@lvqier Exactly as same as your problem. There are two places where MSR 0x122 is set. But the problem is they have different value. You can just look for 0x122 in cutter/radare2 that you just used. The problem is just same, EM64T locked in the machine

@lvqier, sorry I couldn't attach so much details because I was on my phone. But here is my problem.

Just like you, I have two places where 0x122 is set. I am attaching the screenshot for reference. I just want to know what setting two and then one means. Does it involve any other MSRs right here? Please have a look into the image. In UEFITool, the modules with 0x122 are OemItl15Callback and a PEI module with numbers as name. Please have a look at the BIOS and these screenshots.

@Alif Sorry for late reply. Instruction ‘or eax, 2’ means make bit[1] of the number in eax set to 1, then ‘or eax,1’ means make bit[0] of the number in eax set to 1. While 3 = 1 or 2, it is same as ‘or eax,3’ if you combine those two together.
I have no time to make deep analysis for you this week due to heavy work, but next week will be fine.

Okay, @lvqier, Thanks a lot for your look-into the issue, I will be looking forward for further info. But the thing is, these two places where 0x122 is set is on two different places. The first one where 2 is set is in a DXE volume. But the place where 1 is set is in a PEI module. I just can't get over this confusion.

Hello @lvqier, hope you are doing good. If you get some free time shall we look into my issue as well? I seriously need this and this would be a huge help to hear about your opinion, afterall I have no experience in x86 assembly.
Thanks

@Alif I think the 0x122 occurrences in OemItl15Callback is not the right place. I have compared the code shown in your first image with OemItl15Callback, they are not same. Did you extract all PE32 images to find 0x122?

@lvqier Sorry this was taken from the whole bios binary, not from the module. I did also see the OemInt15Callback module. And the code is simillar. Just the 0x122 is repeated in three graphs, with 2 being set. It's late night now, I will send you more detailed pictures tomorrow morning. It would be very helpful if you have a look into the image still, and thanks

@lvqier Sorry for being lte but here is the image from the OEMInt15Callback module and the TE part of PEI module. Hope you can find out something....

@Alif Based on my experience, the 0x122 occurrences in the TE image is the right place. It is worth to make a try to nop out 'or eax,2' and 'or eax,1' that shown in you image.
Just like this:


Be careful with the verge of brick, good luck!

@lvqier Thanks a lot sir! Just in case it fails to enable x64, I will tell you again, other than that, I know how to deal with RSA and bricks. Thanks again!