Samsung Galaxy S 4G Unlock Code Found

Search This thread

k..white

New member
Oct 13, 2012
1
4
ICS users!

FYI, I have discovered that on my SGS4G running AOKP / Team Acid ICS, following the procedure in OP (ie searching for FF FF 01 00 00) but instead checking the file /efs/root/afs/settings/nv_data.bin works fine.

Also, and I haven't bothered to check and see if it's as a result of being on a custom rom, but I'm able to use generic file explorers on Android like Ol File Manager (free from market) to just copy the file, no terminal hackery required. YMMV.

Thanks OP!

-K
 

SherifAshrafGabr

New member
Oct 8, 2012
3
0
I had 314 occurences please help

***** IMPORTANT ROOT IS REQUIRED BEFORE PROCEEDING *****

***** ALSO PLEASE READ CAREFULLY BEFORE ACTUALLY APPLYING STEPS *****


All right ladies and gentlemen, coders and non coders I have personally found the unlock code NOT THE FREEZE CODE only the unlock code for your Samsung Galaxy S 4G hidden in the same files as previous Vibrant phones.

Please understand this was a hard complex and still needs work procedure.

Of-course this all depends on your dedication and time but hopefully I have simplified it for you.

Steps:

1. Install "010 Hex editor" you can use trial does not have to be registered

2. Go to your SGS 4G and open a terminal emulator (free on the Market) - (Root Required)

The following steps are credit to SS2006 on a different post

*** Dont forget the (su) command *** after the second line
_____

after opening a terminal emulator type the following

cd /dev/block <enter>
su <enter> <at this point your phone will ask for superuser access ALLOW it if you already havent done so>
dd if=/dev/block/bml3 of=/sdcard/bml3.bak <enter>

Go find the file on your SD Card and transfer it to your computer

3. Open 010 Hex Editor

4. In 010 Hex Editor go to the Menus above and select VIEW>LINEFEEDS>SELECT CUSTOM>SET YOUR BYTES TO "32" Nothing Less

5. Locate the bml3.bak file you created and transfered to your computer and open it using the editor

(CREDIT TO FR0Z3N FOR CLARIFYING THE FOLLOWING 2 STEPS)

6. Using your keyboard select CRTL+F to search for a hex string, when the search window pops up select "Hex byte" in the Type field and then search for the following string below:

"FFFFFFFFFF0100000000" ALL TOGETHER, Then Hit the FIND ALL button to the right, some of you will get 2 results and others up to 10 results on your screen below

7. If you look at your Hex editor there are 3 window panes on the selected line (See Image Below)

e.g 4CCC60h <-- Offset
01 01 01 01 < -- Hex Keys
yyyyyyyyy <- ASCII text where your code is

h.t .t p / / i1201.photobucket . com /albums/ bb359/sanfranx415/unlock.jpg

8. Go through each result from the above search and you will see on the 3rd window pane (as shown on pic above) after the hex keys there is an 8 DIGIT CODE (Write this code Down) this is your unlock code NCK for your phone

Sidenote: THIS 8 DIG CODE SHOULD SHOW ON AT-LEAST ONE MORE RESULT CHECK ALL YOUR RESULTS FROM THE SEARCH ABOVE IF YOU HAVE ANY DOUBTS ( SOME OF YOU WILL HAVE YOUR CODE SHOWN AT-LEAST 2 TIMES AND SOME OF YOU WILL HAVE THE CODE SHOW MORE THAN 4 TIMES BUT YOU SHOULD NOT HAVE THAT MANY RESULTS )

**** TO INPUT THE UNLOCK NETWORK CODE DO THE FOLLOWING ****

9. Turn off your phone

10. Insert a foreign SIM card not attached to your current provider (e.g if you have T-mob use an ATT SIM CARD) and turn on your phone

11. You will be prompted to enter a Network Unlock Control Key ( Use the code above that you wrote down and type it in your phone exactly)

12. After entering your NCK please hit Unlock or GO button and you should see a screen that says "network unlock successful" and your phone should go in the main screen after your phone has been unlocked.


THATS IT FOLKS HAVE FUN

PS> If you entered an incorrect code you must of entered the wrong code or wrote it down wrong please read carefully and verify the code matches the results from above in at-least more than one instance



SHOULD ANYONE NEED HELP PM ME AND I WILL BE GLAD TO HELP


personally my SGS4G has been rooted from day 1 and wi-fi tethering enabled and now it has been Unlocked

I had 314 occurence !, I even looked up them all, but I didn't find the 8 digits
 

cyrixke

Member
Apr 1, 2011
48
1
Think I'm running oiut of options here...
To sum it all up: I unlocked my phone last year to use it in my country but in a blatant state of mind I relocked it to my provider. Now, I switched providers and I need it unlocked again, but the code I then found doesn't work anymore. So I followed your advice and went back to stock, tried the code there but to no avail. I tried FB's script, but that doesn't find the unlock code so I started searching for it myself again. Found the BML3 file, but not in the dev/block/ directory. Looked into it anyway just to make sure, found my original code again. Also checked the efs/root directory on the sdcard, found the nv_data.bin, but that also shows me the same freaking code.
What's left? I have 7 more attempts to put in an unlock code.
 

Jerry D

Senior Member
Mar 5, 2011
749
113
Allot of members just call their device provider and tell them they are leaving the country and NEED the unlock code so they can use out of the country SIM CARD. Have you tried calling your service provider and getting the code from them? They should give it to you.

EDIT.. Allot of members call their SERVICE (not device) provider. Damn auto spell and quick sending lol.
 
Last edited:

microjoel

Member
Mar 15, 2008
12
4
Samsung Galaxy S 4g successfully unlocked!!!

Thanks fr0z3n !!!!!

Your suggestion cleared up the confusion. On my unit the number was next to the highlighted Hex information. It only appeared once in the whole file...and wouldn't you know it was the last one of 176 finds. Still easy to find. Maybe a bit of good fortune that I found it quickly. I was aprehensive because the unlock number only appeared once in the whole file. Kudos to both sanfranx415 and fr0z3n ....it is unlocked with little trouble.:eek:
 

theistus

Senior Member
Mar 27, 2010
371
123
FYI, I have discovered that on my SGS4G running AOKP / Team Acid ICS, following the procedure in OP (ie searching for FF FF 01 00 00) but instead checking the file /efs/root/afs/settings/nv_data.bin works fine.

Also, and I haven't bothered to check and see if it's as a result of being on a custom rom, but I'm able to use generic file explorers on Android like Ol File Manager (free from market) to just copy the file, no terminal hackery required. YMMV.

Thanks OP!

-K

Same here mate, that worked like a charm. Same rom on the phone So at least for this ICS rom, there is no bml3 file. Just used the stock file explorer to grab the nv_data.bin, copied it to sd (much easier than mucking about in terminal), opened it in hex editor. Got 1 return using the same search string. Popped in a foreign sim card, and unlocked the carrier on the first go
 
  • Like
Reactions: meekazhu

FBis251

Senior Member
Mar 21, 2011
3,418
3,716
www.fernandobarillas.com
Because of the way that ics/mtd roms are set up, you guys who did your unlocks on a non gb/bml rom will lose the unlock if you ever revert to a bml rom from an mtd rom. You are correct that the bml3 partition didn't get used.
Under mtd a copy of the /efs partition gets made since there isn't a bml driver so just keep in mind that an unlock on a bml rom is more permanent than on an mtd rom
 

mrdownboy

Member
Oct 13, 2012
31
12
San Juan
FINALLY!!!

I tried both fb's methods, (including aroma), to no avail. (Sorry FB; you're awesome!!!!) I then stumbled upon this thread. Took longer to download 010Hex than to complete the whole process. THIS THREAD SHOULD BE STICKIED.

Thanks so much sanfranx!!
Thanks FB, Thanks XDA :D
 

Pop45398

Senior Member
Jun 21, 2010
231
115
Thanks so much, I was able to unlock my friend's SGS 4G. A couple of tips:

Use Root Explorer to copy the bml3 file. By mounting the device as Read/Write (R/W) in Root Explorer instead of Read Only (R/O), I was able to copy the bml3 file when the DD method was unsuccessful, saying file system is read only.

Start searching backwards from the end of the file. I used HxD Hex Editor since it was already installed but I think 010 Hex Editor search functions operate the same. After loading the file into the hex editor, press CTRL+End to go to the end of the file then press CTRL+F, select Hex Values and select "Backward" as search direction, enter the search term, then click OK. This could save you lots of time.
 

xsnakebitesx

Member
Nov 4, 2010
26
1
Possibly. And you'd possibly have better luck posting on your own phone's forum rather than the 3 year old T959V/W forum. This is the SG S 4G, not the SG S4. Note the different spacing. Note that the phone is Samsung Galaxy S (4G model), not Samsung Galaxy S4 (G model). :)

Thanks for the enlightenment. :good:
 

Top Liked Posts

  • There are no posts matching your filters.
  • 48
    ***** IMPORTANT ROOT IS REQUIRED BEFORE PROCEEDING *****

    ***** ALSO PLEASE READ CAREFULLY BEFORE ACTUALLY APPLYING STEPS *****


    All right ladies and gentlemen, coders and non coders I have personally found the unlock code NOT THE FREEZE CODE only the unlock code for your Samsung Galaxy S 4G hidden in the same files as previous Vibrant phones.

    Please understand this was a hard complex and still needs work procedure.

    Of-course this all depends on your dedication and time but hopefully I have simplified it for you.

    Steps:

    1. Install "010 Hex editor" you can use trial does not have to be registered

    2. Go to your SGS 4G and open a terminal emulator (free on the Market) - (Root Required)

    The following steps are credit to SS2006 on a different post

    *** Dont forget the (su) command *** after the second line
    _____

    after opening a terminal emulator type the following

    cd /dev/block <enter>
    su <enter> <at this point your phone will ask for superuser access ALLOW it if you already havent done so>
    dd if=/dev/block/bml3 of=/sdcard/bml3.bak <enter>

    Go find the file on your SD Card and transfer it to your computer

    3. Open 010 Hex Editor

    4. In 010 Hex Editor go to the Menus above and select VIEW>LINEFEEDS>SELECT CUSTOM>SET YOUR BYTES TO "32" Nothing Less

    5. Locate the bml3.bak file you created and transfered to your computer and open it using the editor

    (CREDIT TO FR0Z3N FOR CLARIFYING THE FOLLOWING 2 STEPS)

    6. Using your keyboard select CRTL+F to search for a hex string, when the search window pops up select "Hex byte" in the Type field and then search for the following string below:

    "FFFFFFFFFF0100000000" ALL TOGETHER, Then Hit the FIND ALL button to the right, some of you will get 2 results and others up to 10 results on your screen below

    7. If you look at your Hex editor there are 3 window panes on the selected line (See Image Below)

    e.g 4CCC60h <-- Offset
    01 01 01 01 < -- Hex Keys
    yyyyyyyyy <- ASCII text where your code is

    h.t .t p / / i1201.photobucket . com /albums/ bb359/sanfranx415/unlock.jpg

    8. Go through each result from the above search and you will see on the 3rd window pane (as shown on pic above) after the hex keys there is an 8 DIGIT CODE (Write this code Down) this is your unlock code NCK for your phone

    Sidenote: THIS 8 DIG CODE SHOULD SHOW ON AT-LEAST ONE MORE RESULT CHECK ALL YOUR RESULTS FROM THE SEARCH ABOVE IF YOU HAVE ANY DOUBTS ( SOME OF YOU WILL HAVE YOUR CODE SHOWN AT-LEAST 2 TIMES AND SOME OF YOU WILL HAVE THE CODE SHOW MORE THAN 4 TIMES BUT YOU SHOULD NOT HAVE THAT MANY RESULTS )

    **** TO INPUT THE UNLOCK NETWORK CODE DO THE FOLLOWING ****

    9. Turn off your phone

    10. Insert a foreign SIM card not attached to your current provider (e.g if you have T-mob use an ATT SIM CARD) and turn on your phone

    11. You will be prompted to enter a Network Unlock Control Key ( Use the code above that you wrote down and type it in your phone exactly)

    12. After entering your NCK please hit Unlock or GO button and you should see a screen that says "network unlock successful" and your phone should go in the main screen after your phone has been unlocked.


    THATS IT FOLKS HAVE FUN

    PS> If you entered an incorrect code you must of entered the wrong code or wrote it down wrong please read carefully and verify the code matches the results from above in at-least more than one instance



    SHOULD ANYONE NEED HELP PM ME AND I WILL BE GLAD TO HELP


    personally my SGS4G has been rooted from day 1 and wi-fi tethering enabled and now it has been Unlocked
    4
    ICS users!

    FYI, I have discovered that on my SGS4G running AOKP / Team Acid ICS, following the procedure in OP (ie searching for FF FF 01 00 00) but instead checking the file /efs/root/afs/settings/nv_data.bin works fine.

    Also, and I haven't bothered to check and see if it's as a result of being on a custom rom, but I'm able to use generic file explorers on Android like Ol File Manager (free from market) to just copy the file, no terminal hackery required. YMMV.

    Thanks OP!

    -K
    4
    You can call up tmobile and tell them that you want to unlock your phone. They will ask for an email and the imei number. they will email you the instructions and unlock code. It's free and you dont need root access. for some phones, you may need a sim card from another carrier, but you can use one of your friends' if they are not on tmobile.


    Sent from my SGH-T959V using XDA App
    3
    I just unlocked two of them, its on different lines everytime.

    Folowing are the instructions:

    Open the file in Hex Editor

    1.) Press - Ctrl + F
    A window should open up
    2.) Change the type to "Hex Bytes (h)
    3.) Value: FF FF FF FF FF 01 00 00 00 00
    4.) Click Find All, for me the code

    the code is visible right after this, 8 digit code. For me it was repeared 9-10 times in the file.

    Good luck
    1
    This seems like it doesn't work. If you go to line 157028 you end up at offset 4CAC60h which is nothing but zeros. And if you go to offset 4CCC60h, there's no 01010101 value.