Skip to content

Commit dd79278

Browse files
committed
xbar5090 0.2.2 update: docs/HYDRA_RESEARCH.md
1 parent d7f5d1f commit dd79278

1 file changed

Lines changed: 82 additions & 0 deletions

File tree

‎docs/HYDRA_RESEARCH.md‎

Lines changed: 82 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,82 @@
1+
# HYDRA VRAM/Power-limit unlock research notes
2+
3+
> Status: research only. No code from HYDRA has been copied or merged into this
4+
> project. HYDRA Pro appears to be closed-source/paid; these notes are for
5+
> evaluating whether a similar feature can be implemented in xbar5090.
6+
7+
## What HYDRA is
8+
9+
- Developer: **1usmus**
10+
- Latest update/change feed on GitHub:
11+
<https://github.com/1usmus/HYDRA_UPDATE>
12+
- According to public coverage (2026-08), **HYDRA 2.3B Pro** adds support for
13+
NVIDIA RTX 50-series:
14+
- unlocks GDDR7 memory-clock limits to **36 Gbps** (from the usual 34 Gbps or
15+
lower on some models),
16+
- raises the power-limit adjustment range to **125%**,
17+
- works without flashing a modified VBIOS,
18+
- currently distributed as a paid "Pro" version.
19+
20+
## Why it is not directly mergeable
21+
22+
The GitHub `HYDRA_UPDATE` repository contains only:
23+
24+
- `HYDRA_CHANGELOG.txt`
25+
- `HYDRA_UPDATE_INFO.txt`
26+
27+
It does **not** contain the HYDRA source code. The tool itself is closed-source.
28+
Therefore we cannot copy the VRAM-unlock implementation directly into xbar5090.
29+
30+
## What would be needed to implement a similar feature
31+
32+
1. **Find the private NvAPI/RM command** used by HYDRA on Windows for:
33+
- memory-clock/PLL limit override,
34+
- power-limit override beyond the VBIOS default.
35+
2. **Reverse-engineer the buffer layouts** for the relevant GET/SET control
36+
functions on the validated driver family (R572..R610), in the same way this
37+
project already did for XBAR/MSVDD/ratio/VF.
38+
3. **Add read-only probe first**, then a backed-up/read-back SET with strict
39+
safety limits, and finally an L2/game stability validation.
40+
4. **Handle driver-branch differences**; the current project already has a
41+
`probe`/`crack` mechanism that could be extended.
42+
43+
## Risks
44+
45+
- VRAM overclocking beyond the factory lock can cause data corruption, visual
46+
artifacts, or hardware damage even if the tool reports success.
47+
- The power-limit and memory-limit controls are likely private RM/NvAPI
48+
interfaces and may be driver/VBIOS-specific.
49+
- HYDRA Pro is paid; reverse-engineering its behavior for compatibility may
50+
raise legal/ToS questions. Independent probing of the NVIDIA driver is safer.
51+
52+
## Download / payment (as of 2026-08)
53+
54+
- Official update feed: <https://github.com/1usmus/HYDRA_UPDATE>
55+
- Official discussion/payment thread is the Overclock.net "Official HYDRA (and
56+
HYDRA PRO) Thread"; the exact price/subscription method is behind the forum
57+
and was not scrapeable from this environment (WAF/Cloudflare).
58+
- Public coverage states the RTX 50 VRAM/power unlock is in the **paid Pro**
59+
tier; there is no open-source implementation in the GitHub update repo.
60+
61+
## Feasibility for xbar5090
62+
63+
- XBAR was cracked because the private NvAPI/RM control for clock domains is
64+
exposed and reversible. A 36 Gbps memory unlock would need the same class of
65+
private control for the **memory clock/PLL limit** and/or **power-limit SET**.
66+
- Current `perf_limits` module is read-only; the validated Windows driver did
67+
not expose the PERF SET command.
68+
- A quick read-only dump of `clk_domains` on the author's RTX 5090 shows only
69+
the XBAR domain entry nonzero; the memory clock limit is not visible through
70+
the same simple offset path, so additional reverse engineering is required.
71+
- Conclusion: technically the same methodology could be attempted, but it is a
72+
separate reverse-engineering project with higher risk. Do not expect a quick
73+
merge from HYDRA; it is closed-source and paid.
74+
75+
## Suggested next step
76+
77+
- Run HYDRA on the same system and capture which NvAPI/RM functions it calls
78+
(e.g. with API Monitor/x64dbg or by observing `nvapi64.dll` exports used).
79+
- Compare those IDs against known RM command tables in
80+
`docs/reverse/` and `scripts/validate_nvapi_drivers.py`.
81+
- If a stable read-only GET can be found, add it to `candidates.json` and
82+
extend `probe.py`/`crack.py` before attempting any SET.

0 commit comments

Comments
 (0)