
0x2864A Subtitle: Statement.Prompt: , Flags: 0x0 {02 87 02 00 00 00 00}
0x28651 End {29 02}
0x28653 Suppress If {0A 82}
0x28655 QuestionId: 0xE4E equals value in list (0xFFFF) {14 08 4E 0E 01 00 FF FF}
0x2865D Ref: Driver Health, VarStoreInfo (VarOffset/VarName): 0xFFFF, VarStore: 0x0, QuestionId: 0x2B, FormId: 0x282B {0F 0F 67 00 68 00 2B 00 00 00 FF FF 00 2B 28}
0x2866C End If {29 02}


1st Subtitle is the 1st blank entry
blank ref (from itself ?) 2nd blank entry
2nd Subtitle is the 3rd blank entry

I think making this one
0x4CB65 Ref: , VarStoreInfo (VarOffset/VarName): 0xFFFF, VarStore: 0x0, QuestionId: 0xD29, FormId: 0x2712 {0F 0F 02 00 02 00 29 0D 00 00 FF FF 00 12 27}
appear should give access to the advanced form but i don't know how to add a valid reference to it instead of the blank one

EDIT 2 :
This time I made it with your help and the links from other threads you gave me :) you were correct about thinking it could be this blank entry, and luckily it was also present where we could see it in the bios menu.
To put it simple I replaced some HEX values and checked the change with IFR extracted

So I changed

0x4CB53 Suppress If {0A 82}
0x4CB55 QuestionId: 0xD4A equals value in list (0xFFFF) {14 08 4A 0D 01 00 FF FF}
0x4CB5D Gray Out If {19 82}
0x4CB5F QuestionId: 0xD42 equals value 0x1 {12 06 42 0D 01 00}
0x4CB65 Ref: , VarStoreInfo (VarOffset/VarName): 0xFFFF, VarStore: 0x0, QuestionId: 0xD29, FormId: 0x2712 {0F 0F 02 00 02 00 29 0D 00 00 FF FF 00 12 27}
0x4CB74 End If {29 02}
0x4CB76 End If {29 02}

To be :

0x4CB53 Suppress If {0A 82}
0x4CB55 False {47 08 4A 0D 01 00 FF FF}
0x4CB5D Gray Out If {19 82}
0x4CB5F QuestionId: 0xD42 equals value 0x1 {12 06 42 0D 01 00}
0x4CB65 Ref: Advanced, VarStoreInfo (VarOffset/VarName): 0xFFFF, VarStore: 0x0, QuestionId: 0x2, FormId: 0x2712 {0F 0F 1E 00 02 00 02 00 00 00 FF FF 00 12 27}
0x4CB74 End If {29 02}
0x4CB76 End If {29 02}

And voila ! Advanced menu is showing in advanced menu :') between the two entries I mentionned earlier.
Rapid storage menu moved by itself in the end of 2nd advanced menu
The only problem is that it does not show the advanced entry in AMIBCP and honestly I don't really want to dig into amitseSetupData to find the corresponding values etc ...
This is enough to unlock it in bios and I'm happy with it :)