Oppo Reno 4 Z 5G CHP2065 LocalSLA fail - Page 3 - GSM-Forum

rebainoor · 06-18-2021, 16:17

What need to do already explain in this post

Quote:

Originally Posted by JayDi

Also would be great to do next :
Make Identify with hold SHIFT key ( just press and hold Left Shift key on keyboard, while hold - press Identify button , then connect device) , log need.
And security backup, made by software ( \CM2MT2\Backup\MT6873__AF9935D55FEFAE72505C29747F3 2C521\ )

equinoks · 06-18-2021, 17:28

Quote:

Originally Posted by rebainoor

What need to do already explain in this post

Here is log

Code:

1. Make sure device is powered off. Power off, if need. Wait 20 seconds after
2. Insert USB cable in phone
Waiting for device connection ...

PTFN : MediaTek USB Port_V1632 (COM66)
MODE : BOOTROM
PORT : 66
Waiting BOOT ack ...
BROM : Skip ACK verify
BROM : Init BROM
BROM init passed!
     CHIP : MT6873 , SBID : 0x8A00 , HWVR : 0xCA00 , SWVR : 0x0000
     CODE : Margaux
     TYPE : MODERN [RAPHAEL]
BROM : MEID : 9C67FD9C83215EA1FAE0AEEC82E10CA5
BROM : SecLevel : 0x000000E5
BROM : SecMode  : SBC+SDA+EXT
BROM : BROM|BL  : 0x05|0xFE
BROM : BOOTROM
MODE : 0_base : BASE_v1712 | Manual : Enabled
BROM : SOCID : 81F8EE53CF43ABB78E739DEFB89CBE19A8553823B29164FD9096714421883CB4
BROM : SLA : Local Auth 
BROM : SLA : Auth Started!
BROM : SLA : Auth Passed!
BROM : SLA : 0x0000001F
AGENT : Look for suitable BootChain in DA ... 
AGENT : MTK_AllInOne_DA.bin
AGENT : CHANGE : v2112
AGENT : Found MT6873
AGENT : MTK_DOWNLOAD_AGENT
     BROM : Sending 1st DA ...
BROM : DA sent
BROM :Transfer control to DA ... 
     DA : AGENT started!
DA : SYNC
     DA : MODE : BROM
DA : EXT_RAM NOT initialized!
     EMI : DEV : MT6752
     EMI : SRC : preloader_k6873v1_64.bin
     EMI : CNT : 0011
 EMI : [00] : eUFS : LP_DDR4X : DEV : H9HQ53AECMMDAR : RAM : [ 6,00 GB ]
 EMI : [01] : eUFS : LP_DDR4X : DEV : KM2H7001CM-B518 : RAM : [ 6,00 GB ]
 EMI : [02] : eUFS : LP_DDR4X : DEV : MT064GASAO2U21 : RAM : [ 6,00 GB ]
 EMI : [03] : eUFS : LP_DDR4X : DEV : KM2V8001CM-B70 : RAM : [ 6,00 GB ]
 EMI : [04] : eUFS : LP_DDR4X : DEV : MT128GASAO4U21 : RAM : [ 6,00 GB ]
 EMI : [05] : eUFS : LP_DDR4X : DEV : H9HQ16AECMMDAR : RAM : [ 6,00 GB ]
 EMI : [06] : eUFS : LP_DDR4X : DEV : H9HQ16AFAMMDAR : RAM : [ 8,00 GB ]
 EMI : [07] : eUFS : LP_DDR4X : DEV : KM8V8001JM-B81 : RAM : [ 8,00 GB ]
 EMI : [08] : eUFS : LP_DDR4X : DEV : H9HQ15AFAMADAR : RAM : [ 8,00 GB ]
 EMI : [09] : eUFS : LP_DDR4X : DEV : MT128GASAO4U21 : RAM : [ 8,00 GB ]
 EMI : [0A] : eUFS : LP_DDR4X : DEV : KM8B8001JM-BC0 : RAM : [ 8,00 GB ]
 EMI : [0B] : eUFS : LP_DDR4X : DEV : H9HQ22AFAMMDAR : RAM : [ 8,00 GB ]
 EMI : [0C] : eUFS : LP_DDR4X : DEV : H9HQ21AFAMZDAR : RAM : [ 8,00 GB ]
 EMI : [0D] : eUFS : LP_DDR4X : DEV : MT256GASAO8U21 : RAM : [ 8,00 GB ]
 EMI : [0E] : eUFS : LP_DDR4X : DEV : KM8F8001MM-B813 : RAM : [ 12,00 GB ]
 EMI : [0F] : eUFS : LP_DDR4X : DEV : H9HQ15AECMADAR : RAM : [ 6,00 GB ]
 EMI : [10] : eUFS : LP_DDR4X : DEV : KM8F8001JM-B81 : RAM : [ 8,00 GB ]
     EMI : Init EMI from PRELOADER
     EMI : EXT_RAM CFG Passed!
DA : BOOT to 2nd DA ...
DA : 2ND stage confirmed!
DA : SYNC with DA passed!
DA : Receiving HW info

        SRAM: 0x00070000 [ 448,00 KB ]
        DRAM: 0x100000000 [ 4,00 GB ]

        UFS: CE014B4D3856383030314A4D2D423831
        UFS: 
             VEN  : 0x01CE
             VID  : KM8V8001JM-B81
             IFW  : 1900
             LU0  : 0x00400000 [ 4,00 MB ]
             LU1  : 0x00400000 [ 4,00 MB ]
             LU2  : 0x1DCB000000 [ 119,17 GB ]
             FSN  : 48c43a246e1e
             REG  : 0x101010000

        CHIP : MT6873 , SBID : 0x8A00 , HWVR : 0xCA00 , SWVR : 0x0001 , EVOL : 0x0000

        RNID : 3AA0038069C5A2F17DE23FE3503CABD

DA : USB : HIGH-SPEED

Boot done!

Device PMT Info : 
PART : 0x0000000000000000 : 0x0000000000400000 : preloader
PART : 0x0000000000000000 : 0x0000000000008000 : pgpt
PART : 0x0000000000008000 : 0x0000000004000000 : recovery
PART : 0x0000000004008000 : 0x0000000000080000 : misc
PART : 0x0000000004088000 : 0x0000000000080000 : para
PART : 0x0000000004108000 : 0x0000000000800000 : opporeserve1
PART : 0x0000000004908000 : 0x0000000008000000 : opporeserve2
PART : 0x000000000C908000 : 0x0000000004000000 : opporeserve3
PART : 0x0000000010908000 : 0x0000000000100000 : oppo_custom
PART : 0x0000000010A08000 : 0x0000000001400000 : expdb
PART : 0x0000000011E08000 : 0x0000000000100000 : frp
PART : 0x0000000011F08000 : 0x0000000000800000 : vbmeta
PART : 0x0000000012708000 : 0x0000000000800000 : vbmeta_system
PART : 0x0000000012F08000 : 0x0000000000800000 : vbmeta_vendor
PART : 0x0000000013708000 : 0x0000000002000000 : nvcfg
PART : 0x0000000015708000 : 0x0000000004000000 : nvdata
PART : 0x0000000019708000 : 0x000000000169A000 : md_udc
PART : 0x000000001ADA2000 : 0x0000000002000000 : metadata
PART : 0x000000001CDA2000 : 0x000000000325E000 : persist
PART : 0x0000000020000000 : 0x0000000000800000 : protect1
PART : 0x0000000020800000 : 0x0000000000800000 : protect2
PART : 0x0000000021000000 : 0x0000000000800000 : seccfg
PART : 0x0000000021800000 : 0x0000000003000000 : otp
PART : 0x0000000024800000 : 0x0000000000200000 : sec1
PART : 0x0000000024A00000 : 0x0000000000300000 : proinfo
PART : 0x0000000024D00000 : 0x0000000004000000 : nvram
PART : 0x0000000028D00000 : 0x0000000000800000 : main_cdt
PART : 0x0000000029500000 : 0x0000000030000000 : special_preload
PART : 0x0000000059500000 : 0x0000000010000000 : my_custom
PART : 0x0000000069500000 : 0x0000000002000000 : opporeserve5
PART : 0x000000006B500000 : 0x0000000004000000 : opporeserve6
PART : 0x000000006F500000 : 0x0000000000800000 : ocdt
PART : 0x000000006FD00000 : 0x0000000000800000 : cdt_engineering
PART : 0x0000000070500000 : 0x000000000C800000 : md1img
PART : 0x000000007CD00000 : 0x0000000001A00000 : boot_para
PART : 0x000000007E700000 : 0x0000000000100000 : spmfw
PART : 0x000000007E800000 : 0x0000000000800000 : audio_dsp
PART : 0x000000007F000000 : 0x0000000000100000 : pi_img
PART : 0x000000007F100000 : 0x0000000000400000 : dpm_1
PART : 0x000000007F500000 : 0x0000000000400000 : dpm_2
PART : 0x000000007F900000 : 0x0000000000600000 : scp1
PART : 0x000000007FF00000 : 0x0000000000600000 : scp2
PART : 0x0000000080500000 : 0x0000000000100000 : sspm_1
PART : 0x0000000080600000 : 0x0000000000100000 : sspm_2
PART : 0x0000000080700000 : 0x0000000000100000 : mcupm_1
PART : 0x0000000080800000 : 0x0000000000100000 : mcupm_2
PART : 0x0000000080900000 : 0x0000000000F00000 : cam_vpu1
PART : 0x0000000081800000 : 0x0000000000F00000 : cam_vpu2
PART : 0x0000000082700000 : 0x0000000000F00000 : cam_vpu3
PART : 0x0000000083600000 : 0x0000000002000000 : gz1
PART : 0x0000000085600000 : 0x0000000002000000 : gz2
PART : 0x0000000087600000 : 0x0000000000500000 : lk
PART : 0x0000000087B00000 : 0x0000000000500000 : lk2
PART : 0x0000000088000000 : 0x0000000002000000 : boot
PART : 0x000000008A000000 : 0x0000000001000000 : logo
PART : 0x000000008B000000 : 0x0000000000800000 : dtbo
PART : 0x000000008B800000 : 0x0000000000500000 : tee1
PART : 0x000000008BD00000 : 0x0000000000B00000 : tee2
PART : 0x000000008C800000 : 0x0000000200000000 : super
PART : 0x000000028C800000 : 0x000000001C000000 : cache
PART : 0x00000002A8800000 : 0x0000001B217F8000 : userdata
PART : 0x0000001DC9FF8000 : 0x0000000001000000 : flashinfo
PART : 0x0000001DCAFF8000 : 0x0000000000008000 : sgpt

Product Board  : oppo6873
Board Platform : mt6873
Product Brand  : alps
Product Device : oppo6873
Product Manfct : alps
Product Model  : oppo6873
Product Name   : vnd_oppo6873

NVRAM check : Failed! NVRAM damaged!
NVRAM : SEC ENCRYPT [ IMEI ENCRYPTED ]

Backup sensetive data [ 14 ]
Backup path : Backup\MT6873__3AA0038069C5A2F17DE23FE30503CABD\
Backup done!


STORAGE : LifeStatus : UFS : OK!

Done!
Elapsed: 00:00:38

Here is the backup

rebainoor · 06-18-2021, 18:41

can you try to erase frp partition in memory tool
and post log operation

JayDi · 06-19-2021, 00:05

frp erased by default.
Not see anything strange in logs/backups.
Except try (read first!) persist, then erase persist + frp

equinoks · 06-21-2021, 11:04

Quote:

Originally Posted by JayDi

frp erased by default.
Not see anything strange in logs/backups.
Except try (read first!) persist, then erase persist + frp

I erased both persist and frp, but still FRP locked

Code:

Operation : Erase Memory

Erase selected partitions [2]
[0] Erase partition : FRP
Erase partition Ok!
[1] Erase partition : PERSIST
Erase partition Ok!

any other thing to try ?

equinoks · 06-22-2021, 13:08

I have same unlocked phone in hands, if I read full flash and write it to locked phone, it will be unlocked ?

JayDi · 06-22-2021, 14:01

Nope, don't do that.
Read from device with FRP ( via MemoryTool ) all partitions until boot_para ( include it, so from pgpt to boot_para must be read ) pack and send me for verify.

equinoks · 06-22-2021, 14:44

Quote:

Originally Posted by JayDi

Nope, don't do that.
Read from device with FRP ( via MemoryTool ) all partitions until boot_para ( include it, so from pgpt to boot_para must be read ) pack and send me for verify.

Here it the backup bro...

thx

JayDi · 06-22-2021, 16:43

Quote:

Originally Posted by equinoks

Here it the backup bro...

thx

Checked and found it uses default FRP partition. Can you try following :

Init MemoryTool

Wipe FRP

Make "Update partitions state" ( in same right-click menu )
ansd check result in FRP info - it must be EMPTY. ( if not - let me know )

Run device once. Check.

If still FRP there - make read FRP from memtool again and send me.

equinoks · 06-23-2021, 10:42

after making update partition FRP became empty after test phone is unlocked !
thx bro

JayDi · 06-23-2021, 13:42

Quote:

Originally Posted by equinoks

after making update partition FRP became empty after test phone is unlocked !
thx bro

Strange case. Thanks for info, will check it a bit more.

***MyGSM World*** · 06-29-2021, 15:48

CPH2201 (Oppo Reno5 Pro 5G)

Operation : Identify [ v2.25 ]

Code:

Mode : FLASH

1. Make sure device is powered off. Power off, if need. Wait 20 seconds after
2. Insert USB cable in phone
Waiting for device connection ...

PTFN : MediaTek USB Port_V1632 (COM4)
MODE : BOOTROM
PORT : 4
Waiting BOOT ack ...
BROM : Skip ACK verify
BROM : Init BROM
BROM init passed!
     CHIP : MT6885 , SBID : 0x8A00 , HWVR : 0xCB00 , SWVR : 0x0001
     CODE : Petrus
     TYPE : MODERN [RAPHAEL]
BROM : MEID : 32F6ECA9935785AC28DBEABC75E79E1A
BROM : SecLevel : 0x000000E5
BROM : SecMode  : SBC+SDA+EXT
BROM : BROM|BL  : 0x05|0xFE
BROM : BOOTROM
MODE : 0_base : BASE_v2112 | Manual : Disabled
BROM : SOCID : B05E0A54B0DCB1314D77AFB2B11B2E2DCEC80716A2AC03F667266886D1091FE6
BROM : SLA : Local Auth 

BROM  : Selected Auth/Cert not accepted by device!
>>> Check previous message for more info!

Reconnect Power/Cable!

[Rod] · 08-21-2021, 14:20

Hi

cph2065 error

Mode : SMART RESET

1. Make sure device is powered off. Power off, if need. Wait 20 seconds after
2. Insert USB cable in phone
Waiting for device connection ...

PTFN : MediaTek USB Port_V1632 (COM50)
MODE : BOOTROM
PORT : 50
Waiting BOOT ack ...
BROM : Skip ACK verify
BROM : Init BROM
BROM init passed!
CHIP : MT6873 , SBID : 0x8A00 , HWVR : 0xCA00 , SWVR : 0x0000
CODE : Margaux
TYPE : MODERN [RAPHAEL]
BROM : MEID : F9996B0457ACC5CB3A2473BF54034EEE
BROM : SecLevel : 0x000000E5
BROM : SecMode : SBC+SDA+EXT
BROM : BROM|BL : 0x05|0xFE
BROM : BOOTROM
BROM : SOCID : B0BB58F627CCC66BFAE281AE97D37BBE2638112E6499D9E591 D5E89C25F4DD70
BROM : SLA : Local Auth
BROM : SLA : Auth Started!
BROM : SLA : Auth Passed!
BROM : SLA : 0x0000001F
AGENT : 0_base : BASE_v2112 | Manual : Disabled
AGENT : Look for suitable BootChain in DA ...
AGENT : MTK_AllInOne_DA.bin
AGENT : Found MT6873
AGENT : MTK_DOWNLOAD_AGENT
BROM : Sending 1st DA ...
BROM : DA sent
BROM :Transfer control to DA ...
DA : AGENT started!
DA : SYNC
DA : MODE : BROM
DA : EXT_RAM NOT initialized!
EMI : DEV : FireFly
EMI : SRC : preloader_oppo6873.bin
EMI : CNT : 000B
EMI : Init EMI from INTERNAL DB

DA : SETUP EMI PARAMS FAILED!
ERROR : ABORT

Error : Fail to init protocol!
>>> Internal EMI : Select other EMI number! External Preloader - make sure it correct for connected device!

Reconnect Power/Cable!

any help

kamal_singla · 08-22-2021, 01:41

Quote:

Originally Posted by [Rod]

Hi

cph2065 error

Mode : SMART RESET

1. Make sure device is powered off. Power off, if need. Wait 20 seconds after
2. Insert USB cable in phone
Waiting for device connection ...

PTFN : MediaTek USB Port_V1632 (COM50)
MODE : BOOTROM
PORT : 50
Waiting BOOT ack ...
BROM : Skip ACK verify
BROM : Init BROM
BROM init passed!
CHIP : MT6873 , SBID : 0x8A00 , HWVR : 0xCA00 , SWVR : 0x0000
CODE : Margaux
TYPE : MODERN [RAPHAEL]
BROM : MEID : F9996B0457ACC5CB3A2473BF54034EEE
BROM : SecLevel : 0x000000E5
BROM : SecMode : SBC+SDA+EXT
BROM : BROM|BL : 0x05|0xFE
BROM : BOOTROM
BROM : SOCID : B0BB58F627CCC66BFAE281AE97D37BBE2638112E6499D9E591 D5E89C25F4DD70
BROM : SLA : Local Auth
BROM : SLA : Auth Started!
BROM : SLA : Auth Passed!
BROM : SLA : 0x0000001F
AGENT : 0_base : BASE_v2112 | Manual : Disabled
AGENT : Look for suitable BootChain in DA ...
AGENT : MTK_AllInOne_DA.bin
AGENT : Found MT6873
AGENT : MTK_DOWNLOAD_AGENT
BROM : Sending 1st DA ...
BROM : DA sent
BROM :Transfer control to DA ...
DA : AGENT started!
DA : SYNC
DA : MODE : BROM
DA : EXT_RAM NOT initialized!
EMI : DEV : FireFly
EMI : SRC : preloader_oppo6873.bin
EMI : CNT : 000B
EMI : Init EMI from INTERNAL DB

DA : SETUP EMI PARAMS FAILED!
ERROR : ABORT

Error : Fail to init protocol!
>>> Internal EMI : Select other EMI number! External Preloader - make sure it correct for connected device!

Reconnect Power/Cable!

any help

Uncheck firefly repeat or select preloader manual

06-18-2021, 18:41	#33 (permalink)
rebainoor No Life Poster Join Date: Feb 2006 Location: In my LAB Posts: 3,163 Member: 231728 Status: Offline Thanks Meter: 2,105	can you try to erase frp partition in memory tool and post log operation

06-19-2021, 00:05	#34 (permalink)
JayDi No Life Poster Join Date: Mar 2007 Location: Where you live Posts: 18,542 Member: 462970 Status: Offline Thanks Meter: 20,352	frp erased by default. Not see anything strange in logs/backups. Except try (read first!) persist, then erase persist + frp

06-22-2021, 13:08	#36 (permalink)
equinoks No Life Poster Join Date: Feb 2003 Location: In the dark side ;) Age: 44 Posts: 2,316 Member: 21508 Status: Offline Thanks Meter: 186	I have same unlocked phone in hands, if I read full flash and write it to locked phone, it will be unlocked ?

06-22-2021, 14:01	#37 (permalink)
JayDi No Life Poster Join Date: Mar 2007 Location: Where you live Posts: 18,542 Member: 462970 Status: Offline Thanks Meter: 20,352	Nope, don't do that. Read from device with FRP ( via MemoryTool ) all partitions until boot_para ( include it, so from pgpt to boot_para must be read ) pack and send me for verify.

06-23-2021, 10:42	#40 (permalink)
equinoks No Life Poster Join Date: Feb 2003 Location: In the dark side ;) Age: 44 Posts: 2,316 Member: 21508 Status: Offline Thanks Meter: 186	after making update partition FRP became empty after test phone is unlocked ! thx bro

08-21-2021, 14:20	#43 (permalink)
[Rod] No Life Poster Join Date: Jun 2003 Location: somewhere Age: 40 Posts: 2,318 Member: 31028 Status: Offline Thanks Meter: 56	Hi cph2065 error Mode : SMART RESET 1. Make sure device is powered off. Power off, if need. Wait 20 seconds after 2. Insert USB cable in phone Waiting for device connection ... PTFN : MediaTek USB Port_V1632 (COM50) MODE : BOOTROM PORT : 50 Waiting BOOT ack ... BROM : Skip ACK verify BROM : Init BROM BROM init passed! CHIP : MT6873 , SBID : 0x8A00 , HWVR : 0xCA00 , SWVR : 0x0000 CODE : Margaux TYPE : MODERN [RAPHAEL] BROM : MEID : F9996B0457ACC5CB3A2473BF54034EEE BROM : SecLevel : 0x000000E5 BROM : SecMode : SBC+SDA+EXT BROM : BROM\|BL : 0x05\|0xFE BROM : BOOTROM BROM : SOCID : B0BB58F627CCC66BFAE281AE97D37BBE2638112E6499D9E591 D5E89C25F4DD70 BROM : SLA : Local Auth BROM : SLA : Auth Started! BROM : SLA : Auth Passed! BROM : SLA : 0x0000001F AGENT : 0_base : BASE_v2112 \| Manual : Disabled AGENT : Look for suitable BootChain in DA ... AGENT : MTK_AllInOne_DA.bin AGENT : Found MT6873 AGENT : MTK_DOWNLOAD_AGENT BROM : Sending 1st DA ... BROM : DA sent BROM :Transfer control to DA ... DA : AGENT started! DA : SYNC DA : MODE : BROM DA : EXT_RAM NOT initialized! EMI : DEV : FireFly EMI : SRC : preloader_oppo6873.bin EMI : CNT : 000B EMI : Init EMI from INTERNAL DB DA : SETUP EMI PARAMS FAILED! ERROR : ABORT Error : Fail to init protocol! >>> Internal EMI : Select other EMI number! External Preloader - make sure it correct for connected device! Reconnect Power/Cable! any help