First of all: this method can damage your mobile phone, it's all on your own risk! You also lose garantee doing it!

You can try this way to hack your bootcore and change bootkey. After this you can make loader for V-Klay, so it make possible doing Fullflash-backup, reading, restoring, patching etc.

We need:
1) Data-cable DCA-110 (or DCA-100-mod) - if missing can be purchased here
2) bsReader midlet
3) x65PapuaUtils v1.1.1b

For EL71 with factory firmware less than 41 you mustn't do TP! All codes can just be calculated.

Write down your HASH and ESN from bsReader, switch off the phone and let's do it.

Warning! Phone battery must be connected during all operations.

Choose your СОМ-port and press "Information". PapuaUtils shows phone data on the right side.

Open "Codes" tab. Enter your ESN (as it was in bsReader). Fill SKEY-field with 12345678.

Click on "Calculate HASH + BootKEY from ESN + SKEY". Here you have:

Now go to "Flash" tab.
You must check elements as here:

(in Bcore, Pause, Make backup, Chaos BOOT)

Short-circuit your TP. Press "Do the Job!".

E71:

EL71 (short-circuit with resistor!):

Then you have to initiate short press of red button on keyboard of the mobile. While keeping testpoint short circuit, touch with finger the right part of the upper row of the keyboard contact pad, and the other hand at the same moment must touch the body of the phone (metallic coating).
As soon as you see "Boot loaded. Pause 2sec..." you must release TP (do quickly, 'cause you don't want your mobile to die... remember, that you can kill your phone keyboard or even processor...).

When you see "Boot disconnected. Ready", that's ended. Connect your mobile to any cable as usual, switch it on. Press "Enter SKEY (BKEY) in phone" and enjoy. It's now in Factory Mode

In order to generate loader for V-Klay, just click on "V-Klay.vkd" button and copy file to V-Klay loaders folder.

© sotaland
Last updated on 18.08.2007. Not tested by us on EL71! Edited for e71.ru by sim_emrom.
Source: http://sotaland.net/content/view/23/31/

Translated by Evgr, PaulS and sim_emrom. Any postings of this material on other sites is only according with administration!