We apologizes for the inconvenience but the page you are attempting to view requires Javascript to be enabled.
Please enable JavaScript, or use a JavaScript-enabled browser to access this area of our site.

Recommended web browsers:

Back to Home

Nightly Builds

v3.5 revision 2.5, Public-Release
License informations updated.
NOKIA module updated to version 2.7
minor bugfix and improvements
v3.5 revision 2.6, Public-Release
NOKIA module updated to version 2.6
added: WP8 support
Refurbish Flashing support by USB
Recovery(Dead) Flashing support by USB
added: Service Utility for WP8
Factory Reset without flashing
Read/Write Producttion Data(Product Code,PSN,HW version, etc ..) )*
Read/Write WP8 NV items )*
Write CoverColor )*
added: SuperDongle Auth for WP8 phones
SuperDongle Auth is required to write important/secure data
bugfixed: RAPUV2 security repair function
revised internal fire module to enable download firmware package by product code

added latest flash update v to setup
minor bugfix
)* Write function require SuperDongle Auth
SL3 Logger updated to version 2.6
minor bugfix and improvements
FIRE module updated to version 1.5
minor bugfix and improvements
v3.5 revision 2.5, Public-Release
HTI ONLINE SERVICES module updated to version 2.1
[IPHONE_CHECK] added dialog message on spesific events(license expired, blocked ...)
[IPHONE_FU] countries and carriers are now sorted
improvements to the current systems
NOKIA module updated to version 2.5
added: XG223 phones(new Asha series) support by USB (mode: Nokia Suite)
Normal USB(Nokia Suite) and DEAD USB(Nokia USB ROM) flashing supported
Legacy RPL(IMEI,CCC,HWC,SIMLOCK) backup/restore supported
added latest flash update v to setup
minor bugfix
FIRE module updated to version 1.4
added: Nokia schematics and SM download menu
Common changes:
improved internal download task routine(random stop bugfix)
minor bugfix and improvements
v3.5 revision 2.4, Public-Release
HTI ONLINE SERVICES module updated to version 2.0
added: Imei validator for iPhone unlock
added: Supported carriers filtered by country selection
bugfixed: Was still not running on some customized Windows XP, should be fixed now.
added: Read IMEI from iPhone by Usb(iTunes must be installed).
GUI improvements
Nokia SL3 Logger updated to version 2.4
added: Multiple service support
Allows to upload job for CHEAP, NORMAL or FAST server
BlackBerry module updated to version 1.8
Full Software Parts parsed during read.
Implemented DM Protocol, now you can read Blackberry CDMA info (including MSL) By Normal Usb Connection.
MEP list updated(total 274 MEPs supported).
Latest Nokia module changes:
added: Lumia SIM Unlock by AMSS patch
Common changes:
bugfixed: HTI drivers conflict with android adb devices.
improved sync routine to avoid main exe failed to load if sync fails.
v3.5 revision 2.3, Public-Release
Nokia module updated to version 2.3
added: BB5 security repair function by USB for Meego/HARMATTAN device (N9-00, RM-696)
Works standalone with HTI connected
Required HTI FW version 00.50 or later
This function includes:
Full PM backup/restore for Meego/HARMATTAN device required phone SX4 Auth (No, its not readonly)
added: Full flashing support for Meego/HARMATTAN device (including EMMC)
added: Quick Fix for XGOLD2 Fix CS/Recover SIMLOCK
This will recover SIMLOCK table caused by Reset LOCK counter
added: Latest flash Update version
bugfixed: Reset Lock counter on XGOLD213 causing SIMLOCK corrupted
minor bug fixed
SL3 Logger updated to version 2.3
added: Support for Meego/HARMATTAN device (N9-00, RM-696) by USB
bugfixed: Reset Lock counter on XGOLD213 causing SIMLOCK corrupted
minor bug fixed
SL3 Bruteforce
added: New configuration for oclHashcat-lite-0.10
v3.5 revision 2.2, Public-Release
Nokia module updated to version 2.2
added: Qualcomm DLOAD flashing protocol for WP7 devices (Lumia)
added: Qualcomm eMMC Tool
Usefull to work with lumia with unlocked bootloader (Qualcomm DLOAD)
allows to analyze disk & partitions inside lumia eMMC chip
allows to export / import single partitions for firmware hacking
allows to write custom WP7 OS for lumia
allows to restore OSBL to default (Nokia DLOAD)
allows to edit PMM values (Product code, etc)
added: Lumia 710 bootloader unlock
Flashing OSBL with Qualcomm DLOAD enabled, allows to root/jailbreak lumia
With jailbreaked WP7 allows to install app (*.xap) from browser
supported/available package for now:
RM-803 (Lumia 710)
- Extract "RM-803_Qualcomm_DLOAD.z" to Product directory "\Products\RM-803"
- Choose "Nokia 710 RM-803 Qualcomm DLOAD" on market item
- Flash
- After flashing, change phone mode to "OSBL"
- You will see "Phone detected in "Qualcomm DLOAD" mode, please use eMMC Tool !" and eMMC Tool show up
NOTE: a Mass storage device( Qualcomm MMC Storage USB Device ) will be detected by Windows
and will ask if you want to format, DO NOT ATTEMPT TO FORMAT, click "Cancel"
Install drivers for "Qualcomm CDMA Technologies MSM" with driver from directory "data\drivers\qcusb"
- Download "Full Unlocked" custom OS from here ""
- Click "Disk Info" to identify connected phone and partitions list
- Click "Write OS", browse to the custom OS file (*.nb)
- Click "Restart" to restart phone to Normal mode
- To restore OSBL back to Nokia DLOAD, use "Restore OSBL"
def\dcc list updated
minor bug fixed
SL3 Logger updated to version 2.2
minor bug fixed
HTI Misc Tool updated to version 1.3
minor bug fixed
v3.5 revision 2.1, Public-Release
Main/Library changes:
added: Smartcard list on USB Device List window
Usefull to diagnostic USB smartcard reader
minor bug fixed
Nokia module updated to version 2.1
added: Flashing support for Nokia 801T
added: Flashing support for Lumia 900
added: WP7 modemsw file group for easy flashing skip
added: MDM_KEYS certificate for backup/restore RPL
added: Latest flash Update version
improved: FBUS protocol for symbian belle
minor bug fixed
SL3 Logger updated to version 2.1
ui: hti type visualization
minor bug fixed
Fire Agent updated to version 1.3
added: Store page(beta)
HTI Misc Tool updated to version 1.2
ui: hti type visualization
added: active carrier info (server side)
added: auto remember input (drop down cache)
minor bug fixed
v3.5 revision 2.0, Public-Release
Nokia module updated to version 2.0
added: MCU certificate check on Bus check (if any)
bugfixed: "Performing Handshake" hang for some reason
bugfixed: ProductProfile extraction of dcp files
minor bug fixed
SL3 Logger updated to version 2.0
improved usb handling
minor bug fixed
Fire Agent updated to version 1.2
added: Sync product config files on "Reload Products"
will synchronize product description and images
HTI Misc Tool updated to version 1.1
minor bug fixed
v3.5 revision 1.9, Public-Release
- Main
added: Option to disable USB host warning message
(Options->General Settings, check "Do not show USB HCD Error Messages")
added: USB Device List window
(Sys Menu->USB Device List)
Usefull to diagnostic USB Host and Hub capabilities
- Nokia Tool
added: XGold 213/XMM2130 hash reading by USB
implemented to regular nokia module and SL3 Logger
added: XGold 213/XMM2130 IMEI,CCC,HWC and SIMLOCK backup/restore
added: XGold 213/XMM2130 rpl recovery with HTI (Services->IMEI & Security->IMEI rebuild, check "Dead Mode(Recovery)")
added: XGold 101,XGold 110 hash reading with HTI
implemented to regular nokia module and SL3 Logger
added: XGold 101,XGold 110 rpl recovery with HTI (Services->IMEI & Security->IMEI rebuild, check "Dead Mode(Recovery)")
added: WP7 host drivers to "data\drivers\nokia\wp\WMZuneSerUSB.inf"
used to working with Lumia(no need to install Zune)
bugfix: FireAgent hung on loading empty packages
improved: Dead Mode WP7 flashing routine
added: Latest flash update version ""
v3.5 revision 1.8, Public-Release
- Nokia Tool
added: support for Windows Phone 7 platform
allow normal flashing (Refurbish) and dead mode flashing(Recovery)
for recovery please select "Nokia DLOAD (Recovery) in connection list
the drivers located to "data\drivers\nokia\wp"
added: esco file handling
bugfix: FBUS protocol bug with Symbian Belle
updated sl3bf to version 3.7
added: support for oclHashcat-lite-0.09
minor bug fixed + improvements
added: HTI OTP ID displayed on connect
added: flash update version ""
bugfix: Rapido Usb "FUR Cold Boot" bug
bugfix: BB5 Usb FUR control bug
bugfix: Write local RFBB definitions(*.pm) bug
- BlackBerry Tool
added: unlock by PRD function
allow to select PRD instead of MEP (usefull for MEP-LOADED or hidden MEP) for unlock calc
minor bugfix
added to setup HTI Misc Tool (htic.exe)
for now, it has features:
Imei analyst: Used to analysis IMEI/TAC number
iPhone/iPad Serial number analysis
v3.5 revision 1.7, Public-Release

- Nokia Tool
SL3 RSA Signature verify on "Read Hash", sha readed by MX now is 100% valid
Disk usage info on fire.exe
file version indentification for installed data package
phone images definitions in now synched with fire tool
pinout images updated
rapido usb bootstrap causing BSOD
xgold not booting
[sl3bf], oclHashcat 00.08 speed not shown
hti drivers updated
updated sl3u to version 1.7
added: Master sp code verification on calculate cod
improved: online logger function
updated sl3bf to version 3.6
added: Master sp code verification after bf task finished
bugfix: oclHashcat-lite-0.08 with "--outfile-format=1" problem
and minor bugs fixed
v3.5 revision 1.6, Public-Release
introduced HTI Firmware version 00.49
new in firmware:
added: boot mode switch function
improved: serial and flash bus communication routine
added: dct4 product data calc algorithm
added: broadcom algorithm
please Update HTI by using "Update HTI" button !
uistyle updated
HTI identity now displayed on Dongle Maintenance
HTI serial displayed on connection tab
added: support for HTI PLUS interface
- Nokia Tool
bugfixed: NCK send for PA_SIMLOC30 (error 0x1)
added: HTI Standalone function for DCT4 PRODUCT/BT/WLAN DATA fix.
required HTI FW version 00.49 or later
added: BB5 security repair function by USB for RAP3Gv4, RAPUv2, BROADCOM(BCM21351)
added: BB5 security repair function by HTI for RAPUv2
improved: BB5 security repair function on all supported ASIC
Note for BB5 security repair function:
Works standalone with HTI connected
Required HTI FW version 00.49 or later
This function includes:
Phones supported by HTI:
Any RAPUv1, RAPUv2, RAP3Gv3, RAP3Gv4 and RAPIDO phones.
Phones supported by USB:
Any RAPUv1, RAPUv2, RAP3Gv4, RAPIDO and BROADCOM(BCM21351) phones.
Supported ROOT KEY HASH: ALL HASH supported !
sl3bf(Local SL3 Bruteforce) module changes
added: support for oclHashcat-lite-0.08
sl3u(SL3 Logger) module changes
added: Online Logger page
and more minor bug fixed
- SL3 Logger/Unlocker (sl3u.exe)
added: support for RAP3Gv4, RAPUv2, BROADCOM(BCM21351) by USB
added: Online Logger tab
used to request unlock codes by imei+hash (.sha files)
How to:
1. Register HTI to use this service (choose your password here !)
2. Top up HTI credit to be able to use this service
3. Login using password choosen when registration
4. Upload Hash, select sha or log files
5. Wait for few minutes (As displayed on waiting time)
6. Job Status are displayed once you "Upload Hash" and everytime you "Login"
use "Login" button, to check or request codes for uploaded hash(if any)
7. When status is "finished", right click on individual hash and select one of menues
Abort/Cancel Job: will cancel job and refund credit (only available when job is "pending")
Send Codes to the phone: Send codes directly to the phone
Save Codes to text: Save codes to text file
Copy Codes to clipboard: Copy codes to clipboard
v3.5 revision 1.5, Public-Release
minor bug fixed
added: 2 more uistyle (Style4, Style5)

- Nokia Tool
added: "Extended Scan" option in config
if ticked, will display nck length, dcc (if any), MMC pass (if any), Master code(DCT4) and user code on scan
added: "Clear cached product data" in config
used to clear previous BB5 secure data cache used for BB5 security repair
added: marque progressbar on usb pooling
added: flash loader version to setup
added: 'HTI Auto BSI(SoftTMA)'selection saved as individual config based on selected type.
bugfixed: Verify Secure Data at 'Read SL3 Hash'/'Read Phone IDs'

improved: FBUS communication routine for HTI
improved: XGOLD/MAEMO identification
and more minor bug fixed
- Blackberry Tool
added: "Read MSL" for Blackberry CDMA (Factory OS required)
please select "(COM)Blackberry Serial Port" instead of "(USB)Blackberry Smartphone" in connection list
bugfixed: random AccessViolation on calculation code in standalone mode
v3.5 revision 1.4, Public-Release
introduced HTI Firmware version 00.24
new in firmware:
firmware accept SL3instant unlock activations
bugfixed: BB5 security repair algorithm for RAPIDO new ASIC
implemented WD2 and BTMCM flashing protocol
implemented TIKU and MM(NAND) flashing protocol
please Update HTI by using "Update HTI" button or "HTIUpdate.exe"
improved: antivirus compatibility.
improved: daily update check routine.
improved: built-in downloader routine
added: resume support
bugfixed: handing big file size(more than 1G)
added: support for upcomming windows 8(windows developer preview) support.
added: Detailed 'LastError' message window when No Security Dongle Detected
added: Detailed HTI identity(boot & fw version, serial) on connect.
New Application released:
MXKEY - Fire Agent(fire.exe), it brand new support tool and firmwares download support client
Using shared configuration with corresponding module, simplify the needs to download/update firmware file.
Working in sync mode with modules for better usage.
using built-in downloader with resume support.
Supported services:
Nokia firmware, along with latest firmware notification info
CDMA firmware, various vendor(Alcatel, Haier, Huawei, LG, Nokia, ZTE)
more services tobe added at the future
- Nokia Tool
important informations(Asic ID, ROOT KEY HASH, UEM Imei) now highlighted (beginner friendly).
added: BB5 security repair function for RAPUv2 phones (beta testing)
added: Verify Secure Data at 'Read SL3 Hash'/'Read Phone IDs',
used to verify if secure data readed from the phone is valid to make sure the hash readed by software(both USB/FBUS) is 100% correct
added: "Fire Support" menu in module`s options.
added: support to load variant definitions created by fire.exe
added: Spesified window dialog when card is busy/used by other module to fire.exe, sl3u.exe.
added: support to convert log to other thirparty format to SL3BF module (sl3u.exe)
added: new definition to 'phoneIdentity.ini.default'
added: flash loader version to setup
added: RPL backup list load at scan (used for "Write Rpl' with 'Use RPL file' ticked)
added: PM backup list load at scan
improved: module initialization.
improved: 'phone definitions loading' at first load.
improved: 'HTI Auto BSI(SoftTMA)' set.
improved: file/image version check routine.
improved: Reboot after flash mode
improved: WD2 flashing with HTI

bugfixed: BTMCM flashing bug with HTI
bugfixed: No Security Dongle Detected when HTI connected with phone(HTI power switched off on load)
bugfixed: RAPIDO New Asic security repair function
- CDMA Tool
added: "Fire Support" menu in module`s options.
v3.5 revision 1.3, Public-Release
- improved GetFlashAddress and Custom Erase function(not pooling phone after operation)
- improved *.default(config update) file handling
- bugfixed: Nomadik dead usb flashing (Bootstrap failed)
- bugfixed: RAP3Gv3 dead usb flashing (stop at sending bootloader)
- added: model selection by type designator or phone description
- added, notification messages for important function
- added, optional screen recorder
using separated application "camcl.exe", use "Record Session" on system menu (right click window titlebar)
captured videos will be saved as "capture.avi" in the windows temp folder
could be usefull for reporting bug
- added, fw version check between connected phone,mcu image,server during 'Scan Phone'
- added, fw version check between selected mcu image and server during 'market select'
- added, "Copy All Links" on Nokia Download Window
- added, auto complete on Model selection
- improved auto enable RAPIDO "FUR Cold Boot" by usb hub information
- removed experimental "run in main thread" bug caused app hang
- bugfixed: usb3 connection status query
- bugfixed: XGOLD 213 "Use Embedded SBL from MCU" does not work if BB5 selected in generation dropdown.
- Some UI changes
Add fading on loading module
using balloon hint instean of ordinary hint
- bugfixed: dead after flashing in NOR flash devices (affected on x64 pc with memory more than 4GB)
- usb flashing routine improved
- usb connection handling improved
- bugfixed: random crash on buscheck with usb connection
- added: connection status/speed information on connect
- added: more detailed description of errors if an error occurs
- moved "[BB5,USB]Use New Protocol for RAPIDO" option to config->Directory
If enabled, will use new loader else will use old loader(embedded to MCU file)
RAPIDO phones with New Protocol connected to HS(High-speed) USB allows to use CERT backup/restore.
Old RAPIDO and RAPIDO connected to non HS USB will not backup CERT due to USB limitation.
- added: "[BB5]Use New Protocol for RAP3Gv3" option to config->Directory
- added: phone`s image load from server(if any).
- added: latest firmware version check(if any) for BB5 phone on market select.
- added: sl3u.exe(Standalone SL3 Logger/Unlocker)**
Optimized for SL3 unlock task using HTI or USB cable.
- added: sl3bf.exe 'load at windows startup' option.
- bugfixed: X1-01 XGOLD flashing bug.
- added USB STANDALONE security repair function*** for ALL HASH for RAPUYAMA phones **.
- added USB STANDALONE security repair function*** for ALL HASH for RAPIDO phones **.
- bugfixed: No progressbar on flashing.
- bugfixed: New RAPIDO SL3 read PhoneIDs shows 'Operations not supported'
- bugfixed: processing file with size more than 900MB.
- bugfixed: emulate phone on New Protocol causing application to be hang.
- changed FlashLoader selection from dropdown to checklist as this will be more user friendly.
- changed SoftTMA to slider as this will be more user friendly.
- improved synchronize files routine, auto retry when download failed.
- added update dialog window when HTI firmware outdated.
- bugfixed: access violation on synchronize files when Download window opened.
- bugfixed: application crash on load in some os(win7 x86 no sp).
- changed manifest of mobileEx.exe, sl3bf.exe from 'asInvoker' to 'requireAdministrator'.
Library and modules will need to update their xml configuration files regularly,
or create if xml configuration is not exists. This operation required admin level on vista and win7 core.
- to not confuse users, Nokia USB ROM is now displayed only when no physical NMWCD* device connected
for dead usb flashing, Nokia USB ROM should be used instead of 'Phonet' device
- bugfixed: XGOLD213 usb flashing error when no mcu spesified
- Renamed 'Image DL' caption to 'Download' as this will be easier to understand
- 'Download' will show input dialog if no product code spesified
- local rfbb will also handle rfbb file format
- local dcc will also handle pm file format
- bugfixed: SL3 read PhoneIDs shows 'Operations not supported'
NMWCD: Nokia Mobile Wireless Communication Devices
required HTI with firmware 00.17
v3.5 revision 1.2, Public-Release
Added, Files synchronization feature
Allows to check and update important files with server without installing full setup.
Also usefull to minimize problems because of users patch.
Fixed, Access violation on XP for PC without HTI(WinUsb) installed
Check For updates and Single module update removed(replaced with Synchronize Files)
- NK(Nokia Service Tool)
Added, optional SX5 serial used for SL3 NCK calc (*)
Added, Latest flash update definition to setup
Added, Options to disable/enable RAPIDO new protocol for USB flashing
Added, Options to disable/enable embedded SBL for XGOLD flashing
Added, HTI SoftTMA Resistor selection (*)
Added, Local storage definition for DCC and RFBB data.
Added, DCC data verify after write
Improved, DCC data write (If DCC write fail, DATA will be written as PM)
Fixed, Download in background deadlock bug
Fixed, PM erase bug (was early stoped on newer BB5 phone)
Fixed, DCT4 flashing
Fixed, New ProductProfile write
- QCD(CDMA Service Tool)
updated patch definition to version 1.4
added unlock definition for: Haier Q9+-INAV1.04-100326-JWD, method: patch unlock
added unlock definition for: ZTE SM_C36X_RBTL05NV1.0.0B05, method: direct unlock(untested!)
fixed unlock definition for: ZTE TM_S189_RBTL35NV1.0.2B01, method: direct unlock
fixed unlock definition for: ZTE TM_S168_RBTL35NV1.0.0B02, method: direct unlock
see "modules\{9A05071F-D3A6-484B-8E3E-C6F47311C78C}\supported_phones.txt" for list supported models
- BB (BlackBerry Tool)
Added, Factory lock status on device scan
Minor bug fixes
(*) required HTI firmware version 00.17 or later
v3.5 revision 1.1, Public-Release
Introduced HTI Firmware version 00.17
After update, Device PID will be changed.
required new driver (data\drivers\hti\HTIWINUSB.inf)
Reworked communications library for all supported interface.
- NK(Nokia Service Tool)
Fixed, DCT4 UEM imei read on HTI
Added, RPL backup/restore for RAPIDO phones using USB.
SX4AUTH is now automatically performed after "Repair SD".
Fixed, RPL restore on Dual Asic phones.
Improved, SL3 SIMLOCK RPL restore (If SIMLOCK restore fail, DATA will be written as PM)
- BB (BlackBerry Tool)
Improved Device scan
Added, STANDALONE MEP Code Calculator(*)
Total 236 MEPS supported
Added New MEP list to MEP definition file(mep.dat)
Updated "supported_mep.txt"
Added HTIUpdate tool in case BLADE server is problem.
HTI now initialized as additional security device when working with USB connection,
this will allow to use STANDALONE features using USB connection.
(*) required HTI firmware version 00.17
v3.5 revision 1.0, Public-Release
Update HTI button now alwasy enabled.
Added local ping check for 'Server List'
Added taskbar progress support for Windows 7
- NK(Nokia Service Tool)
Fully reworked flashing routines(workaround for HTI flashing bug)
Fixed, Download in background task
BB5 Secure Storage and Certificate validation moved to Certificate manager page
BB5 Secure Storage, Certificate validation, Recover CERT, Load RFBB from server also supported with USB connection
Minor bug fixes
SL3BF updated to version 3.4
added task scheduler, usefull when working with more files
fixed, random salt option bug (duplicate salt automatically fixed oon this version)
- BB (BlackBerry Tool)
Added New MEP to MEP definition file(mep.dat)
Updated "supported_mep.txt"
- QCD (CDMA Service Tool)
Added flashing definition file for: Haier C2071
updated patch definition to version 1.3
added unlock patch for: Haier C2071-P1.01.21_V00.21
see "modules\{9A05071F-D3A6-484B-8E3E-C6F47311C78C}\supported_phones.txt" for list supported models
v3.5 revision 0.0, Public-Release
Added, visual detail when MXKEY plugged to HTICCID.
HTI firmware update routine implemented.
Introduced HTI Firmware version 00.08
- NK(Nokia Service Tool)
Added, STANDALONE security repair function for ALL HASH for RAPUYAMA,RAPIDO,RAP3Gv4 phones.
required HTI with firmware 00.08 (please update your HTI)
Improved, HTI FBUS protocol routines
Fixed, Manual erase address selection.
Minor bug fixes
v3.4 revision 2.1, Public-Release
HTI drivers updated to version 3.04.07
HTI ccid drivers added to setup.
HTI communication protocol updated
- NK(Nokia Service Tool)
Fixed, HTI flashing bug
Fixed, ATF flashing bug
Added, 'Get Address' support for USB connection
Added, flash size selection for manual erase
Added, ATF protocol for loader v10 or higher
Fixed, minor bugs
SL3BF updated to version 3.3
support for oclHashcat-lite-0.05
- QCD (CDMA Service Tool)
Fixed, ZTE QSC6010 flashing bug.
updated patch definition to version 1.2
see "modules\{9A05071F-D3A6-484B-8E3E-C6F47311C78C}\supported_phones.txt" for list supported models
v3.4 revision 2.0, Public-Release
** Initial release which support MXBOX/HTI FLASHER
- NK(Nokia Service Tool)
Added, SIMLOCK_PA idendifier on BUS check option in config
Added, flash update v11.10.000.2 to setup
Fixed, BB5 manual flash erase (NAND)
Fixed, Old Infineon flashing bug
Fixed, some bugs
SL3BF updated to version 3.2
* support for oclHashcat-lite-0.03 and ighashgpu_v0.80.16.1
additional files are required to use this version
- oclHashcat-lite-0.03 (
please extract all contents to directory(see readme.txt)
- ighashgpu_v0.80.16.1 (
please extract all contents to directory(see readme.txt)
command line and others option could be adjusted by editing sl3bf.dat at
by default we will use "oclHashcat-lite-0.03", which is support newest AMD GPU(HD6xxx)
- QCD (CDMA Service Tool)
Added, Flashing support for:
TELEEPOCH based products (Haier C710)
TECHFAITHWIRELESS based products (Haier C200,C2000,C6200,CG100,C2001,C5000 and soon)
TCLMOBILE based products (Alcatel OT-203C, Nexian NX981)
ZTE QSC11x0 products (S168,S189)
ZTE QSC6030 products (C36X)
Added, Patch definition update button from config
Added, SPC code extraction from image file
Added, ROM,EFS base address detection from image file
Added, Auto image base address set for full dump image
Added, CDMA NAM read/write support
Added, image(bin) file load/save support
Added, Copy to clipboard and Paste from clipboard for EFS function
Improved, Flashing(Read/Write) speed
updated patch definition to version 1.1
see "modules\{9A05071F-D3A6-484B-8E3E-C6F47311C78C}\supported_phones.txt" for list supported models
v3.4 revision 1.9, Public-Release
Introduced new module: CDMA Service Tool for Qualcomm based phones
Initial release, required license #5 to be activated.
- Flashing
- Flash read/backup
- Memory Dump
- NVM backup/restore
- EFS explorer/backup/restore
- Unlock
- MEID read/write
- ESN read/write
- SPC read/write
Currently supported devices:
Other brand will follow
required usb drivers can be found at 'data\drivers\cdma' directory

- NK
Fixed, Flashing bug (device handle lost when flashing with flasher boxes)
Fixed, XGOLD flashing bug (unexpected boot acknowledge sequence received from phone)
Fixed, GPU bruteforcer bug on random salt skipped with random salt mode option.
Fixed, DCT4PLUS RSA Unlock bug for old models (Asic type 2)
Added, BT_DATA and WLAN_DATA repair on DCT4 online logger
for BT_DATA and WLAN_DATA repair, please input BT_ADDR/WLAN_ADDR(MAC ADDRESS) in 6 bytes hex(eg: 00AABBCCDDEE)
v3.4 revision 1.8, Public-Release
Added, Credit Convertion Dialog on 'Check Credit' (you can convert for FREE your DCT4 credits and BB5 credits into SL3 credits)

- NK
Added, XGOLD213 devices(RM-607,RM-608,RM-643,RM-644 etc) usb flashing support (dead/alive) [WF]
Added, XGOLD101,XGOLD110 IMEI backup/restore
Added, XGOLD101,XGOLD110 IMEI auto backup on safeflash
Added, Battery voltage information during scan phone in usb mode
Added, Use Dictionary option for GPU bruteforcer(using salt.dic as salt sequence)
Fixed, GPU bruteforcer hang at 99% if random salt is selected
Fixed, Phone Generation filtering
Fixed, Error read/write bug on usb flashing process
Improved Features compability between usb/flasher interface
Improved Broadcomm Usb Flashing
Automated XGOLD phone detection
Revised XGOLD flashing protocol
v3.4 revision 1.7, Public-Release
- NK
Added, Local SL3 unlock using GPU Bruteforcer [WF]
Go to [IMEI & Security->Online Logger] (Dont forget to select BB5 generation :))
Added, Camera Configuration data write from PM in manual mode.
Fixed, ATF communications problem.
Improved After flash handling on Usb flashing
Address list now cleared when "Load Erase File" and "Get Address"

PIDs list sorted, more user friendly.
Added x64 ft2k drivers to the main setup.
v3.4 revision 1.6, Public-Release
- NK
Added, Certificate Reset function
Allows user reset NPC/CCC/HWC/VARIANT.
Panel located to [IMEI & Security->IMEI rebuild]
Added, ALS calibration function.
Page located to [Phone Test->ALS Cal]
Added, Provider info on Multilocked phones
Added, Phone timers edit.
Allows users to edit life timers, read calls received, calls dialed, last call and calls all
Updated providers.ini based on Annex to ITU OB 958-E (No. 958 15.VI.2010).
Make SIMLOCK RPL selected by default
Repair SD button moved to PM Tab
Reset NPC button removed as no longer needed(replaced by Certificate Reset)
Larger font for PID list as requested by user.
Added module) to the main setup.
v3.4 revision 1.5, Public-Release
- NK
Fixed, USB flashing bug (RAP3G,RAPIDO dead after flash).
Improved, USB boot protocol for better/stable communication.
Added, lifetimer reset support for BroadCom platform).
Added, Skip UEM write option for Online Logger.
Minor bug fixes.
- BB
Added, Manual MEP list selection (manual checkbox selected by default).
Minor bug fixes.
v3.4 revision 1.4, Public-Release
- NK
Added, USB flashing support for BCM21351(Broadcom platform).
Added, USB RPL Backup support for RAPUV1,RAP3GV4,BCM21351.
Added, USB RPL Write/Restore support for RAPUV1,RAP3GV4,BCM21351.
Added, Auto RPL backup on Buscheck for USB(BB5) connection.
Added, Camera & Flashlight Test.
Fixed, USB flashing bug (RAPUV1,RAP3GV4).
Fixed, XGOLD flashing bug (new PBL version).
Minor bug fixes.
v3.4 revision 1.3, Public-Release
Improved BLADE client system for better server transactions.
Fixed, Language files enumeration bug.
- NK
Added, Baud selection for X-GOLD flashing.
Fixed, USB flashing bug (STNFMS N8815,N8500).
Fixed, DCC data user store bug.
Fixed, SD customkey detection on SD Auth.
Minor bug fixes.
- BB
Added Latest MEP for BlackBerry Unlocker, see supported_mep.txt
Better error handler on server transactions.
v3.4 revision 1.2, Public-Release
- NK
Added, flashing support for MAEMO devices(Nokia N900, etc) using Usb cable.
Added, flashing support for X-GOLD/Infineon devices(1202,1616,1800, etc) using UFS,JAF or modified serial cable.
flashing works for normal or dead phone, using UFC cable.
for serial connection, you might modify cable by adding trigger/ignition on the DTR or RTS pin(same as old siemens).
Added, Auto Flash loader option based on selected interface.
Added, Models sorting option.
Fixed, BB5 fast flashing bug.
Minor bug fixes.
v3.4 revision 1.1, Public-Release
Added, ATF BOX support.
Added, Serverlist data caching.
Added, Credit check function.
Fixed, options menu not displayed when themes is enabled.
Small changes on ProgressBar style.
- NK
Added, BB5 Flashing support for ATF BOX.
Added, Download tasks window.
Usefull for backgroud download monitor when using Image DL.
Added, SD customkey detection on SecureStorage validation.
Added, Automatic SD cusmkey selection of SUPER SD Auth and PMM Auth function.
Improved, SUPER SD Auth routine to fix session timeout issue.
Added, Important Data Share/Store.
*RFBB data user store.
This will upload RFBB(PM1,PM309) data from the phone to server.
*DCC data user store.
This will upload DCC data from the phone to server.
*CERT data user store.
This will upload CCC,HWC,VARIANT data from the phone to server.
Fixed, "Canvas drawing error" on Image DL.
Fixed, Imei changes patch bug.
Fixed, Old asic Sp unlock bug.
Fixed, ADL flashing timeout bug.
v3.4 revision 1.0, Public-Release
Major changes.
Introduced BLADE-X and BLADE-Z server system.
BLADE-Z will accept request for Card services (Registration,Update License, Sign Application, and soon)
BLADE-X will accept request for Nokia and BlackBerry services(BB MEP calc, DCT4RPL, DCT4PLUS SIMRPL, BB5SD, BB5SDAUTH, BB5SIMRPL, BB5NCKCALC and soon)
Servers are run in 4 hosts, priority could be selected from server list options.
Due to keep the server stability, older server will be removed and all older releases are obsolete.
- NK
Removed DCT4PLUS activation, all MXKEY users now can use DCT4PLUS unlock for limited number of phones.
Minor bug fixes.
All modules recompiled for new api compatibility.
removed NKC module, as DCT4PLUS activation are no longer required.
v3.3 revision 1.8+fix, Public-Release
Improved check for update routine.
Application will check new version on start up, if update found balloon tooltips will be displayed.
- NK
Fixed, DCT4 UFS flashing bug.
Fixed, BB5 UFS flash bug on rev 1.8.
fixed crash on startup due to "winusb.dll" not found.
v3.3 revision 1.8, Public-Release
Major changes for sign application routine to avoid server overload.
Improved First time activation process, will automaticaly updating license 0,1,2 and signing application.
- NK
Added, "Export as Text" option for VCARD backup
DCT4PLUS Direct Unlock implemented, for activation please use 'Nokia Unlocker' module.
BB5 Slow flash bug fixed.
Added module to the main setup.
v3.3 revision 1.7, Public-Release
Added, support for JAF BOX firmware 01.B4
Fixed, Runtime Error when multiple instance loaded
Small ui changes, added module icon in menu.
- NK
Added, BB5 Warranty Unlock function
Warranty Unlock will read unlock codes without direct write to the phone
Thus will make sure that the phone`s warranty is not void, a window will display the phone information,
unlock codes and intruction to enter the codes as well.
a template file as html doc located to "\modules\{3EBAF427-9F55-419F-8A75-385DFC651169}\codtemplate.htm".
you might edit this template as you want as long as keep the variables "%model%","%imei%","%provider%","%codes%" and %codes7%.
Added, New Loader/Protocol support for JAF BOX (RAPIDO,RAPU based phones)
Added, Multi-ReLock support
As requested by some user, now possible to LOCK the phone to multi-providers.
As the providers settings are maybe outdated, you might need to edit the providers list.
ini file setting located to "\modules\{3EBAF427-9F55-419F-8A75-385DFC651169}\providers.ini".
eg: 23430000=Virgin|United Kingdom
Added, Method1(old) and Method2(new) option for DCT4PLUS SIMLOCK Patch (will be used in future DCT4PLUS unlock updates)
Fast Flash routine will collect the list image files and process with one boot.
Previous changes(rev 1.6 Partial-Update)
Added, BB5 RAP3GV4 USB Flashing(eg. Nokia X3-00,X6-00)
Added, Dead Usb option for normal usb flashing
This will force software to use dead usb protocol without need to reconnect the Nokia USB ROM connection.
Many Minor bug fixes
- BB
Previous changes(rev 1.6 Partial-Update)
Added, manual checkbox to allow input IMEI+MEP manually(in case of usb connection problem).
Added, Engineering Screen Unlock code calc.

v3.3 revision 1.6, Public-Release
Added support for JAF BOX firmware 01.B2
- NK
Fixed, BB5 Certificate Write
This will fix, VARIANT or HWC write error because of obselete CERT data backup(RPL backup from other tool)
Improved, DCT4 boot problem (UFS)
Final fix for DCT4 flashing bug on some PCs.
Minor bug fixes
v3.3 revision 1.5, Public-Release
- NK
Improved, Universal BB5 NCK Reader.
Now should works for ALL BB5 phones except pure SL3.
for example: 5800 hash CAEEB.. with version 3x or 4x.
Fixed, Universal SUPERDONGLE Authorization Agent(SUPER SD Auth) specially for empty board(erased or bad PM)
Minor bug fixes
- BB
Added error handler when IMEI and MEP is empty, user could enter manualy.
v3.3 revision 1.4, Public-Release
- BB
Initial release of BlackBerry Unlocker added to full setup.
Works with all BlackBerry models,old and new MEP.
MEP database will be updated when new MEP available.
more features will be added at future release such as: Flashing, Repair.
- NK
Added, FREE Universal BB5 SUPERDONGLE Repair works for SLPA and SL20(RAP3Gv2,RAP3Gv3,RAPIDO)
Possible to Repair corrupted/erased SD Key which affect in SECURITY_TEST failed and WD enabled.
Button located to [IMEI & Security->IMEI rebuild->Repair SD]
Added, Universal SUPERDONGLE Authorization Agent to reflect the SD Repair feature
SUPER SD/SX4 Auth also works with Original SD and Custom SD made by other tools(Mt-Box,UB,Genie)
Repairing SD issue and Doing SX4 Auth has never been easier with MXKEY :)
Button located to [PM->SUPER SD Auth]
Added, Single SIMLOCK RPL backup for SL2/SL3 phones
Button located to [IMEI & Security->Simlock->Backup SIMLOCK RPL]
Added, Apply DSP Patch into PM upload option
PM308 from file will be patched instead phone`s PM.
Fixed, DCT4 bootloader bug
Minor bug fixes
v3.3 revision 1.3, Public-Release
- NK
Added, FREE Universal BB5 SIMLOCK RPL Maker works for SLPA and SL20(RAP3Gv2,RAP3Gv3,RAPIDO)
Possible to Rebuild/Repair,UNLOCK or LOCK to spesific provider.
Fixed, 'Invalid Security Block' bug
small GUI changes specially when using Style1
Fixed, BB5 APE flashing bug
Added, Manage SIM option
Used to Read or Write 'Simlock.bin' file to be used to make customized SIMLOCK RPL
Improved, read simlock.bin for SLPA phones.
Fixed, HWC write bug
Minor bug fixes
v3.3 revision 1.2, Public-Release
Improved, interface communication routine (more stable)
Fixed, socket communication for some pc(AMD bug?)
Fixed, failed re-load module
Fixed, registration bug
- NK
Fixed, NFP extract
Fixed, WD2 flashing (UFS)
Minor bug fixes
v3.3 revision 1.1, Public-Release
Some changes with Check updates mechanism
- NK
Added, FREE Universal BB5 NCK calc work for SLPA and SL20(including hash 9DDBFCFE6E73CED7D8C6268C8EB85723)
Added, BB5 Certificate Validation
Usefull to identify SECURITY_TEST problem specially if SUPERDONGLE is valid
Button located to [Phone Test->Various]
Added, FREE BB5 Certificate Recovery to reflect the CERT validation features
This will make restore CCC,HWC or VARIANT by product code from server database.
Button located to [IMEI & Security->IMEI rebuild->Recover CERT]
Minor bug fixes
v3.3 revision 1.0, Public-Release
#Major update
Improved, Application Signing system
~ client time will be checked before signatures generation to avoid duplicate error request.
~ date-time issue bug on server side fixed.
~ no messages will be displayed if signatures invalid when working in FREE module(siemens).
Added, Server status info on server check
~ ping check removed, so there will be no more firewall problem.
Redesigned, Modules Manager page
~ This will make the posibility to update single module at future updates.
Check for daily update re-enabled.
~ application will check update once a day and will be displayed in tooltips when new update found.
- NK
Added, BB5 RAPIDO STN8815(N96) usb flashing(Dead Usb also possible)
Fixed, DCT4PLUS ASIC 0x3168 patch unlock and imei changes (2630 v52.70, 2680 v06,80)
Fixed, BB5 Flashing (partitioning bug)
Fixed, Fast flashing bug when using JAF box.
Added, PM308,1 backup on 'BB5 SW downgrade fix'
Other modules recompiled for major api changes.
v3.2 revision 5.6, Public-Release
#Minor update
Improved, Application Signing system
~ Before signing request, sw will set system datetime from ntp server if datetime is not correct.
~ Note: Make sure you have set you computer date,time.
~ The application signing system will not work on the computer with invalid date time !
Removed, Ping on server check
- NK
Added, Detailed information for each 'Quick Fix' function.
v3.2 revision 5.5, Private-Release
#Minor update
Added, Application Signing system
~ This is new application security improvement
~ Application will check it signatures when needed, this will check unique card id, application version, and signature datetime validity
~ New created signature will be valid for next 6 month after signing
~ It means that after new update, you might need to 'Sign Application' if the current signature doesnt meet the requirement.
Fixed, Windows Vista SP2 compatibility.
- NK
Added, BB5 RAPU USB Flashing(spesially for new Flash)
Added, Dynamic Camera Configuration upload
~ This features located at 'Phone Test->Camera'
Added, TIKU CDMA Product Data (PREPAID_CS_TYPE) fix using server calculation
~ This features will consume credit, how much it will take will be displayed once you logged in using 'Dongle Id'
~ The Service tag is 'DCT4 IMEI+PRODUCT DATA'
Added, BB5 RAP3NAND Erase User Area in the 'Quick Fix' tab
~ Usefull to fix BLANK/BLINK or doesnt switch on problem.
Added, BB5 PA_SL identification from PASUBTOC
Added, New CS type info for newer phone
Improved, FAST flash routine
~ SW will keep in flash mode when processing image file, means that it will skip boot and loader upload if config from each file is similiar.
Improved, BB5 RPL write
~ SIMLOCK_DATA will be uploaded after NPC write, since new BB5 phone will only accept SIMLOCK_DATA if NPC is valid !
Fixed, BB5 'Security block invalid' bug

v3.2 revision 5.4, Public-Release
#Minor update
Refixed, Windows Vista & Windows 7 compatibility.
- NK
Added, BB5 'Restore SIMLOCK' from '*SIMLOCK.back' or '*.PM' or '*.RPL'
~ The button located at 'IMEI & Security'->'IMEI Rebuild'->'Restore SIMLOCK'
Fixed, DCT4 unknown flash bug(BUS check)
Fixed, DCT4 CS repair when phone could not go into LOCAL MODE
Refixed, DCT4 bootstrap for UFS interface
Fake Progressbar for BB5 flash erase reenabled.
Recompiled PK83.bin for new api compatibility
v3.2 revision 5.3, Public-Release
#Minor update
Fixed, Windows Vista & Windows 7 compatibility.
- NK
Fixed, BB5 RAPU-YAMA phones flashing
Fixed, DCT4 flashing bug(DEAD after flash/unlock)
Fixed, loading module sometimes failed
Improved, Module stability
v3.2 revision 5.2, Public-Release
#Minor update
- NK
Fixed, WD2(PPM) flashing using UFS
v3.2 revision 5.1, Private-Release
#Minor update
License #0 needs to be activated(activation is FREE) to load module.
- NK
Added, DCT4 ASIC 0x3168 standalone 'on the fly' patch for SP UNLOCK and Imei Changes
~ This feature need License #1 to be activated(activation is FREE)
Added, Low Level format before CNT write
Fixed, Image Download 'in background' hang
BB5 Secure Storage Validity now support PA_SL3(unlocked) phones
Many Minor bug fixed.
v3.2 revision 5.0, Public-Release
#Minor update
Added, Dongle License status Info in the Dongle Maintenance GroupBox
Added, Update License Button
~ Used to activated custom license of the card which will be used for spesific feature/module
To preserve bandwidth, Refill Button will be enabled if Counter < 50 %
- NK
Added, BB5 PA_SL2 NCK Calculator using security server
~ This will unlock most PA_SL2 phones with protected PM308:1
~ This feature need License #1 to be activated(activation is FREE)
Added, BB5 PA_SL2 Counter Reset
Added, SAFE Erase routine while using 'Custom Flash Erase' on the 'Advance Page'
~ SAFE Erase will Protect PM Data from erase specially when doing 'Erase WHOLE flash'.
~ Usefull for recovering a DEAD phone without loosing SIMLOCK DATA
Fixed, BB5 Secure Storage Validity for PA_SL3 phones
Added, Automatic NPC backup while doing 'Skip SX4 Auth' and 'BB5 SW Downgrade Fix'
Minor bug fixed.
v3.2 revision 4.1, Public-Release
#Minor update
- NK
Fixed, PMM auth bug(application closed)
v3.2 revision 4.0, Public-Release
#Minor update
Binary will no more run inside Virtual Machine
Added, Intrusion detection against code framework manipulation
v3.2 revision 3.2, Public-Release
#Minor update
Minor bugfix
- NK
JAF BOX stability and compatibility improved
~ This will also fix problem with flash dead,random stops/hang when using JAF BOX
Added, Bus Check routine for 'Nokia USB ROM'
~ Usefull for 'NORMAL' phones which could not connect to USB due to phone lock or something else
~ After sucessfull flash bus check phone will reboot to local mode, so you can do fbus operation such as: reset user code/factory reset
Added, Wlan settings in RF/BB tab
Fixed, Keypad test start bug
Fixed, Sometimes hang after flash erase
Wlan settings also included when backing up ProgData
v3.2 revision 3.1, Private-Release
#Minor update
- Application core module loader routine changed
Private version released to test windows version compatibility
v3.2 revision 3.0, Public-Release
#Minor update
Fixed, Random crash on rev 2.2
Added, UI Style option
- NK
Added, BB5 SW Downgrade in 'Quick Fix'
~ Use this option to patch PM308,1 Downgrade subblock without full flashing.
~ Usefull for phones which 'DEAD' after PM308 write or RPL backup write
Added, Skip SX4 Auth Option on 'PM options'.
~ PM options is button with '>' in the PM tab
Fixed, Multiple Content selection form vpl files.
Fixed, DCT4 Manual Logger error if no service selected
Phones image background color now changed to be match with variant Color on market selection
v3.2 revision 2.2, Public-Release
#Patch update
- NK
Fixed, DCT4 Slow Flashing when using JAF interface.
v3.2 revision 2.1, Public-Release
#Patch update
- NK
Fixed, UEM req timeout bug on previous release (rev2.0)
v3.2 revision 2.0, Public-Release
#Minor update
MTBOX boot fixed.
Regular minor bugfix
- NK
Added, BB5 Secure Storage Validation on 'Scan'
; This will validate if SIMLOCK or SUPERDONGLE_KEY is corrupt or not.
; Usefull to determine WD timer or CS issue for BB5 phones.
; Phone with SUPERDONGLE_KEY corrupted, will affect in SX4 auth unsuccessfull or WD problem.
; Phone with SIMLOCK corrupted, will end with CS problem.
Added, SIMLOCK2 phones detection (with PM308 protected/read only)
; SIMLOCK2 ('SL2' or 'SIMLOCK2' firmware) phones RPL backup will not work with this phone because of SUPERDONGLE_KEY cannot be restored.
Added, ASIC_ID(RAP/OMAP) chip name information
Added, flash size information
Fixed, BB5 'get address'
Fixed, BB5PLUS RPL backup read/write
; Restoring from RPL backup after EEPROM will also restore SUPERDONGLE_KEY so phone will not have WD timer issue.
Forced to change phone mode to TEST_MODE when doing factory reset and Self Test.
Added, DCT4 Manual Logger
v3.2 revision 1.4, Private-Release
#Patch update
Improved, Scard api (spesially for ccid reader compatibility)
- NK
Improved, BB5 RPL upload/write
;Specially for phone which support SL2+SL3 simlock, by default old protocol will be used and it its failed new protocol automatically be used.
v3.2 revision 1.3, Public-Release
#Patch update
Improved, privilege adjustment
; hopefully will solve not starts problem ?!
; So far tested with XP XP2(OEM), Vista Ultimate(NOT OEM), Vista Ultimate SP1 (OEM)
- NK
BB5 SIMLOCK SL3 Structure upload from RPL backup added.
v3.2 revision 1.2, Public-Release
#Patch update
- NK
Added, Support for BB5 SIMLOCK SL3 Structure upload
Fixed, WD2 CBUS Loader parse for correct BT flashing
v3.2 revision 1.1, Public-Release
#Patch update
- NK
Fixed, Online Logger not shown when 'Imei changes' disabled.
Fixed, BB5 Restore Imei+Write RPL
v3.2 revision 1.0, Public-Release
#Major Update
Added, UI Localization
;languages selectable from 'quote' menu
;locale files stored to 'locale\*.xml' directory
;added, Chinese (Simplified) language for test (translated using Google Translate, so am sure its not 100% correct), unicode enabled.
;full localization might be added at the future
Added, balloon Tips stored to locale files
Fixed, Application not opened in some PC caused by not previlege account (specially XP SP3 and Vista SP1)
List of loaded drivers version are now displayed at start up
Server list are now selectable
Added, posibility to play custom sound on error/finish
Added, Card Serial Port drivers
;allow to use serial(comport) based reader for the card
Added, 'Nokia USB ROM' virtual device to be used for BB5 USB DEAD PHONE flashing
Fixed, Connect<->Disconnect bug (appl. crash)
Small change in UI
Changed, PK-83 binary to support new drivers
Fixed, nkser(6088,6066,7088) driver handling when flashing stop at the middle of process
- NK
Added, BB5 USB Flashing
; Supported loaders
RAP3Gv2+APE(external loader),
; Version check mechanism is possible when flashing NON DEAD phone
; LANGUAGE only option also posible for fast and safe phone update
Added, Multiple version of flash update/loaders
; selectable from 'quote' menu 'Config->Directory'
; Newer phones might need newer flash loader, by default is ''
Fixed, BB5PLUS RAPIDO SL2 spunlock
Added, Pinout image for UFC based cable (press small button near phone image)
; pinout images are stored at 'data\image\pinout' directory
Multiple Data Package directory are now possible (usefull when working with Multi-OS PC)
Added, 'Force WHOLE flash' on erase(Advance Page) to allow RAP flash full erase (Last chance, if NPC reset still not work to revive DEAD/BLINK Phone)
Added, PP file read
Added, Phonebook/Contacts backup and restore (Phone Settings->Selection:User Settings)
Removed, Host setting (please use 'select server' from Main|Server List page)
Siemens module recompiled for new api compatibility
v3.2 final bug-fixed, Public-Release
- NK
DCT4 RPL server host changed, to fix timeout in some country
Improved, DCT4PLUS "on the fly" unlock patch and imei patch
Added, AMS loader v. to the installer
minor bug fixes
Fixed, Active-X initialization to fix rx no respond in some pc
v3.2 FINAL, Public-Release
Improved Server communication
Added, Support area access
Goto Options->Server->Server List (make selection on 'Support') then Goto Support button will enabled
- NK
Added, Standalone BB5PLUS SL2 No TP Unlocker
PM Auth checkbox also added for some phones which need SUPERDONGLE to be authorized while writing PM120 and PM308
Added, DCT4PLUS "on the fly" imei changes
Improved, DCT4PLUS "on the fly" unlock patch (+new security also supported)
Improved, PM read and write (if field not checked will be skipped)
To Open PM, you can now Drag And Drop PM file to listbox
Fixed, BB5 loaders bug for new phones
Fixed, image download
Fixed, BB5 auto set RX2
Fixed, DCT4PLUS Online Logger bug
minor bug fixes
Fixed, PK-83 binary for MXKEY REV 2.0 compatibility
Siemens FREE module recompiled for new api & library compatibility.
v3.1 Beta16 , Public-Release
Removed old card protocol(MXKEY REV 1.X/ROCKEY6), for this release only MXKEY REV 2.X card supported
- NK
Fixed, loader issue
Added, single phones setting (VPP,RX2, Fast checkbox now saved to config for each phone)
Added, BB5 No TP Unlocker, Dejan RAP3GV2 unlocker removed.
supported HASH:
supported ROM:
Fixed, `highlight market` bug
minor bug fixes
Improved, communication. Dead phones full flashing now working

v3.0 Beta15 RC, Public-Release
help file updated
minor bug fixes
- NK
DCTL/LINDA fully implemented with Custom erase to fix old 9210i CS problem
Fixed, Image DL (server communication protocol changed)
Fixed, BB5 custom certificate backup
Fixed, New PP files manual upload
Improved, SUPERDONGLE auth (show the detailed error msg)
Improved, User code reset for BB5 phones
minor bug fixes
v3.0 Beta14 RC, Public-Release
- HW
MXKEY LiTE dongle firmware version 00.14 released
(Improvement dongle check, to avoid CARD BLOCKED)
Please update using SW build beta14 only.
- NK
Added RAP NAND option in manual erase
Added, CRC check before flashing if declared in definition files(BB5)
Image DL in background mode improved (CRC check)
minor bug fixes
v3.0 Beta13 RC, Public-Release
Fixed, MXKEY (ROCKEY6) dongle detection.
- NK
Image DL in background mode now possible
Added 'skip Restore' patch for DCT4PLUS unlock
Fixed, PPM2 image parsing
minor bug fixes
Fixed, registration popup
Added, PK-83 Dongle emulation (you need to install CCS3 Tool first before it works)
v3.0 Beta12 RC, Public-Release
Fixed, dongle registration popup
- NK
DCT3 fully implemented
Fixed, BB5 flash for new phones
some improvement and minor bug fixes
Fixed, 6066/88 flash
v3.0 Beta11 RC, Public-Release
Improved, dongle communication routine
Fixed, Self Update
- NK
MTBOX DCT4 flash supported.
Improved, DCT4&BB5 Online Logger
Improved, RX2 auto enabled
Added, Simple hint "detailed" BB selftests
Added, DCT4PLUS (asic type 11) phone UEM read
Fixed, PP extract for DP2.0 phones
Added, Forced RX queue for better handle of dead phone flashing
Fixed, Emergency mode Image DL enabled
Added, Latest mxLogger client(v1.4b) in setup

v3.0 Beta10a RC, Public-Release
- NK
Fixed, BB5 Online Logger
Fixed, BB5 RAP NAND (with RX2 enabled) flashing
Added, Full BB5 RPL backup for new phone (SIMLOCK+SIMLOCK_KEY,WMDRM_PD)
Added, BB5 user code reset(blocked counter) and status, will not lose user data.
Improved DCT4 Asic 11 Online Logger (Imei challenge issue)
Added, auto create folder option on configuration window
Fixed, DP2.0 folder listing
v3.0 Beta10 RC, Public-Release
Added, Support forum and homepage menu (News)
- NK
Added, Image DL button (direct image download from support based on product code, currently for BB5 products only !)
Implemented, RX2 loader support (UFS FW v28 only !!!).
Implemented, Show detailed options in configuration window
Added, Auto select Gen when "Scan" product in configuration window
Added, Auto set RX2 for BB5 in configuration window
Added, market highlight for easy market choise in configuration window
Added, Auto set RX2 for BB5 in configuration window
Added, BB5 CNT page size detection for auto CNT convertion
Added, Skip if not empty option
Added, Manual PP write file
Added, BB5 MMC and SD card content flashing
Added, BB5 verify NPC option on write RPL
Added, BB5 skip spesific section on write RPL
Added, BB5 skip (certificate) erase option on write RPL
Added, BB5 Reset NPC
Added, BB5 online logger client (instant !!!)
Added, BB5 RPL write on RX2 enabled phones
Fixed, DCT4 MM flash handling
Added, DCT4 imei OTP/UEM read via FBUS for non CUI phones.
Added, Latest DCT4PLUS ASIC11 sp unlock patch method(Patch on the fly)
Added, DCT4PLUS ASIC11 online logger client
Added, extended GSM/WCDMA band type set
Improved, BB5 (RAP/CMT) NAND flash handling
Improved, Flash chip info. device page size and type now displayed.
Improved, DCT4PLUS ASIC11 ask read + manual IMEI/ESN input when UEM damaged
Changed, 'Browse' to Directory setting in configuration window
Improved, QCOM protocol for faster flashing
Improved, Dead phone flashing handle
Added, Phone code read for 6088,7088 phone
Added, Image DL button (direct image download from support)
Fixed, Userarea backup/restore
v3.0 Beta9 RC, Public-Release
Improved, Check for updates (more control to updates)
Implemented, Online News(add RSS feeds and forum news)
Implemented, Options to enabled/disabled spesific module
- NK
MTBOX Partially supported(FBUS function)
Improved, DCT4 boot
Improved, Auto phone detection (always "Scan phone" or "Bus check" before any operation!)
Improved, CDMA phones compatibility
Improved, Keyboard test map (now possible to test all keys including communicator series)
Added, Various tests (Camera,IR,MMC,SIM,USB)
Added, Band & System mode control
Added, CDMA NVD (Pri) management (under Phone Settings tab)
Added, CDMA CS product type read
Added, RF/BB PM backup/restore
Added, BB5 CNT 128 K convertion
Added, COMBOFLASH detection
Fixed, DCT4 write RPL (add DATA1/2 only options)
Fixed, BB5 Custom erase
Fixed, DCT4 APE flash(better error handler)
Improved, DCT4 SP unlock routine
Improved, CDMA tuning (SET,CAL and PANEL data are now readed and written correctly)
Redesigned, PMM, Phone Settings, CDMA tune & Quick Fix page(under services tab)
Reconstructed, BB5 'Dejan K' unlocker
Introduced, DCT4 read flash works for Asic type 2 phones only (check 'Phoenix format' for writable output) - just for test !
Introduced, DCT4 Non Volatile Data(NVD) management (in development, not finished yet)
Added, ARMPRG/Bootloader manual select to handle 'dead' phones
Fixed, Invalid hex error while flashing
Improved, Phone explorer routine and ui
v3.0 Beta8, Public-Release
Fixed, "Check For Updates" bug
Fixed, UFS baud problem (DCT4 erase issue?)
- NK
Fixed, DCT4PLUS non patch unlock (1600,1110i)
Added, Automatically save RPL backup on "Bus Check" for DCT4
Fixed, DCT4 Erase ! (hopefully fixes this common issue, tested on 3 different PCs Intel/AMD based)
Fixed, Incorrect registration popup
v3.0 Beta7, Public-Release.
Whats NEW:
- [MAIN]
Added, "Dont Show This Again" checkbox of UFS FW update confirmation dialog
Improved, Check For update routine will allow to update module separately on future updates
- [CCS]
Added, New Module CCS "Foxconn PST"(NK CDMA ODM QUALCOMM)
* Flashing using HEX/ CBB (Bundle Files)
* Normal Flashing or Emergency Mode (*+5+POWER) supported
* Flashing Emulation
* Security Code Read/Write
* SPC read/write
* LCD contrast Read/Write
* Reset File System (PRI)
* Userdata Backup/Restore
* EFS File Explorer
* And soon
- [VCOM]
Revised, VCOM module
- [NK]
Added, Patch SIMLOCK flashing option + SKip SW patch on Init Simlock (1650 bug)
Improved, Flash erase routine
Added, UEM WD test
Added, Verify UEM option on DCT4 RPL write
- [SIEM]
Fixed, SGOLD baudrate issue
and other minor.
Version Information:
mobileEx.exe, version:
mobileEx.dll, version:
ccs.dll, library version:, module version: 1.00
nk.dll, library version:, module version: 1.00 7
siem.dll, library version:, module version: 1.01
vcom.dll, library version:, module version: 1.02
Required Dongle revision:
MXKEY, FW ver: 00.11
MXKEY LiTE, FW ver: 00.13
*) = BETA
v3.0 Beta6, Public-Release.
Whats NEW:
- JAF BOX fully supported.
- Added, Flash Emulation mode(to verify flash files, will not write to the phone)
- Added, Support for BB5 RAPIDO phones(RAP NAND flash handle)
- Added, Easy IMEI restore(Automaticaly search for backup from '\data\backup\RPL\' folder if available)
- Added, DCT4 Mass Memory device(NAND) flashing support
- Added, UFS FW V 2.8 update dialog if needed(required for RAPIDO phones handle)
- Added, UFS Driver update dialog if 'NO CONNECTION'
- Fixed, N-GAGE Adsp flashing bug(CRC error=Contact retailer).
- Fixed, DCT4 Online IMEI Logger (ESN issues)
- Fixed, WD2 boot (increasing boot timeout)
- Fixed, User Code changes
- Fixed, BT MCM image upload
- Fixed, Erase whole flash routine
- Fixed, Reset DATA1 (WD2 bug)
- Fixed, TIKU flashing with huge image header stoped
- Fixed, DCT4 UCP 128k convertion(2865 issue)
- Fixed, DCT4 PLUS SpUnlock bug on old models
- Removed, Joker module from installer
- Added, SIEMENS Tool(EGOLD, SGOLD) module.
and other minor.
MXKEY, FW ver: 00.11
MXKEY LiTE, FW ver: 00.13
v3.0 Beta5, Public-Release.
Whats NEW:
New MXKEY LiTE firmware introduced, FW ver: 00.13
- Added, JAF FBUS protocol (Flashing bus not implemented yet)
- Added, Component version info on load.
- Fixed, Erase whole flash bug on multi flash chip phones.
- Fixed, BT flush after firmware update.
- Fixed, BB5RPL decryption fail when write RPL.
- Added, Product code auto selection on "Scan"
and other minor.
for MXKEY LiTE dongle user, you need to "Update FW" first.
v3.0 Beta4, Public-Release.
Whats NEW:
- re-constructed & improved, DCT4PLUS unlock patch
- RELOCK now possible, also support 1200/1208 all version(click "No" when you asked to restore flash block)
- re-constructed, DCT4 CNT 64->128k convertion.
- Added, support for new product profile type(BB5,DCT4PLUS).
- Fixed, crash (application closed) on VCOM module.
- Improved, FBUS scan (will change phone mode if needed)
- Fixed, PM write function (BB5 RF & BB parameters bug)
and other minor.
v3.0 Beta3, Public-Release.
Whats NEW:
- re-constructed, CDMA Tuning.
- re-constructed, Quick repair page (BT repair, LCD reset, etc).
- improved, Online Updater.
- added, CDMA NFP folder to model selection.
and other minor.
v3.0 Beta2, Public-Release.
Whats NEW:
Almost all elements are new, the most important part of this eta was that it was finally recoded from scratch.
Not implemented yet:
- JAF interface support
- DCT3/L function
- DCT4PLUS unlock patch
- BB5 generic unlock
- and some other.
This brand new exe will supports MXKEY and MXKEY LiTE
What is MXKEY LiTE?
its new dongle for mobileEx, SmartCard based.
What about future support about MXKEY?
We released MXKEY LiTE for costumer satisfaction.
MXKEY LiTE will be cheaper, and thats why we call it "Lite".
MXKEY will be fully supported as MXKEY LiTE, note that there was no differences between MXKEY and the LiTE version.
Unimplemented features will be added as soon as possible.
while that, you could also request feature
MXKEY LiTE quick driver instalation:
!!! Do NOT install Smartcard reader before installing drivers.
goto "C:\mobileEx\3.0\data\drivers" then click "instdrv.exe" to install the Reader driver. This is PCSC ISO7816 compatible reader, you could also use any PCSC compatible reader to work with the card.
v3.0 Beta, Pre-Release.
Published to beta-testers.

How to update:
Open mobileEx.exe, Click "Synchronize Files" and Click "Update" when popup dialog showed.

Latest news

MXKEY v3.5 revision 2.7, Public-Release

Published: Wed, 3 Dec 2013 02:12:33 GMT


v3.5 revision 2.7, Public-Release
License informations updated.
NOKIA module updated to version 2.7
minor bugfix and improvements

Desktop - Mobile