Feature-report envelope
| Offset | Meaning | Validation |
|---|---|---|
| 0 | Status: request 00, successful response 02. | Reject every non-success response status. |
| 1 | Transaction identifier. | Response must match the request transaction. |
| 5 | Payload length, maximum 80 bytes. | Validate bounds and exact command-specific length. |
| 6 to 7 | Command class and command ID. | Both must match the request. |
| 8 to 87 | Payload and zero-filled remainder. | Apply a command-specific payload decoder. |
| 88 | XOR checksum of bytes 2 through 87. | Reject a checksum mismatch. |
| 89 | Reserved trailing byte. | The protocol report remains exactly 90 bytes; Windows feature I/O includes its report ID separately. |
Read-only queries
| Feature | Class/ID | Request payload | Decoded response |
|---|---|---|---|
| Thermal state, channels 1/2 | 0D/82 | 01 CC 00 00 | Recognized automatic or manual state; both channel responses must agree. |
| Fan RPM, selectors 1/2 | 0D/88 | 01 SS 00 | 01 SS RR, RPM = RR × 100. |
| Custom CPU/GPU level | 0D/87 | 01 DD 00 | 01 DD LL, where the recognized level is Low, Medium, or High. |
| Battery protection/limit | 07/92 | 00 | 50 off; B2/B7/BC/C1/C6/CB/D0 for 50% to 80%. |
| Temporary full charge | 07/8F | 00 | 00 inactive; 04 active. Other one-byte values are rejected. |
| Adapter class | 07/8C | 00 00 | 00 11 battery, 07 11 USB-C, and 11 11 full-power barrel adapter. |
| Keyboard brightness | 03/83 | 01 05 00 | 01 05 BB, raw brightness 0 to 255. |
| Logo state/effect | 03/80, 03/82 | 01 04 00 | 01 04 VV; state is disabled/enabled and effect is Static/Breathing. |
| MCU version | 00/87 | 00 00 00 00 | Four numeric version components. |
| Startup animation | 0F/98 | 00 | 00 enabled; 01 disabled. |
| Function-key primary mode | 02/86 | 01 00 | 01 00 function keys; 01 01 multimedia. |
| Gaming mode | 00/88 | 00 00 00 00 | 00 00 00 00 off; 01 00 00 00 on. |
| Device mode | 00/84 | 00 00 | Normal or Driver mode. |
| Display | Windows API | Not applicable. | Fixed 60/240 Hz, Dynamic 48-240 Hz, HDR, and five SDR color profiles. |
| CPU advanced tuning | Observed only | Not available. | CPU Power Limit 45-95 W and CPU Voltage Optimizer -30 to -1 remain visible without a writable backend. |
| Notation | CC channel; SS fan selector; DD performance domain. | LL level; BB brightness; VV command-specific value. | Placeholders are decoded and constrained by typed code. |
Admitted setters
| Family | Class/ID | Sanitized request shape | Accepted response payload | Admission notes |
|---|---|---|---|---|
| Performance | 0D/02, 0D/07 | 01 CC MM 00 thermal state and 01 DD LL custom level; domains, modes, and levels are typed. | Same channel or domain payload. | Full-power AC admits Balanced, Silent, Performance, and Custom. Battery admits Battery Saver and Battery Balanced. USB-C remains read-only. Both thermal channels and each Custom domain must match. |
| GPU clock tuning | NVIDIA API | Core -1,000 to +400 MHz and memory -1,000 to +3,000 MHz, limited again by the installed driver. | Confirmed core and memory offsets. | Available on full-power AC in every admitted AC mode and during HyperBoost. OpenBlade confirms the applied offsets and restores the previous values after a failed change. |
| Cooling | 0D/02, 0D/01 | Typed automatic/manual state and 01 CC RR fan targets from 2,000 to 5,000 RPM. | Same channel payload. | Read back mode and both RPM channels; targets are bounded to this model's maximum. |
| Battery care | 07/12, 07/0F | Protection off, a 50-80% limit, or temporary full charge. | Same one-byte value. | Read back through 07/92 or 07/8F; each validation restores the prior confirmed state. |
| Keyboard and logo | 03/03, 03/00, 03/02, 0F/18, 02/06, 00/08, 00/04 | Typed brightness, logo, startup, function-key, Gaming Mode, and device-mode values. | Same typed payload or the admitted one-shot response. | Read back each durable state independently. Function-key setters use this model's selector-free payload. |
| Keyboard matrix frame | 03/0B, 03/0A | Six typed rows across 17 logical columns, followed by a latch. | Validated status, transaction, class, ID, length, and checksum envelope. | PID 02C6 uses 90-byte protocol reports and has no 375-byte feature collection. |
| HyperBoost | Reviewed capture | Exact captured per-channel entry and restoration pairs for Silent, Balanced, Performance, and Custom. The bytes remain in the reviewed fixtures. | Both channels must confirm HyperBoost and the restored starting mode. | Requires full-power AC. A fresh pad check selects either the supported cooling-pad path or the admitted padless path. Entry is direct from the current AC mode. Exit restores that mode, saved fan intent, Custom CPU/GPU levels when applicable, and confirmed GPU offsets. An indeterminate write is never retried. |
Input and lighting behavior
| Area | Supported behavior | Boundary |
|---|---|---|
| Keyboard effects | Off, Ambient Awareness, Audio Meter, Breathing, Fire, Reactive, Ripple, Spectrum Cycling, Starlight, Static, Tidal, Wave, and Wheel, plus an imported sequence. | Effect parameters, the complete spatial key map, and native effect or matrix readback remain separately gated. An imported sequence uses this model's own verified logical-key projection and is admitted only for a known keyboard layout. |
| Animation frame rate | 30 Hz. | The opt-in 60 Hz rate is admitted only on the Razer Blade 16 (2026) transport. |
| Windows Dynamic Lighting | OpenBlade can delegate the 85-lamp keyboard LampArray to Windows. | Delegation stops OpenBlade keyboard lighting writes. The lid logo remains independent. |
| Special-key bindings | M1 through M5 are editable. M1 is Fn+Page Up and M2 is Fn+Page Down; M3 through M5 use exact function reports. Fn+P cycles the modes available for the current power source. | OpenBlade combines the exact PID 02C6 Fn state with the Page Up, Page Down, or P key edge. It suppresses the ordinary M1 or M2 key only while a custom binding owns that slot. |
| Display brightness | The native Windows brightness flyout can use the exact signed PID 02C6 Razer driver stack when it is installed. | The runtime checks the interface ancestry, instance-ID prefix, service name, and pinned driver hash. OpenBlade uses WMI and its own flyout when the exact stack is absent. The ordinary installer does not install Razer drivers. |
| HDR and color | HDR uses a fresh Windows readback, including after an access-denied result. | The change is accepted only when readback matches; SDR color profiles are disabled while HDR is on. |
Admission meaning
| Status | Meaning | Required evidence |
|---|---|---|
| Supported | The feature is admitted for this exact model. Listed firmware versions record the tested configurations. | Reviewed evidence, typed validation, apply, readback, and restoration where the operation is reversible. |
| Observed only | The capability remains documented but cannot be changed by OpenBlade. | A separate backend and trustworthy readback are still required. |
| Unavailable | The UI may identify the model difference but does not offer a write. | No command is borrowed from another model and no ambiguous input is suppressed. |
Core evidence map
| Published fact | Tracked core evidence |
|---|---|
| Exact target and observed firmware identity | RazerBladeModelCatalog.cs, WindowsHostIdentitySource.cs |
| Battery, performance, cooling, and power-source support | Rz090528BatteryValidationFactory.cs, BatteryValidationFactory.cs, ProductionBatteryPort.cs |
| GPU clock tuning and restoration | BatteryValidationFactory.cs, NvidiaGpuClockOffsetController.cs, GpuClockOffsetManagement.cs |
| HyperBoost command set, pad paths, and restoration | Rz09_0528_02c6_2_02_HyperBoostProduction.json, Rz09_0528_02c6_2_02_HyperBoostWithoutCoolingPadAdmission.json, Rz090528HyperBoostWithoutCoolingPadAdmission.cs, HyperBoostCapabilityPolicy.cs |
| Brightness, logo, and device mode | Rz090528BrightnessLightingFactory.cs |
| M1-M5 and Fn+P input | Rz090528BrightnessLightingFactory.cs, SpecialKeyRawKeyboardState.cs, Rz090528FunctionPInputState.cs |
| Display brightness driver tuple | WindowsRazerDisplayBrightnessHidTransport.cs, DisplayBrightnessHidController.cs |
| Matrix geometry and effects | Rz090528MatrixLighting.cs, Rz090528SynapseEffects.cs |
| Exact-device capability coverage | rz09-0528-pid-02c6-bios-2.02-device-coverage.json, FirmwareSmokeAssessment.cs |
| Immutable sanitized evidence | rz09-0528-pid-02c6-bios-2.02-evidence.json, provenance index |