yashsingh1/xdaforums huggingface dataset:
[Defy General] hackergnome:
Posts by unitary good at 2012-1-13 21:54 Edit Home network that did not last, say goodbye to the forum, but who knows, even the signal is not home, so silly, my bl is 6, and did not move, who knows, brush teeth into bl5 package is successful, and brush teeth into bl4 package also successful, and now with the Hong Kong version, for the 00.59.01 baseband version, and finally a signal at home, but my machine is the situation? ? bl unlocked? ? ? I tried, the bottom of any package through the brush bl, the machine did what I seek to answer ah ah, in the rsd brush machine interface displays awareness bl not unlock, but it allows any package through the end of the brush · · · · give answers to a large silent under it, ready to be the official package evaluation, 2.2 2.3 comparison, because my brush through Well, hey, including Hong Kong Bank, uk national lines, etc., looking forward to it the latest progress, formalized bl unlock the success of my brush into the machine 29, Brush v big package provided by (v large package is to force ah, combining the characteristics of the country and the parallel lines, I like, if you can do not want to brush the other, the clear distinction between parallel and licensed, the battery icon shows different, I love parallel, and this is what I would like to introduce after the end of package features a variety of one v big thank prove my innocence, do not believe that people believe it, ha ha ha, Brush Motorola boot screen shows whether the consent agreement, the following information on the mobile phone scene shot just proposed by the Friends backup pds, the last defeat, this time successful, upload pds backup, in order to brush into the oil are convenient, Just brush the cm7.2, with its advanced backup equipment, and more can all be theoretically recovery5.0 brush into big God who study it, as uploaded to the xda, please altar faithful refueling, home unable to claw machine ah Attachment: You need to log in before you can download or view attachments. No account? Sign up now

huh???

wtf!!
[Defy General] sonyc2011:
Epsylon3 free our bootloader!!!
[Defy General] sykoism:
I got a special one from the chinese forum.

<6>[ 766.089996] SecGetSWRV = 1f 00 00 00 00 00 00 00 00 00 00 00 00 01 00 0

0 00 e0 00 00

<6>[ 766.095458] SecGetModelId = 02 00 00 00

<6>[ 766.097534] SecGetProcID = 19 30 03 02 c5 a9 3a 0a 00 00 d8 ff 01 00 1e 3

8

<6>[ 766.102355] SecProcessorType = 44

<6>[ 766.102874] Inserting sec module

It is a ME525+ model with HKTW 2.3.4 sbf and MIUI rom
[Defy General] adi4motion:
Epsylon3 asked for them...i'm just doing everything i can to help
[Defy General] edition-:
[35236.499176] SecGetSWRV = 0f 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 e0 00 00

[35236.504882] SecGetModelId = 02 00 00 00

[35236.506591] SecGetProcID = 1b d0 02 08 68 27 5f 01 00 00 d8 ff 02 00 7c 0f

[35236.511718] SecProcessorType = 44

Last full SBF was froyo 3.4.2-179-2
[Defy General] balika01:
A BÜDÖS KURVA ISTENI ANNAK A SEGBE SZÁJBA BASZOT ANYÁNAK!

O2 2.3.6 unbricked my phone!!!
[Defy General] Epsylon3:
i was expecting a 0x1f

those are bits :

0x0f = 0b0000.1111 (4 bits, r4)

0x1f = 0b0001.1111 (5 bits, r5 or GB full sbf ?)

0x3f = 0b0011.1111 (6 bits, r6)

But i think that is a read only efuse memory (bits 1 could maybe not be reset to 0)
[Defy General] coelho_:
how????????
[Defy General] Epsylon3:
so, "sp" is updated on flash, good to know...

"sp" partition is a copy of cdt.bin and some more stuff
[Defy General] hackergnome:
Then how did the Chinese guy downgrade?

Maybe its eprom(electrically programmable read only mem)
[Defy General] balika01:
flashed o2 2.3.6 sbf whit rsd lite 5.3.1

---------- Post added at 07:57 PM ---------- Previous post was at 07:55 PM ----------

yes ! :) this part in the sbf (not in rebuilded)
[Defy General] sunoldman:
Well, you missed a chance to send it to service to get it unlocked
[Defy General] coelho_:
And you can downgrade now for install muim for exemple
[Defy General] Eramix3:
this is a unlocker http://bbs.mfunz.com/thread-298440-1-1.html
[Defy General] pulser_g2:
Hmmm... Looks interesting, but my chinese isn't up to scratch to figure that out. If this sets the SE flag then that's a major step :)
[Defy General] balika01:
# insmod /sdcard/sec.ko

insmod /sdcard/sec.ko

insmod: can't insert '/sdcard/sec.ko': File exists

#

new VodafoneCZ kernel
[Defy General] pulser_g2:
I don't see what file they are flashing using RSDLite 5.6 unfortunately...
[Defy General] Eramix3:
have a guide to unlock bootloader already?
[Defy General] hackergnome:
I got similar issue with 2nd boot...

No it was init_module sec.ko failed(file exists)

Try rebooting n see if it help...
[Defy General] kevin_diu:
Does "engineering_key.p12" help us to get defy bootloader unlock?

Reference : http://xdaforums.com/showpost.php?p=21169008&postcount=3
[Defy General] lord0815:
As i followed both posts - no.

There is somewhere switch in omap3630 which has to be set to the

'unlock' value.
[Defy General] 01ago:
Full back-up after flashing BL6 Germany SBF on an unlocked Defy:

http://115.com/file/dpi022ae#

mmcblk-_backup.zip

Uploaded by 053109219 on bbs.mfunz.com (original post: http://bbs.mfunz.com/thread-298737-1-1.html)

Hope this helps Ep3.

Edit: I uploaded it: http://www.multiupload.com/DKX9UHW76O
[Defy General] Eramix3:
how to apply this backup? mmcblk-_backup.zip
[Defy General] balika01:
please upload this to multiupload
[Defy General] Epsylon3:
arf, i think i found how to enable the engineering mode.... but i ve made a mistake and now my phone doesnt boot at all :( fully bricked, no more boot loader or usb
[Defy General] brajesh.sharma87:
do u still have the warranty???...saddest news for defy users.
[Defy General] mpiekp:
Eppy post what you think will work, my handset is a willing tester.
[Defy General] zyxwvut:
NNNOOOOOOOOOOO!!!!!!!!!!! :p take it in
[Defy General] balika01:
what did you do?
[Defy General] coelho_:
Juste connect that all
[Defy General] pulser_g2:
Argh. Sounds like you need TI's OMAP tools... :(
[Defy General] kevin_diu:
great news...:D ... and also bad news :( I know your defy will boot again later :)
[Defy General] free2live:
Even geniuses are aloud to make mistakes :) you'll find a solution

Sent from another planet
[Defy General] Epsylon3:
there is no usb detected at all on the linux... so omap tools will not help i guess
[Defy General] balika01:
examlpe: i bricked my and now works! :) it will boot!
[Defy General] free2live:
Have you tried windows? I had this 1 time when I started messing with my defy

Sent from another planet
[Defy General] adi4motion:
can you tell what to do...that may unlock the bootloader? maybe there's somebody brave enough to do this:)

as for you phone...take it to service center: if they ask for money we will gladely do our part and pay the bill:)
[Defy General] balika01:
what did you do?????
[Defy General] brajesh.sharma87:
Defy users, be prepared to get a real unbricking guide. Epy never loses :P
[Defy General] Epsylon3:
BEWARE : Dont change your fuse data (Phone fully bricked sent to repair service !)

what ive made, changed the efuse data :

<6>[ 2161.395812] SecGetSWRV = 3f 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 e0 00 00

<6>[ 2213.090911] SecGetSWRV = 3f 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 e1 00 00

e0 to e1 ... how ? with this command :

static int TryWriteFuseReg(void)
{
unsigned int result = 99;
int ret_val = 99;
SEC_PA_PARAMS ns_efuse_params;

SecRaiseVfuse();

ns_efuse_params.component = SEC_CUST_CODE;
ns_efuse_params.efuse_value = 0x01;
ns_efuse_params.bch_value = 99;
result = SEC_ENTRY_pub2sec_dispatcher(API_HAL_MOT_EFUSE,
0,
FLAG_IRQFIQ_MASK | FLAG_START_HAL_CRITICAL,
1,
(void *) __pa(&ns_efuse_params));
printk(KERN_INFO "SEC_ENTRY_pub2sec_dispatcher = %x\n", result);
if (result == 0)
ret_val = 0;

SecLowerVfuse();

return ret_val;

}

then i tried to reset it to 0 with ns_efuse_params.efuse_value = 0x00; but that doesnt work.

So, ive seen another 1, i tried that and the device has stopped working (not on reset, directly stopped) :

ns_efuse_params.component = SEC_CUST_CODE;
ns_efuse_params.efuse_value = 0x01;
ns_efuse_params.bch_value = 99;
result = SEC_ENTRY_pub2sec_dispatcher(API_HAL_MOT_EFUSE,
0,
FLAG_IRQFIQ_MASK | FLAG_START_HAL_CRITICAL,
0, //<<<<--- DONT DO THAT
(void *) __pa(&ns_efuse_params));
printk(KERN_INFO "SEC_ENTRY_pub2sec_dispatcher = %x\n", result);

Ive put the 0 here to try to "reset" the bit

typedef enum {
/*Starting with random non zero value for component type */
SEC_AP_PA_PPA = 0x00000065,
SEC_BP_PPA,
SEC_BP_PA,
SEC_ML_PBRDL,
SEC_MBM,
SEC_RRDL_BRDL,
SEC_BPL,
SEC_AP_OS,
SEC_BP_OS,
SEC_BS_DIS,
SEC_ENG,
SEC_PROD,
SEC_CUST_CODE,
SEC_PKC,
SEC_MODEL_ID,
SEC_MAX
} SEC_SV_COMPONENT_T;

to enable eng mod, im almost sure the enum is not good... (i didnt tried) but it should begin with "xf 20 00 00" (bit 13 : ENG and not bit 14: PROD) according to the kernel code
[Defy General] balika01:
what is the e0 and e1 ???
[Defy General] free2live:
Nothing works ?

Sent from another planet
[Defy General] the|gamer:
Its 224 and 225 in Hex :P

The Code Epsy3 postet is a Kernel Module, isn't it?
[Defy General] Epsylon3:
the 1 was written by the SEC_CUST_CODE ... please read my post and stop stupid questions...
[Defy General] the|gamer:
Please STOP Full quoting!

Just Quote the part that you want to quote!

Epsy how could this be compiled to a Kernel Module?
[Defy General] balika01:
i'm bad in english. the e1 is engineering mod?
[Defy General] Dodge93:
What did you do to reanimate your Defy? :O
[Defy General] free2live:
Dude it.s command line to enable engineering mode.

Sent from another planet
[Defy General] Eramix3:
don't have a guide to unlock bootload already?
[Defy General] Epsylon3:
the enums are bit (or bytes) indexes i dont know... ive only set one bit to test, i used SEC_CUST_CODE because it was not (i think) an important bit...

but maybe the phone just rebooted due to a segfault and this bit make it brick... i cant know.

I dont have enough info to code the ENG bit, i need another test (at least one) to know if stuff is bit index or byte index

"drivers/misc/sec/sec_core.c"
[Defy General] pmp326:
hi stuck on stupid 2.3.6. willing to test have insurance so i dont care if we brick it its already broken:(
[Defy General] free2live:
Be patient. Developer s are human not gods

Sent from another planet
[Defy General] blackwing182:
a long time ago this happens to mee flashing sbf in to a motorola cliq xt , my phone could not get to bootloader or charge via ps or wall charger, and not readble to RSD lite, i did thid, i put my phone upside down with battery removed, and w/o usb cable, i open rsd lite pluged the phone w/o battery and quikly put the battery and hold fast vulume up and power button at the same time and it boot in to boot loader but i dont know if this works the same way to a defy :(
[Defy General] Epsylon3:
i can make another module to test the fuses but its very very dangerous

SecGetSWRV = 3f 00 00 00 | 00 00 00 00 | 00 00 00 00 | 00 01 00 00 | 00 e1 00 00
0 32 64 96 128

typedef enum {
/*Starting with random non zero value for component type */
SEC_AP_PA_PPA = 0x00000065, // = 101.
SEC_BP_PPA, //0x66 = 102.
SEC_BP_PA, //0x67 = 103.
SEC_ML_PBRDL, //0x68 = 104.
SEC_MBM, //0x69 = 105.
SEC_RRDL_BRDL, //0x6A = 106.
SEC_BPL, //0x6B = 107.
SEC_AP_OS, //0x6C = 108.
SEC_BP_OS, //0x6D = 109.
SEC_BS_DIS, //0x6E = 110.
SEC_ENG, //0x6F = 111.
SEC_PROD, //0x70 = 112.
SEC_CUST_CODE,//0x71 = 113.
SEC_PKC,
SEC_MODEL_ID,
SEC_MAX
} SEC_SV_COMPONENT_T;

So the 1 was at index "136." (128 + 8th bit of 0xe1) i think something is wrong in moto code and i need to set another value in a test module to know...
[Defy General] free2live:
+1 it should work. Did the same on defy and Samsung galaxy ace

Sent from another planet
[Defy General] coelho_:
Exactely i do that to
[Defy General] brajesh.sharma87:
the same trick worked for one of my friend on galaxy 3
[Defy General] blackwing182:
efuse control eng mod, so we can burn the efuse in a module to trick the phone?
[Defy General] Epsylon3:
no this time there is no usb at all.... no led, nothing
[Defy General] balika01:
u should go to service whit the defy if u dont have idea
[Defy General] free2live:
You have to try a few times... I revived my gf's SGA like that. Also had no USB, nothing.. Keep trying..

Sent from another planet
[Defy General] coelho_:
It's not neccery just off you batterie and volume plus and power..no need a led
[Defy General] the|gamer:
This is really sad Epsy3 !

Do you want to try JTAG Connection?

Okay, we have to search for JTAG Connections first but I guess OMAP JTAG Tools are easy to find!
[Defy General] sixSforever:
short white led when connected usb?... if yes, motherboard replace...
[Defy General] blackwing182:
http://www.ti.com/general/docs/wtbu...lateId=6123&navigationId=12013&contentId=4578
[Defy General] coelho_:
And think to download thé driver for m526
[Defy General] blackwing182:
http://www.ti.com/lit/ml/sprp603/sprp603.pdf
[Defy General] pulser_g2:
I'm wondering if this could be the e-fuse doing what it's programmed to do (ie. Not let it do anything) when something unknown happens?

That's a shame about the phone. I imagine proper true hardware bricks are quite rare on the defy, so not sure if there's much known about sorting these via Jtag...
[Defy General] Simplestas:
Epsy3, will you make a kernel module to write eng/cust bits for insane souls out there?:D

Sorry for your loss.
[Defy General] royale1223:
This is a tragedy. Eppy, pls keep on trying. If you can't figure it out, you can still claim your warranty right? Even if your warrenty in void/expired we'll raise money and buy a new one for you. We are all behind you and we need you. In these days of corporate madness you represent everything that's great about linux and opensource. We love you. So cheer up. If you can't we'll take care of it. We've got your back.
[Defy General] kadofl:
Of course we will raise money for a new when it's needed. Even when i'm not able to give that much (student :D) i'm in ;)
[Defy General] VTomi1975:
If this is the case, please, EP3, give us some info where to send donations. You cannot be out of the game in front of the finish line :)
[Defy General] twa_priv:
I admit I have very little understanding about this whole unlocking business - so please don't jump at me if this has already been discussed or doesn't apply to the Defy at all.

But what about using factory cable to get Epsilon's Defy working again?

A few of the links below are for the KF but this should not matter (there was quite a lot of discussion regarding factory cables going on a few weeks ago at the KF forums (because of the most recent Amazon update to 6.2.1).

http://shop.teamblackhat.info/Factory-style-programming-cable-for-Motorola-FactCable.htm

http://xdaforums.com/showthread.php?t=1392693

http://www.evilsoapbox.com/?p=1540
[Defy General] the|gamer:
I have a question!

Where does RSD Lite come from? We get new Versions from somewhere!

It is a Official Tool from Motorola right? But who leaks it?

Can't the Person who leaks this, leak the TI OMAP Tool?
[Defy General] Passa91:
Agreed. Would hate for Eppy to give up on Defy development. I'd send $15 your way to help buy you a new Defy.
[Defy General] vjun:
O HAI, Eppy. I think lots of people here can donate to help you on a new Defy. I would donate if you want to continue the work.
[Defy General] grannyrogers:
I am ready to donate if necessary!
[Defy General] balika01:
epsylon3@gmail.com (paypal)
[Defy General] grannyrogers:
Where is donate link?
[Defy General] royale1223:
Come on guys. Eppy might be too proud to ask. He never asks for donation. We need to raise enough dough fast. Here's the new thread. http://xdaforums.com/showthread.php?t=1446106 . Also have anybody seen board replacements for defy? My searches were futile. If we have cheaper board replacements we could afford to burn a few more boards for getting a stable unlock technique.

Donate paypal : epsylon3@gmail.com Tanguy Pruvot
[Defy General] Epsylon3:
Yes, hmm i will ship it to warranty... there is no lsusb at all on linux, nothing detected.. There is some loop on boot the battery get hot

But im not sure i will get it repaired yet :(
[Defy General] royale1223:
Yeah? That's good news. Cheer up. You'l probably get a replacement.
[Defy General] the|gamer:
It would be funny if the guys at repair Center read this Thread here and then they think "lets give him ENG MODE"
[Defy General] bone101:
Im sorry for you :-( EPSY I will spend some money too if you need.......

Maybe you get it unlocked

Maybe this belong not to this thread but what is pds in my cwm recovery . There is restore/backup pds in cwm recovery 5. boot +modules

Just give me hint in the right way
[Defy General] pulser_g2:
They could always give him a present, and put the OMAP tools installer onto the sd card, and the 16MB boot flash file :p
[Defy General] Israafiyl:
If at least 40-50 people will donate you will have a new defy in less than 3 days, don't worry!

http://xdaforums.com/showthread.php?t=1446106
[Defy General] edition-:
Well motorola promised unlock bootloaders, that could be a nice way to do it xD
[Defy General] royale1223:
Pds is the partition that store imei. Dont mess with it. Modifying it wont unlock the bootloader. Hmm. I'm having trouble understanding the procedure that bricked eppy's phone. A bit more documentation please, eppy.
[Defy General] pulser_g2:
I am trying to source the board configure tool just now... Appears organisations who have bought development boards have these tools...
[Defy General] pmp326:
confirmed im dead now too will have a new one by tuesday....:)
[Defy General] Epsylon3:
my brick has nothing related to pds... the bad pds prevent to start android on stock sbfs (you have the logo and bootanimation) but doesnt break the bootloader

Dont play with the PDS, the solution is not in NAND partitions
[Defy General] glycolysis:
Don't trust your phone on this, but I suspect the "1" in the SEC_ENTRY_pub2sec_dispatcher's 3rd argument is a parameter count as a hack to use variable argument lists in assembly (for pub2sec_bridge_entry probably).

Maybe one of the functions decided not to copy the pointer to the ns_efuse_params structure (because according to the "0" parameter count, it doesn't exist) but instead passed a garbage pointer to the efuse API leading to random numbers being scribbled on the efuses? :eek:

This is all speculation, but we definitely shouldn't mess with that "1" in the future.
[Defy General] pmp326:
when i plug mine in my pc makes sound but nothing from phone or rsd
[Defy General] pulser_g2:
Get yourself access to Linux, and try lsusb to see if it appears
[Defy General] Epsylon3:
what ? you are dead ?
[Defy General] pulser_g2:
Yup, this corresponds to what the service guy said previously...

Question, having not used rsd... Does rsd refuse to flash an older or unsigned file? Or does it complete and allow the phone to reject booting it?

I'm just trying to think how this works, without having tried it :p
[Defy General] Epsylon3:
Thanks :) at least one who read and understand exactly what ive made :p yea, i think some other fuses were written... or... that made a segfault and the bit i changed is used in boot system...
[Defy General] bone101:
Thx

Epsylon3 is the best!!
[Defy General] pmp326:
haha no i think my phone is lol
[Defy General] Epsylon3:
what did you do ?
[Defy General] pmp326:
nevermind my pc hard rebooted now rsd see's it

back to german 2.3.6 sigh.....
[Defy General] linbi4706:
I will be mfunz call hove visa guys donate you

thx ep3
[Defy General] dlhxr:
it is really annoying not having a visa/mastercard internet banking!!! just china unionpay....:(
[Defy General] glycolysis:
It's not the Defy's version, but this is basically the piece of code in mbmloader that writes to the efuses. Maybe it'll give us some idea where to look, and or even how to erase.

https://bitbucket.org/droiddev/reverse_engineering/src/b8b881184b5f/asm/omap3430_mbmloader-01.asm

Line 2932, the subroutine called PPA_API_HAL_MOT_EFUSE.

PPA_SMC_handler_SL on line 3745 might also be worth a look.
[Defy General] Eramix3:
Full back-up after flashing BL6 Germany SBF on an unlocked Defy:

http://www.multiupload.com/ODZGBXZ8EM
[Defy General] the|gamer:
eFuses are eFuses, once you blow them, they are blown forever!

You can not reset them! You can only tell the Hardware to ignore them!

I guess Epsy3 gets a new Board or the give him ENG Mode!

At XBOX 360 Hacking Scene they emulate eFuses that the new Kernel then blows, so they keep the old eFuses and blow virtual eFuses!
[Defy General] dlhxr:
someone posted on mfunz.com

[76525.368713] SecGetSWRV = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00

[76525.371856] SecGetModelId = 00 00 00 00

[76525.372344] SecGetProcID = 04 40 02 13 cf dd 46 01 00 00 dc ff 02 00 14 5f

[76525.374023] SecProcessorType = 44

[76525.368713] Inserting sec module

and two pic in the thread.

http://bbs.mfunz.com/thread-299315-1-1.html
[Defy General] glycolysis:
About eFuses not being erasable: The thing is, the information in this thread currently points to that being untrue. As far as I can tell, from everyone's sec.ko dumps, both the engineering and production bits are set. I may be interpreting the code incorrectly (13 and 14th bit of the 5th 32 bit integer, in little endian, right?).

However, it appears that TI has a bit of software that is capable of converting a production phone to engineering mode. That means they can erase eFuses, since the production bit must be clear for that to work! I suppose it might only work over some special USB debug mode and not in Linux, but still, if we can get that, the bootloader is as good as unlocked.

EDIT: Never mind, from the above post I'm looking at the SWRV incorrectly. You may be right then.
[Defy General] pravarth:
@Epsylon3:If nothing works in unbricking your phone maybe you could try the unbrickable mod by AdamOutler. Its a hardware mod. Technically it is possible to have this mod on all cortex a8 chips. It has been implemented on most of the hummingbird processors and saved many hardbricks!

Interesting post: http://xdaforums.com/showpost.php?p=21359711&postcount=196

Reference:

http://xdaforums.com/showthread.php?t=1018862&highlight=unbrickable

http://xdaforums.com/showthread.php?t=1236273

Just wanted to bring this mod to everyone's attention.
[Defy General] royale1223:
I think it might be easier to get the ti software than doing it by trial nd error method. There are thousands of official motorola repair points scattered all over the world. Most of them would not have quite a lot of security. Actually it might be as simple as.

1) buyin old used pcs from these shop.

2) getting an executive to run a trogen/ get a shell.

And so on.
[Defy General] Epsylon3:
As reference :

19:56:31 | +Epsylon3: ~ # cat /proc/socinfo <--GB kernels only
19:56:33 | +Epsylon3: SoC : OMAP3630 ES1.1
19:56:35 | +Epsylon3: IDCODE : 1b89102f
19:56:37 | +Epsylon3: Pr. ID : 00000000 00000000 000004cc cafeb891
19:56:39 | +Epsylon3: Die ID : 06027009 0160757a ffd80000 366c0001

20:12:57 | +Epsylon3: ~ # io -4 -r -l 0x20 0x4830A208
20:12:57 | +Epsylon3: 4830a208: 00000000 00000000 000004cc cafeb891
20:12:57 | +Epsylon3: 4830a218: 06027009 0160757a ffd80000 366c0001

12:09:08 | +Epsylon3: <6>[49897.596710] SecGetSWRV = 3f 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 e0 00 00
12:09:08 | +Epsylon3: <6>[49897.602478] SecGetModelId = 02 00 00 00
12:09:08 | +Epsylon3: <6>[49897.604339] SecGetProcID = 09 70 02 06 7a 75 60 01 00 00 d8 ff 01 00 6c 36

SecGetProcID is the Die ID (shown in RSDLite too) these are not efuse but standard omap3 registers

The module read the data as an array of bytes... so the order is different, like standard memory (LSB -> MSB) 02 00 00 00 = 2 as a 32bit int