How to RECOVER SL3 SIMLOCK DATA from Full Flash for FREE !!

Discussion in 'Flasher-Box' started by jogjaflasher_com, May 22, 2012.

  1. jogjaflasher_com

    jogjaflasher_com Well-Known Member Product Supporter

    Messages:
    1,860
    Likes Received:
    227
    Trophy Points:
    73
    Greetings.

    Here are the steps to RECOVER SIMLOCK DATA from FULL FLASH backup.

    1. Read FULL FLASH via ATF NITRO
    2. You must know phone's original Product Code. It can be seen on back
    side of phone at it's lable or from NPC DATA. NPC can be backup EVEN phone is dead...
    In my case Product Code is: "059H5S3"
    3. Search for your Product Code in Nokia Data Package or Navifirm.
    Its important because it will tell you phone's original PM120,0.
    In my case: "RM-775 MEA-7 DARK URDU" So, my phone is Factory unlocked
    by Nokia and it's Provider Key is: 2440700000000000. Now some Hex work ;-)
    4. Use any good HexEditor, I uses HxD. drag and drop FLASH_DUMP.bin to HxD
    5. Press Ctrl + F, Search for: "2440700000000000" and DataType: Hex-values

    [​IMG]

    We found PM120,0 512 byte(s). But it should be 944 byte(s) if phone have 24407 provider key...
    If we will look upper, will find the rest 432 byte(s) DATA, too.

    [​IMG]

    512+432 = 944 byte(s). That's mean now our PM120,0 is 100% Oki.

    Now look little upper, we'll get PM120,2 = 130 byte(s).
    It will always have "0100" in the end or "01000000" in the end if phone is 20-digits NCK...

    [​IMG]

    Again look upper, and we'll get PM120,1 = 160 byte(s).

    [​IMG]

    So, now we have recovered PM120,0 - PM120,1 and PM120,2. Left PM120,3.
    We can simply put "000000000000000000000000" of 112 byte(s) ...
    Since phone was factory unlocked, it will always have "00000000000000000".

    Few things about PM120:

    - If phone was Factory unlocked than it will have PM120 like this:

    PM120,0 = 944 byte(s).
    PM120,1 = 160 byte(s).
    PM120,2 = 130 byte(s). or 132 byte(s). If phone is using 20-digit NCK
    PM120,3 = 112 byte(s). and all ZERO "000000000000000000000000"

    - If phone was network locked before and u or customer made a unlock of
    it than look for the original product code and it will tell you what PM120,0
    it should have inside and it's length... Also, PM120,3 will be changed here
    NOT all ZEROs. It will contain your phone's UNLOCK CODE(s).

    For example PM120,3 112 byte(s):

    00000000000000000000000000000000 <---- LEVEL 1 CODE(s) are stored here
    00000000000000000000000000000000 <---- LEVEL 2 CODE(s) are stored here
    00000000000000000000000000000000 <---- LEVEL 3 CODE(s) are stored here
    00000000000000000000000000000000 <---- LEVEL 4 CODE(s) are stored here
    00000000000000000000000000000000 <---- LEVEL 5 CODE(s) are stored here
    00000000000000000000000000000000 <---- LEVEL 6 CODE(s) are stored here
    00000000000000000000000000000000 <---- LEVEL 7 CODE(s) are stored here

    If phone was locked before, you'll see codes instead of ZEROs.
    This PM120,3 can also be found near PM120,0 like we found PM120,1
    and PM120,2. If it have stored unlock codes inside, else, can put ZEROs
    of 112 byte(s).

    Here is the PM120 I recoverd from FullFlash backup:



    Logs after Full ERASED, FLASHED:

    Code:
    18:45:07 : ================================================
    18:45:07 :             Basic Phone Information             
    18:45:07 : ================================================
    18:45:07 : MCU Version: V 07.32 08-12-11 RM-775 (c) Nokia            
    18:45:07 : IMEI Plain : 357399045545626
    18:45:07 : IMEI Spare : A357399045545620
    18:45:07 : IMEI SV    : 33573990455456251F
    18:45:07 : Category   : Phone
    18:45:07 : Phone Type : RM-775
    18:45:07 : 
    18:45:07 : ================================================
    18:45:07 :            Extended Phone Information           
    18:45:07 : ================================================
    18:45:07 : Product Serial Number: 0
    18:45:07 : Long Production SN   : 0
    18:45:08 : PPM SW Version       : V 07.32 08-12-11 RM-775 (c) Nokia             MEC
    18:45:08 : BT MCM Version       : 4217-v924
    18:45:08 : MCU SW Version       : V 07.32 08-12-11 RM-775 (c) Nokia
    18:45:08 : RFIC Version         : |Alli_4.b.1
    18:45:08 : DSP Version          : 92_PM2_7.32
    18:45:08 : LCD Version          : TPO
    18:45:08 : Content Pack Version : Content: meac_059H5S3 V 07.32 03-02-12 RM-775 (c) Nokia
    18:45:08 : AHNE Version         : 21
    18:45:08 : RETU Version         : 51
    18:45:08 : TAHVO Version        : 00
    18:45:08 : Wireless LAN ID      : 94:3A:F0:14:FA:7A
    18:45:08 : Bluetooth ID         : 94:3A:F0:14:AC:5A
    18:45:08 : CS Type              : GSM850, GSM900, GSM1800, GSM1900, WCDMA I, WCDMA II, WCDMA V, WCDMA VIII
    18:45:08 : 
    18:45:08 : ================================================
    18:45:08 :               Simlock Information               
    18:45:08 : ================================================
    [B][COLOR="Red"]18:45:08 : Unable to read SP Data..[/COLOR][/B]
    18:45:08 : SECURITY_TEST           : PASSED
    18:45:09 : SECURITY_CODE          : 12345
    18:45:09 : PHONE_MODE              : TEST
    18:45:09 :                                                 
    18:45:09 : ================================================
    18:45:09 :           Dynamic Camera Configuration          
    18:45:09 : ================================================
    18:45:09 : DCC ID  : 0A4E2007
    18:45:09 : DCC Ver: 008005
    18:45:09 : Status   : OK

    Logs after write recovered PM120:

    Code:
    18:46:19 : ================================================
    18:46:19 :             Basic Phone Information             
    18:46:19 : ================================================
    18:46:19 : MCU Version: V 07.32 08-12-11 RM-775 (c) Nokia            
    18:46:19 : IMEI Plain : 357399045545626
    18:46:19 : IMEI Spare : A357399045545620
    18:46:19 : IMEI SV    : 33573990455456251F
    18:46:19 : Phone Model: Nokia X3-02.5
    18:46:19 : Category   : Phone
    18:46:19 : Phone Type : RM-775
    18:46:19 : 
    18:46:19 : 
    [B][COLOR="red"]18:46:19 : Field : 120 Sub : 0 Byte(s): 944  - Ok
    18:46:19 : Field : 120 Sub : 1 Byte(s): 160  - Ok
    18:46:19 : Field : 120 Sub : 2 Byte(s): 130  - Ok
    18:46:19 : Field : 120 Sub : 3 Byte(s): 112  - Ok[/COLOR][/B]
    18:46:20 : PM  Upload Done!...
    18:46:25 : 
    18:46:25 : Scanning USB Ports...
    18:46:25 : 
    18:46:25 : ================================================
    18:46:25 :             Basic Phone Information             
    18:46:25 : ================================================
    18:46:25 : MCU Version: V 07.32 08-12-11 RM-775 (c) Nokia            
    18:46:25 : IMEI Plain : 357399045545626
    18:46:25 : IMEI Spare : A357399045545620
    18:46:25 : IMEI SV    : 33573990455456251F
    18:46:25 : Phone Model: Nokia X3-02.5
    18:46:25 : Category   : Phone
    18:46:25 : Phone Type : RM-775
    18:46:25 : 
    18:46:25 : ================================================
    18:46:25 :            Extended Phone Information           
    18:46:25 : ================================================
    18:46:25 : Product Serial Number: 0
    18:46:25 : Long Production SN   : 0
    18:46:25 : PPM SW Version       : V 07.32 08-12-11 RM-775 (c) Nokia             MEC
    18:46:25 : BT MCM Version       : 4217-v924
    18:46:26 : MCU SW Version       : V 07.32 08-12-11 RM-775 (c) Nokia
    18:46:26 : RFIC Version         : |Alli_4.b.1
    18:46:26 : DSP Version          : 92_PM2_7.32
    18:46:26 : LCD Version          : TPO
    18:46:26 : Content Pack Version : Content: meac_059H5S3 V 07.32 03-02-12 RM-775 (c) Nokia
    18:46:26 : AHNE Version         : 21
    18:46:26 : RETU Version         : 51
    18:46:26 : TAHVO Version        : 00
    18:46:26 : Wireless LAN ID      : 94:3A:F0:14:FA:7A
    18:46:26 : Bluetooth ID         : 94:3A:F0:14:AC:5A
    18:46:26 : CS Type              : GSM850, GSM900, GSM1800, GSM1900, WCDMA I, WCDMA II, WCDMA V, WCDMA VIII
    18:46:26 : 
    18:46:26 : ================================================
    18:46:26 :               Simlock Information               
    18:46:26 : ================================================
    [B][COLOR="Red"]18:46:26 : CONFIG KEY    :  0000000000000000
    18:46:26 : PROVIDER KEY  :  2440700000000000
    18:46:26 : NETWORK NAME  :  Nokia Default;Finland
    18:46:26 : LOCK COUNTERS :  KEYPRESS 0/3,  FBUS 0/10
    18:46:26 : SIMLOCK TABLE :
    18:46:26 :    Block [1]  1:Open 2:Open 3:Open 4:Open 5:Open
    18:46:26 :    Block [2]  1:Open 2:Open 3:Open 4:Open 5:Open
    18:46:26 :    Block [3]  1:Open 2:Open 3:Open 4:Open 5:Open
    18:46:26 :    Block [4]  1:Open 2:Open 3:Open 4:Open 5:Open
    18:46:26 :    Block [5]  1:Open 2:Open 3:Open 4:Open 5:Open
    18:46:26 :    Block [6]  1:Open 2:Open 3:Open 4:Open 5:Open
    18:46:26 :    Block [7]  1:Open 2:Open 3:Open 4:Open 5:Open
    18:46:26 : SIMLOCK STATE :  Not Locked[/COLOR][/B]
    18:46:26 : 
    18:46:26 : SIMLOCK_TYPE             : PA_SL3 (15-digit NCK)
    18:46:26 : SIMLOCK_TEST             : PASSED
    18:46:26 : SECURITY_TEST           : PASSED
    18:46:26 : SECURITY_CODE          : 12345
    18:46:27 : CMLA_KEY                    : ABSENT
    18:46:27 : SUPER_DONGLE_TEST : PASSED
    18:46:27 : 
    18:46:27 : ================================================
    18:46:27 :               SL3 Phone detected                
    18:46:27 : ================================================
    18:46:27 :                                                 
    18:46:27 : * Firmware Version Downgrade will KILL PHONE !!!
    18:46:27 : * Manual Full Erase WILL KILL PHONE!!!          
    18:46:27 : * Simlocks are in PM 120 Only...                
    18:46:27 : * PM 308 is Write Protected...                  
    18:46:27 : 
    18:46:27 : PHONE_MODE              : TEST
    18:46:27 :                                                 
    18:46:27 : ================================================
    18:46:27 :           Dynamic Camera Configuration          
    18:46:27 : ================================================
    18:46:27 : DCC ID  : 0A4E2007
    18:46:27 : DCC Ver: 008005
    18:46:27 : Status   : OK
    BR

    copas dari http://forum.gsmhosting.com/vbb/8431561-post1.html
     
    Last edited by a moderator: May 22, 2012

Share This Page