PLEASE NOTE : This Guide is COPYRIGHTED by KUNDANCOOL, ILYA PETROV (MUROMEC) and MOTOROLA FANS - Motorola Development Community
This Guide describes EZX gen2 BP firmware upgrade and repair, using hardware test point and Putusb software.]
Requirements
Python 2.5 or higher ----- [PLEASE INSTALL IN “C:\lte” or you will get ERROR]
DOWNLOAD
libusb ( libusb-filter on windows )
DOWNLOAD
pyusb
DOWNLOAD
RAMLDR2 [loader for phone]
DOWNLOAD
Putusb [library for host]
DOWNLOAD
Create working directory somewhere ( /tmp/lte in Unix or C:\lte in windows ) and place there two files:
loader_for_ramldr2.bin
putusb.py
Launching python console
In Linux (working directory is /tmp/lte):
1. open terminal emulator
2. TYPE : cd /tmp/lte/
3. TYPE : python
you should see something like this
Code:
Python 2.6.2 (r262:71600, Jul 20 2009, 02:23:30)
[GCC 4.4.0 20090630 (prerelease)] on linux2
Type "help", "copyright", "credits" or "license" for more information.
In Windows (working directory is C:\lte)
Be sure you have installed Python in "c:\lte"
1. Press Win+R key
2. TYPE : cmd
Then type following commands
Code:
cd\
cd lte ( you should be in c:\lte now )
python.exe
you should see something like this
Code:
Python 2.6.3 (r263rc1:75186, Oct 2 2009, 20:40:30) [MSC v.1500 32 bit (Intel)]
on win32
Type "help", "copyright", "credits" or "license" for more information.
****************************************************************************************************
NOTE IF ANYONE WANTS TO MAKE ONLY BACKUP
Then they don't need to go for TEST POINT method only who wants a BACKUP before flashing they have to use test point method Please follow Steps to make Backup
Type the following :
Code:
import putusb
dev = putusb.MotoUsb()
all = dev.get(0x10000000,4*1024*1024)
f = open("bp_backup.dump","wb")
f.write(all)
f.close()
****************************************************************************************************
TIP : TO CHECK BLANK FLASH NEPTUNE
# Just do the test point and start RSD lite plug in your phone to PC via USB cable in BP passthrough mode if it shows S Blank Neptune then TESTPOINT was successful
And if it shows NS FLASH NEPTUNE then testpoint unsuccessful redo TESTPOINT
****************************************************************************************************
PREPARING Putusb
Now loading ramldr into python shell and importing putusb library.
TYPE THE FOLLOWING:
CONNECTING PHONE
If all ok, do test point and put phone in BP passthrough mode (press flash key one more time, "BP Passthrough" should appear on screen). Now connect to phone bootloader from python shell and check its version:
Code:
dev = putusb.MotoUsb()
dev.version()
If all is ok, you should see IROM bootloader version:
00130200FF000300,00130200FF000300
If you missed with test point, you will get flash bootloader version:
00130201FF000900,00130201FF000900,FFFFFFFF00FFFFFF,00130206FFFF1152,....many other
LOADING RAMLDR2
To load ramldr2 on phone, type following:
Code:
f = open("loader_for_ramldr2.bin","rb")
loader = f.read()
f.close()
loader += '\xff'*(4096 - len(loader))
dev.set(0x03FD0000,loader)
dev.set(0x03FEF800,'\x03\xFD\x00\x14'*512, True)
dev.recv()
You should get "Ready" after last command. If something wrong, redo from step connecting phone
SAVING FULL BACKUP
Its GOOD IDEA to save current flash contents before loading. Be sure, you removed test point before doing this.
TYPE:
Code:
dev.read = dev.read_ramldr2
all = dev.get(0x10000000,4*1024*1024)
f = open("bp_backup.dump","wb")
f.write(all)
f.close()
Now you should see 4MB file bp_backup.dump in your working directory. It’s your BP backup - go and save it in safe place.
FLASHING
Now you can flash anything everywhere. So, get somewhere repair image or your backup and place it in working directory.
Commands below flashes file repair image name here from beginning of flash.
BIG FAT WARNING!!!!
This would brick your phone if you miss with address or file contents
don’t do this, if have no backup!
Type:
Code:
f = open("repair image name here","rb")
dump = f.read()
f.close()
dev.flash_ramldr2(0x10000000,dump)
NOTE ABOUT REPAIR IMAGE
I have include repair image here, because it includes hacked proprietary firmware, If you flashed repair image, you should not reflash BP any more, so if you want to flash some firmware after repairing BP, you should remove BP code groups from it
NOTE : BP CODEGROUPS
RDL1.smg
CG0.smg
CG1.smg
CG2.smg
CG3.smg
CG18.smg
try the small application attaached to this post to remove BP groups from SBF file
or try this http://www.motorolafans.com/forums/f...ezx-codec.html
or repeat full repair procedure after every reflash.
This file repaired my bricked A1200 HOPE This works for All of you




DOWNLOAD
THANKS TO ALL MEMBERS SENIOR MEMBERS MODERATORS AND EVERY PERSON ON MOTOROLAFANS IN RECOVERING MY PHONE AND I HOPE THIS WILL HELP IN RECOVERING PHONES WHICH ARE STILL BRICKED
SPECIAL THANKS
ILYA PETROV (MUROMEC) 
