Forum RSS Feed Follow @ Twitter Follow On Facebook

Thread Rating:
  • 1 Vote(s) - 3 Average
  • 1
  • 2
  • 3
  • 4
  • 5
[-]
Welcome
You have to register before you can post on our site.

Username:


Password:





[-]
Latest Threads
Dell precision t3610/unlock sli
Last Post: Ottoman95
Yesterday 11:38 AM
» Replies: 0
» Views: 106
elitebook 840 g5 ryzen
Last Post: phozac
Yesterday 08:13 AM
» Replies: 0
» Views: 83
[REQUEST] Acer Nitro 5 AN515-45 unlockbi...
Last Post: Dudu2002
Yesterday 02:49 AM
» Replies: 3
» Views: 196
[REQUEST] Lenovo Z50-70 & Z40-70 (9BCNxx...
Last Post: Echo216
01-30-2026 11:54 AM
» Replies: 761
» Views: 403445
[REQUEST] Lenovo G710 BIOS Whitelist Rem...
Last Post: hait777
01-30-2026 10:25 AM
» Replies: 501
» Views: 278595
[Request] BIOS Dump/Backup of Lenovo T50...
Last Post: Rapadura
01-29-2026 02:48 PM
» Replies: 2
» Views: 3866
Hp probook 6560B Upgrade to Ivy Bridge
Last Post: DeathBringer
01-29-2026 12:19 PM
» Replies: 8
» Views: 806
[REQUEST] acer nitro 5 AN515-58 597M
Last Post: Dnetford
01-29-2026 07:57 AM
» Replies: 0
» Views: 166
[REQUEST] Lenovo B590 (H1ETxxWW) Whiteli...
Last Post: ozowelsh
01-29-2026 03:46 AM
» Replies: 799
» Views: 514024
HP G72-b60US advanced menu unlock
Last Post: bigcid10
01-28-2026 06:38 PM
» Replies: 4
» Views: 7606
[REQUEST] Lenovo B580 (H1ETxxWW) Whiteli...
Last Post: lamirekhalihana
01-27-2026 04:24 PM
» Replies: 162
» Views: 86784
[REQUEST] Lenovo Y400 & Y500 (6BCNxxWW) ...
Last Post: Dudu2002
01-27-2026 03:33 AM
» Replies: 161
» Views: 101422
HP ProDesk 400 G1 DM: New CPU Support
Last Post: Rubilnik
01-26-2026 12:55 PM
» Replies: 19
» Views: 7527
(Request) Hp Reno (89B5) bios to support...
Last Post: DeathBringer
01-26-2026 12:49 AM
» Replies: 1
» Views: 263
BIOS MOD FOR DELL N7110 UNLOCKED UEFI BO...
Last Post: shopbody
01-25-2026 06:26 AM
» Replies: 36
» Views: 76173
ASUS TUF FX504GD BIOS Unlock Request
Last Post: steelray124
01-24-2026 05:04 AM
» Replies: 30
» Views: 15547
Request for BIOS Unlock / Undervolt Supp...
Last Post: hakeristss
01-23-2026 05:31 PM
» Replies: 1
» Views: 1340
[REQUEST] Dell Inspiron N5110 BIOS Unloc...
Last Post: memzsalvatore
01-23-2026 03:48 PM
» Replies: 11
» Views: 6523
[REQUEST] Lenovo G40-70 (9ACNxxWW) White...
Last Post: LevyBrandon
01-22-2026 08:03 AM
» Replies: 39
» Views: 22343
custom Bios for ECS P5SD-A to support LB...
Last Post: GusG
01-21-2026 04:54 PM
» Replies: 0
» Views: 406

[Mod request] X99S SLI PLUS ( Can pay for service )
#1
I need hidden options enabled. specifically i am looking to enable 64 bit pci addressing. I found some other names for the bios option I need to be able to enable.
Also any other hidden options would be nice to have revealed. I am not sure if it is allowed, but i can compensate someone who dedicates time to making this happen.

on an Intel board you may find something like; "Memory Mapped I/O above 4GB [Enable]"

on an ASUS board it will probably look like; "PCI 64bit Resource Handling Above 4G Decoding [Enabled]"

You might also see something referring to "MMIO above 4G" or maybe even "large BAR support".


Link to motherboard: http://us.msi.com/product/mb/X99S-SLI-PLUS.html
Link to BIOS: http://download.msi.com/bos_exe/7885v17.zip
find
quote
#2
Hi friend,

Here is the last AMIBCP version 4.55 :

http://rghost.net/59893020

Here is a Tutorial to modify AMI Aptio Bios :

http://forums.mydigitallife.info/threads...MSR-unlock!

Follow CodeRush Suggestions :

It's certanly not so easy for BIOSes with another menu setup, but the whole idea is the same.
I could also recommend trying AMIBCP to modify menu entries vilibility from "Default" to "USER",
if your menu setup is more complex then a setup above.

I have to flash my image on the administrator commandline using afuwinx64 bios_mod.rom /GAN . . .
Otherwise it gives me a security error (Thanks again CodeRush)

Let me know
Regards

P.S. your Bios probably is RSA Signed so To reflash You will have to use FPT so let me know !

[size=undefined]Your Brain [/size]. . . . It's the best tool U can use ! Wink
[size=undefined]Don't FLASH the Bios Mod if You get a Size Alert, You risk a Brick !!! [/size]
Donate to me for my work, click here BDM
find
quote
#3
I have found these strings, Just not sure yet on how to do the hex edit to change them.

Code:
0x34162         Setting: Above 4G Decoding, Variable: 0x21B    {05 91 D6 04 D7 04 25 03 01 00 1B 02 10 10 00 01 00}
0x34173             Option: Disabled, Value: 0x0 (default) {09 07 04 00 10 00 00}
0x3417A             Option: Enabled, Value: 0x1            {09 07 03 00 00 00 01}


If {29 02}
0x36EE7         Grayout If: {19 82}
0x36EE9             Variable 0x43A equals 0x1 {12 06 3A 04 01 00}
0x36EEF             Setting: Above 4G Decoding, Variable: 0x21B    {05 91 D6 04 D7 04 C8 03 01 00 1B 02 10 10 00 01 00}
0x36F00                 Option: Disabled, Value: 0x0 (default) {09 07 04 00 10 00 00}
0x36F07                 Option: Enabled, Value: 0x1            {09 07 03 00 00 00 01}
0x36F0E             End of Options {29 02}
0x36F10         End
find
quote
#4
(02-26-2015, 05:50 PM)royaldecline Wrote: I have found these strings, Just not sure yet on how to do the hex edit to change them.


Code:
0x34162 Setting: Above 4G Decoding, Variable: 0x21B {05 91 D6 04 D7 04 25 03 01 00 1B 02 10 10 00 01 00}
0x34173 Option: Disabled, Value: 0x0 (default) {09 07 04 00 10 00 00}
0x3417A Option: Enabled, Value: 0x1 {09 07 03 00 00 00 01}


If {29 02}
0x36EE7 Grayout If: {19 82}
0x36EE9 Variable 0x43A equals 0x1 {12 06 3A 04 01 00}
0x36EEF Setting: Above 4G Decoding, Variable: 0x21B {05 91 D6 04 D7 04 C8 03 01 00 1B 02 10 10 00 01 00}
0x36F00 Option: Disabled, Value: 0x0 (default) {09 07 04 00 10 00 00}
0x36F07 Option: Enabled, Value: 0x1 {09 07 03 00 00 00 01}
0x36F0E End of Options {29 02}
0x36F10 End

Yes It's the HII (UEFI IFR) text !
How do You extrated It ?
Have You used CodeRush suggestions or here 

http://www.insanelymac.com/forum/topic/2...ty/page-66

Let me know
Regards

So I run SCEWIN_64 /o /s nvram.txt /h Hii.db /v /q whilst booted in windows 64 bit to create the nvram.txt file,
(SCEWIN for windows 32 bit).
Do the edits on the nvram.txt file then run SCEWIN_64 /i /s nvram.txt in Windows which writes in back to the bios.
Best is use this tools as Admin !!!

[size=undefined]Your Brain [/size]. . . . It's the best tool U can use ! Wink
[size=undefined]Don't FLASH the Bios Mod if You get a Size Alert, You risk a Brick !!! [/size]
Donate to me for my work, click here BDM
find
quote
#5
Yes, i have extracted it, that's how i was able to see it to copy and paste it here. What i am having issues with is trying to figure out how seeing that correlates to a function i should preform in a hex editor. I am continuing to read up on this.
find
quote
#6
Why in a Hex Heditor ???
You have to edit in TXT form and then rewrite back using SCEWIN_64 /i /s nvram.txt !!!
That Code is UEFI IFR . . . look here (Internal Forms Representation (IFR) ) :

http://uefi.blogspot.it/2009/09/uefi-hii-part-1.html

http://sourceforge.net/projects/edk2/fil...s/UDK2014/

Etc. etc. !!!

Regards

[size=undefined]Your Brain [/size]. . . . It's the best tool U can use ! Wink
[size=undefined]Don't FLASH the Bios Mod if You get a Size Alert, You risk a Brick !!! [/size]
Donate to me for my work, click here BDM
find
quote
#7
Hex editor was the method mentioned in the first reply i got on this post. I don't think i an use SCEWIN, that pc is on Linux. I am using a nearby windows box to do all the other edits, than pushing the bios file to the Linux box and using afulnx_64 to flash.


(02-28-2015, 03:33 PM)BDMaster Wrote: Why in a Hex Heditor ???
You have to edit in TXT form and then rewrite back using SCEWIN_64 /i /s nvram.txt !!!
That Code is UEFI IFR .afulnx_64
. . look here (Internal Forms Representation (IFR) ) :

http://uefi.blogspot.it/2009/09/uefi-hii-part-1.html

http://sourceforge.net/projects/edk2/fil...s/UDK2014/

Etc. etc. !!!

Regards
find
quote
#8
On Linux there is a way to edit directly the NVRAM offsets, butI don't know if You can do
easy on AMI Bios !
It's used on Insyde or Phoenix Bios EFI - UEFI IFR and It's possible to edit VarStore Variables
directly on Protected Hi-Memory RAM !
Into Insyde and Phoenix Bios I have modified the IFR to unlock More Options, but into AMI
I didn't, more as I haven't that laptop !
Ok You see this :

https://www.bios-mods.com/forum/Thread-L...dden-menus

We use Donovan6k tool to show the offsets and text into IFR !
Then there are tools to extract Modules into Bios file compressed !
Then look here :

https://www.youtube.com/watch?v=fzuuE0tz6bY&feature=youtu.be

https://www.youtube.com/watch?v=7SkBFkzOW0A&feature=youtu.be

So It's possible to do what You said directly on NVRAM offsets and modifing
the IFR into Bios before flashing It !
The problem is to identify the offsets into Bios, so It needs to etract Hii Module
to ientify the IFR Structure, then extract the IFR txt and find the Offsets to
modify !
Let me know
Regards

[size=undefined]Your Brain [/size]. . . . It's the best tool U can use ! Wink
[size=undefined]Don't FLASH the Bios Mod if You get a Size Alert, You risk a Brick !!! [/size]
Donate to me for my work, click here BDM
find
quote
#9
It's an example of Acer Bios Setuputility Module IFR :

Form Sets
--------------------------------------------------------------------------------
Offset: Title:
--------------------------------------------------------------------------------
0x1E8C4 Boot (0x10F)
0x1F064 Security (0xF5)
0x1F594 Main (0xD1)
0x1FF54 Power (0x3A0)
0x22394 Advanced (0x17F)
0x2B494 Exit (0x137)
0x2B654 Information (0x2)


Internal Forms Representation
--------------------------------------------------------------------------------
Offset: Instruction:
--------------------------------------------------------------------------------
0x1E8C8 Form Set: Boot
0x1E8EF Guid: 0F0B1735-87A0-4193-B266-538C38AF48CE
0x1E904 Guid: 0F0B1735-87A0-4193-B266-538C38AF48CE
0x1E919 Default Store: en-US 0x0
0x1E91F Var Store: 0x1234[900] (SystemConfig)
0x1E942 Var Store EFI: 0x1
0x1E95A Form: Boot, Form ID: 0x1
0x1E960 Subtitle:
0x1E967 End
0x1E969 Grayout If:
0x1E96B Variable 0xD equals value in list (0x2, 0x3)
0x1E975 Variable 0xC equals 0x1
0x1E97B And
0x1E97D End
0x1E97F Setting: Boot Mode, Variable: 0x79

So to do the same on AMI Bios We have to extract this file !

[size=undefined]Your Brain [/size]. . . . It's the best tool U can use ! Wink
[size=undefined]Don't FLASH the Bios Mod if You get a Size Alert, You risk a Brick !!! [/size]
Donate to me for my work, click here BDM
find
quote
#10
I have that extracted. See attached.

Its a really big text file, so i didn't want to paste all of it here.


Attached Files
.txt   pe32 IFR.txt (Size: 762.9 KB / Downloads: 7)
find
quote


Forum Jump:


Users browsing this thread: 2 Guest(s)