I want to write this chip,HELP Me - GSM-Forum

Mani233 · 06-11-2018, 02:08

Connecting to the SD/eMMC Card...OK
Set I/O Voltage reads as 3.24V, SD_CLK Frequency is 2.50 MHz

Memory Type .......................... eMMC
Manufacturer ID ...................... 0x70
OEM/Application ID ................... 0x00
Product Name ......................... "S10004"
Package .............................. BGA
User Area Partition Size ............. 0x0000E4000000 Bytes (3.56 GB)
Boot Partition Size .................. 0x000000400000 Bytes (4.00 MB)
RPMB Partition Size .................. 0x000000400000 Bytes (4.00 MB)
OCR Register ......................... 0xC0FF8080 (Dual Voltage, High Capacity)
Write Protection Bits ................ NONE
ExtCSD Register Fields ............... [177] = 0x00, [179] = 0x08, [162] = 0x00
Boot Configuration ................... Boot from Boot Partition 1 (Bus Width = 1Bit)
Chip Revision ........................ 0.8
Multimedia Card Revision ............. 1.7 (eMMC v5.0)
Serial Number ........................ 0xA19E1A76
Memory Manufacturing Date ............ November, 2015

This emmc is in Micromax a37b handset
when i tryed with flash toot it start writting but failed after some time.
so i desoldered the emmc and connected to riff box.
Please guide me step by step to write factory file to this emmc

**legija** · 06-11-2018, 11:36

Proper course of action is this:

1. Start JTAG Manager and download updates (eMMC plugin v4.10, JTAG Manager v1.79, RIFF Box firmware v1.50)
2. Start eMMC Plugin and click "Load layout from device"
3. Click "Load Firmware files" and select scatter file
4. Click "Write selected"

This is valid only in case that MTK partition table exists in emmc (not erased) otherwise You need working full dump.

Mani233 · 06-11-2018, 15:10

when i load scatter file shows this . Is it normal??

Processed MTK Scatter File...OK

Scatter File's Partition <PRELOADER> Cannot be Found in the Current Layout. Cannot Inject its File "preloader_hct72_wet_lca.bin"
Scatter File's Partition <UBOOT> Cannot be Found in the Current Layout. Cannot Inject its File "lk.bin"
Scatter File's Partition <BOOTIMG> Cannot be Found in the Current Layout. Cannot Inject its File "boot.img"
Loaded Firmware File: "recovery.img" into partition: <RECOVERY>
Scatter File's Partition <SEC_RO> Cannot be Found in the Current Layout. Cannot Inject its File "secro.img"
Loaded Firmware File: "logo.bin" into partition: <LOGO>
Scatter File's Partition <ANDROID> Cannot be Found in the Current Layout. Cannot Inject its File "system.img"
WARNING: Cannot find Firmware File: "cache.img" for partition: <CACHE>. You can inject data manually.
Scatter File's Partition <USRDATA> Cannot be Found in the Current Layout. Cannot Inject its File "userdata.img"

Operation complete. From Scatter File were Loaded 2 partitons. Skipped 7 partitions.

**legija** · 06-11-2018, 15:25

Hi,
Please click "Load layout from DEVICE" in eMMC plugin, wait for finish and then make screenshot. It looks like MTK partition table might be damaged.

**legija** · 06-11-2018, 15:30

Or, better read this address and upload:

User area,
start address 0x0000 E3EB 0000
Data length 0x0000 0150 0000

Mani233 · 06-11-2018, 15:48

Open serial port...OK
Connecting to the RIFF Box...OK
Firmware Version: 1.50 (RIFFBOX1), JTAG Manager Version: 1.79

Connecting to the SD/eMMC Card...OK
Set I/O Voltage reads as 3.24V, SD_CLK Frequency is 2.50 MHz

Detected eMMC Chip, ID: 0x70/0x00 (S10004), User Area Partition = 0x0000E4000000 Bytes (3.56 GB)

Requested area to read overflows current memory chip's boundaries.

**legija** · 06-11-2018, 15:58

Please make screenshot with settings, something is wrong.

**legija** · 06-11-2018, 16:07

Discard all, I just found Your dump from previously read A37B.
This model uses GPT style partitioning, so give us some time to check why partitions arent recognized from scatter file.

**legija** · 06-11-2018, 16:25

Proper settings to read required data:

Mani233 · 06-11-2018, 18:05

FILE https://www.4shared.com/zip/7tjB6yFhda/a37bE2B0.html

Mani233 · 06-11-2018, 18:07

Screenshort is here

**legija** · 06-11-2018, 18:18

Ok, thank You.

Even it's listed in scatter file, bmtpool is not present in flash.
Best would be if You could read full dump from good phone (SP Flash tool can be used). In that case we could examine dump to know exactly if something is wrong or not.

Otherwise You can simply inject partitions manually, or I can prepare image file for You.
Also, please read full boot partition 1 and upload it.

Please let me know if You know how to read user area full dump using SP Flash tool, or if You can read full user area from current chip using RIFF Box.

Mani233 · 06-11-2018, 18:36

currently I have no working a37b .so I like to read full user data from current chip.
what the address to read?

**legija** · 06-11-2018, 18:55

Just tick auto fullflash size.

Mani233 · 06-11-2018, 19:01

It will take 4 hours.
I upload the file tomorrow

06-11-2018, 02:08	#1 (permalink)
Mani233 Freak Poster Join Date: Dec 2011 Location: BIRBHUM,W.B,INDIA Posts: 319 Member: 1707667 Status: Offline Sonork: 100.1611124 Thanks Meter: 60	I want to write this chip,HELP Me Connecting to the SD/eMMC Card...OK Set I/O Voltage reads as 3.24V, SD_CLK Frequency is 2.50 MHz Memory Type .......................... eMMC Manufacturer ID ...................... 0x70 OEM/Application ID ................... 0x00 Product Name ......................... "S10004" Package .............................. BGA User Area Partition Size ............. 0x0000E4000000 Bytes (3.56 GB) Boot Partition Size .................. 0x000000400000 Bytes (4.00 MB) RPMB Partition Size .................. 0x000000400000 Bytes (4.00 MB) OCR Register ......................... 0xC0FF8080 (Dual Voltage, High Capacity) Write Protection Bits ................ NONE ExtCSD Register Fields ............... [177] = 0x00, [179] = 0x08, [162] = 0x00 Boot Configuration ................... Boot from Boot Partition 1 (Bus Width = 1Bit) Chip Revision ........................ 0.8 Multimedia Card Revision ............. 1.7 (eMMC v5.0) Serial Number ........................ 0xA19E1A76 Memory Manufacturing Date ............ November, 2015 This emmc is in Micromax a37b handset when i tryed with flash toot it start writting but failed after some time. so i desoldered the emmc and connected to riff box. Please guide me step by step to write factory file to this emmc

06-11-2018, 11:36	#2 (permalink)
legija Product Manager Join Date: Apr 2006 Age: 55 Posts: 5,746 Member: 256342 Status: Offline Sonork: None Thanks Meter: 28,276	Proper course of action is this: 1. Start JTAG Manager and download updates (eMMC plugin v4.10, JTAG Manager v1.79, RIFF Box firmware v1.50) 2. Start eMMC Plugin and click "Load layout from device" 3. Click "Load Firmware files" and select scatter file 4. Click "Write selected" This is valid only in case that MTK partition table exists in emmc (not erased) otherwise You need working full dump.

06-11-2018, 15:10	#3 (permalink)
Mani233 Freak Poster Join Date: Dec 2011 Location: BIRBHUM,W.B,INDIA Posts: 319 Member: 1707667 Status: Offline Sonork: 100.1611124 Thanks Meter: 60	when i load scatter file shows this . Is it normal?? Processed MTK Scatter File...OK Scatter File's Partition <PRELOADER> Cannot be Found in the Current Layout. Cannot Inject its File "preloader_hct72_wet_lca.bin" Scatter File's Partition <UBOOT> Cannot be Found in the Current Layout. Cannot Inject its File "lk.bin" Scatter File's Partition <BOOTIMG> Cannot be Found in the Current Layout. Cannot Inject its File "boot.img" Loaded Firmware File: "recovery.img" into partition: <RECOVERY> Scatter File's Partition <SEC_RO> Cannot be Found in the Current Layout. Cannot Inject its File "secro.img" Loaded Firmware File: "logo.bin" into partition: <LOGO> Scatter File's Partition <ANDROID> Cannot be Found in the Current Layout. Cannot Inject its File "system.img" WARNING: Cannot find Firmware File: "cache.img" for partition: <CACHE>. You can inject data manually. Scatter File's Partition <USRDATA> Cannot be Found in the Current Layout. Cannot Inject its File "userdata.img" Operation complete. From Scatter File were Loaded 2 partitons. Skipped 7 partitions.

06-11-2018, 15:25	#4 (permalink)
legija Product Manager Join Date: Apr 2006 Age: 55 Posts: 5,746 Member: 256342 Status: Offline Sonork: None Thanks Meter: 28,276	Hi, Please click "Load layout from DEVICE" in eMMC plugin, wait for finish and then make screenshot. It looks like MTK partition table might be damaged.

06-11-2018, 15:30	#5 (permalink)
legija Product Manager Join Date: Apr 2006 Age: 55 Posts: 5,746 Member: 256342 Status: Offline Sonork: None Thanks Meter: 28,276	Or, better read this address and upload: User area, start address 0x0000 E3EB 0000 Data length 0x0000 0150 0000

06-11-2018, 15:48	#6 (permalink)
Mani233 Freak Poster Join Date: Dec 2011 Location: BIRBHUM,W.B,INDIA Posts: 319 Member: 1707667 Status: Offline Sonork: 100.1611124 Thanks Meter: 60	Open serial port...OK Connecting to the RIFF Box...OK Firmware Version: 1.50 (RIFFBOX1), JTAG Manager Version: 1.79 Connecting to the SD/eMMC Card...OK Set I/O Voltage reads as 3.24V, SD_CLK Frequency is 2.50 MHz Detected eMMC Chip, ID: 0x70/0x00 (S10004), User Area Partition = 0x0000E4000000 Bytes (3.56 GB) Requested area to read overflows current memory chip's boundaries.

06-11-2018, 15:58	#7 (permalink)
legija Product Manager Join Date: Apr 2006 Age: 55 Posts: 5,746 Member: 256342 Status: Offline Sonork: None Thanks Meter: 28,276	Please make screenshot with settings, something is wrong.

06-11-2018, 16:07	#8 (permalink)
legija Product Manager Join Date: Apr 2006 Age: 55 Posts: 5,746 Member: 256342 Status: Offline Sonork: None Thanks Meter: 28,276	Discard all, I just found Your dump from previously read A37B. This model uses GPT style partitioning, so give us some time to check why partitions arent recognized from scatter file.

06-11-2018, 18:05	#10 (permalink)
Mani233 Freak Poster Join Date: Dec 2011 Location: BIRBHUM,W.B,INDIA Posts: 319 Member: 1707667 Status: Offline Sonork: 100.1611124 Thanks Meter: 60	FILE https://www.4shared.com/zip/7tjB6yFhda/a37bE2B0.html

06-11-2018, 18:18	#12 (permalink)
legija Product Manager Join Date: Apr 2006 Age: 55 Posts: 5,746 Member: 256342 Status: Offline Sonork: None Thanks Meter: 28,276	Ok, thank You. Even it's listed in scatter file, bmtpool is not present in flash. Best would be if You could read full dump from good phone (SP Flash tool can be used). In that case we could examine dump to know exactly if something is wrong or not. Otherwise You can simply inject partitions manually, or I can prepare image file for You. Also, please read full boot partition 1 and upload it. Please let me know if You know how to read user area full dump using SP Flash tool, or if You can read full user area from current chip using RIFF Box.

06-11-2018, 18:36	#13 (permalink)
Mani233 Freak Poster Join Date: Dec 2011 Location: BIRBHUM,W.B,INDIA Posts: 319 Member: 1707667 Status: Offline Sonork: 100.1611124 Thanks Meter: 60	currently I have no working a37b .so I like to read full user data from current chip. what the address to read?

06-11-2018, 18:55	#14 (permalink)
legija Product Manager Join Date: Apr 2006 Age: 55 Posts: 5,746 Member: 256342 Status: Offline Sonork: None Thanks Meter: 28,276	Just tick auto fullflash size.