Home repair tips forum

PM Notification

You are not logged in.

Welcome, Guest
Username Password: Remember me

Search Forum

Keyword

NvFlash with the Medion LT P9516 tablet
(1 viewing) (1) Guest

TOPIC: NvFlash with the Medion LT P9516 tablet

NvFlash with the Medion LT P9516 tablet 8 years, 11 months ago #1471

  • YLG80
  • OFFLINE
  • Moderator
  • Posts: 776
  • Karma: 28
We will cover here how to unbrick a Medion LT P9516.

That operation is bit tricky as there is no "buttons-combo" (buttons combination) to switch the tablet in recovery mode when the boot stops
for example on the Medion splash screen.
Using Nvflash in APX mode we can force the tablet to enter in the stock recovery or better in CWM if already installed.
(CWM offers an adb server that will allow you to backup your valuable data prior to fully recover your tab.)

I warmly thank Mickey (Ameisentaetowierer) for his contribution.
Thanks to his help and Linux knowledge, we've made together a huge progress in that matter.
It could open a new path to install other images on that tablet.

More on that in the next posts.

Yves

PS We hope that more people will contribute to speed up the progress.
When I look at the CWM topic hits counter, I can imagine that many people are following the topic without posting any contribution.
It's like if they were looking over our shoulder, thinking " Ah, ah, they will eventually brick their toy !"
In such a complex matter we need everyone's contribution as it will definitely help others to unbrick their own toy.
Thanks.
Last Edit: 8 years, 11 months ago by YLG80. Reason: PS
The following user(s) said Thank You: Ameisentaetowierer

Re: NvFlash with the Medion LT P9516 tablet 8 years, 11 months ago #1473

  • YLG80
  • OFFLINE
  • Moderator
  • Posts: 776
  • Karma: 28
Although this topic is to help you to unbrick your lovely device, here is the usual warning.

*DISCLAIMER 1*
This site bloggers and YLG80 takes no responsibility for any fault or damage caused
by any procedures within this guide. No warranties of any kind are given.
If you don't know what is adb or root or cwm, chances are that you don't need to do
what is described below.
In short, if you hard brick your device, you are on your own.

*DISCLAIMER 2*
I would advise you not to play (i.e attempt to overwrite) with bootloader (BCT, PT, EBT).
The bootloader is encrypted (SBK) and locked.
As long as we have a correct bootloader that allows us to enter in APX mode, we can play with the other partitions.
If you corrupt the bootloader, your device will have a new nickname: “Hard Bricked”


PARTITION LAYOUT
In order to have a common language when we are talking about partitions, here is a partition layout.
partitions_LT-P9516.png

For un-bricking, we will play with the green partitions.

DRIVERS:
To use this toolset you need to install the Nvidia USB APX driver (if not yet installed)
You can find a recent driver here : www.avi-plus.com/download/usb_adb_driver...on_6_OK-WIN7_x64.zip
Note 1: When you switch your Lifetab in APX mode, the USB VID & PID are VID0955 PID7820
Note 2: Regarding driver issues, it's much more easy to work with NvFlash under Linux with the Android SDK.

NVFLASH:
You absolutely need to use the toolset from the zip attached to this post.
Nvflash MUST be in version v1.8.90246 or above.
I’ve tried to use several different versions to no avail.
www.avi-plus.com/download/nvflash-for-LT-P9516.zip (zip includes the Linux executable)

Up to now, you also absolutely need to use blob-new.bin and bootloader-encrypt-new.bin included in the zip.

To enter in APX mode :
Shutdown you tablet.
Push on VOL-UP VOL-DOWN and POWER all together until both leds are ON and a black display.
Release the buttons.
Under Windows, you can verify that you are in APX mode by looking in Control Panel, Parameters, System, Hardware Manager under USB bus controllers.
You should have a “Nvidia USB boot-recovery driver for Mobile devices” installed with no yellow mark.
To get out of the APX:
Push on POWER until the tab shuts down.

BATCH FILES:
The toolset includes the Linux Nvflash version, but I’ve included only .bat files for certain simple commands to start with. It will be easy for Linux users to convert them in bash .sh files.
The 3 batch files included in the zip are HARMLESS Nvflash commands.
That means that they only read from the device.
We will play with much more risky (format and overwrite) commands later.

LIFETAB P9516 ODM DATA
As far as we know today the LIFETAB P9516 ODM is : 0x30098011
(This is mentioned in the OS sources files delivered with the Lifetab (DVD))

Now you can start to test NvFlash with your pad.

Unzip the nvflash archive in a folder, open a CMD (console in Linux) window and get to the appropriate directory.
Put your tablet in APX mode (see above)

Launch getpartitiontable.bat
You should see something like that, if successful.
 
C:\nvflash3lt>nvflash --getpartitiontable partitiontable.txt --blob blob_new.bin --bl bootloader_encrypt_new.bin --go
 
Nvflash v1.8.90246 started
Using blob v1.1.57813;.MSC
rcm version 0X20001
System Information:
chip name: t20
chip id: 0x20 major: 1 minor: 4
chip sku: 0x8
chip uid: 0x043c8040421ff117
macrovision: disabled
hdcp: enabled
sbk burned: true
dk burned: true
boot device: emmc
operating mode: 4
device config strap: 0
device config fuse: 0
sdram config strap: 0
 
downloading bootloader -- load address: 0x108000 entry point: 0x108000
sending file: bootloader_encrypt_new.bin
\ 1393296/1393296 bytes sent
bootloader_encrypt_new.bin sent successfully
waiting for bootloader to initialize
bootloader downloaded successfully
Succesfully updated partition table information to partitiontable.txt
 


We are interested in collecting information on the different LifeTab P9516 models, i.e 16Gb, 32Gb, 64GB, Wifi, WiFI/3G.
Please check the memory size in your Lifetab, Parameters, About.
My own tablet was announced (on the box and in the shop) with 32Gb but in reality it has 64Gb of flash memory.

Please run the getpartitiontable.bat to get your own partition config, rename the file with details on your pad (memory …),
zip it and post it here.

Thanks.
Attachments:
Last Edit: 3 years, 5 months ago by YLG80.
The following user(s) said Thank You: Ameisentaetowierer

Re: NvFlash with the Medion LT P9516 tablet 8 years, 11 months ago #1474

  • YLG80
  • OFFLINE
  • Moderator
  • Posts: 776
  • Karma: 28
My partitions table.
LifeTab P9516 64Gb - Wifi 3G - CH OS
Yves
Attachments:
Last Edit: 8 years, 11 months ago by YLG80.

Re: NvFlash with the Medion LT P9516 tablet 8 years, 11 months ago #1475

  • YLG80
  • OFFLINE
  • Moderator
  • Posts: 776
  • Karma: 28
@ Mickey : Yes --resume is the solution to concatenate multiple commands :- !

Here is a little batch file that will backup all your partitions using Nvflash.
Be patient, it takes a while.

Could you give some feedback.
NvFlash is known to generate errors with large files.
My partition #12 is huge in a 64Gb system and the first time I got an error at about 30Gb during the backup.
I'm restarting the process ...

Install the batch file in your nvflash directory.
It will create several files with names starting with "backup-"

During the process your LifTab screen will display :

Entering NvFlash recovery mode / Nv3P Server


Keep your backup in a safe place.
Enjoy.
Attachments:
Last Edit: 8 years, 11 months ago by YLG80.

Re: NvFlash with the Medion LT P9516 tablet 8 years, 11 months ago #1476

  • YLG80
  • OFFLINE
  • Moderator
  • Posts: 776
  • Karma: 28
Second partition #12 backup trial went further but eventually failed :

 
../.
[resume mode]
Using blob v1.1.57813;.MSC
Nvflash v1.8.90246 started
[resume mode]
Using blob v1.1.57813;.MSC
receiving file: backup-part-9.img, expected size: 134217728 bytes
/ 134217728/0 bytes received
file received successfully
Nvflash v1.8.90246 started
[resume mode]
Using blob v1.1.57813;.MSC
receiving file: backup-part-10.img, expected size: 2097152 bytes
/ 2097152/0 bytes received
file received successfully
Nvflash v1.8.90246 started
[resume mode]
Using blob v1.1.57813;.MSC
receiving file: backup-part-11.img, expected size: 146800640 bytes
/ 146800640/0 bytes received
file received successfully
Nvflash v1.8.90246 started
[resume mode]
Using blob v1.1.57813;.MSC
receiving file: backup-part-12.img, expected size: 3342860288 bytes
| 2697426944/1 bytes receivedfile write failed NvError 0x30000
command failure: read failed
 
Last Edit: 8 years, 11 months ago by YLG80.

Re: NvFlash with the Medion LT P9516 tablet 8 years, 11 months ago #1477

Hello Yves,

this could be one of...
- filesystem limitations (filesize bigger than...)
- filesystem full? (I think, that you've checked this)
- nvflash.exe

because on linux I've tried a rawdeviceread and copied the whole internal image into one big file with the size of 32GB.
Having dd on linux, I now can split this big file into pieces.
That's of no special use, I just wanted to see, if it's possible

Micky
Like my work?
The following user(s) said Thank You: YLG80

Re: NvFlash with the Medion LT P9516 tablet 8 years, 11 months ago #1478

Now here's my partition table and the info from my tablet.
I have 32GB internal card.


Nvflash v1.8.90246 started
Using blob v1.1.57813
rcm version 0X20001
System Information:
chip name: t20
chip id: 0x20 major: 1 minor: 4
chip sku: 0x8
chip uid: 0x043c70c043202457
macrovision: disabled
hdcp: enabled
sbk burned: true
dk burned: true
boot device: emmc
operating mode: 4
device config strap: 0
device config fuse: 0
sdram config strap: 0

downloading bootloader -- load address: 0x108000 entry point: 0x108000
sending file: bootloader_encrypt_new.bin
\ 1393296/1393296 bytes sent
bootloader_encrypt_new.bin sent successfully
waiting for bootloader to initialize
bootloader downloaded successfully
Succesfully updated partition table information to partitiontable.txt



Micky

File Attachment:

File Name: partitiontable.txt
File Size: 1 KB
Like my work?
The following user(s) said Thank You: YLG80

Re: NvFlash with the Medion LT P9516 tablet 8 years, 11 months ago #1480

  • Andri Od
  • OFFLINE
  • Junior Boarder
  • Posts: 31
  • Karma: 1
Hi there,

just registered, because I think your great work has to be supported!

My LT has a 32GB internal card as well.
System Information reads as follows:
 
System Information:
chip name: t20
chip id: 0x20 major: 1 minor: 4
chip sku: 0x8
chip uid: 0x0428914441612297
macrovision: disabled
hdcp: enabled
sbk burned: true
dk burned: true
boot device: emmc
operating mode: 4
device config strap: 0
device config fuse: 0
sdram config strap: 0
 


And attached my partitiontable.txt, which is 100% identical to Micky's.


Many thanx and keep on hacking!!
Attachments:
The following user(s) said Thank You: YLG80

Re: NvFlash with the Medion LT P9516 tablet 8 years, 11 months ago #1481

  • YLG80
  • OFFLINE
  • Moderator
  • Posts: 776
  • Karma: 28
Thanks for your memory mapping upload.
Only partitions 12 (/data) and 14 (GPT) are different.
Same block size for both systems. (4096 bytes per sector)

memory-map-32Gb-64Gb.png


Also good news, Mickey has successfully unbricked his Lifetab P9516 tablet.(soft brick)

[corrections - Thanks Andri Od & Mickey ]
Last Edit: 8 years, 11 months ago by YLG80.

Re: NvFlash with the Medion LT P9516 tablet 8 years, 11 months ago #1482

  • Andri Od
  • OFFLINE
  • Junior Boarder
  • Posts: 31
  • Karma: 1
Only partition 12 is different!

Due to the larger size of partition 12 in the 64GB-Version, the "StartSector" of all subsequent partitions are beyond the ones of the 32GB-Version.
"NumSectors" and "BytesPerSector" and therefore the size are identical for partition 13 and 14.
Last Edit: 8 years, 11 months ago by Andri Od. Reason: typo

Re: NvFlash with the Medion LT P9516 tablet 8 years, 11 months ago #1483

Time for some magic....
I've downloaded CM10 for Lenovo K1, to have a look, if it could run on the lifetab.
It's promising....

www.dropbox.com/sh/6aqkm5cuqnrvfog/K8t-FGdrLS/tablet

Micky

PS: On USB-port it announced as K1
Like my work?
Last Edit: 8 years, 11 months ago by Ameisentaetowierer.

Re: NvFlash with the Medion LT P9516 tablet 8 years, 11 months ago #1485

  • YLG80
  • OFFLINE
  • Moderator
  • Posts: 776
  • Karma: 28
Waooh, congratulations ...
You don't waste your time to make progress starting, 2 day's ago, from a bricked device up to the last OS update !
This is indeed promising.
Yves

Re: NvFlash with the Medion LT P9516 tablet 8 years, 11 months ago #1487

  • Andri Od
  • OFFLINE
  • Junior Boarder
  • Posts: 31
  • Karma: 1
Alright, congrats from me too! Really good work so far.

How did you do that? Could you calculate the SBK? Or did you manage to get the dual-boot working?
Can hardly wait to see the "How-To". You could also PM-it to me, if you think it being still too risky for public use. You'll find me in the AH-forum as well, with the same nick.
I have a 20+ years UNIX experience, and I dont fear bricking my tab. Maybe I can even chip in some knowledge or ideas.

Many thx
A.O.

Re: NvFlash with the Medion LT P9516 tablet 8 years, 11 months ago #1488

  • YLG80
  • OFFLINE
  • Moderator
  • Posts: 776
  • Karma: 28
@andri od
We don't have the SBK.
As long as you don't try to change the locked bootloader, you don't really need the SBK.
The principle is to upload matching blob.bin and bootloader.bin in RAM and play with that temporary BL.
Before the K1 SBK leak, the K1 pioneers did that with the Transformer tablet Bootloader.(very similar ventana board)

Yves

Re: NvFlash with the Medion LT P9516 tablet 8 years, 11 months ago #1489

  • YLG80
  • OFFLINE
  • Moderator
  • Posts: 776
  • Karma: 28
Here are two tools to force the tablet to boot into recovery mode.

Linux version (bash script) credit to Mickey ( Ameisentaetowierer).

File Attachment:

File Name: boot-recovery-linux.tgz
File Size: 1,889 KB


Windows version (batch file)

File Attachment:

File Name: boot-recovery-win.zip
File Size: 1,566 KB


How it works, i.e The Trick :

The Lifetab P9516 has a locked bootloader encrypted with SBK and Medion has disabled the combo-keys to force a boot to recovery.
That means that, once your tablet is bricked, there is no way to recover it using a button combination, i.e VOL-UP + VOL-DOWN + POWER.
The only solution was to return the device to Medion.

When your tablet is bricked but still have a correct boot loader, you can boot in APX mode by pressing VOL-UP + VOL-DOWN + POWER all together.
(both LED's will be ON when APX mode has started.)
APX mode is to be used with NvFlash / Fastboot.

As we have no hardware combo-keys, we will use a soft reboot-recovery command stored in the MSC partition.
This is what the above tools are doing.
"Simply" uploading boot-recovery in the MSC partition.

During the next normal boot, the boot loader will do the following :
- look for a command in the MSC partition.
- execute the command if any
- zap the partition (full of 00's).
- continue the boot using the recovery.img if the command reboot-recovery was found in the MSC partition.
Bingo, your tablet is in recovery mode.

I would advice the users to install CWM (see earlier post) instead of keeping the stock recovery image.
To play with the stock recovery, you will need to use an external USB keyboard.

With CWM you can recover your tablet if you have a backup AND you have access to the LT adb server.
However, you can still install CWM afterwards in a bricked device using nvflash.
(This is what Mickey has done to unbrick his device)

Yves
Last Edit: 8 years, 11 months ago by YLG80.
The following user(s) said Thank You: Ameisentaetowierer, andro_ricky, linuxidus

Re: NvFlash with the Medion LT P9516 tablet 8 years, 10 months ago #1496

  • SeppSen01
Hi, @all

when i boot into recovery, the following screen appears:

recovery2.jpg


What goes wrong?

Sepp

Re: NvFlash with the Medion LT P9516 tablet 8 years, 10 months ago #1497

Hi Sepp,

don't panic
The cache partition is defect.
You can safely wipe the cache partition from the recovery menu.
You need an external Keyboard to use the recovery menu!!!

I had the same problem with the stock recovery.
With the CWM-recovery you won't have this problem.

Please backup all your partitions before you install the CWM-recovery!

Micky
Like my work?

Re: NvFlash with the Medion LT P9516 tablet 8 years, 10 months ago #1499

  • SeppSen01
Ok,
i'll check out the CWM Recovery Method and give You an further report. The partitions are backuped.

Edit:
Great! The CWM Recovery works!
I immediately have made a CWM Backup to my external SD. It seems to be ok. It includes 2 directories: backup and blobs.
I think (respectively i hope) i'm save now!

Thanks a lot to Yves and Micky!

Sepp

Edit 2:
Here is my partition table:

File Attachment:

File Name: backup-partitiontable.txt
File Size: 2 KB
Last Edit: 8 years, 10 months ago by .

Re: NvFlash with the Medion LT P9516 tablet 8 years, 10 months ago #1503

Hi Sepp,
well done!

When my tab only showed "Medion", this was because /data was corrupt.
I'm not sure, that this could be fixed by wiping /data from CWM-recovery, because this only removes files from /data, but doesn't actually format it.
I haven't tried the wiping option from CWM, because I'm an experienced Unix user and I like to do such things my own way.
Maybe in the future there will be again someone with this problem who can try it.
Unfortunately there are too few people contributing here.

I don't know mouch about CWM, I think, that Yves has much more experience here.
Currently I prefer TitaniumBackup for my apps + data.
When I moved from ICS to JB, I was able to restore most of my apps/data.
I think that the missing parts have been my fault, due to little experience, not TB's.

Micky
Like my work?

Re: NvFlash with the Medion LT P9516 tablet 8 years, 10 months ago #1504

Hello guys,
I've got this error while executing any of the three batch files.

Nvflash v1.8.90246 started
Using blob v1.1.57813ngs\Adù
USB device not found

Nvidia USB Boot-recovery driver for mobile devices is visible in Device Manager.
I'm using WinXp x64. Any ideas?
Thx.
Last Edit: 8 years, 10 months ago by andro_ricky. Reason: .
Moderators: YLG80, Ameisentaetowierer
Time to create page: 3.05 seconds
Sizler icin kurdugumuz sitemizde yabanci diziler ve film arsivi ile birlikte gunluk burc yorumlari son dakika haberler bulunur Dizimag Hayata dair herseyi sizlere gosteriyoruz. Hemen sitemize girip eglencenize bakabilir zamaninizi guzel gecirebilirsiniz.