Turn Cheap Chinese X99 into a Beast: BIOS Unlock, Turbo Boost & Unbrick Guide

Chinese X99 motherboards (Huananzhi, Machinist, Kllisre, Atermiter) offer incredible value for money, especially when paired with Intel Xeon E5 V3 processors. However, to unleash their full potential, specifically the All-Core Turbo Boost Unlock, you often need to modify and flash the BIOS.

In this guide, we will cover two methods: the Software Method (using FPT via EFI) and the Hardware Method (using a CH341A Programmer), which is essential if you brick your board. We will use the ZX-99EV3 v1.31 as our case study.

Here some example of motherboard, CPU and RAM you can buy MACHINIST X99 Motherboard LGA2011-3 TPM 2.0 - HUANANZHI X99 CD3 LGA 2011-3 - Intel Xeon E5 2699 V3 - Intel Xeon E5 2697 V3 - Intel Xeon E5 2666 V3 - ENvinda Server Memory DDR4

Why Flash the BIOS?

1. Turbo Boost Unlock (TBU): Force all Xeon cores to run at maximum turbo frequency simultaneously (e.g., locking an E5-2678 v3 at 3.3GHz on all cores instead of 2.5GHz).
2. Undervolting: Lower temperatures and power consumption directly from the BIOS (essential for TBU stability).
3. Resizing BAR: Enable Re-Size BAR for modern GPU performance.
4. Unbricking: Recover a dead motherboard after a failed flash or bad settings.

What is BIOS, and why does it sound familiar?

You might wonder why I say I have already spoken about this topic. The answer lies in the hardware: the BIOS firmware resides physically on an SPI Flash memory chip. I have covered these chips extensively in the context of microcontrollers. If you are curious about the underlying technology, looking to expand the storage capabilities of your projects, or simply want to understand the communication protocols used by these chips, here are some essential tutorials from my blog:

• Understanding the Protocols: Before diving into hardware, it is useful to understand the differences between the main interfaces: i2c, SPI and UART compared
• ESP32 & ESP8266: A complete guide on how to wire and manage external memory with a FAT file system: esp32 and esp8266: FAT filesystem on external SPI flash memory
• STM32: How to handle external flash memory specifically for STM32 microcontrollers: STM32: SPI Flash memory external storage
• Arduino SAMD (Nano 33 IoT, MKR): Expanding storage for the SAMD architecture: Arduino SAMD (NANO 33 and MKR): FAT file system on external SPI flash memory

The right CPU

I added some buy links with some Xeon E5 CPUs, they are different, but you can find your perfect solution.

Detailed Breakdown: Before & After the Unlock

Intel Xeon E5-2699 v3 (The “Power Monster”)

• Stock: Out of the box, this is a pure multi-thread workhorse. It has massive core density (18 cores), but to keep power consumption in check, Intel aggressively downclocks it to ~2.8 GHz when under full load. It feels sluggish in single-core tasks.
• With Turbo Unlock: This CPU undergoes the most dramatic transformation. Forcing 18 cores to attempt 3.6 GHz creates a monster.
  • The Catch: It almost immediately hits the power limit (TDP throttling). Unless you have a top-tier motherboard with active VRM cooling, it will struggle to maintain that 3.6 GHz, often fluctuating around 3.3–3.5 GHz.

Intel Xeon E5-2697 v3 (The “Sweet Spot”)

• Stock: A very capable processor that balances core count (14) with decent clock speeds. It is generally faster than the 2699 in daily tasks due to higher base clocks.
• With Turbo Unlock: This is widely considered the best CPU for the unlock mod. Because it has 4 fewer cores than the 2699, it has enough thermal and power headroom to actually sustain 3.6 GHz on all 14 cores without severe throttling. It offers reliable, high-speed performance for both gaming and heavy workstation tasks.

Intel Xeon E5-2666 v3 (The “Gamer’s Favorite”)

• Stock: It already runs fast. With a 2.9 GHz base and ~3.2 GHz all-core boost, it is the snappiest of the three for general Windows use and gaming right out of the box.
• With Turbo Unlock: The gain is less dramatic here (moving from ~3.2 to 3.5 GHz), but it solidifies its position as a budget gaming king. It provides stable frame rates and matches the performance of much newer desktop CPUs (like the Ryzen 2600/3600 era) for a fraction of the price.
  • Bonus: It is often compatible with DDR3 RAM on specific motherboards, allowing for the cheapest possible build cost.

The Software Approach (FPT – Flash Programming Tool)

This method is for working systems. It does not require external hardware, but it requires the BIOS to be unlocked for writing.

Prerequisites

• A USB Drive formatted in FAT32.
• Intel ME System Tools v9.1 r7 (Specifically the fpt.efi file from the Flash Programming Tool/EFI64 folder).

• Miyconst Ultimate Patcher Tool (to modify the BIOS).

Get the BIOS

I only describe the steps via USB Key, but if you want to try, you can use fptw64, which you can launch from the Windows command prompt. In Windows 11, there are many security restrictions that block functionality, making it more tedious.

Use the EFI Method (Recommended for X99)

Ditch DOS. DOS is outdated and manages memory poorly on X99 motherboards. Your board is native UEFI, so the most powerful and error-free tool is the EFI Shell. Here is a step-by-step guide to doing it correctly:

1. Prepare the USB Drive (from Windows)

• Format the USB drive to FAT32 (you don’t need Rufus; the standard Windows format is sufficient).
• Download the specific package for X99: Search Google for “Intel ME System Tools v9.1 r7” (this is the official package containing the correct tools for your board).
• Open the ZIP file and navigate to: Flash Programming Tool -> EFI64.
• Copy the fpt.efi (or fpt64.efi) file to the empty USB drive.

2. Launch the Shell

• Restart your PC with the USB drive inserted.
• Enter the BIOS or Boot Menu (usually F11 or F7).
• Select the option “UEFI: Built-in EFI Shell” or, if that is missing, select your USB drive with the UEFI prefix.

3. Enter the Commands

• You will see a black screen with yellow/white text (Shell>).
• Type fs0: and press Enter (if you get an error, try fs1: or fs2: until the prompt changes to FS0:\>).
• Type ls (or dir) to check: if you see the fpt.efi file in the list, you are in the right place.
• Now run the command:

fpt.efi -d backup.rom

• If everything goes well, you will see a green progress bar and finally “FPT Operation Passed”.

Using DOS

If you absolutely cannot boot into the EFI Shell and want to use DOS (FreeDOS), you must replace the fpt.exe file on your USB drive. The one you are currently using is incorrect.

1. Search for the “Intel ME System Tools v9.1 r7” package again.
2. This time, navigate to the folder Flash Programming Tool -> DOS.
3. Take that specific fpt.exe file (it must be accompanied by fparts.txt or similar; copy the entire content of the DOS folder).
4. Replace the files on your Rufus-created USB drive with these new ones.
5. Retry the boot.

Mod the bios: Ultimate Patcher Tool Configuration Steps

Based on the images you uploaded, here is the breakdown of how you are configuring the modified BIOS for your X99 motherboard:

1. Firmware Summary The tool has successfully identified your original BIOS file.

• Status: Correctly detected as “American Megatrends,” Version 5.11 (dated 04/20/2020), for Chipset X99.

2. Features (The Performance Mods) This is the most important step where you are unlocking performance.

• Enable overclocking support: Checked. This allows voltage and core control.
• Unlock Turbo Boost ratio: Checked. This forces the maximum Turbo frequency on all cores (the main goal of this mod).
• Reveal XMP profile settings: Checked. This unlocks hidden RAM timing menus.

3. Access Permissions

• Selection: “Do not change access permissions.”
• Why: You are using a hardware programmer (CH341A + Clip), so you don’t need to patch software protections. You will be writing directly to the chip, bypassing the OS restrictions.

4. Resizable BAR (ReBar)

• Selection: “Do not install driver.”
• Note: You have chosen not to add Resizable BAR support yet. This is the safe choice for stability. If you have a modern GPU (RTX 3000+ / RX 6000+), you can re-run this tool later to add it.

5. Customization (Logo & Sound)

• Logo: Kept at default (American Megatrends).
• Sound: The startup “Beep” sound is kept enabled.

6. LED Control

• Selection: Unchecked (Default).
• Note: This is specific to “Jingsha” boards. Since you have a ZX-99EV3, it is correct to ignore this.

Mod the bios: S3TurboTool Steps (discouraged)

You can find this guide here. I replicated the steps for your handful, but the original one is from this site.

You can download all required files and tools from my Microsoft OneDrive: Miyconst Hardware / LGA 2011-3 / TBU 2023 Q4.

Remove the 06F2 CPU microcode

• Launch the mmtool_a5.exe application.
• Click the [Load Image] button and select your BIOS file.

• Navigate to the [Cpu Patch] tab.

• Find and delete all entries from the table where CPU ID equals to 06F2.

• Save the modified BIOS.

Set CPU C State options

• Launch the AMIBCP5.exe application.
• Open the BIOS file saved in the previous step.
• In the left tree find the CPU C State Control option, usually it’s located at the following path: Common RefCode Configuration → IntelRCSetup → Advanced Power Management Configuration → CPU C State Control.

• Set the following values:
  • Package C State limit to C2 state.
  • CPU C3 report to Enable.
  • CPU C6 report to Disable.
• Close AMIBCP5 application and agree to save changes.

Inject required TBU driver – Single Socket

• Launch the UEFITool.exe application.
• Open the BIOS file saved in the previous step.
• Inside Intel image → BIOS region search for entry PchS3Peim with UID 271DD6F2-54CB-45E6-8585-8C923C1AC706.
• Right-click on the PchS3Peim entry and select [Replace as is ...].

• Select the desired .ffs file you want to inject.
• Save the changes.

Flash the Modified BIOS

• Boot back into EFI Shell.
• Run: fpt.efi -f mod.rom
• Error 280? If you get a “Write Protection” error, you must disable BIOS Lock in the BIOS settings (Intel RC Setup > PCH Configuration > Security).

• After flashing, perform a Load Optimized Defaults in the BIOS.
• Disable C3/C6 States in “Power Management” to prevent freezing.

The Hardware Approach (CH341A Programmer)

If your motherboard doesn’t turn on, hangs on a specific debug code (like 79, FF, or 00), or you flashed a bad undervolt setting, the software method won’t work. You need a hardware programmer.

This is extremely common when experimenting with memory timings or aggressive undervolting (e.g., -70mV/ -90mV).

Prerequisites

• CH341A USB Programmer (Black or Green edition) with a SOIC8 Clip.

Here you can buy the usb programmer CH341A Flash BIOS USB Programmer Module + SOIC8/SOP8 Test Clip

• NeoProgrammer software (Version 2.2+ is recommended for X99 chips).
• A second working computer.

Technical Insight: The CH341A interacts directly with the Serial Peripheral Interface (SPI). For a comprehensive explanation of SPI pinouts and interfacing, check my SPI tutorials on mischianti.org.

The ZX-99EV3 v1.31 Procedure

1. Locate the BIOS Chip:
   • On the ZX-99EV3 v1.31, the BIOS chip is an 8-pin Winbond W25Q128 (16MB).
   • It is located in the bottom-right corner, near the SATA ports and the front panel headers.
2. Prepare the Board:
   • Power OFF: Unplug the PSU cable.
   • Remove Battery: Take out the CR2032 battery.
   • Jumper Check: Ensure the JCMOS1 jumper is in the default position (1-2) or removed. Do not leave it on 2-3, or the board will appear dead.
3. Connect the Clip:
   • Match the Red Wire on the clip to Pin 1 on the chip (indicated by a small dot or indentation on the chip surface).
   • If the clip is incorrectly connected, you don’t get the correct chip.

4. Flash with NeoProgrammer:

• Detect: Click “Detect”. Ensure it identifies a W25Q128 (SPI NOR) and not a generic N01GV (NAND). If detection fails, reseat the clip.

• Read (Optional): If you haven’t backed up before, click “Read” to save the current (corrupt) state, just in case.
• Erase: Click “Erase” to wipe the chip.
• Blank Check: Verify the chip is empty.
• Write: Load your known good backup.rom (or a clean stock BIOS) and click “Program”.

• Verify: Wait for the “Success” message.

Troubleshooting: “My PC Won’t Turn On After Flashing!”

If you flashed the chip successfully but the fans don’t spin:

1. Check the PSU Switch: It sounds trivial, but ensure you actually flipped the I/O switch on the power supply back to “I” (On). It happens to the best of us!
2. Drain Power: Unplug the cord, hold the power button for 30 seconds to drain capacitors.
3. CMOS Reset: Double-check that the Clear CMOS jumper is NOT in the shorted position.
4. First Boot Delay: The first boot after a hardware flash triggers “Memory Training”. The screen may remain black for 1-3 minutes. Be patient.

Performance Breakdown: Stock vs. Turbo Unlock

The following table highlights the tangible gains achieved by applying the Turbo Unlock modification and optimizing the memory configuration on the Intel Xeon E5-2699 v3.

Why Quad Channel is Critical for 18 Cores

Having a powerful CPU like the 18-core Xeon E5-2699 v3 without Quad Channel memory is like having a Ferrari engine with a restricted fuel line. The CPU processes data faster than the RAM can provide it, creating a bottleneck.

The Bandwidth Schema:

• Single Channel (1 Stick): 1 Lane of Traffic. The 18 cores must wait in line for data.
  • Result: Stuttering in games, slow render times.
• Dual Channel (2 Sticks): 2 Lanes of Traffic. Better, but still limits this specific CPU under full load.
  • Result: Decent performance, but leaves potential on the table.
• Quad Channel (4 Sticks): 4 Lanes of Traffic (High-Speed Highway).
  • Result: As confirmed by the CPU-Z validation, the 4x RAM sticks work in parallel (256-bit width), feeding data instantly to all 18 cores. This is essential for the stability and speed shown in the 3.3 GHz benchmark.

The “33x vs 36x” Stability Choice

You might notice that while the theoretical maximum multiplier for the E5-2699 v3 is 36x (3.6 GHz), the unlocked result is stabilized at 33x (3.3 GHz). This is not an error, but a deliberate architectural limitation for system stability.

1. The AVX Offset: High-performance workloads (like rendering or stress tests) use AVX instructions, which generate significant heat. The CPU automatically applies a negative offset (typically -300 MHz) to protect the silicon and the motherboard’s VRMs from melting.
2. TDP Limits: Running 18 cores at 3.6 GHz would require power delivery far exceeding the 145W TDP rating.
3. The Sweet Spot: By locking all cores to 33x, we achieve the perfect balance: the CPU runs significantly faster than the stock 28x without crashing or thermal throttling, ensuring the system remains rock-solid for 24/7 usage.

Thanks

Flashing the BIOS on X99 boards like the ZX-99EV3 is a rite of passage for Xeon enthusiasts. Whether you are doing it via software to get free performance or using a CH341A to recover from a brick, the process is straightforward if you follow the rules.