View Poll Results: What model did this work on?
GT-I9000 2,054 49.41%
USA Vibrant 973 23.41%
USA Captivate 573 13.78%
Bell I9000 275 6.62%
Other 282 6.78%
Voters: 4157. You may not vote on this poll

Post Reply

[REF] How to unlock/unfreeze all SGS Models [NOW WORKS ON Vibrant 4G][Updated 4-9-11]

21st August 2010, 03:28 PM   |  #1  
dagentooboy's Avatar
OP Senior Member
Flag Kansas
Thanks Meter: 134
 
516 posts
Join Date:Joined: Feb 2008
More
Vibrant 4G/SGS 4G manual method here

PRO App also works on Vibrant 4G/SGS 4G for anyone who doesn't feel comfortable with a hex editor

Do NOT try this or any other unlock method on the SC-02B Docomo phone. Please see thread here for progress on the SC-02B

Please note the same information used to develop the app is in the guide for free... the app just makes it easier

ALL METHODS FOR NEWER PHONES REQUIRE ROOT... PLEASE GO GET ROOT ON YOUR PHONE AND THEN COME BACK.

Oh and BTW... I cannot be held responsible for anything that happens to your phone.... EVER!


Before you start... if you don't have root you WILL need it unless you are on a really old version of android 2.1 (look in Appendix A for depreciated methods)

Step 1. - Retrieve nv_data.bin file
use "adb shell" or a terminal emulator to get a terminal prompt and run the following commands
Code:
su
cat /efs/nv_data.bin >> /sdcard/nv_data.bin
Step 2. - Edit nv_data.bin file
mount the internal SD Card on your computer
make a backup copy of the nv_data.bin file on your computer
using your favorite HEX editor open the nv_data.bin on the sdcard
jump to address 0x181468

you should see a string like this
ff 01 00 00 00 00 46 46
there are 5 different types of locks in 5 different bytes
the FF byte should be left alone
the first byte after the FF is the network lock
the next byte is the network subset lock
the next byte is the sp lock
the next byte is the cp lock
the last byte appears to be a data lock.
the 46 46 should be left alone
Change any 0x01 to 0x00 (or 0x00 to 0x01 to lock for warranty)
It should read ff 00 00 00 00 00 46 46 for unlocked
save and close file
unmount SD Card

Step 3. - Replace nv_data.bin file
I want to say it again so no one misses it MAKE SURE YOU HAVE A BACKUP OF YOUR NV_DATA.BIN FILE BEFORE YOU CONTINUE!!!!!

use "adb shell" or a terminal emulator to get a terminal prompt and run the following commands
Code:
su
rm /efs/nv_data.bin
rm /efs/nv_data.bin.md5
cat /sdcard/nv_data.bin >> /efs/nv_data.bin
chmod 755 /efs/nv_data.bin
chown radio.radio /efs/nv_data.bin || chown 1001.1001 /efs/nv_data.bin
reboot
your phone is now unlocked... enjoy

[OPTIONAL] Use the PRO app [OPTIONAL]
Please note that this step is ONLY here for people that are not comfortable using a Hex editor.
Search "Vibrant unlock" in the market or scan the QR code:


Install and run app
press menu
press Unlock Phone
Select phone
allow root
at this point if you get an error code make SURE you mount your internal SD card on your computer and backup the nv_data.bin.orig file that is there.
press unlock
restart and your phone is now unlocked

to lock your phone for warranty
press lock instead of unlock
restart your phone, remove root, and take your phone in for warranty


APPENDIX A (DEPRECIATED)

DOES NOT WORK ON 90% PHONES PLEASE USE THE APP

Using ADB
Make sure that Network Lock is the only thing on... go to phone and enter *#7465625#
Make sure USB debugging is enabled (Settings->Applications->Development->USB Debugging)
Using APP (Thanks ClarkeHackworth and DaGentooBoy)
ClarkHackworth's page about the app
Same thing as before if this bricks your phone sorry but we aren't responsible.

Step A.1. – Get your code
Search Samsung Galaxy S Unlock Tool in the market or scan the QR code.

Install SGS_Unlock.apk
Applications->SGS Unlock
Menu->Root Gen Codes (Root method is the most reliable method at this point)

Jump to Step A.2.

Step A.1.alternate – Get your code [B]

For Mac Updated!!! New Script

Quote:
Originally Posted by nbs11

1. Download the Samsung Galaxy S Unlocker for Mac from this here:
http://www.multiupload.com/9NEBR6FAKD

2. Mount the DMG and drag the folder onto the hard drive. DO NOT DRAG THE ICON WITH THE LOCK (the app). Once the file is finished copying continue.

3. Open the application with the lock. It should open a terminal window. Let it run for a few seconds and then it should show a screen like this:



4. Write down your unlock code

For Windows UPDATED!!! With Un-Freeze Codes
Video Guide
Download and extract the attached Generate Unlock Windows.zip.
Run Generate_Code.bat
Look for the line Network Control Key:YourCode
Save the code

Step A.2. – Enter the code

Power down your phone
Put in a SIM card from another carrier
Power up your phone
When it boots up it will ask for the unlock code that you found above

OR

NO SIM Method (Thanks RazvanG)
(Apparently this just adds another SIM to the accepted SIM list... can someone confirm?)
remove sim card
power on phone without sim
enter *7465625*638*# and relock the phone to another network other than the one u have u'r sim card (eg 22610)
power off phone
insert sim card back
power on and enter nck code extracted from .bak file
phone unlocked

Step A.3. – Flash back (IF THE CODE DIDN'T WORK)

Flash back to an older firmware (I9000XXJF7 with 513.pit worked for me on an I9000)
Now enter the unlock code you generated in Step 2.


Quote:
Originally Posted by RazvanG

HOW TO LOCK SAMSUNG GALAXY S - FOR WARRANTY PURPOSES ONLY (TESTED)

After you get the NCK code using the method above, enter: *7465625*638*#
There will be a pop-up box.
Complete the first field (MCC/MNC) with the network you want your phone locked to (eg. 226 10 where 226 = romania; 10 = orange etc.) and the second field (Control Key) with the NCK extracted from the .bak file.
Press OK and your phone should relock.
RazvanG

Guide in Spanish here
Guide in Italian here
Guide in Chinese here

LEGAL NOTES (because information should be free for all):
YOU MAY NOT, BY ANY MEANS, USE THIS SOLUTION/CODE OR PART OF IT FOR COMMERCIAL PURPOSES.
DO NOT USE THIS EXTRACTION METHOD COMMERCIALLY



PLEASE give credit (and donations if you can) to
For those of you that have donated THANKS! (You know who you are... you paid for my developer account so I could post the app)

DaGentooBoy For this AWESOME guide, the free and PRO apps, finding the other unlock bits, the original mac and windows scripts, the no root cat nv_data method, the unfreeze code portion of the mac script, and a lot of troubleshooting (Paypal)

dawen, Helroz, and NWolf for discovering the hex location of the lock bit in the nv_data.bin file (donate to NWolf here)

RazvanG for pointing galaxysguy in the right direction, finding the Freeze Code location in the .bak file, the code for re-locking the phone to any network, and the solution to unlock with only one sim card (Paypal)

rbnet.it and marcopon for the cool SGUX utility for windows to extract both the Unlock and Unfreeze codes (donate to marcopon and rbnet.it Here)

nbs11 for the new mac script that makes it REALLY easy (donate here)

Bowsa2511 for the command to extract the unlock code on a Mac (Paypal here)

rhcp0112345 for finding the file and giving me (and others) a place to start (Donate here)

galaxysguy for confirming that I was looking at the right code (Paypal here)

AllGamer for starting the Bounty thread and giving the XDA devs the motivation to get started.

If you want me to extract the code for you just PM me with a link to your zipped bml3.bak or nv_data.bin file and I will send you back the code. If it works please feel free to donate via Paypal
Attached Files
File Type: zip Generate Unlock Windows.zip - [Click for QR Code] (305.9 KB, 206731 views)
File Type: apk SGS_Unlock.apk - [Click for QR Code] (64.1 KB, 63597 views)
Last edited by dagentooboy; 16th July 2011 at 07:53 PM.
The Following 49 Users Say Thank You to dagentooboy For This Useful Post: [ View ]
21st August 2010, 03:54 PM   |  #2  
Recognized Developer
Flag Melbourne
Thanks Meter: 559
 
842 posts
Join Date:Joined: Jul 2010
Donate to Me
Great work dagentooboy. I was working on a free unlock myself but approaching it from a slightly different angle. Unfortunately bricking my phone held me up a lot but I'm glad to see someone has done it now.
21st August 2010, 04:10 PM   |  #3  
AllGamer's Avatar
Retired Forum Moderator
Flag buried under loads of work IRL
Thanks Meter: 1,578
 
11,521 posts
Join Date:Joined: May 2008
Donate to Me
More
re: credits
apparently marcopon helped rbnet.it to write that sgux utility.
21st August 2010, 04:19 PM   |  #4  
dagentooboy's Avatar
OP Senior Member
Flag Kansas
Thanks Meter: 134
 
516 posts
Join Date:Joined: Feb 2008
More
Quote:
Originally Posted by AllGamer

re: credits
apparently marcopon helped rbnet.it to write that sgux utility.

thanks... I saw the bounty thread is updated. Feel free to link to the instructions on this thread so that they all go to one place.
The Following User Says Thank You to dagentooboy For This Useful Post: [ View ]
21st August 2010, 04:26 PM   |  #5  
Junior Member
Flag Umbria
Thanks Meter: 1
 
25 posts
Join Date:Joined: Aug 2010
More
Quote:
Originally Posted by AllGamer

re: credits
apparently marcopon helped rbnet.it to write that sgux utility.

Yes! It's shown in the credits:



Uploaded with ImageShack.us
21st August 2010, 04:30 PM   |  #6  
Junior Member
Flag Edmonton
Thanks Meter: 0
 
18 posts
Join Date:Joined: Jul 2010
More
This is just the thing I've been looking for. Thanks a lot. Just out of curiosity, why do you have to flash back to older firmware after entering the unlock code?
21st August 2010, 04:34 PM   |  #7  
Junior Member
Thanks Meter: 0
 
15 posts
Join Date:Joined: Apr 2010
More
Thumbs up
Yes, I usually go by the Mark0 nick but it was already used in the forum (IIRC).
I want also to thanks andars05 for a post he made that provided some inspiration.

Nice to see that the tool is proving to be useful!

Feel free to donate to the PayPal link rbnet.it provided!
Last edited by marcopon; 21st August 2010 at 07:18 PM. Reason: Added a thank you note!
21st August 2010, 04:43 PM   |  #8  
Member
Thanks Meter: 2
 
32 posts
Join Date:Joined: Aug 2010
More
Got "Permission denied" after su in step 1 - I've got rooted Captivate with stock firmware - I know that is probably problem with access to root account, but all apps are working properly with it. Any idea for solution?

I've Windows 7, tried running command line with administrator privileges, but it didn't helped.
21st August 2010, 04:46 PM   |  #9  
Junior Member
Flag Umbria
Thanks Meter: 1
 
25 posts
Join Date:Joined: Aug 2010
More
Quote:
Originally Posted by TheNaturat

Got "Permission denied" after su in step 1 - I've got rooted Captivate with stock firmware - I know that is probably problem with access to root account, but all apps are working properly with it. Any idea for solution?

I've Windows 7, tried running command line with administrator privileges, but it didn't helped.

After "su", have you allowed the root access on the phone?
Last edited by rbnet.it; 21st August 2010 at 11:05 PM.
21st August 2010, 04:49 PM   |  #10  
dagentooboy's Avatar
OP Senior Member
Flag Kansas
Thanks Meter: 134
 
516 posts
Join Date:Joined: Feb 2008
More
Quote:
Originally Posted by Jreddekopp

This is just the thing I've been looking for. Thanks a lot. Just out of curiosity, why do you have to flash back to older firmware after entering the unlock code?

Sorry That is what it took to unlock mine. I updated the first post... you don't have to do that if the code works.

The Following User Says Thank You to dagentooboy For This Useful Post: [ View ]
Post Reply Subscribe to Thread
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes


Top Threads in Galaxy S I9000 Android Development by ThreadRank