As the software hack at least released the 200MHz option (no serial decode liberated yet), I am going to do the MOD on the front end. Right now, I am only getting around 90MHz and it drops significantly at 100MHz and up. Need to remove one IC, remove some SMD resistors and caps, swap some resistor values and replace the LMH6550 for LMH6552.
Just as an exercise, I might do all the mod except for replacing the differential amplifier and see if the chip specification really matters.
EDITED: when running with the hacked software, it looses all the installed options. And if you try to install a new license, it fails complaining about the date being wrong.