Riff JTAG Updater Check Here

RIFF JTAG Manager v1.64 and more 19.01.2017

​

Hello,
Here is list of latest RIFF Box updates:

- RIFF JTAG Manager v1.64:

• Fixed Password Recovery feature
  (Authorization code sending feature was broken, due to wrongly configured timeout)
• Fixed bug which caused JTAG Manager crash after clean install and successive downloading of a DLL file while there were no PKG files installed.
• Improved login interface - the registered email is automatically filled in to the Login field.
  (Remember that You can use both registered user name or e-mail as login. With this feature Your registered e-mail address is automatically inserted in login dialog form, so You just have to type in Your password)
• JTAG Manager Main Window Width is increased to increase the width of Resurrector Name fields

Please read description carefully !

User contributed Riffpkg (Repair packs made with Package Editor) uploaded to Official RIFF Box Update Server:
http://www.riffbox.org/downloads/packs.jpg

 

RIFF Box Updates, 06.02.2017

Hello,
We just uploaded following DLL-s to support storage:

• HTC ONE M8w 4G LTE

RIFF JTAG – HTC ONE M8w 4G LTE Boot repair supported

Posted on February 6, 2017
Repairing bricked HTC One M8Wlv (0P6B20000) via ISP connection is easy with the RIFF Box.
Additionally to HBOOT and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘0P6B20000’.
To resurrect HTC One M8Wlv (0P6B20000) via ISP connection:

• Get access to HTC One M8Wlv (0P6B20000) board (PCB);
• Check schematics picture for solder positions of CLK, DAT0, CMD and GND signals;
• Remove (de-solder) the CLK resistor;
• Solder CLK, DAT0, CMD and GND wires to the specified pads on the PCB;
• Attach battery
• Connect USB Data cable;
• Make sure HTC One M8Wlv (0P6B20000) ISP is selected in the list of models;
• Click Resurrect button;
• Wait till software signals a successful operation completion;
• Disconnect USB cable and battery, de-solder wires and solder back the CLK resistor;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.

• HTC Desire Eye 4G LTE EMEA M910n

RIFF JTAG – HTC Desire Eye 4G LTE EMEA M910n Boot repair supported

Posted on February 6, 2017
Repairing bricked HTC Desire M910n (0PFH11000) via ISP connection is easy with the RIFF Box.
Additionally to HBOOT and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘0PFH11000’.
To resurrect HTC Desire M910n (0PFH11000) via ISP connection:

• Get access to HTC Desire M910n (0PFH11000) board (PCB);
• Check schematics picture for solder positions of CLK, DAT0, CMD and GND signals;
• Remove (de-solder) the CLK resistor;
• Solder CLK, DAT0, CMD and GND wires to the specified pads on the PCB;
• Attach battery
• Connect USB Data cable;
• Make sure HTC Desire M910n (0PFH11000) ISP is selected in the list of models;
• Click Resurrect button;
• Wait till software signals a successful operation completion;
• Disconnect USB cable and battery, de-solder wires and solder back the CLK resistor;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.
To download and install these files, simply click "Check for updates" button in JTAG Manager, and select new files for download.

 

RIFF JTAG Box updates, 20.02.2017

Today's updates:

• Samsung SM-A300F Galaxy A3 LTE

RIFF JTAG – Samsung SM-A300F Galaxy A3 LTE Boot repair supported

Posted on February 20, 2017
Repairing bricked Samsung A300F via ISP connection is easy with the RIFF Box.
To resurrect Samsung A300F via ISP connection:

• Get access to Samsung A300F board (PCB);
• Check schematics picture for solder positions of CLK, DAT0, CMD and GND signals;
• Remove (de-solder) the CLK resistor (30R);
• Solder CLK, DAT0, CMD and GND wires to the specified pads on the PCB;
• Attach battery
• Connect USB Data cable (in some cases also attach battery);
• Make sure Samsung A300F ISP is selected in the list of models;
• Click Resurrect button;
• Wait till software signals a successful operation completion;
• Disconnect USB cable and battery, de-solder wires and solder back the CLK resistor;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.

• Samsung SM-A500F Galaxy A5 LTE

RIFF JTAG – Samsung SM-A500F Galaxy A5 LTE Boot repair supported

Posted on February 20, 2017
Repairing bricked Samsung A500F via ISP connection is easy with the RIFF Box.
To resurrect Samsung A500F via ISP connection:

• Get access to Samsung A500F board (PCB);
• Check schematics picture for solder positions of CLK, DAT0, CMD and GND signals;
• Remove (de-solder) the CLK resistor (30R);
• Solder CLK, DAT0, CMD and GND wires to the specified pads on the PCB;
• Attach battery
• Connect USB Data cable (in some cases also attach battery);
• Make sure Samsung A500F ISP is selected in the list of models;
• Click Resurrect button;
• Wait till software signals a successful operation completion;
• Disconnect USB cable and battery, de-solder wires and solder back the CLK resistor;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.

• HTC One M8 ULCA (AT&T)

RIFF JTAG – HTC One M8 ULCA (AT&T) Boot repair supported

Posted on February 20, 2017
Repairing bricked HTC One M8Ulca (0P6B12000) via ISP connection is easy with the RIFF Box.
Additionally to HBOOT and Radio zones, the zone which contains Model ID is re-flashed too. Thus after resurrection phone will have Model ID = ‘0P6B12000’.
To resurrect HTC One M8Ulca (0P6B12000) via ISP connection:

• Get access to HTC One M8Ulca (0P6B12000) board (PCB);
• Check schematics picture for solder positions of CLK, DAT0, CMD and GND signals;
• Remove (de-solder) the CLK resistor;
• Solder CLK, DAT0, CMD and GND wires to the specified pads on the PCB;
• Attach battery
• Connect USB Data cable;
• Make sure HTC One M8Ulca (0P6B12000) ISP is selected in the list of models;
• Click Resurrect button;
• Wait till software signals a successful operation completion;
• Disconnect USB cable and battery, de-solder wires and solder back the CLK resistor;

Now phone is in bootable condition, that is, even if it does not start up normally you can flash it using known flashing methods.

To download these files click "Check for Updates" button in "Box Service" TAB.

 

RIFF JTAG Manager v1.66, RIFF II Firmware v1.42 (10x faster)

​

Hello,
Please read this carefully if You are RIFF Box v2 user:

RIFF JTAG Manager 1.66
---------------------------
- RIFFBOX2 support for new connection mode is added (for new Drivers)
- Due to new drivers Read/Write speeds via eMMC interface increased 10 times and more
- Read/Write speed is now shown in MB/s
- Firmware Update process adjusted for slow networks (Indonesia, Bangladesh, India . . .)


RIFF Box Firmware v1.42
---------------------------
- RIFFBOX connection mode is optimized for better speed, it is no more the CDC.
The data transfer speeds are increased more than 10 times.
- Fixed bug in handling the erroneous situations during eMMC data read operations.


RIFF Box v2 users:

1. Download new files from server (JTAG Manager and "New Drivers")
2. Click "Firmware Update" and wait for process to be finished,
(Update port driver remains old ! ! !)
3. Install new drivers from "New Driver" folder in JTAG Manager install dir.

New driver, together with new firmware will dramatically increase performances with eMMC chips and SD cards.
Theoretical speed is up to 18MB/s using 4bit bus width.
In practice it can depend on eMMC chip model but even for oldest chips it's near 10MB/s.




RIFF Box v1 users don't need to install new driver, as it cannot be implemented for old hardware for now.

 

RIFF JTAG Manager v1.67, RIFF Box Firmware v1.43

​

JTAG Manager 1.67
---------------------------
- Fixed bug (which is related to RIFFBOX2 only), which caused box connection error, after this operation: "Setting new JTAG/eMMC License to the RIFFBOX."

RIFF Box Firmware v1.43
---------------------------

- Fixed bug related to RIFF Box v1 eMMC detection
- Fixed bug related to RIFF Box v2 USB 2.0 ports enumeration

New RIFF Box v2 drivers:
----------------------------
- Drivers from year 2014 (x86 and x64)


Instructions for users with V2 box and "Device cannot start, error code 10" problem:

Method 1:
- Disconnect RIFF Box v2 from USB port
- Open box housing and take PCB out
- Connect TP1 to TP2 using tweezers,
- Connect USB cable to Box and PC
- Disconnect TP-s
- Launch JTAG Manager (any version from 1.65 and up)
- Perform Firmware Update as requested

After You connect TP-s and USB cable, box will enumerate in bootloader mode. RIFF Update Port driver is required (like allways during firmware update) and Recovery firmware will be flashed.
After this, normal Firmware Update procedure will follow and You can use RIFF Box on any USB port (2.0 or 3.0).

Method 2:

- Find working USB 3.0 port (By working means that LPCDevice driver works)
- Update box to V1.43 firmware

 

RIFF JTAG Manager v1.73, RIFF Firmware v1.47 – Mass storage mode support for RIFF Box

RIFF Firmware 1.47
—————————
– MassStorage Mount/Dismount support for RIFFBOX1 is added.
– Working with special eMMC vendor features (like dedicated Samsung eMMC Chip’s commands) is re-organized.
Due to high risk of erasing User/Boot areas on the eMMC chips which are not Samsung, the Samsung chips autodetection is completely removed.
To access special Samsung eMMC’s features (like firmware update, factory reset, etc) User must manually select Vendor Mode.
– RIFF1 & RIFF2: Finally!!! The eMMC/SD Erase Operation (for Direct/ISP connection) finally is implemented!!!
RIFF JTAG Manager 1.73
—————————
– MassStorage mount/dismount feature is reworked and improved. Now is possible to Mount/Reconfigure/Dismount the MassStorage via the same dialog.
The MassStorage settings are read from the RIFFBOX, so it is much more convenient in case users need to mount/dismount same eMMC Area ocasianlly or to adjust eMMC connection parameters for better stability.
– MassStorage Mount/Dismount support for RIFFBOX1 is added.
– Working with special eMMC vendor features (like dedicated Samsung eMMC Chip’s commands) is re-organized (see the Firmware 1.47 notes)
– Finally!!! The eMMC/SD Erase Operation (for Direct/ISP connection) is implemented!!!


JTAG Manager 1.72
—————————
– New method of resurrectors grouping is added.
Setting ISP Resurrectors shows only the ISP available DLLs; Setting ISP Resurrectors shows only the packages (PKG files); setting JTAG Resurrectors shows only the JTAG available DLLs
Setting ALL Resurrectors shows all available DLLs same as is done in JTAG Manager 1.71 and lower.
– Fixed bug for correct setting of the recommended SD/MMC VCCIO voltage for ISP DLLs: when model is selected, the JTAG Manager adjusts the frequency, voltage and other settings to match (if possible) those values, which are hardcoded into resurrector DLL.

List of newest repair DLL-s with ISP support:
– LG F240L,
– Asus ZenFone2 (ZE551ML),
– Huawei Honor 4C (CHM-U01) ISP
– Nokia lumia 530 ISP
– Samsung I9305 ISP
– Samsung J105H ISP
– Samsung N8000 ISP
– Samsung P5100 ISP
– Samsung T531 ISP
– Samsung G361H ISP
– Samsung I9300 ISP
– Samsung I9300I ISP
– Samsung I9301I ISP
– Samsung i9070 ISP
– Samsung i8552 ISP
– Samsung n7000 ISP
– Samsung i9192 ISP
– Samsung i9060 ISP
– Samsung G318H ISP
– HTC Flyer ISP
– HTC Desire 326G ISP
– ZTE V811 ISP

 

15.09.2017 RIFF Box updates - Xiaomi REDMi 4A !

Hello,
Newly released ISP DLL-s:

- Samsung A310F
- Samsung I9190
- Samsung J320H
- Samsung P3100
- Samsung T989
- Xiaomi Redmi 4A

Please click "Check for Updates" button to download newest set of repair DLL-s.

 

22.09.2017 RIFF Box updates - more ISP models support

Hello,
Following DLL-s are uploaded to support area:

• Acer Liquid Z330
• HTC OneM7 (PN0710000)
• Lenovo K910
• Samsung A500K
• Samsung J510FN
• Samsung N7100
• Sony C1605
• ZTE_V880E

To download and install newly released updates, start RIFF JTAG Manager, go to Box Service TAB and click "Check for Updates" button.

22.09.2017 RIFF Box updates - more ISP models support

 

RIFF JTAG Manager v1.74, RIFF Box Firmware v1.48 Turbo Mode for RIFF Box v1

​

Hello dear RIFF Box users !

We're proud to announce newest updates for RIFF Box v1 and RIFF BOX v2:

RIFF Box Firmware v1.48
---------------------------
- New SD/MMC Interface is added for RIFF1: the CPLD is used for data shifting at max 8MHz rate.
As the eMMC signals the TDI, TMS, RTCX, and TDO signals on JTAG Connector are used. Read/Write speeds at 8MHz are aprroximately 800KB/sec - read, 365KB/s - write.
Since the new SD/MMC Interface shares the JTAG port connector, in the JTAG Manager in the SD/MMC Interface list, it is named as 'JTAG';
- The eMMC Read/Write speeds for GPIO (RJ-45) SD/MMC Interface are increased: 260KB/s - read, 360 KB/s - write (compare with Firmware 1.47: ~198 KB/s - read, 190 KB/s - write)
- The eMMC Read speeds for RIFF2 (30PN) SD/MMC Interface are increased: at SD/MMC Clock Speed = 34MHz: ~9.50MB/s - read (compare with Firmware 1.47: ~7.80 MB/s - read)
- The eMMC Write speeds for RIFF2 (30PN) SD/MMC Interface are increased more than 20x(!!!) times: at SD/MMC Clock Speed = 34MHz: 6.40MB/s - write (compare with Firmware 1.47: ~390 KB/s - write)


RIFF JTAG Manager v1.74
---------------------------
- ExtCSD Register's fields 177, 179 and 162 (BOOT_BUS_CONDITIONS, PARTITION_CONFIG, and RST_n_FUNCTION) are now displayed in eMMC connection info ("Check eMMC/SD Card" button or eMMC Advanced Actions Dialog's "Read Info from eMMC")
- Added selection of SD/MMC H/W Interface: currently are available:
> 1. RIFF1 SD/MMC Interface @RJ45 Connector
> 2. RIFF1 SD/MMC Interface @JTAG Connector
> 3. RIFF2 SD/MMC Interface @30-Pin Connector
- Added real-time RIFFBOX status (in StatusBar): the BOX revision (RIFFBOX1/RIFFBOX2) and Firmware version
- Improved switching on-the-fly of the JTAG Manager's specific to RIFFBOX revision parameters, immediately when the new box is connected to PC while JTAG Manager is running.
- Schematics picture is updated (RIFF JTAG Pinout button on the Resurrection page). Schematics picture is now displayed depending on the box revision - RIFFBOX1 or RIFFBOX2.
- Fixed buffer overrun bug in RIFF2 firmware, which caused getting chaotically corrupted data during the eMMC Read operations
- Added one-time Start Trial Period feature for RIFF v1 users


RIFF Remote Helper v1.10
----------------------------
- Added support for RIFF v2 hardware
- Added support for new drivers
- Remote Helper is now included with setup package by default.


You can download new files from RIFF Box home page:

www.riffbox.org


- RIFF Box v1 SD/eMMC interface via JTAG port (CPLD):

In order to maximize read/write speed on v1 hardware, we decided to update CPLD firmware and use 20 pin port to connect SD/eMMC to RIFF Box.
Please note that RJ45 port remains functional, too.


- One Time Trial for v1 users:
For those users with expired accounts, who want to test new features for free, we added optional function. Upon connecting to RIFF Box license server, You'll be prompted to activate Trial Period (15 days) which will enable Your box with all current updates and functions.

- Support activations are permanent from now.
All users who activate their account will get "Forever" status (Including those who activated support in last 3 months). This means that there will be no more account expiration

 

RIFF Box updated files list (170 + models supported)

​

Hello,

Please take not about some changes in RIFF Box support.

- Web download server (self registration required with working e-mail address)
- Frequency of updates increased
- Technical support at RIFF Box official forum (Support tickets)

Please see bellow list of uploaded Boot repair packs in last few weeks:

HTC Models Boot repair, Read/Write eMMC ISP pinout

• HTC_OneA9u_2PQ910000_ISP.dll
• HTC_OneM8y_0P6B63000_ISP.dll
• HTC_OneM9u_0PJA10000_ISP.dll
• HTC_OneS9u_2PRG20000_ISP.dll
• HTC_OneX9u_2PS510000_ISP.dll
• HTC_SensationXL_PI3920000_ISP.dll

Huawei Models Boot repair, Read/Write eMMC ISP pinout

• Huawei_P7_L10_ISP.dll
• Huawei_P8_Lite_ISP.dll
• Huawei_U8860_ISP.dll

Lenovo Models Boot repair, Read/Write eMMC ISP pinout

• Lenovo_A1000F_ISP.dll

LG Models Boot repair, Read/Write eMMC ISP pinout

• LG_AS330_ISP.dll
• LG_D160_ISP.dll
• LG_D280n_ISP.dll
• LG_D285_ISP.dll
• LG_D290n_ISP.dll
• LG_D295_ISP.dll
• LG_D295F_ISP.dll
• LG_D320n_ISP.dll
• LG_D325_ISP.dll
• LG_D380_ISP.dll
• LG_D390n_ISP.dll
• LG_D410_ISP.dll
• LG_D410HN_ISP.dll
• LG_D605_ISP.dll
• LG_D618_ISP.dll
• LG_D625_ISP.dll
• LG_D631_ISP.dll
• LG_D722V_ISP.dll
• LG_D724_ISP.dll
• LG_D821_ISP.dll
• LG_D838_ISP.dll
• LG_D851_ISP.dll
• LG_D855_ISP.dll
• LG_D856_ISP.dll
• LG_E980_ISP.dll
• LG_F100L_ISP.dll
• LG_F100S_ISP.dll
• LG_F160LV_ISP.dll
• LG_F240K_ISP.dll
• LG_F350S_ISP.dll
• LG_F440L_ISP.dll
• LG_F460K_ISP.dll
• LG_F670L_ISP.dll
• LG_H324_ISP.dll
• LG_H345_ISP.dll
• LG_H410_ISP.dll
• LG_H422_ISP.dll
• LG_H443_ISP.dll
• LG_H525n_ISP.dll
• LG_H631_ISP.dll
• LG_H635_ISP.dll
• LG_H734_ISP.dll
• LG_H788_ISP.dll
• LG_H790_ISP.dll
• LG_H811_ISP.dll
• LG_H815_ISP.dll
• LG_H818P_ISP.dll
• LG_H845_ISP.dll
• LG_H901_ISP.dll
• LG_K120K_ISP.dll
• LG_K330_ISP.dll
• LG_K550_ISP.dll
• LG_K600_ISP.dll
• LG_L23_ISP.dll
• LG_L24_ISP.dll
• LG_LMX210MA_ISP.dll
• LG_LS450_ISP.dll
• LG_LS660_ISP.dll
• LG_LS665_ISP.dll
• LG_LS675_ISP.dll
• LG_LS740_ISP.dll
• LG_LS770_ISP.dll
• LG_LS775_ISP.dll
• LG_LS777_ISP.dll
• LG_LS885_ISP.dll
• LG_LS990_ISP.dll
• LG_LS991_ISP.dll
• LG_LS996_ISP.dll
• LG_LU620_ISP.dll
• LG_M200N_ISP.dll
• LG_M250N_ISP.dll
• LG_M320_ISP.dll
• LG_M400DY_ISP.dll
• LG_MS210_ISP.dll
• LG_MS323_ISP.dll
• LG_P715_ISP.dll
• LG_P765_ISP.dll
• LG_P769_ISP.dll
• LG_P930_ISP.dll
• LG_SU870_ISP.dll
• LG_TP450_ISP.dll
• LG_US215_ISP.dll
• LG_US550_ISP.dll
• LG_V520_ISP.dll
• LG_VS410PP_ISP.dll
• LG_VS425LPP_ISP.dll
• LG_VS810PP_ISP.dll
• LG_VS880PP_ISP.dll
• LG_VS930_ISP.dll
• LG_VS986W_ISP.dll
• LG_VS990_ISP.dll

Motorola Models Boot repair, Read/Write eMMC ISP pinout

• Motorola_XT1021_ISP.dll
• Motorola_XT1022_ISP.dll
• Motorola_XT1030_ISP.dll
• Motorola_XT1032_ISP.dll
• Motorola_XT1034_ISP.dll
• Motorola_XT1064_ISP.dll
• Motorola_XT1068_ISP.dll
• Motorola_XT1097_ISP.dll
• Motorola_XT1541_ISP.dll
• Motorola_XT1550_ISP.dll
• Motorola_XT1562_ISP.dll
• Motorola_XT1563_ISP.dll
• Motorola_XT1642_ISP.dll
• Motorola_XT1676_ISP.dll
• Motorola_XT1706_ISP.dll
• Motorola_XT1723_ISP.dll

Nokia Models Boot repair, Read/Write eMMC ISP pinout

• Nokia_Lumia_930_ISP.dll

Pantech Models Boot repair, Read/Write eMMC ISP pinout

• Pantech_A760S_ISP.dll
• Pantech_A860L_ISP.dll
• Pantech_A860S_ISP.dll
• Pantech_A870L_ISP.dll

Samsung Models Boot repair, Read/Write eMMC ISP pinout

• Samsung_A710F_ISP.dll
• Samsung_E110S_ISP.dll
• Samsung_E170K_ISP.dll
• Samsung_E170L_ISP.dll
• Samsung_E250L_ISP.dll
• Samsung_E270K_ISP.dll
• Samsung_E300K_ISP.dll
• Samsung_E310L_ISP.dll
• Samsung_G313H_ISP.dll
• Samsung_G318HZ_ISP.dll
• Samsung_G360H_ISP.dll
• Samsung_G530H_ISP.dll
• Samsung_G531F_ISP.dll
• Samsung_G570F_ISP.dll
• Samsung_I317_ISP.dll
• Samsung_I8190_ISP.dll
• Samsung_I8262_ISP.dll
• Samsung_I9100_ISP.dll
• Samsung_I9105_ISP.dll
• Samsung_I9195_ISP.dll
• Samsung_I9505_XXUHPK2_ISP.dll
• Samsung_I9515_XXU1ANK2_ISP.dll
• Samsung_J120F_ISP.dll
• Samsung_J210F_ISP.dll
• Samsung_J500F_ISP.dll
• Samsung_J500FN_ISP.dll
• Samsung_J700H_ISP.dll
• Samsung_M380S_ISP.dll
• Samsung_P3110_ISP.dll
• Samsung_P3113_ISP.dll
• Samsung_P601_ISP.dll
• Samsung_S5282_ISP.dll
• Samsung_S6790_ISP.dll
• Samsung_S7562_ISP.dll
• Samsung_T211_ISP.dll
• Samsung_Z130H_ISP.dll
• Samsung_Z130H_R07_ISP.dll

Sony Models Boot repair, Read/Write eMMC ISP pinout

• Sony_C1504_ISP.dll
• Sony_D5503_ISP.dll
• Sony_D5803_ISP.dll
• Sony_E2303_ISP.dll
• Sony_E2333_ISP.dll
• Sony_E2353_ISP.dll
• Sony_E5563_ISP.dll
• Sony_F3111_ISP.dll
• Sony_LT26I_ISP.dll
• Sony_LT26II_ISP.dll
• Sony_LT28H_ISP.dll
• Sony_ST25_ISP.dll

VolksWagen Audio head: (JTAG)

• VolksWagen_RCD330GPlus.dll

XiaoMi Models Boot repair, Read/Write eMMC ISP pinout

• Xiaomi_Redmi4X_ISP.dll
• Xiaomi_RedmiNote4X_ISP.dll

To download and install updates, click "Check for Updates" button on "Box Service" tab.
You can also register an account at Turbo-Support download server:


Index of ../../RIFF/RIFF_ROOT/




RIFF Box v1 (Black box) users who havent used 15 days trial can activate it after installing JTAG Manager v1.76 and downloading new data.
In case that trial period is used but fw version is still 1.48 or older, please request trial reset in "Account recovery" section.
Box S/N and "Trial reset" required.

 

RIFF Box eMMC Plugin - File System explorer for MTK added

​

Hello,

Please download latest version of our great tool - eMMC Plugin v4.08.

Whats new:

• Added full support for MTK internal partition descriptor
• Added support for MTK MBR/EBR
• Added file system explorer support for MTK models
• Added manual selection of parsing method - now its possible to force parsing GPT/MBR in Samsung flash dumps (useful in cases with preloader in boot partition 1)
• Added manual selection to force MTK MBR/EBR parsing instead of MTK Internal partition layout parsing.

Lets review most important functions present now:


File systems and partitions:

• File system explorer which supports EXT2/EXT3/EXT4 and FAT32
• Exporting detected partitions in raw binary format
• Exporting detected partitions as logical drive
• Exporting single files from file system in selected partition

Boot loaders, EFS, NVRAM or any other important partitions manipulation:

• Load Full flash dump and export partitions to separate files
• Load full flash dump and write GPT or any other partition to another eMMC chip
• Load GPT and inject binary files into designated partitions (for example load boot loader files from firmware)
• Read single partition raw binary
• Write single partition raw binary
• Build custom flash dump files
• Read Product Info partition from HTC models and modify CID/IMEI/Simlock status.
• ...

Useful tips:

• If flash dump with corrupted partition is loaded, "Out of Memory" message may appear after some time. This can be caused by corrupted directory structure where parser enters into loop. In such case, kill the application via task manager, save such partition as binary file and write it to usb flash disk as "disk image". File system repair can be attempted and data salvaged using Windows or Linux tools.
• MTK files with MBR styled layout need a bit longer time to be parsed and in case plugin appears to be frozen just give it some time

Please check attached screens. That is full flash dump from MTK based "i9500 clone".

 

RIFF Box 1/2 updates - JTAG Manager v1.78, eMMC Plugin v4.09, 12 new models

​

Hello,
RIFF Box v1/v2 updates, 15.05.2018:


RIFF Box JTAG Manager v1.78
---------------------------
- (SDK): more functions are now available (exported) for future Resurrector DLLs;
- PKG Editor: added button 'Visual Conditional Writes' - which helps sorting write actions into specified groups of conditions
Those who have experience in PKG creation will understand the purpose.
- Fixed SD/MMC voltage list for RIFFBOX1
- Fixed correct partition name logging when reading/writting via Direct EMMC interface




RIFF Box v1 users now have option to fine tune VCCIO (VCCQ) voltage in order to achieve best stability.
VCCIO can be increased/decreased in 0.05v steps. We recommend this procedure if nominal 1.8v VCCIO doesn't work properly.


eMMC Partition Table FullFlash Image Files Processing Plugin (eMMCDiskPartitions.dll) v4.09

-------------------------------------
- "Load Firmware Files" button is added. This feature will allow to load official firmware files directly into recognized partitions.
At the release moment only MTK Scatter Files are supported.
- Added MTK Scatter Files support. Please note, to load a Scatter File, first is required for plugin to Load a valid Dump (Load Layout from File or read Layout from Device (Load Layout from Device).
After partitions layout is recognized by plugin, a Scatter File can be loaded: files of partitions listed in scatter file will be automatically injected into current Layout.




- Plugin now supports OTHERS THAN the User Area partition!!!



For example, if after parsing, plugin detects extra used partitions (e.g. boot partition1 in some Samsung phones, boot partition1,2&RPMB in some phones with MTK MCU-based layout)
then these partitions are displayed in the partitions list too. User can work with these partitions as usual - read/write, inject data from file, storing to disk, etc - plugin
will automatically manage data redirection to proper hardware locations of the eMMC chip.
- Added column "LOCATION ON CHIP" - displays hardware location of the current partition inside the eMMC Chip (Boot parition1,2, User Area, etc.)
- Keyboard shortcuts are added for Read Partitions button (F6) and Flash partition button (F7)
- Context menu is expanded with same new minor features (right-click on any partition in the partitions list window)
- 'PRESENT' column is added to the partitions list. This shows info about each partiton - whether partition is available in dump file or dump ends prematurely
(100% - means partition is completely present in dump file, 0% - partition is not present in dump file, between 0 and 100 - partition is partially available, but a definite part of it is not available due to premature end of dump file)
- 'SIZE' column is added to the partitions list. This shows human-understandable size in KBs/MBs/GBs/TBs
- HEX window now supports 'NOT_AVAILABLE' data displaying: the '**' is displayed instead of HEX data for areas when data is not available
(for example this is true when local dump file size is less than current partition address, so the plugin cannot obtain data for such case)
(for example this is true when plugin failed to read data on-the-fly due to read errors)
- Progress bar in HEX window is fixed for chunks of data of size up to ~32GB, but still is not full 64-bit wide, thus weird behaviour is expected for partition sizes more than ~32GB (more than 0x7FFFFFFF0 bytes = 31,9999GB)
- Due to obsolete meaning, removed ACTIVE and SELECTED columns in the parsed partitions list.
- Added new column 'RELATIVE PARTITION' to the parsed partitions list. Plugin now supports relative partitions, base of which depends on connected physical eMMC chip.
Thus the real address is calculated by plugin on-the-fly, during read/write operations.
For relative partitions, 'RELATIVE PARTITION' column shows relative offset from the end of the chip area where partition must be located. In this case the 'STARTING OFFSET' column shows
absolute address calculated at the moment of parsing (that is if partitions were parsed from dump file, the starting offset is calculated using dump's file size; if partitions were parsed from connected emmc device,
then starting offset is calculated using current emmc chip's user area size). This address will be recalculated every time any read/write on this partition is performed.
P.S. Real life relative partitions can be found in MTK-based devices (BMPOOL partition), Samsung phones (SGPT partition)
- added keyboard control to the partitions list window. One can navigate through partitions with keyboard keys,
select/deselect single entry with ENTER key, use INSERT key to select an entry and automatically move cursor down.
In case the plugin is invoked by the JTAG Manager (PKG Editor, MassStorage selector, etc.) the ESC key serves the function of buttons "Back to MassStorage" and "Back to PKG Editor"
- The order of focused controls when TAB key is pressed is sorted correctly.
- Option "When parsing is possible from GPT and PIT, force discarding PIT so GPT data is used" is transfered to CheckBox for better convenience. It is named "PIT Dumps -> Force EFI Layout"
- Option "When parsing is possible from MBR and MTK Tables, force discarding MTK layout, so data from MBR/EBR is used" is transfered to CheckBox for better convenience. It is named "MTK Dumps -< Force MBR Layout"
- Double progress is implemented - to display read/write progress of current partition and total read/write progress of selected group of partitions
- Color of selected text in partitions list window is adjusted
- For MBR/EBR parsing added feature to resize last partition into reasonable size: sometimes last partition is reported having maximum possible size (~2TB).
If layout is read from device then last partition is resized to fit into the current memory chip.
If layout is read from a local dump file then the last partition is resized to fit into the 58.25GB memory chip.
- after parsing supported file system into Embedded F/S Explorer, loss of foreground position of the main plugin window bug is fixed
- 'Check for Blank' operation is made more informative: each partiton checking progress is drawn. Blank partitions are grayed out in the partitions list, so blank partitions are visible instantly.
Checking for blank is improved - partitions which have "NOT_AVAILABLE" data status are considered to be blank and time is not lost doing unnecessary checks (especially big sized partitions)



LG Models boot repair, ISP pinout, Read/Write eMMC:

• LG D335
• LG E440
• LG E445
• LG E450
• LG K220DS
• LG K410
• LG K430

Samsung Models boot repair, ISP pinout, Read/Write eMMC:

• Samsung A500fU
• Samsung G800F
• Samsung G900H

XiaoMi Models boot repair, ISP pinout, Read/Write eMMC:

• Xiaomi Mi 5X (MDT2)
• Xiaomi Redmi Note 5A Prime (MDG6S)

To download and install updates, click "Check for Updates" button on "Box Service" tab.
You can also register an account at Turbo-Support download server:


Index of ../../RIFF/RIFF_ROOT/




RIFF Box v1 (Black box) users who havent used 15 days trial can activate it after installing JTAG Manager v1.76 and downloading new data.
In case that trial period is used but fw version is still 1.48 or older, please request trial reset in "Account recovery" section.
Box S/N and "Trial reset" required.

 

RIFF Box v1/v2 updates, 31.05.2018 52 new models

RIFF Box updates, 31.05.2018

• Texet TM3204R

Sony Models boot repair, ISP pinout, Read/Write eMMC:

• Sony G3221
• Sony F3311
• Sony F3112
• Sony E5363
• Sony E2312
• Sony D2203
• Sony C6903
• Sony C6603
• Sony C6602

Samsung Models boot repair, ISP pinout, Read/Write eMMC:

• Samsung I9506
• Samsung I9308
• Samsung I9295
• Samsung I9250
• Samsung I9228
• Samsung I9205
• Samsung I9200
• Samsung I9152
• Samsung I9003
• Samsung Z300H
• Samsung I9001
• Samsung I605
• Samsung I527M
• Samsung G3812
• Samsung G900T
• Samsung G800F ver2 (ISP Pinout, no desolder)
• Samsung G900J
• Samsung G900F
• Samsung G900A
• Samsung G750A
• Samsung G600FY
• Samsung G532M
• Samsung G531H
• Samsung G530T
• Samsung G530P
• Samsung G386W
• Samsung G386T
• Samsung G386F
• Samsung G360T1
• Samsung G360T
• Samsung G360P
• Samsung G360G
• Samsung G316HU
• Samsung E270S
• Samsung C105
• Samsung C101
• Samsung J100VPP
• Samsung J100M

LG Models boot repair, ISP pinout, Read/Write eMMC:

• LG P895
• LG H791
• LG F460S
• LG F460L

To download and install updates, click "Check for Updates" button on "Box Service" tab.
You can also register an account at Turbo-Support download server:


Index of ../../RIFF/RIFF_ROOT/




RIFF Box v1 (Black box) users who havent used 15 days trial can activate it after installing JTAG Manager v1.76 and downloading new data.
In case that trial period is used but fw version is still 1.48 or older, please request trial reset in "Account recovery" section.
Box S/N and "Trial reset" required.

 

RIFF Box v1/v2 updates, 04.06.2018 40 new models

RIFF Box updates, 04.06.2018

• ZTE Blade A610

HTC Models boot repair, ISP pinout, Read/Write eMMC:

• HTC Desire 516
• HTC Desire D728w (2PQ81000)

Samsung Models boot repair, ISP pinout, Read/Write eMMC:

• Samsung T567V
• Samsung T555
• Samsung T535
• Samsung T377P
• Samsung T337T
• Samsung T331
• Samsung T311
• Samsung T310
• Samsung T285YD
• Samsung T285
• Samsung T210
• Samsung SCL23
• Samsung SCL21
• Samsung S7275Y
• Samsung P5200
• Samsung N7105
• Samsung P5210
• Samsung P605
• Samsung P555
• Samsung N9005
• Samsung N7108
• Samsung N900J
• Samsung J7008
• Samsung J3110
• Samsung J710FN
• Samsung J700F
• Samsung J700
• Samsung J321AZ
• Samsung J320P
• Samsung J320F
• Samsung J320AZ
• Samsung J320A
• Samsung J200M
• Samsung J120AZ
• Samsung J120A
• Samsung J111M
• Samsung J106H

Nokia Models boot repair, ISP pinout, Read/Write eMMC:

• Nokia Lumia 610 (RM-835)
• Nokia X2 (RM-1013)

To download and install updates, click "Check for Updates" button on "Box Service" tab.
You can also register an account at Turbo-Support download server:


Index of ../../RIFF/RIFF_ROOT/




RIFF Box v1 (Black box) users who havent used 15 days trial can activate it after installing JTAG Manager v1.78 and downloading new data.
In case that trial period is used but fw version is still 1.48 or older, please request trial reset in "Account recovery" section.
Box S/N and "Trial reset" required.

 

How to get license for RIFF Box v1 JTAG functions for free

I see that some users don't understand how can they obtain license files, to use RIFF Box v1 for JTAG functions.


Since new licensing scheme was introduced we had regular free periods during which users could obtain license and use it without limits until disk format or accidental erasure.

To obtain RIFF Box v1 JTAG license for free, please do this:


1. Register account at Unlock Forum (if already not registered)
2. Join "RIFF Box users" group
3. Go to Support Tickets-> Account Recovery section and click Submit new thread.
4. Provide box SN in message and "Trial Reset" in subject
5. When request is solved, Your thread will be moved to "Solved" subsection.


---
Now You have 15 days free trial, during which You can use full functionality of RIFF Box (both JTAG and eMMC). You should download all DLL files You may need too.

To enable JTAG functions, do this:


1. Start JTAG Manager and download required license files and any other file You need

2. Select "Custom JTAG Target Settings" in upper right drop down menu

3. Switch to JTAG Read/Write TAB and click "Connect & Get ID"

4. Download license


Now, You can use RIFF Box v1 JTAG functions as long as there is no changes in DLL-s or RepairPacks directory.

 

RIFF Box JTAG Manager v1.79, RIFF Box firmware v1.50 released

​

RIFF Box Firmware 1.50
---------------------------
- Fixed RIFFBOX2 Firmware bug: when reading any data from eMMC Chip, the Data CRC16 was not checked, so even data received with errors was considered to be valid.
Now RIFFBOX2 Firmware detects data CRC16 errors, and guarantees data read from eMMC chip is valid.
RIFFBOX1 Firmware is not affected by this bug, but firmware update is required to update to 1.50 version string.
- Fixed timing bug which prevented to change BOOT and RPMB partitions sizes



RIFF Box JTAG Manager 1.79
---------------------------
- Added context menu for the PKG editor - right-click on data write actions allows to perform alignment of the selected ation's data. Normally alignment is performed when adding new write memory action.
This feature allows to align actions in selectable manner, after all write actions were added to the list. This feature is handy when adding full list of write actions via eMMC Plugin,
and when some partitions are required to remain full size, and others are allowed to be cut/aligned
- "eMMC/SD Access" Page -> "Data Length" Field, ComboBox with pre-set lengths, 'File Size': when selected, Data Length field is filled with value equal to selected File's size.
Now File size is automatically aligned to 0x200. JTAG Manager automatically handles non-aligned to 0x0200 files - the remaining data is filled with 00s.
- Added "Load EXT_CSD Register" feature to the eMMC/SD Advanced dialog. It is possible now to load 0x200-byte EXT_CSD register into currently connected eMMC context;
Format supported: plain binary format, 0x200 bytes size of file; most often these are files with extentions '*.bin' and '*.extcsd';
- Added "Load CID & CSD Registers" feature to the eMMC/SD Advanced dialog. It is possible now to load CID and CSD registers into currently connected eMMC context;
Format supported: log text files made with other boxes.



JTAGManager.exe

 

RIFF Box v1/v2 updates - MTK, SPD, Samsung fw files

​

RIFF Box eMMC Plugin 4.11 - Samsung TAR/MD5/PIT , MTK Scatter and Spreadtrum PAC


RIFF Box updates, 26.06.2018 24 new models supported.



RIFF Box JTAG Manager v1.80, RIFF Box firmware v1.50 released





How to get license for RIFF Box v1 JTAG functions for fre

 

RIFF Box v1/v2 updates, 11.07.2018 (21 new models)

​

RIFF Box updates, 11.07.2018:

• Alcatel OT4030D,
• Alcatel OT4034D

• Fly FS517

• LG D331

• Micromax Q372

• Motorola XT1766

• Oppo A37FW
• Oppo CPH-1701
• Oppo R7G
• Oppo T29
• Oppo U705T

• Prestigio PAP5400

• Samsung G150NS

• ZTE Blade A510
• ZTE Blade A520
• ZTE Grand X Quad V987
• ZTE N9560
• ZTE Z667T
• ZTE Z831
• ZTE Z836BL
• ZTE Z982

To download and install updates, click "Check for Updates" button on "Box Service" tab.
You can also register an account at Turbo-Support download server:


Index of ../../RIFF/RIFF_ROOT/




RIFF Box v1 (Black box) users who havent used 15 days trial can activate it after installing JTAG Manager v1.76 and downloading new data.
In case that trial period is used but fw version is still 1.48 or older, please request trial reset in "Account recovery" section.
__________________

 

RIFF Box Qualcomm Sahara support, tips and tricks

Hello dear users !


We took some time to prepare latest addition to JTAG Manager and built from scratch complete Sahara protocol support (both firehose and streaming download). We didn't just embedded freely available tools from Qualcomm (emmcdl and qh_loader), instead, we used own code.


Great work is done on eMMC Plugin too, which now supports USB, ISP and JTAG access. You can select partition on LU (Logical Unit) to parse.
Among other improvements, we added GPT repair/adjust which serves as analogue to patch0.xml used with QFIL.
"Adjust GPT" will automatically update checksums and resize userdata partition to fill whole chip. This is valuable in cases where gpt is from different chip size.


There is more work, but we feel confident that current functions can satisfy most of the needs in servicing and forensics fields.


So, for start, few important tips:


1. Make sure to have Qualcomm drivers installed
2. Most Snapdragon 200 firehose loaders don't have read support, also some will not output storage info (size, SN, brand). We found out that there is one universal firehose looader which supports all this, but uses a bit different protocol. As this is Alcatel loader, we named it "Alcatel Firehose".
It can be used with MSM8x10, MSM8x12, MSM8x26 which otherwise don't have read support. File is attached here.


3. Sahara protocol requires phone to be in EDL mode. To enter EDL mode, exist few methods:
1. Kill phone BootChain or GPT
2. Switch to EDL from ADB or from TWRP: (TWRP tested on some Samsung models)

"Adb reboot EDL"
3. Use EDL cable (Xiaomi phones for example)
4. Activate Diag mode and JTAG Manager will switch it to EDL automatically if phone supports it.
5. Hold Vol+ for 10 seconds (OnePLus models)

6. Short EDL TP-s if exist
7. Short CMD to GND
9. Most reliable method is to remove eMMC




I'll add some videos to this post later, for now please test functionality and ask for clarification if there is anything unclear.

 

RIFF Box v1/v2 updates, 16.10.2018

RIFF Box updates, 16.10.2018:


- RIFF JTAG Manager v1.82
- RIFF eMMC Plugin v5.02
- RIFF resurrection packages:

• Xiaomi Redmi S2 USB
• Xiaomi Redmi 5 Plus USB
• Xiaomi Redmi 4x USB
• Xiaomi Redmi 3S USB
• Samsung S4 i9505 USB (write only)
• Samsung G355H ISP
• Samsung G532G ISP (version update)
• Nokia 8110 4G TA ISP
• LG MS330 ISP
• Lenovo ZUK Z2 USB
• Lenovo S580 USB
• Lenovo A6000 USB
• Huawei Y6 SCL L21 USB
• Huawei Y300-100 USB
• Huawei U9200 ISP

To download new files two methods can be used:
- Automatic method by JTAG Manager -> Box Service -> Check for updates (FTP protocol)

- Manual method via web browser: Index of ../../RIFF/RIFF_ROOT/



In case that for any reason FTP protocol is blocked, please use manual method and download files via web browser.