Can I crossflash a Pioneer BDR-X13 (BDR-213T) to a UHD model?

[timkw]

Hi everyone,
My drive info is:
Drive Information
OS device name: W:
Manufacturer: PIONEER
Product: BD-RW BDR-X13
Revision: 1.04
Serial number: XXXXXXXXXXX
Firmware date: 2023-08-01
Bus encryption flags: 1B
Highest AACS version: 82

LibreDrive Information
Status: Enabled
Drive platform: RS9400
Firmware name: PIONEER BDR-213T
Firmware type: Original (unpatched)
Firmware version: 1.04/ID56
DVD all regions: Yes
BD raw data read: Yes
BD raw metadata read: Yes
Unrestricted read speed: Yes

Since this drive physically supports reading and burning 100GB+ BDXL discs, the hardware should be capable. My direct questions are:
1.Does this drive currently support crossflashing to a UHD model (like the X13U or 213U)?
2.If not, is this purely due to a firmware lock? Is there any chance of crossflashing it in the future?

[babayaga]

Your firmware version might be too new for it to be able to flash it, but maybe Bill can do it!

[billycar11]

yes i can do this i believe they have emailed me already

[babayaga]

This is great news! This is exactly what my firmware flasher do as well, ignoring the compatibility and trigger the internal flashing! I do not have a GUI, but my drivekit uses command prompt arguments.

This is the current commands that I have implemented.

C:\firmware2>drivekit
DriveKit v1.0 - Optical Drive Research Toolkit
by cPix / Razor 1911 (c) 2026
================================================

Usage:
drivekit <command> <drive_letter> [options]

Identification:
info Full drive information with serial decode
inquiry Read drive vendor/model/firmware (alias: info)
discinfo Read and parse BD/DVD disc information
modelcheck Pioneer model lookup and internal model string
keycheck Show unlock key for connected drive
checkcompat Check drive against compatibility.json
probevendor Probe vendor opcodes 0xC0-0xFF
probef0 Probe READ BUFFER IDs 0xF0-0xFF (dumps all buffers incl 0xF1)
probeb0 Read/decode RS8801 buffer 0xB0
rawdump Raw READ BUFFER dump (--bufid 0xxx)

Flashing:
unlock Pioneer service mode unlock (auto session token)
libredrive Enable 0xB0 dump on post-cutoff drives
WRITE BUFFER 0x41 A5 AA AA
flash AUTO-DETECT pre/post-cutoff and flash (RECOMMENDED)
--file kernel.bin --file2 normal.bin
flashfw Legacy flash command (use 'flash' instead)
crossflash Post-cutoff downgrade/crossflash (direct, no auto-detect)
--file kernel.bin --file2 normal.bin [--key 0xAA475E15]
xordiff XOR two encrypted firmware files to find version bytes
--file fw_new.bin --file2 fw_old.bin
patchfw Patch firmware header to spoof version for downgrade
--file fw_ref.bin --file2 fw_target.bin
autoflash Auto-detect and flash from firmware\ folder
resetnormal Attempt to exit kernel/service mode
triggerkernel Trigger kernel mode via READ BUFFER 0xB0
brutekey Try all known Pioneer unlock keys
sendcdb Send raw SCSI CDB to drive

Other:
about About DriveKit and credits

Options:
--file name Kernel firmware file
--file2 name Normal firmware file
--file3 name Second normal firmware pass (post-cutoff drives)
--bufid 0xF4 Buffer ID for rawdump (default 0xF4)
--force Skip compatibility checks
--nounlock Skip unlock step
--key 0x5CF2E094 Override unlock key

Examples:
drivekit info G
drivekit unlock G
drivekit flashfw G --file S9330360.102 --file2 S9330361.101 --nounlock
drivekit rawdump G --bufid 0xB0
drivekit sendcdb G 3B 05 FF 00 00 00 00 01 00 00

I'm not trying to compete with anyone's flasher though, I'm just in this for educational purposes, and of course help out wherever im needed, but Froggi is alrady doing it, so no need for my software just yet Now flashing a drive from a post cutoff drive and downgrading it to a pre cutoff drive doesn't work for me yet, crossflash between different hardware revisions work, but not a pure downgrade! With help, I'm trying to decipher the 0xB0 dump and see if has firmware date validations embedded..

all in all, great news for this community!
regrads,
Babayaga.