H20 BIOS十六进制解锁项目时需要定位的几个项目

AnonTokyo 发布于 2025-04-21 144 次阅读

新版H2O已经取消了Setup Menu Insyde Full Show，只能通过十六进制编辑SetupUtility的PE32 Image Section来解锁项目（例如蓝天V15x_7xRNE_D_C(-G) V1xxRNx(-G)模具）

  1. 首先使用Universal IFR Extractor取得IFR
  2. 然后搜索
  3. Form: Advanced, Form ID: 0x1
  4. 可以看到有一排类似Suppress If: {0A 82}的语句，语句后面会跟着Variable 0x1C97 equals 0x0 {12 06 97 1C 00 00}，后面的Ref为条目名称
  5. 在16进制编辑器里将0A 82 12 06 97 1C 00 00更改为0A 82 13 06 97 1C 00 00即可（即16进制12+1，同理，19会变成1A）
  6. 重复以上步骤，以下是其他需要通过搜索定位的条目

Form: OverClocking Performance Menu
往下找第一句Suppress If: {0A 82}，修改第一个能改的地方

最终得到结果

Op Loaded
SetupUtility
Op Patch
Pattern
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
446174615661720001860100BE080A821306981C00000287B208000000290229020A821306981C00000F0F7609020001000000FFFF00010629020A821306981C00000F0FDF09020002000000FFFF00020629020A821306981C00000F0F9E0A020003000000FFFF00030629020A821306981C00000F0FB00A020004000000FFFF00830529020A821306981C00000F0FED0A020005000000FFFF00210629020A821306981C00000F0FF10AF20A06000000FFFF00850529020A821306981C00000F0FF50A020007000000FFFF00220629020A821306981C00000F0FB10B020008000000FFFF00200629020A821306981C00000F0FC008C10809000000FFFF0021000F8FC208C3080A000000FFFF0022000404030029020F8FC408C5080B000000FFFF0023000404040029020F0FC608C7080C000000FFFF0026000F8FC808C9080D000000FFFF0027000404060029020F0F520E530E0E000000FFFF0006100F0FEA17ED170F000000FFFF0008100F8FCA08CB0810000000FFFF0028000404070029020F8F0700070011000000FFFF000D100404080029020F0F900C910C12000000FFFF00D2130F0FE500E60013000000FFFF000E100A821306671D00000F0F0B04

Op Patch
Pattern
0229020A821286741500001206341D0000160229020591AF05B005F602030081
0229020A821286741500001306341D0000160229020591AF05B005F602030081

Op Patch
Pattern
FF00E4100A8212062A1D01000F0F5C055D0500040000FFFF001C102902028716
FF00E4100A8213062A1D01000F0F5C055D0500040000FFFF001C102902028716

Op End

Op LoadFromFV
SetupUtilityApp
Op Exec