CRUISER

CRUISER is the first STANDALONE SOFTWARE for unlocking, changing language, changing customizations and repairing of new Sony Ericsson phones. Internet connection is required no more! Besides, CRUISER includes complete FIGHTER functionality.

Supported phones

• Ericsson:
  • All GSM phones!
• Sony Ericsson:
  • All GSM/3G phones!
    Here is an excerpt from the latest models supported by Cruiser: D750i, F500i, J210i, J210c, J220i, J220c, J220a, J230i, J230c, J230a, J300i, J300c, K300i, K300c, K310i, K310c, K500i, K500c, K506c, K508i, K508c, K510i, K510c, K510a, K600i, K600c, K608i, K610, K618, K700i, K700c, K750i, K750c, K758c, K790, S700i, S700c, S710a, V600i, V800, V802SE, W300i, W300c, W550i, W550c, W600i, W700i, W700c, W800i, W800c, W810i, W810c, W810a, W850, Z300i, Z300c, Z300a, Z500a, Z500i, Z500c, Z520i, Z520c, Z525a, Z530i, Z530c, Z530a, Z550i, Z550c, Z550a, Z610, Z800i, Z800c, Z1010i, Z1010c, K550, W610, W630, W710, W830, W850 ,W880, W200 ...
• Sharp (Ericsson-based):
  • TQ-G400, TQ-G450, V703SH, V801SH, V802SH, V902SH, V903SH,...
• LG (Ericsson-based):
  • U8110, U8120, U8130, U8138, U8180, U8330, U8360, U8380, U8550,...
• Siemens (Ericsson-based):
  • C62
• All new Sony Ericsson DB2020 based phones

Present features

- Supports parallel flashing of up to 16 phones. Speed up to 140MBytes per 2 minutes.
- Unlock, flash and repair K310, K510, W300, W550, W600, W700, W810, Z525, Z530 and Z550 phones.
- Flash and repair W200 phones.
- The first software supporting fast direct unlocking Sharp V703SH and Sharp V903SH phones.
- The first software for unlocking Sharp V801SH, Sharp V802SH and V902SH phones.
- The first software that could unlock red CID36/37 phones.
- The first software that could unlock red CID49 phones without TP.
- Full support for flashing CID50, CID51 and CID52 phones without TP.
- Full support for unlocking LG U8180, U8330, U8360 and U8380 phones without testpoint.
- The first software that could unlock DB2020 phones (by emptyboards).
- Unlock J210, J220, J230 and Z300.
- Full support for red/brown CID49 phones, without testpoint!
- Full support for red/brown CID36/37 phones, without testpoint!
- Can change flash certificates (CID/color) without testpoint.
- Possibility to operate with up to 16 phones in parallel using cheap Fighter USB cables.
- Possibility to operate via the original DSS-20 and DSS-25 synchronization cradles.
- Unlock SIM-locks. Can also read codes (supports also 16-digit long codes).
- Unlock userlock. Can also read userlock code.
- Relock SIM-lock to a specific net (handy for LG phones). MNC of 3 digits is supported too.
- Full security zone rebuild (unlock 4 locks closed) in R520/T39/T65 too.
- Change languagepack and software customization (also without losing user data).
- Contains an easy-to-use CDA tool. This allows to use the original Sony Ericsson Upgrade Service.
- Upgrade phone firmware.
- Upload signed file archives (SFA).
- Downgrade LG filesystem to allow unlocking.
- Convert K750 to W800, D750 to K750, V800 to Z800, F500 to K500,...
- Convert P900 to P910, T66 to T600, R380s to R380e,...
- W550/W600/V800/Z800/D750/K750/W800/K600/V600 EROM repair.
- Changing bandlock setting (to enable 1800MHz in some Z1010 phones).
- Changing color of RSA certificate - to force developer units (brown) to accept retail (red) firmware.
- Full support for cross-CID flashing. It is possible to flash CID16/17/29/36/37 phones by any-CID flashes.
- Automatic memory configuration analysis to prevent accidental GDFS damage - unlike other tools.
- Write almost any combination of languages.
- Write almost any combination of T9 dictionaries.
- Download languages and T9 dictionaries from the phone.
- Download files from the phone.
- Upload user files to the phone (audio, video, themes, etc.)
- Upload any file to any position in the directory structure - for advanced users.
- Repair dead, blinking and contact-operator phones.
- Repairing phones with completely destroyed security zone in case you have no backup.
- Emptyboard programming (IMEI filling, OTP area programming, RSA certificate upload...)
- Turn camera shutter sound on/off.
- Backup security zone.
- Restore security zone.
- Recalculate all security zone CRCs.
- Change phone type descriptor.
- Reset air time, reset total call time, reset life time.
- Reset joystick counter.
- Enable/disable channel info, battery info, SIM toolkit support, SMS capability.
- Backup/restore/copy GDFS calibration zones.
- COMPLETE FIGHTER FUNCTIONALITY INCLUDED! (i.e. all previous phones are supported)

Features to be added shortly

- Network unlock of all DB2020 based phones is coming soon
- New flashes are to be uploaded within 5 days
- Updates are released almost every week!

DREAMBOX Siemens Service Tool

DreamBox is a service software device for servicing and repairing Siemens phone models. It can unlock and flash C65, C66, C6C, C6V, C72, C75, CF75, CX65, CX70, CX75, CX7I, M65, M75, ME75, M6C S65, SK65, SK6R, SL65 without disassembling the phone, as well as many other phone models. Writes full flash/language at very high speed, automatic boot selection, partial flashing of ALL blocks, reports phone diagnostic codes, supports original Siemens flash file format (Winswup), works with custom settings DreamBox is the fastest USB device for Siemens phones available on the market today

Supporting almost all EGOLD-platform Siemens phones without cutting tracks

Support almost all SGOLD Siemens phones without disassembling

Unlock all locks and phone code

Allow SP-Lock to any network

Read/write EEPROM, firmware, flash

Fast read/write language packs/T9 packs

Repair all dead phones

Repair IMEI

Soft works at all known SW versions

Flash bootcore in S-Gold

Can read/write custom flash blocks

Many boxes can be connected to one PC

Remote UPDATE function (box firmware and software can be updgraded remotely)

Can use other flash formats (*.bin, Original Siemens Service and Update file format(*.exe))

Can manage/viewing phone's boot keys

Can use original Siemens map files

Contrast adjusting

Format FFS (Mobile Flash File System)

High volume automation of all operations

Scenario (multiply operation execution in loop) - special for for unlock/flash of plenty of phones

General Informations regarding CID, CDA, COLOR, GDFS etc.

CID = This "number" defines the version of SE's protection present in the phone.New CIDs are deployed from time to time, for the sole reason of preventing them from beeing unlocked/flashed/tampered with by non-SE service tools. Current CIDs in use by SE are 29/36/37/49. SE-based LG/Sharp phones use the same system (but different versions). The OTP (One Time Programmable memory) and EROM of a phone might be protected by different CIDs, usually the case in newer K600s/K608s.

CDA = This "number" defines which variant of a specific firmware a phone is supposed to have.It lets among others SEUS (Sony Ericsson Update Service) know which language-pack/branding/bandlocks a phone is to be flashed with. A generic (unbranded) K750 for use in Scandinavia will be CDA102337/12, whilst a Telenor-branded K750 will be CDA102338/62. Both will be flashed with the same languages/dictionaries, but the latter will be flashed with Telenor-branded firmware.

BLUE/BROWN/RED:This "color" defines what kind of phone we are dealing with.BLUE phones has been assembled at the factory, but never been programmed with software/GDFS/IMEI (remember kids: the IMEI is stored in the OTP (One Time Programmable memory))BROWN phones are "developer phones", for testing. Less restrictions are present, as these are used for "debugging/beta" purposes. As of CID36, a phone has to be converted to BROWN to unlock it.RED phones are your typical retail ones.

GDFS:This is the phones "stash", where all settings and calibration data is stored (this also goes for the firmwares IMEI-resource as well as the SIMlocks). Similar to other brands use of NVRAM (Non-Viotile Random Access Memory).

IMEI = International Mobile Equipment Identity.A 15-digit number which includes information on the origin, model, and serial number of the device. The model and origin comprise the initial 8-digit portion of the IMEI, known as the "Type Allocation Code/TAC". The remainder of the IMEI is manufacturer-defined, with a "Luhn check digit" at the end (which is never transmitted). The "Luhn check digit" is calculated from the rest of the IMEI.
It should be noted that in SE-based phones, the IMEI is stored in two places, the OTP (One Time Programmable memory) and GDFS. The GDFS IMEI is normally read from the OTP, but this can be circumvented by SETool function to "change" the IMEI. This patches the firmware into allowing different OTP/GDFS IMEIs. It is the GDFS IMEI that is reported to the network, so changing this will "de-bar" blocked phones. SEUS is not fooled by this, on the other hand, and it should also be noted that doing this is illegal in most countries.

EMMA = Service software/solution by SE themselves. Protected by the EMMA smartcard to prevent non-licensed usage. Current version is EMMA3, though EMMA2 is still alive (but kinda useless on newer phones). The EMMA smartcard contains an algorithm that allows EMMA to communicate directly to/with the phones CID, so performing operations the way they were intended. The smartcard and its algorithm has not been cracked. Current EMMA access levels exists:Service Update - Can't unlock phones.Service Update Pro - Can't unlock phones.Network Operator - Can't unlock phones (but sure as hell can lock them ).Service Center Std - Can't unlock phones.Service Center Rc - Can unlock phones, as they have a special version of the smartcard with a CSCA key.Research & Development - Can unlock phones, as they have a special version of the smartcard with a CSCA key.

DB2000, DB2010, DB2020 = SEMC (Sony Ericsson Mobile Communications) hardware platforms. It's something similar to chipset in PC.DB2000 (another name is Marita) is a GSM+3G(UMTS) capable platform, SE K600/K608/V600/Z800/W900, Sharp 802sh, 902sh, 903sh and LG 3G phones are based on it.DB2010/2012 (Marita compact) is GSM-only, non-3G, platform. Most not very old and modern SE phones like K300,K500,K700,K750,S700,W300,W550,W800,Z520,Z530 are based on this chipset.DB2020 is the newest product of SEMC. K800, K790, K610, Z710 etc, Sharp 904sh feature this most secure (from SE's point of view) platform.

Sony Ericsson Schematic

Sony Ericsson J200-J210
Sony Ericsson J220-J230
Sony Ericsson J300
Sony Ericsson K300
Sony Ericsson K500-508
Sony Ericsson K600
Sony Ericsson K700
Sony Ericsson K750
Sony Ericsson T230-T290
Sony Ericsson T610
Sony Ericsson P910
Sony Ericsson S700
Sony Ericsson W550
Sony Ericsson W810
Sony Ericsson W900
Sony Ericsson Z300
Sony Ericsson Z520
Sony Ericsson Z530
Sony Ericsson Z800

Service Code part 2

Mitsubishi

*65512890 (*-hold) format FFS (Eclipse)
* 3926 - (*-hold) test mode
* 5806 - (*-hold) SW version
*(hold) 787090 - trium 320 unlock menu

Voxtel

0124 - master code
0718#(*)- hold - menu (ST11, SC10, V100 without SIM)
4268#(*)- hold - show code (ST11, SC10 without SIM)
*789(#)- hold - menu (V50, V300, RX100 without SIM)

Fly Bird

S688 - #*301#02# send - with SIM
menu:
7 - 10 - ok,

#*8000#, #*3676# (reboot repair)

V09, S1180 - *, 3 times down, 3 times up - service menu

Enol

*#987*00# - Service menu
*#987*99# - Full reset
*#900# - SW version

Maxon

*#9922# - menu, reset (without SIM)
*#9900# - Software Version
*#9901# - Software Version (PBatch)

Huawei (cdma)

MASTER SECURITY CODE
-309296
-3092
-9296

Pantech HX-550C (cdma)

Full reset (phone code reset)- ##03*934#9367*192#397#7412569746 PWR,
after reset - ##27732726 PWR and select "with uim"

Service Code

Samsung

*2767*3855# - FULL E2P RESET
*2767*2878# - CUSTOM E2P RESET
#*7337# - UNLOCK
*2767*688# - UNLOCK
*#0523# - CONTRAST
*#9998*523# - CONTRAST
*#8999*8378# - Service Menu (X100)


LG

2945#*# - service menu (code reset)(W3000 G5300 C1200 G7100...)
2945#(*)- hold (LG 500,600)
B1200 *+pwr, 6,6,8 Service Menu
B1300 *+pwr, 1,5,9 Service Menu

Security Removing Code For Lg 8110,8120.
47328545454#
Or
277634#*#



Sony-Ericsson

> * < < * < * - Service menu

< * * < - Lock menu


Motorola

(T190, T191, T205) master code

- 19980722

- 20010903

**********

P2K test menu:
*#06#, menu, menu, 048263*

Test comands:
32*116*1*0*0 - read phone code
32*118*1*0*0 - read security code
18*0 - factory reset, phone code off
18*1 - master reset
54*18*1 - full phone reset
10*0*6 - select 900/1800
32*279*1*0*8 - model
32*383*1*0*0 - flex version

Hard reset MPX200, MPX220 - blue button + power on

Nokia

*#7370925538# (valet code reset) 6230
*#746025625# [*#sim0clock#]
*#92702689# [*#war0anty#]

S60 Siries (SX1, 6600, N-Gage..)

*#7780# - factory default
*#7370# - full factory defaults (all user data reset)
SX1 formating - * + # + power on
6600 formating - 3 + * + send + power on
Sendo X1 formating - 5 + power on

Nokia Schematic part 3

6150_schematics.rar 872k
6170_7270_schematics.rar 629k
6200_Schematics.rar 1.1M
6210_Schematics.rar 771k
6220_schematics_2_0.rar 1.6M
6230 schematics.rar 1.7M
6230i_schematics.rar 2.8M
6233_RM145_6234_RM123_schematics.rar 1.7M
6250_schematics.rar 823k
6255_schematics.rar 904k
6260 Schematics.rar 524k
6270_schematics.rar 2.7M
6280_schematics.rar 941k
6310_Schematics.rar 956k
6310i_Schematics.rar 362k
6510_8310_Schematics.rar 874k
6600_schematics.rar 1.0M
6610_7210_Schematics.rar 805k
6630_schematics.rar 1.3M
6650_schematics.rar 460k
6670_7610_Schematics.rar 481k
6680_schematics.rar 1.5M
6681_schematics.rar 2.5M
6800_Schematics.rar 416k
6820_Schematics.rar 434k
7110_Schematics.rar 988k
7200_Schematics.rar 428k
7250_Schematics.rar 1006k
7260_Schematics.rar 967k
7270_schematics.rar 1.1M
7280 Schematics.rar 743k
7360_RM-127_schematics.rar 2.8M
7370_schematics.rar 3.0M
7380__schematics.rar 505k
7600_schematics.rar 1.6M
7650_schematics.rar 1.4M
7710_schematics.rar 1.8M
8110_Schematics.rar 1.7M
8210_schematics.rar 1.2M
8800_Schematics.rar 2.9M
8810_Schematics.rar 837k
8850_Schematics.rar 1.2M
8910-8910i_Schematics.rar 1.2M
9000i_level3_Schematics.rar 719k
9110_Schematics.rar 1.9M
9210_schematics.rar 2.3M
9210i_level3_Schematics.rar 1.4M
9300 schematics.rar 1.5M
9500 Schematics.rar 1.4M
9500.rar 615k
E60_RM-49_schematics.rar 4.0M
E61 schematics.rar 1.5M
E70_rm-10_schematics.rar 1.8M
N-GAGE_QD_schematics.rar 1.5M
N-GAGE_schematics.rar 1.4M
N70_schematics.rar 1.6M
N71_RM_67_schematics.rar 2.0M
N72_RM180_schematics.rar 1.8M
N73_schematics.rar 1.6M
N770 Schematics.rar 894k
N80_RM92_schematics.rar 1.9M
N90 Schematics.rar 1.9M
N91_RM43_schematics.rar 2.2M
N93_RM55_schematics.rar 2.0M

Nokia Schematic part 2

3250_full_service_manual_and_systematic.rar 4.4M
3250_schematics.rar 725k
3300_schematics.rar 634k
3310_schematics.rar 1.6M
3360_schematics.rar 628k
3510_schematics.rar 697k
3510i_schematics.rar 303k
3530_schematics.rar 301k
3600_Schematics.rar 476k
3650_schematics.rar 1.1M
3660_schematics.rar 1.4M
5100_Schematics.rar 1010k
5110_schematics.rar 720k
5140_schematics.rar 619k
5140i_Schematics.rar 1.2M
5210_schematics.rar 708k
5500_RM-86_RM-87_schematics_V1_0.rar 1.3M
5510_schematics.rar 1.3M
6020_schematics.rar 936k
6021_Schematics.rar 1012k
6030_schematics.rar 1.1M
6060_schematics.rar 804k
6070_RM-166_RM-167_schematics_V1_0.rar 1.0M
6100_schematics.rar 1.2M
6101_schematics.rar 2.4M
6108_schematics.rar 655k
6110_schematics.rar 1.4M
6111_Schematics_v1.0.rar 1.7M
6125_schematics.rar 1.5M
6131_6133_6133_6126_RM-126_schematics.rar 1.7M

Nokia Schematic Part 1

1100_2300_schematics.rar 796k
1110_1600_schematics.rar 1.2M
2100_schematics.rar 1.5M
2220_schematics.rar 725k
2600_schematics.rar 698k
2610_RH86 schematics_v1.rar 1.8M
2650_schematics.rar 1.3M
3100_schematics.rar 1.3M
3108_schematics.rar 556k
3120_schematics.rar 467k
3200_schematics.rar 493k
3210_schematics.rar 976k
3220_schematics.rar 387k
3230_schematics.rar 1.5M