YouŽll need to flash Main and FS of R1CA021 CID49 and customize file system (finalization) with XS++.
There is no need for you to use bruteforce, for XS++ can "breakin".