[Warning] Beware Of Multifonts MP

[Warning] Beware Of Multifonts MP by Flover @ inbrite.com

If You are using a Multifonts MP and want to flash it to another MP without multifonts patch.

if multifonts patched MP directly flash to MP without MP
e.g using wolf MP v1.2 then flash to YuetMod 3.2 = dead phone

U all need to flash your phone into a full MP(with Langpack) or stock MP before flash the wanted MP(that does'nt have LP) on your phone

Originally posted in this topic in inbrite.com forum.

Sponsors links:

How to Enable EDGE (by Last1Left)

How to Enable EDG by Last1Left @ inbrite.com

1. In P2kseem open seem 0341_0001, offset 00:
а) if the value is 00, open seem 02AE_0001, and enter this values beginnig from offset 00: 0A 05 04 02 01 02 00 00
б) if the value is 01, open seem 0340_0001, and enter this values beginnig from offser 00: 09 05 03 02 01 02 00 00
write to the phone, not reboot!
Alternatively, you can experiment which one affects the speed? And change the value seem 0341_0001 (at 00 or 01)
and then choose a) or b) (see item 1 above)
2. open seem 02AF_0001, and enter at offset 01 value 75 or 77
write to the phone, not reboot!
3. open seem 010A_0001 and enter at offset 00 the value 03
(GPRS auto-detach),
write to the phone, not reboot!
4. open 0032_0001, and enter at offset 89 the value 0C
its similar with this values in P2kae:
bit 1098 "EDGE_ICON_AVAILABLE" - On
bit 1099 "HIDE_GPRS_TRANSFER_IN_EDGE_AVAILABLE" - On
5. Reboot phone

Originally posted in this thread in inbrite.com forum. For questions & answers please post in the forum.

Sponsors links:

How to revive your phone - scenario 7

How to revive your phone - scenario 7

This is a case reported by spock in inbrite.com forum.

Scenario 7: You testpointed your phone, and you could repair PDS successfully, but you couldn't flash a MP successfully, by all means.

Solution: This is what spock had when the phone was dead.
1. I could testpoint and do PDS repair and BL load.
2. None of the MP/supfiles i tried worked, i even tried some RFDIs.
3. RSDLite and P2KE were all giving errors, see above for the full story.
4. Trying all the solutions given in the 'How to revive your dead mobile' did not bring my mobile back to life.
Solution that worked for spock:
Again this forum was indispensable for finding the solution.
I knew that i had corruption somewhere in the phone memory so i wanted to erase everything and start from new, however the ERASE function would not work through RSDLite or P2KE or RMLDR.
In this thread yuetblog.blogspot.com/...30050.html there is a section about FB3 (partly reproduced below):
------------------------------------------
[FB3 Profile]
ID=R4513_V360_08A0
Model=Motorola V360 (With 08.A0 boot)
UseLdr=1
RamDld=V360 (08A0).ldr
Addr=03FC8000
Jump=03FC8010
------------------------------------------
Great, this gave me the address i needed to load RAMDLD through FB3.
So I fired up FB3, went into 'Flash terminal' press 'Send RAMDLD', selected the appropriate V360 08a0 loader and it loaded fine.
Next I pressed 'Erase memory' on everything except the PDS and BL, because i knew these were ok from previous investigations. That is erase areas 10092000-11FeFFFF. Now the Erase actually worked. I knew i was making progress.
Now I testpointed again and did Repair PDS in P2KE, testpointed again and loaded a stock MP, i selected this file:R4513_G_08.B7.ABR_PDS016_LP0039_DRM0101_JPJAVA_G_08_V360_06_03_01R_SE4877AXXE112B_1FF.shx.
To my astonishment everything started loading fine, however the phone did not actually reboot at this stage, but RSDLite now showed all the phone information in the 'Device Properties' that was previously always misssing; including the correct IMEI.
Next I loaded Yuet v1.9a MP, and hooray, SUCCESS, at last.

Related artical: how to revive your phone - other scenario

Sponsors links:

Downgrade 09.02 bootloader

Downgrade 09.02 bootloader for V360/L7

Hi everybody, Bullfrog told me this good news today. We can use these steps to download the 09.02 bootloader.

1) Flash with the L7e font with FB3 and wait the "close" inscription.
2) Remove cable and batt.
3) Open P2K_Easy_Tool_v39, select model phone and go to "Repair"> "Full repair PDS zone".
4) Connect the cable without battery and press "Do selected job" then "OK".
5) Disconnect phone, and open ramldr2_0.31, put the battery, and in the display may appears bootloader "08.A0" (v360); if not, with ramldr2_0.31 we press "Send loader", then Write BOOT and choose the bootloader corresponding to phone:
V360 - 08. A0
L7 - 08. D0
6) Close the program.
7) Open Flash Backup or another flash program and we flash with any firmware, o any MP we want.

Original Tutorial:
Mr_Mutabor

Collaborators:
Flex4, dvsdigiman

Translate:
Bull

Download the flash file, bootloader and this tutorial: [inbrite.com]

Sponsors links:

Motorola iTunes hacking revealed

Motorola iTunes hacking revealed Guides written by Warp

Warp is writing a series of guides on this topic - Motorola iTunes hacking. The guides are published in www.inbrite.com forum.

Part 1:

In this part, Warp gives an introduction to all the stock version of Motorola iTunes. Read more at Motorola iTunes hacking revealed #1.

Part 2:

In part 2, Warp talks about Java disassemblers and decompilers, and show us the related codes about the iTunes protection of song limit. Read more at Motorola iTunes hacking revealed #2.

Part 3:

In part 3, Warp shows us how to break the 400 songs limit. Read more at Motorola iTunes hacking revealed #3.

Part 4:

Warp gives us the final cracking solution and the iTunes translation script. Read more at Motorola iTunes hacking revealed #4.

Sponsors links:

Make MPs compatible with sticky firmwares

Make your MPs compatible with sticky firmwares AER/E0R

Russian hackers announced a great CG1 patch. With this patch, you can make your MPs also compatible with phones with AER/E0R. You don't need to get rid of the sticky firmware any more.

This patch was brought to me by coccolino_dbro. He has tried it on his V360 successfully. I also tried. I flashed to AER, then I can flash successfully to my newly created YuetMod v1.9a MP, which is based on ABR.

Use V360 ABR as an example, you can follow these steps to apply the patch to your MP.
(Assume you already know how to apply RSA patch and compile MP.)
1. split/extract your MP, which has RSA protection removed.
2. use XVI32 to open the CG1 file.
3. press Ctrl + G and jump to hex offset 386A8.
4. replace the Hex values from 477846C0 to 20014770.
5. press Ctrl + G and jump to hex offset A373D8.
6. replace the Hex values from 477846C0 to 20014770.
7. save CG1, then compile a new MP.

Different firmwares have different offsets, please refer to the following patch codes for your firmware version:

V360 ABR: (provided by coccolino_dbro)

[Patch_Code]
000386A8: 20014770
00A373D8: 20014770

[Patch_Undo]
000386A8: 477846C0
00A373D8: 477846C0


===================
V360 ACR: (provided by coccolino_dbro)

[Patch_Code]
000386DC: 20014770
00A37A08: 20014770

[Patch_Undo]
000386DC: 477846C0
00A37A08: 477846C0


===================
L7 ACR_RB:

[Patch_Code]
000386DC: 20014770
00A37A08: 20014770

[Patch_Undo]
000386DC: 477846C0
00A37A08: 477846C0

===================

Discussion thread in www.inbrite.com.

Sponsors links:

Fix checksum errors in MP

Ultimate way to fix checksum errors in MP

This is the method I always used to fix the checksum errors in the MP.

Tools you need:
1. RSD Lite
2. RandomSHX
3. HexEditor

Steps:

1. flash the MP with checksum errors, using RSDLite.

2. open the FlashErrorLog1.log file in RSDLite folder, look for checksum errors similar to those in the attached image in the forum. The file checksum is the one in your file, which is wrong. The phone checksum is the correct one.

3. use RandomSHX to extract your MP into bins.

4. open the 0.bin file using hex editor.

5. search for the file checksum. You need to swap the bytes. For example, if the file checksum is 0x8D8A, you should search for 8A8D in the hex editor.

6. replace the file checksum with phone checksum. You also need to swap the bytes. For example, if the phone checksum is 0x8C39, you should replace the file checksum with 398C.

7. repeat steps 5-6 until you fix all the checksum errors in the log.

8. save the 0.bin file and compile the MP using RandomSHX.

Discussion thread in inbrite.com forum

Sponsors links:

Create skins with animated wallpaper

How to create skins with animated wallpaper

Here are the steps to make animated wallpaper for your skin.

Tool you need:
Skinner4moto

Steps

1. Prepare an animated gif file, the size of the image must be 176x220 or smaller. Name it 573.gif;

2. download skinner4moto;

3. start skinner4moto and open your skin;

4. copy the animated gif file "573.gif" into the gifs folder, which skinner4moto created after openning the skin with this name 573.gif;

5. go to Location/Size and look for ID 572, set the values of the upper-left coordinate of your gif file in "Left" and "Up" input boxes, and set the Width and Height of the gif in "Width" & "Height" input boxes;

6. go to "Yes/No Booleans" and set the ID 599 to true to enable the ID 599;

7. save the skin.

Discussion thread in inbrite forum.

Download skinner4moto: [inbrite.com];

Sponsors links:

How to improve network reception

How to improve network reception

We found some firmwares have better reception than others. This is a guide show you how to import the network signal settings from one firmware to another. I haven't verified the effectiveness of this method, as I live in a city where cell phone reception is good everywhere. If you experience bad reception, you may want to try these steps.

Tool you need:
Radiocomm

Steps:

1. flash your phone to a MP which has better reception;

2. connect your phone to computer via USB;

3. start Radiocomm, select menu "Features", then "NV / SEEM";

4. select the option, as shown in the screeshot, for the fields "Product", "Command Type", "Options", "Read Options" and "Compare to File".

Radiocomm screenshot

5. click action "Read";

6. after reading, click "Save" and save as a NVM file; close Radiocomm;

7. flash your phone to the MP with worse reception;

8. connect your phone to computer via USB;

9. start Radiocomm, select menu "Features", then "NV / SEEM";

10. select the option, as shown in the screeshot, for the fields "Product", "Command Type", "Options", "Read Options" and "Compare to File".

Radiocomm screenshot

11. click "Open", then select the NVM file you saved in step 6;

12. after opening, click action "Write"; close Radiocomm;

13. now the phone should have better reception.

Please try it and let me know how effective this method is. Please provide your feedback at the thread in inbrite.com forum.

Sponsors links:

"Airplane Mode" in initial setup???

Fake "Airplane Mode" in initial setup

As suggested by .::Rey::., I would like to write this warning about the "Airplane Mode" in initial setup.

What I am talking about is the CG1 hack that enable the option "Airplane mode" in the "initial setup" of V360/L7. I tried this CG1 patch, but I don't think it is true airplane mode, and even it is not airplane mode at all.

The hack is a trick. It patches the original "Status light" option to make it an option that can turn your phone into "No service" state. In this state, you can't make/receive calls, can't send/receive SMS, can't use GPRS, but you can still use bluetooth, and you can still try to make call, send SMS and start browser, although it will fail.

I doubt this trick will actually stop sending signal/searching network. I hope the original hacker can tell us the theory behind it. We can achieve the same "No service" state if we choose a wrong band in network setting.

When the real airplane mode (the one in Yuetmod v2.x) is on, it will show "Airplane mode is on" instead of "No service". It will shut off all the wireless signal for GSM, GPRS & Bluetooth network. It will also disable all the functions in the menu that might activate any of the wireless signal. The main purpose is to avoid interference with Global Positioning system during airplane flight. It can be used in other area where cell phone signal is restricted, such as hospital.

I think we must take this "airplane mode" function seriously, as the fake "airplane mode" can cause fatal problem if you use it in the flight or the hospital.

Sponsors links:

Delete iTap from language pack

How to delete iTap from langpack

If you prefer the tranditional Tap input instead of iTap, you can delete iTap from the langpack using the Delete_iTap software.

Steps:

Part 1: for 08.A0/08.A2 bootloader

1. Start SHXcodec and open the LP SHX file.

2. Click "Split source SHX file". Don't close SHXCodec.

3. Start Delete_iTap program, click "Open CG" to open the code group (CG4) smg file of the langpack, which you extracted using SHXCodec in step 2;

4. Choose the language by clicking the check boxes, then click "Delete all chosen iTaps" from the selected languages. Click "Yes" to confirm.

5. Download the 08.A0 RAMDOWNLOADER.

6. in SHXCodec, click in the line which says ramdownloader, and select "replace". Replace it with the 08.A0 ramdownloader.

7. compile the langpack to get an updated SHX file. Flash the SHX to your phone to see the effect.

Part 2: for 08.D0/09.02 bootloader

1. Start RandomSHX and open the LP SHX file.

2. Click "Extract BIN files from SHX". Close RandomSHX.

3. Start Delete_iTap program, click "Open CG" to open the code group bin file of the langpack, which you extracted using RandomSHX in step 2; You can try if you are not sure which bin file is the LP. The Delete_iTap program will show an error when you open a wrong bin file.

4. Choose the language by clicking the check boxes, then click "Delete all chosen iTaps" from the selected languages. Click "Yes" to confirm.

5. Start RandomSHX, click "Create SHX file from BINs", then select the lst file, which you extracted in step 2. You will get an updated SHX file. Flash the SHX to your phone to see the effect.

Download:
RandomSHX: [inbrite.com]
SHXCodec: [inbrite.com]
Delete_iTap: [inbrite.com]
08.A0 RamDownloader: [inbrite.com]

Sponsors links:

wolf2007 MP

wolf2007 MP 1.1 for V360

MP maker: coccolino_dbro

This is another awesome MP by coccolino_dbro. A real monster!

Check out the details and download at inbrite.com forum.

Sponsors links:

How to flash V360 with 08.A2 bootloader

How to prepare flash file for V360 with 08.A2 bootloader

This post is based on the post by bullfrog in inbrite.com forum. All credits to bullfrog.

The boot 08.A2 is not so complicated. Just make the idea you have an 08.A0 boot and that's it. You get error when flashing, because most of the shx files (v360) are compiled to work with 08.A0 and 08.D0 bootloaders, but indeed they are compiled with a 08.D0 ramdownloader and bootloader 08.A2 doesn't allow flash with that ramdownloader.

To make any shx (MP/LP/DRM) work with your bootloader you have to recompile the flash file with an 08.A0 ramdownloader. When you are going to flash, open the file with rsd lite and put atention in the right screen of the program, there it says the ramdownloader version of he shx, if says 08.D0, the file will not work for 08.A2 phone, if says 08.A0 it's ok.

Compatibility table between Bootloader and Ramdownloader (v360):

Bootloader 08.A0: You can use ram A0 or D0.
Bootloader 08.A2: You can use A0.
Bootloader 08.D0: You can use D0.
Bootloader 09.02: You can use D0 (If the flash has a firmware without RSA protection will not work)

How to compile any shx to 08.A2 boot?

You will need shxcodec

1) Download the 08.A0 RAMDOWNLOADER.
2) Open the shx with shxcodec and click "split".
3) Then you click in the line which says ramdownloader, and select "replace". Replace it with the 08.A0 ramdownloader you got in step 1.
4) Then compile the shx, you give a name and wait for the file creation.
5) Flash with your new SHX (Just check if says 08.A0 in the rsd lite)

(In the future I will not make seperate flash file for 08.A2 bootloader. Please always follow the steps in this post to convert the 08.D0 flash file to 08.A0.)

Sponsors links:

How to revive your phone

A summary on how to revive V360/L7 from software errors

I just revived my phone from a quite severe condition. My phone was detected "unknown device" & "USB device malfunctioned" by Windows. I have to testpoint the phone to bring it to life again. (It is not free, I spent $10 for the torx screw drivers set.) I think I have bricked my phone for enough times, so I would like to write this summary for reviving the phone from different scenarios. This summary is based on my experience with my V360. I think it should also apply for L7 (08.D0 R4513) as well.

Scenario & solution

Scenario 1: Once power on, the phone is always in bootloader mode showing "Code corrupted", "RDL SIG ERR" or "PH SIG ERR".
Solution: Flash your phone again to a compatible and working Monster pack (MP) using RSD Lite.

Scenario 2: Once power on, the phone is always in bootloader mode showing "MEM_MAP BLANK" or other errors. You can't flash any MP using RSD Lite.
Solution: Flash your phone again to a compatible and working MP using P2K Easy Tool v3.9.

Scenario 3: You can't power on your phone. It stays in the black screen. Your phone is not detected by RSD Lite.
Solution: Take off battery, press & hold * and # keys, then put back battery. If the phone can go into bootloader screen, flash to a compatible and working MP using P2K Easy Tool v3.9.

Scenario 4: The phone boots into a white screen. It is not detected by RSD Lite.
Solution: Take off battery, press & hold * and # keys, then put back battery. If the phone can go into bootloader screen, flash to a compatible and working MP using P2K Easy Tool v3.9.

Scenario 5: You can't power on your phone. It stays in the black screen. Your phone is not detected by RSD Lite. It is detected "unknown device" & "USB device malfunctioned" by Windows. You can't get into bootloader mode by all means.
Solution: Steps:
1) testpoint your phone to get it detected as s blank neptune LTE2, then release the testpoint;
2) use P2K easy tool v3.9 to repair PDS;
3) testpoint your phone again to get it detected as s blank neptune LTE2, then release the testpoint;
4) flash to a compatible and working MP using P2K Easy Tool v3.9.

Scenario 6: You can't power on your phone. It stays in the black screen. Your phone is detected as "S Blank Neptune LTE2" by RSD Lite.
Solution: Repair "S Blank Neptune LTE2".

Let me know your solution if you have encountered other scenario.

Sponsors links:

Bit manipulation using opcodes

How to update a bit using opcode

This guide will show you how to manipulate bits in SEEM. Before you read on, you must have already read this guide about motorola opcode. As you can see from the "motorola opcode" guide, we can only read/write bytes, but not bits. We have to do some calculation, in order to change only the bits we want to change.

I think the best way to explain it is by example. Let's say we want to do the following seem edit:

option to switch storage device (discovered by Yuet)
SEEM 0032-0001 offset 9F bit 3:
on = switch to phone memory/memory card directly in list, java apps will be installed in card when "install new apps"
off = press menu key to see "switch storage device" option, will prompt to select storage device when "install new apps"

Steps:

1. to get the value of the offset 9F in SEEM 0032-0001, we use the following opcode:
32*50*1*159*1

2. The value we get is "c8", which is a hex value. It is 200 in dec value. We try to decode "200" using this formula:
200 = bit0 x 1 + bit1 x 2 + bit2 x 4 + bit3 x 8 + bit4 x 16 + bit5 x 32 + bit6 x 64 + bit7 x 128

What we get is:
200 = 0 x 1 + 0 x 2 + 0 x 4 + 1 x 8 + 0 x 16 + 0 x 32 + 1 x 64 + 1 x 128

so we can see in this offset, bit 3, 6 & 7 are on. In this example, we want to turn off bit 3 to enable the "switch storage device" option, so we change value of bit3 to 0 in the formula. We get:
0 x 1 + 0 x 2 + 0 x 4 + 0 x 8 + 0 x 16 + 0 x 32 + 1 x 64 + 1 x 128 = 192

192 is the value we are going to write to the offset 9F.

3. We write the value 192 to offset 9F in SEEM 0032-0001 using the following opcode:
47*50*1*159*1*192

4. Reboot the phone using opcode 34, and it is done.

Sponsors links:

Useful opcodes

Useful opcodes

In this post I will write down those opcodes which I find useful. To understand motorola opcode, please read my guide - Motorola Opcode.

Legend:
[menu] = Menu key
[OK] = Right soft key "OK"

Before you can key in opcodes:
You must key "[menu] 0 4 8 2 6 3 *" at home screen to enter opcode screen first.

After the opcodes are executed:
If you updated the seem using opcode, you should key "34 [OK]" in opcode screen to restart the phone.

The followings are the opcodes:

Change Camera Key
to Voice Key: 47*91*1*31*1*043 [OK]
to Camera Key: 47*91*1*31*1*063 [OK]

Change Headset Key
to original headset key: 47*91*1*51*1*051
to Right key: 47*91*1*51*1*047

Change Video format
to 3gp: 47*74*1*465*1*001 [OK]
to mp4: 47*74*1*465*1*003 [OK]

Swap to ring style when press & hold # key
to soft: 47*74*1*493*1*001 [OK]
to vibrate: 47*74*1*493*1*002 [OK]
to vibe then ring: 47*74*1*493*1*003 [OK]
to silent: 47*74*1*493*1*004 [OK]
to vibe & ring: 47*74*1*493*1*005 [OK]

USB charging option
enable: 47*74*1*519*1*001 [OK]
disable: 47*74*1*519*1*000 [OK]

Sponsors links:

Motorola Opcode

Understand Motorola Opcode

Like many of you, I was not paying much attention to the motorola opcodes, until recently I find the opcodes can be quite handy. This post will show you how to use the motorola opcodes. It is not that difficult if you know how to convert between Decimal (Dec) & Hexadecimal (Hex) values. Opcodes can be used to read & write SEEM, and restart phone, using your phone instead of the computer.

Legend:
[menu] = Menu key
[OK] = Right soft key "OK"

To get to the OpCode screen, press the following keys in sequence & quickly:
[menu] 0 4 8 2 6 3 *

If you can't get the OpCode screen, maybe it is not enabled in your phone. To enable Opcode Menu, do the following seem edit: (don't know seem edit? read this guide.)
SEEM 0032 offset 36 bit 4: (set on)

How to enter opcodes:
1. key "[menu] 0 4 8 2 6 3 *" to enter opcode screen
2. key opcode string, such as 32*91*1*31*1
3. press right soft key [OK]

Major Opcodes:
32 - read seem
47 - write seem
34 - restart

Opcode Syntax:

Restart phone:
34 [OK]

Read seem:
[Opcode]*[field1]*[field2]*[field3]*[field4]

Example: 32*91*1*31*1
Explanation:
This opcode reads Hex value from offset 1F in SEEM 0005B-0001.
[Opcode] 32 = SEEM reading opcode
[field1] 91 = seem ID in Dec value. (91 is 005B, 50 is 0032)
[field2] 1 = seem record number in Dec value. (1 = 0001, 10 = 000A)
[field3] 31 = offset in Dec value. (31 = offset 1F)
[field4] 1 = number of bytes to read (1 means reading only offset 2F, 2 means reading offsets 2F & 30, etc.) If you put 0 for both field3 & field4, it will read all offsets in the seem record.

Write seem:
[Opcode]*[field1]*[field2]*[field3]*[field4]*[field5]

Example: 47*91*1*31*1*043
Explanation:
This opcode writes Hex value 2B to offset 1F in SEEM 0005B-0001.
[Opcode] 47 = SEEM writing opcode
[field1] 91 = seem ID in Dec value. (91 is 005B, 50 is 0032)
[field2] 1 = seem record number in Dec value. (1 = 0001, 10 = 000A)
[field3] 31 = offset in Dec value. (31 = offset 1F)
[field4] 1 = number of bytes to read (1 means reading only offset 2F, 2 means reading offsets 2F & 30, etc.)
[field5] 043 = value to write in Dec value, must be block of 3 digit. If you put 2 for field4, you should put 2 blocks in this field. For example, 043043 (043 = writing Hex 2B to the offset)

Results:
F1: 0 means successful, 1 failed.
F2(d): the hex value of the specified offset(s) (For seem reading only)

How to convert Dec value to bits:
The formula:
Dec value = bit0 x 1 + bit1 x 2 + bit2 x 4 + bit3 x 8 + bit4 x 16 + bit5 x 32 + bit6 x 64 + bit7 x 128
(bit value is either 0 or 1.)

If you don't understand, don't worry. I will show you some useful opcodes in coming posts.

Sponsors links:

Backup/restore bootloader/PDS & change bootloader

How to Backup/restore bootloader/PDS & downgrade bootloader

Hello everybody! I have tested this with my 08.A0 V360. I can successfully backup and restore bootloader and PDS, and I think it is possible to downgrade bootloader from 09.02/08.D0/08.A2 to 08.A0 for V360 & L7.

Update: Mike has successfully downgraded bootloader of his L7 from 08.D0 to 08.A0. Now we can also backup & restore PDS for L7 (R4513).

Tool you need
P2K Easy tool v3.9

IMPORTANT: Before you do any part of the following steps, you have to get your phone detected as S Blank Neptune LTE2 first, either by testpointing or by flashing to the BlankNeptuneLTE2 flash file.

Part 1: Downgrade bootloader to 08.A0

1. download my 08.A0 bootloader file (at bottom of the post)
2. start p2k easy tool v3.9, select your phone model, select "repair" tab, choose "write bootloader", double click the text box to choose the downloaded 08.A0 bootloader file
3. disconnect, then connect your phone to computer via USB cable, wait for a few seconds
4. click button "do selected jobs" in p2k easy tool

5. if successful, you should see the messages as shown in the image above


Part 2: backup bootloader

1. start p2k easy tool v3.9, select your phone model, select "read" tab, choose "read bootloader", double click the text box to choose where to save the bootloader file
2. disconnect, then connect your phone to computer via USB cable, wait for a few seconds
3. click button "do selected jobs" in p2k easy tool

4. if successful, you should see the messages as shown in the image above


Part 3: restore bootloader

1. start p2k easy tool v3.9, select your phone model, select "repair" tab, choose "write bootloader", double click the text box to choose the backup bootloader file
2. disconnect, then connect your phone to computer via USB cable, wait for a few seconds
3. click button "do selected jobs" in p2k easy tool

4. if successful, you should see the messages as shown in the image above


Part 4: backup PDS

(You may want to repair the PDS before you make a backup of it, if you get "s blank neptune LTE2" by flashing.)
1. start p2k easy tool v3.9, select your phone model, select "read" tab, choose "read pds backup", double click the text box to choose where to save the pds file
2. disconnect, then connect your phone to computer via USB cable, wait for a few seconds
3. click button "do selected jobs" in p2k easy tool

4. if successful, you should see the messages as shown in the image above


Part 5: restore PDS

1. start p2k easy tool v3.9, select your phone model, select "repair" tab, choose "write PDS", double click the text box to choose the backup PDS file
2. disconnect, then connect your phone to computer via USB cable, wait for a few seconds
3. click button "do selected jobs" in p2k easy tool

4. if successful, you should see the messages as shown in the image above


(If you get "s blank neptune LTE2" by flashing, you need to do steps in this guide "repair S blank neptune LTE2" to get your phone working again.)

By downloading this file or re-posting any part of my blog post, you agree to the followings:
1. I am not responsible for any damage to your phone, so use it at your own risk.
2. You do not use this file to get profit.
3. You do not provide direct download of the file. Instead, you must link to my blog for downloading the file.

Download:
Yuet's 08.A0 bootloader: [inbrite.com]
Mike's 08.D0 bootloader: [inbrite.com]
09.02 bootloader: [inbrite.com]

Sponsors links:

10 steps to unlock v360

TEN steps to unlock your v360 PHONE (and maybe others) Lord Dizzy's Easy Method

(This is another V360 unlocking guide. All credits to Lord Dizzy.)

Steps:
1. Make sure you have Yuet v2.2.1 MP in your mobile / Drivers for your OS already installed;
2. Open P2K Easy Tool, chose "your phone" as your phone model then click on "Flash SHX" checkmark;
3. Select and Flash the "R4513_G_08.B7.DAR_RB_Lang0031_reflash_MOTOX.shx" file (Do Selected Jobs)
4. Now the phone is in "S Blank Neptune LTE2" mode.
5. Go to "Repair TAB" and check Full repair PDS zone and "Do Selected Jobs"
6. For the moment, I don't know if that is just enough to unlock your phone. So, just to be sure:
6.1. Go to "Locks TAB", check "Unlock SP" and then "Do Selected Jobs"
6.2. Now do again the STEP 5, or else your phone will start for a short time with MOTO logo and then shut itself off.
7. Open Flash Backup, select correctly the "Active phone profile" for your phone, and go to "Write data TAB"
8. "Select flash file", and open Yuet v2.2.1
9. Unselect CG1, CG2, CG15 and click "Write data". This only takes few seconds to write back!
10. Your phone is NOW fully unlocked and fully functional with Yuet's MP v2.2.1

Notes (tips & tricks):
1. FULLY CHARGE your BATTERY first. My battery was still full after doing this, but it's better to be sure...
2. Once in "S Blank Neptune LTE2", the phone can be unlocked/rapair PDS without the battery. Its self USB powered!
3. When connecting your phone, always have RSD Lite running and then close it. It will give an "HAB 0x84" error, but that will switch the BL from 0000 to 0300. It is important to be 0300 for P2K Easy Tool to work correctly.
4. After each operation with P2K Easy Tool, you will need to restart the program and reconnect the USB cable, as the P2K Easy Tool shuts off the phone, and you'll need it to be redetected by RSD Lite as "S Blank Neptune LTE2" BL 0300.
5. At STEP 7 you don't need to have RSD Lite running; Flash Backup is smart enough...
6. You may reflash with other Language Packages, but I have not tested.
7. Programs needed: P2K Easy Tool v3.9; Flash Backup v3.0.2; "R4513_G_08.B7.DAR_RB_Lang0031_reflash_MOTOX.shx" file
8. All programs measures ~3.25MB, and if you know what to do this method unlocks your phone in 5 minutes, as there is no large file sent to the mobile.
9. At least, this file contains CG4 and CG7. I think that CG7 is ALL responsible for this, as I see same CG7 in Yuet's unlocking method.

That's all. Good luck everyone!

(If this method doesn't work for your phone, you can try the other methods.)

Download:
R4513_G_08.B7.DAR_RB_Lang0031_reflash_MOTOX.shx:
[rapidshare] [4shared]

Sponsors links:

Flash to "S Blank Neptune LTE2"

Yuet's easy way to get "S Blank Neptune LTE2" for V360 with 08.A0/08.D0 bootloader

I have found a consistent, reliable and very easy way to turn your V360 (08.A0 bootloader) into "S Blank Neptune LTE2". I have tested it with my 08.A0 V360 more than 10 times and the success rate is 100%. I tested it using RSD Lite 2.5 on windows XP.

I am only sure it will work for V360 with 08.A0 bootloader. I don't have phones to test other bootloaders such as 08.D0 or 09.02, and I am not sure if it works for L7, so don't come and flame me if it doesn't work on your phone model. Please take responsibility for your own decision.

What you need:
1. Yuet's BlankNepTuneLTE2 flash file for 08.A0 & 08.D0 bootloader
2. RSD Lite

Before you start:
1. Fully charge your battery please. You need its power.
2. IMPORTANT: Flash your phone to YuetMod MP v3.2 for V360 or L7.

Steps:

1. Download my flash file at bottom of this post;

2. Open RSD Lite, switch your phone to bootloader mode and connect it to computer via USB;

3. Open the flash file with the RSD Lite and click 'Start' button;

4. Wait for the flashing process to complete, then the phone will try to restart but it won't turn on as expected;

5. Unplug & plug the usb cable from the computer; Your phone should be detected as "S blank neptune LTE2" by RSD Lite; Pretty simple, isn't it?

6. Do part 2 or part 3 of this guide, depends on whether you want to remove sticky firmwares or unlock your phone.

(if this method doesn't work for you, try another method.)

By downloading this file or re-posting any part of my blog post, you agree to the followings:
1. I am not responsible for any damage to your phone, so use it at your own risk.
2. You do not use this file to get profit.
3. You do not provide direct download of the file. Instead, you must link to my blog for downloading the file.

Download:
Yuet's BlankNepTuneLTE2 flash file
for V360 with 08.A0/08.D0 bootloader [inbrite.com] [filecloud]
for V360 with 08.A2 bootloader [inbrite.com]

Sponsors links: