Hola que tal, no se si ya sabian de esto pero en el foro del L7i lo postearon hace poco... un gran avance
Señores he conseguido lo que parecia imposible.Leyendo por ahi he encontrado como remover la RSA sin necesidad de hacer test point!!!!!!!!!!!!!!!!!!!!!!!!!!!!MARAVILLOSO
Solo deben de hacer todo tal cual dice esta guia
Hey duuuuudes!
I was talkin' with Osta@motofan about removeing RSA without TP, using the method I posted to unlock without TP.
Some guys at motofan are able to remove RSA without lots of "corpses". The thread is brand new (18.1.2008, 5:08) and a loooooot of people is testing and they are achieving good results.
You can see the original thread here:http://forum.motofan.ru/index.php?showtopic=135703&st=255&#entry1017751.
AND REMEMBER: DO THIS AT YOUR OWN RISK!
What you will need:
- Mstool (google it 4 download);
- RSDLite (google it 4 download);
- Flash & Backup 3.0.6 (google it 4 download);
- Z3__BOOTCORE_TP.bkp;
- K1__BOOTCORE_TP.bkp;
- Boot_0AC0_patch.bin;
- Boot_Start_SW.bin;
- Patched reflash/MP (Look in the end of this tutorial).
To see if your cel support this tutorial:
1. Open mstool, click "Handset" and select your model K1 or Z3;
2. Connect phone in bootloader mode usiung the *+# + "power on";
3. Click in "Read Backup" and check PDS;
4. Make sure the backup was successful.
If something appears in the unit as "Critical error" during the backup does not follow this topic!
Removing RSA:
1. Connect phone in bootloader mode again usiung the *+# + "power on";
2. Click "write backup" and select Z3__BOOTCORE_TP.bkp (if you have a Z3 or L7e) or K1__BOOTCORE_TP.bkp (if you have a K1);
3. Wait untill the app do it's job. After it finishes, your phone gets BLACK SCREEN, this is OK;
4. Close the program and remove the battery and then insert in the phone again;
5. Turn on the phone using the red button;
6. Run RAMLdr2;
7. Click "send loader" and wait for the "ready" message;
8. Click "write boot" and select the Boot_0AC0_patch.bin;
9. Wait. The phone will be automatically shut off;
10. Close RAMLdr2 and run FB3;
11. Download a RSA removed reflash (look down there) and flash it;
12. Close FB3 and open RAMLdr2;
13. Remove the battery and put it again. Wait until the program recognize the phone;
14. Click "send loader" and wait the "ready" message;
15. Click "write boot" and select Boot_Start_SW.bin;
16. DONE!!! Turn on the phone and do whatever you want with your CG1! RSA is gone!!
If something goes wrong:
1. Make a hard TP;
2. Got to #6 step and do all over again!
_____________________________
Flashes & MPs with RSA removed:
L7e:
http://lucas.etinin.com/Moto/L7e/L7e....2_REFLASH.fsw
http://lucas.etinin.com/Moto/L7e/X-Moto_v1.4_L7e_MP.rar
http://lucas.etinin.com/Moto/L7e/v2_osta_REFLASH.fsw
Z3:
http://forum.motofan.ru/index.php?showtopic=129362
http://forum.motofan.ru/index.php?showtopic=123227
K1:
http://forum.motofan.ru/index.php?act=Attach&type=post&id=153992
http://forum.motofan.ru/index.php?act=Attach&type=post&id=153993
http://lucas.etinin.com/Moto/MP_K1_s...rPatcheada.rar
I am developing a 42.0BR s/w with all patches necessary to run Java with full acces to the FS.