I found a suspicious thing.
Composite usb device has 3 sub-device data logger, accessory and test command
Pk2 command targeted to Testcommand i/f (tci)
my e398 (and all p2k phones tci index is 8 )
....
It's interessting to see for possible devices available for moto:
There are:
-Accessories Interface
-Audio Control Interface
-Audio Streaming IN Interface
-Audio Streaming OUT Interface
-Communication Class - Control Interface
-Communication Class - Data Interface
-Data Logging DSP Interface
-Data Logging MCU Interface
-DSP Debugging Interface
-Flash Baseband Interface
-Flash File System Interface
-Flash Operating System Interface
-Motorola AP Data Logger
-Motorola AP Flash
-Motorola BP Flash
-Motorola EZX PTF
-Motorola Flash Interface
-Motorola iDEN Interface
-Motorola Unused Interface
-Test Command Interface
Some of this device driver respond to the built-in devices like EZX, MCU or DSP.
The existence of AP Flash AND BP Flash let suggest that their is one backup or fall back mode or something like that.
Have anyone skill to disassemble the boot-loader for guessing the cpu-family? It's nice to uplad Java-MIDlets, but if you can programm in native there would be possibilities...