Cruiser v9.72 Guide

8/22/2019 Cruiser v9.72 Guide

1/175

2003-2006 Cruiser Team

Cruiser User's Guide

ered_evaluation_copy


2/175

Cruiser

powerful * flexible * reliable

by Cru iser Team

ered_evaluat ion_copy


3/175

All rights reserved. No part of this work may be reproduced in any form or by any means - graphic, electronic, ormechanical, including photocopying, recording, taping, or information storage and retrieval systems - without thewritten permission of the publisher.

Products that are referred to in this document may be either trademarks and/or registered trademarks of therespective owners. The publisher and the author make no claim to these trademarks.

While every precaution has been taken in the preparation of this document, the publisher and the author assume noresponsibility for errors or omissions, or for damages resulting from the use of information contained in this documentor from the use of programs and source code that may accompany it. In no event shall the publisher and the author beliable for any loss of profit or any other commercial damage caused or alleged to have been caused directly orindirectly by this document.

Cruiser User's Guide


ered_evaluation_copy


4/175

Cruiser User's GuideI


Table of Contents

Foreword 0

Part I The Software 2................................................................................................................................... 21 Introduction

................................................................................................................................... 22 History of Changes - Cruiser

................................................................................................................................... 223 History of Changes - Fighter/Interceptor

Part II Installing the Software 36

................................................................................................................................... 361 System Requirements

................................................................................................................................... 362 Installing the Software

................................................................................................................................... 413 Manual SmartCard Base Components Problem Resolution

................................................................................................................................... 434 Checking Drivers and OS Update Installation Success Under Windows 2000/XP

................................................................................................................................... 465 Checking Drivers and OS Update Installation Success Under Windows 9x/ME

................................................................................................................................... 506 Frequently Asked Questions

Part III Working with the Software 53

................................................................................................................................... 531 Getting Familiar with Main Window

................................................................................................................................... 542 Getting Familiar with Settings Window

......................................................................................................................................................... 54Connections Page

......................................................................................................................................................... 56Options Page

......................................................................................................................................................... 58Language Page

......................................................................................................................................................... 59Authentication Page

......................................................................................................................................................... 59Licensing Page

................................................................................................................................... 613 Getting Familiar with Control Window

......................................................................................................................................................... 61Primary Page

......................................................................................................................................................... 64Flash Page (Old Phones)

......................................................................................................................................................... 66Flash Page (New Phones)

......................................................................................................................................................... 67File System Page

......................................................................................................................................................... 68Locks Page

......................................................................................................................................................... 70Security AVR Page

......................................................................................................................................................... 71Security RSA Page

......................................................................................................................................................... 72GDFS Page

......................................................................................................................................................... 74Read Flash Page

......................................................................................................................................................... 75Extras Page

......................................................................................................................................................... 76IMEI Page


Part IV Phones ARM 2004/2005 79

................................................................................................................................... 801 Change LanguagePack

................................................................................................................................... 812 Change LanguagePack (red CID49, non TP)

................................................................................................................................... 823 Upgrade Firmware

................................................................................................................................... 824 Unlock


5/175

IIContents


................................................................................................................................... 825 Unlock Red CID49 Phones without TP

................................................................................................................................... 836 Unlock Red CID49 Phones via TP

................................................................................................................................... 837 Change IMEI

................................................................................................................................... 838 Enable GSM/3G Selection Menu

................................................................................................................................... 849 Repair Keypad not Working Problem

................................................................................................................................... 8410 Extra Files

......................................................................................................................................................... 84EROM Files with Color Conversion

......................................................................................................................................................... 84FOTA User Agent Repair Files

................................................................................................................................... 8511 Testpoint Pictures

......................................................................................................................................................... 85K300/K500/K700 CID Testpoint

......................................................................................................................................................... 85K600/K608/V600 CID Testpoint

......................................................................................................................................................... 87V800/Z800 CID Testpoint

......................................................................................................................................................... 89W550 CID Testpoint

......................................................................................................................................................... 90W600 CID Testpoint

......................................................................................................................................................... 90W900 CID Testpoint


Part V Phones ARM 2001/2003 94

................................................................................................................................... 941 Unlock by Using Codes

................................................................................................................................... 942 Repair J210

Part VI Phones AVR 2003 96


................................................................................................................................... 972 Unlock

................................................................................................................................... 973 Rebuild Security Zone

................................................................................................................................... 974 Decustomize

................................................................................................................................... 985 Repair T630 Network Problem

Part VII Phones AVR 2001 100


................................................................................................................................... 1002 Unlock by Codes

................................................................................................................................... 1003 Check Security Zone


................................................................................................................................... 1015 Convert T68m to T68i

................................................................................................................................... 1016 Decustomize T68m and T68i

................................................................................................................................... 1027 Convert T300 to T310

Part VIII Phones AVR 1999/2000 104

Part IX SmartPhones 2003/2004 106

................................................................................................................................... 1061 Change Languagepack and Upgrade Firmware

................................................................................................................................... 1062 Unlock

................................................................................................................................... 1073 Check Security Zone


6/175

Cruiser User's GuideIII



................................................................................................................................... 1075 Convert P900 to P910

................................................................................................................................... 1086 How to Boot an Unbootable P900?


Part X SmartPhones 2000 111................................................................................................................................... 1111 Change Languagepack and Upgrade Firmware

................................................................................................................................... 1112 Unlock

Part XI Phones CR 2001 113

................................................................................................................................... 1131 Unlock

Part XII LG 3G Phones 115

................................................................................................................................... 1151 Unlock

......................................................................................................................................................... 115Unlock LG U8110

......................................................................................................................................................... 115Unlock LG U8120

......................................................................................................................................................... 115Unlock LG U813x/U8180/U83x0

......................................................................................................................................................... 116Unlock LG U8550

................................................................................................................................... 1162 Testpoint Pictures

......................................................................................................................................................... 116LG U8xxx CID Testpoint

......................................................................................................................................................... 117LG U8380 CID Testpoint

......................................................................................................................................................... 118LG U8550 CID Testpoint

................................................................................................................................... 1193 Special LG Codes

Part XIII Sharp 3G Phones 121


Part XIV Siemens Phones 123

................................................................................................................................... 1231 Unlock Siemens C62

Part XV Language Packages 125

................................................................................................................................... 1251 Language Acronyms

................................................................................................................................... 1262 A3618 Language Packages

................................................................................................................................... 1263 J200i/J200c Language Packages



................................................................................................................................... 1286 K300i/K300c Language Packages

................................................................................................................................... 1307 K500i/K500c/F500i/K508i/K506c Language Packages

................................................................................................................................... 1328 K600i/K600c/K608i/V600i Language Packages

................................................................................................................................... 1339 K700i/K700c Language Packages

................................................................................................................................... 13510 K750i/K750c/D750i Language Packages

................................................................................................................................... 13611 P800/P802 Language Packages

................................................................................................................................... 13712 P900/P907/P908 Language Packages


7/175

IVContents


................................................................................................................................... 13813 P910i/P910c/P910a Language Packages

................................................................................................................................... 13814 R310s/R310sc Language Packages

................................................................................................................................... 13915 R320s/R320sc Language Packages

................................................................................................................................... 13916 R380s/R380sc/R380e Language Packages

................................................................................................................................... 14017 R520m/R520mc Language Packages

................................................................................................................................... 14018 R600 Language Packages

................................................................................................................................... 14119 S700i/S700c Language Packages

................................................................................................................................... 14220 S710a Language Packages

................................................................................................................................... 14321 T39m/T39mc Language Packages

................................................................................................................................... 14322 T65s/T65sc Language Packages

................................................................................................................................... 14423 T66 Language Packages

................................................................................................................................... 14524 T68m/T68mc Language Packages

................................................................................................................................... 14525 T68i/T68ie Language Packages

................................................................................................................................... 14626 T100/T100c/T102/T105/T106 Language Packages

................................................................................................................................... 14727 T200/T202 Language Packages

................................................................................................................................... 14728 T226/T230/T237/T238 Language Packages

................................................................................................................................... 14829 T290i/T290a/T290c Language Packages

................................................................................................................................... 14830 T300/T300c/T302/T306 Language Packages

................................................................................................................................... 14931 T310/T310c/T312/T316 Language Packages

................................................................................................................................... 15032 T600 Language Packages

................................................................................................................................... 15033 T610/T616/T618 Language Packages

................................................................................................................................... 15234 T628/T630/T637 Language Packages

................................................................................................................................... 15335 V800/V802SE Language Packages

................................................................................................................................... 15336 W550i/W550c Language Packages

................................................................................................................................... 15437 W600i Language Packages




................................................................................................................................... 15741 Z200/Z208 Language Packages

................................................................................................................................... 15742 Z500a/Z500i/Z500c Language Packages

................................................................................................................................... 15743 Z520i/Z520c Language Packages


................................................................................................................................... 15945 Z600/Z608 Language Packages



Part XVI Additional Information 163

................................................................................................................................... 1631 SE/LG/Sharp/Siemens Cable Pinouts

................................................................................................................................... 1652 CID Information


8/175

Cruiser User's GuideV


Index 0


9/175

Part

I


10/175

2 Cruiser User's Guide


1 The Software

1.1 Introduction

Cruiser is ultimate, the most advanced and the most flexible service tool formaintaining of almost all existing Ericsson and Sony Ericsson GSM phones.

Cruiser is World's First standalone service tool for Ericsson and Sony EricssonGSM phones that works without internet connection and uses a special USB box thatis especially designed for achieving the highest possible communication rateswhile maintaining maximum reliability. No more obsolete LPT or COM portsrequired!

Cruiser perfectly matches your needs. You can select which software edition youneed - either Standard or Professional. The Professional edition can handle up to 16phones simultaneously. Perfect support you can rely on, new features comingevery month, instant access to the latest flash files!

We believe you will experience the passion of using Cruiser. You are worth using it!

Yours,Cruiser Team.

All trademarks and registered trademarks appearing in this user manual are theproperty of their respective owners.

1.2 History of Changes - Cruiser

Version 9.72 (30th May 2006, 88th release): Added built-in system diagnostics. Installer updated. Updated TAC list for W700i and Z520a.

Version 9.71 (28th May 2006): Released support for flashing files in MBN and FBN file format. Updated built-in customizations. Updated TAC list for J230i, W800i and Z300a.

Version 9.70 (25th May 2006): Several applets were updated.

Version 9.69 (25th May 2006): Minor change to UI. Enhanced communication handshake again. Updated TAC list for K300i, K700i, Z520a and Z600i.

Version 9.68 (21st May 2006): Fixed a bug causing flash failure on some prototype phones. The Repair certificate option was not enabled for CID49 empty-boards by a

mistake.


11/175

3The Software


Version 9.67 (21st May 2006): Added support for W300 phones. They are basically the same as W810 phones. Added support for W700 phones. They are basically the same as K750/W800

phones. Added support for correct handling of red CID49 Z520 phones with locked-down

EROM area. Added support for Z525 phones. Updated TAC list for K510i, V600i and Z300i.

Version 9.66 (15th May 2006): Updated built-in customizations for W810, W900, Z530. Fixed a bug in loading AVR flash files for A1018, T10, T18, T28, R320 and R380

phones. Added several helpful hints to Cruiser code. Minor updates to flasher code.

Version 9.65 (15th May 2006): Slightly increased flashing speed for some phones.

Updated built-in customizations. Updated TAC list for J220i.

Version 9.64 (14th May 2006, 80th release): Updated communication routines. Enhanced communication handshake in some

cases. Increased timeout when defeating RSA protection of red CID49 phones. Updated TAC list for LG U8130C. Added experimental support for J220 and J230 phones.

Version 9.63 (13th May 2006): We have decided to release separate Firmware Restoral installer. Added Firmware restore button to the Security page. It automatically looks for

proper firmware restoral file and flashes it to the phone. Help file updated.

Version 9.62 (12th May 2006): Fixed Z300 booting problem.

Version 9.61 (12th May 2006): Added support for K510 phones.

Version 9.60 (11th May 2006): Added support for reading unlock/relock codes from Z300. Added support for reading flash from Z300. Updated TAC list for Z530i. Updated built-in customizations.

Version 9.54 (8th May 2006): Fixed applet selection problem. Should fix the Sending applet problem.

Version 9.53 (8th May 2006): Updated TAC list for T230i, T290i, T630, T637, V800, W800i, W810i, Z520i and LG

U8138C. Fixed non-English language strings.


12/175



Version 9.52 (8th May 2006, gamma version): Full support for downloading files from W810 and Z530 phones. Help file slightly updated - more to come soon.

Version 9.51 (8th May 2006, beta version): Some operations made faster. Increased flasher verbosity. Fixed minor W900-related bug.

Version 9.50 (7th May 2006, alpha version): Added functionality for non-TP flashing red CID49 phones (including W810 and

Z530) with locked-down EROM area. Added functionality for non-TP unlocking/relocking red CID49 phones (including

W810 and Z530) with locked-down EROM area. Added non-TP FS functionality for red CID49 phones (including W810 and Z530)

with locked-down EROM area. Added support for non-TP IMEI change in red CID49 phones with locked-down

EROM area. Added support for converting red CID49 K750, W800 and Z520 phones with

unlocked EROM area to brown CID49. Implemented Unlock RSA function for red CID49 phones. The Repair certificate function is now disabled for red CID49 phones by default.

There is a way to enable it, though its use is deprecated. Added support for automatic firmware identification in red CID49 phones. Some patchers were analyzing FOTA area by a mistake (i.e. not ignoring it) and

therefore not functioning properly for some phone models. Several applets updated. Some built-in customizations were updated.

Version 9.23 (5th March 2006, 70th release): Installer updated. Updated TAC list for T290a, K300a, K750i, LG U8120 and Sharp V703SHF. Swedish language strings updated again.

Version 9.22 (1st March 2006, stable release): Installer updated. Debug Log functionality updated. Minor changes to boot code. Slightly increased flasher verbosity. Swedish language strings updated. Slovak language strings updated.

Version 9.22 (1st March 2006, stable release): Installer updated. Debug Log functionality updated. Minor changes to boot code. Slightly increased flasher verbosity. Swedish language strings updated. Slovak language strings updated.

Version 9.21 (26th February 2006, stable release):


13/175

5The Software


Installer updated. EROM and FOTA files moved out from the help file. From now on, the Format GDFS function will be unavailable. It was abused too

often. From now on, the Flash ARM function will be unavailable in certificate recovery

mode. Help file updated. User manual in PDF file format released.

Version 9.20 (25th February 2006): Minor changes to EROM area flashing code. Updated K750/W550/W800/W900/Z520 built-in customizations.

Version 9.19 (24th February 2006): Fixed a bug regarding Create file package option. Minor changes to booting code. Open/save dialog code updated.

Version 9.18 (24th February 2006, gamma version): Restored the ability to change IMEI on Sharp 3G phones. It was dependent on the

Unlock RSA function which was removed for these phones recently. Increased verbosity for operator's mistakes. Changes in TP-handling code.

Version 9.17 (23rd February 2006, beta version): Updated langpack description for W900. Fixed bug in GDFS access code for phones with baseband IDs 0x8000 and 0x8040. Reduced importance ofUnlock RSA function. It should not be needed for brown

and blue phones anymore.

Version 9.16 (22nd February 2006, alpha version): Minor changes in RSA phone booting and shutdown code. Updated TAC list for J210i. Redundancy decreased again. Other minor bugfixes. Note: It is recommended to fillallSE emptyboards regardless of their phone type

by brown CID49 certificate via CID49 recovery boot and certificate repair.

Version 9.15 (22nd February 2006): Added support for unlocking several new U8180 firmwares. Updated ARM 2004/2005 FAQ help-file section. Added FAQ help-file section for Sharp 3G phones. Updated LG U8110/U8120 unlock procedure descriptions. Thanks to Aamir_Zia and

DonaldDuck69. Updated LG U813x/U8180/U83x0 unlock procedure descriptions. Fixed bug in langpack description for K700.

Version 9.14 (19th February 2006): Added support for unlocking several new U8330 firmwares. Updated TAC list for Siemens C62. Fixed minor T610 bug manifesting itself on some Windows versions. Updated LG U8550 block list combo-box for flash reading.


14/175



Version 9.13 (19th February 2006, 60th release): Fixed AVR flashing bug from version 9.10. Updated TAC list for J300i and K300i. New firmware patcher engine implemented. (Applied to LG for now, Sharp and SE

later.) Added support for patching newer LG 3G firmwares. Increased patcher timeout in version 9.13a.

Version 9.12 (16th February 2006, beta version): Fixed minor RSA unlock bug.

Version 9.11 (16th February 2006, beta version): Flasher modules updated again.

Version 9.10 (16th February 2006, alpha version): It is possible to open more flash files at once.

Note: Just hold the Ctrl key while selecting files. It is possible to customize filesystem automatically right after flashing raw

FS. All flasher modules were updated. Minor changes in CID54 configuration analysis code. Modified default state ofExtended config options. Phone Firmware Backup (.pfb) files created in this version are not backwards

compatible (i.e. should not be used with previous versions). The Lock to network option should not be enabled for red CID41/42 phones. Fixed minor FS customization issue. Fixed minor GDFS/FS bug from version 9.00. W550 (new HW) testpoint picture updated. Updated TAC list for T290a, K300i and K700i. Communication code updated. Startup code modified. A few memory leaks removed.

Version 9.03 (9th February 2006, stable release): Added special flashing options for new ARM phones. Fixed RSA AVR booting bug from version 9.00. Fixed minor security zone creation bug. Updated V/K60x testpoint pictures.

Version 9.02 (8th February 2006, test version): Fixed GDFS and FS access bug from version 9.00. Fixed brown/blue CID37 booting bug from version 9.00.

Version 9.01 (8th February 2006, test version): Fixed Sharp 3G flashing bug from version 9.00.

Version 9.00 (7th February 2006, test version): Implemented LG U8550 red CID54 unlocking without using testpoint. Fixed a bug in flashing raw FS files via EPI USB. Fixed slow-flashing bug for ST Microelectronics chips. Fixed occassional Sharp 3G flashing bug. Changes in Sharp 3G functionality.


15/175

7The Software


Changes in LG 3G functionality. Enabled flash reading from new ARM phones for all users. Added full support for Blue CID49 phones with baseband chip ID 0x7100. Some operations on Blue and Brown phones were made faster. Added support for TMS cable autodetection. Fixed bug in Disable/Enable OTP IMEI check function for new ARM phones.

The previous code was excessively optimized Fixed minor J300 file selection issue. Updated TAC list for Z300i, Z300a and K750i. Redundancy decreased again.

Version 8.11 (30th January 2006, stable release): Released flash file for unlocking LG U8550. In this version it has to be flashed via

TP.To repair phones damaged by other tools tick Overwrite flash certificate option.

It should be no more necessary to unlock RSA before unlocking new Sharp phonesvia patching.

Installer updated.

Fixed a bug regarding P910a phones. Updated TAC list for T630i and Sharp V703SH. Several prototype-related updates. Built-in customizations updated.

Version 8.10 (22nd January 2006, beta version): Ongoing software architectural changes. Redundancy decreased. Added support for programming W810/Cleo/Mulan empty-boards. Downloading files from K750/W800/Z520 enabled for all users. Downloading files from W550/W600 enabled for all users. Downloading files from W900 enabled for all users. Updated TAC list for T230i and J200i. The 'USB interference occurred' message should appear less frequently when using

nonconforming cables. Added support for TMS cable. Thrown away the old, sporadically working, help engine. Updated many texts in Cruiser help file. Thanks to Muppet. Help file completely reorganized. Now it seems to be more topologically correct. Help file screenshots updated, descriptions updated too. Help file EROM-files updated. W900i testpoint picture included to the help file. The LangPack info button should be reliable now. The F1 key should reliably invoke the relevant help topic. It works in the Settings

window too. Added support for CID19 EROM recovery. Debug Log functionality modified so that it can be used with Windows Notepad. Security I renamed to Security AVR. Built-in customizations updated.

Version 8.00 (14th January 2006, alpha version, 50th release): Implemented red CID49 unlocking and flashing without using a testpoint.

The real standalone way, no EMMA smartcard usage, world's first!Supported phones are W550i/c, W600i, K600i/c, K608i and V600i. More models


16/175



coming shortly. Loaders updated.

Version 7.16 (13th January 2006, beta version): Installer updated. New cable driver version (2176) included. Built-in customizations updated. Experimental FOTA support added. Some GDFS-related changes. Changes in unlock functionality. Slightly changed functionality of the phone type filter. Added support for two new flash IDs. RSA configuration analysis code updated again. Loaders were updated. Minor architectural changes. Allowed to change language to Chinese/Malay for non-Chinese and non-Malay card

users.

Version 7.15 (1st January 2006, beta version): Several communication scripts updated.

Updated TAC list for W900i, W800c, W550i, Z520i, Z520c, Z520a, K600i, K608i,J210i, T230i and T290a.

LG U8380 testpoint included to the help file. Added an option to write replacement unit customization. Btw, happy new year!

Version 7.14 (31st December 2005, gamma version): Another K608i testpoint picture included to the help file. J210 World Generic decustomization has been released. J210 repair file has been released. Remember to recalculate CRCs (the phone

should be attached as J200). Repair EROM functionality updated to reflect W900 phones. Brown CID49 phones

are supported now. Brown CID49 FOTA (Flash-Over-The-Air) repair files for W550, W600, S600 and

W900 have been added to the help file. Some loaders were updated. Note: If your phone freezes right after powering on, try direct unlocking it.

Version 7.13 (29th December 2005, beta version): Cruiser is now available in English, Chinese, Czech, Greek, Indonesian, Malay,

Polish, Russian, Slovak and Swedish languages.Many thanks to 9Volto for preparing Greek translation.

Added Language page to the Settings window. This page is not shown forChinese, Malay and Indonesian cards.

Updated TAC list for T290i, K750i, Z520a, W600i, LG U8360, Siemens C62. GDFS configuration bug fixed for Z520a. No need to attach them as Z520i/c

anymore. Implemented several FS-related functions for brown CID49 W550/W600 phones. Updated W600i built-in customizations. Updated W900i built-in customizations. New brown CID49 to red CID49 conversion EROM file for W550/W600 phones has

been included to the help file. Some prototype-related updates.

Version 7.12 (22nd December 2005, alpha version):


17/175

9The Software


Fixed EROM repair issue for brown CID49 K608. Updated W900i langpack info. Some changes to applet upload strategies.

Version 7.11 (3rd December 2005, beta version): Added support for flashing CID54 phones (LG U8550) without using testpoint. RSA configuration analysis code slightly updated to reflect CID54-related changes. Increased robustness of RSA configuration analysis code to prevent potential

crashes on invalid flash content. Added alternate method of replacing RSA certificates. Fixed one bug in low-level communication code. Fixed small bug in Repair certificate function. Fixed one previously introduced bug in GDFS access for P910. Updated K750i built-in customizations. Updated W800i built-in customizations. Updated TAC list for K300i, K700i, T290i, LG U8330 and Sharp V903SH.

Version 7.10 (22nd November 2005, beta version):

From now on it is possible to download files from FS to special archive files in .cfp(Cruiser File Package) format.

From now on it is possible to upload .cfp package content to phone FS. An LG U8550 testpoint picture added to the help file. Updated W600i built-in customizations. Updated K608i built-in customizations. Updated K700i built-in customizations. Fixed '5E0W' customization bug from version 7.00. It is now possible to enable GSM/3G selection menu in SE 3G phones (K600,

K608,...). Fixed some bugs in Polish translation. The Customize FS button was moved to Flash ARM page. Fixed occassional K600/K608/W900 booting bug. Updated W550i/W550c/W600i langpack info. Updated TAC list for K700i.

Version 7.00 (17th November 2005, alpha version): Added support for fast direct unlock of Sharp V703SH/V903SH/SX313/

SX833 phones.Anyway, this is the fastest way of unlocking these phones available on the

market. The direct OTP/GDFS check enable/disable function should be much more generic -

now it handles Sharp V703SH/V903SH/SX313/SX833 firmwares too. Support for unlocking any-CID ARM phones with baseband chip IDs 0x7000,

0x7100, 0x8000 and 0x8040. Even W900 phones. Support for flashing any-CID ARM phones with baseband chip IDs 0x7000, 0x7100,

0x8000 and 0x8040 without changing primary certificate. New K600/K608 testpoint picture added to the help file. A W550 testpoint picture added to the help file. A W600 testpoint picture added to the help file. The fast LG 3G unlocking functionality via firmware patching was extended to

support some LG U8550 firmwares. Added support for locking OTP area in LG 3G and Sharp 3G empty-boards. Added an option to write new Bluetooth MAC address to RSA-protected ARM-based


18/175



SE phones. It is available among Modify GDFS options. RSA boot options have been modified. Certificate recovery function updated. Repair EROM functionality updated to reflect W550 and W600 phones. Both brown

CID49 and red CID49 phones are supported now. Fixed minor bug in RSA configuration analysis code. Updated Customize FS function. Updated TAC list for W600i, J300a, K750i and LG U8550. Some changes in Chinese translation.

Version 6.10 (5th November 2005, stable release): Added support for unlocking J210 phones. The Recalc DCRCs button was enabled for J210 by a mistake. Released Sharp V703SH to SX313 conversion flash file. Notice: Please prefer using reading codes to direct unlocking when possible.

Version 6.05 (28th October 2005, beta version, 40th release): W550 built-in customizations list updated.

Fixed an issue with unlocking some Siemens C62 phones. Fixed a bug in direct OTP/GDFS check disable/enable function regarding LG 3G

phones with old firmwares.

Version 6.04 (26th October 2005, beta version): Added support for GDFS identity changing for CID17 LG 3G phones. (Not available

in Legal Edition) Added support for GDFS identity changing for CID41 and CID42 LG 3G phones via

testpoint. (Not available in Legal Edition) Added support for GDFS identity changing for CID24 Sharp 3G phones. (Not

available in Legal Edition) Added fast direct OTP/GDFS check disable/enable function for CID17, CID41 and

CID42 LG 3G phones and for CID24 Sharp 3G phones. (Not available in LegalEdition)Note: For LG U8360 and LG U8380 it is necessary to unlock phone via patching.

Added support for explicit restoring of GDFS identity. Fixed a flashing bug that caused U8380 v10A firmwares to be unlocked incorrectly. Another change to RSA protection unlocking code. Slightly increased verbosity of GDFS access initialization error handling code.

Version 6.03 (26th October 2005, beta version): K600/K608 testpoint pictures updated. Minor change related to unlocking RSA protection of OTP CID29 phones with

baseband chip IDs 0x8000 and 0x8040. Updated direct OTP/GDFS check removal code to support older firmware versions. Slightly increased verbosity of applet error handling code. Added function for fast restoring firmware OTP/GDFS check. Added support for flashing .pfb (Partial Firmware Backup) files that are created

before every partial ARM firmware modification (direct LG unlocking or OTP/GDFScheck disabling/enabling).

Fixed a bug in Polish translation.

Version 6.02 (24th October 2005, beta version): Fixed an issue with Sharp V703SH phone type autodetection. Fixed a bug regarding flashing Sharp V903SH phones by certain flash files.


19/175

11The Software


Another minor updates. Installer updated.

Version 6.01 (24th October 2005, beta version): Fixed an issue with C62.

Version 6.00 (24th October 2005, beta version): Added boot support for Siemens C62 (CID27). Added support for flashing original SSW files into AVR-based phones (e.g. Siemens

C62). Added support for direct unlocking Siemens C62 v25, v26, v27 and v28. Many

thanks to www.PolPhone.com. Added support for relocking Siemens C62 v25, v26, v27 and v28. Many thanks to

www.PolPhone.com. Z520 built-in customizations list updated. Other changes in built-in customizations. Added GDFS identity changing for ARM phones with baseband chip IDs 0x7000,

0x7100, 0x8000 and 0x8040. (Not available in Legal Edition)

Added fast direct OTP/GDFS check removal function for new ARM SE phones. (Notavailable in Legal Edition)

Minor change in file download functionality. It should copy empty directories too. Updated TAC list for W550i, Z520i, W800i, K300i, K700i, Sharp V703SH and

V903SH. Removed possibility to change CID41 and CID42 phones to brown color due to a

safety reason. Added boot support for J210. Added support for flashing J210. T9 dictionaries removal has been separated from language files removal function. Added displaying of flash certificate name while booting new ARM phones. Internal FW database extended. The Write to OTP function now allows ordinary users to choose from more CIDs. Released Sharp V902SH to SX813 conversion flash file. Released Sharp V903SH to SX833 conversion flash file. Released Sharp V903SH testmode flash files. Added boot support for CID49 phones with baseband chip IDs 0x7000 and 0x7100

(K608, etc). Added Direct unlock for Brown CID49 phones. Added Lock to network for Brown CID49 phones. Added Reading codes from Brown CID49 phones. Added Save security for Brown CID49 phones. Added Restore security for Brown CID49 phones. Added support for booting CID49 phones (red and blue via TP for now). Added support for flashing Brown CID49 phones. Added support for flashing Red/Blue CID49 phones via TP. Added support for changing RSA certificate color of CID49 phones (by using TP for

now). A brown CID49 to red CID49 conversion file for K608 has been included to help. It

is not necessary to reflash phone firmware after using this file. Added fast LG 3G unlocking functionality via firmware patching. Automatically saves

a firmware backup file to the Data\ARM flash backups folder. Supported arethese models: U8130, U8138, U8180, U8330, U8360 and U8380.

Possibility to upgrade LG U8138 to U8180.


20/175



Possibility to upgrade LG U8130 to U8330. Czech language strings updated. Polish language strings updated. Help file updated - added Siemens C62 pinout, some LG 3G secret codes, etc.

Version 5.02 (1st September 2005, stable release): Important notice:Do not attempt to convert OTP CID37 phones to any

other CID!Otherwise you won't be able to boot the phone anymore. Cruiser does not allow you

to do that, but other software may. Cruiser is now available in English, Chinese, Czech, Indonesian, Malay, Polish,

Russian, Slovak and Swedish languages. Fixed one chicken-and-egg situation with Unlock RSA. Fixed one FS-access bug regarding K750/W800 phones that was introduced with

version 5.00. From now on the Format GDFS option is protected by a password 'KILL THE

PHONE'.

Version 5.01 (31st August 2005): Updated TAC list for W800i and J210i. Fixed an OTP IMEI (non-)insertion bug in the Security I (AVR) page. RSA unlocking functionality slightly modified.

Version 5.00 (30th August 2005, beta version): Added function for easier replacing of flash certificates. A list of compatible

certificates is displayed in the combo box located below the Replace certificatebutton.Note: Latest EROMs require you to restore the flash certificate back to its original

state to allow the phone to be turned on. Updated TAC list for K750i, W800c, V600i, K608i, K600c, J300i, J300c, T290i and

T290c. W800 built-in customizations list updated. Minor CID17-related changes. Write bandlock functionality slightly modified. Added theoretical support for old S988 prototypes. Added support for flashing LG U8360. Added support for flashing Sharp V903SH. The user interface has been modified. Flash BT function has been separated from Flash ARM. Added reading codes for CID37 phones. Recover Certificate function now supports CID37 phones.

Note: An attempt to start a CID37 phone containing working firmware in a recoverymode will fail. Implemented Unlock RSA function for CID37 phones. The Unlock RSA button should not be enabled in recovery mode. Flasher functionality modified for CID36 and CID37. Added Customize FS function for CID37. Added Turn camera sound on/offfunction for CID37. Added Modify GDFS functionality for CID37. Added Write to GDFS functionality for CID37. Added Save security for CID37. Added Restore security for CID37.


21/175

13The Software


Added Direct unlock for CID37. Added Lock to network for CID37. Added Read GDFS zones for CID37. Added Upload files to FS for CID37. Added Language operations for CID37. Added Write to security zone for CID37. Lock OTP area now supports CID37. Added Repair EROM function for CID37 phones.

Note: Reflash the main firmware when using this function for brown CID37. Added Format GDFS function. Added Remove RSA unlock traces function. It is located among Modify GDFS

options. Unused code removed. Help file slightly updated.

Version 4.30 (14th July 2005, stable release): K600/V600 built-in customizations list updated. K600/V600 flash file handling improved.

Help file updated - K600/V600 language pack info added. Added support for direct handling of blue CID36 phones (recovery mode not

required anymore). Minor changes in code accessing the FS of brown CID36 phones. Increased verbosity of GDFS error handling code. Conversion to brown CID36 for baseband chip IDs 0x8000 and 0x8040 has been

optimized. Conversion to brown CID36 for baseband chip IDs 0x7000 and 0x7100 has been

optimized. Introduced detection of data bus interferences for LG phones. About-box information slightly updated. Now 170 phone types are supported. Help file CID information updated. Added Special Files topic to the Additional Info section of the help file. Open-flash-file dialog boxes accept .erom1 and .erom2 file types where

appropriate. The Force RSA recovery combo-box now displays manufacturer names too. Minor changes in UI.

Version 4.24 (10th July 2005, beta version, 30th release): Allowed direct flashing of normal flashes in recovery mode for CID41 and CID42. Conversion to brown CID36 requires phone analysis performed. Otherwise it

displays an error message. Minor changes in K600/V600 functionality. Added support for S600i/S600c/W600a. Some applets updated. Booting code modified. Flashing code modified. Flash file open dialog code updated. File-system functionality for brown CID36 phones reenabled. Fixed some issues with prototype CID36 phones. Fixed a bug in reset life-timer functionality. Updated TAC list for LG U8380. The Turn off phone button should be enabled for unidentified new ARM phones. The Repair certificate button was disabled in some cases.


22/175



Camera focus sound is now affected by the Camera sound on/offfunction too. Added support for flashing brown CID19 phones (EMP). Added phone type filter.

Version 4.20 (29th June 2005): Added support for converting K750 phones to W800. Added support for Z520i/Z520c. Increased safety when converting red CID36 phones to brown CID36. Sharp 3G flashing speed via Fighter/Cruiser cable slightly improved. The main executable and help file are now stored outside the installer.

Version 4.15 (24th June 2005): Fixed one bug introduced in the previous version.

Version 4.14 (23rd June 2005): Installer updated. It is possible to use Z800 files for V800/V802SE phones directly. Reading phone certificate caused problems while flashing composite flash files via

EPI USB.

Version 4.13 (21st June 2005): Added support for unlocking LG U8330 and U8180 without testpoint via patched

flashes. Added support for cross-CID flashing of CID41 and CID42 phones without testpoint. Minor change in UI.

Version 4.12 (20th June 2005): Minor change in Upload files to FS function. K750i/D750i language pack info updated again. New brown CID36 to red CID36 conversion file for K750/D750/W800 has been

included to help. It is not necessary to reflash phone firmware after using this file. Flash file format modified.

Version 4.11 (18th June 2005): K750i/D750i built-in customizations list updated. K750i/D750i language pack info updated. Built-in EROM recovery function for K750/D750/W800 phones improved. It should be possible to flash more phones at once via EPI USB too. Chinese language strings updated. Help file extended by a description of CID36 phone operations. Brown CID36 to red CID36 conversion file for K750/D750/W800 has been included

to help. It is not necessary to reflash phone firmware after using this file.

Version 4.10 (13th June 2005, beta version): Added support for red CID36 to brown conversion (without testpoint, of

course). K750/D750/W800 red CID36 phones are now fully supported. Added Unlock RSA function for red CID36 and CID24 phones. Added Upload SFA function for red CID36 phones. Added Write raw FS function for red CID36 phones. Added Customize FS function for red CID36 phones. Added Language operations function for red CID36 phones.


23/175

15The Software


Added Upload files to FS function for red CID36 phones. Added Camera sound on/offfunction for red CID36 phones. Added Save security function for red CID36 phones. Added Restore security function for red CID36 phones. Added Read GDFS zones function for red CID36 phones. Added Modify GDFS function for red CID36 phones. Added Write to GDFS from file function for red CID36 phones. Added support for backup of battery calibration zone of new ARM phones. Added support for backup of display calibration zone of new ARM phones. Added support for backup of audio calibration zone of new ARM phones. Added support for backup of radio calibration zone of new ARM phones. Built-in customizations list updated and extended by J300i data. Installer updated. EPI USB driver included to allow faster flashing of LG 3G, Sharp

3G and V800/Z800/Z1010 phones. Added an option to flash faster via EPI USB. Added support for EROM recovery in red/brown CID36 K750/D750/W800.

Version 4.02 (8th June 2005):

A Sharp V801SH GDFS related issue fixed. Updated TAC list for LG U8330.

Version 4.01 (8th June 2005, beta version): Added experimental support for Sharp V801SH. Updated applet for Sharp 3G phones. Added support for flash ID 0x890F. Added support for flash ID 0x8910. Fixed a bug causing some buttons to be disabled for LG phones under certain

circumstances. Sharp connector picture updated.

Version 4.00 (7th June 2005, 20th release): Released pinout for Sharp V802SH and V902SH phones. Added Direct unlock support for Sharp 3G CID24 phones. Added Lock to net support for Sharp 3G CID24 phones. Added Save security and Restore security support for Sharp 3G CID24 phones. Force RSA recovery options now include CID24, CID41 and CID42. Added displaying of flash manufacturer when booting new ARM phones.

Version 3.94 (5th June 2005, beta version): Added reading codes from CID41 (LG U8180) and CID42 phones via testpoint. Cross-CID flashing extended to CID17/CID41/CID42. Cruiser automatically patches

flash files by replacing their RSA certificate.Usage: it is possible to flash U8180 by U8138 firmware.

Fixed an issue with flashing R600. Added support for EROM recovery in very rare brown CID16 V800/Z800. Updated TAC list for T610, F500i, K506c, K700i, Z800i, K750i, K750c and D750i. Help file updated.

Version 3.93 (3rd June 2005): V800/Z800 CID testpoint released. EMMA smartcard mutex is now released correctly. Flash file open dialog code updated.


24/175



Due to many requests, Direct unlock and Read codes work now much faster onnew ARM phones.

Cruiser closing issue fixed. Updated TAC list for Z200, Z600, Z608 and LG U8100.

Version 3.92 (1st June 2005, gamma version): K300 CID testpoint released. Built-in customizations list expanded. Fixed an issue with handling Z800 red CID36. Fixed a bug in EROM repair for red CID29 V800/Z800. Fixed a bug causing the Direct unlock to be disabled for J200/Z200/T100/A3618

phones. Repair EROM shall not be enabled in certain situations. LG unlocking functionality was disabled by a mistake. A baudrate-related modification regarding LG phones.

Version 3.91 (1st June 2005, beta version): Reworked unlocking/relocking of red CID36 phones via testpoint.

Added a button for conversion from red CID36 to brown CID36 (via testpoint).

Version 3.90 (31st May 2005, beta version): Added support for full security zone rebuild of R520/T39/T65 phones (i.e.

phones with baseband chip ID 0x5C05 and 0x5C06). Throughout last 4years nobody else was able to manage it. It appeared to be almostimpossible. But henceforth you can repair 4 locks closed or any othersoftware-related problem.

The Redirect SCRC check to zone II checkbox has been removed. The Security II page was removed as it has been made superfluous by extending

the Security I page functionality to R520/T39/T65 phones. Updated TAC list for LG U8180, K500i, K300i, V802SH and V902SH. Installer updated. It enables displaying hidden/nonpresent devices in Device

Manager under Windows 2000/XP. Once again, some baudrate-related modifications. Malay and Slovak language strings updated. Direct unlock button was enabled for all LG 3G phones by a mistake. Use read

codes instead. Debug Log feature released to public. Help file updated - added info on how to boot unbootable P900 smartphones. An error message is now shown when trying to boot an incorrectly upgraded P900

to a P910. Such phone has to be booted using a testpoint connected to GND. Boot code modified. A few changes in configuration analysis code. Minor modifications to the Settings window, mostly EMMA smartcard related. Be

sure to enter correct PIN for your EMMA smartcard. Added a possibility to boot AVR based phones starting from R520m by means of an

EMMA smartcard. Added support for changing phone languages in red CID36 phones (J300/K300/

Z800/K750/W800/K600/V600/new K700/new V800) by means of an EMMA IIsmartcard.

Added full support for brown CID36 phones (J300/K300/Z800/K750/W800/K600/V600/new K700/new V800).

Now it is possible to specify which recovery applet (for which CID) to use whenbooting the phone. This feature is intended to allow RSA unlocking via testpoint.


25/175

17The Software


Added function to repair "no network" problem on new T630 phones that have beendamaged by downgrading firmware.

A few memory leaks removed. Emptyboard programming of new ARM phones (including J300/K300/Z800/K750/

W800/K600/V600) released for all users. Added function Repair certificate to simplify phone revival on flash failure. Added function Repair EROM to simplify EROM area repair in red and brown

phones of CID29 and CID36. Added detection of CID42 LG 3G phones. Added support for flashing red LG U8xxx with CID42. Fixed an issue causing R380 PDA-part boot problem. Added experimental support for booting, flashing and cloning Hedvig prototypes. The button-enabling system has been modified to reflect smartcard presence and

various CID options. Corrected one progressbar update related issue. Some obsolete flashing options removed.

Version 3.82 (14th April 2005):

Booting baudrate limited to 230400Bd for older phones. Previously the limit was setto 115200Bd, but the version 3.80 removed the boot baudrate constraint, causingoccassional boot problems.

Removed File System tab bug from version 3.81.

Version 3.81 (14th April 2005): Fixed two issues related to built-in customizations.

Version 3.80 (13th April 2005): Cruiser is now available in English, Chinese, Indonesian, Malay, Polish, Russian,

Slovak and Swedish languages. Now it is possible to put red flashes into brown and blue phones of CID16, CID17

and CID29 without converting them to red. The phone certificate is not affected. Added full support for cross-CID flashing. It is possible to flash CID16, CID17 and

CID29 phones by any-CID flashes. The phone CID and color are not affected. Added support for flashing red and blue LG U81xx of CID17 via simple serial cable

too. Added support for flashing red LG U81xx of CID41. Baudrate subsystem completely refactored. Baudrate page from the Settings window was replaced by the Limit baudrate

combobox in the Primary page ofControl window. Baudrates used for flashing PDA part of P80x/P910 are limited to 460800Bd when

using USB cables that are not enhanced by adding two resistors. This is not relatedto DSS-20 nor DSS-25.

Installer updated - minor Windows 98 issue fixed. An error message might have

been displayed when no error occurred. Customize FS functionality slightly modified. CS applet communication made more verbose. Available free space is now displayed before writing user files to the phone. Help file updated.

Version 3.70 (8th April 2005, gamma version): This version was not meant to be released this early, the only reason was

adding support for LG(R) phones. In case of any problems, use version 3.40instead.


26/175



Known limitation: It is not possible to flash LG phones via standard serial cable.This will be fixed as soon as possible.

Installer updated - occassional Windows XP SmartCard service install issue fixed. Installer updated - removed HTML help update functionality. Built-in Z800 a Z500 customizations updated. Added support for booting red and blue LG U81xx of CID17. Added support for unlocking red and blue LG U81xx of CID17.

Note that Direct unlock button may be used with LG U8110 only. For all othertypes use Read codes or Lock to net, and flash the Drive C file to allow manualentering of codes. Added support for flashing original SSW files into LG U81xx phones. Added support for changing RSA certificate color of CID17 LG U81xx phones. It is possible to flash CID17 files of any color to any CID17 LG U81xx phone. It is possible to flash Z1010 CID16 flash files into Z1010 CID29 phones. LG U8180 phones with CID41 are now detected correctly. No operation is enabled

for them, though. The option to Download all files from the phone filesystem has been replaced by a

more general Download files from FS. Now it is possible to specify the source

folder and to optionally disable folder recursion. The analysis of phone's RSA configuration has been made even more safe and

verbose. RSA weakness type is monitored while flashing the phone. Many changes in communication scripts. Previously, the operation Write to GDFS from file always tried to backup the

security zone first. This behaviour may be disabled now. Enhanced window font readability - the default window font is set to Tahoma, 8

pixels in size. It is also possible to change the font in registry. Unicode visual components updated. Smartcard subsystem refactored. Cruiser is now able to explicitly notify the user of

smartcard middleware initialization failure. Configuration subsystem refactored. Thread management subsystem refactored. Introduced an option to add comments to the Cruiser log-file (located in the Data

folder). The button Format security zone has been transformed into a checkbox. Fixed a

bug that was causing this option to be disabled in a release version. Updated TAC list for T630. The following options are disabled when no valid filesystem configuration is found in

the phone: Upload signed archive, Customize FS, Language operations,Upload files to FS, Download files from FS, Camera sound on/offandShutdown FS.Filesystem configuration resides in main firmware flash.

Version 3.40 (24th March 2005, 10th release): Added an option to Download all files from the phone filesystem. The folder

structure is preserved. This option is temporarily located under Languageoperations.

Updated TAC list for T290i.

Version 3.32 (22nd March 2005): The checkbox Force to folder could not be turned off in the previous version. Minor Customize FS dialog issue fixed. Relock RSA option is enabled for AVR-based phones by default.


27/175

19The Software


Implemented file download failure check (incoming data loss, etc). An attempt to reduce input buffer overrun errors has been made. These errors may

occur when phone sends too many data in one block, usually when downloadingfiles from the phone.

Version 3.30 (21st March 2005): Added built-in CDA tool. A sporadic Unlock RSA problem fixed. It was caused by an unexplainable

behaviour of interface chip under certain circumstances. For AVR-based phones, the RSA protection is removed immediately after boot. Note that we recently released special flash files (compatible with Cruiser 3.20 or

later version) that allow advanced users to change the phone RSA certificate color.This is useful for example when changing languages in developer phones.

Added button Language operations capable of downloading all languages and T9dictionaries from the phone, uploading languages and T9 dictionaries to the phone,and removing languages. Keep in mind that language (.lng) files vary betweendifferent phones, firmware revisions and language zones.

Added an option to change langpack string in Software Info.

Added a checkbox that enables uploading files to a specific folder in the phone. Added some RSA applets. Flash ID is now displayed when booting new phones. Updated TAC list for T237, T630, K508i, K700i and Z500a. Updated camera shutter sound handling code. Buttons Write raw FS and Upload Signed Archive moved to the Write flash

page. Increased boot process and flash failure verbosity a little. It is again possible to shutdown FS (safely turn off the phone) immediately after

uploading a raw FS to the phone. LG cable pinout description updated and moved to the Additional Information

section. Messages window word-wrapping turned off. Enhanced communication error handling.

Version 3.20 (6th March 2005, beta version): Released conversion flashes from V800 to Z800. Added bandlock change option for new SE phones. You don't have to use .mdcfiles

for changing bandlock anymore. Added support for uploading SFA (Signed File Archive) files. Added Lock to Net functionality for new SE and LG U81xx phones. Added Remove languages option. It is possible to turn camera shutter sound back to on. This does not apply to

phones already affected by previous versions of Cruiser. The Control window has been modified noticeably. Updated flash applet for J200i/J200c. Updated TAC list for T290i. Help file updated. Reading codes and direct unlock refactored (new SE phones). Flashing module refactored (new SE phones). Boot code modified again. Fixed a little bug in .lng and .t9 file upload routine. Fixed minor bug regarding interchanged CCK and SPCK codes for T100/T106

phones.


28/175



Increased the time interval to wait before hiding help hints. Cruiser has been made available in Russian language. Added hotkey for attaching phone: Ctrl-A Added hotkey for turning phone off: Ctrl-O Added support for flash ID 0x880D. Added support for flash ID 0x880F. Added support for flash ID 0x890C. A Windows XP style related UI issue fixed. The LangPack Info button should work again. Removed log-file calculation functionality.

Version 3.00 (21st February 2005): Cruiser has been made available in Chinese, Indonesian, Malay, Slovak and

Swedish languages. Cruiser installer rewritten from scratch. Help file released for Cruiser. Cable drivers modified. New optimal settings recommended - see the help file. As a faster alternative to reading codes, the direct unlock option has been added for

new SE phones. Added reading codes from LG U8110, U8120, U8130 and U8138. Phones marked by

(R) are not supported yet. Added direct unlock for LG U8110, U8120, U8130 and U8138. Phones marked by

(R) are not supported yet. Added support for flashing LG U8110, U8120, U8130 and U8138. Phones marked by

(R) are not supported yet. Released support for V800 red/brown CID29 EROM recovery. It is possible to flash main firmware, raw filesystem and to customize filesystem

without reattaching the phone in between. Occasionally the phone does not send an acknowledge on shutdown. This should be

handled now. Fixed a bug in autodetecting T300 phone type. Fixed a bug in option to reset life-time call timer in T226/T23x/T290 phones. Fixed a bug in writing to GDFS and restoring security zone in new SE phones. RSA phone configuration analysis has been made a little bit more safe under

Windows 98/ME. We still deprecate using Cruiser under Windows 98/ME. Functionality of the option Using enhanced cables has been extended to RSA

ARM-based phones. Modified smartcard communication code. RSA unlocking code updated. The button-enabling system has been completely redesigned to allow future UI

extensibility. Little modifications to the Settings window. Few resource leaks removed. Fixed some bugs in unicode handling. Updated TAC list for J200i, J200c, K508i, T230. Added support for flash ID 0x200D. Added support for flash ID 0x017E. And many other improvements noone else will consciously appreciate...

Version 2.20 (23rd January 2005, beta version): Fixed an issue with Z500 RSA unlocking. Updated TAC list for red Z500a and for T637.


29/175

21The Software


It is no more necessary to specify that S700/S710 is about to be attached. S700/S710 can be flashed at the rate of 921600Bd with DSS20 and DSS25

deskstands. Introduced an option to upload audio files, video files, pictures and themes. Files

are placed to the correct phone folder automatically. Fixed a bug in CDA article/version modification code. Added an option to change default article and default version strings. Fixed a bug causing occasional access violations on Control Window close. Cruiser did not allow to unlock RSA in phones with damaged security zone.

Version 2.10 (17th January 2005): Boot code modified again. Fixed small bug in GDFS and file system access code.

Version 2.00 (12th January 2005, gamma version): Fixed few bugs in boot code. Added an option to disable phone configuration analysis. Simplified phone type selection options.

Version 2.00 (12th January 2005, beta version): Boot process optimized. Fixed a minor bug when booting S7xx phones with phone type autodetection turned

off. RSA unlocking routine optimized. It works also for Z1010 and V800 of any color. Added languagepack change for red CID29 Z1010 and V800 phones. Added support for older GDFS format. Fixed a minor bug in GDFS access code. Added automatic GDFS configuration mismatch detection. Added support for K300, T687 and Z500 phones. Added reading unlocking/relocking network codes from K300, T687, Z1010, V800,

S710 and Z500. Added support for conversion from T230 to T290. Codes read from RSA-based phones are now stored into a log file (placed into the

Data folder). Added the possibility to specify communication rate for Z500. About-box information updated. Updated TAC list for K700i.

Version 1.00 (14th December 2004): Added reading unlocking/relocking network codes from K70x/K50x/F500/S7xx

phones. Added reading phonelock code from K70x/K50x/F500/S7xx phones. Added languagepack change for K70x/K50x/F500/S7xx phones. Added Save security zone function for K70x/K50x/F500/S7xx phones. Added Channel info enable/disable function for K70x/K50x/F500/S7xx phones.

(It may be unsupported by with some firmware versions). Added Battery info enable/disable function for K70x/K50x/F500/S7xx phones. Added SIM toolkit enable/disable function for K70x/K50x/F500/S7xx phones. Added Reset air time option for K70x/K50x/F500/S7xx phones. Added Enable/disable SMS capability functions for K70x/K50x/F500/S7xx

phones. Added Change phone type descriptor function for K70x/K50x/F500/S7xx phones


30/175



- not fully tested, though. Added Reset total call time option for K70x/K50x/F500/S7xx phones. Added Reset life time option for K70x/K50x/F500/S7xx phones. The counter may

be accessed from the service menu. Added Reset joystick counter option for K70x/K50x/F500/S7xx phones. Buttons Read GDFS zones and Write to GDFS from file now work also for K70x/

K50x/F500/S7xx phones. Added Camera shutter sound remove function. Added Unlock RSA function for K70x/K50x/F500/S7xx phones.

Cruiser was the first standalone software to support unlocking and changinglanguages in new ARM phones.

1.3 History of Changes - Fighter/Interceptor

There are going to be no more Fighter/Interceptor software updates.

Version 5.01 (29th June 2005): Interceptor updated too. It is possible to flash more phones at once via EPI USB too. Sharp 3G flashing speed via Fighter/Cruiser cable slightly improved. Chinese language strings updated. The main executable and help file are now stored outside the installer.

Version 5.00 (16th June 2005, beta version): Added support for full security zone rebuild of R520/T39/T65 phones (i.e.

phones with baseband chip ID 0x5C05 and 0x5C06). The Redirect SCRC check to zone II checkbox has been removed. The Security II page was removed as it has been made superfluous by

extending the Security I page functionality to R520/T39/T65 phones.

Added function Repair certificate to simplify phone revival on flash failure. Added support for EROM recovery in very rare brown CID16 V800/Z800. Added function Repair EROM to simplify EROM area repair in red and brown

phones of CID29 and CID36. For AVR-based phones, the RSA protection is removed immediately after boot.

There is no need to reflash the phone afterwards. Added support for flashing LG 3G phones and Sharp 3G phones. Added an option to flash faster via EPI USB. Added support for conversion from T230 to T290. Added displaying of flash manufacturer when booting new ARM phones. Updated TAC list for many phones. Fighter installer rewritten from scratch.

Cable drivers modified. New optimal settings recommended - see the help file. EPI USB driver included to allow faster flashing of LG 3G, Sharp 3G and V800/

Z800/Z1010 phones. An error message is now shown when trying to boot an incorrectly upgraded

P900 to a P910. Such phone has to be booted using a testpoint connected toGND.

It is no more necessary to specify that S700/S710 is about to be attached. S700/S710 can be flashed at the rate of 921600Bd with DSS20 and DSS25

deskstands. Functionality of the option Using enhanced cables has been extended to RSA


31/175

23The Software


ARM-based phones. Baudrates used for flashing PDA part of P80x/P910 are limited to 460800Bd

when using USB cables that are not enhanced by adding two resistors. This isnot related to DSS-20 nor DSS-25.

Fixed minor bug regarding interchanged CCK and SPCK codes for T100/T106phones.

Boot process optimized. Few resource leaks removed. Fixed a bug in option to reset life-time call timer in T226/T23x/T290 phones. Fixed a bug in autodetecting T300 phone type. Debug Log feature released to public. Now it is possible to specify which recovery applet (for which CID) to use when

booting the phone. Some obsolete flashing options removed. Baudrate page from the Settings window was replaced by the Limit

baudrate combobox in the Primary page ofControl window. Enhanced window font readability - the default window font is set to Tahoma, 8

pixels in size. It is also possible to change the font in registry.

Unicode visual components updated. Messages window word-wrapping turned off. The Control window has been modified noticeably. Increased the time interval to wait before hiding help hints. Added hotkey for attaching phone: Ctrl-A Added hotkey for turning phone off: Ctrl-O A Windows XP style related UI issue fixed. Fighter has been made available in Chinese, Indonesian, Malay, Polish, Russian,

Slovak and Swedish languages. The button-enabling system has been completely redesigned to allow future UI

extensibility. Little modifications to the Settings window. Simplified phone type selection options. Fixed some bugs in unicode handling. About-box removed. Minor modifications to the Settings window, mostly EMMA smartcard related.

Be sure to enter correct PIN for your EMMA smartcard. Configuration subsystem refactored. Thread management subsystem refactored. Baudrate subsystem completely refactored. Smartcard subsystem refactored. Fighter/Interceptor is now able to explicitly

notify the user of smartcard middleware initialization failure. Modified smartcard communication code. Added a possibility to boot AVR based phones starting from R520m by means of

an EMMA smartcard.

Version 4.33 (14th December 2004): Small modification in AVR security zone creation code. Software is now available in English, Swedish, Chinese Traditional, Malaysian

and Indonesian languages. Updated TAC-list for V800, F500i, T290a, T610, T618, T630 and T105. Fixed a bug when flashing A3618/T10x phones using software versions 4.30 and

4.31. Internal database extended to 678 firmwares.


32/175



GDFS code massively refactored.

Version 4.31 (5th November 2004): Malaysian language issue fixed. Updated TAC-list for S710a.

Version 4.30 (3rd November 2004): Enabled flashing main firmware part of K70x/K50x/F500/S7xx/Z1010/V80x. Enabled RSA certificate recovery function for K70x/K50x/F500/S7xx/Z1010/

V80x. Corrected default bandlock setting for T290a. Added Troubleshooting section to the help file. Fixed a T62u write-to-GDFS error. Chipset recognition code enhanced. Decreased number of threads running concurrently. Reworked baudrate handling code.

Version 4.20 (26th October 2004):

Added support for J200i and J200c. Added option to override phone type to T290. Released support for communication via original DSS-20 and DSS-25 USB

cradles. Released T62u decustomization file. T62u Direct unlock removes also WAP-lock and SOC-lock. From now it is possible to perform multiple AVR/ARM/GDFS operations in almost

any order. The only requirement is to perform minor modification to the cable(connect pins 1 and 2 of 74HC4053 to 3.3V via two 10k Ohm resistors) and toenable newly added option Using enhanced cables in the Settings window.

Direct unlock, Relock to network, Recalc DCRCs and Unterminate buttonsare not enabled for T610 R1L013 and later firmwares.

Slightly enhanced the ability to turn off phones. Possible to use another smartcard reader. Phone shutdown functionality enhanced. Corrected default bandlock setting for P910a. Updated languagepack info. Modified AVR RSA flashing script. Fixed hint display bug when writing CDA info to the GDFS. Fixed ocassional bug on Control Window closing. Added option to generate random codes.

Version 4.10 (16th September 2004): Security zone concept has been extended (to be able to restore SOC/WAP locks

and so on). Added displaying of SOC unlocking code for T62u (even in that case it is

different from NCK unlocking code). Added displaying of WAP unlocking code for T62u, T306, T316, T226, T230,

T237 and T238. It is now possible to unlock profiles, lock profiles, reset WAP-lock from the service menu and change predefined data accounts much fasterthan by decustomizing.

Added support for booting Z20x with new hardware (manufactured in September2004 or later).

Updated P900/P910 PDA flashing applet. Released support for flashing AVR and PDA parts of P910.


33/175

25The Software


Conversion from P900 to P910 made available. Updated languagepack info. Internal database extended to 675 firmwares. Added flashing of T637 ARM part which was omitted by a mistake. Fixed an error in new error-handling routine that was disabling displaying non-

unicode messages and ocassionaly causing to display unicode messages three

times in a row. Invalid content of network lock editbox just causes a beep and does not show an

error message anymore. The software should not freeze on shutdown. Read GDFS zones checkboxes were sometimes not updated correctly. Fixed minor bug when flashing R320 ARM part (appeared in one of the previous

versions). Increased communication security when reading ASIC ID. Fixed some memory-deallocation issues. Updated TAC-list for T610, T630, P910, K700, K500 and F500.

Version 4.00 (8th September 2004):

Added RSA-removal support for AVR-based phones. Added support for flashing AVR-part of RSA-protected T61x/T62x/T63x/Z60x/

P910 phones (also without having to remove RSA lock). Added support for flashing ARM-part of RSA-protected T61x/T62x/T63x/Z60x

phones (also without having to remove RSA lock). Implemented function for automatic displaying firmware languagepack and

revision in 5B0702FF and 5B080201-based phones. Internal database containsdata about the most common T61x, T62x, T63x, Z60x, T226, T23x, P80x, P90x,T20x, T30x, T31x, T68 and T62u firmwares. The present number of detectedfirmwares is 587.

Since the Unlock RSA function erases the whole RSA flash region, the firmwarehas to be restored afterwards. Therefore, to save your time, a special option toreflash RSA area only has been introduced.

The phone type autodetection was enhanced. In practice it means even less"Phone type: Unknown" messages.

Previous versions were removing the RSA lock from FLP flash files automatically,now there is an option to disable this default behaviour - Relock RSA.

Due to some enhancements, few FLP flash files created for this version will notbe backwards-compatible with the previous software versions. It is possible toflash both standard and RSA-protected phones using the same files.

Released a solution to upgrade P900 to P910. Support for flashing Z20x phones with new flash chip type released to all Fighter

users for free. Modified error-handling, separate error-message window created. Enhanced MDC-file messaging. Corrected bug with disabled Clear and Autodetect buttons in Settings window. Added support for translating the software into any language. Few languages are

in beta-testing phase. Fighter serial cable support has been removed - it was useless there. For old

phones with 5V bus use NTZ112311 cable type. Fixed a bug regarding phone charging via UC-10 cable. Updated help engine. Updated TAC-list for T610 and T630. Little gift for people who read user manuals: You can enable System Monitor

on T66/T600 phones by holding left shift key while pressing the Clear


34/175



phonelock button.

Version 3.13 (30th July 2004): Added option to disable cable type verification. Verbosity of cable detection code increased even more.

Version 3.12 (28th July 2004): Fixed an occasional issue causing software exception when autodetecting cable

types with Bluetooth virtual serial ports with numbers less than 17. The Clear button in Settings window does not clear connections that are

opened. This software version does not (and will not) support older cable driver versions

anymore. Old cables will be supported, but only with the latest driver which isincluded in the Preinstaller package.

Increased verbosity of cable detection code. From now, Interceptor displays the following message: "Interceptor software

does not allow to change a unique device identifier, nor allows to interfere withits operation".

Version 3.11 (26th July 2004): The help file now contains preliminary install guide, since the new installer is

now different from the formerly used one. Added cable type autodetection (see the Settings window). Fixed minor bug regarding Charger ON button. ARM-based phones research at full throttle...

Version 3.10 (6th July 2004): Added support for flashing Z20x phones with new flash chip type. Updated TAC-list for K700.

Version 3.02 (4th July 2004): RSA protection feature deactivation method via testpoints was made available

for everyone by Fighter Team on 4th July 2004. We are t

Documents

Cruiser v9.72 Guide