RIFF Box – Best JTAG Box in this Galaxy :) Easy to operate !

RIFF JTAG – Some of the beta tests with eMMC ISP

by on Feb.08, 2016, under News

So, as already announced here, there is whole lot of users testing newly developed RIFF Box features. Here are some of the posts and logs:

Default

direct adopter connect emmc gt-i9300 emmc VTU00M

Open serial port…OK
Connecting to the RIFF Box…OK
Firmware Version: 1.38.3b, JTAG Manager Version: 1.57 [BETA 2]

Connecting to the SD/eMMC Card…OK
Set I/O Voltage reads as 3.30V, SD_CLK Frequency is 960 KHz

Memory Type …………………….. eMMC
Manufacturer ID …………………. 0x15
OEM/Application ID ………………. 0x00
Product Name ……………………. “VTU00M”
Package ………………………… BGA
User Area Parition Size ………….. 0x0003AB400000 Bytes (14.68 GB)
Boot Partition Size ……………… 0x000000200000 Bytes (2.00 MB)
RPMB Partition Size ……………… 0x000000020000 Bytes (128.00 KB)
OCR Register ……………………. 0xC0FF8080 (Dual Voltage, High Capacity)
Write Protection Bits ……………. NONE
Boot Configuration ………………. Boot from Boot Partition 1 (Bus Width = 4Bit)
Chip Revision …………………… 15.12
Multimedia Card Revision …………. 1.6 (eMMC v4.5, v4.51)
Serial Number …………………… 0x3D398686
Memory Manufacturing Date ………… May, 2014

Open serial port…OK
Connecting to the RIFF Box…OK
Firmware Version: 1.38.3b, JTAG Manager Version: 1.57 [BETA 2]

Connecting to the SD/eMMC Card…OK
Set I/O Voltage reads as 3.30V, SD_CLK Frequency is 960 KHz

Detected eMMC Chip, ID: 0x15/0x00 (VTU00M), User Area Partition = 0x0003AB400000 Bytes (14.68 GB)

Reading “User Area Partition” address space from 0x000000000000 to 0x000001FFFFFF
Completed in 00:06:33.669 (Average Transfer Rate: 83.24 kB/s)

Smile Samsung S5282 ISP Connection Successful

Connection Method: ISP
Hand Set Model: Samsung S5282
Phone Status: Alive
Reason: Emmc Backup and Riff box Application TestingProblems encountered: I was unable to scan or read the handset with Riff.
Solution: I have soldered the 5K pull ups on Pin 2 and 3 of the RJ45 to Pin 9(VCC/VCCQ) Of Riff Box.Pinouts used: Z3x S5282 EMMC pinoutsRiff Box LogsOpen serial port…OK
Connecting to the RIFF Box…OK
Firmware Version: 1.38.3b, JTAG Manager Version: 1.57 [BETA 2]

Connecting to the SD/eMMC Card…OK
Set I/O Voltage reads as 3.28V, SD_CLK Frequency is 393 KHz

Memory Type …………………….. eMMC
Manufacturer ID …………………. 0x15
OEM/Application ID ………………. 0x00
Product Name ……………………. “S5U00M”
Package ………………………… BGA
User Area Parition Size ………….. 0x0000E9000000 Bytes (3.64 GB)
Boot Partition Size ……………… 0x000000200000 Bytes (2.00 MB)
RPMB Partition Size ……………… 0x000000020000 Bytes (128.00 KB)
OCR Register ……………………. 0xC0FF8080 (Dual Voltage, High Capacity)
Write Protection Bits ……………. NONE
Boot Configuration ………………. Boot from Boot Partition 1 (Bus Width = 1Bit)
Chip Revision …………………… 0.10
Multimedia Card Revision …………. 1.5 (eMMC v4.41)
Serial Number …………………… 0x7D4BB668
Memory Manufacturing Date ………… February, 2014

Phase 2: Read the partitions of the hans set and post results.

Partitions Read: BOOT PAT1, BOOT PAT2, RPMB Area PAT.
Status: All Susscessful(RIFF BO ROCKS :-) )

Logs

Open serial port…OK
Connecting to the RIFF Box…OK
Firmware Version: 1.38.3b, JTAG Manager Version: 1.57 [BETA 2]

Connecting to the SD/eMMC Card…OK
Set I/O Voltage reads as 3.28V, SD_CLK Frequency is 960 KHz

Detected eMMC Chip, ID: 0x15/0x00 (S5U00M), User Area Partition = 0x0000E9000000 Bytes (3.64 GB)

Reading “Boot Area Partition 1” address space from 0x000000000000 to 0x0000001FFFFF
Completed in 00:00:23.837 (Average Transfer Rate: 85.92 kB/s)

Open serial port…OK
Connecting to the RIFF Box…OK
Firmware Version: 1.38.3b, JTAG Manager Version: 1.57 [BETA 2]

Connecting to the SD/eMMC Card…OK
Set I/O Voltage reads as 3.28V, SD_CLK Frequency is 960 KHz

Detected eMMC Chip, ID: 0x15/0x00 (S5U00M), User Area Partition = 0x0000E9000000 Bytes (3.64 GB)

Reading “Boot Area Partition 2” address space from 0x000000000000 to 0x0000001FFFFF
Completed in 00:00:23.852 (Average Transfer Rate: 85.86 kB/s)

Open serial port…OK
Connecting to the RIFF Box…OK
Firmware Version: 1.38.3b, JTAG Manager Version: 1.57 [BETA 2]

Connecting to the SD/eMMC Card…OK
Set I/O Voltage reads as 3.28V, SD_CLK Frequency is 960 KHz

Detected eMMC Chip, ID: 0x15/0x00 (S5U00M), User Area Partition = 0x0000E9000000 Bytes (3.64 GB)

Reading “RPMB Area Partition” address space from 0x000000000000 to 0x00000001FFFF
Completed in 00:00:01.482 (Average Transfer Rate: 86.37 kB/s)

Default Connect & Read Dump SM-T211 EMMC M8G1WA .. Done

Connect & Read Dump SM-T211 EMMC M8G1WA .. Done

Conecting with Riff box

Open serial port…OK
Connecting to the RIFF Box…OK
Firmware Version: 1.38.2b, JTAG Manager Version: 1.57 [BETA 2]

Connecting to the SD/eMMC Card…OK
Set I/O Voltage reads as 3.28V, SD_CLK Frequency is 1 MHz

Memory Type …………………….. eMMC
Manufacturer ID …………………. 0x15
OEM/Application ID ………………. 0x00
Product Name ……………………. “M8G1WA”
Package ………………………… BGA
User Area Parition Size ………….. 0x0001D2000000 Bytes (7.28 GB)
Boot Partition Size ……………… 0x000000200000 Bytes (2.00 MB)
RPMB Partition Size ……………… 0x000000020000 Bytes (128.00 KB)
OCR Register ……………………. 0xC0FF8080 (Dual Voltage, High Capacity)
Write Protection Bits ……………. NONE
Boot Configuration ………………. No Boot
Chip Revision …………………… 0.10
Multimedia Card Revision …………. 1.5 (eMMC v4.41)
Serial Number …………………… 0xF2A45264
Memory Manufacturing Date ………… February, 2014

 LENOVO k900 EMMC MAG2GA connect Successful

Code:
Open serial port...OK
Connecting to the RIFF Box...OK
Firmware Version: 1.38.3b, JTAG Manager Version: 1.57 [BETA 2]

Connecting to the SD/eMMC Card...OK
Set I/O Voltage reads as 3.30V, SD_CLK Frequency is 960 KHz

Memory Type .......................... eMMC
Manufacturer ID ...................... 0x15
OEM/Application ID ................... 0x00
Product Name ......................... "MAG2GA"
Package .............................. BGA
User Area Parition Size .............. 0x0003A3E00000 Bytes (14.56 GB)
Boot Partition Size .................. 0x000000200000 Bytes (2.00 MB)
RPMB Partition Size .................. 0x000000020000 Bytes (128.00 KB)
OCR Register ......................... 0xC0FF8080 (Dual Voltage, High Capacity)
Write Protection Bits ................ NONE
Boot Configuration ................... No Boot
Chip Revision ........................ 1.5
Multimedia Card Revision ............. 1.5 (eMMC v4.41)
Serial Number ........................ 0xFE1E4658
Memory Manufacturing Date ............ May, 2012

direct EMMC VCC = VCCQ = 3V3

Comments Off on RIFF JTAG – Some of the beta tests with eMMC ISP more...

RIFF JTAG – Samsung SGH-i337M Galaxy S 4 LTE Total Repair supported

by on May.19, 2015, under News

RIFF JTAG – Samsung SGH-i337M Galaxy S 4 LTE Total Repair supported

– This PKG contains GPT for 32GB chips !
– There is both Total Repair ™ and BootChain only repair options

Use “Total Repair” option in case that EFS is damaged after unlock. Otherwise use BootChain only option.

337m

Please keep in mind that it’s not possible to downgrade this phone to lower version software !
.
samsung_galaxy_s_4_2

Comments Off on RIFF JTAG – Samsung SGH-i337M Galaxy S 4 LTE Total Repair supported more...

RIFF JTAG – Asus Padfone A66 bootloader repair supported

by on May.19, 2015, under News

RIFF JTAG – Asus Padfone A66 bootloader repair supported

– This PKG contains BootChain partitions for 5 different MCU ID-s. To select proper BootChain pack, read MCU ID first by using “Analyze JTAG Chain” function on JTAG Read/Write TAB.
– GPT is from 32GB version !
– Android Kernel and Recovery are same for all versions

a66
In case that You have to wipe Cache partition, and it can’t be done via recovery, You can do it by using eMMC Plugin:

– Start eMMC plugin
– Click “Load layout from device”
– Double click “Cache” partition
– Click “Flash Selected”

This will write zeros to Cache partition and practically wipe it’s content.
.
asus_padfone_3

Comments Off on RIFF JTAG – Asus Padfone A66 bootloader repair supported more...

RIFF Box – list of latest updates

by on May.16, 2015, under News

This is the list of custom repair packs released in last few months:

  • Andromax U R-W.riffpkg
  • Asus_Nexus_7.riffpkg
  • Brava Vega3.riffpkg
  • Casio GZone CA201L.riffpkg
  • Highscreen_Spark.riffpkg
  • HTC 8S Total Repair (PM5910001).riffpkg
  • HTC Amaze Both MID Safe Repair.riffpkg
  • HTC Desire 300 G3U.riffpkg
  • HTC Merge.riffpkg
  • HTC One M7 U PN07120.riffpkg
  • HTC One Max 0P3P70000.riffpkg
  • HTC One Max.riffpkg
  • HTC_Desire_606w_PO49100.riffpkg
  • HTC_Desire_U_T327w.riffpkg
  • HTC_Desire_X_Dual.riffpkg
  • HTC_OneM7_PN0731000.riffpkg
  • HTC_OneMini_PO5810000.riffpkg
  • HTC_OneMini_PO58220000.riffpkg
  • HTC_OneSV_PL8011000.riffpkg
  • HTC_One_S_PJ40110_VLE.riffpkg
  • HTC_One_XL_Evita_UTL.riffpkg
  • HTC_Rezound_Total_Repair.riffpkg
  • HTC_Sensation_XE_Both_ID.riffpkg
  • Huawei_Y300_151.riffpkg
  • I9192UBUBMK4.riffpkg
  • LG SU640.riffpkg
  • LT30A H.riffpkg
  • Lumia_525.riffpkg
  • Micromax_A111.riffpkg
  • Motorola MB886.riffpkg
  • Nokia_XL_RM-1030_Beta_Test.riffpkg
  • Nokia_X_RM_980.riffpkg
  • Nokia_X_RM_980_V2.riffpkg
  • Novatel_4620L.riffpkg
  • Novatel_U727_Modem.riffpkg
  • OPPO X907 Finder.riffpkg
  • P3100_16GB_XLoader+.riffpkg
  • Pantech_UM185C.riffpkg
  • Prestigio_PAP5300.riffpkg
  • Qualcomm MSM8625.riffpkg
  • S6310 Total Repair.riffpkg
  • S7562_Total_Repair.riffpkg
  • Samsung B229.riffpkg
  • Samsung i747 EFS.riffpkg
  • Samsung S5283.riffpkg
  • Samsung S6310 Total Repair.riffpkg
  • Samsung S6310N Total Repair.riffpkg
  • Samsung S6312 Total Repair.riffpkg
  • Samsung_GT-I9190_V4.2.2.riffpkg
  • Samsung_GT-I9200_V4.4.2.riffpkg
  • Samsung_i527_442.riffpkg
  • Samsung_i705.riffpkg
  • Samsung_i747_4.4.2_NE6.riffpkg
  • Samsung_R970.riffpkg
  • Samsung_R970C.riffpkg
  • Samsung_S5310.riffpkg
  • Samsung_S5310B.riffpkg
  • Samsung_t999v_EFS_repair.riffpkg
  • SE LT30A.riffpkg
  • Sony_LT28i_Ion_Test.riffpkg
  • XPERIA Z C6602.riffpkg
  • Xperia_Z_LTE_C6603.riffpkg
  • XPERIA_Z_Repair_Null_BaseBand.riffpkg
Comments Off on RIFF Box – list of latest updates more...

RIFF JTAG – Easy repair Micromax E390 supported

by on Jun.16, 2014, under News

RIFF JTAG – Easy repair Micromax E390 supported

Repairing bricked Micromax E390 is easy with the RIFF Box.

To resurrect Micromax E390:

  •  Solder JTAG cable to Micromax E390 JTAG pads;
  •  Insert USB Data cable into board and PC;
  •  Make sure Micromax E390 is selected in the list of models;
  •  If you use battery, press Power On key;
  •  Click Resurrect button;
  •  Wait till software signals a successful operation completion;
  •  Disconnect power supply, de-solder JTAG wires;

.

e390-feature-img3

Comments Off on RIFF JTAG – Easy repair Micromax E390 supported more...

RIFF JTAG – Easy repair Gigabyte GSmart G1342 Houston supported

by on Jun.16, 2014, under News

RIFF JTAG – Easy repair Gigabyte GSmart G1342 Houston supported

Repairing bricked Gigabyte GSmart G1342 is easy with the RIFF Box.

To resurrect Gigabyte GSmart G1342:

  •  Solder JTAG cable to Gigabyte GSmart G1342 JTAG pads;
  •  Connect USB cable or insert battery;
  •  Make sure Gigabyte GSmart G1342 is selected in the list of models;
  •  Click Resurrect button;
  •  Wait till software signals a successful operation completion;
  •  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.
.
gsmart

Comments Off on RIFF JTAG – Easy repair Gigabyte GSmart G1342 Houston supported more...

RIFF JTAG – Easy repair Gigabyte GSmart Rio R1 supported

by on Jun.16, 2014, under News

RIFF JTAG – Easy repair Gigabyte GSmart Rio R1 supported

Repairing bricked Gigabyte Rio R1 is easy with the RIFF Box.

To resurrect Gigabyte Rio R1:

  •  Solder JTAG cable to Gigabyte Rio R1 JTAG pads;
  •  Connect USB cable or insert battery;
  •  Make sure Gigabyte Rio R1 is selected in the list of models;
  •  Click Resurrect button;
  •  Wait till software signals a successful operation completion;
  •  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.
.
RIO_R1_pop02

Comments Off on RIFF JTAG – Easy repair Gigabyte GSmart Rio R1 supported more...

RIFF JTAG – Easy repair HTC J One HTL22 supported

by on Jun.16, 2014, under News

RIFF JTAG – Easy repair HTC J One HTL22 supported

Repairing bricked HTC HTL22 (PN0740000) is easy with the RIFF Box. Phone is auto powered on with USB Data Cable connected to the PC. Battery presence may be required.
In case you have no USB cable near, make sure battery is charged enough and hold Power On button during initiation of JTAG connection.
Resurrector will reflash radio’s boot zone and will re-write PDA’s SPL to 1.52.0000 version. Additionally to SPL and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘PN0740000’.

To resurrect HTC HTL22:

  •  Solder JTAG cable to HTC HTL22 (PN0740000) JTAG pads;
  •  Insert USB Data cable into board and PC;
  •  Make sure HTC HTL22 (PN0740000) is selected in the list of models;
  •  If you use battery, press Power On key;
  •  Click Resurrect button;
  •  Wait till software signals a successful operation completion;
  •  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using known flashing methods.

To enter download mode:

  •  Disconnect PC cable;
  •  Insert battery;
  •  Hold ‘Volume Down’ key and press ‘Power ON’ button.

.
130220-new-htc-one-021

Comments Off on RIFF JTAG – Easy repair HTC J One HTL22 supported more...

RIFF JTAG – Easy repair Samsung Galaxy Rugby Pro I547 supported

by on Jun.16, 2014, under News

RIFF JTAG – Easy repair Samsung Galaxy Rugby Pro I547 supported

Repairing bricked Samsung I547 is easy with the RIFF Box. The device is based on the Qualcomm MSM8960 chipset.
Note, one simple way to connect over JTAG – connect USB cable to PC and insert battery. In this case phone is automatically powered on.

To resurrect Samsung I547:

  •  Solder JTAG cable to Samsung I547 JTAG pads;
  •  Connect USB cable to phone and PC;
  •  Insert battery;
  •  Make sure Samsung I547 is selected in the list of models;
  •  Click Resurrect button;
  •  Wait till software signals a successful operation completion;
  •  Disconnect USB cable, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally, you can flash it using original Samsung downloader software to restore it to the working state.

To enter download mode:

  •  Disconnect PC cable;
  •  Insert battery;
  •  Hold ‘Volume Down’ key and press Power-On.

.
samsung_galaxy_rugby_pro_i547

Comments Off on RIFF JTAG – Easy repair Samsung Galaxy Rugby Pro I547 supported more...

RIFF JTAG – Easy repair Nokia Lumia 625 supported

by on Jun.16, 2014, under News

RIFF JTAG – Easy repair Nokia Lumia 625 supported

Repairing bricked Nokia Lumia 625 is easy with the RIFF Box.

To resurrect Nokia Lumia 625:

  •  Solder JTAG cable to Nokia Lumia 625 JTAG pads;
  •  Insert batter and connect USB Data cable;
  •  Make sure Nokia Lumia 625 is selected in the list of models;
  •  If you use only battery, press Power On key;
  •  Click Resurrect button;
  •  Wait till software signals a successful operation completion;
  •  Disconnect power supply, de-solder JTAG wires;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.
.
lumia625

Comments Off on RIFF JTAG – Easy repair Nokia Lumia 625 supported more...

Looking for something?

Use the form below to search the site:

Still not finding what you're looking for? Drop a comment on a post or contact us so we can take care of it!

Archives

All entries, chronologically...