Hi danzig69, are you saying that it is possible to get this unlock program to work without rooting the Tab 10.1? has anyone else got anything to comment or share theor experience?
All of that requires root.
Hi danzig69, are you saying that it is possible to get this unlock program to work without rooting the Tab 10.1? has anyone else got anything to comment or share theor experience?
After the 2. procedure (restore, reboot, cleanup, change the md5 generation, and unlock again) my IMEI was showed while the Tab was unlocked. Thanks!
someone PMd me this
I was having the same issue doing manual unlock where my imei was lost but today i tried again. I did 2 things differently:
1. permission on the nv_data.bin set to 700
2. change the .nv_state to have 30 instead of 31
with these 2 changes, unlock was successful.
Please let me know if this works... and as always MAKE SURE YOU HAVE A GOOD BACKUP
Hi, hope someone is still here to help and reply, I want to know that how do I set permission to 700 using root explorer. btw, I am using Tmobile galaxy tab 10.1.
Long press the file and select permissions. Then check Read Write and Execute for Owner and un-check everything else.
I don't have that tablet to try.... did you try the previous suggestion?
1. permission on the nv_data.bin set to 700
2. change the .nv_state to have 30 instead of 31
So I managed to unlock my T-Mobile Tab 10.1 over the weekend and I discovered that it works on ATT at 3.5G speeds.
My Tab has several files in the /efs/ folder that weren't there in my previous Samsung phones.
Unlock App for anyone who doesn't feel comfortable with a hex editor
BTW... I cannot be held responsible for anything that happens to your phone.... EVER!
Before you start... if you don't have root you WILL need it.
ALSO MAKE SURE YOU HAVE A BACKUP OF THE /efs/ FOLDER
Step 1. - Retrieve nv_data.bin file
use "adb shell" or a terminal emulator to get a terminal prompt and run the following commands
Code:su cat /efs/nv_data.bin >> /sdcard/nv_data.bin cat /efs/.nv_state >> /sdcard/.nv_state busybox cp -r /efs /sdcard/
Step 2. - Edit nv_data.bin file
mount the internal SD Card on your computer
make a backup copy of the nv_data.bin file on your computer
using your favorite HEX editor open the nv_data.bin on the sdcard
jump to address 0x181468
you should see a string like this
ff 01 00 00 00 00
there are 5 different types of locks in 5 different bytes
the FF byte should be left alone
the first byte after the FF is the network lock
the next byte is the network subset lock
the next byte is the sp lock
the next byte is the cp lock
the last byte appears to be a data lock.
the 46 46 should be left alone
Change any 0x01 to 0x00 (or 0x00 to 0x01 to lock for warranty)
It should read ff 00 00 00 00 00 46 46 for unlocked
save and close file
unmount SD Card
Step 3. - Replace nv_data.bin file
I want to say it again so no one misses it MAKE SURE YOU HAVE A BACKUP OF YOUR /efs/ FOLDER BEFORE YOU CONTINUE!!!!!
use "adb shell" or a terminal emulator to get a terminal prompt and run the following commands
your tab is now unlocked... enjoyCode:su rm /efs/nv_* rm /efs/.nv_* cat /sdcard/nv_data.bin >> /efs/nv_data.bin cat /sdcard/.nv_state >> /efs/.nv_state chmod 755 /efs/nv_data.bin chown radio.radio /efs/nv_data.bin || chown 1001.1001 /efs/nv_data.bin chmod 755 /efs/.nv_state chown radio.radio /efs/.nv_state || chown 1001.1001 /efs/.nv_state reboot
If you have any trouble with md5 and IMEI stuff change .nv_state from 0x30 to 0x31 (or ascii 0 to 1)
Give a big thanks to all the people that helped with the original unlock method (in the i9000 thread)
If it works please feel free to donate via Paypal
su
cat /efs/nv_data.bin >> /sdcard/nv_data.bin
cat /efs/.nv_state >> /sdcard/.nv_state
busybox cp -r /efs /sdcard/
su
rm /efs/nv_*
rm /efs/.nv_*
cat /sdcard/nv_data.bin >> /efs/nv_data.bin
cat /sdcard/.nv_state >> /efs/.nv_state
chmod 755 /efs/nv_data.bin
chown radio.radio /efs/nv_data.bin || chown 1001.1001 /efs/nv_data.bin
chmod 755 /efs/.nv_state
chown radio.radio /efs/.nv_state || chown 1001.1001 /efs/.nv_state
reboot
Hello
Many thanks for the procedure, really waiting for it, but I have on my nv_data.bin the following bytes:
FF 01 00 00 00 00 BC 9D D4
Any clue of what I have to change to?
Thanks again in anycase
Don't have a 3G tab but this is cool. I think you should price your app at under $2 to maximize profits. With the fix available for free, a lot of people won't pay for it. But if it's dirt cheap at 99c or $1.99, why not?
Anyway, good job.