This is great news! This is exactly what my firmware flasher do as well, ignoring the compatibility and trigger the internal flashing! I do not have a GUI, but my drivekit uses command prompt arguments.
This is the current commands that I have implemented.
C:\firmware2>drivekit
DriveKit v1.0 - Optical Drive Research Toolkit
by cPix / Razor 1911 (c) 2026
================================================
Usage:
drivekit <command> <drive_letter> [options]
Identification:
info Full drive information with serial decode
inquiry Read drive vendor/model/firmware (alias: info)
discinfo Read and parse BD/DVD disc information
modelcheck Pioneer model lookup and internal model string
keycheck Show unlock key for connected drive
checkcompat Check drive against compatibility.json
probevendor Probe vendor opcodes 0xC0-0xFF
probef0 Probe READ BUFFER IDs 0xF0-0xFF (dumps all buffers incl 0xF1)
probeb0 Read/decode RS8801 buffer 0xB0
rawdump Raw READ BUFFER dump (--bufid 0xxx)
Flashing:
unlock Pioneer service mode unlock (auto session token)
libredrive Enable 0xB0 dump on post-cutoff drives
WRITE BUFFER 0x41 A5 AA AA
flash AUTO-DETECT pre/post-cutoff and flash (RECOMMENDED)
--file kernel.bin --file2 normal.bin
flashfw Legacy flash command (use 'flash' instead)
crossflash Post-cutoff downgrade/crossflash (direct, no auto-detect)
--file kernel.bin --file2 normal.bin [--key 0xAA475E15]
xordiff XOR two encrypted firmware files to find version bytes
--file fw_new.bin --file2 fw_old.bin
patchfw Patch firmware header to spoof version for downgrade
--file fw_ref.bin --file2 fw_target.bin
autoflash Auto-detect and flash from firmware\ folder
resetnormal Attempt to exit kernel/service mode
triggerkernel Trigger kernel mode via READ BUFFER 0xB0
brutekey Try all known Pioneer unlock keys
sendcdb Send raw SCSI CDB to drive
Other:
about About DriveKit and credits
Options:
--file name Kernel firmware file
--file2 name Normal firmware file
--file3 name Second normal firmware pass (post-cutoff drives)
--bufid 0xF4 Buffer ID for rawdump (default 0xF4)
--force Skip compatibility checks
--nounlock Skip unlock step
--key 0x5CF2E094 Override unlock key
Examples:
drivekit info G
drivekit unlock G
drivekit flashfw G --file S9330360.102 --file2 S9330361.101 --nounlock
drivekit rawdump G --bufid 0xB0
drivekit sendcdb G 3B 05 FF 00 00 00 00 01 00 00
I'm not trying to compete with anyone's flasher though, I'm just in this for educational purposes, and of course help out wherever im needed, but Froggi is alrady doing it, so no need for my software just yet
Now flashing a drive from a post cutoff drive and downgrading it to a pre cutoff drive doesn't work for me yet, crossflash between different hardware revisions work, but not a pure downgrade! With help, I'm trying to decipher the 0xB0 dump and see if has firmware date validations embedded..
all in all, great news for this community!
regrads,
Babayaga.