Gluggakista Sýn OEM Verðlaun BIOS Unga fólkið Aðferð við Fíkniefnasjúklingur SNEIÐ Borð með Dynamic Minni Heimilisfang

Verkfæraskúr og utilities þurfa:

1. MODBIN6
2. CBROM219
3. WinHEX
4. Hiew 7.4 (Hiew32) (eini fyrir Verðlaun BIOS, ef þú hafa Hiew32 þú neitun langlífi þurfa IDA 5.0)
5. IDA 5.0
6. UltraEdit

The kennsla til skapa a unga fólkið Sýn OEM BIOS með dynamic minni heimilisfang úthlutun hæfileiki er flókinn, og mæla með fyrir sérfræðingur eini. Við hliðina á, this hlutur er þýða frá skjal í Kínverji, svo the nákvæmni af the þýðing er ekki ábyrgð. Ef þú raunverulega vilja til gera þinn BIOS til vera fær til virkja OEM útgáfa af Gluggakista Sýn, reyna the tilbúinn- unga fólkið BIOS ( með truflanir heimilisfang), hugbúnaður undirstaða Sýn Vistunarforrit OEM BIOS keppinautur, eða hugbúnaður undirstaða OEM BIOS Kappgirni Tól. Annar vinsæll Sýn sprunga fela í sérTimerLock hver á sjálfvirkan hátt sækja umTimerStop bílstjóri This einkatími er sönnun af hugtak eini, eins og hvor BIOS er ólíkur, og þess vegna the gildi eða stíga eða hlutur ákvæðisorð mega vera ólíkur.

viðvörun: Breyting til BIOS mega ógilda ábyrgð, orsök tölva til ófær til stígvél upp eða annar óafturkallanlegur áhrif. Hafa samfarir á þinn eiga hætta á.

Ef þú þörf hjálpa á unga fólkið BIOS fyrir Sýn örvun, skrá sig útthis þráður.

1. Skapa a tímabundinn mappa ( sýn eða BIOS er þú eins og) á rót skrá (C:\).
2. Sækja skrá af fjarlægri tölvu CBROM 2.19 ( ráðast af á hvar þú sækja skrá af fjarlægri tölvu, það mega þörf til gefa nýtt nafn the executable til cbrom.exe eins og myndskreyttur í this hlutur), MODBIN6 2.01.01, SLIC.BIN ( nafndagur acpislic.bin hver geta vera margvíslegur, hver er the SNEIÐ borð hluti af BIOS) frá sækja skrá af fjarlægri tölvu hlekkur yfir, og staður þá í the tímabundinn mappa.
3. Þykkni, útflutningur eða spara the XXXXXXXX.BIN ( nafn geta vera breyting, hver er the motherboard BIOS þessi þú vilja til reiðhestur fyrir Gluggakista Sýn OEM örvun). Auðveldlega vegur er til einfaldlega sækja skrá af fjarlægri tölvu the BIOS fastbúnaður frá the tölva eða motherboards’ framleiðandi svo sem eins og ASUS, Gígabæti, MSI, Beiskur, HP, Dalverpi, Lenovo og etc.
4. Ákveða hver BIOS hluti af skrá er the akur af RSDT…FACS staðgreina:
   1. Íupphækkaður stjórn hvetja (eðagera óvinnufæran UAC), tegund the hópur stuðningsmanna stjórn:

      CBROM.EXE XXXXXX.BIN d

      Þú vilja sjá eitthvað eins og niðri skjár:

      CBROM V2.19 (CAward) Hugbúnaður 2001 Allur Réttindi Hlédrægur.

      ******** XXXXXXXX.BIN BIOS hluti********

      neitun Atriði- Nafn Frumeintak- Stærð Samþjappaður- Stærð Frumeintak- Skrá- Nafn
      =====================================================
      0. Kerfi BIOS 20000h128.00K() 13B3Eh78.81K() 83IID318.BIN
      1. XGROUP MERKJAMÁL 0DFF0h55.98K() 0993Ch38.31K() awardext.rom
      2. ACPI borð 043E5h16.97K() 01A46h6.57K() ACPITBL.BIN
      3. EPA NAFNPLATA 0168Ch5.64K() 002AAh0.67K() AwardBmp.bmp
      4. YGROUP LESMINNI 0F570h61.36K() 0482Dh18.04K() awardeyt.rom
      5. HÓPUR Lesminni[ 0] 04CD0h19.20K() 02261h8.59K() _EN_CODE.BIN
      6. Other404E0000(:) 03476h13.12K() 00EB4h3.68K() 64N8IIP.BMP
      7. Other404F0000(:) 0345Dh13.09K() 008B9h2.18K() 64N8P4P.BMP
      8. Other40500000(:) 0345Dh13.09K() 008CCh2.20K() 64N8P4HT.BMP
      9. Other40510000(:) 04286h16.63K() 00A7Eh2.62K() 64N8P4E.BMP
      10. Other40520000(:) 04286h16.63K() 00B58h2.84K() 64N8P4HE.BMP
      11. Other40530000(:) 0345Dh13.09K007D9h1.96K()() 64N8ICPD.BMP
      12. PCI Grískt nútímatalmál[] 0D000h52.00K07DA8h31.41K()() RTM8100.LOM

      Alger grisjuþófi merkjamál rúm = 4B000h300.00K()
      Alger samþjappaður merkjamál stærð = 31788h197.88K()
      Vera enn grisjuþófi merkjamál rúm = 19878h102.12K()

      ** Ör- Merkjamál Upplýsingar**
      Endurnýja PERSÓNUSKILRÍKI CPUID | Endurnýja PERSÓNUSKILRÍKI CPUID | Endurnýja PERSÓNUSKILRÍKI CPUID | Endurnýja PERSÓNUSKILRÍKI CPUID
      ——————+——————–+——————–+——————
      PGA478 2E 0F29|

   2. Í yfir tilfelli, inni XXXXXXX.BIN, there er neitun ggroup.bin ( hvar “RSDTFACPDSDTAPICHPETMCFGFACS” eða líkur ACPI matskeið akur er staðgreina), svo RSDT…FACS akur er staðgreina inni the kerfi BIOS bæti merkjamál, og til breyta this þörf til nota MODBIN6. Ef þinn BIOS innihalda ggroup.bin, þú geta nota CBROM til þykkni og seperate ggroup.bin BIOS hluti eins og skrá.

      Niðri er the sýnishorn CBROM framleiðsla af “CBROM.EXE XXXXXX.BIN d” stjórn fyrir BIOS með ggruoup.bin ( gígabæti GA-G1975X BIOS eins og fordæmi):

      neitun Atriði- Nafn Frumeintak- Stærð Samþjappaður- Stærð Frumeintak-Fi
      ================================================
      0. Kerfi BIOS 20000h128.00K1492Ah82.29KG1975X.BIN()()
      1. XGROUP MERKJAMÁL 0F7B0h61.92K0A8E6h42.22Kawardext.rom()()
      2. EPA NAFNPLATA 0168Ch5.64K0030Dh0.76KAwardBmp.bmp()()
      3. HÓPUR ROM18[] 00EF0h3.73K00B77h2.87Kggroup.bin()()
      4. YGROUP LESMINNI 07140h28.31K04D7Ch19.37Kawardeyt.rom()()
      5. FNT1 LESMINNI 02D28h11.29K02038h8.05Kfont1.awd()()
      6. FNT2 LESMINNI 03278h12.62K01F18h7.77Kfont2.awd()()
      7. FNT3 LESMINNI 025FCh9.50K017FBh6.00Kfont3.awd()()
      8. HÓPUR Lesminni[ 0] 06010h24.02K02787h9.88K_EN_CODE.BIN()()
      9. HÓPUR Lesminni[ 1] 06510h25.27K02A1Fh10.53K_FR_CODE.BIN()()
      10. HÓPUR Lesminni[ 3] 06420h25.03K02A75h10.61K_GR_CODE.BIN()()
      11. HÓPUR Lesminni[ 4] 068D0h26.20K02A74h10.61K_SP_CODE.BIN()()
      12. HÓPUR Lesminni[ 8] 04EF0h19.73K02575h9.36K_B5_CODE.BIN()()
      13. HÓPUR ROM10[] 04F60h19.84K025E9h9.48K_GB_CODE.BIN()()
      14. HÓPUR ROM11[] 05E50h23.58K02A85h10.63K_JP_CODE.BIN()()
      15. PCI Grískt nútímatalmál[] 0F200h60.50K09594h37.39KICH7RAID.BIN()()
      16. PCI ROMB[] 10000h64.00K09A15h38.52Kb169d.pxe()()
      17. Nafnplata LESMINNI 00B64h2.85K00520h1.28Kdbios.bmp()()
      18. PCI ROMC[] 04000h16.00K02287h8.63KITE8212.ROM()()
      19. Other40670000(:) 01AADh6.67K00B75h2.86KPPMINIT.ROM()()
      20. OEM0 MERKJAMÁL 025B3h9.42K01B37h6.80Kdbf.bin()()
      21. HÓPUR ROM24[] 00132h0.30K0011Eh0.28KSPECIAL.FNT()()
      22. ACPI borð 09640h37.56K0352Ch13.29KASUSACPI.BIN()()

      Alger grisjuþófi merkjamál rúm = 67000h412.00K()
      Alger samþjappaður merkjamál stærð = 57613h349.52K()
      Vera enn grisjuþófi merkjamál rúm = 0F9EDh62.48K()

      ** Ör- Merkjamál Upplýsingar**
      Endurnýja PERSÓNUSKILRÍKI CPUID | Endurnýja PERSÓNUSKILRÍKI CPUID | Endurnýja PERSÓNUSKILRÍKI CPUID | Upd
      ——————+——————–+——————–+—–
      Rifa 0A 0F32| PGA423 2C 0F25| 00000000 00000000 0000
      00000000 00000000 0000 0000| 00000000 00000000 0000
      00000000 00000000 0000 0000| 00000000 00000000 0000
      00000000 00000000 0000 0000| 00000000 00000000 0000
      00000000 00000000 0000 0000| 00000000 00000000 0000
      00000000 00000000 0000 0000|

   3. Fyrir BIOS með ggroup.bin, þykkni the ggroup.bin með the hópur stuðningsmanna stjórn:

      CBROM.EXE G1975X.bin hópur þykkni

      Þú öxl sjá the hópur stuðningsmanna framleiðsla eins og niðri screenshot:

      CBROM V2.19 (CAward) Hugbúnaður 2001 Allur Réttindi Hlédrægur.
      Koma inn í óákveðinn greinir í ensku þykkni skrá Nafn :(ggroup.bin)
      [hópur] LESMINNI er þykkni til ggroup.bin

   4. Aðskilinn, spara og þykkni the ACPITBL.BIN við using the hópur stuðningsmanna stjórn:

      CBROM.EXE 050318.BIN acpi þykkni

      Þú öxl sjá the hópur stuðningsmanna framleiðsla frá CBROM:

      CBROM V2.19 (CAward) Hugbúnaður 2001 Allur Réttindi Hlédrægur.
      Koma inn í óákveðinn greinir í ensku þykkni skrá Nafn :(ACPITBL.BIN)
      [ACPI] LESMINNI er þykkni til ACPITBL.BIN

   5. Fyrir BIOS án ggroup.bin ( þessir með ggroup.bin geta sleppa this stíga), sjósetja MODBIN6, velja XXXXXXXX.BIN ( verða vera nafndagur í .BIN eftirnafn, ef ekki gefa nýtt nafn það. Þess’ the BIOS til breyta til bæta við í the SNEIÐ borð svo þessi þess’ SLP 2.0 eftirlátur). Gera ekki loka the gluggi af MODBIN6, og bíða fyrir the ORIGINAL.BIN til vera þykkni og skapa í the tímabundinn mappa.
5. Fylgja the niðri kennsla til breyta ACPITBL.BIN:
   1. Hlaupa UltraEdit og opinn ACPITBL.BIN BIOS ímynd skrá.
   2. Leita texti fyrir RSDT.
   3. Á bak við RSDT er the bæti þessi benda á the lengd af RSDT borð. Bæta við 4 til this tala í ÁLÖG snið. Fyrir fordæmi, ef the gildi benda á er 002C, breyta og ritstýra the gildi til verða 0030. Minnispunktur þessi the andstæða röð af par hvenær keying í UltraEdit Álög ritstjóri (i.e. koma inn í eins og 30 00 í staðinn af 00 30).
   4. Bæta inn í ( ekki skipta um) viðbótar- 4 bæti af 00 gildi eftir á the frumeintak lengd (002C) af RSDT borð ( venjulega í andlit af FACPt, eða FXCPt fyrir viss Gígabæti mobo). Þú geta eftirlíking og klístur the 4 bæti af 00 frá annar staðsetning til this staðsetning. This smábreyting og breyting er til afla rúm til birgðir the SNEIÐ borð í framtíð stíga, svo muna this heimilisfang ( fyrir this fylgja, assume this staðsetning er SLICaddress). Í this fordæmi, SLICaddress gildi er 002C.

      
      Áður smábreyting af ACPITBL.BIN í UltraEdit

      
      Eftir á smábreyting af ACPITBL.BIN í UltraEdit til úthluta rúm fyrir SNEIÐ borð.

   5. Stöðva the alger lengd af ACPITBL.BIN ef the lengd geta vera aðgreindur í fullur við 4. Ef ekki, bæta við 1 til 3 bæti af 00 á the endir af the BIOS ímynd skrá svo þessi the lengd geta vera aðgreindur við 4 án allir afgangur. This er til tryggja þessi eftir á merging með SLIC.BIN ímynd skrá, the síðuhaus heimilisfang af SNEIÐ borð geta vera aðgreindur við 4 án afgangur of.

      
      Stöðva ef the lengd af ACPITBL.BIN (the síðastur heimilisfang af the skrá + 1) geta vera aðgreindur við 4 án afgangur. Í this fordæmi, áður this stíga smábreyting, the síðastur bæti hefur ÁLÖG heimilisfang af 43E8, svo the lengd af the skrá er 43E9, geta ekki vera aðgreindur við 4 í full without remainder.

      
      After 4 division check modification, added 3 00 value bytes.

   6. Modify OEM_ID and OEM_Table_ID according to your requirements (normally _ASUS_ and Notebook). Refer to improved add SLIC table instruction at step 8 of part 2 for more information.
   7. Save the file.
   8. Execute the following command to merge and patch the SLIC table content with the modified ACPITBL.BIN to get the final working copy of ACPITBL.BIN:

      COPY ACPITBL.BIN B + SLIC.BIN B ACPI.BIN B

      Note: According to your requirement, use the correct ACPI.BIN, i.e. ASUS for ASUS OEM ID, Lenovo for Lenovo OEM ID and etc.

6. Follow the below steps to find the position of the space that temporarily store the value of the address of headers of every tables in the code of ORIGINAL.BIN or ggroup.bin. This address will be assumed as TempBuffer_Address:
   1. Run Ultract to open ORIGINAL.BIN or ggroup.bin.
   2. Execute IDA.

      

   3. Click on Go to enter IDA. Then select and open ORIGINAL.BIN file.
   4. In the “Load a new file” dialog box, under the section of “Processor type”, pull down the menu and select “Intel 80×86 processors:80686p”.

      

   5. After selected, hit the “Set” button to the right.
   6. Click on “OK” button, and then hit on “Yes” button when asked to confirm “Do you want to change the processor type to 80686p?”

      

   7. In dialog box asked to confirm “Do you want to disassemble it as a 32-bit code?”, press on “No” button as manipulation will be done in 16-bit mode.

      

   8. In the Strings Window to the right, find and locate the RSDT…FACS character string sequence, and double click on it.

      

   9. Position the cursor at the location of the R character. Then press “A” key, and then RSDT…FACS character string will be displayed. This text sequence of RSDT…FACS will be called ACPItables.

      
      Positioning cursor at the line of R.

      
      After pressing A key.

   10. Position the cursor after the RSDT…FACS string ACPItables (db 1EH).

       

       Press the “C” key. A block of Assembly code will be displayed.

       

   11. But there is remaining code that hasn’t been disassembled into Assembly code. So position the cursor at the first remained assembled code. In this case, it’s line of unk_CC49 after the RSDT…FACS string ACPItables provided by db 1Eh. Then press the “C” key to convert and disassemble the remaining BIOS byte code.
   12. Move the cursor across the lines of the following “CALL” block.

       

   13. Watch out for the “CALL” line that can pop up code like below:

       push eax
       push cx
       push ebp
       xor ebp, ebp
       mov cx, TABLE_Numbers (temporarily use TABLE _Numbers to represent a value)
       mov edi, eax

       In this example, it’s the line of “call sub_CCD4″.

   14. Double click on sub_CCD4 to go to the code section of sub_CCD4. If the current display mode is in graphic, right click and select “TEXT View” on the context menu to switch to text mode.
   15. Inside this block of code, retrieve the 3 important variables TABLE_Numbers，ACPItables_adress，TempBuffer_Adress，and record their value. In this example, the value of the variables are 4， CC20， 89C4 respectively, where addresses are approximately located at CCDC，CCE2， CD12 respectively.

       

   16. Use the value of TempBuffer_Adress (89C4 from step above) to match with each table in RSDT…FACS text string, with increment of 4 after each table (matching table). For example:

       89C4 RSDT
       89C8 FACP
       89CC DSDT
       89D0 APIC
       89D4 FACS
       89D8
       89DC

       The previous block of code duplicates the required tables in ACPITBL BIOS image according to RSDT…FACS string into a free memory address, and store these value of addresses in space specified by TempBuffer_Address, and then eventually fill these addresses into some specific tables. So during this process, the storing address value of TempBuffer_Address has to be ensure that cannot and is not changing, or else mod BIOS will fail.

   17. Switch to UltraEdit, and press Ctrl-F keyboard shortcut to search for D889 (i.e 89D8 value, the value of the memory space location after FACS, where it’s a reverse with low byte in front and high byte behind). Pay attention to a few location (82D4, CC91) that lower than FFFF. Most likely you will find it at a few location. If you cannot find any D889 (stored value of 89D8), then you can use directly the address (89D8) located behind the address used to store FACS (89D4). Which mean SLIC table will be appended immediately behind FACS, with string become something like RSDT…FACSSLIC, and can do so by find a location to put this string (move forward 4 bytes or use new location).
   18. However, if you located code like the following near the location of CC91 in IDA, which mean the section of code is used right after “call sub_CCD4″, and use up the memory address of 89D8.
       

       seg000:CC80 sub_CC80 proc near ; CODE XREF: seg000:CC52p
       seg000:CC80 push ds
       seg000:CC81 mov ax, 0F000h
       seg000:CC84 mov ds, ax
       seg000:CC86 assume ds:nothing
       seg000:CC86 add edi, 10h
       seg000:CC8A and di, 0FFF0h
       seg000:CC8D mov large ds:89D8h, edi
       seg000:CC95 pop ds
       seg000:CC96 assume ds:nothing
       seg000:CC96 retn
       seg000:CC96 sub_CC80 endp

       In this case, use UltraEdit to search for next available address from step above (DC89 for 89DC). If nothing is found, this memory address location can be used to put SLIC table. The problem with this memory address allocation is that there is a skip address or space (89D8) between FACS and SLIC tables. To fix this issue, add the text string of FACSSLIC instead of just SLIC, as FACS table is small and won’t use too much memory.

   19. After modification, you will have the ACPI table index string as either RSDT…FACSSLIC or RSDT…FACSFACSSLIC. To accomodate the first instance of string, the whole string can be move forward (to the front) by 4 bytes as mentioned above. Otherwise, a new location has to be identified to store the new text string. But in the later case where 8 bytes have been added, so we need to find a new location for this longer string. In this example BIOS, there is 11 empty bytes (00) in front of the ACPItables_address (located at CC20). This empty bytes should be unused, beside, in UltraEdit, there is no code that uses the CC18 or CC1C two address locations. So, the new string can be put forward to location with starting address as CC18.

       

       
       Moving RSDT string forward 8 bytes to accommodate new 8 bytes SLIC table.

   20. Now the anchor address of the RSDT…SLIC string has been moved, and the initial bit address of the string has to be made known to the system. Search in UltraEdit for “20CC” (the original address), you will find it at CCE2 address as found out from step above. Change the 20 to 18 to make it “18CC” (address always reverse when indicate) to indicate the new starting address.

       

       
       After changing 20 to 18 to indicate new location address.

   21. Since the RSDT string has been moved, the location of FACS table has also moved too (refer to figures above). The original address of FACS table is CC30 while new address is CC28 or CC2C. And, in the rest of the code, the address is been used. So the address of FACS has to be modified too.

       

       The value for the original address is address of ACPItables_address (CC20) + 10 which equals to CC30. In UltraEdit, search for 30CC, which should be found at around reference location of CD35. Change the 30CC to 28CC (for CC28) or 2CCC (for CC2C).

       

       

   22. Next, SLIC table has to be added to the address that is been reserved for it in RSDT tables string in ACPI.BIN.
       

       seg000:CD74
       seg000:CD74 sub_CD74 proc near ; CODE XREF: seg000:CC5Bp
       seg000:CD74 push edi
       seg000:CD76 push esi
       seg000:CD78 mov esi, 0F0000h
       seg000:CD7E mov eax, [esi+89C4h]; Fill RSDT address to RSDT Ptr
       seg000:CD86 or eax, eax
       seg000:CD89 jz loc_CE32
       seg000:CD8D mov [esi+89C0h], eax ; RSDT Ptr
       seg000:CD95 mov eax, [esi+89CCh]; Fill DSDT address to FACP
       seg000:CD9D or eax, eax
       seg000:CDA0 jz loc_CE32
       seg000:CDA4 mov edi, [esi+89C8h]; FACP
       seg000:CDAC mov es:[edi+28h], eax
       seg000:CDB2 mov eax, [esi+89D4h]; Fill FACS address to FACP
       seg000:CDBA or eax, eax
       seg000:CDBD jz loc_CE32
       seg000:CDC1 mov edi, [esi+89C8h] ; FACP
       seg000:CDC9 mov es:[edi+24h], eax
       seg000:CDCF mov eax, [esi+89C8h]; Fill FACP address to RSDT+24
       seg000:CDD7 or eax, eax
       seg000:CDDA jz loc_CE32
       seg000:CDDE mov edi, [esi+89C4h] ; RSDT
       seg000:CDE6 mov es:[edi+24h], eax
       seg000:CDEC cmp byte ptr [bp+1BFh], 7
       seg000:CDF1 jnz short loc_CDFE
       seg000:CDF3 test dword ptr [bp+1C6h], 200h
       seg000:CDFC jz short loc_CE2F
       seg000:CDFE
       seg000:CDFE loc_CDFE: ; CODE XREF: sub_CD74+7Dj
       seg000:CDFE test byte ptr [bp+2EBh], 4
       seg000:CE03 jz loc_CE2F
       seg000:CE07 mov eax, [esi+89D0h] ; Fill ACPI address to RSDT+28
       seg000:CE0F or eax, eax
       seg000:CE12 jz short loc_CE2F
       seg000:CE14 mov edi, [esi+89C4h]
       seg000:CE1C mov es:[edi+28h], eax
       seg000:CE22 mov edi, eax
       seg000:CE25 push es
       seg000:CE26 call sub_B4BB
       seg000:CE29 pop es
       seg000:CE2A jb short loc_CE2F
       seg000:CE2C call sub_5077

       From the matching table that matches the ACPI tables to respective memory address made in step above, use it to match against the code above. Here, none of the code representing process to fill the data value of 89DC address to RSDT table, so the following code needs to be added:

       mov eax, [esi+89DCh] ï¼› 8 bytes
       mov edi, [esi+89C4h] ï¼›8 bytes
       mov es:[edi+2Ch], eax; 6 bytes, the value of the length of the ACPI tables (SLICaddress which is 2C).

       Addition of these code cannot affect the the rest of the functions’ address, so a few not critical code has to be deleted to free up some space.

       In the above code, after every mov eax, [esi+？？？？h], it’s followed by the block of code as below:

       or eax, eax ï¼› 3 bytes
       jz short loc_CE2F ï¼›2 bytes

       These are verification bits which is precaution method to prevent collapse or fault of system. However, after analysis, there is pair of verification bits that can be removed after reorganization of RSDT table. Thus, remove the data verification parts of RSDT table which is located as below:

       seg000:CDD7 or eax, eax ï¼› 3 bytes
       seg000:CDDA jz loc_CE32 ï¼›2 bytes

       and

       seg000:CE0F or eax, eax ï¼› 3 bytes
       seg000:CE12 jz short loc_CE2F ï¼›2 bytes

       After doing this, only 10 bytes of space is freed up, but the mod requires 22 bytes. In the code above, whenever it fills up the code for RSDT table, it will execute this command:

       mov edi, [esi+89C4h] ï¼› 8 bytes

       But, it does not alter the value of the register or variable when twice it executes the process to fill in the RSDT table. So this command can be executed only once. In fact, if the new code is placed here, this command for the new code can be skipped too. With this adjustment, there will be enough blank space been emptied. Extra space can then be filled up with blank command (90 and nop). The final code will look like this:

       seg000:CDCF
       mov eax, [esi+89C8h]; fill up FACP address to RSDT+24
       mov edi, [esi+89C4h] ; RSDT
       mov es:[edi+24h], eax
       mov eax, [esi+89DCh]
       mov es:[edi+2Ch], eax
       nop
       nop
       nop
       nop
       cmp byte ptr [bp+1BFh], 7
       jnz short loc_CDFE
       test dword ptr [bp+1C6h], 200h
       jz short loc_CE2F
       test byte ptr [bp+2EBh], 4
       jz loc_CE2F
       mov eax, [esi+89D0h] ; fill up ACPI address to RSDT+28
       seg000:CE22 mov es:[edi+28h], eax the address for this command cannot be changed.

       The address location of the code that will be deleted and inserted has to be remembered:

       seg000:CDD7 or eax, eax ï¼› 3 bytes
       seg000:CDDA jz loc_CE32 ï¼›2 bytes
       5 bytes starting from CDD7

       seg000:CE0F or eax, eax ï¼› 3 bytes
       seg000:CE12 jz short loc_CE2F ï¼›2 bytes
       seg000:CE14 mov edi, [esi+89C4h]
       5+8 bytes staring from CE0F

       seg000:CDEC cmp byte ptr [bp+1BFh], 7
       Original location of CDEC to insert all needed code here

   23. The mod process is done, now go back to UltraEdit for last step address modification. This step is best done from bottom up to prevent the code below been jumbled when replacing the front part.

       
       Firstly, remove 13 bytes starting from CE0F.

       
       Then insert any 4 bytes of random data at the CDEC, then change the value to 4 90 (90h=nop).

       
       Copy the code at CDE6 to CDEB, and paste it to address starting from CDEC to reflect the command used: mov es:[edi+2Ch], eax

       
       Copy the code at CDCF to CDD6, and paste it to address starting from CDEC to reflect the command used: mov eax, [esi+89DCh]

       
       Lastly, remove 5 bytes starting from CDD7.

   24. Save the code.
   25. Verify that the modification of code is correct by using IDA to check if the modified code is correct. If yes, repack the code into the BIOS file.