User Manual for SonnyEricsson DIV USB software (flasher+unlocker)

Revision 1, last update 15-January-2004

Contents

Installing 

Working steps 

Where is stored Network codes? 

How to upgrade T68m to T68i 

How to upgrade T300 to T310 

Write GDFS operations detail 

Some flashing tips and what is AVR CPU, ARM CPU

How to change IMEI 

How to repair 4 locks closed phones

How to repair NO ACCESS phones 

How to repair totally damaged (erased) phones

How to repair software damaged T100/T105

How to make Empty Boards phones 

Installing

Plug DONGLE into USB port

Install the drivers from archive DRIVERS.ZIP

Start the software DIVUSB.EXE

Do NOT run the software directly from CD, copy first to your local HDD !!

Now is ready to work with phones.

If you have problems running the software (software not start) you must disable any antivirus monitoring software installed on your computer.

Working steps

Plug phone WITHOUT battery to cable

Put the battery to phone

Do NOT power ON the phone!!

Make desired operation

Remove battery

Remove cable from phone's bottom connector

!!! Phone's battery must be FULL charged for all operations !!!

!!! Do NOT press any buttons on phone when any operation is in progress !!!

These steps must be followed in EXACTLY this order, especially on R600 and T100. On A3618, R600 and T100 don't forget to remove battery and put back again before try to power up the phone, because after reading Network Codes the phone remains in TEST MODE. Also, on this phones, after entering Network Codes (to unlock SP) power down the phone from ON/OFF button. The lock/unlock status is saved in flash memory only at power down operation!

A3618 have a special procedure: it must be connected WITHOUT battery, and AFTER press the button for desired operation (e.g. Read All Codes) just insert the battery.

On T300, to avoid any errors is better to put the batterys cover when make any operation, because on this model the battery not fit strongly enough inside phone without cover, and the contact (electric power) from battery to phone can be lost when operation is in progress.

If any error occurs when working, do these steps in this order:

Remove battery

Disconnect cable

Connect cable

Put battery back

Try again desired operation

!!! VERRY IMPORTANT !!!

NEVER try to write a Flash file from other model/type!! Especially if you write Main Flash (AVR) files from one 'big flash' model (T68, T300) to a 'small flash' model (R520, T39, T65, T200) you will damage FOREVER your phone, because Security Area in GDFS will be overwrite!!

!!! YOU CAN DAMAGE FOREVER YOUR PHONE !!!

Where is stored Network codes?

The Network Lock/Unlock codes (NCK, NSCK, CCK, and SPCK) are also saved in file 'CODESLOG.TXT'. This is very useful for A3618 and R600. Also, for A3618 and R600, the software is shown on the screen ONLY Network UNLOCK codes. The other codes (for Lock to network) can be find in log file named 'CODESLOG.TXT' located in current working directory.

How to upgrade T68m to T68i

Write (upload) GDFS file 'T68m_to_T68i_Version2.GDF'

Write (upload) Main CPU (AVR) with desired flash (language) from T68i or T68ic

Write (upload) Modem flash (ARM) with file from T68i or T68ic. All the time use the file with SAME revision code as used for Main CPU! For example, if you used for Main CPU the file T68i_EMEA1_R5C001.sbn you have to use for Modem flash the file T68i_Modem_R5C001.arm (in this case the revision code for both files is R5C001). Also, if you used for Main CPU the file T68ic_HongKong_R2A014.sbn you have to use for Modem CPU the file T68ic_Modem_R2A014.arm (now the revision code was R2A014 for both files).

Disconnect phone from cable

Press NO (Power) button and keep pressed for 4-5 seconds. Don't panic if phone will not power on immediately!

Wait 10-20 seconds until phone will power on (the new flash will initialize phone, and this take some time)

WARNING (specialy for Chinese/Asian market):

On CD received (first release version 1) it was an error.

The 2 files from directory !FlashMain_Flash.AVRT68ic:

T68ic_China_R5C001.sbn and T68ic_HongKong_R5C001.sbn

MUST be renamed to:

T68ic_China_R2A014.sbn and T68ic_HongKong_R2A014.sbn

The 2 Modem files for revision code R2A014 is missing.

Ask your box vendor for this 2 files:

T68i_Modem_R2A014.arm and T68ic_Modem_R2A014.arm

and place this files in their specific folders and/or subfolders.

How to upgrade T300 to T310

Write (upload) Main CPU (AVR) with desired flash (language) from T310

Write (upload) GDFS file 'T300_to_T310.GDF'

Disconnect phone from cable

WARNING

When use any FLASH file, this must be copyed from CD to PC or NoteBook HardDisk and the Read Only flag must be cleared (all files are stored on CD with Read Only flag set).

Write GDFS operations detail

All new Sony-Ericsson phones have a special part area in Flash chip named GDFS. This area is used because the new phones no more have an separate EEPROM chip. Here is stored all parameters regarding the phone (SP lock codes, SP lock status, User code, RF calibration, games, display settings, and many more). From software version 6.2 there is a new operation available for all original brand Sony-Ericsson made phones, named Write GDFS. This operation was available in old software versions only for upgrade T68m to T68i. There is also provided more GDFS files for different repair or upgrade operations.

This files are in a special TXT format, and do NOT try to edit this (you can damage your phone forever)! Also, use a specified file ONLY for the phone model for what this is provided!

Here is a description of each GDFS file available now:

More GDFS files for different repair/upgrade operations will be added soon and the description for this will be in next revision of this User Manual.

Some flashing tips and what is AVR CPU, ARM CPU

Inside new original brand SonyEricsson phones there is two processors (CPUs). One is Main CPU and this is AVR chip, and the second is Modem CPU and this is ARM chip.

The Main CPU (AVR chip) is holding almost all phone functions, including language packs available. The Modem CPU (ARM chip) take care of Infrared communications (IRDA), Bluetooth and Data/Fax functions.

On non original SonyEricsson phones (this are A3618, R600 and T100) there is only one Main CPU (an ARM chip). Also on latest models original brand T200 and T300 the Modem CPU (ARM chip) is no more present.

When flash a phone, usually is enough to flash the Main CPU (AVR chip). The Modem CPU (ARM chip) is needed to be re-flashed only when upgrade T68m to T68i or when make major version upgrade (e.g. from R2A to R5D or so on). If there is any error in Connect or WAP services menus, or if phone hang-up when try to enter any of this menus, a flash update for Modem CPU (ARM chip) is needed. Also the Modem CPU need to be upgraded if there is any errors in Bluetooth functionality. In all other cases, the Modem CPU no need to be upgraded.

How to change IMEI

For T68, T200, T300, T310 and P800 phones, is just needed to mark the checkbox for IMEI change and enter the desired 15 digits IMEI.

On T610 phones, after IMEI change, you have to flash the phone with special flash. You can find this in New Support Area under the directory 'EmptyBoard_ImeiChange' E.g. For T610 EMEA1 you have to use the file 'T610_FullFlash_v5_R1L013_EMEA1.sbn'. It will be better to flash Modem (ARM) file too (with same version - e.g. R1L013). After phone was flashed with this file, you can change IMEI on this phone how many times you want and to any value you want.

On the first CDs released to customers there is old version of Special Flash files. PLEASE do not use this files and download and use latest version from New Support Area (under the directory EmptyBoard_ImeiChange)!

How to repair 4 locks closed phones

This function now works in any damage status of phones memory (GDFS area) for the following models: T68m, T68i, T200, T300, T310, T610, T616, T618 and P800.

On many phones damaged by others free and/or cracked softwares, usualy is enough to apply function Reset GDFS. If after that the phone is still locked (4 locks closed and retry counters on 0), full flash the phone (AVR CPU and ARM CPU) and make operations for Change IMEI on this phone.

For full flash the phone (AVR CPU and ARM CPU) follow the next rules:

For T68, T200, T300, T310, P800 use any REGULAR (NOT patched) flash files.

For T610 use the patched (modified) files for your language desired area. You can find this in New Support Area under the directory 'EmptyBoard_ImeiChange' E.g. For T610 phone with EMEA1 languages pack, you have to use the file 'T610_FullFlash_v5_EMEA1_R1L013.sbn'. It will be better to flash Modem (ARM) file too (with same version - e.g. R1L013).

For more details about change IMEI, please read previous section (How to change IMEI). If your phone was not an Empty Board phone (for Empty Board phones OTP IMEI is FFFFFFFFFFFFFFF) and you just want to keep the original phones IMEI (the one stored in OTP) you just have to mark the checkbox Rebuild SP Area using OTP IMEI.

How to repair NO ACCESS phones

This function now works in any damage status of the phones memory (GDFS area) for the following models: T68m, T68i, T200, T300, T310, T610, T616, T618 and P800.

If your phone was repaired with the previous version of DIV software (v8.0), on some phones with Static Checksum (SCRC) destroied, you have NO ACCESS problem (phone not log into GSM network). To correct this, just follow the instructions for repair 4 locks closed phones. Dont forget to full flash the phone too!!

For full flash the phone (AVR CPU and ARM CPU) follow the next rules:

For T68, T200, T300, T310, P800 use any REGULAR (NOT patched) flash files.

For T610 use the patched (modified) files for your language desired area. You can find this in New Support Area under the directory 'EmptyBoard_ImeiChange' E.g. For T610 phone with EMEA1 languages pack, you have to use the file 'T610_FullFlash_v5_ EMEA1_R1L013.sbn'. It will be better to flash Modem (ARM) file too (with same version - e.g. R1L013).

How to repair totally damaged (erased) phones

Totally damaged phones means phones with no power up at all due to software and/or memory (GDFS) problems. This repair function works now only for the following models: T68m, T68i, T200, T300, T310, T610, T616, T618 and P800.

First, you have to full flash the phones firmware following this rules:

For T68, T200, T300, T310, P800 use any REGULAR (NOT patched) flash files.

For T610 use the patched (modified) files for your language desired area. You can find this in New Support Area under the directory 'EmptyBoard_ImeiChange' E.g. For T610 phone with EMEA1 languages pack, you have to use the file 'T610_FullFlash_v5_ EMEA1_R1L013.sbn'. It will be better to flash Modem (ARM) file too (with same version - e.g. R1L013).

After that, you have to fill the GDFS area with an correct data. To do this, you have to write the AVR CPU part of GDFS area with a flash file in SBN format for this part (GDFS).

for T68m use T68m_FullGdfs_in_AVR_flash_format.sbn   (up to R2B version)

for T68i use T68i_FullGdfs_in_AVR_flash_format.sbn (R5C and upper)

for T200 use T200_FullGdfs_in_AVR_flash_format.sbn

for T300 use T300_FullGdfs_in_AVR_flash_format.sbn

for T310 use T310_FullGdfs_in_AVR_flash_format.sbn

for P800 use P800_FullGdfs_in_AVR_flash_format.sbn

All this needed files you can find in New Support Area.

How to repair software damaged T100/T105

There is some software damaged T100/T105 phones after usage at end customer. Many of this phones can be flashed but not power on at all. Usualy this damage is because of wrong/corrupt data in Flash-EEPROM area. Most exactly the SCRC, DCRC1 and/or DCRC2 is damaged. To repair this phones, FIRST flash the phone with desired language pack and AFTER this use function Remake CRCs (SCRC, DCRC1, DCRC2). Dont forget to remove/insert battery between this 2 operation (after flash operation).

How to make Empty Boards phones

Empty Board phones is phones who comes directly from factory assembly line and instead of usual firmware (flash contents) have only a Test firmware written inside. This phones can be easy identified, because if try to power on, there will be only some letters and numbers on display (E.g. CXC123., R2A, ). For this phones, you have to do 2 main operations: one is to flash both AVR and ARM CPUs, and other is to fill GDFS part with needed fields (e.g. IMEI, SP lock area, correct checksums, ).

For first operation (flash AVR and ARM) flash phone with desired file

For full flash the phone (AVR CPU and ARM CPU) follow the next rules:

For T68, T200, T300, T310, P800 use any REGULAR (NOT patched) flash files.

For T39 and T610 use the patched (modified) files for your language desired area. You can find this in New Support Area under the directory 'EmptyBoard_ImeiChange' E.g. For T610 phone with EMEA1 languages pack, you have to use the file 'T610_FullFlash_v5_ EMEA1_R1L013.sbn'. It will be better to flash Modem (ARM) file too (with same version - e.g. R1L013).

After the flash process is done, you have to fill GDFS, upload IMEI and SP lock area, clear SP locks. For this, you have to mark following Check Boxes: Clear SP Locks, Clear User Code, Default SP Area (empty phones), Change IMEI: and Write GDFS file with:.

In Change IMEI: right field, just write some 15 digits IMEI number.

In Write GDFS file with: you have to use one of the following files:

for T610 use T610_FullGdfs.gdf

for T68 use T68i_FullGdfs.gdf

for R520, T39, T65 use R520_T39_T65_Gdfs_for_EmptyBoard.gdf

for T200 use T200_T300_Gdfs_for_EmptyBoard.gdf

For the latest software version, flash package files, documentation and support forum please check:

https://www.sonyericssonflasher.com