Important information related to RIFF Box eMMC support

Hello dear users !

This topic will serve as initial guide for RIFF Box eMMC ISP/Direct functionality. This is not regular update, but rather a major upgrade.
As such, it will come free for all RIFF Boxes registered in last 6 months, and of course for all new RIFF Box customers.

To prepare everything on Your side for this upgrade, You’ll need the following:

  • RJ45 cable
  • 3×100 ohms resistors
  • External source for VCC and VCCQ (Optional)
  • Moorc adapters (Optional)
  • Activation credits (If Your box is older than 6 months)

RJ45 cable is required to connect RIFF Box to eMMC as RIFF Box RJ45 port is used for this function.

3×100 Ohms resistors are required as pull up, to increase signal levels and improve stability.

Extarnal source for VCC and VCCQ is required in case that You don’t want to open Your RIFF Box, in order to connect RIFF Box internal VCC voltage source. We know that there are already some adapters on market, which offer this function.

Moorc adapters are well known, and they offer best at price range.

Activation credits You can get in exchange for some money. We have too many of those, and we will be happy to exchange some of them to real money.

RIFF Box RJ45 port pinout:

1-NC
2-SD_CLK
3-SD_DAT0
4-SD_CMD
5-NC
6-NC
7-NC
8-GND
VCC pin is located on RIFF Box motherboard, bottom side. You can locate it if You check attached photo.

Pull up resistors should be connected from VCCQ to SD_CLK,  SD_CMD and SD_DAT0 lines.

RIFF JTAG – Some of the beta tests with eMMC ISP

So, as already announced here, there is whole lot of users testing newly developed RIFF Box features. Here are some of the posts and logs:

Default

direct adopter connect emmc gt-i9300 emmc VTU00M

Open serial port…OK
Connecting to the RIFF Box…OK
Firmware Version: 1.38.3b, JTAG Manager Version: 1.57 [BETA 2]

Connecting to the SD/eMMC Card…OK
Set I/O Voltage reads as 3.30V, SD_CLK Frequency is 960 KHz

Memory Type …………………….. eMMC
Manufacturer ID …………………. 0x15
OEM/Application ID ………………. 0x00
Product Name ……………………. “VTU00M”
Package ………………………… BGA
User Area Parition Size ………….. 0x0003AB400000 Bytes (14.68 GB)
Boot Partition Size ……………… 0x000000200000 Bytes (2.00 MB)
RPMB Partition Size ……………… 0x000000020000 Bytes (128.00 KB)
OCR Register ……………………. 0xC0FF8080 (Dual Voltage, High Capacity)
Write Protection Bits ……………. NONE
Boot Configuration ………………. Boot from Boot Partition 1 (Bus Width = 4Bit)
Chip Revision …………………… 15.12
Multimedia Card Revision …………. 1.6 (eMMC v4.5, v4.51)
Serial Number …………………… 0x3D398686
Memory Manufacturing Date ………… May, 2014

Open serial port…OK
Connecting to the RIFF Box…OK
Firmware Version: 1.38.3b, JTAG Manager Version: 1.57 [BETA 2]

Connecting to the SD/eMMC Card…OK
Set I/O Voltage reads as 3.30V, SD_CLK Frequency is 960 KHz

Detected eMMC Chip, ID: 0x15/0x00 (VTU00M), User Area Partition = 0x0003AB400000 Bytes (14.68 GB)

Reading “User Area Partition” address space from 0x000000000000 to 0x000001FFFFFF
Completed in 00:06:33.669 (Average Transfer Rate: 83.24 kB/s)

Smile Samsung S5282 ISP Connection Successful

Connection Method: ISP
Hand Set Model: Samsung S5282
Phone Status: Alive
Reason: Emmc Backup and Riff box Application TestingProblems encountered: I was unable to scan or read the handset with Riff.
Solution: I have soldered the 5K pull ups on Pin 2 and 3 of the RJ45 to Pin 9(VCC/VCCQ) Of Riff Box.Pinouts used: Z3x S5282 EMMC pinoutsRiff Box LogsOpen serial port…OK
Connecting to the RIFF Box…OK
Firmware Version: 1.38.3b, JTAG Manager Version: 1.57 [BETA 2]

Connecting to the SD/eMMC Card…OK
Set I/O Voltage reads as 3.28V, SD_CLK Frequency is 393 KHz

Memory Type …………………….. eMMC
Manufacturer ID …………………. 0x15
OEM/Application ID ………………. 0x00
Product Name ……………………. “S5U00M”
Package ………………………… BGA
User Area Parition Size ………….. 0x0000E9000000 Bytes (3.64 GB)
Boot Partition Size ……………… 0x000000200000 Bytes (2.00 MB)
RPMB Partition Size ……………… 0x000000020000 Bytes (128.00 KB)
OCR Register ……………………. 0xC0FF8080 (Dual Voltage, High Capacity)
Write Protection Bits ……………. NONE
Boot Configuration ………………. Boot from Boot Partition 1 (Bus Width = 1Bit)
Chip Revision …………………… 0.10
Multimedia Card Revision …………. 1.5 (eMMC v4.41)
Serial Number …………………… 0x7D4BB668
Memory Manufacturing Date ………… February, 2014

Phase 2: Read the partitions of the hans set and post results.

Partitions Read: BOOT PAT1, BOOT PAT2, RPMB Area PAT.
Status: All Susscessful(RIFF BO ROCKS 🙂 )

Logs

Open serial port…OK
Connecting to the RIFF Box…OK
Firmware Version: 1.38.3b, JTAG Manager Version: 1.57 [BETA 2]

Connecting to the SD/eMMC Card…OK
Set I/O Voltage reads as 3.28V, SD_CLK Frequency is 960 KHz

Detected eMMC Chip, ID: 0x15/0x00 (S5U00M), User Area Partition = 0x0000E9000000 Bytes (3.64 GB)

Reading “Boot Area Partition 1” address space from 0x000000000000 to 0x0000001FFFFF
Completed in 00:00:23.837 (Average Transfer Rate: 85.92 kB/s)

Open serial port…OK
Connecting to the RIFF Box…OK
Firmware Version: 1.38.3b, JTAG Manager Version: 1.57 [BETA 2]

Connecting to the SD/eMMC Card…OK
Set I/O Voltage reads as 3.28V, SD_CLK Frequency is 960 KHz

Detected eMMC Chip, ID: 0x15/0x00 (S5U00M), User Area Partition = 0x0000E9000000 Bytes (3.64 GB)

Reading “Boot Area Partition 2” address space from 0x000000000000 to 0x0000001FFFFF
Completed in 00:00:23.852 (Average Transfer Rate: 85.86 kB/s)

Open serial port…OK
Connecting to the RIFF Box…OK
Firmware Version: 1.38.3b, JTAG Manager Version: 1.57 [BETA 2]

Connecting to the SD/eMMC Card…OK
Set I/O Voltage reads as 3.28V, SD_CLK Frequency is 960 KHz

Detected eMMC Chip, ID: 0x15/0x00 (S5U00M), User Area Partition = 0x0000E9000000 Bytes (3.64 GB)

Reading “RPMB Area Partition” address space from 0x000000000000 to 0x00000001FFFF
Completed in 00:00:01.482 (Average Transfer Rate: 86.37 kB/s)

Default Connect & Read Dump SM-T211 EMMC M8G1WA .. Done

Connect & Read Dump SM-T211 EMMC M8G1WA .. Done

Conecting with Riff box

Open serial port…OK
Connecting to the RIFF Box…OK
Firmware Version: 1.38.2b, JTAG Manager Version: 1.57 [BETA 2]

Connecting to the SD/eMMC Card…OK
Set I/O Voltage reads as 3.28V, SD_CLK Frequency is 1 MHz

Memory Type …………………….. eMMC
Manufacturer ID …………………. 0x15
OEM/Application ID ………………. 0x00
Product Name ……………………. “M8G1WA”
Package ………………………… BGA
User Area Parition Size ………….. 0x0001D2000000 Bytes (7.28 GB)
Boot Partition Size ……………… 0x000000200000 Bytes (2.00 MB)
RPMB Partition Size ……………… 0x000000020000 Bytes (128.00 KB)
OCR Register ……………………. 0xC0FF8080 (Dual Voltage, High Capacity)
Write Protection Bits ……………. NONE
Boot Configuration ………………. No Boot
Chip Revision …………………… 0.10
Multimedia Card Revision …………. 1.5 (eMMC v4.41)
Serial Number …………………… 0xF2A45264
Memory Manufacturing Date ………… February, 2014

 LENOVO k900 EMMC MAG2GA connect Successful

Code:
Open serial port...OK
Connecting to the RIFF Box...OK
Firmware Version: 1.38.3b, JTAG Manager Version: 1.57 [BETA 2]

Connecting to the SD/eMMC Card...OK
Set I/O Voltage reads as 3.30V, SD_CLK Frequency is 960 KHz

Memory Type .......................... eMMC
Manufacturer ID ...................... 0x15
OEM/Application ID ................... 0x00
Product Name ......................... "MAG2GA"
Package .............................. BGA
User Area Parition Size .............. 0x0003A3E00000 Bytes (14.56 GB)
Boot Partition Size .................. 0x000000200000 Bytes (2.00 MB)
RPMB Partition Size .................. 0x000000020000 Bytes (128.00 KB)
OCR Register ......................... 0xC0FF8080 (Dual Voltage, High Capacity)
Write Protection Bits ................ NONE
Boot Configuration ................... No Boot
Chip Revision ........................ 1.5
Multimedia Card Revision ............. 1.5 (eMMC v4.41)
Serial Number ........................ 0xFE1E4658
Memory Manufacturing Date ............ May, 2012

direct EMMC VCC = VCCQ = 3V3