• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!
  • Fill out your device list and let everyone know which phones you have!    Edit Your Device Inventory

[Discussion] An alternative for Tab 2 emmc bug & brick backup

Search This thread

billysam

Senior Member
Oct 3, 2014
551
298
Well, I have been going through many tab owner problems on this forum who have tried everything on the book to get their tab back running. this experimental process is only for those people who have no option left than to throw away their tab as a dead glorious paperweight or play with it as a Frisbee. hopefully it can recover or at least it can open a new way for getting out of a brick or perhaps be a good learning experience, just for the sake of it. what else would you want to do? if your device is un-repairable? at least this can take a backup for the complete device in a different way though.

So what really is this about?

Well, Samsung tab 2 emmc is pretty much notoriously getting scarier, either it is happening because of flashing a wrong kernel or doing wrong with your tab, or in some cases where people had no clue. A sudden attack and the tab was dead. you may be lucky to get a replacement and get the tab running up again. but not all could be solved and resolved.

but what if we provide the tab a second emmc(your external card emulated and working as an exact image of the internal emmc with all the system files with their partition on it?) sounds good eh? there are 2 sides of this coin. one, our device is not made that way and it's definitely not going to work at all, second, it can work after a little hardware modification provided you have the right files and right tools and a insanely expert brain. Now the chances of this working is like that of flipped coin landing on it's edges. very tricky.

But how we can achieve this then?

Well, there are users on the internet that have some sort of success in this, while it wasn't guaranteed for their device, that this process can work for all and there is definitely nothing like this sort ever found for our device. which is on omap chipset, it's the debrick method. you can't tell unless you are from the development department of Samsung. So, I would say even if it's 0.0000000001 percent of having a chance to work for us. I would like to keep it.

Debrick.img? what does it do? how to get it?

Well, this file is generally taken out from a stock rom from location /dev/block/mmcblk0 which is where pit stores the data for all the partition and from there we can extract all the important parts, including the boot-loader, recovery, cache, hidden, sbl1, sbl2, factoryfs param, modem, EFS, DataEFS to a .img file. (as far as my definition goes for better understanding). please feel free to go through all the post that you can find about the debrick, or if you have more knowledge please share.

I was just going through these posts.
The whole process for sg s3 http://forum.xda-developers.com/showthread.php?t=2660566

http://forum.xda-developers.com/showthread.php?t=1818321 a guide that explains about taking backup of the entire memory block with all partitions or single partition. it's quite old but informative.

fixing a bootloader
http://forum.xda-developers.com/showthread.php?t=2345860


there are different parts to it, first is getting the bootloader written on a external sd card. but we still don't know if our device will be able to treat the external sd card as an internal emmc. it is yet to be found out.

my theory is suppose if we can get out the whole partition along with system written on a external card, can we make the device treat it as a internal emmc? will it then be possible to revive a dead internal emmc tab? there are chances it might. still no practical though and no guarantees for sure.
but it makes you feel better, I managed to get out those partition on a .img file which could be written on a external card as well. basically an image of your emmc. this might be a good backup too for those who would like to be safe in case a emmc bug hits them too.

Now, To get this data we need volunteers to take these files from their working rooted stock rom and upload these files for every model of samsung tab, if they wish to contribute to our community, you are welcome. or at least keep it safe on their disks. although, this process will require atmost care as we are dealing with bootloaders here, and one wrong bootloder and it
won't work, as much as my knowledge goes, there are two- the ics and jb for our tab 2. still there are many other variants and I really have no clue, how to work this out all by myself. so, I would like other great minds share their wisdom upon this and please before sharing files, mention everything you can, right from your
1. Device model number
2. 8gb or 16gb
3. Bootloader(ics or jb)
4. Stock rom, custom rom,
5. firmware
6. Baseband
7. Country and to your name.

Now before pulling out this file, I have a doubt, as I have got few imgs option. there is 128mb, 200mb, 256mb, 512mb and also I have got one img of around 2.17gb as well which is the complete backup I could take out from my device.
I am not sure which one to choose that's going to work. people have mostly used 128mb file to get access to the download mode, I guess in that 128mb, there is enough files needed to boot your device into download mode and recover from hard bricks, but there is no evidence as for now in our device section as to which is suffient for us. So for first try, we take 128mb, and keep doubt aside for one process.

but suppose it's our emmc bug and we want to use the external as a image of the damaged internal, in that case I suppose we need to take out the whole info! is it really possible with the 2.17gb of my device complete data? ah, I would really like to know about the answer myself, in case it hits my device, I would be prepared myself :p
anyways to try this you must have a sd card reader and use a external card of 16gb or 8gb depending upon your device variant (card class 10 required, on others it has high chance of not working at all)



Now the process to extract the file

The script that you need to enter into terminal emulator(download one from playstore) this will backup a 128mb file on your sdcard.

Code:
#su
#busybox dd if=/dev/block/mmcblk0 of=/sdcard/debrick.img bs=1M count=128
128MB is arbitrary. on some devices 70MB was sufficient, on our device? maybe or maybe not. please test or help me answer this correctly, if I'm wrong. but untill then, use 128mb, if we fail, we will look for other options.


other dd commands

Code:
1. dd if=/dev/block/mmcblk0 of=/sdcard/backup.img
backup whole partitons thus will be large size and takes more time.


Code:
2. dd if=/dev/block/mmcblk0 of=/sdcard/debrick.img bs=1M count=70

70mb data from mmcblk0 will be copied to sd card


Code:
3 dd if=/dev/block/mmcblk0 of=/sdcard/debrick.img bs=1M count=512

512mb data from mmcblk0 will be copied to sd card


Code:
4. dd if=/dev/block/mmcblk0 of=/sdcard/backup.img bs=4096

large size more than 4GB and more time consuming




Procedure

1. Connect the external sd card to the card reader move all the files to your pc and format it.

2. find the correct debrick.img image from post 2.

3. Download and extract this software win iso burner

4. Open the software win32diskimager.exe and browse the debrick.img

5. Successfully Write the debrick.img onto it.

6. Put the sdcard in your device

7. Pray, or do the cha cha, praise the droid lord.

8. switch it on or press power button + volume down/up, whatever you can.

9. if you can then get into download mode, you can try to flash stock firmware or dance your way around.

10. report us back what happened
.​
 

billysam

Senior Member
Oct 3, 2014
551
298
interesting, unfortunately my broken emmc have replaced with eemc from note 2, tho mine is p3100

So, you're one of those lucky ones. Getting a replacement is still the best way. So, do you think my theory here could work? Anyways it would be an interesting answer to find out. But people would need to share files here first for any samsung tab 2 model. I hope it becomes helpful rather than just interesting. :)
 

jak978

Senior Member
Oct 4, 2014
145
84
So, you're one of those lucky ones. Getting a replacement is still the best way. So, do you think my theory here could work? Anyways it would be an interesting answer to find out. But people would need to share files here first for any samsung tab 2 model. I hope it becomes helpful rather than just interesting. :)
here you go tab2 P3100 16GB
 

Android-Andi

Inactive Recognized Contributor
Mar 3, 2013
10,846
29,230
andi34.github.io
Updating the emmc firmware via. ISP gives back life to >80% of affected devices.

16 GB Tab 2 have a known faulty EMMC (MAG2GA). It can happen, that your EMMC get "read only", so you can't perform any write actions (also you can't format) anymore.

From the EMMC data sheet:
5.1.7 End of Life Management:

The end of device life time is defined when there is no more available reserved block for bad block management in the device. When the device reaches to end of its life time, device shall change its state to permanent write protection state. In this case, write operation is not allowed any more but read operation are still allowed.

But, reliability of the operation can not be guaranteed after end of life.

On a faulty EMMC firmware it happens a lot faster if the emmc reaches a wrong value.

Sadly Patching the emmc fw isn't possible running the device, at least there's no known kernel on chip power-on Method...

Those from europe can contact @html6405 , he is able to update the emmc firmware and he can also replace the emmc if needed.

Note:
Sharing a whole copy if mmcblk0 isn't good, because it will include efs partition which is sensible data.

~ All my work, news etc. on http://andi34.github.io ~
 
  • Like
Reactions: billysam

Android-Andi

Inactive Recognized Contributor
Mar 3, 2013
10,846
29,230
andi34.github.io
Found something interesting printing the pit using heimdall:
https://paste.omnirom.org/view/4173cc20

Someone knows what the GANG partition is for?
I wonder if it is the emmc firmware because emmc.bin is stored there...

I am waiting to get the fixed emmc firmware, i might be able to tell you once i have it.

~ All my work, news etc. on http://andi34.github.io ~
 
  • Like
Reactions: billysam

billysam

Senior Member
Oct 3, 2014
551
298
Note:
Sharing a whole copy if mmcblk0 isn't good, because it will include efs partition which is sensible data.

Yes, better to keep them private. Users do not share, just keep a backup with yourself.
thanks for your thorough research.

Found something interesting printing the pit using heimdall:
https://paste.omnirom.org/view/4173cc20

Someone knows what the GANG partition is for?
I wonder if it is the emmc firmware because emmc.bin is stored there...

I did notice the GANG partition since you mentioned it(strange I never realized this before as I have looked at the pit file many times earlier as well.) located at 0x64C.
it does look like the emmc firmware partition. what else it should have?
 

almsreal

New member
Nov 16, 2016
1
0
interesting, unfortunately my broken emmc have replaced with eemc from note 2, tho mine is p3100

hi jak978,
i plan to replace my p3100 emmc with p5100 emmc, can i just flash p3100 firmware using odin after change the emmc?
some more, can u re upload the debrick dump for p3100, it says "file not found" in your link.

regards,
alms
 

asiffrluv

Member
Jun 5, 2014
5
0
here you go tab2 P3100 16GB UNABLE TO GOT FILE PLEASE SHARE THE FILE PLEASE :( :(

---------- Post added at 12:56 PM ---------- Previous post was at 12:49 PM ----------

1. Download debrick dump imgs. (128mb)

samsung tab 2 10.1 p5100 16gb
jellybean boot-loader.
Was on custom 5.1 rom and twrp recovery from uae firmware.

samsung tab 2 p3100 16gb
shared by @jak978 on post 6 hit thanks for him.

More will come, when people will share.

please re share p3100 file i need it my tab was not work or trell me any way to get emmc chip from online or else process :( :(
my tab only in condition on restart restart.....
No recovery and firmware ll able to write on p3100


please help your reply too much helpful for me please give file p3100 so i can use your method
 

champ1919

Senior Member
Nov 5, 2010
876
304
Twin Cities, Minnesota
here you go tab2 P3100 16GB UNABLE TO GOT FILE PLEASE SHARE THE FILE PLEASE :( :(

---------- Post added at 12:56 PM ---------- Previous post was at 12:49 PM ----------



please re share p3100 file i need it my tab was not work or trell me any way to get emmc chip from online or else process :( :(
my tab only in condition on restart restart.....
No recovery and firmware ll able to write on p3100


please help your reply too much helpful for me please give file p3100 so i can use your method

Look at this on eBay http://www.ebay.com/itm/192025936615


Sent from my SAMSUNG-SM-G870A using XDA Free mobile app
 

thomas92

New member
Dec 25, 2007
1
0
Hi,
I just tried this method. The tab boot on the sdcard, i have the charging logo displayed, and then screen turns black. The driver change from omap4430 to Android, and keep this driver until i unplug the usb cable.
On linux, the tab device is recognized as Android. Same on windows (loaded in virtualbox from linux).
adb device display an unauthorized device.
So from this step, it is still impossible to flash the tab.
Anyway thanks for sharing this; even if its painfull to lose a tab, it is nice to learn how all this work.

if other people have more information to share, i would appreciate any new info on this subject ;)
 

Top Liked Posts

  • There are no posts matching your filters.
  • 5
    Well, I have been going through many tab owner problems on this forum who have tried everything on the book to get their tab back running. this experimental process is only for those people who have no option left than to throw away their tab as a dead glorious paperweight or play with it as a Frisbee. hopefully it can recover or at least it can open a new way for getting out of a brick or perhaps be a good learning experience, just for the sake of it. what else would you want to do? if your device is un-repairable? at least this can take a backup for the complete device in a different way though.

    So what really is this about?

    Well, Samsung tab 2 emmc is pretty much notoriously getting scarier, either it is happening because of flashing a wrong kernel or doing wrong with your tab, or in some cases where people had no clue. A sudden attack and the tab was dead. you may be lucky to get a replacement and get the tab running up again. but not all could be solved and resolved.

    but what if we provide the tab a second emmc(your external card emulated and working as an exact image of the internal emmc with all the system files with their partition on it?) sounds good eh? there are 2 sides of this coin. one, our device is not made that way and it's definitely not going to work at all, second, it can work after a little hardware modification provided you have the right files and right tools and a insanely expert brain. Now the chances of this working is like that of flipped coin landing on it's edges. very tricky.

    But how we can achieve this then?

    Well, there are users on the internet that have some sort of success in this, while it wasn't guaranteed for their device, that this process can work for all and there is definitely nothing like this sort ever found for our device. which is on omap chipset, it's the debrick method. you can't tell unless you are from the development department of Samsung. So, I would say even if it's 0.0000000001 percent of having a chance to work for us. I would like to keep it.

    Debrick.img? what does it do? how to get it?

    Well, this file is generally taken out from a stock rom from location /dev/block/mmcblk0 which is where pit stores the data for all the partition and from there we can extract all the important parts, including the boot-loader, recovery, cache, hidden, sbl1, sbl2, factoryfs param, modem, EFS, DataEFS to a .img file. (as far as my definition goes for better understanding). please feel free to go through all the post that you can find about the debrick, or if you have more knowledge please share.

    I was just going through these posts.
    The whole process for sg s3 http://forum.xda-developers.com/showthread.php?t=2660566

    http://forum.xda-developers.com/showthread.php?t=1818321 a guide that explains about taking backup of the entire memory block with all partitions or single partition. it's quite old but informative.

    fixing a bootloader
    http://forum.xda-developers.com/showthread.php?t=2345860


    there are different parts to it, first is getting the bootloader written on a external sd card. but we still don't know if our device will be able to treat the external sd card as an internal emmc. it is yet to be found out.

    my theory is suppose if we can get out the whole partition along with system written on a external card, can we make the device treat it as a internal emmc? will it then be possible to revive a dead internal emmc tab? there are chances it might. still no practical though and no guarantees for sure.
    but it makes you feel better, I managed to get out those partition on a .img file which could be written on a external card as well. basically an image of your emmc. this might be a good backup too for those who would like to be safe in case a emmc bug hits them too.

    Now, To get this data we need volunteers to take these files from their working rooted stock rom and upload these files for every model of samsung tab, if they wish to contribute to our community, you are welcome. or at least keep it safe on their disks. although, this process will require atmost care as we are dealing with bootloaders here, and one wrong bootloder and it
    won't work, as much as my knowledge goes, there are two- the ics and jb for our tab 2. still there are many other variants and I really have no clue, how to work this out all by myself. so, I would like other great minds share their wisdom upon this and please before sharing files, mention everything you can, right from your
    1. Device model number
    2. 8gb or 16gb
    3. Bootloader(ics or jb)
    4. Stock rom, custom rom,
    5. firmware
    6. Baseband
    7. Country and to your name.

    Now before pulling out this file, I have a doubt, as I have got few imgs option. there is 128mb, 200mb, 256mb, 512mb and also I have got one img of around 2.17gb as well which is the complete backup I could take out from my device.
    I am not sure which one to choose that's going to work. people have mostly used 128mb file to get access to the download mode, I guess in that 128mb, there is enough files needed to boot your device into download mode and recover from hard bricks, but there is no evidence as for now in our device section as to which is suffient for us. So for first try, we take 128mb, and keep doubt aside for one process.

    but suppose it's our emmc bug and we want to use the external as a image of the damaged internal, in that case I suppose we need to take out the whole info! is it really possible with the 2.17gb of my device complete data? ah, I would really like to know about the answer myself, in case it hits my device, I would be prepared myself :p
    anyways to try this you must have a sd card reader and use a external card of 16gb or 8gb depending upon your device variant (card class 10 required, on others it has high chance of not working at all)



    Now the process to extract the file

    The script that you need to enter into terminal emulator(download one from playstore) this will backup a 128mb file on your sdcard.

    Code:
    #su
    #busybox dd if=/dev/block/mmcblk0 of=/sdcard/debrick.img bs=1M count=128
    128MB is arbitrary. on some devices 70MB was sufficient, on our device? maybe or maybe not. please test or help me answer this correctly, if I'm wrong. but untill then, use 128mb, if we fail, we will look for other options.


    other dd commands

    Code:
    1. dd if=/dev/block/mmcblk0 of=/sdcard/backup.img
    backup whole partitons thus will be large size and takes more time.


    Code:
    2. dd if=/dev/block/mmcblk0 of=/sdcard/debrick.img bs=1M count=70

    70mb data from mmcblk0 will be copied to sd card


    Code:
    3 dd if=/dev/block/mmcblk0 of=/sdcard/debrick.img bs=1M count=512

    512mb data from mmcblk0 will be copied to sd card


    Code:
    4. dd if=/dev/block/mmcblk0 of=/sdcard/backup.img bs=4096

    large size more than 4GB and more time consuming




    Procedure

    1. Connect the external sd card to the card reader move all the files to your pc and format it.

    2. find the correct debrick.img image from post 2.

    3. Download and extract this software win iso burner

    4. Open the software win32diskimager.exe and browse the debrick.img

    5. Successfully Write the debrick.img onto it.

    6. Put the sdcard in your device

    7. Pray, or do the cha cha, praise the droid lord.

    8. switch it on or press power button + volume down/up, whatever you can.

    9. if you can then get into download mode, you can try to flash stock firmware or dance your way around.

    10. report us back what happened
    .​
    4
    1. Download Debrick dump imgs. (128mb)

    Samsung tab 2 10.1 P5100 16gb
    jellybean boot-loader.
    was on custom 5.1 rom and twrp recovery from UAE firmware.

    Samsung Tab 2 P3100 16gb
    shared by @jak978 on post 6 Hit thanks for him.

    more will come, when people will share.
    3
    So, you're one of those lucky ones. Getting a replacement is still the best way. So, do you think my theory here could work? Anyways it would be an interesting answer to find out. But people would need to share files here first for any samsung tab 2 model. I hope it becomes helpful rather than just interesting. :)
    here you go tab2 P3100 16GB
    2
    interesting, unfortunately my broken emmc have replaced with eemc from note 2, tho mine is p3100
    1
    for other guides and ways