Partition information / Unbricking

lpdunwell

Senior Member
Jan 5, 2008
99
126
0
The Lost Woods
This is the place for various bits and pieces of information/facts/wtf collected whilst digging around in our TF701.
Use at your own peril.

UPDATE: I know the staging partition is where to blob (bootloader) goes, but as I found out, that's only half of the story.
It seems like the bootloader takes the contents of staging at boot time and puts them where they belong.
Now if anybody has more details about this, that would be great.

Partitions
Code:
name  device                    mountpoint  fs    description
/dev/block/platform/sdhci-tegra.3/ADF   /dev/block/mmcblk0p7      /ADF        ext4  ?
/dev/block/platform/sdhci-tegra.3/APD   /dev/block/mmcblk0p6      /APD        ext4  ASUS Product Demo
/dev/block/platform/sdhci-tegra.3/APP   /dev/block/mmcblk0p4      /system     ext4  Android OS
/dev/block/platform/sdhci-tegra.3/CAC   /dev/block/mmcblk0p5      /cache      ext4  recovery logs
/dev/block/platform/sdhci-tegra.3/CRA   /dev/block/mmcblk0p11                       ?
/dev/block/platform/sdhci-tegra.3/DTB   /dev/block/mmcblk0p2                        ?
/dev/block/platform/sdhci-tegra.3/EKS   /dev/block/mmcblk0p13                       NVEKSP
/dev/block/platform/sdhci-tegra.3/LNX   /dev/block/mmcblk0p3                        Linux kernel (8388608 b)
/dev/block/platform/sdhci-tegra.3/MDA   /dev/block/mmcblk0p12                       ?
/dev/block/platform/sdhci-tegra.3/MSC   /dev/block/mmcblk0p8                        empty (misc, bootloader etc.)
/dev/block/platform/sdhci-tegra.3/PER   /dev/block/mmcblk0p10     /persist    ext4  config/calibration data
/dev/block/platform/sdhci-tegra.3/SOS   /dev/block/mmcblk0p1                        Recovery kernel (8388608 b)
/dev/block/platform/sdhci-tegra.3/UDA   /dev/block/mmcblk0p14     /data       ext4  Android user data
/dev/block/platform/sdhci-tegra.3/USP   /dev/block/mmcblk0p9                        Staging (blob)
recovery.fstab
Code:
/dev/block/platform/sdhci-tegra.3/by-name/APP   /system             ext4      ro                                                    wait
/dev/block/platform/sdhci-tegra.3/by-name/CAC   /cache              ext4      noatime,nosuid,nodev,nomblk_io_submit,errors=panic    wait
/dev/block/platform/sdhci-tegra.3/by-name/UDA   /data               ext4      noatime,nosuid,nodev,nomblk_io_submit,errors=panic    wait,encryptable=/dev/block/platform/sdhci-tegra.3/by-name/MDA
/dev/block/platform/sdhci-tegra.3/by-name/MSC   /misc               emmc      defaults                                              defaults
/dev/block/platform/sdhci-tegra.3/by-name/LNX   /boot               emmc      defaults                                              defaults
/dev/block/platform/sdhci-tegra.3/by-name/SOS   /recovery           emmc      defaults                                              defaults
/dev/block/platform/sdhci-tegra.3/by-name/USP   /staging            emmc      defaults                                              defaults
/devices/platform/sdhci-tegra.2/mmc_host/mmc1   /storage/sdcard1    vfat      default                                               voldmanaged=sdcard:auto
/devices/platform/tegra-ehci.0                  /mnt/usbdrive       vfat      default                                               voldmanaged=usbdrive:auto
Blob
Code:
name        size                description         status
[U]10.14.1.47:[/U]  [ATTACH]2435244._xfImport[/ATTACH]
blob.BCT    8,192 Bytes         Boot Config Table   (original)  [ATTACH]2435246._xfImport[/ATTACH]
blob.BC1    8,192 Bytes         ?                   (original)  [ATTACH]2435245._xfImport[/ATTACH]
blob.EBT    1,396,736 Bytes     Bootloader          (original)  [ATTACH]2435247._xfImport[/ATTACH]
blob.PT     2,202 Bytes         Partition Table     (original)  [ATTACH]2435248._xfImport[/ATTACH]

[U]10.26.1.7:[/U]  [ATTACH]2435238._xfImport[/ATTACH]
blob.BCT    8,192 Bytes         Boot Config Table   (unchanged) [ATTACH]2435241._xfImport[/ATTACH]
blob.BC1    8,192 Bytes         ?                   (changed)   [ATTACH]2435240._xfImport[/ATTACH]
blob.EBT    1,421,312 Bytes     Bootloader          (changed)   [ATTACH]2435242._xfImport[/ATTACH]
Unbrick
How to unbrick a TF701 that still has fastboot running (possibly partially redundant):

WARNING: Any damage caused by following these instructions...

Yeah, right... Nevermind that... If your fastboot works, this will save your tablet

Required tools: I assume you have them already

Required files:
  • UL-K00C-xx-10.14.1.47-user.zip (on micro SD card in TF701)
  • 10.14.1.47 blob and boot.img (unpacked from UL-K00C-xx-10.14.1.47-user.zip)
  • drgravy's recovery.img

Code:
fastboot erase boot
fastboot erase staging
fastboot format system
fastboot flash staging blob
fastboot flash boot boot.img
fastboot flash recovery.img
fastboot reboot-bootloader
  • check the version displayed. Is it 10.14.1.47? if not, hard reset to bootloader ([vol-] + [power])
  • boot recovery kernel (RCK)
  • install zip
  • choose zip from sdcard
  • UL-K00C-xx-10.14.1.47-user.zip
  • Yes
  • wait and pray to odin
  • +++ go back +++
  • reboot system now
  • Yes - Disable recovery flash (doesn't actually matter)
  • Yes - Root device (/system/xbin/su) (just kidding, this doesn't work)
Please consider clicking thanks

Sources:
Lots of own work
http://forum.xda-developers.com/showpost.php?p=47767352&postcount=71
https://github.com/AndroidRoot/BlobTools
 
Last edited:

schmeggy929

Recognized Themer
Apr 13, 2008
2,781
1,917
193
New Jersey
im trying to find pretty much the same info

mmcblk0p? for boot and external_sd

This helped alot thanks!

nevermind find both

LNX = boot

/dev/block/mmcblk1p1 is external_sd
 
Last edited:

lpdunwell

Senior Member
Jan 5, 2008
99
126
0
The Lost Woods
im trying to find pretty much the same info

mmcblk0p? for boot and external_sd

This helped alot thanks!

nevermind find both

LNX = boot

/dev/block/mmcblk1p1 is external_sd
things that will appear here tomorrow:
  • by name symlinks
  • recovery fstab info
  • unpacked blob contents
  • more detailed bootloader related stuff
  • anything fun I'll find on the way

for the next 12 hours that's it...
 
  • Like
Reactions: sbdags

super0dd

Senior Member
Jun 30, 2012
60
11
0
Gotham
This is the place for various bits and pieces of information/facts/wtf collected whilst digging around in our TF701.
Use at your own peril.

UPDATE: I know the staging partition is where to blob (bootloader) goes, but as I found out, that's only half of the story.
It seems like the bootloader takes the contents of staging at boot time and puts them where they belong.
Now if anybody has more details about this, that would be great.

Partitions
Code:
name  device                    mountpoint  fs    description
/dev/block/platform/sdhci-tegra.3/ADF   /dev/block/mmcblk0p7      /ADF        ext4  ?
/dev/block/platform/sdhci-tegra.3/APD   /dev/block/mmcblk0p6      /APD        ext4  ASUS Product Demo
/dev/block/platform/sdhci-tegra.3/APP   /dev/block/mmcblk0p4      /system     ext4  Android OS
/dev/block/platform/sdhci-tegra.3/CAC   /dev/block/mmcblk0p5      /cache      ext4  recovery logs
/dev/block/platform/sdhci-tegra.3/CRA   /dev/block/mmcblk0p11                       ?
/dev/block/platform/sdhci-tegra.3/DTB   /dev/block/mmcblk0p2                        ?
/dev/block/platform/sdhci-tegra.3/EKS   /dev/block/mmcblk0p13                       NVEKSP
/dev/block/platform/sdhci-tegra.3/LNX   /dev/block/mmcblk0p3                        Linux kernel (8388608 b)
/dev/block/platform/sdhci-tegra.3/MDA   /dev/block/mmcblk0p12                       ?
/dev/block/platform/sdhci-tegra.3/MSC   /dev/block/mmcblk0p8                        empty (misc, bootloader etc.)
/dev/block/platform/sdhci-tegra.3/PER   /dev/block/mmcblk0p10     /persist    ext4  config/calibration data
/dev/block/platform/sdhci-tegra.3/SOS   /dev/block/mmcblk0p1                        Recovery kernel (8388608 b)
/dev/block/platform/sdhci-tegra.3/UDA   /dev/block/mmcblk0p14     /data       ext4  Android user data
/dev/block/platform/sdhci-tegra.3/USP   /dev/block/mmcblk0p9                        Staging (blob)
recovery.fstab
Code:
/dev/block/platform/sdhci-tegra.3/by-name/APP   /system             ext4      ro                                                    wait
/dev/block/platform/sdhci-tegra.3/by-name/CAC   /cache              ext4      noatime,nosuid,nodev,nomblk_io_submit,errors=panic    wait
/dev/block/platform/sdhci-tegra.3/by-name/UDA   /data               ext4      noatime,nosuid,nodev,nomblk_io_submit,errors=panic    wait,encryptable=/dev/block/platform/sdhci-tegra.3/by-name/MDA
/dev/block/platform/sdhci-tegra.3/by-name/MSC   /misc               emmc      defaults                                              defaults
/dev/block/platform/sdhci-tegra.3/by-name/LNX   /boot               emmc      defaults                                              defaults
/dev/block/platform/sdhci-tegra.3/by-name/SOS   /recovery           emmc      defaults                                              defaults
/dev/block/platform/sdhci-tegra.3/by-name/USP   /staging            emmc      defaults                                              defaults
/devices/platform/sdhci-tegra.2/mmc_host/mmc1   /storage/sdcard1    vfat      default                                               voldmanaged=sdcard:auto
/devices/platform/tegra-ehci.0                  /mnt/usbdrive       vfat      default                                               voldmanaged=usbdrive:auto
Blob
Code:
name        size                description         status
[U]10.14.1.47:[/U]  [ATTACH]2435244[/ATTACH]
blob.BCT    8,192 Bytes         Boot Config Table   (original)  [ATTACH]2435246[/ATTACH]
blob.BC1    8,192 Bytes         ?                   (original)  [ATTACH]2435245[/ATTACH]
blob.EBT    1,396,736 Bytes     Bootloader          (original)  [ATTACH]2435247[/ATTACH]
blob.PT     2,202 Bytes         Partition Table     (original)  [ATTACH]2435248[/ATTACH]

[U]10.26.1.7:[/U]  [ATTACH]2435238[/ATTACH]
blob.BCT    8,192 Bytes         Boot Config Table   (unchanged) [ATTACH]2435241[/ATTACH]
blob.BC1    8,192 Bytes         ?                   (changed)   [ATTACH]2435240[/ATTACH]
blob.EBT    1,421,312 Bytes     Bootloader          (changed)   [ATTACH]2435242[/ATTACH]
Unbrick
How to unbrick a TF701 that still has fastboot running (possibly partially redundant):

WARNING: Any damage caused by following these instructions...

Yeah, right... Nevermind that... If your fastboot works, this will save your tablet

Required tools: I assume you have them already

Required files:
  • UL-K00C-xx-10.14.1.47-user.zip (on micro SD card in TF701)
  • 10.14.1.47 blob and boot.img (unpacked from UL-K00C-xx-10.14.1.47-user.zip)
  • drgravy's recovery.img

Code:
fastboot erase boot
fastboot erase staging
fastboot format system
fastboot flash staging blob
fastboot flash boot boot.img
fastboot flash recovery.img
fastboot reboot-bootloader
  • check the version displayed. Is it 10.14.1.47? if not, hard reset to bootloader ([vol-] + [power])
  • boot recovery kernel (RCK)
  • install zip
  • choose zip from sdcard
  • UL-K00C-xx-10.14.1.47-user.zip
  • Yes
  • wait and pray to odin
  • +++ go back +++
  • reboot system now
  • Yes - Disable recovery flash (doesn't actually matter)
  • Yes - Root device (/system/xbin/su) (just kidding, this doesn't work)
Please consider clicking thanks

Sources:
Lots of own work
http://forum.xda-developers.com/showpost.php?p=47767352&postcount=71
https://github.com/AndroidRoot/BlobTools
Sorry, how should I extract the recovery.img from the OTA zip file?
I can only find several files: install-recovery.sh recovery-from-boot.p recovery-resource. dat

Or if I can extract it anywhere else?
 

sbdags

Inactive Recognized Contributor
Jun 24, 2007
12,753
15,556
0
Kenilworth, Coventry
Code:
[U]10.26.1.7:[/U]  [ATTACH]2435238[/ATTACH]
blob.BCT    8,192 Bytes         Boot Config Table   (unchanged) [ATTACH]2435241[/ATTACH]
blob.BC1    8,192 Bytes         ?                   (changed)   [ATTACH]2435240[/ATTACH]
blob.EBT    1,421,312 Bytes     Bootloader          (changed)   [ATTACH]2435242[/ATTACH]
@lpdunwell

Any ideas what BC1 is for? Also there is no SOS file inside the BLOB. I have repacked the BLOB as I wanted to make a bootloader and recovery flash package but not sure how to flash a recovery.

On the TF700 you could just pack it back into the BLOB using the below and it would flash to staging fine. Any ideas?

Code:
blobpack -s blob EBT blob.EBT SOS blob.SOS
I wonder if the same can be done like this?

Code:
blobpack -s blob BCT blob.BCT BC1 blob.BC1 EBT blob.EBT SOS blob.SOS
 

lpdunwell

Senior Member
Jan 5, 2008
99
126
0
The Lost Woods
@lpdunwell

Any ideas what BC1 is for? Also there is no SOS file inside the BLOB. I have repacked the BLOB as I wanted to make a bootloader and recovery flash package but not sure how to flash a recovery.

On the TF700 you could just pack it back into the BLOB using the below and it would flash to staging fine. Any ideas?

Code:
blobpack -s blob EBT blob.EBT SOS blob.SOS
I wonder if the same can be done like this?

Code:
blobpack -s blob BCT blob.BCT BC1 blob.BC1 EBT blob.EBT SOS blob.SOS
TBCH, I'm not sure about the BC1.
The recovery is not part of the blob (anymore?). And the exact way an official update flashes it is probably not the best way to go when flashing manually. My advice for the moment probably is: Keep flashing the bootloader to a minimum, and flash recoveries via fastboot.
 
  • Like
Reactions: sbdags

sbdags

Inactive Recognized Contributor
Jun 24, 2007
12,753
15,556
0
Kenilworth, Coventry
TBCH, I'm not sure about the BC1.
The recovery is not part of the blob (anymore?). And the exact way an official update flashes it is probably not the best way to go when flashing manually. My advice for the moment probably is: Keep flashing the bootloader to a minimum, and flash recoveries via fastboot.
Yeah I tried a number of ways to get it to flash but it looks like the nvcopy tool that Asus use doesn't work outside the stock recovery.
 

Xstof

New member
Oct 6, 2010
2
0
0
Search the UL-K00C-WW-10.14.1.47-user.zip file

Hi,

And thank you. But Do you know where I can download the UL-K00C-WW-10.14.1.47-user.zip ?

On ASUS and can find only WW_epaduser_10_14_1_47_UpdateLauncher.zip.
Oups UL-K00C-WW-10.14.1.47-user.zip is in WW_epaduser_10_14_1_47_UpdateLauncher.zip.
 
Last edited:

Xstof

New member
Oct 6, 2010
2
0
0
Question

Hi

A question : Is it possible to use the same procedure with UL-K00C-WW-10.26.1.7-user.zip or UL-K00C-WW-10.26.1.18-user.zip ?

Best regards
 

SgtMac02

Senior Member
Aug 15, 2011
75
7
0
Hi,

And thank you. But Do you know where I can download the UL-K00C-WW-10.14.1.47-user.zip ?

On ASUS and can find only WW_epaduser_10_14_1_47_UpdateLauncher.zip.
Oups UL-K00C-WW-10.14.1.47-user.zip is in WW_epaduser_10_14_1_47_UpdateLauncher.zip.
Did you ever find out where to get this file? I've been looking everywhere and I fear my device is hosed without it. HELP! :)
 

SgtMac02

Senior Member
Aug 15, 2011
75
7
0
Code:
fastboot erase boot
fastboot erase staging
fastboot format system
fastboot flash staging blob
fastboot flash boot boot.img
fastboot flash recovery.img
fastboot reboot-bootloader
Ok, so I'm trying to get through this and having some trouble...
I've been having to go back and forth on a few things and I fear I've managed to hose thing up pretty good. But at this point, I have the files you state, and in following these instructions, was able to successfully erase the partitions mentioned, then when I tried to flash the first time, I actually screwed up and didn't have the blob file I needed, so now I go back, and obviously I can't re-erase the other files, but formatting system still works, so I know I'm getting good communication with the device. Then trying to flash the blob to staging, I get:
sending 'staging' (1379 KB)...
FAILED (command write failed (No such device or address))

Any thoughts or suggestions would be greatly appreciated.
 

sonicthoughts

Senior Member
Dec 5, 2006
57
8
0
Am I completely bricked?

I'm stuck in a boot loop with Asus / Unlocked appearing and unable to get to recovery. I've tried connecting with win 8.1 via usb but adb does not see devices. i assume running fastboot is the same situation. I can see the device listed APX and understand that Nvflash can help with that but there is no nvflash for Tegra 4.

I'm not sure how it got to this state - could be me or device. it is new and i considered returning save for the Device is Unlocked message :(

Ironically, this is my second Tf701t as the first cracked the screen. Considering taking motherboard out of old and putting in new (or visa vera) but I'm really bad with hardware.

Do I really have 2 broken devices :( :( I'll try anything.

Thanks for any (emotional) support ...
 

N.Tesla

Senior Member
Apr 10, 2014
53
8
38
I'm stuck in a boot loop with Asus / Unlocked appearing and unable to get to recovery. I've tried connecting with win 8.1 via usb but adb does not see devices. i assume running fastboot is the same situation. I can see the device listed APX and understand that Nvflash can help with that but there is no nvflash for Tegra 4.

I'm not sure how it got to this state - could be me or device. it is new and i considered returning save for the Device is Unlocked message :(

Ironically, this is my second Tf701t as the first cracked the screen. Considering taking motherboard out of old and putting in new (or visa vera) but I'm really bad with hardware.

Do I really have 2 broken devices :( :( I'll try anything.

Thanks for any (emotional) support ...
This happened in my TF300T, yes is a hard brick. :(

Nvflash only works if you did work before. :(

Here is a guide to ifixit a TF700 perhaps help you. :good: ;)
 

askerlee

New member
Jun 24, 2011
4
0
0
This is the place for various bits and pieces of information/facts/wtf collected whilst digging around in our TF701.
Use at your own peril.

UPDATE: I know the staging partition is where to blob (bootloader) goes, but as I found out, that's only half of the story.
It seems like the bootloader takes the contents of staging at boot time and puts them where they belong.
Now if anybody has more details about this, that would be great.
Sources:
Lots of own work
http://forum.xda-developers.com/showpost.php?p=47767352&postcount=71
https://github.com/AndroidRoot/BlobTools
Thank you for your analysis! I wonder does the "staging" partition contain temporary updates, and the blob flashed to it will automatically decompress to the correct partitions in the next boot?
In other words, in order to update the bootloader and the recovery system, I could do either:
1.
Code:
fastboot flash staging bootloader
fastboot flash recovery TWRP.img
Or:
Code:
blobpack -s bootloader-TWRP.blob EBT bootloader.EBT SOS TWRP.img
fastboot flash staging bootloader-TWRP.blob
Are they equivalent?
 
Last edited:

xabier87

New member
Nov 26, 2010
3
0
0
Stuck with the old bootloader

[CODE said:
fastboot erase boot
fastboot erase staging
fastboot format system
fastboot flash staging blob
fastboot flash boot boot.img
fastboot flash recovery.img
fastboot reboot-bootloader[/CODE]
  • check the version displayed. Is it 10.14.1.47? if not, hard reset to bootloader ([vol-] + [power])
  • boot recovery kernel (RCK)
  • install zip
  • choose zip from sdcard
  • UL-K00C-xx-10.14.1.47-user.zip
  • Yes
  • wait and pray to odin
  • +++ go back +++
  • reboot system now
  • Yes - Disable recovery flash (doesn't actually matter)
  • Yes - Root device (/system/xbin/su) (just kidding, this doesn't work)
Please consider clicking thanks

Sources:
Lots of own work
http://forum.xda-developers.com/showpost.php?p=47767352&postcount=71
https://github.com/AndroidRoot/BlobTools
I am stuck, for some reason after following these steps when the device reboots it is still with the old recovery and bootloader. Can anybody help please? :(
 

berndblb

Inactive Recognized Contributor
Nov 22, 2012
4,875
2,113
0
Los Angeles, CA
  • Like
Reactions: xabier87

xabier87

New member
Nov 26, 2010
3
0
0
What are you trying to do? Which BL and recovery do you currently have?
Flashable zips for the last bootloaders are here: http://forum.xda-developers.com/showpost.php?p=61045480&postcount=2
Thanks for the info! I might try with these zips and bootloaders. I am trying to reset my tablet or make it work. Had cm-12.1-20160711-NIGHTLY-tf701t.zip on it with TWRP recovery and US_epad-10.26.1.18-20131217 bootloader but it recently stoppped working. I do have access to the bootloader and recovery but after following the fastboot instructions and rebooting nothing is changed on the tablet.