Help dumping the brom for Samsung A12 SM-A125F

[pewterbrass]

I can get the A12 into brom mode and bypass all security via payload, but I haven't managed to get dumpbrom working. Does anyone have any ideas?

I can peek the memory at 0x100000, but the payload has overwritten the SRAM copy of the brom.