All About CID,CDA,GDFS,IMEI EROM FOTA CUSTOMIZATION BRANDED PHONES.......

[naeem_skg786]

There is some useful info that you may want to know my friends

What is ...

CID : This "number" defines the version of SE's protection present in the phone.New CIDs are deployed from time to time, for the sole reason of preventing them from beeing unlocked/flashed/tampered with by non-SE service tools. Current CIDs in use by SE are 29/36/37/49/50/51/52/32. SE-based LG/Sharp phones use the same system (but different versions). The OTP (One Time Programmable memory) and EROM of a phone might be protected by different CIDs, usually the case in newer K600s/K608s. (CID 53 is the latest CID and it is not supported by most APPS. However, recent JDFlasher can hack CID53 phones.)

CDA : This "number" defines which variant of a specific firmware a phone is supposed to have.It lets among others SEUS (Sony Ericsson Update Service) know which language-pack/branding/bandlocks a phone is to be flashed with. A generic (unbranded) K750 for use in Scandinavia will be CDA102337/12, whilst a Telenor-branded K750 will be CDA102338/62. Both will be flashed with the same languages/dictionaries, but the latter will be flashed with Telenor-branded firmware.

CID COLOR - BLUE/BROWN/RED:This "color" defines what kind of phone we are dealing with.BLUE phones has been assembled at the factory, but never been programmed with software/GDFS/IMEI (remember kids: the IMEI is stored in the OTP (One Time Programmable memory))BROWN phones are "developer phones", for testing. Less restrictions are present, as these are used for "debugging/beta" purposes. As of CID36, a phone has to be converted to BROWN to unlock it.RED phones are your typical retail ones.

GDFS:This is the phones "stash", where all settings and calibration data is stored (this also goes for the firmwares IMEI-resource as well as the SIMlocks). Similar to other brands use of NVRAM (Non-Viotile Random Access Memory). (NOTE: IT IS NECESSARY TO BACKUP GDFS AS THERE'S NO TOOL OUT TO RE-WRITE GDFS YET, SO ONCE IT GETS CORRUPTED, ITS ALMOST IMMPOSSIBLE TO RESTORE THE PHONE - AND DON'T TRY TO USE ANYOTHER'S GDFS ON YOUR OWN PHONE, GDFS CONTAINS THE PHONE IMEI AND EVEN MATCHES IT. IF IT CAN'T FIND THE CORRECT IMEI, THEN IT DOESNT TURN ON)

IMEI : International Mobile Equipment Identity.A 15-digit number which includes information on the origin, model, and serial number of the device. The model and origin comprise the initial 8-digit portion of the IMEI, known as the "Type Allocation Code/TAC". The remainder of the IMEI is manufacturer-defined, with a "Luhn check digit" at the end (which is never transmitted). The "Luhn check digit" is calculated from the rest of the IMEI.
It should be noted that in SE-based phones, the IMEI is stored in two places, the OTP (One Time Programmable memory) and GDFS. The GDFS IMEI is normally read from the OTP, but this can be circumvented by SETool function to "change" the IMEI. This patches the firmware into allowing different OTP/GDFS IMEIs. It is the GDFS IMEI that is reported to the network, so changing this will "de-bar" blocked phones. SEUS is not fooled by this, on the other hand, and it should also be noted that doing this is illegal in most countries.

EMMA : Service software/solution by SE themselves. Protected by the EMMA smartcard to prevent non-licensed usage. Current version is EMMA3, though EMMA2 is still alive (but kinda useless on newer phones). The EMMA smartcard contains an algorithm that allows EMMA to communicate directly to/with the phones CID, so performing operations the way they were intended. The smartcard and its algorithm has not been cracked. Current EMMA access levels exists:Service Update - Can't unlock phones.Service Update Pro - Can't unlock phones.Network Operator - Can't unlock phones (but sure as hell can lock them ).Service Center Std - Can't unlock phones.Service Center Rc - Can unlock phones, as they have a special version of the smartcard with a CSCA key.Research & Development - Can unlock phones, as they have a special version of the smartcard with a CSCA key.

DB2000, DB2010, DB2020, DB3150 : SEMC (Sony Ericsson Mobile Communications) hardware platforms. It's something similar to chipset in PC.DB2000 (another name is Marita) is a GSM+3G(UMTS) capable platform, SE K600/K608/V600/Z800/W900, Sharp 802sh, 902sh, 903sh and LG 3G phones are based on it.DB2010/2012 (Marita compact) is GSM-only, non-3G, platform. Most not very old and modern SE phones like K300,K500,K700,K750,S700,W300,W550,W800,Z520,Z530 are based on this chipset.DB2020 is the newest product of SEMC. K800, K790, K610, Z710 etc, Sharp 904sh feature this most secure (from SE's point of view) platform. (NOTE: DB3150 is NOT YET SUPPORTED BY ANY HACKING SOFTWARE. HENCE, NEWER PHONES LIKE K850 e.t.c ARE NOT YET SUPPORTED BY ANY HACKING APPLICATION YET - BUT IT WILL SURELY COME IN NEAR FUTURE!)

FIRMWARE FILE (*.MBN) : The file in EPROM which contains the Software/OS of the Phone, and it can be even inter-changed with some phones (which got same specs and same Platform, i.e: DB2010, DB2012, DB, 2020, DB3150 e.t.c).. For example: K750's Firmware can be changed with its partner W800 (Both shared same Platform: DB2010 and same specs). Hence, K750 can be Flashed/Changed with W800's software and vice versa. Similary, W550 uses the same platform (DB2020) but both have different specs, so if u flash W800 with W550 software, ur camera will be limited to 1.3MP (without autofocus) with no external card support (since there's no support for card in w550). However, it doesn't mean that if u flash W550 with W800's software, the camera will become 2MP-AF, IT WONT.. Infact, the phone might start to crash.. SO IT IS CONCLUDED THAT IN-ORDER TO CHANGE THE FIRMWARE, U MUST SEE THE SPECS AND PLATFORMS OF BOTH PHONES

[naeem_skg786]

EROM : Extended ROM. This is the base part of the software which isn't flashed in normal update operations. It controls the flashing interface, the boot loader, etc.

FOTA : Flash Over The Air. The Sony Ericsson Remote Update Service is a convenient way to easily and remotely update your mobile phone to the latest available software version. This is done over the air; no connection to a PC is needed. The cost for using Sony Ericsson Remote Update Service is your operator's fee for transferring the data to your phone. This varies widely between different operators; if you are uncertain you should contact your operator. User content in the phone, such as images, music, ringtones and videos, is not affected by the update.

Customization : Changing or replacing original content of the phone, like ringtones, wallpapers, icons, themes, that come with branded or unbranded phones. It's nothing more than first default configuring of the phone after flashing FS file. Usually the process is:
1. Writing customize.xml and server&java certificates in tpa/preset/custom in sonics folder to tpa/presest/custom folder in the phone's internal file system
2. When the phone starts after flashing, it parses that xml file, puts settings written in that xml into the phone's gdfs and works out certificates (some go to Trusted certificates, some got Java certificate etc)
If you open customize.xml you can change almost any initial settings like time zone, date, internet profiles etc.

Branded Phones : Some network providers place their own ringtones, themes, icons, links etc within phone's software. (eg. vodafone, orange, t-mobie, rogers, cingular etc.) Debranding means removing all this content and restoring phone to it's original factory SONYERICSSON condition. This will not damage phone in any way! You will loose Operator Icons, and links, WAP, and MMS settings however these you can get via

If You Like My post Press Thankx Button

BR
naeem skg

[farrukhazhar]

nice work naeem bhae.yuo always help us

[farrukhazhar]

1. good work keep it up :rolle yes: thanks

[kaleem munir]

VERY HELPING FOR NEW SETOOL USER LIKE ME

[TOWHID_GSM]

Nice information boss... as you are remaing we can learn so mutch and know.....

[logicmobile]

Nice post Brother

Keep it Up

[Arshad Ahmad]

[samshaf]

verry nice post keep it up dear naeem bahi

[dust2dust]

Thanks mate. another recipe for my repair book

[Mian Bilal]

towhid gsm
only picture thanks
nice picture

[varunkumar143]

thank you sir............................................... ............../

[Denva]

Originally Posted by TOWHID_GSM

Nice information boss... as you are remaing we can learn so mutch and know.....

I like that.....

[m.awais.as]

great work bro...naeem


wonderfull info...for new generation


keep it up

[wolfhosking]

you are awesome

thank you very much mate