Hi to all.
I’m new here and I’ve seen some guys who have successfully unlocked their bios, I have also compared the setup_ifr and AMITSE with the others but this is different, it would be nice if someone could help me to understand the mechanism to unlock the hidden menus.
I enclose the files here, if anyone or Lost_N_BIOS, wants to give a look, I can also do some tests, I own the CH341A programmer.
Files
@balearis - good you have programmer in advance, that’s how it should be for anyone wanting to tinker with modifying a BIOS outside the norm (Updating microcodes, RST modules etc)
All BIOS are different, and often require varying mod methods. Sometimes they might be similar methods required for models from same chipset series, but not always, there’s no one set way to mod a BIOS especially when it comes to unlocking hidden menus
You’ve attached stock BIOS, I need either a full dump from you using programmer, or a FPT dump to edit. This is because you will have to either program mod BIOS on, or flash via FPT after unlocking BIOS Lock, and FPT flash shouldn’t be done with stock BIOS (You’ll loose board details, serial, UUID etc)
I’ve looked at the stock modules, and I can unlock this BIOS. Please send dump via programmer, or dump via FPT.
For FPT, first you need to find your ME FW Version, then download the matching Intel ME System Tools from this thread in section “C” - Intel Management Engine: Drivers, Firmware & System Tools
Inside you will find Flash Programming Tool, and inside that a Windows or Win/Win32 folder, select that Win/Win32 folder, hold shift and press right click, choose open command window here (not power shell). Then type following command to make BIOS region backup
FPTw.exe -bios -d biosreg.bin
With the above file, also zip up a single image of each page of your BIOS. I only need to see the main sections, not submenus or scrolled down on long pages, so one of Main, Advanced, Security, Boot, Save & Exit and any other main one you see)
Send me that file
Thanks @Lost_N_BIOS for your reply and your interest.
YES, from kaby lake and up, every bios is different, there is no single way to unlock,
even looking at the other models on the forum is completely different.
Looking inside SETUP IFR, I see only one menu 11 27 to 16 27, no double menu like some others;
Looking inside AMITSE, the menus are repeated 3 times, 18E8, 21C00 and 3690
with the difference that at this last is added a further menu (maybe) 2C 29, 2D 29, 34 29, 39 29, 4D 29 and 4E 29
and this has somewhat confused me, because I can not understand the meaning of the latters;
anyway it would be nice if you could help me, for this I enclose what you asked me.
DUMP
Images
@belearis - I meant in general, all BIOS are different, even same asus chipset different model may have different BIOS internal structure.
I see all double menus in your IFR, here is some of the info I gathered from stock while waiting on your reply before moving forward. All info here at top (above AMITSE hex stuff) is from the setup IFR, second menu list will help explain those letters you mentioned 
Thanks for images and dump, I’ll work on this for you tonight, maybe done in a hurry too so be ready!
Main Form Set ID - 4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15
Hidden >>
Setup, FormId: 0x2710
Main - 0x2711 - Hidden
Advanced - 0x2712 - Hidden
Chipset - 0x2713 - Hidden
Security - 0x2714 - Hidden
Boot - 0x2715 - Hidden
Save & Exit - 0x2716- Hidden
-----------------------
Visible >>
Main - 0x292C
Advanced - 0x292D
Security - 0x2939
Boot - 0x2936 (Null/not used + Also 27BC) >> 0x2934 actual
Save & Exit - 0x294D
^^ Updated now, since your images, thanks ^^ Work in progress now! 
@ 000018ec - block list, short ID’s + footer
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 11 27 00 00 07 10 00 00
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 12 27 00 00 08 10 00 00
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 13 27 00 00 09 10 00 00
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 15 27 00 00 0a 10 00 00
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 14 27 00 00 0b 10 00 00
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 16 27 00 00 0c 10 00 00
@00003694 - Main List, all Used ID’s
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 11 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 12 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 13 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 14 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 15 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 16 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 2c 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 2d 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 34 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 39 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 4d 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 4e 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00
List @ 00021c04 - Main Blocked list
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 11 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 12 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 13 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 14 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 15 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 16 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4a 10 59 7b 0d c0 58 41 87 ff f0 4d 63 96 a9 15 4e 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00
I’m almost finished, I’ll include my edit notes for you. Unlocking FD now, then will be done, upload BIOS for you in about 1 minute! * Edit - 
I see you already did, uploading BIOS now!
*Edit2 - @balearis - Here is finished mod BIOS - http://s000.tinyupload.com/index.php?fil…217533347222317
If still missing menus, I’ll have to take another look! Fingers crossed, I think that’s it!
Put on with programmer, or flash via FPT, you’ll have to remove BIOS Lock first using my guide (I already did in the mod, but it’s locked in your dump so you need to unlock via grub if not using programmer)
[GUIDE] Grub Fix Intel FPT Error 368 - BIOS Lock Asus/Other Mod BIOS Flash
Start at step #6, here’s your variable to use >> 0x8AA
Rename .efi file to >> Shell.efi
@Lost_N_BIOS ,
you succeeded in the enterprise !!!
http://i67.tinypic.com/2i06n0m.jpg
the menu, as you can see is a bit confused, but I fix it myself.
Thank you very much, great genius.
@balearis - Great, thanks for report back, and you’re welcome!
Sorry, I intended for all those menus to be there, each of the duplicates has settings the other one doesn’t have (Main, ADV, Boot). If you only want the hidden menus instead of the originals we can do that instead.
Let me know if you can’t get it sorted out how you wanted, sorry if I enabled too much for you.
Hi! I’ve been lurking around the internet from time to time around the internet for over a year, looking for info to modify this laptop’s BIOS. And this is finally the first single post on the net to discuss the matter and prove helpful! With this mod I’d be able to disable/modify PROCHOT values, right? Which is what I’ve intended to do with this laptop that comes with the highest PROCHOT value and ruins performance. And maybe a couple other things.
Can this noob please get some guidance? Can I just follow the same steps and modded files in this post if I own the same laptop? Would appreciate any help or info, thanks in advance!
@AlucardX1416 HI. Yes, with the bios unlocked there are many settings regarding the CPU, including those to modify or disable PHOCHOT, if you have a little experience it is not difficult to unlock the menus, and in the instructions above of @Lost_N_BIOS you find all that you need; if instead you have difficulty, I can modify the file for you.
With FTK, extract your bios with the command "FPTw.exe -d bios.bin -bios"
Thanks for the help @fv1862 So here’s my bios file after using the command you mentioned: http://s000.tinyupload.com/index.php?fil…242700835956368
I was under the impression it was supposed to be a .rom file instead of .bin, did I do something wrong or the extension can be changed just fine? Also, I used “Intel CSME System Tools v11 r20 - (2019-01-23)
For 100/200/Z370/H310C/B365/X299/C400/C620-series systems which run CSME v11” based on this in my Device Manager: https://prnt.sc/n24dtr
Edit: The images of the menus would be the same as @balearis posted since we own the same laptop model
HI @AlucardX1416 , you have done the right procedure, now flash the bios with the same procedure “FPTw.exe -F biosmod.bin -bios”.
You should see 2 more modules, CHIPSET and another ADVANCE, and I have swap you another more complete MAIN (if you see it empty, scroll down … ) . Let me know if you see everything…
BIOSMOD
Hi @fv1862 thank you so much! About to flash it and just a question, if flashed correctly is there a risk to this? Is one still safe if, tinkering with just the Bios menu specifically, doesn’t go as expected?
@AlucardX1416 - There is always risk to flash BIOS, even stock BIOS. Be prepared always, CH341A costs $2.50 and SOIC8 test clip cable $3.50 on ebay
It usually goes OK, provided mod is done correctly, same for stock = usually OK, but stuff happens so order recovery hardware now it’s too cheap to not own this (@Everyone)
Then cross fingers and flash mod BIOS, all should be fine, if not hopefully your recovery tools will arrive soon!
@fv1862 - thanks for helping
@AlucardX1416 , unfortunately there is always a minimum risk,
and in my opinion, there is a greater risk going to change the settings, where you don’t know…
there are some settings that, if you change them, you risk brick of notebook. The best thing,
as mentioned above, it is to have a programmer and a test clip, in case of emergency.
@Lost_N_BIOS @fv1862 Thanks for your time both of you! I’ll pull the trigger next month, since I have critical work to do with the laptop for the moment. Once I do I’ll make sure to come back and provide feedback of how it went 
You’re welcome - Order tools now, it’s super cheap, then next month flash when you have tools in hand, then nothing to worry about
@Lost_N_BIOS The non-modified BIOS I uploaded is all the backup I need to stay safe/not permanently bricked in case something goes wrong, right?
@AlucardX1416 If you want to make a security backup of bios, you need to do a complete dump, "FPTw.exe -d dump.bin" (should be 8Mb)
Yes, as mentioned above you first need full BIOS dump (From pinmod to unlock FD Board) Via FPT as shown ^^
Or, a full dump with your programmer once it arrives. Then yes, once you have that and are sure it’s valid and good, you or someone checked for you, then you can always recover with that file.
With the FPT BIOS region dump you uploaded, that’s partial BIOS, only BIOS region, so if failed flash or something later you can only restore that into a full BIOS dump from someone else or one you saved, found online etc.
It will be missing your LAN MAC ID, everything else important yes is in that BIOS region FPT Dump. So, if you write down your MAC ID Now, then yes you can always restore since rest of dump is easy to find and replace with your LAN MAC ID into GbE region and then replace your BIOS region dump, and done = complete BIOS.