Free SIM Unlock via nv_data.bin for SGS3 XXBLG1

Search This thread

txlibre

Member
Jul 27, 2006
6
41
Well this is the method I used to unlock my S3 movistar.
requirement:
1 - Have the S3 root
2 - Make a copy of the EFS folder
3 - Hex Editor (I used Notepad + + with the plunging HEX)
4 - Have installed root explorer
We begin:
1 - We copy our EFS folder to your PC and perform a second copy to work with.
2 - Open the file nv_data.bin with Hex editor
3 - We go to the address 00181460 and modify 01 to 00
4 - Save the file

http://xdaforums.com/attachment.php?attachmentid=1135934&stc=1&thumb=1&d=1339936756

5 - copy the file to your S3.
6 - With the Root explorer, activate R / W in the EFS folder and file replace nv_data.bin.
7 - With the root file explorer to give the following permissions:
a. Owner: Read, Write, Execute
b. Changes owner and group: 1001-Radio
8 - Restart the phone.
9 - After restarting check by dialing * # 7465625 # to the continuous network lock ON
10 - Now we copy the file nv.log of your S3 (located in EFS folder)
11 - Open this file and we will eventually see something like this:
Fri June 15 16:39:51 2012: MD5 fail. md5 orignal fd4425f64f7f498230f16cd2234638a '2 '
computed md5' faf1572f4a4dd15f1f9061840cc4b42f '(Rild)
Fri June 15 16:39:51 2012: restored backup NV.

12 - Now we're working copy of our EFS folder
13 - Edit the file nv_data.bin.md5 and see at the dump that matches the first line: 2fd4425f64f7f498230f16cd2234638a
14 - Modify from the dump placing the data in the second line: faf1572f4a4dd15f1f9061840cc4b42f
15 - Save the file.
16 - repeat the 5-6-7-8 but with both files (nv_data.bin and nv_data.bin.md5)
To XXBLG1 add this step:
17 - We copy and rename nv_data.bin and nv_data.bin.md5 to nv_data.bak and nv_data.bak.md5 respectively.
18 - After rebooting check by dialing * # 7465625 # to the continuous network lock OFF
I hope you find it helpful, as always, you are solely responsible, I just indicated to you those steps I've done on my terminal.

This method is based on dagentooboy work http://xdaforums.com/showthread.php?t=761045 so I must thank you for your work and the people he thanked.
LEGAL NOTES (because information should be free for all):
YOU MAY NOT, BY ANY MEANS, USE THIS SOLUTION/CODE OR PART OF IT FOR COMMERCIAL PURPOSES.
DO NOT USE THIS EXTRACTION METHOD COMMERCIALLY
 

Attachments

  • nv_data.jpg
    nv_data.jpg
    76.5 KB · Views: 22,374
Last edited:

tids2k

Senior Member
Apr 21, 2009
2,739
955
Sydney
Google Pixel 6 Pro
Well this is the method I used to unlock my S3 movistar.
requirement:
1 - Have the S3 root
2 - Make a copy of the EFS folder
3 - Hex Editor (I used Notepad + + with the plunging HEX)
4 - Have installed root explorer
We begin:
1 - We copy our EFS folder to your PC and perform a second copy to work with.
2 - Open the file nv_data.bin with Hex editor
3 - We go to the address 00181460 and modify 01 to 00
4 - Save the file

http://xdaforums.com/attachment.php?attachmentid=1135934&stc=1&thumb=1&d=1339936756

5 - copy the file to your S3.
6 - With the Root explorer, activate R / W in the EFS folder and file replace nv_data.bin.
7 - With the root file explorer to give the following permissions:
a. Owner: Read, Write, Execute
b. Changes owner and group: 1001-Radio
8 - Restart the phone.
9 - After restarting check by dialing * # 7465625 # to the continuous network lock ON
10 - Now we copy the file nv.log of your S3 (located in EFS folder)
11 - Open this file and we will eventually see something like this:
Fri June 15 16:39:51 2012: MD5 fail. md5 orignal fd4425f64f7f498230f16cd2234638a '2 '
computed md5' faf1572f4a4dd15f1f9061840cc4b42f '(Rild)
Fri June 15 16:39:51 2012: restored backup NV.

12 - Now we're working copy of our EFS folder
13 - Edit the file nv_data.bin.md5 and see at the dump that matches the first line: 2fd4425f64f7f498230f16cd2234638a
14 - Modify from the dump placing the data in the second line: faf1572f4a4dd15f1f9061840cc4b42f
15 - Save the file.
16 - repeat the 5-6-7-8 but with both files (nv_data.bin and nv_data.bin.md5)
17 - After rebooting check by dialing * # 7465625 # to the continuous network lock OFF
I hope you find it helpful, as always you I am solely responsible for your terminal, I just indicated to you those steps I've done on my terminal.

good pointer -- :p
 
  • Like
Reactions: jhonybravo4u

vinokirk

Senior Member
Mar 30, 2008
2,249
247
England
Hi, I need to get my phone unlocked quick :)
I have used mskip's TooKit to backup my EFS folder.
It has given me two files: efs.img (20,480 KB) and efs.tar(2 KB)

How do I get the 'nv_data.bin' from 'efs.img'
I am searching the net as well, but for quickness I have asked the question :)

EDIT:
OK, I found nv_data.bin in the /efs folder :)

---------- Post added at 11:20 PM ---------- Previous post was at 10:54 PM ----------

Ok, im stuck at step 11:
11 - Open this file and we will eventually see something like this:
Fri June 15 16:39:51 2012: MD5 fail. md5 orignal fd4425f64f7f498230f16cd2234638a '2 '
computed md5' faf1572f4a4dd15f1f9061840cc4b42f '(Rild)
Fri June 15 16:39:51 2012: restored backup NV.

I cannot find this text in my nv.log file
EDIT:
OK, so for some reason I didnt copy the modified nv_data.bin back to my phone... oops!
 
Last edited:

vnamee

Senior Member
Apr 4, 2007
114
27
Samsung Galaxy S24 Ultra
Hi, I need to get my phone unlocked quick :)
I have used mskip's TooKit to backup my EFS folder.
It has given me two files: efs.img (20,480 KB) and efs.tar(2 KB)

How do I get the 'nv_data.bin' from 'efs.img'
I am searching the net as well, but for quickness I have asked the question :)

EDIT:
OK, I found nv_data.bin in the /efs folder :)

Those programs make a bit by bit back up of the entire partition, which includes the EFS folder I believe, which is the way to go. I messed up my vibrant once somehow because that partition got corrupted, which disallows writing to the partition, meaning you can't copy over the /EFS stuff. Before doing this, make sure you have a backup! When you punch in *#06# after doing it, and it should still show your IMEI number and not the generic Samsung number. I think it caused some issues w/ the market as well.

In any case, I knew a sim unlock would be out soon. I think ALL Samsung phones have been unlocked similarly since the galaxy series. I'll make sure to try this once I get my phone this Thursday. Maybe someone will make an APK soon.
 

faddys123

Senior Member
May 8, 2010
2,628
98
There is an app on the market galaxy s unlock by helroz and in the what's new it says galaxy s 3 works but there is only one command block can someone check it out haven't got my GS3 yet
 

beautyangel

Senior Member
May 13, 2007
487
63
Orion deep far in the Galaxy
Help needed pls.

to All helpers and friends. Huuuuge thanks in advance
Rooted phone. Super Su, Busy Box pro, CWM 3.60, OMEGA ROM.

with ES file explorer or Root explorer.

Follow instructions : yes.
With Root explorer
System EFS Folder : system root (R/W)
nv_data.bin Change owner
owner 1001-radio
Group 1001 - radio or what ever else, IN GROUP i have 0-root, 1000 system
1001 radio....... 1015 sdcard_rw (I Do not HAVE 755) I even dont know where to find (755) and what does it mean.
nv_data.bin change rights to rxw rw- rw- on system and in sd card didnt give me any permission. EVEN ROOTS (R/W).

BACKUP DONE.

I Open (nv-data.bin) directly from system or a copy from sd card with (Hex Editor.apk) on android system

I DONT HAVE (00181460)

I HAVE 00181455 ff ff ff ff ff ff ff ff ff
I HAVE 0014145e ff ff ff ff ff ff ff ff ff
I HAVE 00181467 ff ff 01 00 00 00 00 51 a8

What to do guys. I just feel going in desrt without Water and shoes.

I can pm or upload my original nv_data.bin and nv_data.bin.md5

Android Version 4.0.4
AP : I9300XXALF2
CP : I9300XXLF2
CSC : I9300EURALE1 (is it possible to change this one???)
Kernel 3.0.15-Siyah-s3-v1.0.1
Build number
omega 5.1 - XXALF2
am on SFR france network.
 
Last edited:

txlibre

Member
Jul 27, 2006
6
41
to All helpers and friends. Huuuuge thanks in advance
Rooted phone. Super Su, Busy Box pro, CWM 3.60, OMEGA ROM.

with ES file explorer or Root explorer.

Follow instructions : yes.
With Root explorer
System EFS Folder : system root (R/W)
nv_data.bin Change owner
owner 1001-radio
Group 1001 - radio or what ever else, IN GROUP i have 0-root, 1000 system
1001 radio....... 1015 sdcard_rw (I Do not HAVE 755) I even dont know where to find (755) and what does it mean.
nv_data.bin change rights to rxw rw- rw- on system and in sd card didnt give me any permission. EVEN ROOTS (R/W).

BACKUP DONE.

I Open (nv-data.bin) directly from system or a copy from sd card with (Hex Editor.apk) on android system

I DONT HAVE (00181460)

I HAVE 00181455 ff ff ff ff ff ff ff ff ff
I HAVE 0014145e ff ff ff ff ff ff ff ff ff
I HAVE 00181467 ff ff 01 00 00 00 00 51 a8

What to do guys. I just feel going in desrt without Water and shoes.

I can pm or upload my original nv_data.bin and nv_data.bin.md5

Android Version 4.0.4
AP : I9300XXALF2
CP : I9300XXLF2
CSC : I9300EURALE1 (is it possible to change this one???)
Kernel 3.0.15-Siyah-s3-v1.0.1
Build number
omega 5.1 - XXALF2
am on SFR france network.

Your problem is the app you used. In the line 00181467 , you must change the 01 to 00.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 41
    Well this is the method I used to unlock my S3 movistar.
    requirement:
    1 - Have the S3 root
    2 - Make a copy of the EFS folder
    3 - Hex Editor (I used Notepad + + with the plunging HEX)
    4 - Have installed root explorer
    We begin:
    1 - We copy our EFS folder to your PC and perform a second copy to work with.
    2 - Open the file nv_data.bin with Hex editor
    3 - We go to the address 00181460 and modify 01 to 00
    4 - Save the file

    http://xdaforums.com/attachment.php?attachmentid=1135934&stc=1&thumb=1&d=1339936756

    5 - copy the file to your S3.
    6 - With the Root explorer, activate R / W in the EFS folder and file replace nv_data.bin.
    7 - With the root file explorer to give the following permissions:
    a. Owner: Read, Write, Execute
    b. Changes owner and group: 1001-Radio
    8 - Restart the phone.
    9 - After restarting check by dialing * # 7465625 # to the continuous network lock ON
    10 - Now we copy the file nv.log of your S3 (located in EFS folder)
    11 - Open this file and we will eventually see something like this:
    Fri June 15 16:39:51 2012: MD5 fail. md5 orignal fd4425f64f7f498230f16cd2234638a '2 '
    computed md5' faf1572f4a4dd15f1f9061840cc4b42f '(Rild)
    Fri June 15 16:39:51 2012: restored backup NV.

    12 - Now we're working copy of our EFS folder
    13 - Edit the file nv_data.bin.md5 and see at the dump that matches the first line: 2fd4425f64f7f498230f16cd2234638a
    14 - Modify from the dump placing the data in the second line: faf1572f4a4dd15f1f9061840cc4b42f
    15 - Save the file.
    16 - repeat the 5-6-7-8 but with both files (nv_data.bin and nv_data.bin.md5)
    To XXBLG1 add this step:
    17 - We copy and rename nv_data.bin and nv_data.bin.md5 to nv_data.bak and nv_data.bak.md5 respectively.
    18 - After rebooting check by dialing * # 7465625 # to the continuous network lock OFF
    I hope you find it helpful, as always, you are solely responsible, I just indicated to you those steps I've done on my terminal.

    This method is based on dagentooboy work http://xdaforums.com/showthread.php?t=761045 so I must thank you for your work and the people he thanked.
    LEGAL NOTES (because information should be free for all):
    YOU MAY NOT, BY ANY MEANS, USE THIS SOLUTION/CODE OR PART OF IT FOR COMMERCIAL PURPOSES.
    DO NOT USE THIS EXTRACTION METHOD COMMERCIALLY
    3
    I never used the lock bit flip method, so its not by me and I would appreciate it if you would remove my name from the title.
    2
    Is it possible to unlock with this metod the XXLH1??

    thanks

    @cooldfuzion
    Now there's an app for that :)
    2
    can someone make a video for noobs like me ? just don't want anything wrong to happen.