Trying to mount emmc mtk based in new plugin ... no luck

[mtk6572s4clone]

Method of connection: isp
emmc model: tyc0fh121597ra
Size: 4GB
Smartphone model: Samsung i9500 Chinese clone
SoC: MTK6572a

Only connect on 40hz Clock


------------------


Open serial port...OK
Connecting to the RIFF Box...OK
Firmware Version: 1.49 (RIFFBOX1), JTAG Manager Version: 1.76

Connecting to the SD/eMMC Card...OK
Set I/O Voltage reads as 2.70V, SD_CLK Frequency is 40 KHz

Memory Type .......................... eMMC
Manufacturer ID ...................... 0x11
OEM/Application ID ................... 0x00
Product Name ......................... "004G90"
Package .............................. BGA
User Area Partition Size ............. 0x0000EC000000 Bytes (3.69 GB)
Boot Partition Size .................. 0x000000200000 Bytes (2.00 MB)
RPMB Partition Size .................. 0x000000080000 Bytes (512.00 KB)
OCR Register ......................... 0xC0FF8080 (Dual Voltage, High Capacity)
Write Protection Bits ................ NONE
ExtCSD Register Fields ............... [177] = 0x00, [179] = 0x48, [162] = 0x01
Boot Configuration ................... Boot from Boot Partition 1 (Bus Width = 1Bit)
Chip Revision ........................ 1.0
Multimedia Card Revision ............. 1.6 (eMMC v4.5, v4.51)
Serial Number ........................ 0xDBC7376B
Memory Manufacturing Date ............ July, 2013


-------------------------------

Read boot1

Open serial port...OK
Connecting to the RIFF Box...OK
Firmware Version: 1.49 (RIFFBOX1), JTAG Manager Version: 1.76

Connecting to the SD/eMMC Card...OK
Set I/O Voltage reads as 2.70V, SD_CLK Frequency is 40 KHz

Detected eMMC Chip, ID: 0x11/0x00 (004G90), User Area Partition = 0x0000EC000000 Bytes (3.69 GB)

Reading "Boot Area Partition 1" address space from 0x000000000000 to 0x0000001FFFFF
Completed in 00:07:07.968 (Average Transfer Rate: 4.79 kB/s)


Please wait, saving data...OK
//boot1.bin
Completed in 00:00:00.016 (Average Transfer Rate: 125.00 MB/s)


--------------------------------------


plugin 4.04 and 4.06 same error
And selecting "Boot Area Partition 1" and "User Area Partition" same error.

Open serial port...OK
Connecting to the RIFF Box...OK
Firmware Version: 1.49 (RIFFBOX1), JTAG Manager Version: 1.76

Connecting to the SD/eMMC Card...OK
Set I/O Voltage reads as 2.70V, SD_CLK Frequency is 40 KHz

Detected eMMC Chip, ID: 0x11/0x00 (004G90), User Area Partition = 0x0000EC000000 Bytes (3.69 GB)

Reading "Boot Area Partition 1" address space from 0x000000000000 to 0x000000003FFF
Completed in 00:00:03.360 (Average Transfer Rate: 4.76 kB/s)
ERROR: Expected signature word 0x55AA, but found different. Cannot continue.
Analisis is stopped. So far were found: 0 partitions.


Reading "Boot Area Partition 1" address space from 0x000000004000 to 0x000000007FFF
Completed in 00:00:03.360 (Average Transfer Rate: 4.76 kB/s)

Reading "Boot Area Partition 1" address space from 0x000000080000 to 0x000000083FFF
Completed in 00:00:03.359 (Average Transfer Rate: 4.76 kB/s)

ERROR: Cannot find valid PIT/EFI table.


-------------------


-Attached boot 1
-Link ROM readed with mtk droid tools:
LINK
-Link Possible scatter file
LINK

Team, If you need something else to analyze please ask

Thanks!

[Legija]

MBR/EBR is MTK models is floating and not at 0x0 address, so to get it working with all models large area of flash content must be searched.

We will check this dump and add it's address range to eMMC plugin.
Scatter file does contain addresses of partitions, but these addresses aren't physical addresses in flash chip, rather mapped to some internal memory range in MTK mcu.

[Legija]

Droid dump is useless as it doesn't contains raw bin file.
Can You try reading at least 256mb from user area partition, that should contain mbr and ebr, probably.

[mtk6572s4clone]

Droid dump is useless as it doesn't contains raw bin file.
Can You try reading at least 256mb from user area partition, that should contain mbr and ebr, probably.

(I could connect via RJ45 port and all clock speed available modifying the voltages).

LINK dumped with other box, with Riff 1 always stopped or crash at the address 1060000.

[Legija]

Ok, thank You. We will check it and add support for this layout.

[mtk6572s4clone]

Ok, thank You. We will check it and add support for this layout.

Thanks to you! If you need a complete dump, you let me know to upload it.

[Legija]

Ideal would be scatter file + full dump, so we can add names to partitions.

[mtk6572s4clone]

The full dump is already being uploaded, will be sent by PM.

[Legija]

Ok, so current (v4.07) eMMC plugin supports everything now - there are 4 partitions, 2 ext4, one fat32 and one is mtk specific.
File system explorer was able to parse and extract everything.

Thank You.