Cytat:
Napisany przez inheavens
Here's my first version already tested and verified via actual flashing.
|
very cool! My goal has shifted back and forth during the coding, i have made a nice flasher, im trying to downgrade the December 2022 firmware patched drives right now, but it isn't easy!
this is the main output in command prompt:
Optical drive research toolkit
Scanning for optical drives...
[1] E: PIONEER BD-RW BDR-XD06U (fw 1.12)
Only one optical drive detected: E: PIONEER BD-RW BDR-XD06U (fw 1.12) - using it.
Using drive: E:
Current flags: --force=off --nounlock=off
Enable --force (skip compatibility/ready checks)? [y/N]: n
Enable --nounlock (skip unlock step, for older drives)? [y/N]: n
Opened: \\.\E:
+------------------------------------------+
| DRIVE INFORMATION |
+------------------------------------------+
Drive : \\.\E: |
Vendor : PIONEER |
Model : BD-RW BDR-XD06U |
Firmware : 1.12 |
Type : CD/DVD/BD optical |
Removable : Yes |
SCSI ver : 0 |
Serial : NKDL005825JP |
Mfg Date : November 2014 (seq:0058) |
Country : China (market: JP) |
Platform : SAT 8B30ID69 |
Kernel : ID69 |
Buffer : 4000 KB |
Max read : 11080 KB/s (~73x CD) |
Max write : 11080 KB/s (~73x CD) |
Mech type : Other |
Write cap : CD-R=Y CD-RW=Y DVD-R=Y |
Disc : No disc (0x0000) |
+------------------------------------------+
Unknown command: gdkfj
DriveKit v1.0 - Optical Drive Research Toolkit
by cPix / Razor 1911 (c) 2026
================================================
Usage:
drivekit <command> <drive_letter> [options]
Identification:
info Full drive information with serial decode
inquiry Read drive vendor/model/firmware (alias: info)
discinfo Read and parse BD/DVD disc information
modelcheck Pioneer model lookup and internal model string
keycheck Show unlock key for connected drive
checkcompat Check drive against compatibility.json
probevendor Probe vendor opcodes 0xC0-0xFF
probeb0 Read/decode RS8801 buffer 0xB0
rawdump Raw READ BUFFER dump (--bufid 0xxx)
Flashing:
unlock Pioneer service mode unlock (auto session token)
flashfw Flash kernel+firmware (--file kernel --file2 normal)
autoflash Auto-detect and flash from firmware\ folder
resetnormal Attempt to exit kernel/service mode
triggerkernel Trigger kernel mode via READ BUFFER 0xB0
brutekey Try all known Pioneer unlock keys
sendcdb Send raw SCSI CDB to drive
Other:
about About DriveKit and credits
Options:
--file name Kernel firmware file
--file2 name Normal firmware file
--file3 name Second normal firmware pass (post-cutoff drives)
--bufid 0xF4 Buffer ID for rawdump (default 0xF4)
--force Skip compatibility checks
--nounlock Skip unlock step
--key 0x5CF2E094 Override unlock key
Examples:
drivekit info G
drivekit unlock G
drivekit flashfw G --file S9330360.102 --file2 S9330361.101 --nounlock
drivekit rawdump G --bufid 0xB0
drivekit sendcdb G 3B 05 FF 00 00 00 00 01 00 00
Note: Always eject disc before unlock/flash. Run as Administrator.
--------------------------
This is the latest output when trying to downgrade, but it isn't working
=== FLASH FIRMWARE ===
Do you want to dump current firmware before flashing? [Y/n]: n
Do you want to proceed with flashing? [y/N]: y
Checking no disc...
No disc - OK
File : S8B30690_patched.bin
Size : 0x11200 bytes (full file including header)
WARN : SAT 8801 not found in header
Type : Kernel confirmed
Drive : ID=0x8B30 HW=SAT 8B30ID6
Firmware : HW=SAT 8B30
Platform : SAT 8B30ID6 -> SAT 8B30 (crossflash allowed)
Drive ID : compatible (0x8B30 vs 0x8B30)
[DBG] Using 0xA0: XD05BK2/XV5 key=00000000
[DBG] Key was zero, using derived 0x08A98AF2
Payload : XD05BK2/XV5 + key
[DBG] 0xF1 pre-read: 4E 4B 44 4C (serial/normal)
[0a/3] Checking drive ready...
READY
[1/3] Unlock (key 0x08A98AF2)...
Payload: 58 44 30 35 42 4B 32 2F 58 56 35 20 20 20 20 00 F2 8A A9 08
String : "XD05BK2/XV5 "
Standard unlock failed - trying post-cutoff mode sweep...
Post-cutoff unlock GOOD (mode=0x01 bufID=0x00)
Pre-flash: skipping reads (post-cutoff service mode)
[2/3] Sending kernel (0x8000 chunks, 70144 bytes)...
70144 / 70144 bytes
Done.
[2c/3] Sending firmware (S8B30691_patched.bin)...
[DBG] g_unlock_mode=0x01 bufID=0x00
Type : Normal confirmed
1922560 / 1922560 bytes
Done.
[2d/3] Execution trigger...
0xF1 after firmware send: 00 00 00 00
Using current 0xF1 as trigger payload
Trigger mode=5 bufID=0xFF len=256: GOOD
Status: GOOD
[2a/3] Waiting for flash to complete...
GET EVENT 160/160
TUR 1/300: skey=00 ASC=00 Flash complete - drive ready!
[3/3] Verifying flash...
Mode : KERNEL MODE (unexpected!)
Platform :
0xA0+90h : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
TUR : READY
Run: drivekit inquiry G to confirm firmware version.