Post Reply

UnBrickable SD necromancy- Totally restore your device.

1st December 2012, 01:51 AM   |  #1  
Hi guys. Ralekdev, Rebellos and Myself have become quite good at hacking the extra roxor out of Samsung devices. We started with The UnBrickable Mod which now spans 15 total devices on the Samsung Galaxy S series. The UnBrickable Mod turned the Galaxy S into a development board. So we moved on to sucessfuly hacking the Qualcomm bootloaders on the Verizon Galaxy S3 and while our exploits for this device have not yet been needed, we have them ready to deploy on several devices and we've learned alot. Today we would like to present to you:

UnBrickable SD-The ultimate in Exynos Necromancy
The UnBrickable SD allows for total resurrection of an otherwise hard-bricked and dead device. It takes a device-specific SDCard, and a jumper to be placed across a tiny resistor. This triggers the device to silently boot at which point it will count to 10 and reload the device's bootloaders. This uses Samsung Official firmware unlike UnBrickable SD Mod (unreleased as of the time of this post) which allows for dual-booting of custom and official.

Why would I need this?
The processor has a small bit of ROM called IROM that tries to initialize the EMMC to load SBOOT. SBOOT then fully initializes the EMMC(Internal and soldered down MMC chip) where it pulls boot parameters, partition tables and all other information for the device to boot. if the SBOOT is damaged, the device will no longer boot and Odin/Factory modes are destroyed and the device is hard-bricked. This failed boot means the device cannot function and is locked up.

How does UnBrickable SD work?
The UnBrickable SD works because the processor is configured to attempt to load SBOOT from EMMC and then fail-over to SD, and finally UART. We've prepared an SDCard via the sdcard command in SBOOT below. By disabling the EMMC during the IROM sequence, this device will automatically fail-over to SDCard boot, check the signatures, see a valid image, and reload the SBOOT onto the EMMC thus enabling Odin.

Instructions
You will need:
Once you have the required tools, we can begin the procedure.
  1. Create your UnBrickable SD.
    • Unzip the SDCard Image file from the zip.
    • Write it to an SDCard
      • Linux:
        Code:
        sudo dd if=GCAM-bootable-odin-from-sd-60mb-DDimg.img of=/dev/MYDEVICE
        where MYDEVICE is the sdcard (usually SDB or SDC
      • Windows: use this tool https://launchpad.net/win32-image-writer/ . I'm not going to explain because I use Linux.
  2. Disassemble the device
    I've prepared this video which shows how to disassemble the device. You can stop after you remove the LCD. Just pull the EM shields off after that so you can access the resistor.
  3. Insert the SDCard
    If you need instructions, you should have stopped long ago
  4. Short the EMMC Resistor
    You can use a pair of tweezers or a piece of wire, really anything to conduct electricity from one side of the resistor to the other. Below you can see some needles connected by a piece of wire which I use to short this resistor.
  5. Press the power button wait a couple of seconds and release the short
    While booting, the device provides a 10 second countdown on the UART2 port. during this 10 second countdown, the EMMC needs to become enabled in order to write the bootloaders back to the device. The entire process takes 30 seconds and you will see nothing on the screen.
  6. Flash with Odin
    This procedure is the same as shown in the video below, however you will put the firmware from above in the PDA section instead of CF-AutoRoot and put the PIT from above into the PIT section

Conclusion
You have sucessfully restored your device to stock condition. Please hit the thanks button below this post.

Additional Resources
[R&D] Port SDCard Recovery to Other Exynos4412 Devices: http://forum.xda-developers.com/show....php?t=1986887

Would you like to see the UnBrickable SD on your Exynos4 device (GS2, GNote, Gnote2)? I need a working device and a broken device to develop and test.
Attached Thumbnails
Click image for larger version

Name:	GalaxyCameraUnBrickableSD.JPG
Views:	35266
Size:	356.4 KB
ID:	1525793  
Last edited by AdamOutler; 1st December 2012 at 02:06 AM.
The Following 53 Users Say Thank You to AdamOutler For This Useful Post: [ View ]
2nd December 2012, 12:06 PM   |  #2  
Senior Member
Thanks Meter: 294
 
1,285 posts
Join Date:Joined: Mar 2012
So similar procedure will also work on Galaxy S3 ?
2nd December 2012, 02:35 PM   |  #3  
Quote:
Originally Posted by drraptor

So similar procedure will also work on Galaxy S3 ?

Yes. the same procedure will work on the S3. I'm also working on bringing this to other devices as well.
The Following 5 Users Say Thank You to AdamOutler For This Useful Post: [ View ]
2nd December 2012, 03:50 PM   |  #4  
mfsr98's Avatar
Senior Member
Flag Porto
Thanks Meter: 282
 
1,204 posts
Join Date:Joined: Nov 2011
More
What kind of image do you use for restoring the device? Just the stock one? 'Cause I (think) I saw you using a Ubuntu image on the Nexus 7...
2nd December 2012, 03:54 PM   |  #5  
pratik_s's Avatar
Senior Member
Flag Mumbai
Thanks Meter: 169
 
318 posts
Join Date:Joined: May 2012
Smile
u mentioned in the post that 15 devices of galaxy s series support this unbrickable mod which are those 15 devices? is Samsung Galaxy S i9003 included in this list or support this unbrickable mod and does all the the devices have the same procedure to use the unbrickable mod?
2nd December 2012, 04:18 PM   |  #6  
Quote:
Originally Posted by mfsr98

What kind of image do you use for restoring the device? Just the stock one? 'Cause I (think) I saw you using a Ubuntu image on the Nexus 7...

I made the image using the working device using a UART connection. It consists of an official, Samsung signed SBOOT image that reloads SBOOT onto the EMMC.

Quote:
Originally Posted by pratik_s

u mentioned in the post that 15 devices of galaxy s series support this unbrickable mod which are those 15 devices? is Samsung Galaxy S i9003 included in this list or support this unbrickable mod and does all the the devices have the same procedure to use the unbrickable mod?

Nope. We only support Samsung Processors. Not OMAP or even Qualcomm for that matter.
The Following User Says Thank You to AdamOutler For This Useful Post: [ View ]
2nd December 2012, 04:31 PM   |  #7  
pratik_s's Avatar
Senior Member
Flag Mumbai
Thanks Meter: 169
 
318 posts
Join Date:Joined: May 2012
Quote:
Originally Posted by AdamOutler

I made the image using the working device using a UART connection. It consists of an official, Samsung signed SBOOT image that reloads SBOOT onto the EMMC.


Nope. We only support Samsung Processors. Not OMAP or even Qualcomm for that matter.

is there any chance of getting this mod for i9003 in future?
2nd December 2012, 04:39 PM   |  #8  
Quote:
Originally Posted by pratik_s

is there any chance of getting this mod for i9003 in future?

I'm not working on it and I have no plans to do so.
2nd December 2012, 06:20 PM   |  #9  
Senior Member
Thanks Meter: 294
 
1,285 posts
Join Date:Joined: Mar 2012
Quote:
Originally Posted by AdamOutler

Yes. the same procedure will work on the S3. I'm also working on bringing this to other devices as well.

Is it working on galaxy S 2 ?

Sent from my GT-I9100 using xda app-developers app
2nd December 2012, 07:11 PM   |  #10  
Quote:
Originally Posted by drraptor

Is it working on galaxy S 2 ?

Sent from my GT-I9100 using xda app-developers app

Nope. I need a device. read the inital post.

The Following User Says Thank You to AdamOutler For This Useful Post: [ View ]
Post Reply Subscribe to Thread
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes