[REQUEST] Clevo P751ZM (mobo P750ZM-G) BIOS unlock

[EuReKa-LoS]

Hello and happy new year \o/
I have a laptop called Berserk MK1 from Materiel.net but in fact its a Clevo P751ZM (the current motherboard is P750ZM-G).

I love this laptop who's a gift from my parents for my degre (2016).

I research a full unlocked and upgraded BIOS, if possible compatible with my GTX 1070 MXM (upgrade from 970M).
My GTX 1070 is a Clock/memory/boost 1518/2002/1733 vBIOS 86.04.72.00.12 (Subvendor Clevo/Kapok).
A few Mhz are not refused 

I had issues with Intel and Samsung SSD's for raid 1 break i think due to the "ME FW" 

If it's possible to unlock g-sync, i've read if the GPU isn't based in g-sync it can't (my original 970M was g-sync)

The BIOS of my Clevo is the lastest:

  Mobo-E0309.zip (Size: 56.4 KB / Downloads: 18)

The original vBIOS of my GTX1070 is this one (Internal display and HDMI work, no g-synch):

  GPU-stock-GP104-86.04.42.00.03.rom.zip (Size: 148.68 KB / Downloads: 8)

I've flash the vBIOS with this version (Internal display, two display port and HDMI work, no g-synch):

  GPU-updated-clevo-GTX-1070-8-GB-BIOS-207530.zip (Size: 151.22 KB / Downloads: 8)

I want a unlocked BIOS to undervolt my delid (Artic Silver MX-4) 4790K, XTU don't work.

I gonna upgrade the delid with cooper and metal liquid and maybe metal liquid on the GTX1070. 

In the BIOS:
The ME FW Version: 0.0.0.0 sometimes it show 9.1.20.1035
BIOS version 1.03.04
KBC/EC Firmware Revision 1.03.09
VGA Card: Unknown
vBIOS Revision: 86.04.72.00.12
vBIOS Build Date: 06/14/17

I'm able to flash the BIOS for example with the CH341-Programmer (i've bricked the GTX1070 previously )

Big thanks in advance

[EuReKa-LoS]

I don't find any infos about any modded BIOS for my laptop (exept for the Prema's unicorn ).
I've try a dump of my current version:

  Backup-BIOS-1-03-04.zip (Size: 2.19 MB / Downloads: 22)

I've found the following model are the same CLEVO P750ZM / SAGER NP9752 / ORIGIN PC EON15-X

Maybe if if found the tools to create my own version :3

[EuReKa-LoS]

Hi everyone,

I posted a BIOS unlock request some time ago but didn't get any response,
so I decided to dive into BIOS modding myself (i've done 17versions...).

I have a Clevo P750ZM-G laptop with the following specs:
- CPU: Intel i7-4790K (delidded, liquid metal)
- GPU: GTX1070
- Chipset: Z97
- BIOS: AMI Aptio IV
- Flash chip: GigaDevice GD25Q64B (dumped directly with CH341A)

I'm trying to unlock the Chipset menu in the BIOS (for Wake on LAN, PCH-IO Configuration, voltage options).

What I've already done:
- Direct dump of the flash chip with CH341A
- AMIBCP: set all options to USER
- Patched all SuppressIf True (0A824602 → 0A824502) in Setup MiniSetupResourceSection via uefitool

Result: all other menus are now unlocked but Chipset tab is still completely absent from the BIOS navigation bar.

I suspect it might be controlled by a bitmask in AMITSE module, but I'm not sure.
All SuppressIf True have been patched but the Chipset tab still doesn't appear at all in the navigation bar.

BIOS dump: link

Thanks in advance

[EuReKa-LoS]

After some digging i've force enable de Wake On LAN and it works.

I've undervolt my CPU (-115mV offset and -108mV RING) i've drop 92° to 78° without repaste and i've dismount the heatsink to teardown to the BIOS U11 component.

My BIOS chip is removable and i flash with CH341A.

I still unable to unlock showing the Chipset menu in the BIOS (so can't undervolt my memory from 1.5 to 1.35v).


Here the version from stock to unlocked Overclocking and memory timing options.

Partial Unlocked BIOS

[EuReKa-LoS]

Update on my research:
After analyzing the AMITSE module with Ghidra, I found a function FUN_1800048bc that filters which BIOS tabs are displayed using a ClassGUID whitelist.
The list only contained 2 GUIDs and the Chipset menu ClassGuid ADFE34C8-9AE1-4F8F-BE13-CF96A2CB2C5B was missing.
Two patches applied to the AMITSE PE32:

Added the Chipset GUID to the table at offset 0x465A0
Modified the loop counter CMP BX, 0x2 → CMP BX, 0x3 at offset 0x48FA

Result: Both patches are confirmed present in the flashed BIOS, but the Chipset tab still doesn't appear — there must be a third filtering mechanism we haven't identified yet.
Does anyone have experience with AMITSE internals that could point us in the right direction?

[EuReKa-LoS]

Follow-up - Day 3-4 Analysis:
The investigation suggests the Chipset menu is protected by 3 potential filtering layers:
Layer 1 - IFR Level Protection (Confirmed):

FormSet Chipset wrapped in: Suppress If { QuestionId 0x25B equals 0x1 }
Variable 0x25B (TPD4) at NVRAM offset 0x28C
When TPD4 = 0x1, Chipset menus appear hidden

Layer 2 - AMITSE ClassGUID Whitelist (Patched but Inconclusive):

Found and patched ClassGUID whitelist at PE32 offset 0x180046580
Added missing Chipset GUID + modified loop counter 0x2 → 0x3
Both changes confirmed in flashed BIOS but no effect observed
Conclusion: This is likely NOT the primary blocking mechanism

Layer 3 - Runtime AMITSE Decision (Hypothesis):

AMITSE likely evaluates IFR conditions against Setup NVRAM at offset 0x28C
Probable suppression logic: "if TPD4==0x1 then hide Chipset"
This appears to be the blocking point, but exact implementation still unidentified

The suppression mechanism is not yet fully understood. Looking for AMITSE/AMI expertise to confirm which layer(s) actually control the Chipset visibility and where to apply an effective patch.