Motorola A1000 unlocking! Need experts opinion!

[kilimanjaro]

Hello everybody! First of all please excuse my poor english....

3 days ago I've both a Motorola A1000 from someone. It was not new and it was unlocked (different USIMs OK). The first impresion: A nice phone! (My old phone was a Nokia 6600). The first problem I have encountered was that my phone was not able to connect to the internet. There was an account on Internet Accounts, named 3-Gprs wich I could not delete. I solved the problem after reading 3 days on forums on how to flash my phone with another firmware version. Flashed the phone with version 54.07.10. Works perfect! So far, so good!

But yesterday, a good friend of mine finds an interesting deal on buying a new Motorola A1000, but a locked one. So I though that just flashing the phone will do. Surprise... Offcourse it does not... Unlocking is a diferent thing... So I've read everything about A1000, about that amazing subsidy code that you can read so easy with PST on non locked phones, about that amazing hardware named smartclip, an so on...

Offcourse went to a GSM service to unlock it... hey, hey... surprise. The smart clip is not so smart after all! The man at the GSM service did his best... updated his smart clip, updated his software also.... nothing. A more stupid thing: the service man unlocked an A1000 that very morning with the same smart clip... just pressed the unlock, that 2 game buttons and everything was OK.... but not with my friend phone.

So... this is where I start to ask to all the experts that read this forum:
As far as I know, the OS is loaded in the RAM from the internal memory, in our case on A1000 from that internal flash memory... the firmware that I write/flash to my phone is the OS (with everything, photos for start, sounds, and offcourse the code to load in RAM and execute). That code, at time of execution does some sort of compare instructions... to compare the network code from the USIM and the network code from a portion of the flash memory area, wich in case of locked phones is the only network code allowed. If they do not mach, no further code in that direction is executed... so the phone is not able to register with the USIM network, etc. PLEASE CORECT ME IF I AM WRONG!!!
So I think that the main problem is: to erase that area of code wich does the compare instructions and replace it! Why is it so hard to write that area on the flash chip?
On more interesting aspect.... that subsidy code.... if you have it... you can enter it when the personalization code is beeing asked and, hey your phone is unlocked.... but wait a minute... that means the a simple code loaded in the RAM can do a write in that areea of the flash memory! So why is it so imposible to do it with a simple data cable?
Another aspect: what does a smart clip contains.... because, the smart clip is conected to the phone with a simple data cable, same you use with your PC.... please corect me if I am wrong! That stupid data cable makes a simple serial comunication! and that's all! So it is clear that for unlocking a A1000 should be possible just using apropriate software and data cables.
I would very much apreciate if an OS programer would read this and help me out with some of the problems....
After all it has a FLASH witch can be written at any time in one or another way!

NOW, important QUESTIONS: what does a full flash means? does every byte and every bit of the flash memory is beeing written? doesn't this suppose to solve the unlock problem with apropriate flash file? how can you do a full flash on the A 1000?
HOW IS THAT it is imposible to read the subsidy code from locked phones? is the portion of the flash area containing the code somehow hardware protected for reading (seems imposible to me)??? Does anyone knows what type of flash does the A1000 have.... or maybe that codes are stored in a different flash or EPROM... that makes it so hard to be read?

I know that the data cable uses just 3 pins and one more for grounding (IN THE CONNECTOR OF A1000 pinout pins 1,4,5,6).... but the pinout for A1000 has some pins marked for flashing with 12 volts... or something like that. Does anybody knows something about this, about the complete pinout description for A 1000?

And finaly: how can my friend unlock his phone? cause smart-clip didn't help him at all! (I changed him the firmware, he has now 54.07.10 as I do, the phone works, but only with USIM from 3). As far as I know the phone is locked on 3 network and it is originated from Italy.

All the feedback will be apreciated! Thanks a lot in advance!