UnBrick Samsung Galaxy Tab

There are more possibilities how to repair Hardbrick Samsung Galaxy Tab 2:

For those who damaged boot loader can try Running stock U-Boot from SD Card
For those who have HW fault like eMMC bug can participate on development Running entire system from SD Card
The second one may be solve later with help of some experienced people from hire.

Run stock U-Boot from SD Card

Requirements

Hardbrick Samsung Galaxy Tab 2 (GT-P5100). can be recognized that it don’t do nothing, charging not working, power button do nothing, recovery not working. More info How To Unbrick Your Galaxy Tab!
SD Card Support UHS-I UHS104 (SDR104), with is not easy to determine with Card support this format and with not. I tried meny cards and label UHS-I is not enough so I asked SanDisk support they recommended SanDisk Extreme. I bought SanDisk Extreme 32GB, and this card is working. I would say that every card 90MB/s+ should work.

step 0 not for linux

Windows

Install drivers for OMAP 4430 Guide / Drivers inside OMAPFlash download
VirtualBox with Linux
Set VirtualBox to capture OMAP 4430
Download win iso burner

step 1

Windows & Linux

Download omapboot to Linux
Download Debrick dump imgs

step 2

Prepare SD card

Windows

Use win iso burner to write Debrick dump imgs to Sd Card.

Linux

Write Debrick dump imgs to Sd Card.
Be careful to use right device sdX

1	root@lukas-debian:/home# dd bs=4M if=debrick.img of=/dev/sdX status=progress conv=fsync

step 3

In Linux Run

1	root@debian:/home/lukas/SamsungP5100/omapboot# python3 omapboot.py -b

you will see:

root@debian:/home/lukas/SamsungP5100/omapboot# python3 omapboot.py -b

Boot from MMC1 interface selected.
Waiting for omap44 device.

Connect Tablet to PC
Press Power button for long time approximately 10s

You should see this in command line:

Boot from MMC1 interface selected.
Waiting for omap44 device.
Model: 4430
ROM revision: 0x04
CH: enabled
Underdocumented ASIC subblock #18: 00
IDEN: 0xE5FD23CE0F5FDF902D7EDA9B4D848D687F62372A
MPKH: 0xB585ACF1DD15B06A74813BFDDD6ECD64227CE4C90658C65B4C53AC229B4C6DC0
CRC0: 0x9C669AD9
CRC0: 0x682ADCCF
recevied ASIC ID banner:
Model: 4430
ROM revision: 0x04
CH: enabled
Underdocumented ASIC subblock #18: 00
IDEN: 0xE5FD23CE0F5FDF902D7EDA9B4D848D687F62372A
MPKH: 0xB585ACF1DD15B06A74813BFDDD6ECD64227CE4C90658C65B4C53AC229B4C6DC0
CRC0: 0x9C669AD9
CRC0: 0x682ADCCF
Giving x-loader a chance to come up...Probably loaded!

Tablet should start to some firmware recovery mode see picture 1
You should be able to use ODIN to repair internal memory, in my case ODIN stop in the half of loading, I probably have eMMC bug.

Running entire system from SD Card

I’m trying to modify U-Boot and Kernel to load entire system from SD Card. Some have done it Say hi to “CyanoBoot” – a 2nd bootloader/w menu aka “ub2” different device same CPU.

First step of boot is loading x-loader. The x-loader is signed so we have to use original one from Samsung. After some peripheral initialization x-loader copy u-boot to ram checking for magic constant as copied code and execute it. This is the place where we can change u-boot to boot from SD Card, because x-loader load u-boot from the same device as was loaded him.

u-boot source

Do anyone have u-boot source from Samsung?
I used this Guide and copy something from Nook device u-boot source because they made boot from SD Card on same CPU OMAP4430. And lge_p920 from LG Open-source repository. Do anyone have better idea?

How to compile

u-boot source
Building U-BOOT #(for Blaze)

Kernel

I’m using Stock boot.img from O2C-P5100XXDMJ2-20131203002840.zip package.

Prepare Debrick.img

Rewrite part of Image Files

Write recovery.img to specific address in debrick_changed.img address 0x2C00000 write in hex or dec depend on system (seek=$((0x1800000)) for linux) (seek=46137344 for Windows).
You need to rewrite:
x-loader (MLO) 0x20000
u-boot (Sbl.bin) 0x1800000
boot.img 0x2400000
recovery.img 0x2C00000

1	dd if=C:\temp\Tablet\sdCardDebrick\recovery.img of=C:\temp\Tablet\sdCardDebrick\debrick_changed.img seek=$((0x1800000)) oflag=seek_bytes conv=notrunc

UART Debugging

Pin 21 of Samsung Galaxy Tab 30 Pin Dock Connector Pinout is output of debug messages for x-loader and u-boot (port UART4). I would like send Kernel debug output to this port. Anyone know how to do it?
I’m using UB232R for conecting to PC.

UnBrick Samsung Galaxy Tab

Run stock U-Boot from SD Card

Requirements

Windows

Windows & Linux

Prepare SD card

Windows

Linux

In Linux Run

Running entire system from SD Card

u-boot source

How to compile

Kernel

Prepare Debrick.img

Rewrite part of Image Files

UART Debugging

Links

Samsung Galaxy Tab GT-P1000

Samsung Galaxy Tab 2 GT-P5100

Samsung Galaxy S II GT-I9100G

Samsung Galaxy Nexus

LG

TI OMAP4430

Heimdall