CBS Menu unlock, when it's not locked in the IFR

[nero243]

Hi,
I'm having problems unlocking the CBS Menu for Supermicro mainboards. I posted in the winraid forum before, but that went nowhere. So i got a little more insight how things work now but i stilll can't figure out how Supermicro locked away the Menu.

Code:

0xAA1C         Form Set: AMD CBS [B04535E3-3004-4946-9EB7-149428983053], ClassGuid0 [93039971-8545-4B04-B45E-32EB8326040E] {0E A7 E3 35 45 B0 04 30 46 49 9E B7 14 94 28 98 30 53 03 00 02 00 01 71 99 03 93 45 85 04 4B B4 5E 32 EB 83 26 04 0E}
0xAA43             Guid: [0F0B1735-87A0-4193-B266-538C38AF48CE] {5F 15 35 17 0B 0F A0 87 93 41 B2 66 53 8C 38 AF 48 CE 03 55 00}
0xAA58             Guid: [0F0B1735-87A0-4193-B266-538C38AF48CE] {5F 15 35 17 0B 0F A0 87 93 41 B2 66 53 8C 38 AF 48 CE 04 00 00}
0xAA6D             Default Store: en-US, DefaultId: 0x0 {5C 06 00 00 00 00}
0xAA73             Default Store: en-US, DefaultId: 0x1 {5C 06 00 00 01 00}
0xAA79             VarStore: VarStoreId: 0x5000 [3A997502-647A-4C82-998E-52EF9486A247], Size: 0x138, Name: AmdSetup {24 1F 02 75 99 3A 7A 64 82 4C 99 8E 52 EF 94 86 A2 47 00 50 38 01 41 6D 64 53 65 74 75 70 00}
0xAA98             Form: AMD CBS, FormId: 0x7000 {01 86 00 70 03 00}
0xAA9E                 Subtitle: Statement.Prompt: AMD CBS, Flags: 0x0 {02 87 03 00 00 00 00}
0xAAA5                 End {29 02}
0xAAA7                 Subtitle: Statement.Prompt: , Flags: 0x0 {02 87 02 00 00 00 00}
0xAAAE                 End {29 02}
0xAAB0                 Ref: Zen Common Options, VarStoreInfo (VarOffset/VarName): 0xFFFF, VarStore: 0x0, QuestionId: 0x1, FormId: 0x7001 {0F 0F 04 00 04 00 01 00 00 00 FF FF 00 01 70}
0xAABF                 Ref: DF Common Options, VarStoreInfo (VarOffset/VarName): 0xFFFF, VarStore: 0x0, QuestionId: 0x2, FormId: 0x7002 {0F 0F 05 00 05 00 02 00 00 00 FF FF 00 02 70}
0xAACE                 Ref: UMC Common Options, VarStoreInfo (VarOffset/VarName): 0xFFFF, VarStore: 0x0, QuestionId: 0x3, FormId: 0x7003 {0F 0F 06 00 06 00 03 00 00 00 FF FF 00 03 70}
0xAADD                 Ref: NBIO Common Options, VarStoreInfo (VarOffset/VarName): 0xFFFF, VarStore: 0x0, QuestionId: 0x4, FormId: 0x7004 {0F 0F 07 00 07 00 04 00 00 00 FF FF 00 04 70}
0xAAEC                 Ref: FCH Common Options, VarStoreInfo (VarOffset/VarName): 0xFFFF, VarStore: 0x0, QuestionId: 0x5, FormId: 0x7005 {0F 0F 08 00 08 00 05 00 00 00 FF FF 00 05 70}
0xAAFB                 Suppress If {0A 82}
0xAAFD                     QuestionId: 0x7 equals value 0x2 {12 86 07 00 02 00}
0xAB03                         Not {17 02}
0xAB05                         QuestionId: 0x7 equals value 0x4 {12 06 07 00 04 00}
0xAB0B                         Not {17 02}
0xAB0D                         And {15 02}
0xAB0F                         64 Bit Unsigned Int: 0x0 {45 0A 00 00 00 00 00 00 00 00}
0xAB19                         64 Bit Unsigned Int: 0x0 {45 0A 00 00 00 00 00 00 00 00}
0xAB23                         Equal {2F 02}
0xAB25                         Or {16 02}
0xAB27                     End {29 02}
0xAB29                     Ref: NTB Common Options, VarStoreInfo (VarOffset/VarName): 0xFFFF, VarStore: 0x0, QuestionId: 0x6, FormId: 0x7007 {0F 0F 0A 00 0A 00 06 00 00 00 FF FF 00 07 70}
0xAB38                 End If {29 02}

If you look here at the beginning of the IFR file all the "Ref:" options are not in a Suppress if function so they should be visible, but well the whole AMD CBS Tab is gone. Where can i find the suppress function for it, or is something different deleted/changed?

Also i tried to unlock another option in the normal setup and just moved it out of the Suppress if and End if, which didn't work. Am i doing something wrong? I know i could've just made the "True 46 02" to "False 47 02", but you don't always have menus suppressed like that and i wanted to test the other method.

Code:

0x1BF9A         Suppress If {0A 82}
0x1BF9C             True {46 02}
0x1BF9E         End If {29 02}
0x1BFA0         Ref: Chipset, VarStoreInfo (VarOffset/VarName): 0xFFFF, VarStore: 0x0, QuestionId: 0x3, FormId: 0x2713 {0F 0F 19 00 02 00 03 00 00 00 FF FF 00 13 27}

In tried to find out which "module" is responsible for the locked menu and just implanted the whole setup and structure (Setup, CBSsetupDXE, AMITSEsetupdata and all other menus) from a different mainboard with a unlocked CBS Menu. This did surprisingly post and work but the CBS menu was still gone. I know this is not how to do stuff, but i need to find out where to find the reason for the lock.

So any help and explaining is greatly appreciated.

Edit:

So i found this pattern in the AMITSESetupData, this is the file where AMIBCP makes changes and your setuplayout is stored. Has anyone worked with this kind of lock before?

Edit:

So zeroing out the ** FFs unlocks menus, but it's not enough to just zero out the Option that gets marked with 05 by AMIBCP. When replacing the Chipset FC FF... i replaced all strings with FC FF.. Well Chipset didn't show up but two other useless hidden Options from another menu. It could also be that my IFR edit is wrong and the Chipset is still suppressed because of that.

Edit: NVM, i think i found my answers here: https://www.win-raid.com/t4386f16-OverPo...Files.html

The AMD CBS Form entry is completly missing in the AMITSE PE32

Can i just copypasta this back in?

[nero243]

Solution: replace something you don't need with the CBS entry in AMITSE. Unlock all submenus via IFR in CbsSetupDXE and AMIBCP. IDK how to reassemble the AMITSE PE32 with added entries.