yashsingh1/xdaforums huggingface dataset:
[Galaxy Tab 10.1 Android Development] dagentooboy:
So I managed to unlock my T-Mobile Tab 10.1 over the weekend and I discovered that it works on ATT at 3.5G speeds.

My Tab has several files in the /efs/ folder that weren't there in my previous Samsung phones.

Unlock App for anyone who doesn't feel comfortable with a hex editor

BTW... I cannot be held responsible for anything that happens to your phone.... EVER!

Before you start... if you don't have root you WILL need it.

ALSO MAKE SURE YOU HAVE A BACKUP OF THE /efs/ FOLDER

Step 1. - Retrieve nv_data.bin file

use "adb shell" or a terminal emulator to get a terminal prompt and run the following commands

su
cat /efs/nv_data.bin >> /sdcard/nv_data.bin
cat /efs/.nv_state >> /sdcard/.nv_state
busybox cp -r /efs /sdcard/

Step 2. - Edit nv_data.bin file

mount the internal SD Card on your computer

make a backup copy of the nv_data.bin file on your computer

using your favorite HEX editor open the nv_data.bin on the sdcard

jump to address 0x181468

you should see a string like this

ff 01 00 00 00 00

there are 5 different types of locks in 5 different bytes

the FF byte should be left alone

the first byte after the FF is the network lock

the next byte is the network subset lock

the next byte is the sp lock

the next byte is the cp lock

the last byte appears to be a data lock.

the 46 46 should be left alone

Change any 0x01 to 0x00 (or 0x00 to 0x01 to lock for warranty)

It should read ff 00 00 00 00 00 46 46 for unlocked

save and close file

unmount SD Card

Step 3. - Replace nv_data.bin file

I want to say it again so no one misses it MAKE SURE YOU HAVE A BACKUP OF YOUR /efs/ FOLDER BEFORE YOU CONTINUE!!!!!

use "adb shell" or a terminal emulator to get a terminal prompt and run the following commands

su
rm /efs/nv_*
rm /efs/.nv_*
cat /sdcard/nv_data.bin >> /efs/nv_data.bin
cat /sdcard/.nv_state >> /efs/.nv_state
chmod 755 /efs/nv_data.bin
chown radio.radio /efs/nv_data.bin || chown 1001.1001 /efs/nv_data.bin
chmod 755 /efs/.nv_state
chown radio.radio /efs/.nv_state || chown 1001.1001 /efs/.nv_state
reboot

your tab is now unlocked... enjoy :D

If you have any trouble with md5 and IMEI stuff change .nv_state from 0x30 to 0x31 (or ascii 0 to 1)

Give a big thanks to all the people that helped with the original unlock method (in the i9000 thread)

If it works please feel free to donate via Paypal
[Galaxy Tab 10.1 Android Development] Itaintrite:
Don't have a 3G tab but this is cool. I think you should price your app at under $2 to maximize profits. With the fix available for free, a lot of people won't pay for it. But if it's dirt cheap at 99c or $1.99, why not?

Anyway, good job.
[Galaxy Tab 10.1 Android Development] viaper:
Hello

Many thanks for the procedure, really waiting for it, but I have on my nv_data.bin the following bytes:

FF 01 00 00 00 00 BC 9D D4

Any clue of what I have to change to?

Thanks again in anycase
[Galaxy Tab 10.1 Android Development] dagentooboy:
After you have a backup you can change that first 01 to a 00

FF 00 00 00 00 00 BC 9D D4

and you should be set... I had to delete all those other files in the folder. Could you tell me what files you have in /efs/?

su

busybox ls -la /efs/
[Galaxy Tab 10.1 Android Development] dagentooboy:
I have always believed in providing the solution to everyone... I don't want anyone to think I am only in this for the money. When I was looking for the i9000 unlock someone was charging $35 and there was no way I was going to pay that so I started on this path of providing the information for free.

Thanks to the economy I lost my job and had lots of time to code but no money for devices.... enter the PRO app. I get a lot of people that buy codes and then they don't work and they end up using my app for half the price (half the time the samsung unlock doesn't work even with the code).
[Galaxy Tab 10.1 Android Development] viaper:
Hi dagentooboy

Going to test ASAP, many thanks for the quick answer, find here the result of the command:

busybox ls -la /efs/

total 5168

drwxrwx--x 6 1001 1000 4096 Oct 26 06:26 ←[1;34m.←[0m

drwxrwxrwx 15 0 0 0 Nov 6 07:51 ←[1;34m..←[0m

drwxrwxr-x 5 0 0 4096 Jan 1 2011 ←[1;34m.files←[0m

-rwx------ 1 1001 1001 1048576 Dec 31 2010 ←[1;32m.nv_core.bak←[0m

-rwx------ 1 1001 1001 32 Dec 31 2010 ←[1;32m.nv_core.bak.md5

←[0m

-rwx------ 1 1001 1001 2097152 Dec 31 2010 ←[1;32m.nv_data.bak←[0m

-rwxr-xr-x 1 1001 1001 32 Dec 31 2010 ←[1;32m.nv_data.bak.md5

←[0m

-rw-rw-rw- 1 1001 1001 1 Dec 31 2010 ←[0;0m.nv_state←[0m

drwxrwxr-x 2 1001 1001 4096 Jan 1 2011 ←[1;34mbluetooth←[0m

drwxrw-r-- 2 1000 1000 4096 Aug 23 03:25 ←[1;34mgyro←[0m

drwxrwxr-x 2 1001 1001 4096 Aug 23 03:31 ←[1;34mimei←[0m

-rw-rw-rw- 1 1001 1001 2210 Oct 22 21:21 ←[0;0mnv.log←[0m

-rwx------ 1 1001 1001 2097152 Nov 6 07:52 ←[1;32mnv_data.bin←[0m

-rwxr-xr-x 1 1001 1001 32 Nov 6 07:52 ←[1;32mnv_data.bin.md5←

[0m

-rwxrw-r-- 1 1001 1001 880 Dec 31 2010 ←[1;32mredata.bin←[0m

root@android:/ #
[Galaxy Tab 10.1 Android Development] nandihno:
so this is only useful for the 3G version i would imagine
[Galaxy Tab 10.1 Android Development] viaper:
Thanks again for the good work, it run OK on a p7500 from Movistar Spain
[Galaxy Tab 10.1 Android Development] NiN39Z:
How did u root the tmobile galaxy tab 10.1 4g? I been looking for a guide and couldnt find one to root this. Someone point me to the right direction please?
[Galaxy Tab 10.1 Android Development] dagentooboy:
What I did is just follow the instructions in the Overcome rom except the "re-stocking" part. Mine is running Overcome with no problems so far.
[Galaxy Tab 10.1 Android Development] dagentooboy:
I am not sure what the nv_core is so make sure you have a backup of that. If someone gets it unlocked without deleting that let me know.
[Galaxy Tab 10.1 Android Development] stupsi99:
I unlock my phone with your Manual - IT works.

After you restart your unlocked phone the md5 file will be generated automaticaly.

Now you can copy all your backuped files back.

Phone search .Md5 file - if exist then the nv_data.bin Is used.

I have now working and unlocked phone. And all files back.
[Galaxy Tab 10.1 Android Development] dagentooboy:
So what if we simply

rm /efs/*.md5??? I think that might work.
[Galaxy Tab 10.1 Android Development] stupsi99:
Not work! If No md5 file - sw generate from inside files, Not from unlocked nv_data.bin file.

If you delete all nv_..... files and Put unlocked nv_data.bin inside - System use your file To generate md5

After that you can give all deleted files back.

Testet on sgs2 to.
[Galaxy Tab 10.1 Android Development] masterludo:
Great work! I'll take a look tomorrow at my efs directory and files, but do you think this could also work on a GT 8.9?

Will let you know if I try it out.
[Galaxy Tab 10.1 Android Development] masterludo:
This is awesome, thanks a lot dagentooboy!!!

This works like a charm with the GT 8.9 3G (French, locked on Orange), exactly the same steps.
[Galaxy Tab 10.1 Android Development] dagentooboy:
That is great news!!!
[Galaxy Tab 10.1 Android Development] dagentooboy:
Does anyone have the T-Mobile tab 10.1? I please email me so I can get a full system dump. It has to be the T-Mobile version.
[Galaxy Tab 10.1 Android Development] doaneramma:
as was an issue on the i9000m I'm running into the deleted imei. Lol. Good thing I backed up my efs (this is me reiterating BACK IT UP!). The device still works but any chance of warranty is toast if this back up fails.
[Galaxy Tab 10.1 Android Development] dagentooboy:
:D That's the reason I mentioned it several times :D
[Galaxy Tab 10.1 Android Development] dagentooboy:
I just posted the APP and put the QR on the first post.
[Galaxy Tab 10.1 Android Development] dan-htc-touch:
Even though I am fine with a hex editor, and I purchased your app, thanks much
[Galaxy Tab 10.1 Android Development] dagentooboy:
Thanks!! Please let me know how you like it. I put a ton of new features in it that I am working on porting back to the original PRO app and I would love some feedback on them.
[Galaxy Tab 10.1 Android Development] cocoe68:
It worked for me, my Tab is a Movistar Spain and I edited nv_data.bin with Hexadecimal editor, replaced FF 01 00 00 00 00 DE B0 located at 0x181460 by FF 00 00 00 00 00 DE B0. After reboot and other steps described in procedure, a Vodafone SIM card was tested and his PIN code was requested, accepted and working.

Thanks !!!!
[Galaxy Tab 10.1 Android Development] khomsn:
้hi, Sory I still don't get what this dose to my tab 10.1 3g, is it make my tab to be able to make gsm phone call?
[Galaxy Tab 10.1 Android Development] dagentooboy:
No... just so you can use other carriers SIM cards.
[Galaxy Tab 10.1 Android Development] Vitaminas:
HI,

I bought your app, but something is wrong, because on the lock status says that the network is OFF, but I don't have any network and the tab don´t ask me for a pin code...

Can you tell me what is happening??

was locked to Vodafone in Portugal, I want to use Optimus, Portugal!!

kind regards
[Galaxy Tab 10.1 Android Development] grozni:
Thanks a lot! Worked fine for Telenor Serbia locked tablet
[Galaxy Tab 10.1 Android Development] SaHiLzZ:
How did you root the tablet?
[Galaxy Tab 10.1 Android Development] dagentooboy:
It won't ask you for a code. Once you are unlocked and you reboot just load another SIM card and you are good to go.
[Galaxy Tab 10.1 Android Development] dagentooboy:
Check out the overcome rom install guide
[Galaxy Tab 10.1 Android Development] dutty.persian:
wipe?

if you wipe all data to factory, does the unlock remain? For example if i sell this tab and the next user wipes the data, will they have to unlock again?
[Galaxy Tab 10.1 Android Development] dagentooboy:
It shouldn't... if it does... you can restore your unlocked /efs/ folder (make a backup first.
[Galaxy Tab 10.1 Android Development] abuser0815:
i´ve followed all steps. its pretty the same like the other devices like the gt p-1000. full success.
[Galaxy Tab 10.1 Android Development] dusanzk:
Could anyone help me buy this app somewhere else other than the Android Market,

I'm in Serbia and I can't purchase this app here, 'The item that you were attempting to purchase cannot be found' keeps popping up.

I've tried using MarketEnabler and I keep getting this message.

Any help would be appreciated
[Galaxy Tab 10.1 Android Development] ferreinf:
Hi all,

Anyone tried it on a P7500?

Thinking on buying one, but i need to unlock it, so...

thanks
[Galaxy Tab 10.1 Android Development] Jummy:
sim card

So you have to have the sim card from the carrier that the tablet is locked to to be able to unlock it?

I bought my p7500 tablet used and wasn't given the sim that came with it. Is it still possible to unlock it? I have tried running your app but eventually was prompted that the program had stopped working and then did a force close.

Kind regards Jimi
[Galaxy Tab 10.1 Android Development] dagentooboy:
You don't need any sim cards. The FC is usually a problem with root. Make sure root and busybox are updated.
[Galaxy Tab 10.1 Android Development] dusanzk:
I could really use some advice on how to purchase this app, it's not available for my market (Serbia) and Market Enabler doesn't help, i really need to be able to use my Tab with other operators and abroad
[Galaxy Tab 10.1 Android Development] kaiser_tytnii:
stock HC 3.2

the app does not work... unfortunately...

got stuck at step 2 (black screen)

the tab restarted but the SIM unlock was not performed...

any chance you would update the app for 3.2 please?
[Galaxy Tab 10.1 Android Development] nefor23rus:
I have tmobile redirection problem. When I put sim card from my phone, Tab redirect me to tmobile site. Can some one help me? I know it was the same problem with the first tmobile galaxy tab.
[Galaxy Tab 10.1 Android Development] nefor23rus:
I found how to fix redirection. Now I can use phone sim card.
[Galaxy Tab 10.1 Android Development] dagentooboy:
What did you find?
[Galaxy Tab 10.1 Android Development] nefor23rus:
Just delete some files in efc folder, restart tab with sim card from my phone and its working, plus my galaxy tab is unlocked too after this.
[Galaxy Tab 10.1 Android Development] dagentooboy:
Be VERY careful. This is how people lose their IMEI.
[Galaxy Tab 10.1 Android Development] nefor23rus:
I did backup first, before experiments :-) thank you
[Galaxy Tab 10.1 Android Development] rayman_bz:
hi there! i see that this app is no longer free in market? how come?
[Galaxy Tab 10.1 Android Development] dagentooboy:
The guide and the information is free...
[Galaxy Tab 10.1 Android Development] aieromon:
This is a wonderful guide.I followed the instructions and my device is fully unlocked.

Has anybody had his IMEI changed to 0049xxxxxxxx?
[Galaxy Tab 10.1 Android Development] dagentooboy:
restore and verify that ALL your /efs/.nv_* files and nv_core, nv_data.bak, etc are all deleted first
[Galaxy Tab 10.1 Android Development] kaostht:
Hi

It didnt work with galaxy tab 10.1 from Telcel Mexico. I tried both your app and hex edit :( when i check the lock bits they all come out unlocked but after inserting the sim card it says network lock
[Galaxy Tab 10.1 Android Development] SaneinOne:
Is your tab rooted? If not, flash the pershoot kernel using Odin and then run app.
[Galaxy Tab 10.1 Android Development] aieromon:
Please,make sure the Tab is rooted and follow the instructions.

Thanks.

---------- Post added at 01:00 PM ---------- Previous post was at 12:52 PM ----------

How do I do this?I might have to use my device with the fried IMEI like that because its working wonderfully well.
[Galaxy Tab 10.1 Android Development] kaostht:
Yeap, the tab is rooted and with busybox installed :(
[Galaxy Tab 10.1 Android Development] kaostht:
I even deleted the entire /efs folder leaving only nvdata.bin and after reboot the entire folder and sub-folders was intact and i have 3g connectivity with the original network carrier. maybe there is something from the provider that checks the / partition and restores it to its original state.
[Galaxy Tab 10.1 Android Development] dagentooboy:
The app can restore from the /sdcard/efs_backup folder or you can do it in adb shell. You really want your IMEI to work
[Galaxy Tab 10.1 Android Development] mrhcorp:
P7500 3G unlock method

Hi there, thank you for your decent sharing on unlocking tricks. Just like to inquire, does the steps provided in I9000 thread for unlocking work for GTab 10.1 P7500?

Regards
[Galaxy Tab 10.1 Android Development] dagentooboy:
The main difference is that the i9000 thread doesn't have to worry about the many nv_* and .nv_* files that the Tab does.
[Galaxy Tab 10.1 Android Development] pickupman66:
I keep getting a busybox not round error.
[Galaxy Tab 10.1 Android Development] dagentooboy:
did you run the installer from the market (remember you have to download and then run the installer for it to work)
[Galaxy Tab 10.1 Android Development] pickupman66:
No, i didnt download it from the market. just tried to use the instructions you posted in the OP.

our device is T-mobile at this time but I am having some issues with them and may have to put my AT&T Sim card in it.

if I cant get T-mobile to cooperate, then ill buy your app and be done with it.

I got the busybox error when I hit return after this information:

su

cat /efs/nv_data.bin >> /sdcard/nv_data.bin

cat /efs/.nv_state >> /sdcard/.nv_state

busybox cp -r /efs /sdcard/

also when I went into a HEX editor of that nv_data.bin file, I never found line 181468
[Galaxy Tab 10.1 Android Development] abuser0815:
perhaps it helps, not line, position is meant... (in line 0x181460)
[Galaxy Tab 10.1 Android Development] dagentooboy:
You can download the busybox installer from the market. Most rooting guides take care of both superuser and busybox.
[Galaxy Tab 10.1 Android Development] tuespazio:
I have too a Galaxy Tab 10.1 from Telcel and don't work the bits are unlock but is not working
[Galaxy Tab 10.1 Android Development] dagentooboy:
Can you email me a copy of your efs folder? (please include the link to your post so I can remember)
[Galaxy Tab 10.1 Android Development] GrandMstrBud:
I messed up and used the wrong app. I had the unlock app purchased for the Vibrant and after running it and rebooted of course I wasn't unlocked. After a few tries I realized I was using the wrong one so I downloaded the correct app and it unlocked it on the first try. My question is did I screw anything up? My serial number shows all 0's so is there anyway to get this back? BTW, unlocked the T-Mobile 10.1 3/4G tablet.
[Galaxy Tab 10.1 Android Development] lechuzak:
Unlock app don't work with Telcel Tablet

I have the same problem with a Telcel Tablet, I've tried both methods the manual and I bought the app but without luck.

Some Tablet details:

* Is Running overcome ROM

When I delete the all the files, except nvdata.bin in /efs folder and restart the system, is like all the folder is restored with original files.

Another strange thing is that the system don't let me create an APN with different MCC/MNC, I only can use the default 334/020.

When I applied the modified nvdata.bin the IMEI number changes for 004999010640000,is it normal?
[Galaxy Tab 10.1 Android Development] abuser0815:
the apn settings may be a provider issue. apn's may be assigned fix to you device/sim-card.

i had the same problem with the imei. finally the solution was to get back to the original files and use the app, open the problems button and press again to enable md5 (even if it is setted to on).
[Galaxy Tab 10.1 Android Development] dagentooboy:
I am trying to figure out why the IMEI keeps getting messed up. I just finished an update to the i9000 app to fix FC issues and now it's time to work on the tab app. Your IMEI should NOT change. If it did please restore and if possible email me a zipped copy of your efs_backup folder on your sdcard. (or your backup if you used the manual method). I am working on it and should have something soon.
[Galaxy Tab 10.1 Android Development] tuespazio:
Ok The Email i will send you the email with the EFS Backup
[Galaxy Tab 10.1 Android Development] GrandMstrBud:
I'm using the T-Mobile Galaxy 10.1 3/4G tablet and my IMEI is 004999010640000 after the unlock. If I restore it to relock the tablet it goes back to normal. Also when locked the serial number is all 0's but when restored it's back to normal.

Okay I got it. I restored it to where it's locked and clicked the problems button and enabled the MD5 and unlocked it again and after the reboot I have my IMEI and serial number.
[Galaxy Tab 10.1 Android Development] pickupman66:
Just wanted to say thanks. I downloaded the unlocker from the market and it worked like a charm to make my T-mobile unit work wiht my AT&T sim card. Saved my tail end. now all I need to to is get my SMS and my phone services to it and im happy.
[Galaxy Tab 10.1 Android Development] WebbyHRT:
Your app saved my tab. When I flashed the new CM9 preview something happened and my tab locked out of my carrier. After a day of pulling out my hair and no help from my carrier or Samsung I found your app and it cleared the lock. I just wanted to say thanks XD
[Galaxy Tab 10.1 Android Development] dagentooboy:
You are welcome... please make sure your IMEI matches what is printed on the back.
[Galaxy Tab 10.1 Android Development] ignatious:
Hi, Im with Optus Australia and do not have an EFS folder ?

Also believe i may be unlocked as another sim worked ?

Is this normal?

Ig
[Galaxy Tab 10.1 Android Development] WebbyHRT:
I had the same problem when my tab decided to lock me out. The app cleared the lock, I was to lazy to do all the work myself lol.
[Galaxy Tab 10.1 Android Development] ignatious:
naa .... mine came new in this state?

Ig
[Galaxy Tab 10.1 Android Development] WebbyHRT:
warranty claim then?

---------- Post added at 08:46 AM ---------- Previous post was at 08:41 AM ----------

IMEI and serial both match. Thanks again for the awesome app
[Galaxy Tab 10.1 Android Development] ignatious:
its new and great (inc 3G)

I went to unlock it using this tool and discovered i have no EFS folder hahaha

I tried another sim ...... it works! weitd huh?

I just flashed Overcome rom ......... all working great.

Ig
[Galaxy Tab 10.1 Android Development] superbruno:
Greetings! Thanks for this, but after doing all the process, (Using Hex Editor) i got my tab sim unlocked, but i lost my IMEI and Serial Number, (restored back the efs folder until we can fix this)

Did you find something to fix this? (sorry i dont have the 3$ to help you, maybe with your app works like a charm)
[Galaxy Tab 10.1 Android Development] dagentooboy:
Make sure you put that backup folder on your pc... an external hard drive... a cd... and maybe google docs... in other words DON'T LOSE IT.

use your hex editor on /efs/.nv_state and make sure it is 1byte and that byte is 0x31

remove all /efs/.nv_* and /efs/nv_* except nv_data.bin and .nv_state ... unlock nv_data.bin and restart and let me know if that does it.
[Galaxy Tab 10.1 Android Development] superbruno:
Hey, Thanks for your quick response, i did that the last time, and i back it up even in dropbox :D

Let me try this again, and i would verify the nvstate.

---------- Post added at 02:59 PM ---------- Previous post was at 02:44 PM ----------

Did everything like you told me, even my nvstate its at 31, i have everything unlocked but i dont want to lose, my IMEI and SN, It's too much to ask if you could send me your apk of the application? to see if i can solve this?
[Galaxy Tab 10.1 Android Development] stupsi99:
i have same as superbruno. but its unlocked ....

who cares about imei ...

and if i delete nv_data.bin and restart imei is ok but locked.

stupsi99
[Galaxy Tab 10.1 Android Development] dagentooboy:
check the log file.... where it says bad md5 ...... computed 'your md5'

try copying that md5 and replacing the md5 in your nv_data.bin.md5

now copy your edited nv_data.bin file in there agian.

Your IMEI is really important... without it you will see random drop offs and possibly complete loss of service.
[Galaxy Tab 10.1 Android Development] superbruno:
BTW that last thing didnt work... still losing IMEI
[Galaxy Tab 10.1 Android Development] stupsi99:
i try it 3 times to get what you write .... now it works.

i also have to edit a fresh nv_data.bin again with working imei ..???!!!!

the funny is, i did this with 2x i9100 and they worked on first try...

thx stupsi99
[Galaxy Tab 10.1 Android Development] dagentooboy:
I will try to look at it soon and figure out why you are having trouble. Could you email me a zipped copy of your /efs folder?
[Galaxy Tab 10.1 Android Development] dagentooboy:
someone PMd me this

I was having the same issue doing manual unlock where my imei was lost but today i tried again. I did 2 things differently:

1. permission on the nv_data.bin set to 700

2. change the .nv_state to have 30 instead of 31

with these 2 changes, unlock was successful.

Please let me know if this works... and as always MAKE SURE YOU HAVE A GOOD BACKUP
[Galaxy Tab 10.1 Android Development] superbruno:
This worked for me! Thanks! maybe the trick was in the nv_state, because i changed the permission in my earlier tests in the nv_data, and that didnt work too.
[Galaxy Tab 10.1 Android Development] dagentooboy:
Hmm.... mine was just the opposite....
[Galaxy Tab 10.1 Android Development] Klaus4:
sorry found a qr scanner but crashes during unlock ist because of low battery or austrian firmware?
[Galaxy Tab 10.1 Android Development] dagentooboy:
I just updated the app.... please let me know how it works. The new cleanup function (under the Problems? button) will delete all the extra files that Samsung likes to throw in your /efs/ folder. Hopefully the FC issues are gone now.
[Galaxy Tab 10.1 Android Development] lechuzak:
Unlock Mexico Telcel Galaxy Tab

Hello! Finally, could you resolved the issue with Telcel Galaxy Tab?

Did you find a solution in order to unlock Telcel Tablet?

Regards

Andres
[Galaxy Tab 10.1 Android Development] dagentooboy:
I don't have that tablet to try.... did you try the previous suggestion?

1. permission on the nv_data.bin set to 700

2. change the .nv_state to have 30 instead of 31