Flash&Backup3 profile & loader - The Making

[kent_lkc]

Many of us doesn't know how to make a proper Flash&Backup3 (FB3) profile (prof) & loader (ldr).
In order to make full backup of all code groups (CG) from phone, a working prof & ldr is needed.

Loader is made from RamDownLoader (RDL) extract firmware which is RAMDLD.smg.
Profile is consist of :-

• [FB3 Profile]
• ID= {profile name**.
• Model= {Phone Model**.
• UseLdr= 1 {default one loader to be used**.
• CG0Len=D0 {default value is D0 and only for p2k05 platform**.
• RamDld= {loader name**.
• Addr= {loader start address**.
• Jump= {jump address,normally is 10**.
• {This row purposely leave it blank**.
• [Code Groups]
• BOOT= {start - end address**.
• PDS= {start - end address**.
• CG1= {start - end address**.
• {repeat until CG18**
• CG18= {start - end address**.

To Simplify you work, just copy below quoted text to a txt document.

[FB3 Profile]
ID=
Model=
UseLdr=1
CG0Len=D0
RamDld=
Addr=
Jump=

[Code Groups]
BOOT=
PDS=
CG1=
CG2=
CG3=
CG4=
CG5=
CG6=
CG7=
CG8=
CG9=
CG10=
CG11=
CG12=
CG13=
CG14=
CG15=
CG16=
CG17=
CG18=

Fill in necessary data & delete whatever not applicable.

Lets start making your own FB3 prof & ldr. In this guide, we are making Maxx V6 R261171LD BL0309 FB3 profile & Loader.
Get ready following things.

1. Sbf-ReCalc get a copy from Download Portal.
2. Full Flash firmware / Monster Pack.
3. Hexadecimal program, i use WinHex to do the job.

FB3 prof & ldr - The Making

1. Loader
   
   • Use Sbr-ReCalc to open MP and extract all CG's. DO NOT CLOSE Sbf-ReCalc !
   • Rename RAMDLD.smg with unique name and .ldr extension.
   • e.g :

     R261171LD (0309).ldr

   • Done with making Loader.
2. Profile
   
   • Create a new text document. (New Text Document.txt) and open it for input datas.
   • Copy post #1 quoted text and paste in text document. And fill in necessary datas.
     

     [FB3 Profile]
     ID=Maxx_V6_R261171LD
     Model=Maxx V6 R261171LD
     UseLdr=1
     CG0Len=D0
     RamDld=R261171LD (0309).ldr
     Addr=
     Jump=
     
     [Code Groups]
     BOOT=
     PDS=
     CG1=
     CG2=
     CG3=
     CG4=
     CG7=
     CG10=
     CG11=
     CG15=
     CG17=
     CG18=

   • To determine RAMDLD start & jump sequence, go back to Sbf-ReCalc windows which i told not to close after extracting all CG's. See picture below:-
     
     
   • So, we know RDL start at 80000000 and jump at 80000010.
     

     [FB3 Profile]
     ID=Maxx_V6_R261171LD
     Model=Maxx V6 R261171LD
     UseLdr=1
     CG0Len=D0
     RamDld=R261171LD (0309).ldr
     Addr=80000000
     Jump=80000010

   • Remaining steps are determine CG's start & end address.
   • Open R261171LD (0309).ldr with Hexadecimal program to locate CG's address. See picture below:-
     
     
   • Almost complete creating FB3 profile.
     

     [FB3 Profile]
     ID=Maxx_V6_R261171LD
     Model=Maxx V6 R261171LD
     UseLdr=1
     CG0Len=D0
     RamDld=R261171LD (0309).ldr
     Addr=80000000
     Jump=80000010
     
     [Code Groups]
     BOOT=
     PDS=
     CG1=A0080000-A1EBFFFF
     CG2=B4020000-B577FFFF
     CG3=A1EC0000-A1FFEFFF
     CG4=B5900000-B5B5FFFF
     CG7=B5F00000-B5F1FFFF
     CG10=D0000000-D4073FFF
     CG11=B5780000-B58FFFFF
     CG15=B5B60000-B5EDFFFF
     CG17=A1FFF000-A1FFF7FF
     CG18=A1FFF800-A1FFFFFF

   • Finalizing FB3 profile by adding BOOTLOADER start & end address :
     

     BOOT=A0000000-A000FFFF

   • adding PDS start & end adress. For time being, we are unable to backup PDS area. So, just use value from other profile.
     

     PDS=A0010000-A001FFFF

3. COMPLETING
   
   • Adding Semicolon ; to CG's that we don't want to backup. In this case adding Semicolon ; to BOOT, PDS & CG10.
   • Save New Text Document.txt and rename as per what we inputed in profile:- Maxx_V6_R261171LD.txt
   • Rename extension to .prof .
   • Maxx_V6_R261171LD.prof FB3 profile created.
   • Copy Maxx_V6_R261171LD.ldr to C:\Program Files\Motorola Tools\Flash&Backup 3\Profiles folder.
   • Copy R261171LD (0309).ldr to C:\Program Files\Motorola Tools\Flash&Backup 3\Loaders folder.
   • Run FB3 & connect Maxx V6 to PC usb port. See picture below:-
     
   • Attached here a copy of created Maxx V6 R261171LD FB3 profile&loader.

[Dumba]

Thanks Kent, nice guide. Seeing that Random isn't active, there will be need find the loader and profile settings for the newer phones.

[SocaSlvr]

Thanks so much kent.

[Danation]

Seriously, I've always wanted to know how to do this. Thanks Kent!

[Semseddin]

Fantastic guide bro, really good !

[eddie817]

Wow! This is great, I'm always having problems with phones that F&B doesn't have the profile for..thanks.

[.:RaDeK:.]

Great guide

Incidentally:
The same file profiles are used in p2ktools.

[CarL!ToX™]

[*]Save New Text Document.txt and rename as per what we inputed in profile:- Maxx_V6_R261171LD.txt[*]Rename extension to .ldr . [*]Maxx_V6_R261171LD.ldr FB3 profile created.

Thanks kent nice guide but I think in this part need to rename to R261171LD_MAXX_V6.prof no R261171LD_MAXX_V6.ldr, depending on what I see in the profiles in the F&B3

Grettings!!

[Danation]

Good catch.

[OCM]

Thanks for posting this kent, since the old one by vermsky was lost when mmuk went down, this can really come in handy

[kent_lkc]

Many people out the know where to look for CG's offset but not this :_

[*]To determine RAMDLD start & jump sequence, go back to Sbf-ReCalc windows which i told not to close after extracting all CG's. See picture below:-

[*]So, we know RDL start at 80000000 and jump at 80000010.

[FB3 Profile]
ID=Maxx_V6_R261171LD
Model=Maxx V6 R261171LD
UseLdr=1
CG0Len=D0
RamDld=R261171LD (0309).ldr
Addr=80000000
Jump=80000010

Guessing is not the solution to make proper FB3 profile.

[Russoeternal]

Dude, Kent, you rock !

[Paule]

traslate spanish please!!!

please please

regards!

[kent_lkc]

i think russo can translate into spanish. . . .

[sublime1184]

Kent, can you rehost these images?

http://gsm.motoxtreme.info/images/misc/FB3_RDL_StartAdd.png

and

http://gsm.motoxtreme.info/images/misc/FB3_CG_Add.png