Easy E398 To ROKR Conversion

Easy E398 to ROKR conversion
Author: Sam
emal: thewritingsonthewall[at]gmail.com
THIS IS AN EARLY VERSION OF THE DOCUMENT, IT WILL BE UPDATED SOON WITH MORE STUFF!
Introduction
I wrote this guide to assist those new to modding with upgrading their phones. The actual procedures and files used here were
written by other users, please give them credit for their wonderful work. I would like to especially mention TomeQ for figuring out
the iTunes hack, but to every user at HowardForums, Motomodders.net and motofan.ru who helped, thank you!
file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (1 of 33)12/11/2005 8:26:24 AM

If anyone from Motorola is reading this, maybe you should consider actually innovating and releasing new phone models instead
of putting new software on a 2 year old phone, calling it new and selling it at a high price. If you're wondering why the ROKR has
not sold well... this is your answer. Maybe all that effort you put into using RSA keys to "protect" your phones you could have could
have been used instead to make a better phone.
Anyway, on with the guide!
IF YOU CHOOSE TO PROCEED BEYOND THIS POINT YOU ARE RESPONSIBLE

FOR ANY DAMAGE CAUSED TO YOUR PHONE. IF IT DIES YOU MAY NEED TO
SEND IT IN FOR SERVICE. THIS IS UNLIKELY BUT POSSIBLE, SO BE AWARE OF
THE RISK YOU'RE TAKING BY MODDING YOUR PHONE
Current limitations of this mod:
● Only iTunes version 4.9 will work on Mac or PC

● The 100 song limit still applies, as it does on a proper ROKR phone
Table of Contents:
1.1 Backup
1.2 Flashing the 42r MP (ROKR)
1.3 Restoring your previous settings
1.4 Fixing iTunes Method 1!
1.6 iTunes on the PC
1. Converting your E398 to ROKR

What you'll need for this process:
A working Motorola E398 phone
A USB data cable (you CANNOT use bluetooth!)
Random's FlashBackup v2.3 - available here or here or here

Motorola PST - This is copyrighted software, you will need to locate a copy of this on your own.
Bezol's P2KTools 0.8 - avilable here or here or here
The "42r-for-all" original Flash File (available here or here or here) *read below to see if you need this*
Any 42r Monster Pack firmware - In this case I will be using Bodyguard's ROKR firmware - available here (password:
motorola) or here or here or here
1.1 Backup
You MUST backup EVERYTHING ON YOUR PHONE FIRST. DO NOT SKIP THIS STEP FOR ANY REASON. To get started,
turn your phone off and take your TransFlash card out if you have one. You have to remove the battery and take it out the same
way you would remove your SIM card. You can leave your SIM card in if you wish, it makes no difference.

Backing up images/ringtones/video:
● Turn your phone on, and make sure under "USB settings" that "data/fax connection" is selected NOT "memory card". The
location of USB settings varies depends on firmware, it may be under settings or under the connections menu.
● If you don't have a USB settings menu just ignore that step, the phone should default to data/fax
● Run P2KTools, and plug your phone in.
● Make sure the large button on the top left is set to P2K mode NOT AT mode.
● Windows should detect the phone in normal (AT mode) then switch it to P2K mode automatically for you. This might take
30 seconds or so to do.
● Once this has been done you can "connected" as shown below.
● Hit the refresh button to gain a list of files.

● Browse to /c/mobile
● Inside the folder here you will find any saved pictures/audio, selected the ones you want to save and hit the Download
button

Backing up your websessions file
You will want to make a backup of this if you have setup WAP/GPRS from your provider, otherwise you will need to contact them to
retrieve your settings.
● Using the method above, browse to /a/ and find the file Websession (no extensions)
● Download it somewhere you wont forget
Backing up your contacts
If you have any contacts stored on your phone, you will want to back these up first. Any stored on your SIM card will be untouched
by the flashing procedure.
● Disconnect your phone if plugged in

● Open P2KTools and switch to AT mode
● Wait until you see "connected" in the bottom left
● Switch to PhoneBook and hit Read
● Hit Backup and save the .csv somewhere

Backing up your SMS Messages
● Using the same method as above, open P2KTools in AT Mode

● Hit the SMS button and select the message you want to save
● Save the .txt file somewhere
Backing up your current phone firmware
THIS STEP IS VITAL, DO NOT SKIP IT.
AT THIS POINT ENSURE YOUR BATTERY IS FULLY CHARGED, OR YOU MAY BE STUCK IN BOOTLOADER MODE WITH
NO WAY TO RECHARGE THE BATTERY!
● Disconnect your phone from your computer if it's plugged in

● Ensure your phone is set to Data/Fax under USB settings if you have this option
● Run FlashBackup 2.3
● In the setup tab, choose a folder to store your backups in
● Go to the Backups tab, choose Full Backup and 32MB
● Plug your phone into USB port and wait until you see Connected on the bottom left
● Press create, and wait for the process to complete, which may take 10-30 minutes.
●
If you get asked for drivers at any stage here, tell Windows to search for drivers in the directory you have installed Motorola PST to.

At this point the screen on your phone may have garbled text or lines down it. Don't worry, this is normal and will fix itself when you
restart the phone.
● Wait until FlashBackup has done it's magic and compressed the backup
● Browse to the folder you selected earlier
● Find the .fbp that was created. Also there may be a .dsc file
● Copy these files somewhere as a backup, along with anything else you have already backed up (phone book, pictures etc),
maybe burn them to a CD, upload them to the web or store them on a USB flash drive. Just don't lose them!
1.2 Flashing the 42r MP (ROKR)
Thanks to Iza11 for alerting me to the R372 problem, I'll update this section soon!
● Check your software version by typing *#9999# into the phone and find R373 OR R372 (under SW
version)
*** IF YOUR PHONE IS R372, YOU SHOULD FLASH THE 42R-FOR-ALL FILE FIRST ***
***IF YOUR PHONE IS R373 ALREADY, YOU MAY FLASH ANY NEW MP DIRECTLY ***
This process should be the same for any ROKR MP, in this case I will use Bodyguard's BG ROKR MP. There are sure to be
countless versions soon so find one you think will suit you.
AT THIS POINT ENSURE YOUR BATTERY IS FULLY CHARGED, OR YOU MAY BE STUCK IN BOOTLOADER MODE WITH
NO WAY TO RECHARGE THE BATTERY!

● Remove your TransFlash card from your phone

● Make sure your phone is in Data/Fax mode under USB settings
● Find the directory where Motorola PST is installed and run MultiFlashFlex.exe
● If MFF will not open, you haven't "patched" it correctly. I'll let you figure this step out.
● Under preferences check the first two boxes
● Under Enable Flash check the box and find the .shx file you downloaded (extract it from the zip/rar)
● Make sure under Enable Flex nothing is selected
● Start your phone in bootloader mode, this is done by holding down the star * and hash # keys while powering on.
● The bootloader screen should show a BL version of 07 D0
● Plug your phone in and wait for it to appear in the list (it may appear as S FLASH NEPTUNE LTE)
● Press start!
If you get asked for drivers at any stage here, tell Windows to search for drivers in the directory you have installed Motorola PST to.
THE FLASHING PROCEDURE WILL TAKE 15-30 MINUTES, DO NOT INTERRUPT THE PROCESS IN ANY WAY WHILE IT IS
FLASHING.

Looks like we're done here! Now exit MFF, restart your phone and lets see what happens!
It worked!
Congratulations, you just modded your phone. You'll probably want to restore your pictures/contacts etc. I will add this part to the
guide a little later
AT THIS POINT ITUNES WILL NOT WORK, YOU WILL GET A ERROR ABOUT ITUNES NOT BEING SUPPORTED ON THIS
PLATFORM. PLEASE READ THE NEXT SECTION FOR HOW TO FIX THIS!

Excellent :-)
My phone is dead
Don't worry, it's possible to recover from most things going wrong. Check the forums at MotoModders and HowardForums for help.
If your phone will not turn on, try Bootloader mode (hold down star and hash key when turning on). If you have a bootloader listed
there (and/or a SW Version) you should be fine to try and reflash the firmware). If your phone has been totally erased, see if
MultiFlashFlex will detect it. It may be detected as S BLANK NEPTUNE LTE or similar, again try flashing a different firmware.
If nothing works, you may have to do what is known as a "Testpoint Procedure". This involves taking the cover off your phone and
shorting pins on the phone to blank a flash chip. It's not very difficult, but ask for help on the forums before proceeding.
1.3 Restoring your previous settings
All you need to do here is the opposite of the backup steps, so copy your Websession file back to the phone and any ringtones/
pictures/video using P2KTools in P2K mode. When that's done, switch to AT mode and upload your contacts and any messages
you want.
Introduction

This process is more complex than simply flashing a new firmware, and there is an increased risk of damaging your phone. You
must manipulate the PDS Data on your phone, which is unique to every phone and you cannot use another person's PDS backup.
If you follow the guide carefully, you should be fine. If you get stuck at any point, please read the forums at MotoModders
and HowardForums for help.
A working Motorola E398 phone with "42r" Firmware (see above)
TomeQ's 0371_0001.seem - available here or here or here

Random's FlashBackup v2.3 - available here or here or here
XVI32 Hex Editor - available here
PDSTool - available here or here or here
WinRAR - available here
BEFORE PROCEEDING, ENSURE YOU HAVE MADE A FULL 32MB BACKUP AND A PDS BACKUP MADE WITH
FLASHBACKUP, AND YOUR BATTERY IS FULLY CHARGED
● Check that your phone fully works with the ROKR firmware (everything except iTunes)
● Format your TransFlash card, by going to Settings > Phone Status > Storage Devices > Middle button and format. Make
sure you've backed up anything on there that you wanted!
● Rename TomeQ's 0371_0001.seem to 01C4_0001.seem
● Run P2KTools, make sure you're in P2K mode and phone is connected
● Click Seem Editor, and load from file then select your 01C4_0001.seem file
● Make sure under Seem you have 01C4 in the top box and not 0032! It defaults to 0032 and you need to change it to
01C4. The bottom box should be 0001
● Press Save To Phone

● Unplug your phone, turn it off then turn it back on

● If you get a SIM PIN error (wont accept your PIN), then 'oh crap'. I got this and had to reflash to fix it... I'll try to find the
cause of this!
● Reconnect P2KTools, now go to the P2KInfo section and make sure phone model is set to "E1 iTunes"

● Assuming that went OK, we need to FlashBackup 2.3 and make a PDS backup
● Ensure your phone is in Data/Fax mode under USB settings
● Run FlashBackup, wait until your phone connects
● Make sure under Setup you choose the folder where you want to store the backup
● Make sure it's set to PDS Backup (not Full Backup) and hit Create

THE BACKUP PROCEDURE WILL TAKE ABOUT A MINUTE, DO NOT INTERRUPT THE PROCESS IN ANY WAY WHILE IT IS
WORKING.
● Now we go to the directory where we specified in FlashBackup and find the saved file, it should look similar to this "E1
iTunes PDS Backup (05-11-14_125544).fbp"
● Rename this file to .cab instead of .fbp (eg "E1 iTunes PDS Backup (05-11-14_125544).cab" (FlashBackup compresses
any binary backups using the .CAB compression format)
● If you have WinRAR installed, double click on the .cab file and it should open with two files inside. If you don't have
WinRAR, download the free trial version

● Extract the backup file to the folder that you have extracted PDSTool to, and rename the file to pds-original.bin
● Run PDSTool, open the pds-original.bin file and press parse

● Go back to the folder where PDSTools and your PDS backup are, and you will find a new folder called seems
● Open this folder and find the file "0371" and delete it

● Still inside the seems folder, rename the file 01C4 to 0371
● Still inside the seems folder, make a copy of the file 01C3 (copy-paste)
● Still inside the seems folder, rename the copy of 01C3 to 01C4 (the file 01C3 is now the same as 01C4
● Go back to PDSTool and switch to assemble mode

● Set version to 4 and put 9 in the second box

● In PDSTool, browse to the seems folder. If it does not appear, try going up a directory then back down
● You should see all the seems on the box in the right, click the first one, hold down shift, scroll to the last one, and click the
last one so you select every file in that directory
● Press the assemble button, you should see a checksum value and some other stuff at the bottom of PDSTool
● Go back to your seems folder and a new file called PDS.bin should have been created

● Run XVI32 and open the PDS.bin

● This looks difficult but it's not, just find the string PDS_4009 on the right
● Click on the 4 (before 009) and press edit menu in XVI32, and choose Overwrite String
● Put 4013 in the box and press OK

● Voila, it should have changed to 4013! (make sure you didnt overwrite anything else!)

● Save the file in XVI and then quit

● Copy the PDS.bin file to the directory where FlashBackup stores your backups.
● Run FlashBackup and you should get a message about finding uncompressed backups
● Press OK

● Change mode to PDS Backup

● Now under Restore backup press the ... button and choose the PDS file (it has been compressed for you remember)

● Ensure your have the phone is connected message on the bottom left, and hit Restore! Press OK when prompted.
● Turn your phone off and on again
YOUR PHONE SHOULD REBOOT AND ITUNES SHOULD BE WORKING, IT MAY TAKE A WHILE TO LOAD THOUGH
Success!
Congratulations and enjoy your new phone. Please read the section on iTunes PC for compatbility notes.
My phone is dead
This method has fewer steps, but is a little more complex and messing with RAMldr can destroy your phone. Just be careful.

A working Motorola E398 phone with "42r" Firmware (see above)
RAMldr - available here or here or here

TomeQ's 0371_0001.seem - available here or here or here

XVI32 Hex Editor - available here
PDSTool - available here or here or here
WinRAR - available here
BEFORE PROCEEDING, ENSURE YOU HAVE MADE A FULL 32MB BACKUP AND A PDS BACKUP MADE WITH
FLASHBACKUP, AND YOUR BATTERY IS FULLY CHARGED
● Check that your phone fully works with the ROKR firmware (everything except iTunes)
● Format your TransFlash card, by going to Settings > Phone Status > Storage Devices > Middle button and format. Make
sure you've backed up anything on there that you wanted!
● Rename TomeQ's 0371_0001.seem to 01C4_0001.seem
● Run P2KTools, make sure you're in P2K mode and phone is connected
● Click Seem Editor, and load from file then select your 01C4_0001.seem file
● Make sure under Seem you have 01C4 in the top box and not 0032! It defaults to 0032 and you need to change it to 01C4.
The bottom box should be 0001
● Press Save To Phone
● Unplug your phone, turn it off, and turn it back on in Bootloader mode (hold down star and hash when turning on)
● Run RAMldr and plug the phone in, wait until RAMldr detects it
● In RAMldr set the base address to 03FD0000 and entry address to 03FD0010
● Click Send Ramldr and choose ldr.bin
●

● Make sure the log shows the above (maybe without the squares in there)
● In RAMldr set the base address to 10010000 and the entry address 10020000.
● Press Save Mem
● The log will say DUMP 10010000 OK.
● In the directory that ldr.bin is, a file called 10010000 will be saved
● Make sure the size is 65 536 bytes (64 kilobytes)
● Now open PDSTool and open the 10010000 file, and press Parse

● Inside the directory where the 10010000 file was, a new directory called seems has been made
● Open this directory and delete 0371
● Rename 01C4 to 0371
● Copy 01C3 and rename it to 01C4
● Now choose assemble in PDSTools, browse to the seems folder and select all the files
● Make sure version is set to 4009
● Go back to your seems folder and a new file called PDS.bin should have been created

● Run XVI32 and open the PDS.bin

● This looks difficult but it's not, just find the string PDS_4009 on the right
● Click on the 4 (before 009) and press edit menu in XVI32, and choose Overwrite String
● Put 4013 in the box and press OK

● Voila, it should have changed to 4013! (make sure you didnt overwrite anything else!)

● Save the file in XVI and then quit

● Make sure your phone is in Bootloader mode
● Open RAMldr again and set base address to 03FD0000 and entry address to 03FD0010
● Make sure the phone is connected and choose Send Ramldr
● Choose ldr_pds.bin

● You should have got the above to appear

● Now press ERASE in RAMldr, ACK ERASE should appear after ACK JUMP in the log

● In RAMldr, set the base entry to 10010000 and press Send Binary.
● Find the PDS.bin that PDSTool made and select it".

● Hopefully you got the same message as above!

● Upnplug and restart your phone, iTunes should now be working!

Success!
Congratulations and enjoy your new phone
My phone is dead
1.6 iTunes on the PC
Make sure you phone is set to Memory Card mode in USB settings, load iTunes and plug the phone in. It will be slow, but it should
appear there. Make sure that under options (on PC), under Phone you allow transcoding of high bitrate files to 128Kbit AAC or
many files will not transfer over.
At the moment it seems that only iTunes version 4.9 will work, NOT 5 or 6. Apple must have added extra protection against
modding into the later versions, I would imagine it checks your IMEI against a list of valid ones or something similar. Unfortunately
I don't know of a way around this yet. Hopefully some of the russian geniuses are working on Fixing this!
Older versions of iTunes are available to download from PlanetMirror


Easy E398 To ROKR Conversion

Transféré par

Informations du document

Description originale:

Titre original

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

Easy E398 To ROKR Conversion

Transféré par

Droits d'auteur :

Formats disponibles

Easy E398 to ROKR conversion

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (1 of 33)12/11/2005 8:26:24 AM

Anyway, on with the guide!

IF YOU CHOOSE TO PROCEED BEYOND THIS POINT YOU ARE RESPONSIBLE

● Only iTunes version 4.9 will work on Mac or PC

1. Converting your E398 to ROKR

Random's FlashBackup v2.3 - available here or here or here

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (2 of 33)12/11/2005 8:26:24 AM

● Hit the refresh button to gain a list of files.

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (3 of 33)12/11/2005 8:26:24 AM

Backing up your websessions file

Backing up your contacts

● Disconnect your phone if plugged in

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (4 of 33)12/11/2005 8:26:24 AM

Backing up your SMS Messages

● Using the same method as above, open P2KTools in AT Mode

Backing up your current phone firmware

THIS STEP IS VITAL, DO NOT SKIP IT.

● Disconnect your phone from your computer if it's plugged in

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (5 of 33)12/11/2005 8:26:24 AM

1.2 Flashing the 42r MP (ROKR)

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (6 of 33)12/11/2005 8:26:24 AM

● Remove your TransFlash card from your phone

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (7 of 33)12/11/2005 8:26:24 AM

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (8 of 33)12/11/2005 8:26:24 AM

1.3 Restoring your previous settings

1.4 Fixing iTunes Method 1!

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (9 of 33)12/11/2005 8:26:24 AM

TomeQ's 0371_0001.seem - available here or here or here

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (10 of 33)12/11/2005 8:26:24 AM

● Unplug your phone, turn it off then turn it back on

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (11 of 33)12/11/2005 8:26:24 AM

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (12 of 33)12/11/2005 8:26:24 AM

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (13 of 33)12/11/2005 8:26:24 AM

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (14 of 33)12/11/2005 8:26:24 AM

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (15 of 33)12/11/2005 8:26:24 AM

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (16 of 33)12/11/2005 8:26:24 AM

● Set version to 4 and put 9 in the second box

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (17 of 33)12/11/2005 8:26:24 AM

● Run XVI32 and open the PDS.bin

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (18 of 33)12/11/2005 8:26:24 AM

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (19 of 33)12/11/2005 8:26:24 AM

● Save the file in XVI and then quit

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (20 of 33)12/11/2005 8:26:24 AM

● Change mode to PDS Backup

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (21 of 33)12/11/2005 8:26:24 AM

1.5 Fixing iTunes Method 2!

What you'll need for this process:

RAMldr - available here or here or here

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (22 of 33)12/11/2005 8:26:24 AM

TomeQ's 0371_0001.seem - available here or here or here

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (23 of 33)12/11/2005 8:26:24 AM

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (24 of 33)12/11/2005 8:26:24 AM

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (25 of 33)12/11/2005 8:26:24 AM

● Run XVI32 and open the PDS.bin

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (26 of 33)12/11/2005 8:26:24 AM

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (27 of 33)12/11/2005 8:26:24 AM

● Save the file in XVI and then quit

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (28 of 33)12/11/2005 8:26:24 AM

● You should have got the above to appear

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (29 of 33)12/11/2005 8:26:24 AM

file:///C|/Documents%20and%20Settings/Home/My%20Documents/Easy_E398_to_ROKR_conversion.htm (30 of 33)12/11/2005 8:26:24 AM