Required :

1) RSA patched AER firmware. Get it here.

2) XVI32 or any other hex editor.

3) RandomSHX

3) SBF Recalc v1.2

4) SHXCodec

5) j2me_domain_registry.sm


STEPS :

1) Split your RSA patched AER into .bin files using Random SHX. We need the CG1 which is the *2.bin file.



2) Open the *2.bin file ( 12-13mb in size) in XVI32.

3) Goto 'Search > Find' and perform a search for and change the strings as follows :






a) Search for :
B5 FF B0 91 20 00 90 05 90 04 27 0F 1C 1C 22 0C

Change to:
B5 FF B0 91 20 00 E0 10 90 04 27 0F 1C 1C 22 0C

b) Search for :
1C 05 D1 04 48 37 30 4C F7 BD FC 46 E0 DD

Change to :
1C 05 D1 04 48 37 30 4C F7 BD FC 46 E0 DE

c) Search for :
B5 70 25 00 00 6B 18 1A 78 52 2A 01 D0 09 2A 02

Change to :
20 01 47 70 00 6B 18 1A 78 52 2A 01 D0 09 2A 02

d) Search for :
20 00 22 02 00 41 5C 6B 2B 05 D1 00 54 6A

Change to :
35 01 22 03 00 41 5C 6B 2В 04 DA 00 54 6A


4) Save the file.

5) Compile all the *.bin files u extracted (including the edited *2.bin file )into a SHX file using RandomSHX.

6) Move the new compiled AER shx file into a new folder and split it using SHXCodec.



7) (a) Open SBF Recalc v1.2 and press 'Open CG- folder' and select the folder where u placed the files split in step - 6.

(b) Press 'Recalc - Checksum'.

(c) After you see a list of 'Re-Calculated Codegroups ' , press Create SHX file'. The file will be saved in '/SHX - Flashfile' folder.



8) Flash the new SHX file using Flash&backup 3.

9) Now, you have two options :

(a) Follow the iTunes guide here to install iTunes.

OR

(b) Flash a modded flex (already containing iTunes) from here.

Note : If u chose to flash a pre-modded flex, u might get an 'iTunes Corrupt' message when u turn on ur fone. Delete the itunes, and just re-install the iTunes using motomidman and follow the rest of the steps

10) Open P2k tools or any other p2k file manager, replace the j2me_domain_registry.sm file (located at 'a/mobile/certs/root/x509/kjava') with the file u downloaded from this guide.


11) Open motomidman, and check iTunes as SIGNED and CORELET.



12) Restart the fone.

And ur done !!!