N91 RM-43 не удается восстановить imei

[chabrus]

Принесли данный ТА с просьбой прошить. Работы было не впроворот, потому по запарке, не проверив телефон, подключил его к Best через UFS.
Проставил версию RM43_V3.10.023.05 и начал прошивку.

Selected FlashSettings : Manual
Files Set for Flashing :
MCU : rm43_v3.10.023.core
PPM : RM43_V3.10.023.05.variant
Check FlashFiles, Please, wait...
-> SWversion check skipped : Dead mode selected

Backup enabled, Will read Certificates now...
Setting FlashMode
FlashMode set Ok

1st boot Ok, C0

APE part info :
APE ASICID : 17100708
APE MODE ID : 00
APE PUB ID : B3F49EFC9358B6F1EA3EC39484C3A944674ECA7A
APE R_HASH : 49A97E826B93BA20B7ED0B082475C005
APE ROM ID : 1DFD66132C872FD4

CMT part info :
CMT ASICID : 000000010000022600010006000C192101002200
CMT EM0 ID : 00000232
CMT EM1 ID : 00000352
CMT PUB ID : 18200212E08F4951A968714EF698539663668887
CMT MODE ID : 00
CMT R_HASH : E9EFF4BFAA5393217CA6B17755FC3E14
CMT ROM ID : F28A211FCEA7B19D

CMT : Sending 2nd loader...
Use : RAP3Gv2_2nd.fg , Rev : 0.0 Ver : 1.21.0
CMT Loader sent, Boot Ok
MCU Configuration
MCU Cfg Ok , 03
FLASHID : 225000EC , CMT , NOR
CMT Flash ID : 225000EC < SAMSUNG [SEC] => K8S6415ETB
FLCNT : 00000000000000000000000000000000000000
FLASHID : 0000FFFF , CMT , MMC , EXT
CMT Flash ID : 0000FFFF < Bad Flash Type , if MMC - It Ok
Sending ALGO....
Use : RAP3Gv3_algo.fg , Rev : 0.0 Ver : 10.40.0
CMT Algo sent
CMT PAPUB : B2E0D53F2FDDF1FC8E55510130F0D0677135243595
Transmission mode : Dual (Ddr, TX2)

APE : Sending 2nd loader...
Use : helen3_2nd.fg , Rev : 0.0 Ver : 1.35.0
APE Loader sent, Boot Ok
MCU Configuration
MCU Cfg Ok , 03
FLASHID : 003600EC , APE ,
APE Flash ID : 003600EC < SAMSUNG [SEC] => K5E1212ACM [NAND]
ReqAlgo : APE , OMAP1710 UNISTORE-II-1.2.1 ALG јрFLCNT : 01010000020000000600000000000000000000
Sending ALGO....
Use : h3_sam_nand_xsr.fg , Rev : 0.0 Ver : 1.47.0
APE Algo sent
APE PAPUB : B2E0D53F2FDDF1FC8E55510130F0D0677135243594
Transmission mode : Dual (Ddr, TX2)

Boot Done!

CMT : Read NPC certificate...
Cert size : 20480 byte(s)
IMEI : 358353000421215
CMT : Read CCC certificate...
Cert size : 0 byte(s)
CMT : Read HWC certificate...
Cert size : 0 byte(s)
CMT : Read VARIANT certificate...
Cert size : 20480 byte(s)
APE : Read NPC certificate...
Cert size : 0 byte(s)
APE : Read CCC certificate...
Cert size : 0 byte(s)
APE : Read HWC certificate...
Cert size : 0 byte(s)
APE : Read VARIANT certificate...
Cert size : 0 byte(s)
Cert Read done!


Init Service mode... Wait...

Init Service Mode Failed!
NPC Certificate saved...
VARIANT Certificate saved...

RPL saved : c:\InfinityBox\BEST\Backup\Cert\358353000421215_CR T.rpl

Setting FlashMode
FlashMode set Ok

1st boot Ok, C0

APE part info :
APE ASICID : 17100708
APE MODE ID : 00
APE PUB ID : B3F49EFC9358B6F1EA3EC39484C3A944674ECA7A
APE R_HASH : 49A97E826B93BA20B7ED0B082475C005
APE ROM ID : 1DFD66132C872FD4

CMT part info :
CMT ASICID : 000000010000022600010006000C192101002200
CMT EM0 ID : 00000232
CMT EM1 ID : 00000352
CMT PUB ID : 18200212E08F4951A968714EF698539663668887
CMT MODE ID : 00
CMT R_HASH : E9EFF4BFAA5393217CA6B17755FC3E14
CMT ROM ID : F28A211FCEA7B19D

CMT : Sending 2nd loader...
Use : RAP3Gv2_2nd.fg , Rev : 0.0 Ver : 1.21.0
CMT Loader sent, Boot Ok
MCU Configuration
MCU Cfg Ok , 03
FLASHID : 225000EC , CMT , NOR
CMT Flash ID : 225000EC < SAMSUNG [SEC] => K8S6415ETB
FLCNT : 00000000000000000000000000000000000000
FLASHID : 0000FFFF , CMT , MMC , EXT
CMT Flash ID : 0000FFFF < Bad Flash Type , if MMC - It Ok
Sending ALGO....
Use : RAP3Gv3_algo.fg , Rev : 0.0 Ver : 10.40.0
CMT Algo sent
CMT PAPUB : B2E0D53F2FDDF1FC8E55510130F0D0677135243595
Transmission mode : Dual (Ddr, TX2)

APE : Sending 2nd loader...
Use : helen3_2nd.fg , Rev : 0.0 Ver : 1.35.0
APE Loader sent, Boot Ok
MCU Configuration
MCU Cfg Ok , 03
FLASHID : 003600EC , APE ,
APE Flash ID : 003600EC < SAMSUNG [SEC] => K5E1212ACM [NAND]
ReqAlgo : APE , OMAP1710 UNISTORE-II-1.2.1 ALG 3 FLCNT : 01010000020000000600000000000000000000
Sending ALGO....
Use : h3_sam_nand_xsr.fg , Rev : 0.0 Ver : 1.47.0
APE Algo sent
APE PAPUB : B2E0D53F2FDDF1FC8E55510130F0D0677135243594
Transmission mode : Dual (Ddr, TX2)

Boot Done!

Partitioning....
Partitioning Ok...
Transmission mode : Dual (Ddr, TX2)
Erase : Processing rm43_v3.10.023.core
Found 4 areas to erase, erase group
Asic : CMT , Sub : NOR
CMT , NOR , Area : 0x00000000 - 0x00530561
CMT , NOR , Area : 0x006A0000 - 0x006BFFFF
CMT , NOR , Area : 0x006DF000 - 0x006EFFFF
CMT , NOR , Area : 0x00700000 - 0x007EFFFF
Using TimeOut : 7 min ( 430 sec )
Erasing, wait.....
CMT : Group erase Ok
Found 4 areas to erase, erase group
Asic : APE , Sub : NAND
APE , NAND , Area : 0x00000000 - 0x0000FFFF
APE , NAND , Area : 0x00010000 - 0x0001FFFF
APE , NAND , Area : 0x00020000 - 0x000203FF
APE , NAND , Area : 0x00028000 - 0x02F3CFFF
Erasing, wait.....
APE : Group erase Ok
TIME : Erase time : 00:00:48
PrReq : NOR , 00
PrReq : NAND , 010300003F2FDD00FC8E55000130F0
Transmission mode : Dual (Ddr, TX2)
Write : Processing rm43_v3.10.023.core
CMT: Writing Hash CERT [NOLO]
CMT: Writing Hash CERT [KEYS]
CMT: Writing Hash CERT [PRIMAPP]
CMT: Writing Hash CERT [DSP0]
CMT: Writing Hash CERT [MCUSW]
CMT: Writing Hash CERT [ADL]
CMT: Writing Hash CERT [PASUBTOC]
CMT: Writing Hash CERT [PAPUBKEYS]
APE: Writing Hash CERT [KEYS]
APE: Writing Hash CERT [X-LOADER]
APE: Writing Hash CERT [PRIMAPP]
APE: Writing Hash CERT [SOS+LOADER]
APE: Writing Hash CERT [ADL]
APE: Writing Hash CERT [SOS+XZIP]
APE: Writing Hash CERT [PASUBTOC]
APE: Writing Hash CERT [PAPUBKEYS]
APE: Writing Hash CERT [SOS*CORE]
APE: Writing Hash CERT [SOS+ROFS]
APE: Writing Hash CERT [SOS+ROFX]
Total writen 1295 blocks
TIME : Write time : 00:03:37

PrReq : NOR , 00
PrReq : NAND , 010300003F2FDD00FC8E55000130F0

Partitioning....
Partitioning Ok...
Transmission mode : Dual (Ddr, TX2)
Erase : Processing RM43_V3.10.023.05.variant
Found 1 areas to erase, erase group
Asic : APE , Sub : NAND
APE , NAND , Area : 0x01F90000 - 0x02F3CFFF
Erasing, wait.....
APE : Group erase Ok
TIME : Erase time : 00:00:01
PrReq : NOR , 00
PrReq : NAND , 010300003F2FDD00FC8E55000130F0
Transmission mode : Dual (Ddr, TX2)
Write : Processing RM43_V3.10.023.05.variant
APE: Writing Hash CERT [SOS+ROFX]
Total writen 1955 blocks
TIME : Write time : 00:02:11

PrReq : NOR , 00
PrReq : NAND , 010300003F2FDD00FC8E55000130F0


Init Service mode... Wait...

Init Service mode Failed! Skip AfterFlash :(
Connect phone on selected interface...

Connect phone on selected interface...



Был уверен в Best на все 100, потому не потрудился слить бекапы.
Как видно из лога, они сохранились, и imei телефона до прошивки был на месте.
Сбросы после прошивки не прошли.
При включении телефона появилось знакомое Phone start up filed, contact the retailer.

Снова подцепил тело к боксу, и проверка выдала это:

Checking StartUp data ...
-----------------------

IMEI Validation : IMEI Damaged!!!!
- > SIMLOCK , SECURITY Info can be wrong!
- > Need restore NPC backup or RPL


SDD Key status : SDData Damaged!!!!! :(
- > Do REPAIR SDD , Local SX4 if needed

SimLock status : SimLock is Ok

Security status : Security Damaged!!!!! :(
- > Do Local SX4 or Server SX4 , Upload Tune ( checkbox or manual )

А попытка восстановить imei выглядит примерно так:

PA_SimLock Version :
PA_SL phone detected

Done!

Phone disconected!

Connect phone on selected interface...

Will Write RPL keys now...
Check RPL file...
NPC Data found! (CMT)
Variant Data found!
Setting FlashMode
FlashMode set Ok

1st boot Ok, C0

APE part info :
APE ASICID : 17100708
APE MODE ID : 00
APE PUB ID : B3F49EFC9358B6F1EA3EC39484C3A944674ECA7A
APE R_HASH : 49A97E826B93BA20B7ED0B082475C005
APE ROM ID : 1DFD66132C872FD4

CMT part info :
CMT ASICID : 000000010000022600010006000C192101002200
CMT EM0 ID : 00000232
CMT EM1 ID : 00000352
CMT PUB ID : 18200212E08F4951A968714EF698539663668887
CMT MODE ID : 00
CMT R_HASH : E9EFF4BFAA5393217CA6B17755FC3E14
CMT ROM ID : F28A211FCEA7B19D

CMT : Sending 2nd loader...
Use : RAP3Gv2_2nd.fg , Rev : 0.0 Ver : 1.21.0
CMT Loader sent, Boot Ok
MCU Configuration
MCU Cfg Ok , 03
FLASHID : 225000EC , CMT , NOR
CMT Flash ID : 225000EC < SAMSUNG [SEC] => K8S6415ETB
FLCNT : 00000000000000000000000000000000000000
FLASHID : 0000FFFF , CMT , MMC , EXT
CMT Flash ID : 0000FFFF < Bad Flash Type , if MMC - It Ok
Sending ALGO....
Use : RAP3Gv3_algo.fg , Rev : 0.0 Ver : 10.40.0
CMT Algo sent
PAPUBkeys blank (erased or HW failure)
Transmission mode : Dual (Ddr, TX2)

Boot Done!

Preparing for write certificates...

Switching to CMT...

CMT : NPC erase Ok
Writing NPC... Ok

CMT : VARIANT erase Ok
Writing VARIANT... Ok


Done!

Открыл слитый бекап блокнотом, там вроде все нормально. Нужные сертификаты присутствуют.
Или Best криво слил RPL, или у меня под вечер руки кривые стали.
Прикладываю бекап. Паша посмотрите его, может еще можно с ним что то сделать.

[UO5OQ]

Прежде всего, хочу сказать, что телефоны N91 есть двух RM
Так вот, если записать SW не соответствующего железу RM, то IMEI станет дефолтным и бэкап NPC не поможет, пока не будет записано SW соответствующее RM данного телефона из Nokia SW Installer по INI.
Надеюсь мой совет поможет.

[chabrus]

RM и imei соответствуют тем что написаны на стикере.

[UO5OQ]

RM и imei соответствуют тем что написаны на стикере.
Не помню уже с чем было связано, но были и такие случаи с этими N91, что IMEI восстанавливался только на самой нижней версии SW.
В приложенном вами бэкапе присутствует адекватная на вид NPC_DATA.

В общем сделайте так:
1. Сотрите телефон полностью
2. Запишите только SW (попробуйте несколько версий начиная с самой нижней)
3. На каждой версии записывайте бэкап CRT

P.S. Если кроме BEST есть другие Боксы для Nokia, то попробуйте ими тоже. Имеет смысл попробовать даже JAF (можно крякнутый) через интерфейс UFS.

[chabrus]

Не помню уже с чем было связано, но были и такие случаи с этими N91, что IMEI восстанавливался только на самой нижней версии SW.
В приложенном вами бэкапе присутствует адекватная на вид NPC_DATA.

В общем сделайте так:
1. Сотрите телефон полностью
2. Запишите только SW (попробуйте несколько версий начиная с самой нижней)
3. На каждой версии записывайте бэкап CRT

P.S. Если кроме BEST есть другие Боксы для Nokia, то попробуйте ими тоже. Имеет смысл попробовать даже JAF (можно крякнутый) через интерфейс UFS.

В общем так и получилось.
В процессе восстановления пользовался Best через UFS.

Phone found!
Series 60 Device detected!
read info... - Ok

User ACCEPTED FULL ERASE
Setting FlashMode
FlashMode set Ok

1st boot Ok, C0

APE part info :
APE ASICID : 17100708
APE MODE ID : 00
APE PUB ID : B3F49EFC9358B6F1EA3EC39484C3A944674ECA7A
APE R_HASH : 49A97E826B93BA20B7ED0B082475C005
APE ROM ID : 1DFD66132C872FD4

CMT part info :
CMT ASICID : 000000010000022600010006000C192101002200
CMT EM0 ID : 00000232
CMT EM1 ID : 00000352
CMT PUB ID : 18200212E08F4951A968714EF698539663668887
CMT MODE ID : 00
CMT R_HASH : E9EFF4BFAA5393217CA6B17755FC3E14
CMT ROM ID : F28A211FCEA7B19D

CMT : Sending 2nd loader...
Use : RAP3Gv2_2nd.fg , Rev : 0.0 Ver : 1.21.0
CMT Loader sent, Boot Ok
MCU Configuration
MCU Cfg Ok , 03
FLASHID : 225000EC , CMT , NOR
CMT Flash ID : 225000EC < SAMSUNG [SEC] => K8S6415ETB
FLCNT : 00000000000000000000000000000000000000
FLASHID : 0000FFFF , CMT , MMC , EXT
CMT Flash ID : 0000FFFF < Bad Flash Type , if MMC - It Ok
Sending ALGO....
Use : RAP3Gv3_algo.fg , Rev : 0.0 Ver : 10.40.0
CMT Algo sent
PAPUBkeys blank (erased or HW failure)
Transmission mode : Dual (Ddr, TX2)

APE : Sending 2nd loader...
Use : helen3_2nd.fg , Rev : 0.0 Ver : 1.35.0
APE Loader sent, Boot Ok
MCU Configuration
MCU Cfg Ok , 03
FLASHID : 003600EC , APE ,
APE Flash ID : 003600EC < SAMSUNG [SEC] => K5E1212ACM [NAND]
ReqAlgo : APE , OMAP1710 UNISTORE-II-1.2.1 ALG
FLCNT : 01010000020000000600000000000000000000
Sending ALGO....
Use : h3_sam_nand_xsr.fg , Rev : 0.0 Ver : 1.47.0
APE Algo sent
APE PAPUB : 6E25F5B4407C1CBD0598994502C24000F3657C1882
Transmission mode : Dual (Ddr, TX2)

Boot Done!

Full Erase started...
Asic : CMT , Sub : NOR
Erase Area 0x00000000-0x007FFFFF
Using TimeOut : 10 min ( 600 sec )
Erasing, wait.....
Erase CMT Finished , [FF]
CMT : Erase Ok
Done

Phone disconected!


Selected FlashSettings : Manual
Files Set for Flashing :
MCU : rm43_v2.00.052.core
PPM : RM43_V2.00.052.05.variant
Check FlashFiles, Please, wait...
-> SWversion check skipped : Dead mode selected

Backup enabled, Will read Certificates now...
Setting FlashMode
FlashMode set Ok

1st boot Ok, C0

APE part info :
APE ASICID : 17100708
APE MODE ID : 00
APE PUB ID : B3F49EFC9358B6F1EA3EC39484C3A944674ECA7A
APE R_HASH : 49A97E826B93BA20B7ED0B082475C005
APE ROM ID : 1DFD66132C872FD4

CMT part info :
CMT ASICID : 000000010000022600010006000C192101002200
CMT EM0 ID : 00000232
CMT EM1 ID : 00000352
CMT PUB ID : 18200212E08F4951A968714EF698539663668887
CMT MODE ID : 00
CMT R_HASH : E9EFF4BFAA5393217CA6B17755FC3E14
CMT ROM ID : F28A211FCEA7B19D

CMT : Sending 2nd loader...
Use : RAP3Gv2_2nd.fg , Rev : 0.0 Ver : 1.21.0
CMT Loader sent, Boot Ok
MCU Configuration
MCU Cfg Ok , 03
FLASHID : 225000EC , CMT , NOR
CMT Flash ID : 225000EC < SAMSUNG [SEC] => K8S6415ETB
FLCNT : 000000FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
FLASHID : 0000FFFF , CMT , MMC , EXT
CMT Flash ID : 0000FFFF < Bad Flash Type , if MMC - It Ok
Sending ALGO....
Use : RAP3Gv3_algo.fg , Rev : 0.0 Ver : 10.40.0
CMT Algo sent
PAPUBkeys blank (erased or HW failure)
Transmission mode : Dual (Ddr, TX2)

APE : Sending 2nd loader...
Use : helen3_2nd.fg , Rev : 0.0 Ver : 1.35.0
APE Loader sent, Boot Ok
MCU Configuration
MCU Cfg Ok , 03
FLASHID : 003600EC , APE ,
APE Flash ID : 003600EC < SAMSUNG [SEC] => K5E1212ACM [NAND]
ReqAlgo : APE , OMAP1710 UNISTORE-II-1.2.1 ALG
FLCNT : 01010000020000000600000000000000000000
Sending ALGO....
Use : h3_sam_nand_xsr.fg , Rev : 0.0 Ver : 1.47.0
APE Algo sent
APE PAPUB : 6E25F5B4407C1CBD0598994502C24000F3657C1882
Transmission mode : Dual (Ddr, TX2)

Boot Done!

CMT : Read NPC certificate...
Cert size : 0 byte(s)
CMT : Read CCC certificate...
Cert size : 0 byte(s)
CMT : Read HWC certificate...
Cert size : 0 byte(s)
CMT : Read VARIANT certificate...
Cert size : 0 byte(s)
APE : Read NPC certificate...
Cert size : 0 byte(s)
APE : Read CCC certificate...
Cert size : 0 byte(s)
APE : Read HWC certificate...
Cert size : 0 byte(s)
APE : Read VARIANT certificate...
Cert size : 0 byte(s)
- > No any CRT data (MCU damaged/CERT erased), skip saving


Init Service mode... Wait...

Init Service Mode Failed!
Setting FlashMode
FlashMode set Ok

1st boot Ok, C0

APE part info :
APE ASICID : 17100708
APE MODE ID : 00
APE PUB ID : B3F49EFC9358B6F1EA3EC39484C3A944674ECA7A
APE R_HASH : 49A97E826B93BA20B7ED0B082475C005
APE ROM ID : 1DFD66132C872FD4

CMT part info :
CMT ASICID : 000000010000022600010006000C192101002200
CMT EM0 ID : 00000232
CMT EM1 ID : 00000352
CMT PUB ID : 18200212E08F4951A968714EF698539663668887
CMT MODE ID : 00
CMT R_HASH : E9EFF4BFAA5393217CA6B17755FC3E14
CMT ROM ID : F28A211FCEA7B19D

CMT : Sending 2nd loader...
Use : RAP3Gv2_2nd.fg , Rev : 0.0 Ver : 1.21.0
CMT Loader sent, Boot Ok
MCU Configuration
MCU Cfg Ok , 03
FLASHID : 225000EC , CMT , NOR
CMT Flash ID : 225000EC < SAMSUNG [SEC] => K8S6415ETB
FLCNT : 000000FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
FLASHID : 0000FFFF , CMT , MMC , EXT
CMT Flash ID : 0000FFFF < Bad Flash Type , if MMC - It Ok
Sending ALGO....
Use : RAP3Gv3_algo.fg , Rev : 0.0 Ver : 10.40.0
CMT Algo sent
PAPUBkeys blank (erased or HW failure)
Transmission mode : Dual (Ddr, TX2)

APE : Sending 2nd loader...
Use : helen3_2nd.fg , Rev : 0.0 Ver : 1.35.0
APE Loader sent, Boot Ok
MCU Configuration
MCU Cfg Ok , 03
FLASHID : 003600EC , APE ,
APE Flash ID : 003600EC < SAMSUNG [SEC] => K5E1212ACM [NAND]
ReqAlgo : APE , OMAP1710 UNISTORE-II-1.2.1 ALG
FLCNT : 01010000020000000600000000000000000000
Sending ALGO....
Use : h3_sam_nand_xsr.fg , Rev : 0.0 Ver : 1.47.0
APE Algo sent
APE PAPUB : 6E25F5B4407C1CBD0598994502C24000F3657C1882
Transmission mode : Dual (Ddr, TX2)

Boot Done!

Partitioning....
Partitioning Ok...
Transmission mode : Dual (Ddr, TX2)
Erase : Processing rm43_v2.00.052.core
Found 4 areas to erase, erase group
Asic : CMT , Sub : NOR
CMT , NOR , Area : 0x00000000 - 0x0052FD25
CMT , NOR , Area : 0x006A0000 - 0x006BFFFF
CMT , NOR , Area : 0x006DF000 - 0x006EFFFF
CMT , NOR , Area : 0x00700000 - 0x007EFFFF
Using TimeOut : 7 min ( 430 sec )
Erasing, wait.....
CMT : Group erase Ok
Found 4 areas to erase, erase group
Asic : APE , Sub : NAND
APE , NAND , Area : 0x00000000 - 0x0000FFFF
APE , NAND , Area : 0x00010000 - 0x0001FFFF
APE , NAND , Area : 0x00020000 - 0x000203FF
APE , NAND , Area : 0x00028000 - 0x02D3FFFF
Erasing, wait.....
APE : Group erase Ok
TIME : Erase time : 00:00:06
PrReq : NOR , 00
PrReq : NAND , 01030000B4407C00BD0598004502C2
Transmission mode : Dual (Ddr, TX2)
Write : Processing rm43_v2.00.052.core
CMT: Writing Hash CERT [NOLO]
CMT: Writing Hash CERT [KEYS]
CMT: Writing Hash CERT [PRIMAPP]
CMT: Writing Hash CERT [DSP0]
CMT: Writing Hash CERT [MCUSW]
CMT: Writing Hash CERT [ADL]
CMT: Writing Hash CERT [PASUBTOC]
CMT: Writing Hash CERT [PAPUBKEYS]
APE: Writing Hash CERT [KEYS]
APE: Writing Hash CERT [X-LOADER]
APE: Writing Hash CERT [PRIMAPP]
APE: Writing Hash CERT [SOS+LOADER]
APE: Writing Hash CERT [ADL]
APE: Writing Hash CERT [SOS+XZIP]
APE: Writing Hash CERT [PASUBTOC]
APE: Writing Hash CERT [PAPUBKEYS]
APE: Writing Hash CERT [SOS*CORE]
APE: Writing Hash CERT [SOS+ROFS]
APE: Writing Hash CERT [SOS+ROFX]
Total writen 1231 blocks
TIME : Write time : 00:03:38

PrReq : NOR , 00
PrReq : NAND , 01030000B4407C00BD0598004502C2

Partitioning....
Partitioning Ok...
Transmission mode : Dual (Ddr, TX2)
Erase : Processing RM43_V2.00.052.05.variant
Selected FlashSettings : Manual
Files Set for Flashing :
MCU : rm43_v2.00.052.core
PPM : RM43_V2.00.052.05.variant
Check FlashFiles, Please, wait...
-> SWversion check skipped : Dead mode selected

Backup enabled, Will read Certificates now...
Setting FlashMode
FlashMode set Ok

1st boot Ok, C0

APE part info :
APE ASICID : 17100708
APE MODE ID : 00
APE PUB ID : B3F49EFC9358B6F1EA3EC39484C3A944674ECA7A
APE R_HASH : 49A97E826B93BA20B7ED0B082475C005
APE ROM ID : 1DFD66132C872FD4

CMT part info :
CMT ASICID : 000000010000022600010006000C192101002200
CMT EM0 ID : 00000232
CMT EM1 ID : 00000352
CMT PUB ID : 18200212E08F4951A968714EF698539663668887
CMT MODE ID : 00
CMT R_HASH : E9EFF4BFAA5393217CA6B17755FC3E14
CMT ROM ID : F28A211FCEA7B19D

CMT : Sending 2nd loader...
Use : RAP3Gv2_2nd.fg , Rev : 0.0 Ver : 1.21.0
CMT Loader sent, Boot Ok
MCU Configuration
MCU Cfg Ok , 03
FLASHID : 225000EC , CMT , NOR
CMT Flash ID : 225000EC < SAMSUNG [SEC] => K8S6415ETB
FLCNT : 000000FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
FLASHID : 0000FFFF , CMT , MMC , EXT
CMT Flash ID : 0000FFFF < Bad Flash Type , if MMC - It Ok
Sending ALGO....
Use : RAP3Gv3_algo.fg , Rev : 0.0 Ver : 10.40.0
CMT Algo sent
PAPUBkeys blank (erased or HW failure)
Transmission mode : Dual (Ddr, TX2)

APE : Sending 2nd loader...
Use : helen3_2nd.fg , Rev : 0.0 Ver : 1.35.0
APE Loader sent, Boot Ok
MCU Configuration
MCU Cfg Ok , 03
FLASHID : 003600EC , APE ,
APE Flash ID : 003600EC < SAMSUNG [SEC] => K5E1212ACM [NAND]
ReqAlgo : APE , OMAP1710 UNISTORE-II-1.2.1 ALG
FLCNT : 01010000020000000600000000000000000000
Sending ALGO....
Use : h3_sam_nand_xsr.fg , Rev : 0.0 Ver : 1.47.0
APE Algo sent
APE PAPUB : 6E25F5B4407C1CBD0598994502C24000F3657C1882
Transmission mode : Dual (Ddr, TX2)

Boot Done!

CMT : Read NPC certificate...
Cert size : 0 byte(s)
CMT : Read CCC certificate...
Cert size : 0 byte(s)
CMT : Read HWC certificate...
Cert size : 0 byte(s)
CMT : Read VARIANT certificate...
Cert size : 0 byte(s)
APE : Read NPC certificate...
Cert size : 0 byte(s)
APE : Read CCC certificate...
Cert size : 0 byte(s)
APE : Read HWC certificate...
Cert size : 0 byte(s)
APE : Read VARIANT certificate...
Cert size : 0 byte(s)
- > No any CRT data (MCU damaged/CERT erased), skip saving


Init Service mode... Wait...

Init Service Mode Failed!
Setting FlashMode
FlashMode set Ok

1st boot Ok, C0

APE part info :
APE ASICID : 17100708
APE MODE ID : 00
APE PUB ID : B3F49EFC9358B6F1EA3EC39484C3A944674ECA7A
APE R_HASH : 49A97E826B93BA20B7ED0B082475C005
APE ROM ID : 1DFD66132C872FD4

CMT part info :
CMT ASICID : 000000010000022600010006000C192101002200
CMT EM0 ID : 00000232
CMT EM1 ID : 00000352
CMT PUB ID : 18200212E08F4951A968714EF698539663668887
CMT MODE ID : 00
CMT R_HASH : E9EFF4BFAA5393217CA6B17755FC3E14
CMT ROM ID : F28A211FCEA7B19D

CMT : Sending 2nd loader...
Use : RAP3Gv2_2nd.fg , Rev : 0.0 Ver : 1.21.0
CMT Loader sent, Boot Ok
MCU Configuration
MCU Cfg Ok , 03
FLASHID : 225000EC , CMT , NOR
CMT Flash ID : 225000EC < SAMSUNG [SEC] => K8S6415ETB
FLCNT : 000000FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
FLASHID : 0000FFFF , CMT , MMC , EXT
CMT Flash ID : 0000FFFF < Bad Flash Type , if MMC - It Ok
Sending ALGO....
Use : RAP3Gv3_algo.fg , Rev : 0.0 Ver : 10.40.0
CMT Algo sent
PAPUBkeys blank (erased or HW failure)
Transmission mode : Dual (Ddr, TX2)

APE : Sending 2nd loader...
Use : helen3_2nd.fg , Rev : 0.0 Ver : 1.35.0
APE Loader sent, Boot Ok
MCU Configuration
MCU Cfg Ok , 03
FLASHID : 003600EC , APE ,
APE Flash ID : 003600EC < SAMSUNG [SEC] => K5E1212ACM [NAND]
ReqAlgo : APE , OMAP1710 UNISTORE-II-1.2.1 ALG
FLCNT : 01010000020000000600000000000000000000
Sending ALGO....
Use : h3_sam_nand_xsr.fg , Rev : 0.0 Ver : 1.47.0
APE Algo sent
APE PAPUB : 6E25F5B4407C1CBD0598994502C24000F3657C1882
Transmission mode : Dual (Ddr, TX2)

Boot Done!

Partitioning....
Partitioning Ok...
Transmission mode : Dual (Ddr, TX2)
Erase : Processing rm43_v2.00.052.core
Found 4 areas to erase, erase group
Asic : CMT , Sub : NOR
CMT , NOR , Area : 0x00000000 - 0x0052FD25
CMT , NOR , Area : 0x006A0000 - 0x006BFFFF
CMT , NOR , Area : 0x006DF000 - 0x006EFFFF
CMT , NOR , Area : 0x00700000 - 0x007EFFFF
Using TimeOut : 7 min ( 430 sec )
Erasing, wait.....
CMT : Group erase Ok
Found 4 areas to erase, erase group
Asic : APE , Sub : NAND
APE , NAND , Area : 0x00000000 - 0x0000FFFF
APE , NAND , Area : 0x00010000 - 0x0001FFFF
APE , NAND , Area : 0x00020000 - 0x000203FF
APE , NAND , Area : 0x00028000 - 0x02D3FFFF
Erasing, wait.....
APE : Group erase Ok
TIME : Erase time : 00:00:06
PrReq : NOR , 00
PrReq : NAND , 01030000B4407C00BD0598004502C2
Transmission mode : Dual (Ddr, TX2)
Write : Processing rm43_v2.00.052.core
CMT: Writing Hash CERT [NOLO]
CMT: Writing Hash CERT [KEYS]
CMT: Writing Hash CERT [PRIMAPP]
CMT: Writing Hash CERT [DSP0]
CMT: Writing Hash CERT [MCUSW]
CMT: Writing Hash CERT [ADL]
CMT: Writing Hash CERT [PASUBTOC]
CMT: Writing Hash CERT [PAPUBKEYS]
APE: Writing Hash CERT [KEYS]
APE: Writing Hash CERT [X-LOADER]
APE: Writing Hash CERT [PRIMAPP]
APE: Writing Hash CERT [SOS+LOADER]
APE: Writing Hash CERT [ADL]
APE: Writing Hash CERT [SOS+XZIP]
APE: Writing Hash CERT [PASUBTOC]
APE: Writing Hash CERT [PAPUBKEYS]
APE: Writing Hash CERT [SOS*CORE]
APE: Writing Hash CERT [SOS+ROFS]
APE: Writing Hash CERT [SOS+ROFX]
Total writen 1231 blocks
TIME : Write time : 00:03:38

PrReq : NOR , 00
PrReq : NAND , 01030000B4407C00BD0598004502C2

Partitioning....
Partitioning Ok...
Transmission mode : Dual (Ddr, TX2)
Erase : Processing RM43_V2.00.052.05.variant
Found 1 areas to erase, erase group
Asic : APE , Sub : NAND
APE , NAND , Area : 0x01D90000 - 0x02D3FFFF
Erasing, wait.....
APE : Group erase Ok
TIME : Erase time : 00:00:01
PrReq : NOR , 00
PrReq : NAND , 01030000B4407C00BD0598004502C2
Transmission mode : Dual (Ddr, TX2)
Write : Processing RM43_V2.00.052.05.variant
APE: Writing Hash CERT [SOS+ROFX]
Total writen 1885 blocks
TIME : Write time : 00:02:31

PrReq : NOR , 00
PrReq : NAND , 01030000B4407C00BD0598004502C2


Init Service mode... Wait...

Reading Phone Info....
Connected phone - Nokia N91-1
Software Info: V w33_06w24v2
24-07-06
RM-43
(c) Nokia.
IMEI: 12345610654321?
Product code:
Checking...
SimLock status : SimLock is Ok
Security status : Security is Ok
Read Info Done!
Settings After Flash Defaults...
ProductTuneSet...OK!
SwUpgradeSet...OK!
AfterFlash operations done ;D
Connect phone on selected interface...

Connect phone on selected interface...

Phone found!
Series 60 Device detected!
read info... - Ok



Will Write RPL keys now...
Check RPL file...
NPC Data found! (CMT)
Variant Data found!
Setting FlashMode
FlashMode set Ok

1st boot Ok, C0

APE part info :
APE ASICID : 17100708
APE MODE ID : 00
APE PUB ID : B3F49EFC9358B6F1EA3EC39484C3A944674ECA7A
APE R_HASH : 49A97E826B93BA20B7ED0B082475C005
APE ROM ID : 1DFD66132C872FD4

CMT part info :
CMT ASICID : 000000010000022600010006000C192101002200
CMT EM0 ID : 00000232
CMT EM1 ID : 00000352
CMT PUB ID : 18200212E08F4951A968714EF698539663668887
CMT MODE ID : 00
CMT R_HASH : E9EFF4BFAA5393217CA6B17755FC3E14
CMT ROM ID : F28A211FCEA7B19D

CMT : Sending 2nd loader...
Use : RAP3Gv2_2nd.fg , Rev : 0.0 Ver : 1.21.0
CMT Loader sent, Boot Ok
MCU Configuration
MCU Cfg Ok , 03
FLASHID : 225000EC , CMT , NOR
CMT Flash ID : 225000EC < SAMSUNG [SEC] => K8S6415ETB
FLCNT : 00000000000000000000000000000000000000
FLASHID : 0000FFFF , CMT , MMC , EXT
CMT Flash ID : 0000FFFF < Bad Flash Type , if MMC - It Ok
Sending ALGO....
Use : RAP3Gv3_algo.fg , Rev : 0.0 Ver : 10.40.0
CMT Algo sent
CMT PAPUB : B2E0D53F2FDDF1FC8E55510130F0D0677135243595
Transmission mode : Dual (Ddr, TX2)

Boot Done!

Preparing for write certificates...

Switching to CMT...

CMT : NPC erase Ok
Writing NPC... Ok

CMT : VARIANT erase Ok
Writing VARIANT... Ok


Done!


После чего в логе было видно, что Imei восстановить удалось.
Чекнул тело:

Checking StartUp data ...
-----------------------

SDD Key status : SDData Damaged!!!!! :(
- > Do REPAIR SDD , Local SX4 if needed

SimLock status : SimLock is Ok
Security status : Security is Ok
-----------------------

PA_SimLock Version :
PA_SL phone detected


После чего последовали стандартные процедуры

Repair SD procedure started...

Phone Imei: 358353000421215
Setting FlashMode
FlashMode set Ok

1st boot Ok, C0

APE part info :
APE ASICID : 17100708
APE MODE ID : 00
APE PUB ID : B3F49EFC9358B6F1EA3EC39484C3A944674ECA7A
APE R_HASH : 49A97E826B93BA20B7ED0B082475C005
APE ROM ID : 1DFD66132C872FD4

CMT part info :
CMT ASICID : 000000010000022600010006000C192101002200
CMT EM0 ID : 00000232
CMT EM1 ID : 00000352
CMT PUB ID : 18200212E08F4951A968714EF698539663668887
CMT MODE ID : 00
CMT R_HASH : E9EFF4BFAA5393217CA6B17755FC3E14
CMT ROM ID : F28A211FCEA7B19D

CMT : Sending 2nd loader...
CMT Loader sent, Boot Ok
rap= 18200212E08F4951A968714EF698539663668887
hash= E9EFF4BFAA5393217CA6B17755FC3E14
key= 571177572880B4567FDE8BD5A1BBDF7BCB6EA77D

Init Service mode... Wait...

Key file updated...
Check phone mode...
Phone already in Test mode, skip change...
Writing Super Dongle Key... Ok
Done!


Чек:

Checking StartUp data ...
-----------------------
SDD Key status : SDData is Ok
SimLock status : SimLock is Ok

Security status : Security Damaged!!!!! :(
- > Do Local SX4 or Server SX4 , Upload Tune ( checkbox or manual )



Local SX4 procedure started...

Phone Imei: 358353000421215
Use custom key...
Step 1...
Step 2...
Step 3...
SX4 Auth - Ok
Upload PM checked
Uploading RF/Battery tune to phone...
Using : RM-43.pm
Operating mode is OK, no need change...

Field 1
Record 0 write - Ok
Record 1 write - Ok
Record 2 write - Ok
Record 4 write - Ok
Record 5 write - Ok
Record 6 write - Ok
Record 8 write - Ok
Record 13 write - Ok
Record 15 write - Ok
Record 16 write - Ok
Record 18 write - Ok
Record 20 write - Ok
Record 22 write - Ok
Record 23 write - Ok
Record 24 write - Ok
Record 25 write - Ok
Record 29 write - Ok
Field 309
Record 0 write - Ok
Record 1 write - Ok
Record 2 write - Ok
Record 4 write - Ok
Record 5 write - Ok
Record 7 write - Ok
Record 8 write - Ok
Record 17 write - Ok

Check ST_SECURITY now...
Security status : ST_SECURITY => OK

Done!

Elapsed: 00:00:01


И в конце получаем полностью рабочий телефон:hi:

Checking StartUp data ...
-----------------------
SDD Key status : SDData is Ok
SimLock status : SimLock is Ok
Security status : Security is Ok
-----------------------

PA_SimLock Version :
PA_SL phone detected

Done!



Паша, не знаю в чем было дело, то ли действительно глюк тела, или глюк новой версии продукта (в данном случае работал с 35 версией бест).
Но главное, результат:drinks:
Всем спасибо:hi: