[Defy General] rockeroll:
hey, my friend give us a inportant information!!!!

i'm translating!

虽然这个事情难办，但在期间我也了解了更多的信息。。。。那个德仪工具之所以没有开放，是因为里面要一个license，类似于一个RSA证书的东西。。。。

well...it also difficult, but i also find a lot of new messege...that ti omap tool not to give to anyone ,because of it need a thing called “license”(likes a RSE signed) to use it

这个工具可以(重)量产OMAP基板到用户设备(大家要小心了，以后买OMAP处理器的机器一定要看它的生产日期，因为用这个工具可以把一块N手的主板重量产到一个各种参数都对应的厂家新设备，翻新必备)。。。。

and this tool can reset and do a lot thing and edit a big number dervice information in a little time(so maybe a very old phone can be sell as a new phone.)because this software can rewrite motherbroad change to anything you want to do.for example: if defy and razer are same motherbroad ,you recycle defy's to used it on razer.

而那个16M的.bin文件并不是什么刷机固件，是一个OEM厂商使用德仪开发套件编译出的设备工程文件(这项措施是德仪从OMAP3系列开始正式启用的，它可以大幅度的降低终端设备的量产、维修、系统升级和硬件升级参照的成本和周期)。。。。。

and the 16M flie isnt we thinked. it isnt a rom we flashed likes .sbf . its a OEM company to write a software for them device(since ti OMAP3 .to make device sell、 fix、make and update system more cheaper)

客服使用德仪工具将16M的.bin工程文件加载进去，然后使用类似于单片机/ARM的在线调试(DEBUG)功能将其直接加载到手机主板的RAM上并运行这些代码，解锁、硬件参数修改、软件参数修改等的工作都是在这些代码启动后的一个环境中(Factory reset mode)完成的。

service centerused ti omap tools to write in device' RAM , and do something like ARM'S DEBUG to unlock、edit system and cpu information in this Factory reset mode to complete them need to do.

所以说我的手机在整个解锁过程中(除掉最后刷的那个内核sbf)根本就没有向里面刷入任何的资料。。。何谈危险之说。。。他只是完成了一个摩托内部的工程师在调试机器的时候做的一个事情罢了。

so my phone in the way of unlocking. no things to flashed. its no damage. juat a test likes phone go out of factory.

刚才看到有NS一说，估计也能在Factory reset mode中实现。。。毕竟除了硬件改变之外，其他的一切操作都可以在Factory reset mode中完成。。。

and I think about NS：we also can change our defy to this or unlock.because everything can be done by the Factory reset mode.

另外，我的手机是在卡M的情况下，他点击德仪工具的Reset按钮直接进入Factory reset mode的，期间没有扣掉电池。。。也就是说德仪工具加载代码应该是在USB接口上做了一定的手脚(比如给个什么信号之类的，然后手机的CPU就会有反应)。我想这应该是一个突破点。。。。

and my phone can't entry system.he(engineer) only click the ti omap tools “reset” button to make phone entry the Factory reset mode. no put down the battery. so he do something on usb(such as signal). I think it is the key of our work

希望LZ能找个人帮忙翻译一下给XDA，我这几天要回家过年了，可能没有时间去翻译的。

i hope some to translate(well..is me)

翻译时在最后面一定要加上这几个重点：

key of important:

1、德仪工具在手机无操作配合的情况下即可给CPU复位之类的指令，肯定是在USB接口上有动作。这个不妨让XDA上的硬件大师来试验一下，USB口就是那几根线，

(i cant to translate but give you main idea:我觉得无非就是给个高低电平和短接之类的吧。。。。。一旦这个实现，那么我们便找到了可以替代德仪工具的东西，其次Defy也永远不会有转头(包括E大的情况，因为不需要操作配合嘛，呵呵)。)

first

ti omap tools can reset cpu without anyting on phone.so he must do something on the usb. so xda friend can try to do something because use just have some line(tunnel?) .

so let us to try(this is main idea)

2、我们不一定需要那个16M的.bin文件，那个文件只是给一些操作和功能定义了其地址的常量和提供一个可视化的操作界面而已。如果我们实现了第一条，那么我们便可以让CPU运行我们自己的代码，从而来不断尝试地址对应的功能(再也刷不死了。呵呵)

second

we maybe neednt that 16M flie. that flie only give us a os and address of cpu andmother broad and easy to edit.if we can do the first.we can make CPU to read our want it to read.and we can try to change address one by one to know where is this or another address controled

综上所述，无非就是德仪的OMAP3系列开始的主板在提供此项利于OEM厂商举措的同时也留了一个“后门”。。。。可能我们不需要去找摩托或德仪的内部人员，只需要一个经验丰富的ARM硬件工程师，说不定他看一眼就知道怎么弄了。

so this software (ti omap tools) is the ti to make for his device to used become cheaper easier.so maybe we neednt find moto engineer.just need a more experience ARM engineer . maybe he will look a minute and know how we can do

by my poor english....just a senior high school student.....╯﹏╰