N73 لا يمكن فك شفرته هل من حل ؟

[خالد النجار]

علم وجارى الرفع للبيانات

[خالد النجار]

Phone have failed SECURITY Test, that means Superdongle Area is DAMAGED!
To repair it, simply slick "SX4 Authorization / SD Repair" button.
After SX4/SD Repair, don't forget to write PM file with fields 1,309 (if SW don't do this automatically)

Additionaly, Checking HWC/CCC Certs...
Booting CMT...
APE_SYSTEM_ASIC_ID: 17100708
APE_ASIC_MODE_ID: 00
APE_PUBLIC_ID: 6353717922C931571E3E2078544425925FE3C1AF
APE_ROOT_KEY_HASH: 49A97E826B93BA20B7ED0B082475C00500000000
APE_BOOT_ROM_CRC: 1DFD6613
APE_SECURE_ROM_CRC: 2C872FD4
CMT_SYSTEM_ASIC_ID: 000000010000022600010006010C192101003000
CMT_EM_ASIC_ID: 00000295
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 0B70000C2CE67C56B743EC85D02C1BE8E921C0C4
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_BOOT_ROM_CRC: 273F6D55
CMT_SECURE_ROM_CRC: DFAAF68F
CMT Ready!
Searching for BootCode: DualLine 32Bit
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.10.6.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using OLD BB5 FLASHING PROTOCOL
FlashChip[0,CMT]: 0x00EC22E800006921, Samsung, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
Searching for BootCode: DualLine 32Bit
FlashChip 0x00EC22E8 (Samsung), Size: 16MBytes, VPP: 9V
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.10.6.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 5E8D0D504A0902E261268C14FCD8A2C9093523BC
Searching for BootCode: DualLine 32Bit
helen3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.35.0, Algo: BB5
FlashChip[0,APE]: 0x00EC00A100800015, Samsung, NAND
FlashContent[0,APE]: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF, NAND
Searching for BootCode: DualLine 32Bit
FlashChip 0x00EC00A1 (Samsung), Size: 128MBytes, VPP: 21V
h3_sam_nand_xsr.fg, Type: Algorithm, Rev: 0.1.49.0, Algo: OMAP1710 UNISTORE-II-1.2.1 ALG
Box VPP disabled
Internal APE Phone VPP Enabled
PAPUBKEYS Hash for APE: 5E8D0D504A0902E261268C14FCD8A2C9093523BC
Flashbus Write baud set to 5.0Mbits
!!!!! HWC IS EMPTY, ANOTHER REASON OF SECURITY TEST FAILED !!!!!
!!!!! CCC IS EMPTY, ANOTHER REASON OF SECURITY TEST FAILED !!!!!
Restarting MCU...
-- SECURITY PROBLEM --
Step 3 : Analyzing Security Block
"0B70000C2CE67C56B743EC85D02C1BE8E921C0C4.C000440F" Exists, That is good...
Checking SUPERDONGLE...
SUPERDONGLE FOUND AND CHECKSUM OK! PASSED!
Checking SIMLOCK...
Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)
Checking MCU&DSP TIMESTAMPS...
MCU&DSP TIMESTAMPS FOUND AND CHECKSUM OK! PASSED!
Checking CMLA KEYS...
Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)
Checking ECC KEYS...
Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)
Checking DIV KEYS...
DIV KEYS FOUND AND CHECKSUM OK! PASSED!
Analyze finished!
Warning: At least one Certificate Test failed, but no Local Generic RPL File found, Put it in SX4 folder.

[gsm.magic]

أخي اول شيء هل لديك باكوب كامل؟
ادا كان لا فخزن الباكوب اخي العزيز

بعدها اتبع الخطوات التالية
1- علم على plain rpl ثم قم بكتابة الملف الموجود بالمرفقات ودلك بالضغط على write rpl
2-اضغط على sx4 authorize/repair sd
3- علم على rpl calculation ثم اضغط على direct unlock

اخي اعيدها مرة اخرى قبل اي عملية قم بتخزين باكوب
واعلمنا بالنتيجة اخي

[خالد النجار]

علم وجارى المحاولة وانا اخذ باك اب على المكس

[gsm.magic]

علم وجارى المحاولة وانا اخذ باك اب على المكس

اخي انت كل حاجة عندك ام اكس كي هي خاصية سحب الاربيال على السيكلون عندك عطلانة

حبيبي اقل حاجة تعملها اسحب certaficats على السيكلون

[خالد النجار]

عملت حضرتك اللى قلت عليه نفس المشكلة الا فى الاخر علمت على rpl calculation و direct unlock اعطتنى هذه الرسالة
Received RPL from Box OK!
Writing Simlock...
BB5 Unlock Failed -> Simlock NOT ACCEPTED ! Maybe is SL3 phone?
وبعد كده علمت على pm 308 عملت انلوك كمات و للاسف نفس المشكلة

[gsm.magic]

اخي لو امكن ترفع رسالة check للتاكد ان cmt_root
مدعوم ام لا
وما هي حالة الجهاز الأن ؟؟

[خالد النجار]

هذه البيانات عند read all certs
nternal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 5E8D0D504A0902E261268C14FCD8A2C9093523BC
Searching for BootCode: DualLine 32Bit
helen3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.35.0, Algo: BB5
FlashChip[0,APE]: 0x00EC00A100800015, Samsung, NAND
FlashContent[0,APE]: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF, NAND
Searching for BootCode: DualLine 32Bit
FlashChip 0x00EC00A1 (Samsung), Size: 128MBytes, VPP: 21V
h3_sam_nand_xsr.fg, Type: Algorithm, Rev: 0.1.49.0, Algo: OMAP1710 UNISTORE-II-1.2.1 ALG
Box VPP disabled
Internal APE Phone VPP Enabled
PAPUBKEYS Hash for APE: 5E8D0D504A0902E261268C14FCD8A2C9093523BC
Flashbus Write baud set to 5.0Mbits
CMT NPC Ok
CMT HWC Not Found
CMT CCC Not Found
CMT R&D Ok
CMT VARIANT Ok
CMT PAPUBKEYS Ok
CMT KEYS Ok
APE NPC Not Found
APE HWC Not Found
APE CCC Not Found
APE R&D Ok
APE VARIANT Not Found
APE PAPUBKEYS Ok
APE KEYS Ok
Restarting MCU...
Read all certificates finished

[خالد النجار]

اسف شكلك متضايق منى لكن اصلى اتعودت على المكس شوية عن السيكلون

[خالد النجار]

وهذه رسالة التشيك
Booting CMT...
APE_SYSTEM_ASIC_ID: 17100708
APE_ASIC_MODE_ID: 00
APE_PUBLIC_ID: 6353717922C931571E3E2078544425925FE3C1AF
APE_ROOT_KEY_HASH: 49A97E826B93BA20B7ED0B082475C00500000000
APE_BOOT_ROM_CRC: 1DFD6613
APE_SECURE_ROM_CRC: 2C872FD4
CMT_SYSTEM_ASIC_ID: 000000010000022600010006010C192101003000
CMT_EM_ASIC_ID: 00000295
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 0B70000C2CE67C56B743EC85D02C1BE8E921C0C4
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_BOOT_ROM_CRC: 273F6D55
CMT_SECURE_ROM_CRC: DFAAF68F
CMT Ready!
Searching for BootCode: DualLine 32Bit (Forcing OLD Protocol)
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.10.6.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using OLD BB5 FLASHING PROTOCOL
FlashChip[0,CMT]: 0x00EC22E800006921, Samsung, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
Searching for BootCode: DualLine 32Bit (Forcing OLD Protocol)
FlashChip 0x00EC22E8 (Samsung), Size: 16MBytes, VPP: 9V
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.10.6.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 5E8D0D504A0902E261268C14FCD8A2C9093523BC
APE Boot skipped on user request
Flashbus Write baud set to 5.0Mbits
Restarting MCU...