I sincerely appreciate the prompt response! I also love the creative approach of swapping the SMI BIOS and Boot Guard regions with one from another firmware image. Unfortunately, while this unlocked my admin password to change bios options, the other firmware region you swapped with has a similar AMI v2 Protected Ranges hash file covering most SMM drivers. This is the real issue as I was already able to boot into my OS without the Admin password.

I tried flashing an image with an SMM driver modified (high confidence it is well-formed, replaced/rebuilt with UEFITool v28 to tmp file,...

Oops, forgot to attach my dump. Here it is:...

Hello, I have an old Dell G3 3579 (ST: 2WQ7LP2-8FC8) with a newer 8FC8 BIOS password. I have successfully attached to the flash chip (W25Q128JVSQ) on the motherboard with a CH341A programmer and made several modifications using Intel FIT (e.g., allow software SPI write) without bricking. I was also able to boot to a modified GRUB shell where I attempted to edit many BIOS security related options like BIOS Guard/Lock, Flash Signature Override, ME FW Image Re-Flash, etc.

Unfortunately, some of these modifications like to Intel BIOS Guard failed because it is fused into the PCH. Also,...