New AMI BIOS tool for performing SSV2/3 and Dynamic SLIC Modification

Discussion in 'MDL Projects and Applications' started by andyp, Jan 7, 2009.

  1. andyp

    andyp SLIC Tools Author

    Aug 8, 2008
    1,673
    2,570
    60
    If I have missed anybody out - apologies. Please point me to your post. Please include the method used, SLIC used, and Everest shots of SLIC and RSDT (or similar).

    Please post normal requests in the correct place - I noted a phoenix request in there somewhere - this thread is for tool mod troubleshooting only!

    Thanks All,
    Andy
     
  2. johnnygers

    johnnygers MDL Novice

    Dec 30, 2008
    17
    0
    0
    Hi Andy,

    I am new to BIOS modding, and although I have read a few tutorials, I prefer to mod with your tool because the chances of messing up my BIOS seem less, and you obviously cater for many more scenarios than those covered in the tutorials.

    However, the advanced options panel is very big, and I have no clue what most of the options mean...

    Without forcing anyone to explain them, I'm just curious... is there a way to know for sure that the resulting BIOS will not break my system (i don't want to replace my motherboard! :p) If it reports "success" at the end of the "go!" operation, can I be sure that it will boot? I can live with "it didn't work to activate windows", but cannot live with "oops my system won't boot anymore".

    I think the answer to this question will be very interesting for many noobs like me (many to come now with win7 just released). I have not seen it answered anywhere else, and I've been reading for hours.

    Thanks,
    --John
     
  3. Mr_MKE

    Mr_MKE MDL Novice

    Mar 13, 2009
    23
    0
    0
    Andy,

    Is there any way of looking at this data when it's in it's binary format(xxxxx.rom) before it's burned? Something like the output of Everest or rw-evrything?
     
  4. psreloaded

    psreloaded MDL Novice

    Jul 29, 2009
    10
    0
    0
    #706 psreloaded, Jul 31, 2009
    Last edited by a moderator: Apr 20, 2017
    Thanks Andy, you are a life saver, i just modded the bios with your slictool 1.28...with the default options...

    Could you please tell if its OK...I have had experiences of bricked bios with my previous ASUS GeForce 6200 board and so am a bit jittery...

    Here is the log:
    Code:
    Version 1.28
    Manufacturer - XFX
    Original BIOS size 1048576 bytes (1024K)
    9953C Module E1 Padded size 46100 
    A496C Module E1 Padded size 44208 
    AF63C Module E1 Padded size 27872 
    B633C Module 11 Padded size 26632 
    BCB5C Module 8 Padded size 2080 
    BD390 Module C Padded size 8 
    8 Module 1B Padded size 202356 (Actual size 202353 Original size 436452)
    BD3AC Module 20 Padded size 41312 (Actual size 41312 Original size 57344)
    C7520 Module 20 Padded size 35496 (Actual size 35496 Original size 57856)
    31690 Module 20 Padded size 35244 (Actual size 35242 Original size 56832)
    3A050 Module 20 Padded size 31900 (Actual size 31898 Original size 61440)
    41D00 Module 20 Padded size 24472 (Actual size 24472 Original size 43008)
    47CAC Module 4 Padded size 22120 (Actual size 22117 Original size 35809)
    4D328 Module 21 Padded size 20144 (Actual size 20143 Original size 42710)
    521EC Module 21 Padded size 15160 (Actual size 15158 Original size 34818)
    55D38 Module 10 Padded size 13592 (Actual size 13589 Original size 34705)
    59264 Module E Padded size 12792 (Actual size 12791 Original size 308136)
    5C470 Module 18 Padded size 6144 (Actual size 6141 Original size 16965)
    5DC84 Module 19 Padded size 1436 (Actual size 1436 Original size 4868)
    5E234 Module 1A Padded size 1332 (Actual size 1330 Original size 9890)
    5E77C Module F3 Padded size 904 (Actual size 903 Original size 2256)
    5EB18 Module 6 Padded size 888 (Actual size 887 Original size 2560)
    5EEA4 Module 80 Padded size 152 
    NVRAM at E0000 length 10000
    ROM Hole at 99000 length 530
    ROM Hole at D0000 length 10000
    There are unlinked blocks in module 80h
    Bootblock at F0000 length 10000
    Boot block checksum is correct
    No extended boot block
    Main BIOS checksum is correct
    1B module size is 436452 bytes
    AMIBIOS string found at F7C5
    SSV2 method
    SLIC module size is 374 bytes
    SLIC module checksum is 0
    OEM Activation 2.1 SLIC
    No split OEM/Table ID strings found
    Scanning for space to insert SLIC
    There is space to insert SLIC in ROM image at 60000
    RSDT table found at 4FF0B
    RSDT table can be extended
    XSDT table found at 5000B
    XSDT table can be extended
    RSDT table OEM and Table ID patched to DELL  QA09    
    XSDT table OEM and Table ID patched to DELL  QA09    
    FACP table OEM and Table ID patched to DELL  QA09    
    FACP table OEM and Table ID patched to DELL  QA09    
    APIC table OEM ID patched to DELL  
    WDRT table OEM ID patched to DELL  
    HPET table OEM ID patched to DELL  
    MCFG table OEM ID patched to DELL  
    OEM table OEM ID patched to DELL  
    Dell Computer SLP 1.0 string added
    Module 1B written
    New 1B Module is 20 bytes too big
    Zero area 1
    Module 1B written
    New 1B Module is 48 bytes too small
    Module 1B written
    New 1B Module is 32 bytes too small
    Module 1B written
    New 1B Module is 16 bytes too small
    Module 1B written
    New 1B Module is 12 bytes too small
    Module 1B written
    New 1B Module is 4 bytes too small
    Module 1B written
    New 1B Module is 4 bytes too small
    Module 1B written
    New 1B Module is correct size
    1B copied to original BIOS
    SLIC inserted at 60000
    32 bit BIOS checksum corrected after SLIC table
    New BIOS written 1048576 bytes
    9953C Module E1 Padded size 46100 
    A496C Module E1 Padded size 44208 
    AF63C Module E1 Padded size 27872 
    B633C Module 11 Padded size 26632 
    BCB5C Module 8 Padded size 2080 
    BD390 Module C Padded size 8 
    8 Module 1B Padded size 202356 (Actual size 202354 Original size 436452)
    BD3AC Module 20 Padded size 41312 (Actual size 41312 Original size 57344)
    C7520 Module 20 Padded size 35496 (Actual size 35496 Original size 57856)
    31690 Module 20 Padded size 35244 (Actual size 35242 Original size 56832)
    3A050 Module 20 Padded size 31900 (Actual size 31898 Original size 61440)
    41D00 Module 20 Padded size 24472 (Actual size 24472 Original size 43008)
    47CAC Module 4 Padded size 22120 (Actual size 22117 Original size 35809)
    4D328 Module 21 Padded size 20144 (Actual size 20143 Original size 42710)
    521EC Module 21 Padded size 15160 (Actual size 15158 Original size 34818)
    55D38 Module 10 Padded size 13592 (Actual size 13589 Original size 34705)
    59264 Module E Padded size 12792 (Actual size 12791 Original size 308136)
    5C470 Module 18 Padded size 6144 (Actual size 6141 Original size 16965)
    5DC84 Module 19 Padded size 1436 (Actual size 1436 Original size 4868)
    5E234 Module 1A Padded size 1332 (Actual size 1330 Original size 9890)
    5E77C Module F3 Padded size 904 (Actual size 903 Original size 2256)
    5EB18 Module 6 Padded size 888 (Actual size 887 Original size 2560)
    5EEA4 Module 80 Padded size 152 
    NVRAM at E0000 length 10000
    ROM Hole at 99000 length 530
    ROM Hole at D0000 length 10000
    There are unlinked blocks in module 80h
    Main BIOS checksum is correct
    XFX BIOS checksum is correctly duplicated in the boot block
    Bootblock at F0000 length 10000
    Boot block checksum is correct
    9953C Module E1 Padded size 46100 
    A496C Module E1 Padded size 44208 
    AF63C Module E1 Padded size 27872 
    B633C Module 11 Padded size 26632 
    BCB5C Module 8 Padded size 2080 
    BD390 Module C Padded size 8 
    8 Module 1B Padded size 202356 (Actual size 202354 Original size 436452)
    BD3AC Module 20 Padded size 41312 (Actual size 41312 Original size 57344)
    C7520 Module 20 Padded size 35496 (Actual size 35496 Original size 57856)
    31690 Module 20 Padded size 35244 (Actual size 35242 Original size 56832)
    3A050 Module 20 Padded size 31900 (Actual size 31898 Original size 61440)
    41D00 Module 20 Padded size 24472 (Actual size 24472 Original size 43008)
    47CAC Module 4 Padded size 22120 (Actual size 22117 Original size 35809)
    4D328 Module 21 Padded size 20144 (Actual size 20143 Original size 42710)
    521EC Module 21 Padded size 15160 (Actual size 15158 Original size 34818)
    55D38 Module 10 Padded size 13592 (Actual size 13589 Original size 34705)
    59264 Module E Padded size 12792 (Actual size 12791 Original size 308136)
    5C470 Module 18 Padded size 6144 (Actual size 6141 Original size 16965)
    5DC84 Module 19 Padded size 1436 (Actual size 1436 Original size 4868)
    5E234 Module 1A Padded size 1332 (Actual size 1330 Original size 9890)
    5E77C Module F3 Padded size 904 (Actual size 903 Original size 2256)
    5EB18 Module 6 Padded size 888 (Actual size 887 Original size 2560)
    5EEA4 Module 80 Padded size 152 
    NVRAM at E0000 length 10000
    ROM Hole at 99000 length 530
    ROM Hole at D0000 length 10000
    There are unlinked blocks in module 80h
    Bootblock at F0000 length 10000
    Boot block checksum is correct
    No extended boot block
    Main BIOS checksum is correct
    Unreferenced bytes are present
    SLIC performed successfully. BIOS file is C:\DOCUMENTS AND SETTINGS\P\DESKTOP\U95\MI-A78S-8209_BIOS_V6_ISO\XFX MI-A78S-8209_BIOSV6\[BOOT]\BOOTABLE_1.44M\XA78SV16_SLIC.ROM
    
    Its also creating a two more files named "1B.BIN" and "1B_SLIC.BIN". Could you please tell what these are. I am a bit new to this.

    Also, any help on how should I flash my bios...I mean with AFUWIN or something else...I ask this because I don't have a floppy drive... Is there any way I could make a ISO like the original with these. Sorry for being n00bish...
     
  5. Mustang Sally

    Mustang Sally MDL Junior Member

    May 9, 2007
    79
    0
    0
  6. pisthai

    pisthai Imperfect Human

    Jul 29, 2009
    7,202
    2,269
    240
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. andyp

    andyp SLIC Tools Author

    Aug 8, 2008
    1,673
    2,570
    60
    Does this mean it worked? ;)

    If yes, there is a hidden pubkey/marker that in the 1B module that needs replacing also.

    Andy
     
  8. andyp

    andyp SLIC Tools Author

    Aug 8, 2008
    1,673
    2,570
    60
    Load the 1B_SLIC.BIN file created into a hex editor. Search for RSDT and you will find the tables.

    Andy
     
  9. DynaMight

    DynaMight MDL Novice

    Jul 29, 2009
    11
    0
    0
    #714 DynaMight, Jul 31, 2009
    Last edited by a moderator: Apr 20, 2017
    Also it seems that plenty of the other tables in ACPI have been updated to DELL

    Marked as FACP
    Code:
    Fixed ACPI Description Table: 0xCFFB0200
    
    46 41 43 50 84 00 00 00 02 93 44 45 4C 4C 20 20FACP......DELL  
    51 41 30 39 20 20 20 00 06 08 00 10 4D 53 46 54QA09   .....MSFT
    97 00 00 00 00 E0 FB CF 40 04 FB CF 01 01 09 00........@.......
    B0 00 00 00 E1 1E 00 E2 00 08 00 00 00 00 00 00................
    04 08 00 00 00 00 00 00 FF 08 00 00 08 08 00 00................
    20 08 00 00 00 00 00 00 04 02 01 04 08 00 00 00 ...............
    65 00 E9 03 00 04 10 00 04 03 0D 00 32 03 00 00e...........2...
    A5 01 00 00 01 08 00 00 F9 0C 00 00 00 00 00 00................
    06 00 00 00                                    ....            
    
    Signature"FACP"
    Length0x00000084 (132)
    Revision0x02 (2)
    Checksum0x93 (147)
    OEM ID"DELL  "
    OEM Table ID"QA09   "
    OEM Revision0x10000806 (268437510)
    Creator ID"MSFT"
    Creator Revision0x00000097 (151)
    Firmware Control0xCFFBE000 - FACS
    DSDT Address0xCFFB0440 - DSDT
    Interrupt Mode0x01 (1) - Multiple APIC
    PM Profile0x01 (1)
    SCI Interrupt0x0009 (9)
    SMI Port0x000000B0 (176)
    ACPI Enable0xE1 (225)
    ACPI Disable0x1E (30)
    S4 Request0x00 (0) - Not supported
    PSTATE_CNT0xE2 (226)
    PM1a_EVT_BLK0x00000800 (2048)
    PM1b_EVT_BLK0x00000000 (0) - Not supported
    PM1a_CNT_BLK0x00000804 (2052)
    PM1b_CNT_BLK0x00000000 (0) - Not supported
    PM2_CNT_BLK0x000008FF (2303)
    PM_TMR_BLK0x00000808 (2056)
    GPE0_BLK0x00000820 (2080)
    GPE1_BLK0x00000000 (0) - Not supported
    PM1_EVT_LEN0x04 (4)
    PM1_CNT_LEN0x02 (2)
    PM2_CNT_LEN0x01 (1)
    PM_TMR_LEN0x04 (4)
    GPE0_BLK_LEN0x08 (8)
    GPE1_BLK_LEN0x00 (0)
    GPE1_BASE0x00 (0)
    CST_CNT0x00 (0)
    P_LVL2_LAT0x0065 (101) - C2 state not supported
    P_LVL3_LAT0x03E9 (1001) - C3 state not supported
    FLUSH_SIZE0x0400 (1024)
    FLUSH_STRIDE0x0010 (16)
    DUTY_OFFSET0x04 (4)
    DUTY_WIDTH0x03 (3)
    DAY_ALRM0x0D (13)
    MON_ALRM0x00 (0) - Month alarm not supported
    CENTURY0x32 (50)
    IAPC_Boot_Arch0x03 0x00 
    Reserved0x00 (0)
    Flags0x000001A5
      WBINVD1 - WBINVD instruction fully supported
      WBINVD_Flush0 - WBINVD instruction not for sleep states (Don't care if WBINVD=1)
      PROC_C11 - C1 power state: all processors
      P_LVL2_UP0 - C2 power state: UP system only
      PWR_BUTTON0 - Power button supported as fixed feature
      SLP_BUTTON1 - Sleep button not support or handled by ASL code
      FIX_RTC0 - Fixed register support RTC wake
      RTC_S41 - RTC wakeup support: S1, S2, S3, S4
      TMR_VAL_EXT1 - 32bit PM Timer
      DCK_CAP0 - Docking not supported
      RESET_REG_SUP0 - Reset Register not supported
      SEALED_CASE0 - System is not sealed
      HEADLESS0 - Not headless mode
      CPU_SW_SLP0 - Normal method to write SLP_TYPx
      PCI_EXP_WAK0 - PM1 block does not support PCIE wakeup event bits
      USE_PLATFORM_CLOCK0 - OSPM may use HPET, ACPI PM Timer or internal Timer
      S4_RTC_STS_VALID0 - RTC_STS flag is invalid when resume from S4
      REMOTE_POWER_ON_CAPABLE0 - Not compatible with remote power on
      FORCE_APIC_CLUSTER_MODEL0 - Cluster destination model not required
      FORCE_APIC_PHYSICAL_DESTINATION_MODE0 - Physical destination mode not required
    
    APIC
    Code:
    Multiple APIC Description Table: 0xCFFB0390
    
    41 50 49 43 6C 00 00 00 01 B2 44 45 4C 4C 20 20APICl.....DELL  
    51 41 30 39 20 20 20 00 06 08 00 10 4D 53 46 54QA09   .....MSFT
    97 00 00 00 00 00 E0 FE 01 00 00 00 00 08 01 00................
    01 00 00 00 00 08 02 01 01 00 00 00 00 08 03 82................
    00 00 00 00 00 08 04 83 00 00 00 00 01 0C 02 00................
    00 00 C0 FE 00 00 00 00 02 0A 00 00 02 00 00 00................
    00 00 02 0A 00 09 09 00 00 00 0F 00            ............    
    
    Signature"APIC"
    Length0x0000006C (108)
    Revision0x01 (1)
    Checksum0xB2 (178)
    OEM ID"DELL  "
    OEM Table ID"QA09   "
    OEM Revision0x10000806 (268437510)
    Creator ID"MSFT"
    Creator Revision0x00000097 (151)
    Local APIC0xFEE00000
    Flags0x00000001
      Dual-82591 - Yes
    Processor Local APIC Structure
      Type0x00 (0)
      Length0x08 (8)
      ACPI Processor ID0x01 (1)
      APIC ID0x00 (0)
      Flags0x00000001 (1) - Enabled
    Processor Local APIC Structure
      Type0x00 (0)
      Length0x08 (8)
      ACPI Processor ID0x02 (2)
      APIC ID0x01 (1)
      Flags0x00000001 (1) - Enabled
    Processor Local APIC Structure
      Type0x00 (0)
      Length0x08 (8)
      ACPI Processor ID0x03 (3)
      APIC ID0x82 (130)
      Flags0x00000000 (0) - Disabled
    Processor Local APIC Structure
      Type0x00 (0)
      Length0x08 (8)
      ACPI Processor ID0x04 (4)
      APIC ID0x83 (131)
      Flags0x00000000 (0) - Disabled
    I/O APIC Structure
      Type0x01 (1)
      Length0x0C (12)
      I/O APIC ID0x02 (2)
      Reserved0x00 (0)
      I/O APIC Address0xFEC00000
      System Interrupt Base0x00000000 (0)
    Interrupt Source Override Structure
      Type0x02 (2)
      Length0x0A (10)
      Bus0x00 (0) - ISA
      SourceIRQ0
      System Interrupt0x00000002 (2)
      Flags0x0000
        Polarity0x00 - Conforms to the specifications of the bus
        Trigger Mode0x00 - Conforms to the specifications of the bus
    Interrupt Source Override Structure
      Type0x02 (2)
      Length0x0A (10)
      Bus0x00 (0) - ISA
      SourceIRQ9
      System Interrupt0x00000009 (9)
      Flags0x000F
        Polarity0x03 - Active low
        Trigger Mode0x03 - Level triggered
    
    MCFG
    Code:
    Memory Mapped Configuration Space Base Address Description Table: 0xCFFB0400
    
    4D 43 46 47 3C 00 00 00 01 1C 44 45 4C 4C 20 20MCFG<.....DELL  
    51 41 30 39 20 20 20 00 06 08 00 10 4D 53 46 54QA09   .....MSFT
    97 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E0................
    00 00 00 00 00 00 00 FF 00 00 00 00            ............    
    
    Signature"MCFG"
    Length0x0000003C (60)
    Revision0x01 (1)
    Checksum0x1C (28)
    OEM ID"DELL  "
    OEM Table ID"QA09   "
    OEM Revision0x10000806 (268437510)
    Creator ID"MSFT"
    Creator Revision0x00000097 (151)
    Reserved0x0000000000000000
    Configuration Base Address Allocation
      Base Address0x00000000E0000000
      PCI Segment0x0000 (0)
      Start Bus Number0x00 (0)
      End Bus Number0xFF (255)
      Reserved0x00000000 (0)
    
    And others

    The only two that dont are the SLIC tab and the RSDT
    Code:
    Root System Description Table: 0xCFFB0000
    
    52 53 44 54 3C 00 00 00 01 6D 5F 41 53 55 53 5FRSDT<....m_ASUS_
    4E 6F 74 65 62 6F 6F 6B 06 08 00 10 4D 53 46 54Notebook....MSFT
    97 00 00 00 00 02 FB CF 58 81 FB CF 90 03 FB CF........X.......
    00 04 FB CF 40 E0 FB CF 20 81 FB CF            ....@... ...    
    
    Signature"RSDT"
    Length0x0000003C (60)
    Revision0x01 (1)
    Checksum0x6D (109)
    OEM ID"_ASUS_"
    OEM Table ID"Notebook"
    OEM Revision0x10000806 (268437510)
    Creator ID"MSFT"
    Creator Revision0x00000097 (151)
    Entry00xCFFB0200
    Entry10xCFFB8158
    Entry20xCFFB0390
    Entry30xCFFB0400
    Entry40xCFFBE040
    Entry50xCFFB8120
    
    I dont know if this helps.
     
  10. andyp

    andyp SLIC Tools Author

    Aug 8, 2008
    1,673
    2,570
    60
    #715 andyp, Jul 31, 2009
    Last edited by a moderator: May 23, 2017
    (OP)
  11. rtkrazyk

    rtkrazyk MDL Novice

    Jul 29, 2009
    6
    0
    0
    working perfectly.... how do you replace the hidden pubkey/marker in 1B?
     
  12. yaluza1967

    yaluza1967 MDL Member

    Jun 6, 2009
    199
    3
    10
    Just ticking 'replace 1B module' when using SSV3 dynamic method when bios have already slic table 2.0

    anyway with P5PKL-SE, use Amitools 1.28, SSV3 dynamic method and tick 3 box in dynamic options ( Advanced )
     
  13. asabater

    asabater MDL Member

    Sep 6, 2008
    195
    71
    10
    ok, test your mod and still activated,,,,,

    many thanks