[Guide] How to Retrive Flashfile info. from phone Full Backup MP

[kent_lkc]

Hi, do you know that you can DIY in rebuilding Motorola Flashfile name from any Full Backup MP.

Fellow below simple steps and you will know Stock Flash File that used to flash your phone.

What you need,
1. A Full Backup MP
2. SBF-Recalc
3. XVI32 or any other Hex editor.
4. Motorola Stock MP ( You might need it as reference when you just started to rename your full backup )

Lets start with Motorla Razr v3xxR . . as example.
This is stock filename :
R27231_U_97.04.2BR_LP1163_DRM0011_VSTU_302_01030d1 0_JPJAVA_U_97_R27231_01_03_0CR_USIZARREFRESHATTUSA R27231054_1FF.sbf

Now break it into few parts:
a. Software Version : R27231_U_97.04.2BR
b. Language Pack : LP1163
c. DRM version : DRM0011
d. Voice Command : VST_302_01030d10
e. Java Apps : JPJAVA_U_R27231_01_03_0CR
f. FLEX version : USIZARREFRESHATTUSAR27231054
g. Flash file type : 1FF ( This mean is fullflash MP )

Use SBF-Recalc to extract Full Backup MP then follow steps below to rebuild flash filename.
-------------------------------------------------------------------------------------------

a. Determine Software Version.

i) Use XVI32 to open CG1.smg, then search for string : @(#)R or R27231 ( Normally Software ver. started wt @(#)RXXXXX )


So, we have now R27231_U_97.04.2BR and lets continue with the rest.


b. Determine Language Pack.

i) Use XVI32 to open CG4.smg and look at offset 12 & 13 where those 2 input ( Hex value ) is LP version.



So, we have found this R27231_U_97.04.2BR_LP1163


c. Determine DRM version.

i) Use XVI32 to open cg15.smg and search string for "drm" ( lowercase character ). DRM version is those 4 digits after drmxxxx.


And so far we have found R27231_U_97.04.2BR_LP1163_DRM0011 . . .


d. Determine Voice Command (This is best part)

i) Open CG2.smg with XVI32 and start search string for "VST", and continue to search (press F3) until completed search CG2.smg.
take a pen to write it down the
1st found > VST_U_AM_SPANISH_302, look further up there is "0.0.0.0.1...ver", write down 01 ( just last 2 digit )


2nd found > VST_U_US_ENGLISH_302, look further up there is "0.0.0.0.d...ver", write down 0d ( just last 2 digit )
3rd found > VST_U_MANDRN_MS3_302, look further up there is "0.0.0.1.0...ver", write down 10 ( just last 2 digit )
4th found > VST_U_CA_FRENCH_302, look further up there is "0.0.0.0.3...ver", write down 03 ( just last 2 digit )


For Voice command version, we should write it such a way that it started with VSTU_302_01030d10 . .

Lets see what we have completed so far, R27231_U_97.04.2BR_LP1163_DRM0011_VSTU_302_01030d1 0 and lets finish it with last 2 part.


e. Determine Java Apps version
i) Open CG2.smg with XVI32 and search for string "27231" until you found this, see attachment . . .


Look further up from "JAVA_U_97_R27231_01_03_0CR" you can see "J.2.M.E.P.C.K." ( java version can be located just below of "J.2.M.E.P.C.K." )
So, Java version should start with "JP" then version number.

Now we almost complete it, R27231_U_97.04.2BR_LP1163_DRM0011_VSTU_302_01030d1 0_JPJAVA_U_97_R27231_01_03_0CR .


f. Determine FLEX version
i) Open CG2.smg with XVI32 and search string "R27231" ( Normally FLEX version will contain part of software version )


So, we have completed and lets see the result:

a. Software Version : R27231_U_97.04.2BR
b. Language Pack : LP1163
c. DRM version : DRM0011
d. Voice Command : VST_302_01030d10
e. Java Apps : JPJAVA_U_R27231_01_03_0CR
f. FLEX version : USIZARREFRESHATTUSAR27231054

just add "1FF" at the end for FLEX version....

R27231_U_97.04.2BR_LP1163_DRM0011_VSTU_302_01030d1 0_JPJAVA_U_97_R27231_01_03_0CR_USIZARREFRESHATTUSA R27231054_1FF.sbf

Somes might said that we can determine software version, DRM version and FLEX version by connecting Phone to PC and run either RSD or fb3.
But in this case we can rebuild STOCK Flash Filename just from any FULL BACKUP MP.

If somebody asking how to find a STOCK FLASH FILE for his phone, we can easily found out the EXACT STOCK FLASH FILE for his phone with above guide.




note: The more you try and you will gain some skills and experience on how to rebuild MP's name from FULL BACKUP FLASHFILE.





When asking for STOCK FILE FILE FOR YOUR PHONE, BY GIVING THIS INFO.

IMEI: XXXXXXXXXXXXXXX

Technology: Dual Mode UMTS

Software Version: R27231_U_97.04.2BR

Flex Version: USIZARREFRESHATTUSAR27231054

Bootloader Version: 0624

DRM Version: 0011


NOW YOU CAN GIVE THIS :

R27231_U_97.04.2BR_LP1163_DRM0011_VSTU_302_01030d1 0_JPJAVA_U_97_R27231_01_03_0CR_USIZARREFRESHATTUSA R27231054_1FF

TO THEM AND IS EASIER TO FIND THE CORRECT FLASH FILE COMPARE TO JUST INFO. FROM RSD OR FB3.

[ferrarix]

Looks cool...just can't understand what's its purpose

[Russoeternal]

Get the correct name of your monsterpack.

[RaMi]

OoOoh Yeah! .. Fantastic Kent.

[OCM]

And find the file on motorolas server

[kent_lkc]

And find the file on motorolas server

[Semseddin]

Great post !!!

[adeltaY]

Great guide man!

[Skager]

Awesome GUIDE Kent !!!

You really rockin' it !!!

Howdy?

[kent_lkc]

how r u skager, for month me not seeing u around !?
btw drop by my lil forum that just upgraded to vbulletin ... say hi to yr frd there.

[kaputme]

hey guys,

i am new to this.. reading got me to this site so i'm requesting a firmware for my phone razr2 V9, and a guide to flash it

i bought it from germany and the details are as follows

R263313_U_A0.03.16R_LP0339_USEMERALD2100VFDER26331 3079: Unlocked; Vodafone Germany, MotoMagX DRM; Language Pack 0339

waqiting for your reply

hey guys,

i have R263313_U_A0.03.16R_LP0339_USEMERALD2100VFDER26331 3079: Unlocked; Vodafone Germany, MotoMagX DRM; Language Pack 0339 as my firmware,

can i flash this and get my phone unbranded ??? R263313_U_A0.03.18R_LP0039_USEMERALD2100RTBNLR2633 1301D