Medusa pro II READ firmware EMMC rev 5.1 by ISP [Answered] - GSM-Forum

andrei_d1978 · 03-05-2021, 17:22

Is it possible to READ the EMMC rev 5.1 firmware over an ISP without a native 4-in-1 socket?

andrei_d1978 · 03-06-2021, 12:18

I will clarify the question. How to count the flash drive firmware that is not in the Medusa pro database?

Medusa Box · 03-06-2021, 13:12

Hello.

Yes, you can read it by ISP. Unfortunately for this eMMC we do not have a solution yet, probably its FW is encrypted.

andrei_d1978 · 03-07-2021, 06:25

Quote:

Originally Posted by Medusa Box

Hello.

Yes, you can read it by ISP. Unfortunately for this eMMC we do not have a solution yet, probably its FW is encrypted.

For KMR310001M-B611_R311MB, you had a solution and people merged the firmware, in fact, I have this

log read FW KMR310001M-B611 failed - [Click to open]

andrei_d1978 · 03-10-2021, 11:08

Quote:

Originally Posted by andrei_d1978

For KMR310001M-B611_R311MB, you had a solution and people merged the firmware, in fact, I have this

log read FW KMR310001M-B611 failed - [Click to open]

What about my question about KMR310001M-B611? I want to merge the firmware from the flash drive, in which the revision is 0x0 or 0x7. If you fill in the firmware of this flash drive, which you have in the files. posted by users with revision 0x1, the size of the User area is reduced from 15028 to 14910. This may be critical

Medusa Box · 03-10-2021, 15:05

It's risky to do this. Manual firmware cannot be edited.
Most likely you will receive a non-working firmware that can permanently damage the eMMC.
Unfortunately, we cannot always correctly read firmware from eMMC, in which case we do not store them. But we continue to work in this direction.

andrei_d1978 · 03-10-2021, 15:18

Quote:

Originally Posted by Medusa Box

It's risky to do this. Manual firmware cannot be edited.
Most likely you will receive a non-working firmware that can permanently damage the eMMC.
Unfortunately, we cannot always correctly read firmware from eMMC, in which case we do not store them. But we continue to work in this direction.

it is not possible to permanently kill the firmware chip. After the testpoint, it will enter the service mode and you can flash it again
PS: I am ready for the sake of testing and improving the medusa pro software to kill one chip with firmware

andrei_d1978 · 03-22-2021, 06:03

I'll add some information. from these flash drives, medusa pro II also can not read the firmware, it writes to everyone
Reading firmware. Please wait...
Read eMMC firmware error! Unknown format!
1. KMF820012M-B305 rev 0х0
2. KMR210008M-A805 rev 0х0
3. KMQ72000SM-B316 rev 0х0
4. KMF720012M-B214 rev 0х0

Medusa Box · 03-22-2021, 12:20

Thanks for the report, we will check these firmwares.

03-05-2021, 17:22	#1 (permalink)
andrei_d1978 Freak Poster Join Date: Aug 2010 Location: Russia,Yekaterinburg Posts: 102 Member: 1363017 Status: Offline Thanks Meter: 44	Medusa pro II READ firmware EMMC rev 5.1 by ISP [Answered] Is it possible to READ the EMMC rev 5.1 firmware over an ISP without a native 4-in-1 socket? Log - [Click to open] Welcome to Medusa Pro Software version 2.2.0. Started. Reader #0: Generic EMV Smartcard Reader 0 Loading firmware. Please wait... Done. Selected eMMC interface. Socket detected! Selected PIN - CONNECTOR. Please disconnect battery and USB cable. Model Settings: Interface : eMMC Voltage : 1.8V Bus Mode : 1 bit Bus speed : Auto Connecting to server. Please wait... Connection to server successful Pin connector is detected!(eMMC: 1b, UFS: PWM 1-4) Connecting... Device : Samsung eMMC Q72SMB Page size : 512 B Block size : 512 B Block count : 15269888 Size : 7.28 GB (7456.00 MB) --------------------------------------------------------------- CID Info CID : 150100513732534D42005ED997A8439D Manufacturer ID : 0X15 Device/BGA : BGA (Discrete embedded) OEM/Application ID : 0X00 Product name : Q72SMB Product revision : 0.0 Product serial number : (hex) 5ED997A8 Manufacturing date : 04/2016 --------------------------------------------------------------- CSD Info CSD : D02701320F5903FFF6DBFFEF8E40400D CSD structure : CSD version No. 1.2 SPEC version : 4.1, 4.2, 4.3, 4.4, 4.41, 4.5, 4.51, 5.0, 5.01, 5.1 Data read access time1: 15 ms TRAN speed : 26 MHz READ block length : 512 Bytes WP group enable : YES PERM_WRITE_PROTECT : NO TMP_WRITE_PROTECT : NO --------------------------------------------------------------- EXTCSD Info Revision 1.7 (for MMC v5.0, v5.01) Erase block size : 512 Kbytes Boot1 size : 2048 Kbytes Boot2 size : 2048 Kbytes RPMB size : 128 Kbytes Partition config : (0x00) 00000000 Boot partition enable : Device not boot enabled (default) (Bus width = 1Bit) Boot ACK : No boot acknowledge sent (default) Boot bus conditions : (0x00) 00000000 Boot bus width : x1 (sdr) or x4 (ddr) bus width in boot operation mode (default) Reset boot bus conditions : Reset bus width to x1, single data rate and backward compatible timings after boot operation (default) Boot mode : Use single data rate + backward compatible timings in boot operation (default) RST_n function : (0x00) RST_n signal is temporary disabled (default) Partitioning support : Device supports partitioning features Enhanced attribute : Device can have enhanced technological features in partitions and user data area. Max enhanced data size: 2539520 Kbytes Partitions attribute : 0x0 Part setting completed: 0x0 GP partition 1 size : 0 b GP partition 2 size : 0 b GP partition 3 size : 0 b GP partition 4 size : 0 b Enhanced area size : (0x0) 0 b Enhanced area start : (0x0) 0 b Backup EXT_CSD saved to file C:/Program Files/Medusa Pro Software/EXT_CSD Backups/Q72SMB_05_03_2021_18_27_32.bin. Connect successful. --------------------------------------------------------------- SW: 2.2.0; FW: 2.00. RPMB: Authentication Key not yet programmed. Disconnected. Selected PIN - CONNECTOR. Please disconnect battery and USB cable. Model Settings: Interface : eMMC Voltage : 1.8V Bus Mode : 1 bit Bus speed : Auto Pin connector is detected!(eMMC: 1b, UFS: PWM 1-4) Connecting... Device : Samsung eMMC Q72SMB Page size : 512 B Block size : 512 B Block count : 15269888 Size : 7.28 GB (7456.00 MB) --------------------------------------------------------------- CID Info CID : 150100513732534D42005ED997A8439D Manufacturer ID : 0X15 Device/BGA : BGA (Discrete embedded) OEM/Application ID : 0X00 Product name : Q72SMB Product revision : 0.0 Product serial number : (hex) 5ED997A8 Manufacturing date : 04/2016 --------------------------------------------------------------- CSD Info CSD : D02701320F5903FFF6DBFFEF8E40400D CSD structure : CSD version No. 1.2 SPEC version : 4.1, 4.2, 4.3, 4.4, 4.41, 4.5, 4.51, 5.0, 5.01, 5.1 Data read access time1: 15 ms TRAN speed : 26 MHz READ block length : 512 Bytes WP group enable : YES PERM_WRITE_PROTECT : NO TMP_WRITE_PROTECT : NO --------------------------------------------------------------- EXTCSD Info Revision 1.7 (for MMC v5.0, v5.01) Erase block size : 512 Kbytes Boot1 size : 2048 Kbytes Boot2 size : 2048 Kbytes RPMB size : 128 Kbytes Partition config : (0x00) 00000000 Boot partition enable : Device not boot enabled (default) (Bus width = 1Bit) Boot ACK : No boot acknowledge sent (default) Boot bus conditions : (0x00) 00000000 Boot bus width : x1 (sdr) or x4 (ddr) bus width in boot operation mode (default) Reset boot bus conditions : Reset bus width to x1, single data rate and backward compatible timings after boot operation (default) Boot mode : Use single data rate + backward compatible timings in boot operation (default) RST_n function : (0x00) RST_n signal is temporary disabled (default) Partitioning support : Device supports partitioning features Enhanced attribute : Device can have enhanced technological features in partitions and user data area. Max enhanced data size: 2539520 Kbytes Partitions attribute : 0x0 Part setting completed: 0x0 GP partition 1 size : 0 b GP partition 2 size : 0 b GP partition 3 size : 0 b GP partition 4 size : 0 b Enhanced area size : (0x0) 0 b Enhanced area start : (0x0) 0 b Backup EXT_CSD saved to file C:/Program Files/Medusa Pro Software/EXT_CSD Backups/Q72SMB_05_03_2021_18_27_55.bin. Connect successful. --------------------------------------------------------------- SW: 2.2.0; FW: 2.00. RPMB: Authentication Key not yet programmed. Reading eMMC firmware. Please wait... Reconnecting Reconnected Reading firmware. Please wait... Read eMMC firmware error! Unknown format! Disconnected.

03-06-2021, 12:18	#2 (permalink)
andrei_d1978 Freak Poster Join Date: Aug 2010 Location: Russia,Yekaterinburg Posts: 102 Member: 1363017 Status: Offline Thanks Meter: 44	I will clarify the question. How to count the flash drive firmware that is not in the Medusa pro database?

03-06-2021, 13:12	#3 (permalink)
Medusa Box Product Supporter Join Date: Mar 2011 Location: Octopus-team Posts: 9,360 Member: 1538383 Status: Offline Sonork: 100.1587278 Thanks Meter: 3,398	Hello. Yes, you can read it by ISP. Unfortunately for this eMMC we do not have a solution yet, probably its FW is encrypted.

03-10-2021, 15:05	#6 (permalink)
Medusa Box Product Supporter Join Date: Mar 2011 Location: Octopus-team Posts: 9,360 Member: 1538383 Status: Offline Sonork: 100.1587278 Thanks Meter: 3,398	It's risky to do this. Manual firmware cannot be edited. Most likely you will receive a non-working firmware that can permanently damage the eMMC. Unfortunately, we cannot always correctly read firmware from eMMC, in which case we do not store them. But we continue to work in this direction.

03-22-2021, 06:03	#8 (permalink)
andrei_d1978 Freak Poster Join Date: Aug 2010 Location: Russia,Yekaterinburg Posts: 102 Member: 1363017 Status: Offline Thanks Meter: 44	I'll add some information. from these flash drives, medusa pro II also can not read the firmware, it writes to everyone Reading firmware. Please wait... Read eMMC firmware error! Unknown format! 1. KMF820012M-B305 rev 0х0 2. KMR210008M-A805 rev 0х0 3. KMQ72000SM-B316 rev 0х0 4. KMF720012M-B214 rev 0х0

03-22-2021, 12:20	#9 (permalink)
Medusa Box Product Supporter Join Date: Mar 2011 Location: Octopus-team Posts: 9,360 Member: 1538383 Status: Offline Sonork: 100.1587278 Thanks Meter: 3,398	Thanks for the report, we will check these firmwares.