How to revive your phone - scenario 7

How to revive your phone - scenario 7

This is a case reported by spock in inbrite.com forum.

Scenario 7: You testpointed your phone, and you could repair PDS successfully, but you couldn't flash a MP successfully, by all means.

Solution: This is what spock had when the phone was dead.
1. I could testpoint and do PDS repair and BL load.
2. None of the MP/supfiles i tried worked, i even tried some RFDIs.
3. RSDLite and P2KE were all giving errors, see above for the full story.
4. Trying all the solutions given in the 'How to revive your dead mobile' did not bring my mobile back to life.
Solution that worked for spock:
Again this forum was indispensable for finding the solution.
I knew that i had corruption somewhere in the phone memory so i wanted to erase everything and start from new, however the ERASE function would not work through RSDLite or P2KE or RMLDR.
In this thread yuetblog.blogspot.com/...30050.html there is a section about FB3 (partly reproduced below):
------------------------------------------
[FB3 Profile]
ID=R4513_V360_08A0
Model=Motorola V360 (With 08.A0 boot)
UseLdr=1
RamDld=V360 (08A0).ldr
Addr=03FC8000
Jump=03FC8010
------------------------------------------
Great, this gave me the address i needed to load RAMDLD through FB3.
So I fired up FB3, went into 'Flash terminal' press 'Send RAMDLD', selected the appropriate V360 08a0 loader and it loaded fine.
Next I pressed 'Erase memory' on everything except the PDS and BL, because i knew these were ok from previous investigations. That is erase areas 10092000-11FeFFFF. Now the Erase actually worked. I knew i was making progress.
Now I testpointed again and did Repair PDS in P2KE, testpointed again and loaded a stock MP, i selected this file:R4513_G_08.B7.ABR_PDS016_LP0039_DRM0101_JPJAVA_G_08_V360_06_03_01R_SE4877AXXE112B_1FF.shx.
To my astonishment everything started loading fine, however the phone did not actually reboot at this stage, but RSDLite now showed all the phone information in the 'Device Properties' that was previously always misssing; including the correct IMEI.
Next I loaded Yuet v1.9a MP, and hooray, SUCCESS, at last.

Related artical: how to revive your phone - other scenario

Sponsors links:

Downgrade 09.02 bootloader

Downgrade 09.02 bootloader for V360/L7

Hi everybody, Bullfrog told me this good news today. We can use these steps to download the 09.02 bootloader.

1) Flash with the L7e font with FB3 and wait the "close" inscription.
2) Remove cable and batt.
3) Open P2K_Easy_Tool_v39, select model phone and go to "Repair"> "Full repair PDS zone".
4) Connect the cable without battery and press "Do selected job" then "OK".
5) Disconnect phone, and open ramldr2_0.31, put the battery, and in the display may appears bootloader "08.A0" (v360); if not, with ramldr2_0.31 we press "Send loader", then Write BOOT and choose the bootloader corresponding to phone:
V360 - 08. A0
L7 - 08. D0
6) Close the program.
7) Open Flash Backup or another flash program and we flash with any firmware, o any MP we want.

Original Tutorial:
Mr_Mutabor

Collaborators:
Flex4, dvsdigiman

Translate:
Bull

Download the flash file, bootloader and this tutorial: [inbrite.com]

Sponsors links:

Motorola iTunes hacking revealed

Motorola iTunes hacking revealed Guides written by Warp

Warp is writing a series of guides on this topic - Motorola iTunes hacking. The guides are published in www.inbrite.com forum.

Part 1:

In this part, Warp gives an introduction to all the stock version of Motorola iTunes. Read more at Motorola iTunes hacking revealed #1.

Part 2:

In part 2, Warp talks about Java disassemblers and decompilers, and show us the related codes about the iTunes protection of song limit. Read more at Motorola iTunes hacking revealed #2.

Part 3:

In part 3, Warp shows us how to break the 400 songs limit. Read more at Motorola iTunes hacking revealed #3.

Part 4:

Warp gives us the final cracking solution and the iTunes translation script. Read more at Motorola iTunes hacking revealed #4.

Sponsors links:

Fix checksum errors in MP

Ultimate way to fix checksum errors in MP

This is the method I always used to fix the checksum errors in the MP.

Tools you need:
1. RSD Lite
2. RandomSHX
3. HexEditor

Steps:

1. flash the MP with checksum errors, using RSDLite.

2. open the FlashErrorLog1.log file in RSDLite folder, look for checksum errors similar to those in the attached image in the forum. The file checksum is the one in your file, which is wrong. The phone checksum is the correct one.

3. use RandomSHX to extract your MP into bins.

4. open the 0.bin file using hex editor.

5. search for the file checksum. You need to swap the bytes. For example, if the file checksum is 0x8D8A, you should search for 8A8D in the hex editor.

6. replace the file checksum with phone checksum. You also need to swap the bytes. For example, if the phone checksum is 0x8C39, you should replace the file checksum with 398C.

7. repeat steps 5-6 until you fix all the checksum errors in the log.

8. save the 0.bin file and compile the MP using RandomSHX.

Discussion thread in inbrite.com forum

Sponsors links:

How to improve network reception

How to improve network reception

We found some firmwares have better reception than others. This is a guide show you how to import the network signal settings from one firmware to another. I haven't verified the effectiveness of this method, as I live in a city where cell phone reception is good everywhere. If you experience bad reception, you may want to try these steps.

Tool you need:
Radiocomm

Steps:

1. flash your phone to a MP which has better reception;

2. connect your phone to computer via USB;

3. start Radiocomm, select menu "Features", then "NV / SEEM";

4. select the option, as shown in the screeshot, for the fields "Product", "Command Type", "Options", "Read Options" and "Compare to File".

Radiocomm screenshot

5. click action "Read";

6. after reading, click "Save" and save as a NVM file; close Radiocomm;

7. flash your phone to the MP with worse reception;

8. connect your phone to computer via USB;

9. start Radiocomm, select menu "Features", then "NV / SEEM";

10. select the option, as shown in the screeshot, for the fields "Product", "Command Type", "Options", "Read Options" and "Compare to File".

Radiocomm screenshot

11. click "Open", then select the NVM file you saved in step 6;

12. after opening, click action "Write"; close Radiocomm;

13. now the phone should have better reception.

Please try it and let me know how effective this method is. Please provide your feedback at the thread in inbrite.com forum.

Sponsors links:

How to revive your phone

A summary on how to revive V360/L7 from software errors

I just revived my phone from a quite severe condition. My phone was detected "unknown device" & "USB device malfunctioned" by Windows. I have to testpoint the phone to bring it to life again. (It is not free, I spent $10 for the torx screw drivers set.) I think I have bricked my phone for enough times, so I would like to write this summary for reviving the phone from different scenarios. This summary is based on my experience with my V360. I think it should also apply for L7 (08.D0 R4513) as well.

Scenario & solution

Scenario 1: Once power on, the phone is always in bootloader mode showing "Code corrupted", "RDL SIG ERR" or "PH SIG ERR".
Solution: Flash your phone again to a compatible and working Monster pack (MP) using RSD Lite.

Scenario 2: Once power on, the phone is always in bootloader mode showing "MEM_MAP BLANK" or other errors. You can't flash any MP using RSD Lite.
Solution: Flash your phone again to a compatible and working MP using P2K Easy Tool v3.9.

Scenario 3: You can't power on your phone. It stays in the black screen. Your phone is not detected by RSD Lite.
Solution: Take off battery, press & hold * and # keys, then put back battery. If the phone can go into bootloader screen, flash to a compatible and working MP using P2K Easy Tool v3.9.

Scenario 4: The phone boots into a white screen. It is not detected by RSD Lite.
Solution: Take off battery, press & hold * and # keys, then put back battery. If the phone can go into bootloader screen, flash to a compatible and working MP using P2K Easy Tool v3.9.

Scenario 5: You can't power on your phone. It stays in the black screen. Your phone is not detected by RSD Lite. It is detected "unknown device" & "USB device malfunctioned" by Windows. You can't get into bootloader mode by all means.
Solution: Steps:
1) testpoint your phone to get it detected as s blank neptune LTE2, then release the testpoint;
2) use P2K easy tool v3.9 to repair PDS;
3) testpoint your phone again to get it detected as s blank neptune LTE2, then release the testpoint;
4) flash to a compatible and working MP using P2K Easy Tool v3.9.

Scenario 6: You can't power on your phone. It stays in the black screen. Your phone is detected as "S Blank Neptune LTE2" by RSD Lite.
Solution: Repair "S Blank Neptune LTE2".

Let me know your solution if you have encountered other scenario.

Sponsors links:

Bit manipulation using opcodes

How to update a bit using opcode

This guide will show you how to manipulate bits in SEEM. Before you read on, you must have already read this guide about motorola opcode. As you can see from the "motorola opcode" guide, we can only read/write bytes, but not bits. We have to do some calculation, in order to change only the bits we want to change.

I think the best way to explain it is by example. Let's say we want to do the following seem edit:

option to switch storage device (discovered by Yuet)
SEEM 0032-0001 offset 9F bit 3:
on = switch to phone memory/memory card directly in list, java apps will be installed in card when "install new apps"
off = press menu key to see "switch storage device" option, will prompt to select storage device when "install new apps"

Steps:

1. to get the value of the offset 9F in SEEM 0032-0001, we use the following opcode:
32*50*1*159*1

2. The value we get is "c8", which is a hex value. It is 200 in dec value. We try to decode "200" using this formula:
200 = bit0 x 1 + bit1 x 2 + bit2 x 4 + bit3 x 8 + bit4 x 16 + bit5 x 32 + bit6 x 64 + bit7 x 128

What we get is:
200 = 0 x 1 + 0 x 2 + 0 x 4 + 1 x 8 + 0 x 16 + 0 x 32 + 1 x 64 + 1 x 128

so we can see in this offset, bit 3, 6 & 7 are on. In this example, we want to turn off bit 3 to enable the "switch storage device" option, so we change value of bit3 to 0 in the formula. We get:
0 x 1 + 0 x 2 + 0 x 4 + 0 x 8 + 0 x 16 + 0 x 32 + 1 x 64 + 1 x 128 = 192

192 is the value we are going to write to the offset 9F.

3. We write the value 192 to offset 9F in SEEM 0032-0001 using the following opcode:
47*50*1*159*1*192

4. Reboot the phone using opcode 34, and it is done.

Sponsors links:

Useful opcodes

Useful opcodes

In this post I will write down those opcodes which I find useful. To understand motorola opcode, please read my guide - Motorola Opcode.

Legend:
[menu] = Menu key
[OK] = Right soft key "OK"

Before you can key in opcodes:
You must key "[menu] 0 4 8 2 6 3 *" at home screen to enter opcode screen first.

After the opcodes are executed:
If you updated the seem using opcode, you should key "34 [OK]" in opcode screen to restart the phone.

The followings are the opcodes:

Change Camera Key
to Voice Key: 47*91*1*31*1*043 [OK]
to Camera Key: 47*91*1*31*1*063 [OK]

Change Headset Key
to original headset key: 47*91*1*51*1*051
to Right key: 47*91*1*51*1*047

Change Video format
to 3gp: 47*74*1*465*1*001 [OK]
to mp4: 47*74*1*465*1*003 [OK]

Swap to ring style when press & hold # key
to soft: 47*74*1*493*1*001 [OK]
to vibrate: 47*74*1*493*1*002 [OK]
to vibe then ring: 47*74*1*493*1*003 [OK]
to silent: 47*74*1*493*1*004 [OK]
to vibe & ring: 47*74*1*493*1*005 [OK]

USB charging option
enable: 47*74*1*519*1*001 [OK]
disable: 47*74*1*519*1*000 [OK]

Sponsors links:

Motorola Opcode

Understand Motorola Opcode

Like many of you, I was not paying much attention to the motorola opcodes, until recently I find the opcodes can be quite handy. This post will show you how to use the motorola opcodes. It is not that difficult if you know how to convert between Decimal (Dec) & Hexadecimal (Hex) values. Opcodes can be used to read & write SEEM, and restart phone, using your phone instead of the computer.

Legend:
[menu] = Menu key
[OK] = Right soft key "OK"

To get to the OpCode screen, press the following keys in sequence & quickly:
[menu] 0 4 8 2 6 3 *

If you can't get the OpCode screen, maybe it is not enabled in your phone. To enable Opcode Menu, do the following seem edit: (don't know seem edit? read this guide.)
SEEM 0032 offset 36 bit 4: (set on)

How to enter opcodes:
1. key "[menu] 0 4 8 2 6 3 *" to enter opcode screen
2. key opcode string, such as 32*91*1*31*1
3. press right soft key [OK]

Major Opcodes:
32 - read seem
47 - write seem
34 - restart

Opcode Syntax:

Restart phone:
34 [OK]

Read seem:
[Opcode]*[field1]*[field2]*[field3]*[field4]

Example: 32*91*1*31*1
Explanation:
This opcode reads Hex value from offset 1F in SEEM 0005B-0001.
[Opcode] 32 = SEEM reading opcode
[field1] 91 = seem ID in Dec value. (91 is 005B, 50 is 0032)
[field2] 1 = seem record number in Dec value. (1 = 0001, 10 = 000A)
[field3] 31 = offset in Dec value. (31 = offset 1F)
[field4] 1 = number of bytes to read (1 means reading only offset 2F, 2 means reading offsets 2F & 30, etc.) If you put 0 for both field3 & field4, it will read all offsets in the seem record.

Write seem:
[Opcode]*[field1]*[field2]*[field3]*[field4]*[field5]

Example: 47*91*1*31*1*043
Explanation:
This opcode writes Hex value 2B to offset 1F in SEEM 0005B-0001.
[Opcode] 47 = SEEM writing opcode
[field1] 91 = seem ID in Dec value. (91 is 005B, 50 is 0032)
[field2] 1 = seem record number in Dec value. (1 = 0001, 10 = 000A)
[field3] 31 = offset in Dec value. (31 = offset 1F)
[field4] 1 = number of bytes to read (1 means reading only offset 2F, 2 means reading offsets 2F & 30, etc.)
[field5] 043 = value to write in Dec value, must be block of 3 digit. If you put 2 for field4, you should put 2 blocks in this field. For example, 043043 (043 = writing Hex 2B to the offset)

Results:
F1: 0 means successful, 1 failed.
F2(d): the hex value of the specified offset(s) (For seem reading only)

How to convert Dec value to bits:
The formula:
Dec value = bit0 x 1 + bit1 x 2 + bit2 x 4 + bit3 x 8 + bit4 x 16 + bit5 x 32 + bit6 x 64 + bit7 x 128
(bit value is either 0 or 1.)

If you don't understand, don't worry. I will show you some useful opcodes in coming posts.

Sponsors links:

Backup/restore bootloader/PDS & change bootloader

How to Backup/restore bootloader/PDS & downgrade bootloader

Hello everybody! I have tested this with my 08.A0 V360. I can successfully backup and restore bootloader and PDS, and I think it is possible to downgrade bootloader from 09.02/08.D0/08.A2 to 08.A0 for V360 & L7.

Update: Mike has successfully downgraded bootloader of his L7 from 08.D0 to 08.A0. Now we can also backup & restore PDS for L7 (R4513).

Tool you need
P2K Easy tool v3.9

IMPORTANT: Before you do any part of the following steps, you have to get your phone detected as S Blank Neptune LTE2 first, either by testpointing or by flashing to the BlankNeptuneLTE2 flash file.

Part 1: Downgrade bootloader to 08.A0

1. download my 08.A0 bootloader file (at bottom of the post)
2. start p2k easy tool v3.9, select your phone model, select "repair" tab, choose "write bootloader", double click the text box to choose the downloaded 08.A0 bootloader file
3. disconnect, then connect your phone to computer via USB cable, wait for a few seconds
4. click button "do selected jobs" in p2k easy tool

5. if successful, you should see the messages as shown in the image above


Part 2: backup bootloader

1. start p2k easy tool v3.9, select your phone model, select "read" tab, choose "read bootloader", double click the text box to choose where to save the bootloader file
2. disconnect, then connect your phone to computer via USB cable, wait for a few seconds
3. click button "do selected jobs" in p2k easy tool

4. if successful, you should see the messages as shown in the image above


Part 3: restore bootloader

1. start p2k easy tool v3.9, select your phone model, select "repair" tab, choose "write bootloader", double click the text box to choose the backup bootloader file
2. disconnect, then connect your phone to computer via USB cable, wait for a few seconds
3. click button "do selected jobs" in p2k easy tool

4. if successful, you should see the messages as shown in the image above


Part 4: backup PDS

(You may want to repair the PDS before you make a backup of it, if you get "s blank neptune LTE2" by flashing.)
1. start p2k easy tool v3.9, select your phone model, select "read" tab, choose "read pds backup", double click the text box to choose where to save the pds file
2. disconnect, then connect your phone to computer via USB cable, wait for a few seconds
3. click button "do selected jobs" in p2k easy tool

4. if successful, you should see the messages as shown in the image above


Part 5: restore PDS

1. start p2k easy tool v3.9, select your phone model, select "repair" tab, choose "write PDS", double click the text box to choose the backup PDS file
2. disconnect, then connect your phone to computer via USB cable, wait for a few seconds
3. click button "do selected jobs" in p2k easy tool

4. if successful, you should see the messages as shown in the image above


(If you get "s blank neptune LTE2" by flashing, you need to do steps in this guide "repair S blank neptune LTE2" to get your phone working again.)

By downloading this file or re-posting any part of my blog post, you agree to the followings:
1. I am not responsible for any damage to your phone, so use it at your own risk.
2. You do not use this file to get profit.
3. You do not provide direct download of the file. Instead, you must link to my blog for downloading the file.

Download:
Yuet's 08.A0 bootloader: [inbrite.com]
Mike's 08.D0 bootloader: [inbrite.com]
09.02 bootloader: [inbrite.com]

Sponsors links:

10 steps to unlock v360

TEN steps to unlock your v360 PHONE (and maybe others) Lord Dizzy's Easy Method

(This is another V360 unlocking guide. All credits to Lord Dizzy.)

Steps:
1. Make sure you have Yuet v2.2.1 MP in your mobile / Drivers for your OS already installed;
2. Open P2K Easy Tool, chose "your phone" as your phone model then click on "Flash SHX" checkmark;
3. Select and Flash the "R4513_G_08.B7.DAR_RB_Lang0031_reflash_MOTOX.shx" file (Do Selected Jobs)
4. Now the phone is in "S Blank Neptune LTE2" mode.
5. Go to "Repair TAB" and check Full repair PDS zone and "Do Selected Jobs"
6. For the moment, I don't know if that is just enough to unlock your phone. So, just to be sure:
6.1. Go to "Locks TAB", check "Unlock SP" and then "Do Selected Jobs"
6.2. Now do again the STEP 5, or else your phone will start for a short time with MOTO logo and then shut itself off.
7. Open Flash Backup, select correctly the "Active phone profile" for your phone, and go to "Write data TAB"
8. "Select flash file", and open Yuet v2.2.1
9. Unselect CG1, CG2, CG15 and click "Write data". This only takes few seconds to write back!
10. Your phone is NOW fully unlocked and fully functional with Yuet's MP v2.2.1

Notes (tips & tricks):
1. FULLY CHARGE your BATTERY first. My battery was still full after doing this, but it's better to be sure...
2. Once in "S Blank Neptune LTE2", the phone can be unlocked/rapair PDS without the battery. Its self USB powered!
3. When connecting your phone, always have RSD Lite running and then close it. It will give an "HAB 0x84" error, but that will switch the BL from 0000 to 0300. It is important to be 0300 for P2K Easy Tool to work correctly.
4. After each operation with P2K Easy Tool, you will need to restart the program and reconnect the USB cable, as the P2K Easy Tool shuts off the phone, and you'll need it to be redetected by RSD Lite as "S Blank Neptune LTE2" BL 0300.
5. At STEP 7 you don't need to have RSD Lite running; Flash Backup is smart enough...
6. You may reflash with other Language Packages, but I have not tested.
7. Programs needed: P2K Easy Tool v3.9; Flash Backup v3.0.2; "R4513_G_08.B7.DAR_RB_Lang0031_reflash_MOTOX.shx" file
8. All programs measures ~3.25MB, and if you know what to do this method unlocks your phone in 5 minutes, as there is no large file sent to the mobile.
9. At least, this file contains CG4 and CG7. I think that CG7 is ALL responsible for this, as I see same CG7 in Yuet's unlocking method.

That's all. Good luck everyone!

(If this method doesn't work for your phone, you can try the other methods.)

Download:
R4513_G_08.B7.DAR_RB_Lang0031_reflash_MOTOX.shx:
[rapidshare] [4shared]

Sponsors links:

Flash to "S Blank Neptune LTE2"

Yuet's easy way to get "S Blank Neptune LTE2" for V360 with 08.A0/08.D0 bootloader

I have found a consistent, reliable and very easy way to turn your V360 (08.A0 bootloader) into "S Blank Neptune LTE2". I have tested it with my 08.A0 V360 more than 10 times and the success rate is 100%. I tested it using RSD Lite 2.5 on windows XP.

I am only sure it will work for V360 with 08.A0 bootloader. I don't have phones to test other bootloaders such as 08.D0 or 09.02, and I am not sure if it works for L7, so don't come and flame me if it doesn't work on your phone model. Please take responsibility for your own decision.

What you need:
1. Yuet's BlankNepTuneLTE2 flash file for 08.A0 & 08.D0 bootloader
2. RSD Lite

Before you start:
1. Fully charge your battery please. You need its power.
2. IMPORTANT: Flash your phone to YuetMod MP v3.2 for V360 or L7.

Steps:

1. Download my flash file at bottom of this post;

2. Open RSD Lite, switch your phone to bootloader mode and connect it to computer via USB;

3. Open the flash file with the RSD Lite and click 'Start' button;

4. Wait for the flashing process to complete, then the phone will try to restart but it won't turn on as expected;

5. Unplug & plug the usb cable from the computer; Your phone should be detected as "S blank neptune LTE2" by RSD Lite; Pretty simple, isn't it?

6. Do part 2 or part 3 of this guide, depends on whether you want to remove sticky firmwares or unlock your phone.

(if this method doesn't work for you, try another method.)

By downloading this file or re-posting any part of my blog post, you agree to the followings:
1. I am not responsible for any damage to your phone, so use it at your own risk.
2. You do not use this file to get profit.
3. You do not provide direct download of the file. Instead, you must link to my blog for downloading the file.

Download:
Yuet's BlankNepTuneLTE2 flash file
for V360 with 08.A0/08.D0 bootloader [inbrite.com] [filecloud]
for V360 with 08.A2 bootloader [inbrite.com]

Sponsors links:

Unlock/Repair PDS without Testpoint

Unlock/Repair PDS without Testpoint get "S blank neptune LTE2" by flashing for V360/L7 R4513 08.A0/08.D0

(Chinese: 点这里看中文版)

This guide will show you how to unlock your V360 or L7, or get rid of sticky firmwares (such as AER or E0R) from your V360 or L7. The method is a pure software method, no testpoint is required. What you need to do is simply flash a few files using RSD Lite or P2k Easy tool. Set your V360/L7 free!

Tools you need:
1. P2K Easy Tools v3.9 cracked
2. RSD Lite

Before you start:
Fully charge your battery please. You need its power.

Steps:

Part 1: flash to get "S blank neptune LTE2"

Method 1: Follow my guide Yuet's easy way to get "S Blank Neptune LTE2".
Method 2: A guide by forov360 guys.

Part 2: Repair PDS to get rid of sticky firmwares, such as AER.

Follow the steps in my guide "Repair S blank neptune LTE2" to repair PDS and remove sticky firmware.

Part 3: Unlock your phone

1. Close the RSD Lite and open the P2k Easy Tool 3.9, select the phone model,

2. Unplug & plug the usb cable from the computer, remove phone battery and put it back,

3. Go to "Locks" tab and check "Unlock SP". Then click on 'Do Selected jobs';

4. Wait till process is done, you will get "Unlock Ok" message;

5. Close the P2K Easy Tool and take the battery out for 10 seconds;

6. Start RSD Lite and flash your phone to a MonsterPack of your choice (such as one of my YuetMod MPs), then it is done.

7. If this unlocking process won't work for you, try the Repair PDS method.

Sponsors links:

Get "S blank neptune LTE2" by flashing

Get "S blank neptune LTE2" by flashing for V360/L7 R4513 08.A0/08.D0 by guys from forov360

If you have seen my post about Repair S blank neptune LTE2, you know I am exploring the way to get "S blank neptune LTE2" by flashing a special MP. Now the guys in forov360 have achieved it, and it is tested with V360. I think it should work for L7 with 08.D0 bootloader as well, but do it at your own risk.

Tools you need:
1. P2K Easy Tools v3.9 cracked
2. RSD Lite

Steps:

1. Download the correct flash file according to your bootloader version; (download link at bottom of the post.) (you can check bootloader version by turning off the phone and then press and hold * and # keys, then power on your phone.)

2. Open RSD Lite, and turn on your phone in flash mode by turning off the phone and then press and hold * and # keys, then power on your phone;

3. Connect the phone to computer via USB; Open the flash file with the RSD Lite and click 'Start' button.

4. Wait for the flashing process to complete, then the phone will try to restart but it won't turn on as expected;

5. Unplug the usb cable from the phone; Take the battery out for 15 seconds;

6. Connect the usb cable to the phone, WITHOUT BATTERY and it will say 'Unknown device';

7. Disconnect USB cable, put battery back in the phone;

8. Open 'Device Manager' in your PC (right click in 'My Computer' and click in Manage) and connect the usb cable to the phone. It will recognize it as "Flash Interface");

9. The RSD Lite will detect the phone as "S Blank Neptune LTE2". If not detected, try another USB port and repeat step 5-8;

10. Close RSD Lite;

11. Do part 2 or part 3 of this guide, depends on whether you want to remove sticky firmwares or unlock your phone.

If this method doesn't work for you, try my guide Yuet's easy way to get "S Blank Neptune LTE2".

Credits:
The original tutorial can be found in spanish at forov360.com. All credits to Arkangel (Cristian Hinz), r3drum (Brian N Haslop) and Lukas from forov360 for the flash files in this method.
Credit to Sarah's Angel for translating it to English.

Download:
Flash file for 08.A0 bootloader: [4shared]
Flash file for 08.D0 bootloader: [4shared]

Sponsors links:

Sync V360/L7 with Desktop iTunes

Make iTunes on V360/L7 sync with Desktop iTunes An idea by Yuet

I believe these steps can make desktop iTunes recognise our V360/L7. At the moment I don't have time to test and verify it, so it's just an idea. If you are a pro modder having a V360/L7 with R4513 firmware, I invite you to test it and let us know the result.

Update: this method is verified NOT working, so don't try it until I have more finding, Believe me, we will find the way. I am making good progress...

Before you start:
Always make backup of your phone, including data/software/PDS/bootloader, etc.

What you need: (Download at the bottom of this post)
1. TomeQ 0371_0001.seem
2. PDSTool
3. P2K Easy Tool v3.9 Cracked (if you can't find it, this is a hint.)

Disclaimer: Doing the following steps might void your warranty or damage your phone. I, Yuet, shall not be responsible for any damage to your phone by following the steps, so do it at your own risk.
If you want to post this article elsewhere or translate to other language, please quote the original author and link to this Blog.

Steps:

Part 1 - prepare the PDS.bin file
1) Download and install PDSTool; Download TomeQ 0371_0001.seem and rename the 0371_0001.seem to 01C4_0001.seem;
2) Upload the renamed 01C4_0001.seem with p2ktools/motokit/moto4lin to your phone; After uploading, load it back from your phone to check if it is correctly uploaded;
3) Shutdown your phone, and press and hold * and # keys, then power on; Your phone will be in bootloader mode;
4) Connect your phone via USB and use flashbackup 2.6 or 3.0 to make a PDS backup in SMG format; (After backup, open the backup file with HexEditor to verify if it is a good backup.) (if the backup is in fbp format, rename the *.fbp to *.cab, then decompress the cab file. You'll find 2 files (backup and description). The file "backup" is the PDS backup.)
5) Rename the PDS backup to pds-original.bin and copy to the PDSTool folder.
6) Using PDSTool (by Indesign) to open the pds-original.bin
7) Then click on the PARSE button. (Then you will see a new folder name "seems" in the PDS Tool folder).
8) Go into the folder and delete file '0371'
9) Rename file 01C4 to 0371
10) Make a copy of file 01C3, and rename the copy to 01C4 (file 01C3 is same as 01C4 now)
11) Click the "assemble" at bottom tab
12) Now you will see the folder tree on the left and right is the files REQUIRED TO SELECT to make PDS.bin
13) Set the version to 4 and 009 (version 4009).
14) Goto the seems folder create by PDS tool earlier and select all the file 0001 until 0371
15) Then click assemble to compile the PDS.bin and you will find it inside the seems folder.

Part 2 - write PDS to phone
16) Follow "unlock/repair pds with testpoint" guide part 1 to make your phone detected as "S Blank Neptune LTE2"; or Testpoint your phone;
17) Start p2k easy tool;
18) Connect your phone to computer via usb;
19) In p2k easy tool, select your phone mode;
20) Click "Repair" tab, check "Write PDS";
21) Double click the text box for "Write PDS" to open the PDS.bin file, which you created in part1.
22) Click "Do Selected Jobs", and keep your fingers crossed.
23) Set it to "Memory card" in "Usb setting" on your phone, connect it via USB to see if it can be detected by desktop iTunes.
24) It is done, so please let us know the result. If anything wrong, you can follow this post to repair your phone. Good luck!

Download:
0371_0001.seem: [4shared]
PDSTool: [4shared]

Sponsors links:

Repair "S Blank Neptune LTE2"

How do I repair my V360 from "S Blank Neptune LTE2"

I bricked my phone about an hour ago, but I managed to save it from the "S Blank Neptune LTE2". I write down the steps here, and I hope you (if you bricked it) will be as lucky as me.

How did I brick it?
I was doing some testing with my YuetMod monsterpack. I was flashing a Flex reflash file, and at the end there was checksum error. Normally it will be ok, but this time I clicked the mouse too fast. I clicked to close RSD Lite when the phone was still showing "SW Upgrade in progress...". As a result, the phone was dead. It wouldn't power on, and I couldn't turn it into bootloader screen. Well, I was prepared to say goodbye to my V360, but I want to save it and I don't want to disappoint you. Many of you came here to ask Yuet for solution. How can Yuet tell you "I bricked my phone and I can't unbrick it. No more YuetMod MPs."? I try my luck to connect my phone and RSD Lite can detect it as "S Blank Neptune LTE2". This gave me a dim light and a slim hope. I tried a few things, but I will only tell you the successful steps here.

What you need?
P2K Easy Tool v3.9 Cracked (if you can't find it, this is a hint.)

Disclaimer: Doing the following steps might void your warranty or damage your phone. I, Yuet, shall not be responsible for any damage to your phone by following the steps, so do it at your own risk.
If you want to post this article elsewhere or translate to other language, please quote the original author and link to this Blog.

Warning: Don't try this if you have cingular L7 with 4517 firmware. These steps won't work for this model.

Steps:
1. Start p2k easy tool
2. take out battery from phone, and put it back
3. connect your phone to computer via usb
4. in p2k easy tool, select your phone mode (V360 for me)
5. click "Repair" tab, check "Full repair PDS zone (with DSP checksum)"
6. click "Do Selected Jobs", in a minute you should see messages like "repair ok"

7. if you are unlucky and repair failed, try charge your battery and start from step 1 again
8. unplug & plug USB cable, take out battery and put it back, wait a few second for PC to detect your phone; click "Flash" tab, check "Flash SHX", make sure phone model is correct
9. double click the text box for "flash SHX" to open a full SHX file for your phone. For my case, I use my 2ER backup SHX
10. click "Do Selected Jobs", and wait for the flashing to complete

11. your phone is alive again

About my phone:
My phone is V360 with 08.A0 bootloader. I think these steps should work for V360/L7 with R4513 firmware, and maybe other motorola phones in the list of phone model in p2k easy tool. Anyway, do it at your own risk.

Sponsors links:

Unlock/Repair PDS using GOT_MOTO

Unlock/Repair PDS using GOT_MOTO without Testpoint

Update on 1 March 2007: We have found a new & free way to unlock or repair pds for V360/L7. GOT_MOTO will be obsolete.

It is reported that you can use a software GOT_MOTO to unlock or repair PDS without testpointing. It is really a good news, because testpoint is very troublesome. It can be used to unlock the SIM lock and remove the sticky firmwares, such as AER/E0R. Tested successfully on V360 and L7.

How to get GOT_MOTO:
Go to got_moto website (link removed, see update). Follow the instruction "!!!For getting FREE testing account you have to send an e-mail to (address removed, see update) to get your username and pass!!!" to get a 30-day-free testing account. After you get the account, go back to the same site to login.
UPDATE #1:
Unfortunately GOT_MOTO is no longer free. They will not issue free account any more. To make things worse, it is reported that they got our email addresses sold to spam ads, so be cautious! You may want to try Disassemble, testpoint & unlock/repair pds.
UPDATE #2:
It is reported that kapersky lab reported a rootkit in GOT_MOTO.exe. This virus will fill zero your hard disks and reinstall windows.

Warning:
Please backup your existing firmware or data before proceeding. DO IT AT YOUR OWN RISKS.

WARNING: Caution should be given to SLVR L7 with 0A.20 bootloader or R4517 firmware. Failure on such phone was reported.

Steps to unlock SIM lock:
1. Connect your phone to computer via USB, and start GOT_MOTO.
2. Select your phone model and firmware version;
3. Tick "Easy Skip TP" checkbox, click "Unlock" tab, press "Unlock Network" then follow instructions.

Steps to repair PDS and get rid of sticky firmware:
1. Connect your phone to computer via USB, and start GOT_MOTO.
2. Click "Repair" tab, then "Set Blank Mode", then "Repair PDS" and "Remove Blank Mode";
3. Flash to a full-flash MonsterPack of your choice;
4. If there's problem, repeat step 1 = Click "Repair" tab, then "Set Blank Mode", then "Repair PDS" and "Remove Blank Mode";

GOT_MOTO Supported Models:
A630
C38x ( R364_G, R365_G , R366_G)
C390 ( R368_G)
C65x ( R364_G , R365_G)
C975 (R24_U_xx_2x_xx, R245_U_xx_2x_xx ,R26_U_xx_2x_xx , R24_U_xx_3x_xx, R245_U_xx_3x_xx , R26_U_xx_3x_xx)
C980 (R24_U_xx_2x_xx, R245_U_xx_2x_xx, R26_U_xx_2x_xx, R24_U_xx_3x_xx, R245_U_xx_3x_xx ,R26_U_xx_3x_xx)
E1 (R373_G)
E1000 (E1000_U,R26LD_U)
E1070 (R25221LD_U , R252211LD_U)
E375 (R3721_G)
E378i (R3722_G)
E39x (R372_G)
E550 (R376_G)
E680 (R51_G)
E680i (E680I_G)
E770 (R25221LD_U, R252211LD_U)
E79x (R373_G)
K1 (R4527_G)
L2 (R3511_G, R3517_G)
L6 (R3511_G, R3517_G, R3443H1_G)
L7 (R4513_G, R44419_G, R4517_G)
U6 PEBL (R478_G)
V3 RAZR (R374_G)
V3b (R37AV3_G)
V3i (R479_G, R4441D_G, R47A_G, R3443H3_G)
V3r (R4515_G, R3443U2_G, R3443U5_G)
V3x (R25221LD_U, R252211LD_U, R25227LD_U)
V6 (R478_G)
V80 (R37_G)
V18x (R364_G, R365_G, R465_G)
V19x (R3511_G, R3517_G)
V22x (R364_G, R365_G)
V235 (R3512_G)
V300 (TRIPLETS_G)
V303 (TRIPLETS_G)
V303p (R3622_G)
V330 (R472_G)
V350v (C350AS_G)
V360 (R4513_G, R44419_G, R4517_G)
V400 (TRIPLETS_G)
V400p (R3621_G, R3622_G)
V500 (TRIPLETS_G)
V505 (TRIPLETS_G)
V525 (TRIPLETS_G)
V535 (TRIPLETS_G)
V535 (R376_G)
V54x (R376_G, R47_G, R472_G)
V550 (R376_G)
V551 (R47_G, R472_G)
V555 (R472_G)
V557 (R4512_G)
V600 (TRIPLETS_G)
V600i (R376_G)
V620 (R376_G)
V635 (R474_G)
V975 (R24_U_xx_2x_xx, R245_U_xx_2x_xx, R26_U_xx_2x_xx, R24_U_xx_3x_xx, R245_U_xx_3x_xx, R26_U_xx_3x_xx)
V980 (R24_U_xx_2x_xx, R245_U_xx_2x_xx, R26_U_xx_2x_xx, R24_U_xx_3x_xx, R245_U_xx_3x_xx,R26_U_xx_3x_xx)
V1050 (R26LD_U)
V1075 (R25221LD_U, R252211LD_U)
V1150 (R25221LD_U,R252211LD_U)
Z3 (R452B_G)

Sponsors links:

iTunes with album art using MediaMonkey

iTunes with album art using MediaMonkey A tutorial by giany911

Thank giany911 for this tutorial. All credits to him.

Tutorial: Getting iTunes with album art on a v360

First of all, you need these things:
MediaMonkey or
MediaMonkey 2.5.5.980 this is a beta build
Motorola Beta Plugin so that your v360 will be recognized by MediaMonkey
And iTunes already installed on your phone (an iTunes that can rebuild the db by it self, such as YuetMod iTunes.)

Let's begin:
1. After installing MediaMonkey copy the downloaded beta plugin to C:\Program Files\MediaMonkey\Plugins ( Install Path of MediaMonkey\Plugins ) and overwrite the previous d_iPod.dll.


2. Getting album art to your songs.
Before you start to add album art to your songs copy them from your T-Flash on your HDD ( it's a lot faster to add album art when the .mp3s are on the HDD and not the T-Flash )

Now let's start MediaMonkey ( no need for the phone just now )
To add the songs you want to tag just do like this:
1. File - > Add / Rescan Tracks to the Library... - > And check only the folder ( audio ) which you have copied from the T-Flash first ( I mean the folder with the songs on the phone ) -> OK
You will be asked something related to other players I just unchecked them / it.

2. To add album art go to Title, pick a song and right click on it. Select Auto-Tag from Amazon ( easier Ctrl + L when the song is selected )
Wait for MediaMonkey to search and when it found something related to what you are looking for ( you may have to find the proper album, with cover art and the right song on it ) check the song and click Auto-Tag. In the next dialog box select Save image to tag ( if possible ) and check in the future, do not ask me and Ok, after it downloaded the cover you manually have to close the dialog box. Repeat this step until all of your songs have album art.


3. Move your songs, now with album art, back to the T-Flash.


4. Building the DB
4.1. Plug-in your phone in Memory Card Mode and look for Motorola ( drive letter ), do a right click on it and select Rebuild Device database. At this point when running iTunes from the phone any song you play will have the same album art.

4.2. Unplug your usb cable from the phone, and start iTunes and build the DB from the phone.

4.3. Plug-in your phone and repeat step 4. 1 ( Rebuild Device database from MediaMonkey )
4.4. Unplug and restart your phone and there it is: Album art!

After all this work ( looks hard it's actually not ) you will have album art in iTunes on your v360.

Sponsors links:

Sync iTunes songs with album art

A way to sync iTunes songs with album art

You may have heard about it, but in case you don't know. It is reported that we can sync songs and album art to iTunes on your motorola phone, using MediaMonkey and it's beta ipod plugin. Unfortunately it is not for Mac.

MediaMonkey is a free MP3 Jukebox player and music library organiser. You can get MediaMonkey from its site, and download the beta ipod plugin. Install MediaMonkey, and replace the original ipod dll in mediamonkey\plugins with this beta iPod plugin, then the program will see the Motorola phone.

Here is the support thread in MediaMonkey forum.

I have not tested it myself, so no detail steps here. Please try it. If you succeed, please tell us how you do it. Good Luck!

giany911 has kindly written a very nice tutorial. Click here to read it.

Sponsors links:

How To Install dual Corelets

How To Install dual Corelets MediaViewer and iTunes

Thank aaa & bullfrog for providing all this information. This guide will show you how to install two corelets on your motorola p2k phone.

What you need:
1. two corelets which can unload itself. (MV and iTunes)
2. MotoMidMan

UPDATE 21 Dec 2006: Steps updated, and tested by Yuet. Package updated with iTunes modded by bullfrog.

Steps

1. create one shortcut in the shortcuts menu.

2. download the 0002_0001.seem file and upload it to your phone. (Read my SEEM Edit guide if not sure how to upload the seem.) Restart your phone and rename the shortcut from "iTunes" to "Start Corelet".

3. install MediaViewer using MotoMidMan. Set its type to "Background" only.

4. Install iTunes and set its type to "Background" only.

5. restart your phone. Go to "Games & Apps" and set the shortcuts for these two apps. (to create shortcuts, select the midlet then press Menu key and hold.) Let say you create shortcut #2 for iTunes, and shortcut #3 for MediaViewer. Name the iTunes shortcut as "Load iTunes", the MV shortcut "Load MV".

6. use MotoMidMan to set both the apps to "Corelet" only.

7. restart your phone again, the first installed corelet (MV) will be loaded first. When you press shortcut "Start Corelet", MV will start. To start the second corelet (iTunes), unload the existing one (MV) by pressing Menu->MediaViewer->Unload, wait for a while. press shortcut "Load iTunes", wait for a while again, then press "Start Corelet" to start the second corelet (iTunes). To unload iTunes, press "0" in iTunes screen to unload it. After that you can press shortcut "Load MV" following by "Start Corelet" to start MV.

The MediaViewer has following features:
1. Bluetooth file transfer
2. Text Reader
3. Flip sounds
4. Open images bigger than 640x480

To use the flip sounds feature, put the sound files (CaseClose.mp3 & CaseOpen.mp3) into c:\mobile\audio.

(I am working on adding "unload" feature in YuetMod iTunes.)

Download package:
MV, bullfrog-iTunes & flip sounds: [filecloud]
motomidman: [mofile]
0002_0001.seem: [filecloud]

Sponsors links: