v3.5 revision 2.6, Public-Release NOKIA module updated to version 2.

6 added: WP8 support Refurbish Flashing support by USB Recovery(Dead) Flashing support by USB added: Service Utility for WP8 Factory Reset without flashing Read/Write Producttion Data(Product Code,PSN,HW version, etc ..) )* Read/Write WP8 NV items )* Read/Write WP8 CERTIFICATE(NPC,CCC,HWC,RDC) )* Write CoverColor )* added: SuperDongle Auth for WP8 phones SuperDongle Auth is required to write important/secure data bugfixed: RAPUV2 security repair function revised internal fire module to enable download firmware package by product co de added latest flash update v 12.46.000.1 to setup minor bugfix )* Write function require SuperDongle Auth SL3 Logger updated to version 2.6 minor bugfix and improvements FIRE module updated to version 1.5 minor bugfix and improvements -----------------------------------v3.5 revision 2.5, Public-Release HTI ONLINE SERVICES module updated to version 2.1 [IPHONE_CHECK] added dialog message on spesific events(license expired, blocke d ...) [IPHONE_FU] countries and carriers are now sorted improvements to the current systems NOKIA module updated to version 2.5 added: XG223 phones(new Asha series) support by USB (mode: Nokia Suite) Normal USB(Nokia Suite) and DEAD USB(Nokia USB ROM) flashing supported Legacy RPL(IMEI,CCC,HWC,SIMLOCK) backup/restore supported added latest flash update v 12.33.000.3 to setup minor bugfix FIRE module updated to version 1.4 added: Nokia schematics and SM download menu Common changes: improved internal download task routine(random stop bugfix) minor bugfix and improvements -----------------------------------v3.5 revision 2.4, Public-Release HTI Misc Tool is now HTI ONLINE SERVICES HTI ONLINE SERVICES module updated to version 2.0 added: Imei validator for iPhone unlock

added: Supported carriers filtered by country selection bugfixed: Was still not running on some customized Windows XP, should be fixed now. added: Read IMEI from iPhone by Usb(iTunes must be installed). GUI improvements Nokia SL3 Logger updated to version 2.4 added: Multiple service support Allows to upload job for CHEAP, NORMAL or FAST server BlackBerry module updated to version 1.8 Full Software Parts parsed during read. Implemented DM Protocol, now you can read Blackberry CDMA info (including MSL) By Normal Usb Connection. MEP list updated(total 274 MEPs supported). Latest Nokia module changes: added: Lumia SIM Unlock by AMSS patch Common changes: bugfixed: HTI drivers conflict with android adb devices. improved sync routine to avoid main exe failed to load if sync fails. -----------------------------------v3.5 revision 2.3, Public-Release Nokia module updated to version 2.3 added: BB5 security repair function by USB for Meego/HARMATTAN device (N9-00, RM-696) Works standalone with HTI connected Required HTI FW version 00.50 or later This function includes: SX4 AUTH SD REPAIR SL3 BF HASH CALC SL3 NCK CALC Full PM backup/restore for Meego/HARMATTAN device required phone SX4 Au th (No, its not readonly) added: Full flashing support for Meego/HARMATTAN device (including EMMC) added: Quick Fix for XGOLD2 Fix CS/Recover SIMLOCK This will recover SIMLOCK table caused by Reset LOCK counter added: Latest flash Update version 12.14.001.4 bugfixed: Reset Lock counter on XGOLD213 causing SIMLOCK corrupted minor bug fixed SL3 Logger updated to version 2.3 added: Support for Meego/HARMATTAN device (N9-00, RM-696) by USB bugfixed: Reset Lock counter on XGOLD213 causing SIMLOCK corrupted minor bug fixed SL3 Bruteforce added: New configuration for oclHashcat-lite-0.10 -----------------------------------v3.5 revision 2.2, Public-Release Nokia module updated to version 2.2 added: Qualcomm DLOAD flashing protocol for WP7 devices (Lumia) added: Qualcomm eMMC Tool Usefull to work with lumia with unlocked bootloader (Qualcomm DLOAD) allows to analyze disk & partitions inside lumia eMMC chip allows to export / import single partitions for firmware hacking allows to write custom WP7 OS for lumia allows to restore OSBL to default (Nokia DLOAD) allows to edit PMM values (Product code, etc) added: Lumia 710 bootloader unlock Flashing OSBL with Qualcomm DLOAD enabled, allows to root/jailbreak lum

ia With jailbreaked WP7 allows to install app (*.xap) from browser supported/available package for now: RM-803 (Lumia 710) HowTo: - Extract "RM-803_Qualcomm_DLOAD.z" to Product directory "\Products\RM -803" Choose "Nokia 710 RM-803 Qualcomm DLOAD" on market item Flash After flashing, change phone mode to "OSBL" You will see "Phone detected in "Qualcomm DLOAD" mode, please use eM MC Tool !" and eMMC Tool show up NOTE: a Mass storage device( Qualcomm MMC Storage USB Device ) will be detected by Windows and will ask if you want to format, DO NOT ATTEMPT TO FORMAT, click "Cancel" Install drivers for "Qualcomm CDMA Technologies MSM" with driver fr om directory "data\drivers\qcusb" - Download "Full Unlocked" custom OS from here "http://goo.gl/tlzZF" - Click "Disk Info" to identify connected phone and partitions list - Click "Write OS", browse to the custom OS file (*.nb) - Click "Restart" to restart phone to Normal mode - To restore OSBL back to Nokia DLOAD, use "Restore OSBL" def\dcc list updated minor bug fixed SL3 Logger updated to version 2.2 minor bug fixed HTI Misc Tool updated to version 1.3 minor bug fixed -----------------------------------v3.5 revision 2.1, Public-Release Main/Library changes: added: Smartcard list on USB Device List window Usefull to diagnostic USB smartcard reader minor bug fixed Nokia module updated to version 2.1 added: Flashing support for Nokia 801T added: Flashing support for Lumia 900 added: WP7 modemsw file group for easy flashing skip added: MDM_KEYS certificate for backup/restore RPL added: Latest flash Update version 12.02.000.2 improved: FBUS protocol for symbian belle minor bug fixed SL3 Logger updated to version 2.1 ui: hti type visualization minor bug fixed Fire Agent updated to version 1.3 added: Store page(beta) HTI Misc Tool updated to version 1.2 ui: hti type visualization added: active carrier info (server side) added: auto remember input (drop down cache) minor bug fixed -----------------------------------v3.5 revision 2.0, Public-Release Nokia module updated to version 2.0 -

added: MCU certificate check on Bus check (if any) bugfixed: "Performing Handshake" hang for some reason bugfixed: ProductProfile extraction of dcp files minor bug fixed SL3 Logger updated to version 2.0 improved usb handling minor bug fixed Fire Agent updated to version 1.2 added: Sync product config files on "Reload Products" will synchronize product description and images HTI Misc Tool updated to version 1.1 minor bug fixed -----------------------------------v3.5 revision 1.9, Public-Release changes: - Main added: Option to disable USB host warning message (Options->General Settings, check "Do not show USB HCD Error Messages") added: USB Device List window (Sys Menu->USB Device List) Usefull to diagnostic USB Host and Hub capabilities - Nokia Tool added: XGold 213/XMM2130 hash reading by USB implemented to regular nokia module and SL3 Logger added: XGold 213/XMM2130 IMEI,CCC,HWC and SIMLOCK backup/restore added: XGold 213/XMM2130 rpl recovery with HTI (Services->IMEI & Security->IMEI rebuild, check "Dead Mode(Recovery)") added: XGold 101,XGold 110 hash reading with HTI implemented to regular nokia module and SL3 Logger added: XGold 101,XGold 110 rpl recovery with HTI (Services->IMEI & Security->IME I rebuild, check "Dead Mode(Recovery)") added: WP7 host drivers to "data\drivers\nokia\wp\WMZuneSerUSB.inf" used to working with Lumia(no need to install Zune) bugfix: FireAgent hung on loading empty packages improved: Dead Mode WP7 flashing routine added: Latest flash update version "11.50.000.1" -----------------------------------v3.5 revision 1.8, Public-Release changes: - Nokia Tool added: support for Windows Phone 7 platform allow normal flashing (Refurbish) and dead mode flashing(Recovery) for recovery please select "Nokia DLOAD (Recovery) in connection list the drivers located to "data\drivers\nokia\wp" added: esco file handling bugfix: FBUS protocol bug with Symbian Belle updated sl3bf to version 3.7 added: support for oclHashcat-lite-0.09 minor bug fixed + improvements added: HTI OTP ID displayed on connect added: flash update version "11.48.000.1" bugfix: Rapido Usb "FUR Cold Boot" bug bugfix: BB5 Usb FUR control bug bugfix: Write local RFBB definitions(*.pm) bug

- BlackBerry Tool added: unlock by PRD function allow to select PRD instead of MEP (usefull for MEP-LOADED or hidden MEP) for unlock calc minor bugfix added to setup HTI Misc Tool (htic.exe) for now, it has features: Imei analyst: Used to analysis IMEI/TAC number iPhone/iPad Serial number analysis -----------------------------------v3.5 revision 1.7, Public-Release changes: - Nokia Tool added: SL3 RSA Signature verify on "Read Hash", sha readed by MX now is 100% valid Disk usage info on fire.exe improvements: file version indentification for installed data package phone images definitions in now synched with fire tool pinout images updated bugfix: rapido usb bootstrap causing BSOD xgold not booting [sl3bf], oclHashcat 00.08 speed not shown hti drivers updated updated sl3u to version 1.7 added: Master sp code verification on calculate cod improved: online logger function updated sl3bf to version 3.6 added: Master sp code verification after bf task finished bugfix: oclHashcat-lite-0.08 with "--outfile-format=1" problem and minor bugs fixed -----------------------------------v3.5 revision 1.6, Public-Release changes: - MAIN introduced HTI Firmware version 00.49 new in firmware: added: boot mode switch function improved: serial and flash bus communication routine added: dct4 product data calc algorithm added: broadcom sec.repair algorithm please Update HTI by using "Update HTI" button ! uistyle updated HTI identity now displayed on Dongle Maintenance HTI serial displayed on connection tab added: support for HTI PLUS interface - Nokia Tool bugfixed: NCK send for PA_SIMLOC30 (error 0x1) added: HTI Standalone function for DCT4 PRODUCT/BT/WLAN DATA fix.

required HTI FW version 00.49 or later added: BB5 security repair function by USB for RAP3Gv4, RAPUv2, BROADCOM(BCM2135 1) added: BB5 security repair function by HTI for RAPUv2 improved: BB5 security repair function on all supported ASIC Note for BB5 security repair function: Works standalone with HTI connected Required HTI FW version 00.49 or later This function includes: FULL RPL BACKUP SX4AUTH (PA_SL/PA_SL2/PA_SL3/PA_SIMLOC30) SD REPAIR (PA_SL/PA_SL2/PA_SL3/PA_SIMLOC30) SIMLOCK REPAIR (PA_SL/PA_SL2) NCK CALC (PA_SL/PA_SL2) SL3 BF HASH CALC (PA_SL3/PA_SIMLOC30) SL3 NCK CALC (PA_SL3/PA_SIMLOC30, 15 digit NCK) Phones supported by HTI: Any RAPUv1, RAPUv2, RAP3Gv3, RAP3Gv4 and RAPIDO phones. Phones supported by USB: Any RAPUv1, RAPUv2, RAP3Gv4, RAPIDO and BROADCOM(BCM21351) phones. Supported ROOT KEY HASH: ALL HASH supported ! sl3bf(Local SL3 Bruteforce) module changes added: support for oclHashcat-lite-0.08 sl3u(SL3 Logger) module changes added: Online Logger page and more minor bug fixed ............... - SL3 Logger/Unlocker (sl3u.exe) added: support for RAP3Gv4, RAPUv2, BROADCOM(BCM21351) by USB added: Online Logger tab used to request unlock codes by imei+hash (.sha files) How to: 1. Register HTI to use this service (choose your password here !) 2. Top up HTI credit to be able to use this service 3. Login using password choosen when registration 4. Upload Hash, select sha or log files 5. Wait for few minutes (As displayed on waiting time) 6. Job Status are displayed once you "Upload Hash" and everytime you "Lo gin" use "Login" button, to check or request codes for uploaded hash(if an y) 7. When status is "finished", right click on individual hash and select one of menues Abort/Cancel Job: will cancel job and refund credit (only available w hen job is "pending") Send Codes to the phone: Send codes directly to the phone Save Codes to text: Save codes to text file Copy Codes to clipboard: Copy codes to clipboard -----------------------------------v3.5 revision 1.5, Public-Release changes: - MAIN minor bug fixed

added: 2 more uistyle (Style4, Style5) - Nokia Tool added: "Extended Scan" option in config if ticked, will display nck length, dcc (if any), MMC pass (if any), Mast er code(DCT4) and user code on scan added: "Clear cached product data" in config used to clear previous BB5 secure data cache used for BB5 security repair added: marque progressbar on usb pooling added: flash loader version 11.34.000.2 to setup added: 'HTI Auto BSI(SoftTMA)'selection saved as individual config based on sele cted type. bugfixed: Verify Secure Data at 'Read SL3 Hash'/'Read Phone IDs' improved: FBUS communication routine for HTI improved: XGOLD/MAEMO identification and more minor bug fixed - Blackberry Tool added: "Read MSL" for Blackberry CDMA (Factory OS required) please select "(COM)Blackberry Serial Port" instead of "(USB)Blackberry S martphone" in connection list bugfixed: random AccessViolation on calculation code in standalone mode -----------------------------------v3.5 revision 1.4, Public-Release changes: - MAIN introduced HTI Firmware version 00.24 new in firmware: firmware accept SL3instant unlock activations bugfixed: BB5 security repair algorithm for RAPIDO new ASIC implemented WD2 and BTMCM flashing protocol implemented TIKU and MM(NAND) flashing protocol please Update HTI by using "Update HTI" button or "HTIUpdate.exe" improved: antivirus compatibility. improved: daily update check routine. improved: built-in downloader routine added: resume support bugfixed: handing big file size(more than 1G) added: support for upcomming windows 8(windows developer preview) support. added: Detailed 'LastError' message window when No Security Dongle Detected added: Detailed HTI identity(boot & fw version, serial) on connect. New Application released: MXKEY - Fire Agent(fire.exe), it brand new support tool and firmwares download support client Using shared configuration with corresponding module, simplify the needs t o download/update firmware file. Working in sync mode with modules for better usage. using built-in downloader with resume support. Supported services: Nokia firmware, along with latest firmware notification info CDMA firmware, various vendor(Alcatel, Haier, Huawei, LG, Nokia, ZTE) more services tobe added at the future

- Nokia Tool important informations(Asic ID, ROOT KEY HASH, UEM Imei) now highlighted (beginn er friendly). added: BB5 security repair function for RAPUv2 phones (beta testing) added: Verify Secure Data at 'Read SL3 Hash'/'Read Phone IDs', used to verify if secure data readed from the phone is valid to make sure the hash readed by software(both USB/FBUS) is 100% correct added: "Fire Support" menu in module`s options. added: support to load variant definitions created by fire.exe added: Spesified window dialog when card is busy/used by other module to fire.ex e, sl3u.exe. added: support to convert log to other thirparty format to SL3BF module (sl3u.ex e) added: new definition to 'phoneIdentity.ini.default' added: flash loader version 11.24.000.3 to setup added: RPL backup list load at scan (used for "Write Rpl' with 'Use RPL file' ti cked) added: PM backup list load at scan improved: improved: improved: improved: improved: improved: module initialization. 'phone definitions loading' at first load. 'HTI Auto BSI(SoftTMA)' set. file/image version check routine. Reboot after flash mode WD2 flashing with HTI

bugfixed: BTMCM flashing bug with HTI bugfixed: No Security Dongle Detected when HTI connected with phone(HTI power sw itched off on load) bugfixed: RAPIDO New Asic security repair function - CDMA Tool added: "Fire Support" menu in module`s options. -----------------------------------v3.5 revision 1.3, Public-Release Changes: - improved GetFlashAddress and Custom Erase function(not pooling phone after o peration) - improved *.default(config update) file handling - bugfixed: Nomadik dead usb flashing (Bootstrap failed) - bugfixed: RAP3Gv3 dead usb flashing (stop at sending bootloader) - added: model selection by type designator or phone description - added, notification messages for important function - added, optional screen recorder using separated application "camcl.exe", use "Record Session" on sys tem menu (right click window titlebar) captured videos will be saved as "capture.avi" in the windows temp f older could be usefull for reporting bug - added, fw version check between connected phone,mcu image,server during 'Sca n Phone' - added, fw version check between selected mcu image and server during 'market select' - added, "Copy All Links" on Nokia Download Window - added, auto complete on Model selection

- improved auto enable RAPIDO "FUR Cold Boot" by usb hub information - removed experimental "run in main thread" bug caused app hang - bugfixed: usb3 connection status query - bugfixed: XGOLD 213 "Use Embedded SBL from MCU" does not work if BB5 selecte d in generation dropdown. - Some UI changes Add fading on loading module using balloon hint instean of ordinary hint - bugfixed: dead after flashing in NOR flash devices (affected on x64 pc with memory more than 4GB) - usb flashing routine improved - usb connection handling improved - bugfixed: random crash on buscheck with usb connection - added: connection status/speed information on connect - added: more detailed description of errors if an error occurs - moved "[BB5,USB]Use New Protocol for RAPIDO" option to config->Directory If enabled, will use new loader else will use old loader(embedded to MCU file) RAPIDO phones with New Protocol connected to HS(High-speed) USB allo ws to use CERT backup/restore. Old RAPIDO and RAPIDO connected to non HS USB will not backup CERT d ue to USB limitation. - added: "[BB5]Use New Protocol for RAP3Gv3" option to config->Directory - added: phone`s image load from server(if any). - added: latest firmware version check(if any) for BB5 phone on market select. - added: sl3u.exe(Standalone SL3 Logger/Unlocker)** Optimized for SL3 unlock task using HTI or USB cable. - added: sl3bf.exe 'load at windows startup' option. - bugfixed: X1-01 XGOLD flashing bug. - added USB STANDALONE security repair function*** for ALL HASH for RAPUYAMA p hones **. - added USB STANDALONE security repair function*** for ALL HASH for RAPIDO pho nes **. - bugfixed: No progressbar on flashing. - bugfixed: New RAPIDO SL3 read PhoneIDs shows 'Operations not supported' - bugfixed: processing file with size more than 900MB. - bugfixed: emulate phone on New Protocol causing application to be hang. - changed FlashLoader selection from dropdown to checklist as this will be mor e user friendly. - changed SoftTMA to slider as this will be more user friendly. - improved synchronize files routine, auto retry when download failed. - added update dialog window when HTI firmware outdated. - bugfixed: access violation on synchronize files when Download window opened. - bugfixed: application crash on load in some os(win7 x86 no sp). - changed manifest of mobileEx.exe, sl3bf.exe from 'asInvoker' to 'requireAdmi nistrator'. Library and modules will need to update their xml configuration file s regularly, or create if xml configuration is not exists. This operation require d admin level on vista and win7 core. - to not confuse users, Nokia USB ROM is now displayed only when no physical N MWCD* device connected for dead usb flashing, Nokia USB ROM should be used instead of 'Phon et' device - bugfixed: XGOLD213 usb flashing error when no mcu spesified - Renamed 'Image DL' caption to 'Download' as this will be easier to understan

d - 'Download' will show input dialog if no product code spesified - local rfbb will also handle rfbb file format - local dcc will also handle pm file format - bugfixed: SL3 read PhoneIDs shows 'Operations not supported' *) NMWCD: Nokia Mobile Wireless Communication Devices **) required HTI with firmware 00.17 ***) SX4AUTH (PA_SL/PA_SL2/PA_SL3/PA_SIMLOC30) SD REPAIR (PA_SL/PA_SL2/PA_SL3/PA_SIMLOC30) SIMLOCK REPAIR (PA_SL/PA_SL2) NCK CALC (PA_SL/PA_SL2) SL3 BF HASH CALC (PA_SL3/PA_SIMLOC30) SL3 NCK CALC (PA_SL3/PA_SIMLOC30) -----------------------------------v3.5 revision 1.2, Public-Release - MAIN Added, Files synchronization feature Allows to check and update important files with server without installing ful l setup. Also usefull to minimize problems because of users patch. Fixed, Access violation on XP for PC without HTI(WinUsb) installed Check For updates and Single module update removed(replaced with Synchronize F iles) - NK(Nokia Service Tool) Added, optional SX5 serial used for SL3 NCK calc (*) Added, Latest flash update definition to setup Added, Options to disable/enable RAPIDO new protocol for USB flashing Added, Options to disable/enable embedded SBL for XGOLD flashing Added, HTI SoftTMA Resistor selection (*) Added, Local storage definition for DCC and RFBB data. Added, DCC data verify after write Improved, DCC data write (If DCC write fail, DATA will be written as PM) Fixed, Download in background deadlock bug Fixed, PM erase bug (was early stoped on newer BB5 phone) Fixed, DCT4 flashing Fixed, New ProductProfile write - QCD(CDMA Service Tool) updated patch definition to version 1.4 added unlock definition for: Haier Q9+-INAV1.04-100326-JWD, method: patch ock added unlock definition for: ZTE SM_C36X_RBTL05NV1.0.0B05, method: direct ock(untested!) fixed unlock definition for: ZTE TM_S189_RBTL35NV1.0.2B01, method: direct ock fixed unlock definition for: ZTE TM_S168_RBTL35NV1.0.0B02, method: direct ock see "modules\{9A05071F-D3A6-484B-8E3E-C6F47311C78C}\supported_phones.txt" list supported models - BB (BlackBerry Tool)

unl unl unl unl for

Added, Factory lock status on device scan Minor bug fixes (*) required HTI firmware version 00.17 or later -----------------------------------v3.5 revision 1.1, Public-Release - MAIN Introduced HTI Firmware version 00.17 After update, Device PID will be changed. required new driver (data\drivers\hti\HTIWINUSB.inf) Reworked communications library for all supported interface. - NK(Nokia Service Tool) Added, STANDALONE DCT4PLUS RSA Unlock for HTI (*) Added, STANDALONE DCT4/DCT4PLUS RPL for HTI (*) Fixed, DCT4 UEM imei read on HTI Added, RPL backup/restore for RAPIDO phones using USB. SX4AUTH is now automatically performed after "Repair SD". Fixed, RPL restore on Dual Asic phones. Improved, SL3 SIMLOCK RPL restore (If SIMLOCK restore fail, DATA will be writt en as PM) - BB (BlackBerry Tool) Improved Device scan Added, STANDALONE MEP Code Calculator(*) Total 236 MEPS supported Added New MEP list to MEP definition file(mep.dat) Updated "supported_mep.txt" Added HTIUpdate tool in case BLADE server is problem. HTI now initialized as additional security device when working with USB connec tion, this will allow to use STANDALONE features using USB connection. (*) required HTI firmware version 00.17 -----------------------------------v3.5 revision 1.0, Public-Release - MAIN Update HTI button now alwasy enabled. Added local ping check for 'Server List' Added taskbar progress support for Windows 7 - NK(Nokia Service Tool) Fully reworked flashing routines(workaround for HTI flashing bug) Fixed, Download in background task BB5 Secure Storage and Certificate validation moved to Certificate manager pag e BB5 Secure Storage, Certificate validation, Recover CERT, Load RFBB from serve r also supported with USB connection Minor bug fixes SL3BF updated to version 3.4 added task scheduler, usefull when working with more files fixed, random salt option bug (duplicate salt automatically fixed oon this version)

- BB (BlackBerry Tool) Added New MEP to MEP definition file(mep.dat) Updated "supported_mep.txt" - QCD (CDMA Service Tool) Added flashing definition file for: Haier C2071 updated patch definition to version 1.3 added unlock patch for: Haier C2071-P1.01.21_V00.21 see "modules\{9A05071F-D3A6-484B-8E3E-C6F47311C78C}\supported_phones.txt" for list supported models -----------------------------------v3.5 revision 0.0, Public-Release - MAIN Added, visual detail when MXKEY plugged to HTICCID. HTI firmware update routine implemented. Introduced HTI Firmware version 00.08 - NK(Nokia Service Tool) Added, STANDALONE security repair function for ALL HASH for RAPUYAMA,RAPIDO,RA P3Gv4 phones. required HTI with firmware 00.08 (please update your HTI) SX4AUTH (PA_SL/PA_SL2/PA_SL3/PA_SIMLOC30) SD REPAIR (PA_SL/PA_SL2/PA_SL3/PA_SIMLOC30) SIMLOCK REPAIR (PA_SL/PA_SL2) NCK CALC (PA_SL/PA_SL2) SL3 BF HASH CALC (PA_SL3/PA_SIMLOC30) SL3 NCK CALC (PA_SL3/PA_SIMLOC30) Improved, HTI FBUS protocol routines Fixed, Manual erase address selection. Minor bug fixes -----------------------------------v3.4 revision 2.1, Public-Release - MAIN HTI drivers updated to version 3.04.07 HTI ccid drivers added to setup. HTI communication protocol updated - NK(Nokia Service Tool) Fixed, HTI flashing bug Fixed, ATF flashing bug Added, 'Get Address' support for USB connection Added, flash size selection for manual erase Added, ATF protocol for loader v10 or higher Fixed, minor bugs SL3BF updated to version 3.3 support for oclHashcat-lite-0.05 - QCD (CDMA Service Tool) Fixed, ZTE QSC6010 flashing bug. updated patch definition to version 1.2 see "modules\{9A05071F-D3A6-484B-8E3E-C6F47311C78C}\supported_phones.txt" for list supported models -----------------------------------v3.4 revision 2.0, Public-Release ** Initial release which support MXBOX/HTI FLASHER

- NK(Nokia Service Tool) Added, SIMLOCK_PA idendifier on BUS check option in config Added, STANDALONE SX4AUTH,SD REPAIR,SIMLOCK REPAIR,NCK CALC,SL3 HASH CALC and SL3 NCK CALC for HTI FLASHER Added, flash update v11.10.000.2 to setup Fixed, BB5 manual flash erase (NAND) Fixed, Old Infineon flashing bug Fixed, some bugs SL3BF updated to version 3.2 * support for oclHashcat-lite-0.03 and ighashgpu_v0.80.16.1 additional files are required to use this version - oclHashcat-lite-0.03 (http://hashcat.net/files/oclHashcat-lite-0.03.7z) please extract all contents to directory(see readme.txt) "\modules\{3EBAF427-9F55-419F-8A75-385DFC651169}\sl3bf\oclHashcat-lite-0.03" - ighashgpu_v0.80.16.1 (http://golubev.com/files/ighashgpu_v0.80.16.1.zip) please extract all contents to directory(see readme.txt) "\modules\{3EBAF427-9F55-419F-8A75-385DFC651169}\sl3bf\ighashgpu_v0.80.16.1" command line and others option could be adjusted by editing sl3bf.dat at "\modules\{3EBAF427-9F55-419F-8A75-385DFC651169}\sl3bf\sl3bf.dat" by default we will use "oclHashcat-lite-0.03", which is support newest AMD GPU (HD6xxx) - QCD (CDMA Service Tool) Added, Flashing support for: TELEEPOCH based products (Haier C710) TECHFAITHWIRELESS based products (Haier C200,C2000,C6200,CG100,C2001,C5 000 and soon) TCLMOBILE based products (Alcatel OT-203C, Nexian NX981) ZTE QSC11x0 products (S168,S189) ZTE QSC6030 products (C36X) Added, Patch definition update button from config Added, SPC code extraction from image file Added, ROM,EFS base address detection from image file Added, Auto image base address set for full dump image Added, CDMA NAM read/write support Added, image(bin) file load/save support Added, Copy to clipboard and Paste from clipboard for EFS function Improved, Flashing(Read/Write) speed updated patch definition to version 1.1 see "modules\{9A05071F-D3A6-484B-8E3E-C6F47311C78C}\supported_phones.txt" for list supported models -----------------------------------v3.4 revision 1.9, Public-Release - QCD Introduced new module: CDMA Service Tool for Qualcomm based phones Initial release, required license #5 to be activated. Features - Flashing - Flash read/backup - Memory Dump - NVM backup/restore - EFS explorer/backup/restore - Unlock - MEID read/write - ESN read/write - SPC read/write Currently supported devices:

Huawei ZTE LG Haier Other brand will follow required usb drivers can be found at 'data\drivers\cdma' directory - NK Fixed, Fixed, phone) Fixed, . Fixed, Added,

Flashing bug (device handle lost when flashing with flasher boxes) XGOLD flashing bug (unexpected boot acknowledge sequence received from GPU bruteforcer bug on random salt skipped with random salt mode option

DCT4PLUS RSA Unlock bug for old models (Asic type 2) BT_DATA and WLAN_DATA repair on DCT4 online logger for BT_DATA and WLAN_DATA repair, please input BT_ADDR/WLAN_ADDR(MAC AD DRESS) in 6 bytes hex(eg: 00AABBCCDDEE) -----------------------------------v3.4 revision 1.8, Public-Release - MAIN Added, Credit Convertion Dialog on 'Check Credit' (you can convert for FREE yo ur DCT4 credits and BB5 credits into SL3 credits) - NK Added, XGOLD213 devices(RM-607,RM-608,RM-643,RM-644 etc) usb flashing support (dead/alive) [WF] Added, XGOLD101,XGOLD110 IMEI backup/restore Added, XGOLD101,XGOLD110 IMEI auto backup on safeflash Added, Battery voltage information during scan phone in usb mode Added, Use Dictionary option for GPU bruteforcer(using salt.dic as salt sequen ce) Fixed, GPU bruteforcer hang at 99% if random salt is selected Fixed, Phone Generation filtering Fixed, Error read/write bug on usb flashing process Improved Features compability between usb/flasher interface Improved Broadcomm Usb Flashing Automated XGOLD phone detection Revised XGOLD flashing protocol -----------------------------------v3.4 revision 1.7, Public-Release - NK Added, Local SL3 unlock using GPU Bruteforcer [WF] Go to [IMEI & Security->Online Logger] (Dont forget to select BB5 gener ation :)) Added, Camera Configuration data write from PM in manual mode. Fixed, ATF communications problem. Improved After flash handling on Usb flashing Address list now cleared when "Load Erase File" and "Get Address" - ALC PIDs list sorted, more user friendly. Added x64 ft2k drivers to the main setup. ------------------------------------

v3.4 revision 1.6, Public-Release - NK Added, Certificate Reset function Allows user reset NPC/CCC/HWC/VARIANT. Panel located to [IMEI & Security->IMEI rebuild] Added, ALS calibration function. Page located to [Phone Test->ALS Cal] Added, Provider info on Multilocked phones Added, Phone timers edit. Allows users to edit life timers, read calls received, calls dialed, la st call and calls all Updated providers.ini based on Annex to ITU OB 958-E (No. 958 15.VI.2010). Make SIMLOCK RPL selected by default Repair SD button moved to PM Tab Reset NPC button removed as no longer needed(replaced by Certificate Reset) - ALC Larger font for PID list as requested by user. Added alc.mx(Alcatel module) to the main setup. -----------------------------------v3.4 revision 1.5, Public-Release - NK Fixed, USB flashing bug (RAP3G,RAPIDO dead after flash). Improved, USB boot protocol for better/stable communication. Added, lifetimer reset support for BroadCom platform). Added, Skip UEM write option for Online Logger. Minor bug fixes. - BB Added, Manual MEP list selection (manual checkbox selected by default). Minor bug fixes. -----------------------------------v3.4 revision 1.4, Public-Release - NK Added, USB flashing support for BCM21351(Broadcom platform). Added, USB RPL Backup support for RAPUV1,RAP3GV4,BCM21351. Added, USB RPL Write/Restore support for RAPUV1,RAP3GV4,BCM21351. Added, Auto RPL backup on Buscheck for USB(BB5) connection. Added, Camera & Flashlight Test. Fixed, USB flashing bug (RAPUV1,RAP3GV4). Fixed, XGOLD flashing bug (new PBL version). Minor bug fixes. -----------------------------------v3.4 revision 1.3, Public-Release - MAIN, LIB Improved BLADE client system for better server transactions. Fixed, Language files enumeration bug. - NK Added, Baud selection for X-GOLD flashing.

Fixed, USB flashing bug (STNFMS N8815,N8500). Fixed, DCC data user store bug. Fixed, SD customkey detection on SD Auth. Minor bug fixes. - BB Added Latest MEP for BlackBerry Unlocker, see supported_mep.txt Better error handler on server transactions. -----------------------------------v3.4 revision 1.2, Public-Release - NK Added, flashing support for MAEMO devices(Nokia N900, etc) using Usb cable. Added, flashing support for X-GOLD/Infineon devices(1202,1616,1800, etc) using UFS,JAF or modified serial cable. flashing works for normal or dead phone, using UFC cable. for serial connection, you might modify cable by adding trigger/ignitio n on the DTR or RTS pin(same as old siemens). Added, Auto Flash loader option based on selected interface. Added, Models sorting option. Fixed, BB5 fast flashing bug. Minor bug fixes. -----------------------------------v3.4 revision 1.1, Public-Release - MAIN, LIB Added, ATF BOX support. Added, Serverlist data caching. Added, Credit check function. Fixed, options menu not displayed when themes is enabled. Small changes on ProgressBar style. - NK Added, BB5 Flashing support for ATF BOX. Added, Download tasks window. Usefull for backgroud download monitor when using Image DL. Added, SD customkey detection on SecureStorage validation. Added, Automatic SD cusmkey selection of SUPER SD Auth and PMM Auth function. Improved, SUPER SD Auth routine to fix session timeout issue. Added, Important Data Share/Store. *RFBB data user store. This will upload RFBB(PM1,PM309) data from the phone to server. *DCC data user store. This will upload DCC data from the phone to server. *CERT data user store. This will upload CCC,HWC,VARIANT data from the phone to server. Fixed, "Canvas drawing error" on Image DL. Fixed, Imei changes patch bug. Fixed, Old asic Sp unlock bug. Fixed, ADL flashing timeout bug. -----------------------------------v3.4 revision 1.0, Public-Release Major changes. - MAIN, LIB Introduced BLADE-X and BLADE-Z server system. BLADE-Z will accept request for Card services (Registration,Update License, Si gn Application, and soon)

BLADE-X will accept request for Nokia and BlackBerry services(BB MEP calc, DCT 4RPL, DCT4PLUS SIMRPL, BB5SD, BB5SDAUTH, BB5SIMRPL, BB5NCKCALC and soon) Servers are run in 4 hosts, priority could be selected from server list option s. Due to keep the server stability, older server will be removed and all older r eleases are obsolete. - NK Removed DCT4PLUS activation, all MXKEY users now can use DCT4PLUS unlock for l imited number of phones. Minor bug fixes. All modules recompiled for new api compatibility. removed NKC module, as DCT4PLUS activation are no longer required. ########################################################## ########################################################## v3.3 revision 1.8+fix, Public-Release - MAIN Improved check for update routine. Application will check new version on start up, if update found balloon toolti ps will be displayed. - NK Fixed, DCT4 UFS flashing bug. Fixed, BB5 UFS flash bug on rev 1.8. - HTC fixed crash on startup due to "winusb.dll" not found. -----------------------------------v3.3 revision 1.8, Public-Release - MAIN Major changes for sign application routine to avoid server overload. Improved First time activation process, will automaticaly updating license 0,1 ,2 and signing application. - NK Added, "Export as Text" option for VCARD backup DCT4PLUS Direct Unlock implemented, for activation please use 'Nokia Unlocker' module. BB5 Slow flash bug fixed. Added nkc.mx module to the main setup. -----------------------------------v3.3 revision 1.7, Public-Release - MAIN Added, support for JAF BOX firmware 01.B4 Fixed, Runtime Error when multiple instance loaded Small ui changes, added module icon in menu. - NK Added, BB5 Warranty Unlock function Warranty Unlock will read unlock codes without direct write to the phone Thus will make sure that the phone`s warranty is not void, a window will dis play the phone information, unlock codes and intruction to enter the codes as well. a template file as html doc located to "\modules\{3EBAF427-9F55-419F-8A75-38 5DFC651169}\codtemplate.htm". you might edit this template as you want as long as keep the variables "%mod el%","%imei%","%provider%","%codes%" and %codes7%. Added, CMLA_KEY and SUPERDONGLE_KEY RPL backup Added, New Loader/Protocol support for JAF BOX (RAPIDO,RAPU based phones)

Added, Multi-ReLock support As requested by some user, now possible to LOCK the phone to multi-providers . As the providers settings are maybe outdated, you might need to edit the pro viders list. ini file setting located to "\modules\{3EBAF427-9F55-419F-8A75-385DFC651169} \providers.ini". the format is [8DIGIT MCC+MNC]=[PROVIDER_NAME]|COUNTRY eg: 23430000=Virgin|United Kingdom Added, Method1(old) and Method2(new) option for DCT4PLUS SIMLOCK Patch (will b e used in future DCT4PLUS unlock updates) Fast Flash routine will collect the list image files and process with one boot . Previous changes(rev 1.6 Partial-Update) Added, BB5 RAP3GV4 USB Flashing(eg. Nokia X3-00,X6-00) Added, Dead Usb option for normal usb flashing This will force software to use dead usb protocol without need to reconnect the Nokia USB ROM connection. Many Minor bug fixes - BB Previous changes(rev 1.6 Partial-Update) Added, manual checkbox to allow input IMEI+MEP manually(in case of usb connect ion problem). Added, Engineering Screen Unlock code calc. -----------------------------------v3.3 revision 1.6, Public-Release - MAIN Added support for JAF BOX firmware 01.B2 - NK Fixed, BB5 Certificate Write This will fix, VARIANT or HWC write error because of obselete CERT data backu p(RPL backup from other tool) Improved, DCT4 boot problem (UFS) Final fix for DCT4 flashing bug on some PCs. Minor bug fixes -----------------------------------v3.3 revision 1.5, Public-Release - NK Improved, Universal BB5 NCK Reader. Now should works for ALL BB5 phones except pure SL3. for example: 5800 hash CAEEB.. with version 3x or 4x. Fixed, Universal SUPERDONGLE Authorization Agent(SUPER SD Auth) specially for empty board(erased or bad PM) Minor bug fixes - BB Added error handler when IMEI and MEP is empty, user could enter manualy. -----------------------------------v3.3 revision 1.4, Public-Release - BB Initial release of BlackBerry Unlocker added to full setup. Works with all BlackBerry models,old and new MEP. MEP database will be updated when new MEP available. more features will be added at future release such as: Flashing, Repair. - NK Added, FREE Universal BB5 SUPERDONGLE Repair works for SLPA and SL20(RAP3Gv2,R

AP3Gv3,RAPIDO) Possible to Repair corrupted/erased SD Key which affect in SECURITY_TEST fai led and WD enabled. Button located to [IMEI & Security->IMEI rebuild->Repair SD] Added, Universal SUPERDONGLE Authorization Agent to reflect the SD Repair feat ure SUPER SD/SX4 Auth also works with Original SD and Custom SD made by other to ols(Mt-Box,UB,Genie) Repairing SD issue and Doing SX4 Auth has never been easier with MXKEY :) Button located to [PM->SUPER SD Auth] Added, Single SIMLOCK RPL backup for SL2/SL3 phones Button located to [IMEI & Security->Simlock->Backup SIMLOCK RPL] Added, Apply DSP Patch into PM upload option PM308 from file will be patched instead phone`s PM. Fixed, DCT4 bootloader bug Minor bug fixes -----------------------------------v3.3 revision 1.3, Public-Release - NK Added, FREE Universal BB5 SIMLOCK RPL Maker works for SLPA and SL20(RAP3Gv2,RA P3Gv3,RAPIDO) Possible to Rebuild/Repair,UNLOCK or LOCK to spesific provider. Fixed, 'Invalid Security Block' bug small GUI changes specially when using Style1 Fixed, BB5 APE flashing bug Added, Manage SIM option Used to Read or Write 'Simlock.bin' file to be used to make customized SIMLO CK RPL Improved, read simlock.bin for SLPA phones. Fixed, HWC write bug Minor bug fixes -----------------------------------v3.3 revision 1.2, Public-Release - MAIN Improved, interface communication routine (more stable) Fixed, socket communication for some pc(AMD bug?) Fixed, failed re-load module Fixed, registration bug - NK Fixed, NFP extract Fixed, WD2 flashing (UFS) Minor bug fixes -----------------------------------v3.3 revision 1.1, Public-Release - MAIN Some changes with Check updates mechanism - NK Added, FREE Universal BB5 NCK calc work for SLPA and SL20(including hash 9DDBF CFE6E73CED7D8C6268C8EB85723) Added, BB5 Certificate Validation Usefull to identify SECURITY_TEST problem specially if SUPERDONGLE is valid Button located to [Phone Test->Various] Added, FREE BB5 Certificate Recovery to reflect the CERT validation features This will make restore CCC,HWC or VARIANT by product code from server databa se. Button located to [IMEI & Security->IMEI rebuild->Recover CERT] Minor bug fixes

-----------------------------------v3.3 revision 1.0, Public-Release #Major update - MAIN Improved, Application Signing system ~ client time will be checked before signatures generation to avoid duplicate error request. ~ date-time issue bug on server side fixed. ~ no messages will be displayed if signatures invalid when working in FREE mod ule(siemens). Added, Server status info on server check ~ ping check removed, so there will be no more firewall problem. Redesigned, Modules Manager page ~ This will make the posibility to update single module at future updates. Check for daily update re-enabled. ~ application will check update once a day and will be displayed in tooltips w hen new update found. - NK Added, BB5 RAPIDO STN8815(N96) usb flashing(Dead Usb also possible) Fixed, DCT4PLUS ASIC 0x3168 patch unlock and imei changes (2630 v52.70, 2680 v 06,80) Fixed, BB5 Flashing (partitioning bug) Fixed, Fast flashing bug when using JAF box. Added, PM308,1 backup on 'BB5 SW downgrade fix' Other modules recompiled for major api changes. -----------------------------------v3.2 revision 5.6, Public-Release #Minor update - MAIN Improved, Application Signing system ~ Before signing request, sw will set system datetime from ntp server if datet ime is not correct. ~ Note: Make sure you have set you computer date,time. ~ The application signing system will not work on the computer with invalid da te time ! Removed, Ping on server check - NK Added, Detailed information for each 'Quick Fix' function. -----------------------------------v3.2 revision 5.5, Private-Release #Minor update - MAIN Added, Application Signing system ~ This is new application security improvement ~ Application will check it signatures when needed, this will check unique car d id, application version, and signature datetime validity ~ New created signature will be valid for next 6 month after signing ~ It means that after new update, you might need to 'Sign Application' if the current signature doesnt meet the requirement. Fixed, Windows Vista SP2 compatibility. - NK Added, BB5 RAPU USB Flashing(spesially for new Flash) Added, Dynamic Camera Configuration upload ~ This features located at 'Phone Test->Camera' Added, TIKU CDMA Product Data (PREPAID_CS_TYPE) fix using server calculation ~ This features will consume credit, how much it will take will be displayed o

nce you logged in using 'Dongle Id' ~ The Service tag is 'DCT4 IMEI+PRODUCT DATA' Added, BB5 RAP3NAND Erase User Area in the 'Quick Fix' tab ~ Usefull to fix BLANK/BLINK or doesnt switch on problem. Added, BB5 PA_SL identification from PASUBTOC Added, New CS type info for newer phone Improved, FAST flash routine ~ SW will keep in flash mode when processing image file, means that it will sk ip boot and loader upload if config from each file is similiar. Improved, BB5 RPL write ~ SIMLOCK_DATA will be uploaded after NPC write, since new BB5 phone will only accept SIMLOCK_DATA if NPC is valid ! Fixed, BB5 'Security block invalid' bug -----------------------------------v3.2 revision 5.4, Public-Release #Minor update - MAIN Refixed, Windows Vista & Windows 7 compatibility. - NK Added, BB5 'Restore SIMLOCK' from '*SIMLOCK.back' or '*.PM' or '*.RPL' ~ The button located at 'IMEI & Security'->'IMEI Rebuild'->'Restore SIMLOCK' Fixed, DCT4 unknown flash bug(BUS check) Fixed, DCT4 CS repair when phone could not go into LOCAL MODE Refixed, DCT4 bootstrap for UFS interface Fake Progressbar for BB5 flash erase reenabled. - VCOM Recompiled PK83.bin for new api compatibility -----------------------------------v3.2 revision 5.3, Public-Release #Minor update - MAIN Fixed, Windows Vista & Windows 7 compatibility. - NK Fixed, BB5 SIMLOCK_DATA/KEY PA_SL3 write Fixed, BB5 RAPU-YAMA phones flashing Fixed, DCT4 flashing bug(DEAD after flash/unlock) Fixed, loading module sometimes failed Improved, Module stability -----------------------------------v3.2 revision 5.2, Public-Release #Minor update - NK Fixed, WD2(PPM) flashing using UFS -----------------------------------v3.2 revision 5.1, Private-Release #Minor update - MAIN License #0 needs to be activated(activation is FREE) to load module. - NK Added, DCT4 ASIC 0x3168 standalone 'on the fly' patch for SP UNLOCK and Imei C hanges ~ This feature need License #1 to be activated(activation is FREE) Added, Low Level format before CNT write Fixed, Image Download 'in background' hang BB5 Secure Storage Validity now support PA_SL3(unlocked) phones

Many Minor bug fixed. -----------------------------------v3.2 revision 5.0, Public-Release #Minor update - MAIN Added, Dongle License status Info in the Dongle Maintenance GroupBox Added, Update License Button ~ Used to activated custom license of the card which will be used for spesific feature/module To preserve bandwidth, Refill Button will be enabled if Counter < 50 % - NK Added, BB5 PA_SL2 NCK Calculator using security server ~ This will unlock most PA_SL2 phones with protected PM308:1 ~ This feature need License #1 to be activated(activation is FREE) Added, BB5 PA_SL2 Counter Reset Added, SAFE Erase routine while using 'Custom Flash Erase' on the 'Advance Pag e' ~ SAFE Erase will Protect PM Data from erase specially when doing 'Erase WHOL E flash'. ~ Usefull for recovering a DEAD phone without loosing SIMLOCK DATA Fixed, BB5 Secure Storage Validity for PA_SL3 phones Added, Automatic NPC backup while doing 'Skip SX4 Auth' and 'BB5 SW Downgrade Fix' Minor bug fixed. -----------------------------------v3.2 revision 4.1, Public-Release #Minor update - NK Fixed, PMM auth bug(application closed) -----------------------------------v3.2 revision 4.0, Public-Release #Minor update - MAIN Binary will no more run inside Virtual Machine Added, Intrusion detection against code framework manipulation -----------------------------------v3.2 revision 3.2, Public-Release #Minor update - MAIN Minor bugfix - NK JAF BOX stability and compatibility improved ~ This will also fix problem with flash dead,random stops/hang when using JAF BOX Added, Bus Check routine for 'Nokia USB ROM' ~ Usefull for 'NORMAL' phones which could not connect to USB due to phone lock or something else ~ After sucessfull flash bus check phone will reboot to local mode, so you can do fbus operation such as: reset user code/factory reset Added, Wlan settings in RF/BB tab Fixed, Keypad test start bug Fixed, Sometimes hang after flash erase Wlan settings also included when backing up ProgData -----------------------------------v3.2 revision 3.1, Private-Release #Minor update - Application core module loader routine changed Private version released to test windows version compatibility ------------------------------------

v3.2 revision 3.0, Public-Release #Minor update - MAIN Fixed, Random crash on rev 2.2 Added, UI Style option - NK Added, BB5 SW Downgrade in 'Quick Fix' ~ Use this option to patch PM308,1 Downgrade subblock without full flashing. ~ Usefull for phones which 'DEAD' after PM308 write or RPL backup write Added, Skip SX4 Auth Option on 'PM options'. ~ PM options is button with '>' in the PM tab Fixed, Multiple Content selection form vpl files. Fixed, DCT4 Manual Logger error if no service selected Phones image background color now changed to be match with variant Color on ma rket selection -----------------------------------v3.2 revision 2.2, Public-Release #Patch update - NK Fixed, DCT4 Slow Flashing when using JAF interface. -----------------------------------v3.2 revision 2.1, Public-Release #Patch update - NK Fixed, UEM req timeout bug on previous release (rev2.0) -----------------------------------v3.2 revision 2.0, Public-Release #Minor update - MAIN MTBOX boot fixed. Regular minor bugfix - NK Added, BB5 Secure Storage Validation on 'Scan' ; This will validate if SIMLOCK or SUPERDONGLE_KEY is corrupt or not. ; Usefull to determine WD timer or CS issue for BB5 phones. ; Phone with SUPERDONGLE_KEY corrupted, will affect in SX4 auth unsuccessfull or WD problem. ; Phone with SIMLOCK corrupted, will end with CS problem. Added, SIMLOCK2 phones detection (with PM308 protected/read only) ; SIMLOCK2 ('SL2' or 'SIMLOCK2' firmware) phones RPL backup will not work with this phone because of SUPERDONGLE_KEY cannot be restored. Added, ASIC_ID(RAP/OMAP) chip name information Added, flash size information Fixed, BB5 'get address' Fixed, BB5PLUS RPL backup read/write ; Restoring from RPL backup after EEPROM will also restore SUPERDONGLE_KEY so phone will not have WD timer issue. Forced to change phone mode to TEST_MODE when doing factory reset and Self Tes t. Added, DCT4 Manual Logger -----------------------------------v3.2 revision 1.4, Private-Release #Patch update - MAIN Improved, Scard api (spesially for ccid reader compatibility) - NK Improved, BB5 RPL upload/write ;Specially for phone which support SL2+SL3 simlock, by default old protocol wi ll be used and it its failed new protocol automatically be used.

-----------------------------------v3.2 revision 1.3, Public-Release #Patch update - MAIN Improved, privilege adjustment ; hopefully will solve not starts problem ?! ; So far tested with XP XP2(OEM), Vista Ultimate(NOT OEM), Vista Ultimate SP1 (OEM) - NK BB5 SIMLOCK SL3 Structure upload from RPL backup added. -----------------------------------v3.2 revision 1.2, Public-Release #Patch update - NK Added, Support for BB5 SIMLOCK SL3 Structure upload Fixed, WD2 CBUS Loader parse for correct BT flashing -----------------------------------v3.2 revision 1.1, Public-Release #Patch update - NK Fixed, Online Logger not shown when 'Imei changes' disabled. Fixed, BB5 Restore Imei+Write RPL -----------------------------------v3.2 revision 1.0, Public-Release #Major Update - MAIN Added, UI Localization ;languages selectable from 'quote' menu ;locale files stored to 'locale\*.xml' directory ;added, Chinese (Simplified) language for test (translated using Google Trans late, so am sure its not 100% correct), unicode enabled. ;full localization might be added at the future Added, balloon Tips stored to locale files Fixed, Application not opened in some PC caused by not previlege account (spec ially XP SP3 and Vista SP1) List of loaded drivers version are now displayed at start up Server list are now selectable Added, posibility to play custom sound on error/finish Added, Card Serial Port drivers ;allow to use serial(comport) based reader for the card Added, 'Nokia USB ROM' virtual device to be used for BB5 USB DEAD PHONE flashi ng Fixed, Connect<->Disconnect bug (appl. crash) - VCOM Small change in UI Changed, PK-83 binary to support new drivers - CCS Fixed, nkser(6088,6066,7088) driver handling when flashing stop at the middle of process - NK Added, BB5 USB Flashing ; Supported loaders RAP3Gv2+APE(external loader), RAP3GV3+APE, RAP3GV3 NON APE+DEAD FLASH, RAPIDO NON APE+DEAD FLASH, RAPIDO +APE, RAPIDO (RAP3NAND) NON APE+DEAD FLASH. ; Version check mechanism is possible when flashing NON DEAD phone ; LANGUAGE only option also posible for fast and safe phone update

Added, Multiple version of flash update/loaders ; selectable from 'quote' menu 'Config->Directory' ; Newer phones might need newer flash loader, by default is '8.6.1.31560' Fixed, BB5PLUS RAPIDO SL2 spunlock Added, Pinout image for UFC based cable (press small button near phone image) ; pinout images are stored at 'data\image\pinout' directory Multiple Data Package directory are now possible (usefull when working with Mu lti-OS PC) Added, 'Force WHOLE flash' on erase(Advance Page) to allow RAP flash full eras e (Last chance, if NPC reset still not work to revive DEAD/BLINK Phone) Added, PP file read Added, Phonebook/Contacts backup and restore (Phone Settings->Selection:User S ettings) Removed, Host setting (please use 'select server' from Main|Server List page) - SIEM Siemens module recompiled for new api compatibility -----------------------------------v3.2 final bug-fixed, Public-Release - NK DCT4 RPL server host changed, to fix timeout in some country Improved, DCT4PLUS "on the fly" unlock patch and imei patch Added, AMS loader v. 8.49.19.36652 to the installer minor bug fixes - VCOM Fixed, Active-X initialization to fix rx no respond in some pc -----------------------------------v3.2 FINAL, Public-Release - MAIN Improved Server communication Added, Support area access Goto Options->Server->Server List (make selection on 'Support') then Go to Support button will enabled - NK Added, Standalone BB5PLUS SL2 No TP Unlocker PM Auth checkbox also added for some phones which need SUPERDONGLE to b e authorized while writing PM120 and PM308 Added, DCT4PLUS "on the fly" imei changes Improved, DCT4PLUS "on the fly" unlock patch (+new security also supported) Improved, PM read and write (if field not checked will be skipped) To Open PM, you can now Drag And Drop PM file to listbox Fixed, BB5 loaders bug for new phones Fixed, image download Fixed, BB5 auto set RX2 Fixed, DCT4PLUS Online Logger bug minor bug fixes - VCOM Fixed, PK-83 binary for MXKEY REV 2.0 compatibility Siemens FREE module recompiled for new api & library compatibility. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ v3.1 Beta16 , Public-Release - MAIN Removed old card protocol(MXKEY REV 1.X/ROCKEY6), for this release only MXKEY REV 2.X card supported

- NK Fixed, loader issue Added, single phones setting (VPP,RX2, Fast checkbox now saved to config for e ach phone) Added, BB5 No TP Unlocker, Dejan RAP3GV2 unlocker removed. supported HASH: BAF3A9C3DBFA8454937DB77F2B8852B1,E9EFF4BFAA5393217CA6B17755FC3E14,CAEEB B65D3C48E6DC73B49DC5063A2EE,9A28E119033B91D14D22838C86D0D53C supported ROM: 273F6D55DFAAF68F,191EC665DFAAF68F,F28A211FCEA7B19D,A8C1D6713E691FF8,F2C 6EBADC86E6189,F28A211FAC901AEE(untested),4B9B75103E691FF8(untested) Fixed, `highlight market` bug minor bug fixes - CCS Improved, communication. Dead phones full flashing now working ================================================================================ ==== v3.0 Beta15 RC, Public-Release - MAIN help file updated minor bug fixes - NK DCTL/LINDA fully implemented with Custom erase to fix old 9210i CS problem Fixed, Image DL (server communication protocol changed) Fixed, BB5 custom certificate backup Fixed, New PP files manual upload Improved, SUPERDONGLE auth (show the detailed error msg) Improved, User code reset for BB5 phones minor bug fixes -----------------------------------v3.0 Beta14 RC, Public-Release - HW MXKEY LiTE dongle firmware version 00.14 released (Improvement dongle check, to avoid CARD BLOCKED) Please update using SW build beta14 only. - NK Added RAP NAND option in manual erase Added, CRC check before flashing if declared in definition files(BB5) Image DL in background mode improved (CRC check) minor bug fixes -----------------------------------v3.0 Beta13 RC, Public-Release - MAIN Fixed, MXKEY (ROCKEY6) dongle detection. - NK Image DL in background mode now possible Added 'skip Restore' patch for DCT4PLUS unlock Fixed, PPM2 image parsing minor bug fixes - VCOM Fixed, registration popup Added, PK-83 Dongle emulation (you need to install CCS3 Tool first before it w orks) -----------------------------------v3.0 Beta12 RC, Public-Release - MAIN Fixed, dongle registration popup - NK DCT3 fully implemented

Fixed, BB5 flash for new phones some improvement and minor bug fixes - CCS Fixed, 6066/88 flash -----------------------------------v3.0 Beta11 RC, Public-Release - MAIN Improved, dongle communication routine Fixed, Self Update - NK MTBOX DCT4 flash supported. Improved, DCT4&BB5 Online Logger Improved, RX2 auto enabled Added, Simple hint "detailed" BB selftests Added, DCT4PLUS (asic type 11) phone UEM read Fixed, PP extract for DP2.0 phones - CCS Added, Forced RX queue for better handle of dead phone flashing Fixed, Emergency mode Image DL enabled - OTHER Added, Latest mxLogger client(v1.4b) in setup -----------------------------------v3.0 Beta10a RC, Public-Release - NK Fixed, BB5 Online Logger Fixed, BB5 RAP NAND (with RX2 enabled) flashing Added, Full BB5 RPL backup for new phone (SIMLOCK+SIMLOCK_KEY,WMDRM_PD) Added, BB5 user code reset(blocked counter) and status, will not lose user dat a. Improved DCT4 Asic 11 Online Logger (Imei challenge issue) Added, auto create folder option on configuration window Fixed, DP2.0 folder listing -----------------------------------v3.0 Beta10 RC, Public-Release - MAIN Added, Support forum and homepage menu (News) - NK Added, Image DL button (direct image download from support based on product co de, currently for BB5 products only !) Implemented, RX2 loader support (UFS FW v28 only !!!). Implemented, Show detailed options in configuration window Added, Auto select Gen when "Scan" product in configuration window Added, Auto set RX2 for BB5 in configuration window Added, market highlight for easy market choise in configuration window Added, Auto set RX2 for BB5 in configuration window Added, BB5 CNT page size detection for auto CNT convertion Added, Skip if not empty option Added, Manual PP write file Added, BB5 MMC and SD card content flashing Added, BB5 verify NPC option on write RPL Added, BB5 skip spesific section on write RPL Added, BB5 skip (certificate) erase option on write RPL Added, BB5 Reset NPC Added, BB5 online logger client (instant !!!) Added, BB5 RPL write on RX2 enabled phones Fixed, DCT4 MM flash handling Added, DCT4 imei OTP/UEM read via FBUS for non CUI phones.

Added, Latest DCT4PLUS ASIC11 sp unlock patch method(Patch on the fly) Added, DCT4PLUS ASIC11 online logger client Added, extended GSM/WCDMA band type set Improved, BB5 (RAP/CMT) NAND flash handling Improved, Flash chip info. device page size and type now displayed. Improved, DCT4PLUS ASIC11 ask read + manual IMEI/ESN input when UEM damaged Changed, 'Browse' to Directory setting in configuration window - CCS Improved, QCOM protocol for faster flashing Improved, Dead phone flashing handle Added, Phone code read for 6088,7088 phone Added, Image DL button (direct image download from support) Fixed, Userarea backup/restore -----------------------------------v3.0 Beta9 RC, Public-Release - MAIN Improved, Check for updates (more control to updates) Implemented, Online News(add RSS feeds and forum news) Implemented, Options to enabled/disabled spesific module - NK MTBOX Partially supported(FBUS function) Improved, DCT4 boot Improved, Auto phone detection (always "Scan phone" or "Bus check" before any operation!) Improved, CDMA phones compatibility Improved, Keyboard test map (now possible to test all keys including communica tor series) Added, Various tests (Camera,IR,MMC,SIM,USB) Added, Band & System mode control Added, CDMA NVD (Pri) management (under Phone Settings tab) Added, CDMA CS product type read Added, RF/BB PM backup/restore Added, BB5 CNT 128 K convertion Added, COMBOFLASH detection Fixed, DCT4 write RPL (add DATA1/2 only options) Fixed, BB5 Custom erase Fixed, DCT4 APE flash(better error handler) Improved, DCT4 SP unlock routine Improved, CDMA tuning (SET,CAL and PANEL data are now readed and written corre ctly) Redesigned, PMM, Phone Settings, CDMA tune & Quick Fix page(under services tab ) Reconstructed, BB5 'Dejan K' unlocker Introduced, DCT4 read flash works for Asic type 2 phones only (check 'Phoenix format' for writable output) - just for test ! Introduced, DCT4 Non Volatile Data(NVD) management (in development, not finish ed yet) - CCS Added, ARMPRG/Bootloader manual select to handle 'dead' phones Fixed, Invalid hex error while flashing Improved, Phone explorer routine and ui -----------------------------------v3.0 Beta8, Public-Release - MAIN Fixed, "Check For Updates" bug Fixed, UFS baud problem (DCT4 erase issue?) - NK

Fixed, DCT4PLUS non patch unlock (1600,1110i) Added, Automatically save RPL backup on "Bus Check" for DCT4 Fixed, DCT4 Erase ! (hopefully fixes this common issue, tested on 3 different PCs Intel/AMD based) - VCOM Fixed, Incorrect registration popup -----------------------------------v3.0 Beta7, Public-Release. Whats NEW: - [MAIN] Added, "Dont Show This Again" checkbox of UFS FW update confirmation dialog Improved, Check For update routine will allow to update module separately on f uture updates - [CCS] Added, New Module CCS "Foxconn PST"(NK CDMA ODM QUALCOMM) Features: * Flashing using HEX/ CBB (Bundle Files) * Normal Flashing or Emergency Mode (*+5+POWER) supported * Flashing Emulation * Security Code Read/Write * SPC read/write * LCD contrast Read/Write * Reset File System (PRI) * Userdata Backup/Restore * EFS File Explorer * And soon - [VCOM] Revised, VCOM module - [NK] Added, Patch SIMLOCK flashing option + SKip SW patch on Init Simlock (1650 bu g) Improved, Flash erase routine Added, UEM WD test Added, Verify UEM option on DCT4 RPL write - [SIEM] Fixed, SGOLD baudrate issue and other minor. Version Information: Main: mobileEx.exe, version: 3.0.0.889 mobileEx.dll, version: 1.0.0.1144 Modules: ccs.dll, library version: 1.0.0.103, module version: 1.00 nk.dll, library version: 1.0.0.897, module version: 1.00 7 siem.dll, library version: 1.0.0.293, module version: 1.01 vcom.dll, library version: 1.0.0.664, module version: 1.02 Required Dongle revision: MXKEY, FW ver: 00.11 MXKEY LiTE, FW ver: 00.13 *) = BETA = FINAL ------------------------------------

v3.0 Beta6, Public-Release. Whats NEW: - JAF BOX fully supported. - Added, Flash Emulation mode(to verify flash files, will not write to the phone ) - Added, Support for BB5 RAPIDO phones(RAP NAND flash handle) - Added, Easy IMEI restore(Automaticaly search for backup from '\data\backup\RPL \' folder if available) - Added, DCT4 Mass Memory device(NAND) flashing support - Added, UFS FW V 2.8 update dialog if needed(required for RAPIDO phones handle) - Added, UFS Driver update dialog if 'NO CONNECTION' - Fixed, N-GAGE Adsp flashing bug(CRC error=Contact retailer). - Fixed, DCT4 Online IMEI Logger (ESN issues) - Fixed, WD2 boot (increasing boot timeout) - Fixed, User Code changes - Fixed, BT MCM image upload - Fixed, Erase whole flash routine - Fixed, Reset DATA1 (WD2 bug) - Fixed, TIKU flashing with huge image header stoped - Fixed, DCT4 UCP 128k convertion(2865 issue) - Fixed, DCT4 PLUS SpUnlock bug on old models - Removed, Joker module from installer - Added, SIEMENS Tool(EGOLD, SGOLD) module. and other minor. Required: MXKEY, FW ver: 00.11 MXKEY LiTE, FW ver: 00.13 -----------------------------------v3.0 Beta5, Public-Release. Whats NEW: New MXKEY LiTE firmware introduced, FW ver: 00.13 - Added, JAF FBUS protocol (Flashing bus not implemented yet) - Added, Component version info on load. - Fixed, Erase whole flash bug on multi flash chip phones. - Fixed, BT flush after firmware update. - Fixed, BB5RPL decryption fail when write RPL. - Added, Product code auto selection on "Scan" and other minor. Note: for MXKEY LiTE dongle user, you need to "Update FW" first. -----------------------------------v3.0 Beta4, Public-Release. Whats NEW: - re-constructed & improved, DCT4PLUS unlock patch - RELOCK now possible, also support 1200/1208 all version(click "No" when yo u asked to restore flash block) - re-constructed, DCT4 CNT 64->128k convertion. - Added, support for new product profile type(BB5,DCT4PLUS). - Fixed, crash (application closed) on VCOM module. - Improved, FBUS scan (will change phone mode if needed) - Fixed, PM write function (BB5 RF & BB parameters bug) and other minor.

-----------------------------------v3.0 Beta3, Public-Release. Whats NEW: - re-constructed, CDMA Tuning. - re-constructed, Quick repair page (BT repair, LCD reset, etc). - improved, Online Updater. - added, CDMA NFP folder to model selection. and other minor. -----------------------------------v3.0 Beta2, Public-Release. Whats NEW: Almost all elements are new, the most important part of this eta was that it was finally recoded from scratch. Not implemented yet: - JAF interface support - DCT3/L function - DCT4PLUS unlock patch - BB5 generic unlock - and some other. This brand new exe will supports MXKEY and MXKEY LiTE What is MXKEY LiTE? its new dongle for mobileEx, SmartCard based. What about future support about MXKEY? We released MXKEY LiTE for costumer satisfaction. MXKEY LiTE will be cheaper, and thats why we call it "Lite". MXKEY will be fully supported as MXKEY LiTE, note that there was no differences between MXKEY and the LiTE version. Unimplemented features will be added as soon as possible. while that, you could also request feature MXKEY LiTE quick driver instalation: !!! Do NOT install Smartcard reader before installing drivers. goto "C:\mobileEx\3.0\data\drivers" then click "instdrv.exe" to install the Read er driver. This is PCSC ISO7816 compatible reader, you could also use any PCSC c ompatible reader to work with the card. ----------------------------------v3.0 Beta, Pre-Release. Published to beta-testers.