Hi Everyone,

I apologize in advance if this question has been asked a million times before. But I want to Mod my Bios on my motherboard allow BCLK overclocking for my I7 6700.
I have been modding my current bios file which I have attached for the past 2 days and successfully rolled back the CPU microcode from C6 back to 74 (the last microcode which allows BCLK OC).

I then installed the BIOS 3805 with modded microcode no problem. But when I try to BCLK overclock I still can't post when I set the BCLK past 102.75. I also disabled MCupdate_genuineintel.dll so windows doesn't force a microcode on it.

Is there more to unlocking the bios than just modding the microcode? I am really lost at this point and decided to just bite the bullet and ask the pros for help.

Would love to hear what all your thoughts are.

My Modded bios file can be found here:
https://www.mediafire.com/file/ij8mk1t3p...S-3805.zip/file

You need to use BIOS 9006 which has since been removed from the official Asus website.

Fortunately you can still get it from this page on the ROG forums, or more specifically this link.

There are some drawbacks to using base clock oc as mentioned on the ROG page;

Zitat

---

Issues found so far

No IGPU
No dynamic change of CPU frequency
No C-states
No Turbo Mode
CPU temperature reading is incorrect
AVX instructions have very low performance
Windows XP ACPI not supported

After flashing set the following settings to make it boot into OS with correct CPU speed

Advanced\CPU Configuration
- Boot Performance Mode -> Turbo Performance

Advanced\CPU Configuration\CPU Power Management Configuration
- Intel(R) SpeedStep(tm) -> Disabled
- CPU C states -> Disabled

---

[Edit] You will likely need to use a SPI flash programmer to over-write the newer BIOS.

I have that Bios, I used that one to extract the correct microcode and place it onto 3805.

I also tried flashing 9006 straight using the AFUDOS but it booting up after flashing it brings me to the update screen in the Asus Bios saying "please select the .cap file to complete the update" where it then fails to read the 9006 bios file.

AFUDOS may not be able to overwrite all necessary areas of the BIOS chip, particularly if you updated to 3805 BIOS which has BIOS locks present.

Have you confirmed if your flash descriptor is not locked or if there is other (Asus) BIOS locks?

You can check by attempting to dump the full SPI chip using the correct Intel Flash Programming Tool (FPT) for your motherboard (Intel CSME System Tools v11) from this thread.

From an elevated command prompt try backing up the entire BIOS flash rom using the following command in Windows;

fptw64.exe -D backup.bin

If you get any errors post them here.

Zitat von chinobino im Beitrag #4

---

AFUDOS may not be able to overwrite all necessary areas of the BIOS chip, particularly if you updated to 3805 BIOS which has BIOS locks present.

Have you confirmed if your flash descriptor is not locked or if there is other (Asus) BIOS locks?

You can check by attempting to dump the full SPI chip using the correct Intel Flash Programming Tool (FPT) for your motherboard (Intel CSME System Tools v11) from this thread.

From an elevated command prompt try backing up the entire BIOS flash rom using the following command in Windows;

fptw64.exe -D backup.bin

If you get any errors post them here.

---

Really grateful for the help Chinobino!

I'm not quite sure by what you mean by dump the SPI chip using FPT.

But I did download the right tool and executed the command you gave me.

It gave me this error:

Error 318: The host CPU does not have read access to the target flash area. To enable read access for this operation you must modify the descriptor settings to give host access to this region.
FPT Operation Failed.

Edit: If I was to use the pin method to temporarily unlock my FD, then flash that older bios version 9006, will my board retain that bios version after a reboot? or will it revert back and brick itself?

By dumping the full SPI chip I just mean the entire BIOS flash chip/EEPROM.

Error 318 refers to locked ME Region [Edit] which blocks ME from being downgraded.

Can you please run the ME Info tool in verbose mode and post the output here? i.e.

meinfowin64 -verbose

Host write access is likely disabled.

This is what running verbose gave:

Intel(R) MEInfo Version: 11.8.70.3626
Copyright(C) 2005 - 2019, Intel Corporation. All rights reserved.




Windows OS Version : 10.0

FW Status Register1: 0x90000245
FW Status Register2: 0x06F60506
FW Status Register3: 0x00000420
FW Status Register4: 0x00084000
FW Status Register5: 0x00000000
FW Status Register6: 0x40000000

CurrentState: Normal
ManufacturingMode: Disabled
FlashPartition: Valid
OperationalState: CM0 with UMA
InitComplete: Complete
BUPLoadState: Success
ErrorCode: No Error
ModeOfOperation: Normal
SPI Flash Log: Not Present
FPF HW Source value: Not Applicable
ME FPF Fusing Patch Status: ME FPF Fusing patch NOT applicable
Phase: ROM/Preboot
ICC: Valid OEM data, ICC programmed
ME File System Corrupted: No
PhaseStatus: AFTER_SRAM_INIT
FPF and ME Config Status: Match
FW Capabilities value is 0x11111540
Feature enablement is 0x11111140
Platform type is 0x72220322
No Intel Wireless device was found
Intel(R) ME code versions:

Table Type 117 ( 0x 75 ) found, size of 0 (0x 00 ) bytes
BIOS Version 3805
Table Type 117 ( 0x 75 ) found, size of 0 (0x 00 ) bytes
Table Type 0 ( 0x 00 ) found, size of 66 (0x 42 ) bytes
Table Type 1 ( 0x 01 ) found, size of 131 (0x 83 ) bytes
Table Type 2 ( 0x 02 ) found, size of 108 (0x 6C ) bytes
Table Type 3 ( 0x 03 ) found, size of 98 (0x 62 ) bytes
Table Type 8 ( 0x 08 ) found, size of 16 (0x 10 ) bytes
Table Type 9 ( 0x 09 ) found, size of 28 (0x 1C ) bytes
Table Type 10 ( 0x 0A ) found, size of 33 (0x 21 ) bytes
Table Type 11 ( 0x 0B ) found, size of 131 (0x 83 ) bytes
Table Type 12 ( 0x 0C ) found, size of 130 (0x 82 ) bytes
Table Type 32 ( 0x 20 ) found, size of 22 (0x 16 ) bytes
Table Type 34 ( 0x 22 ) found, size of 29 (0x 1D ) bytes
Table Type 26 ( 0x 1A ) found, size of 29 (0x 1D ) bytes
Table Type 36 ( 0x 24 ) found, size of 18 (0x 12 ) bytes
Table Type 35 ( 0x 23 ) found, size of 27 (0x 1B ) bytes
Table Type 28 ( 0x 1C ) found, size of 29 (0x 1D ) bytes
Table Type 36 ( 0x 24 ) found, size of 18 (0x 12 ) bytes
Table Type 35 ( 0x 23 ) found, size of 27 (0x 1B ) bytes
Table Type 27 ( 0x 1B ) found, size of 30 (0x 1E ) bytes
Table Type 36 ( 0x 24 ) found, size of 18 (0x 12 ) bytes
Table Type 35 ( 0x 23 ) found, size of 27 (0x 1B ) bytes
Table Type 27 ( 0x 1B ) found, size of 17 (0x 11 ) bytes
Table Type 36 ( 0x 24 ) found, size of 18 (0x 12 ) bytes
Table Type 35 ( 0x 23 ) found, size of 27 (0x 1B ) bytes
Table Type 29 ( 0x 1D ) found, size of 27 (0x 1B ) bytes
Table Type 36 ( 0x 24 ) found, size of 18 (0x 12 ) bytes
Table Type 35 ( 0x 23 ) found, size of 27 (0x 1B ) bytes
Table Type 26 ( 0x 1A ) found, size of 29 (0x 1D ) bytes
Table Type 28 ( 0x 1C ) found, size of 29 (0x 1D ) bytes
Table Type 27 ( 0x 1B ) found, size of 30 (0x 1E ) bytes
Table Type 29 ( 0x 1D ) found, size of 27 (0x 1B ) bytes
Table Type 39 ( 0x 27 ) found, size of 184 (0x B8 ) bytes
Table Type 40 ( 0x 28 ) found, size of 65 (0x 41 ) bytes
Table Type 41 ( 0x 29 ) found, size of 26 (0x 1A ) bytes
Table Type 16 ( 0x 10 ) found, size of 25 (0x 19 ) bytes
Table Type 17 ( 0x 11 ) found, size of 106 (0x 6A ) bytes
Table Type 19 ( 0x 13 ) found, size of 33 (0x 21 ) bytes
Table Type 7 ( 0x 07 ) found, size of 29 (0x 1D ) bytes
Table Type 4 ( 0x 04 ) found, size of 187 (0x BB ) bytes
Table Type 20 ( 0x 14 ) found, size of 37 (0x 25 ) bytes
Table Type 130 ( 0x 82 ) found, size of 22 (0x 16 ) bytes
MEBx Version 0.0.0.0000
GbE Version 0.8
Vendor ID 8086
PCH Version 31
FW Version 11.8.50.3470 H
Security Version (SVN) 3
LMS Version 11.7.0.1043
MEI Driver Version 1815.12.0.2021
Wireless Hardware Version Not Available
Wireless Driver Version Not Available

FW Capabilities 0x11111540

Intel(R) Capability Licensing Service - PRESENT/ENABLED
Protect Audio Video Path - PRESENT/ENABLED
Intel(R) Dynamic Application Loader - PRESENT/ENABLED
Service Advertisement & Discovery - NOT PRESENT
Intel(R) NFC Capabilities - NOT PRESENT
Intel(R) Platform Trust Technology - NOT PRESENT

Re-key needed False
Platform is re-key capable True
TLS Disabled
Last ME reset reason Firmware reset
Local FWUpdate Enabled
BIOS Config Lock Enabled
GbE Config Lock Enabled
Get flash master region access status...done
Host Read Access to ME Disabled
Host Write Access to ME Disabled
Get EC region access status...done
Host Read Access to EC Disabled
Host Write Access to EC Disabled
Protected Range Register Base #0 0x0
Protected Range Register Limit #0 0x0
Protected Range Register Base #1 0x0
Protected Range Register Limit #1 0x0
Protected Range Register Base #2 0x0
Protected Range Register Limit #2 0x0
Protected Range Register Base #3 0x0
Protected Range Register Limit #3 0x0
Protected Range Register Base #4 0x0
Protected Range Register Limit #4 0x0
SPI Flash ID 1 EF4018
SPI Flash ID 2 Unknown
BIOS boot State Post Boot
OEM ID 00000000-0000-0000-0000-000000000000
Capability Licensing Service Enabled
OEM Tag 0x00000000
Slot 1 Board Manufacturer 0x00000000
Slot 2 System Assembler 0x00000000
Slot 3 Reserved 0x00000000
M3 Autotest Disabled
C-link Status Disabled
Independent Firmware Recovery Disabled
EPID Group ID 0x1F82

Retrieving Variable "LSPCON Port Configuration"
LSPCON Ports None

Retrieving Variable "eDP Port Configuration"
5K Ports None
OEM Public Key Hash FPF 0000000000000000000000000000000000000000000000000000000000000000

Retrieving Variable "OEM Public Key Hash"
OEM Public Key Hash ME 0000000000000000000000000000000000000000000000000000000000000000
ACM SVN FPF 0x0
KM SVN FPF 0x0
BSMM SVN FPF 0x0
GuC Encryption Key FPF 0000000000000000000000000000000000000000000000000000000000000000

Retrieving Variable "GuC Encryption Key"
GuC Encryption Key ME 0000000000000000000000000000000000000000000000000000000000000000

FPF ME
--- --
Force Boot Guard ACM Disabled
Retrieving Variable "Force Boot Guard ACM Enabled"
Disabled
Protect BIOS Environment Disabled
Retrieving Variable "Protect BIOS Environment Enabled"
Disabled
CPU Debugging Enabled
Retrieving Variable "CPU Debugging"
Enabled
BSP Initialization Enabled
Retrieving Variable "BSP Initialization"
Enabled
Measured Boot Disabled
Retrieving Variable "Measured Boot Enabled"
Disabled
Verified Boot Disabled
Retrieving Variable "Verified Boot Enabled"
Disabled
Key Manifest ID 0x0
Retrieving Variable "Key Manifest ID"
0x0
Enforcement Policy 0x0
Retrieving Variable "Error Enforcement Policy"
0x0

BIOS 3850 has updated your ME firmware to 11.8.50.3470 H which is stopping you from downgrading the ME FW to 11.0.0.1168 H in BIOS 9006.

At this point it would be a good idea to make a backup of your entire BIOS chip as it contains important info such as UUID, serial number and MAC address that is unique to your motherboard that you could lose if the motherboard is bricked.

The easiest way to do this is to buy a cheap SPI flash programmer like the CH341A, there are some guides to using it here and here.

Two benefits of using a programmer are that you can bypass the BIOS locks easily and also verify the downgrade was successful.

If you don't want to use a programmer then you can attempt to unlock the FD using either the HD Audio pin mod method or changing setup variable via efi shell method, both of which are documented on this thread, please make a full BIOS backup once you unlock the ME region and before you attempt to downgrade to 9006.

I need to bump this thread..

Anyone knows download link for the 9006 bios? Dropbox link is dead. Instead, I found one from mediafire (94al1ay2ucvedz7/Z170I-PRO-GAMING-ASUS-9006.zip/file) but trying to flash it motherboard just says "not proper bios". Any way to verify the file or force flash ?
I tried same USB stick with official bios files and motherboard reads and is ready to flash those. So USB should be properly formatted etc..

I am currently running bios 3406 and ME FW 11.0.0.1168.
Should be possible to flash to 9006 bios if I just can fing the correct file?

Welcome @poiu I downloaded the 9006 BIOS from your mediafire link and compared it to the version from the dropbox link and verified that the hashes are identical.

BIOS 3406 has ME FW 11.6.10.1196 - are you 100% sure you are still running ME FW 11.0.0.1168? You can check by running meinfowin64 from an elevated command prompt, you can download CSME System Tools v11 r37 from this thread.

CSME System Tools v11 r37 also include Intel FPT which you can use to check if you have BIOS locks present that prevent you from downgrading the BIOS.

From an elevated command prompt try backing up the entire BIOS flash rom using the following command in Windows;

fptw64.exe -D backup.bin

If you get any errors post them here, it is very likely that Asus will have locked the flash descriptor (see [Guide] Unlock Intel Flash Descriptor Read/Write Access Permissions for SPI Servicing and [GUIDE] Grub Fix Intel FPT Error 280 or 368 - BIOS Lock Asus/Other Mod BIOS Flash).

In any case you should make a complete backup of your BIOS chip before you attempt the downgrade as you can lose your motherboard serial number, UUID and ethernet MAC address if the flash fails for any reason.

I would recommend purchasing a BIOS programmer (such as the cheap CH341A) and a SOIC8 Test Clip to backup the current BIOS and flash it with BIOS 9006.

There are some good guides (with images) here and here, if you are not familiar with the process.

Thank you for the information.

Yes, I´m sure those were the versions visible in bios (3406 and ME 11.0.0.1168)
BUT, then I downgraded to 3405 (taken from Asus site) and it upgraded ME to something newer !??? I had an idea that older bios would allow flashing to 9006 but didnt realize ME could be upgraded with older bios.

Do you know is there any bios in Asus site with ME 11.0.0.1168?

Maybe the best thing is to buy the programmer as you said.

@poiu Yes, once you have upgraded ME on an Asus motherboard it can be difficult to roll back to an earlier version - a programmer makes everything easier (both backing up and flashing).