N73 Security Damaged!

[MobileLine]

Привет всем!
Принесли N73 с проблемой Security Damaged!С утра мучаюсь не получается.
Best v1.31 пробовал через интерфейс джаф и юфс.
Сhek:

Скрытый текст: Показать

Read and Check phone data...
Checking BUS...
Switch jaf to FlashMode...
FlashMode set Ok
Booting phone...

BOOT 1ST   : C0

APE part info : 
APE ASICID   : 17100708
APE MODE ID : 00
APE PUB ID    : EC91E30D82D253CCEB5DEB72CD737D3A3726056E
APE R_HASH  : 49A97E826B93BA20B7ED0B082475C005
APE ROM ID  : 1DFD66132C872FD4

CMT part info : 
CMT ASICID   : 000000010000022600010006010C192101003000
CMT EM0 ID  : 00000295
CMT EM1 ID  : 00000B21
CMT PUB ID  : 19200111489C0154DF4248BDC1553DEDAAC752CD
CMT MODE ID : 00
CMT R_HASH  : BAF3A9C3DBFA8454937DB77F2B8852B1
CMT ROM ID  : 273F6D55DFAAF68F

CMT : Sending 2nd loader...
Use : RAP3Gv3_2nd.fg  ,  Rev : 0.0  Ver : 10.42.0 
CMT Loader sent, Boot Ok
MCU configuration
CMT Flash ID : 22E800EC < SAMSUNG [SEC] => K5G2829ATC
FLASHID : 22E800EC , CMT , NOR
FLCNT   : 00000000000000000000000000000000000000
CMT Flash ID : 0000FFFF < Bad Flash Type , if MMC - It Ok
FLASHID : 0000FFFF , CMT , MMC , EXT
TransmissionReq : 16 bit, Single
TransmissionReq : Accepted, 16 bit, Single
Sending ALGO....
Use : RAP3Gv3_algo.fg  ,  Rev : 0.0  Ver : 10.40.0 
CMT Algo sent!
TransmissionReq : 32 bit, Dual
TransmissionReq : Accepted, 32 bit, Dual
PAPUBKeys : 5E8D0D504A0902E261268C14FCD8A2C9093523BCBD

APE : Sending 2nd loader...
Use : helen3_2nd.fg  ,  Rev : 0.0  Ver : 1.35.0 
APE Loader sent, Boot Ok
MCU configuration
APE Flash ID : 00A100EC < SAMSUNG [SEC] => K5E1G12ACM [NAND]
FLASHID : 00A100EC , APE , NAND
FLCNT   : 010100FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Sending ALGO....
Use : h3_sam_nand_xsr.fg  ,  Rev : 0.0  Ver : 1.47.0 
APE Algo sent!
TransmissionReq : 32 bit, Dual
TransmissionReq : Accepted, 32 bit, Dual
PAPUBKeys : 5E8D0D504A0902E261268C14FCD8A2C9093523BCBD
Boot done!


Switch jaf to FBUS...
FbusMode set Ok

SDD Key status : SDData is Ok
SimLock status : SimLock is Ok

Security status : Security Damaged!!!!! :(
- > Do Local SX4 or Server SX4 , Upload Tune ( checkbox or manual )

-----------------------

PA_SimLock Version :
PA_SL phone detected


Done!

Connect phone on selected interface...

Phone found!
Series 60 Device detected!
read info...  - Ok

Info:

Скрытый текст: Показать

Reading Phone Info....
Connected phone -    Nokia N73
Software ver : V 05wk47v61.1 09-07-08 RM-133 (c) Nokia.  
IMEI    :      353640010651160
Ape Ver :      
APE Var :      
APE ADSP:      
DSP Ver :      scarfe_mc.05wk46v50p2
APE Test:      
PPM     :      
CNT     :      
Product SN   :     SBH144666
Product code :     0529607
Base Prd.code:     0527006
Module code  :     0202855
Long Prod.SN :     
Hardware info=======
HWID  : 6000
Retu  : 15
Tahvo : 21
Batery: 4275 mV
Camera: 
CMT BT: 
APE BT: 
APE HW: 
LCDVer: 
RF ic : 17191719
Lock info ===========
IMEI       : 353640010651160
IMEI spNet : 
IMEI svNet : 

Conf key     : 0000000000000000
Provider key : 2440700000000000
Provider    : AT&T;U.S.A. (3650)
Counters   : Key 0  [3] , Fbus 0  [10]
Blocks      : 7

LOCK STATUS :
=============================
BLK : 1
Lock1:Open Lock2:Open Lock3:Open Lock4:Open Lock5:Open
BLK : 2
Lock1:Open Lock2:Open Lock3:Open Lock4:Open Lock5:Open
BLK : 3
Lock1:Open Lock2:Open Lock3:Open Lock4:Open Lock5:Open
BLK : 4
Lock1:Open Lock2:Open Lock3:Open Lock4:Open Lock5:Open
BLK : 5
Lock1:Open Lock2:Open Lock3:Open Lock4:Open Lock5:Open
BLK : 6
Lock1:Open Lock2:Open Lock3:Open Lock4:Open Lock5:Open
BLK : 7
Lock1:Open Lock2:Open Lock3:Open Lock4:Open Lock5:Open
=============================
LOCKS :  All Open
=============================
User code : Crypted
UserDataExLevel : Full [PhoneBook, Calendar, PWD, SMS, Gallery] 

Done!

Local SX4 aut:

Скрытый текст: Показать

Local SX4 procedure started...

Phone Imei: 353640010651160
Key file exists, no need to read...
Step 1...
Step 2...
Step 3...
SX4 Auth - Ok
Upload PM checked
Uploading RF/Battery tune to phone...
Using : RM-133.pm
Operating mode is OK, no need change...

Field 1
   Record 0 write - Ok
   Record 2 write - Ok
   Record 4 write - Ok
   Record 6 write - Ok
   Record 8 write - Ok
   Record 13 write - Ok
   Record 16 write - Ok
   Record 18 write - Ok
   Record 20 write - Ok
   Record 22 write - Ok
   Record 23 write - Ok
   Record 24 write - Ok
   Record 25 write - Ok
   Record 26 write - Ok
   Record 28 write - Ok
   Record 29 write - Ok
   Record 31 write - Ok
   Record 33 write - Ok
   Record 34 write - Ok
   Record 44 write - Ok
Field 309
   Record 0 write - Ok
   Record 1 write - Ok
   Record 2 write - Ok
   Record 4 write - Ok
   Record 5 write - Ok
   Record 7 write - Ok
   Record 8 write - Ok
   Record 17 write - Ok
   Record 22 write - Ok

Check ST_SECURITY now...
Security status : ST_SECURITY => DAMAGED :(
- > Try different PM files or "Restore CCC/HWC" option

Done!

Elapsed: 00:00:20

Upload done

Restore CCC/HWC:

Скрытый текст: Показать

Will Write CCC/HWC keys now...

Using : RM-133.rpl
Variant Data found!

Checking BUS...
Switch jaf to FlashMode...
FlashMode set Ok
Booting phone...

BOOT 1ST   : C0

APE part info : 
APE ASICID   : 17100708
APE MODE ID : 00
APE PUB ID    : EC91E30D82D253CCEB5DEB72CD737D3A3726056E
APE R_HASH  : 49A97E826B93BA20B7ED0B082475C005
APE ROM ID  : 1DFD66132C872FD4

CMT part info : 
CMT ASICID   : 000000010000022600010006010C192101003000
CMT EM0 ID  : 00000295
CMT EM1 ID  : 00000B21
CMT PUB ID  : 19200111489C0154DF4248BDC1553DEDAAC752CD
CMT MODE ID : 00
CMT R_HASH  : BAF3A9C3DBFA8454937DB77F2B8852B1
CMT ROM ID  : 273F6D55DFAAF68F

CMT : Sending 2nd loader...
Use : RAP3Gv3_2nd.fg  ,  Rev : 0.0  Ver : 10.42.0 
CMT Loader sent, Boot Ok
MCU configuration
CMT Flash ID : 22E800EC < SAMSUNG [SEC] => K5G2829ATC
FLASHID : 22E800EC , CMT , NOR
FLCNT   : 00000000000000000000000000000000000000
CMT Flash ID : 0000FFFF < Bad Flash Type , if MMC - It Ok
FLASHID : 0000FFFF , CMT , MMC , EXT
TransmissionReq : 16 bit, Single
TransmissionReq : Accepted, 16 bit, Single
Sending ALGO....
Use : RAP3Gv3_algo.fg  ,  Rev : 0.0  Ver : 10.40.0 
CMT Algo sent!
TransmissionReq : 32 bit, Dual
TransmissionReq : Accepted, 32 bit, Dual
PAPUBKeys : 5E8D0D504A0902E261268C14FCD8A2C9093523BCBD

APE : Sending 2nd loader...
Use : helen3_2nd.fg  ,  Rev : 0.0  Ver : 1.35.0 
APE Loader sent, Boot Ok
MCU configuration
APE Flash ID : 00A100EC < SAMSUNG [SEC] => K5E1G12ACM [NAND]
FLASHID : 00A100EC , APE , NAND
FLCNT   : 010100FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Sending ALGO....
Use : h3_sam_nand_xsr.fg  ,  Rev : 0.0  Ver : 1.47.0 
APE Algo sent!
TransmissionReq : 32 bit, Dual
TransmissionReq : Accepted, 32 bit, Dual
PAPUBKeys : 5E8D0D504A0902E261268C14FCD8A2C9093523BCBD
Boot done!

Preparing for write certificates...

CMT : Read NPC certificate...
Repair Data Check Error [0539256]

CMT cert write done!

Done!

Switch jaf to FBUS...
FbusMode set Ok

Elapsed: 00:01:17

Connect phone on selected interface...

Phone found!
Series 60 Device detected!
read info...  - Ok

Так же пробовал залит разные VARIANT_DATA,не помогло.
Решил стереть полностью и восстановить.
Стер,прошил,записал полный PM без 308 блока,восстановил NPC_DATA с раннее сохраненного бекапа,сделал SDD,SL repair,Local SX4,Restor CCC/HWC,не помогло.

При Restor CCC/HWC выдает ошибку
CMT : Read NPC certificate...
Repair Data Check Error [0539256]
Раньше такую проблему решал MX-Key,но сейчас из-за того что нет HTI не коннектится сервером,что посоветуете,есть вариант или все таки заказать HTi?

[slavik.gul]

такой же лежит,пробовал и бестом и мх,не помогло.грешу на железо..

[alnext]

был такой после жидкости. помогло: замена обоих кп и омапа. что конкретно было из них не знаю.

[uo5oq]

Принесли N73 с проблемой Security Damaged!С утра мучаюсь не получается...

есть вариант или все таки заказать HTi?

у MX-KEY есть хорошая серверная функция для этого, Restore certificates кажется называется.
Запишите приложеный RPL, потом сделайте настоящую SX4 и сразу запишите приложеный PM.
Если железо ОК, должно помочь.

[Undespoted]

Был как то такой...Помог JayDi....Взял сбекапенный RPL любой с N73 ,с Variant data и в блокноте добавил родной NPC девайса.Запись,всё прошло....До этого
Делал и SX4, HWC\ccc,Cyclonom,бестолку....Мож поможет. кнопка у MX (Restore certificates)Правит вариант дата,отправкой на сервер

[MobileLine]

у MX-KEY есть хорошая серверная функция для этого, Restore certificates кажется называется.
Запишите приложеный RPL, потом сделайте настоящую SX4 и сразу запишите приложеный PM.
Если железо ОК, должно помочь.

Да я знаю про мх,не раз выручал,просто у меня не было HTI,сервисные функции в ауте,сегодня получил HTI,если получится установить геморную яичку то завтра попробую.

Был как то такой...Помог JayDi....Взял сбекапенный RPL любой с N73 ,с Variant data и в блокноте добавил родной NPC девайса.Запись,всё прошло....До этого
Делал и SX4, HWC\ccc,Cyclonom,бестолку....Мож поможет. кнопка у MX (Restore certificates)Правит вариант дата,отправкой на сервер

Да я сделал так,пробовал разные Variant data,но не помогло.


Пробовал записать RM-133_STF_www.UO5OQ.com,ни бест ни mx не записывает,ругается на файл
бест:

Скрытый текст: Показать

Will Write RPL keys now...
Check RPL file...
NMP RPL Detected, converting...
Convert done!
Variant Data found!
CMLA key found!
No any part for write! check file, Write Settings

Мх:

Скрытый текст: Показать

Invalid RPL file!
missing NPC data in the RPL file, CERT write skipped.

Mx-Hti делаю Recover cert прога выдает ошибку

Скрытый текст: Показать

APE Data :
SYSTEM ASIC ID: 17100708 [OMAP1710 ver: 2.0]
ASIC MODE ID: 00
PUBLIC ID: EC91E30D82D253CCEB5DEB72CD737D3A3726056E
ROOT KEY HASH: 49A97E826B93BA20B7ED0B082475C00500000000
ROM ID: 1DFD66132C872FD4
CMT Data :
SYSTEM ASIC ID: 000000010000022600010006010C192101003000 [RAP3G ver: PA 3.0]
EM0 ID: 00000295
EM1 ID: 00000B21
PUBLIC ID: 19200111489C0154DF4248BDC1553DEDAAC752CD
ASIC MODE ID: 00
ROOT KEY HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
ROM ID: 273F6D55DFAAF68F
SecondaryBoot: RAP3Gv3_2nd.fg [BB5] version: 9.11.1 revision: 0.0 size: 0x3C00
Supported Ids: 0103192101003000, 010C192101003000, 0103192101013000, 010C192101013000, 0103192101003100, 010C192101003100, 0303192101023000, 030C192101023000, 0303192101033000, 030C192101033000, 0103192101001101, 010C192101001101, 0003192101001002, 000C192101001002, 0013192101001002, 001C192101001002
eBB5ProtocolType: OLD
Storage0: 00EC 22E8 - 0000 6921 [Samsung K8S2815ETB,128 Mbits] type: FLASH,NOR, asic:CMT
Storage content: 0000 0000 0000 0000 0000 0000 0000 0000
Storage1: FFFF 0000 - 0000 0000 type: MMC, asic:CMT
TransmissionMode: 16Bit
Algorithm: RAP3Gv3_algo.fg [BB5 ALGORITHM] version: 9.50.0 revision: 0.0 size: 0x23010
Supported Ids: 0103192101003000, 010C192101003000, 0103192101013000, 010C192101013000, 0103192101003100, 010C192101003100, 0303192101023000, 030C192101023000, 0303192101033000, 030C192101033000, 0003192101002000, 000C192101002000, 0003192101002100, 000C192101002100, 0003192101002200, 000C192101002200, 0003192101012200, 000C192101012200, 0103192101001101, 010C192101001101, 0003192101001002, 000C192101001002, 0013192101001002, 001C192101001002
CMT PAPUBKEYS HASH: 5E8D0D504A0902E261268C14FCD8A2C9093523BC
TransmissionMode: DDR&TX2

Begin Certificate Request ...

[InternalErrorFault] CERT [0539256] data not found in database (case id=0xCE02)

[InternalErrorFault] CERT [0539256] data not found in database (case id=0xCE02)

[InternalErrorFault] CERT [0539256] data not found in database (case id=0xCE02)
Socket error (10061): Connection refused

Оказывается бест сконвектировал RM-133_STF_www.UO5OQ.com в RM-133_STF_www.UO5OQ.com_plain,бестом не получилось записать но мх записал

Скрытый текст: Показать

Updating CMLA_KEY...OK
MXKEY [MxKey Team HTI Flasher Interface (WinUSB) 3], SN: C08124B7
Using device: HTI, FW ver: 00.24, SN: 00006C48
Connection status: UHCI:HUB:USB 2.00 (Full-speed)
Driver: WinUSB, ver: 3.5.0.0 
Module ver: 1.0.0.19228(10-11-2011), Library ver: 1.0.0.13150(10-11-2011)
APE Data :
SYSTEM ASIC ID: 17100708 [OMAP1710 ver: 2.0]
ASIC MODE ID: 00
PUBLIC ID: EC91E30D82D253CCEB5DEB72CD737D3A3726056E
ROOT KEY HASH: 49A97E826B93BA20B7ED0B082475C00500000000
ROM ID: 1DFD66132C872FD4
CMT Data :
SYSTEM ASIC ID: 000000010000022600010006010C192101003000 [RAP3G ver: PA 3.0]
EM0 ID: 00000295
EM1 ID: 00000B21
PUBLIC ID: 19200111489C0154DF4248BDC1553DEDAAC752CD
ASIC MODE ID: 00
ROOT KEY HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
ROM ID: 273F6D55DFAAF68F
 SecondaryBoot: RAP3Gv3_2nd.fg [BB5]  version: 9.11.1 revision: 0.0 size: 0x3C00
 Supported Ids: 0103192101003000, 010C192101003000, 0103192101013000, 010C192101013000, 0103192101003100, 010C192101003100, 0303192101023000, 030C192101023000, 0303192101033000, 030C192101033000, 0103192101001101, 010C192101001101, 0003192101001002, 000C192101001002, 0013192101001002, 001C192101001002
eBB5ProtocolType: OLD
Storage0: 00EC 22E8  - 0000 6921 [Samsung K8S2815ETB,128 Mbits] type: FLASH,NOR, asic:CMT 
Storage content: 0000 0000 0000 0000 0000 0000 0000 0000 
Storage1: FFFF 0000  - 0000 0000  type: MMC, asic:CMT 
TransmissionMode: 16Bit
 Algorithm: RAP3Gv3_algo.fg [BB5 ALGORITHM]  version: 9.50.0 revision: 0.0 size: 0x23010
 Supported Ids: 0103192101003000, 010C192101003000, 0103192101013000, 010C192101013000, 0103192101003100, 010C192101003100, 0303192101023000, 030C192101023000, 0303192101033000, 030C192101033000, 0003192101002000, 000C192101002000, 0003192101002100, 000C192101002100, 0003192101002200, 000C192101002200, 0003192101012200, 000C192101012200, 0103192101001101, 010C192101001101, 0003192101001002, 000C192101001002, 0013192101001002, 001C192101001002
CMT PAPUBKEYS HASH: 5E8D0D504A0902E261268C14FCD8A2C9093523BC
TransmissionMode: DDR&TX2
 SecondaryBoot: helen3_2nd.fg [BB5]  version: 1.35.0 revision: 0.0 size: 0x3500
 Supported Ids: 17100700, 17100701, 17100702, 17100703, 17100704, 17100708
Storage0: 00EC 00A1  - 0080 0015 [Samsung KAL00T00EM-DGYY/66,1 Gbits] type: FLASH,NAND, asic:APE 
Storage content: FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF 
 Algorithm: h3_sam_nand_xsr.fg [OMAP1710 UNISTORE-II-1.2.1  ALG]  version: 1.49.0 revision: 0.0 size: 0x13AA0
 Supported Ids: 17100700, 17100701, 17100702, 17100703, 17100704, 17100708
APE PAPUBKEYS HASH: 5E8D0D504A0902E261268C14FCD8A2C9093523BC
Updating CMT  VARIANT ...OK
Prog.status for Asic APE ...
 NOR: OK
 NAND: OK
 
Phone type: RM-133 (Nokia N73)
SW version: V 05wk47v61.1 09-07-08 RM-133 (c) Nokia.   
Imei plain: 35364001065116-0
Product code: 0529607
Battery voltage: 4758 mV, current: 8 mA
Language Pack:
- not available.

SLPA ver[1]: PA_SL (15 digit NCK)
 
SIMLOCK seems to be valid
SUPERDONGLE_KEY[MX] seems to be valid
SIMLOCK_TEST passed
SECURITY_TEST failed!

Далее бестом прошел Local SX4 и записал N73_RM-133_PM_www.UO5OQ.com.pm

Скрытый текст: Показать

Local SX4 procedure started...

Phone Imei: 353640010651160
Key file exists, no need to read...
Step 1...
Step 2...
Step 3...
SX4 Auth - Ok
Done!

Operating mode is OK, no need change...

Field 1
   Record 0 write - Ok
   Record 2 write - Ok
   Record 4 write - Ok
   Record 6 write - Ok
   Record 8 write - Ok
   Record 13 write - Ok
   Record 16 write - Ok
   Record 18 write - Ok
   Record 20 write - Ok
   Record 22 write - Ok
   Record 23 write - Ok
   Record 24 write - Ok
   Record 25 write - Ok
   Record 26 write - Ok
   Record 28 write - Ok
   Record 29 write - Ok
   Record 31 write - Ok
   Record 33 write - Ok
   Record 34 write - Ok
   Record 44 write - Ok
Field 2
   Record 0 write - Ok
Field 4
   Record 0 write - Ok
   Record 1 write - Ok
   Record 2 write - Ok
   Record 3 write - Ok
   Record 4 write - Ok
   Record 5 write - Ok
   Record 6 write - Ok
   Record 9 write - Ok
Field 8
   Record 0 write - Ok
   Record 1 write - Ok
   Record 2 write - Ok
   Record 3 write - Ok
   Record 6 write - Ok
   Record 7 write - Ok
Field 11
   Record 0 write - Ok
   Record 1 write - Ok
   Record 2 write - Ok
   Record 3 write - Ok
   Record 4 write - Ok
   Record 5 write - Ok
   Record 6 write - Ok
   Record 7 write - Ok
   Record 8 write - Ok
   Record 9 write - Ok
   Record 10 write - Ok
   Record 11 write - Ok
   Record 12 write - Ok
   Record 13 write - Ok
   Record 14 write - Ok
   Record 15 write - Ok
   Record 16 write - Ok
   Record 17 write - Ok
   Record 18 write - Ok
   Record 19 write - Ok
   Record 20 write - Ok
   Record 21 write - Ok
   Record 22 write - Ok
   Record 23 write - Ok
   Record 24 write - Ok
   Record 25 write - Ok
   Record 26 write - Ok
   Record 27 write - Ok
   Record 28 write - Ok
   Record 29 write - Ok
   Record 30 write - Ok
   Record 31 write - Ok
   Record 32 write - Ok
   Record 33 write - Ok
   Record 34 write - Ok
   Record 35 write - Ok
   Record 36 write - Ok
   Record 37 write - Ok
   Record 38 write - Ok
   Record 39 write - Ok
   Record 40 write - Ok
   Record 41 write - Ok
   Record 42 write - Ok
   Record 43 write - Ok
   Record 44 write - Ok
   Record 45 write - Ok
   Record 46 write - Ok
   Record 47 write - Ok
   Record 48 write - Ok
   Record 49 write - Ok
   Record 50 write - Ok
   Record 51 write - Ok
   Record 52 write - Ok
   Record 53 write - Ok
   Record 54 write - Ok
   Record 55 write - Ok
   Record 56 write - Ok
   Record 57 write - Ok
   Record 58 write - Ok
   Record 59 write - Ok
   Record 60 write - Ok
   Record 61 write - Ok
   Record 62 write - Ok
   Record 63 write - Ok
   Record 64 write - Ok
   Record 65 write - Ok
   Record 66 write - Ok
   Record 67 write - Ok
   Record 68 write - Ok
   Record 69 write - Ok
   Record 70 write - Ok
   Record 71 write - Ok
   Record 72 write - Ok
   Record 73 write - Ok
   Record 74 write - Ok
   Record 75 write - Ok
   Record 76 write - Ok
   Record 77 write - Ok
   Record 78 write - Ok
   Record 79 write - Ok
   Record 80 write - Ok
   Record 81 write - Ok
   Record 82 write - Ok
   Record 83 write - Ok
   Record 84 write - Ok
   Record 85 write - Ok
   Record 86 write - Ok
   Record 87 write - Ok
   Record 88 write - Ok
   Record 89 write - Ok
   Record 90 write - Ok
   Record 91 write - Ok
   Record 92 write - Ok
   Record 93 write - Ok
   Record 94 write - Ok
   Record 95 write - Ok
   Record 96 write - Ok
   Record 97 write - Ok
   Record 98 write - Ok
   Record 99 write - Ok
   Record 100 write - Ok
   Record 101 write - Ok
   Record 102 write - Ok
   Record 103 write - Ok
   Record 104 write - Ok
   Record 105 write - Ok
   Record 106 write - Ok
   Record 107 write - Ok
   Record 108 write - Ok
   Record 109 write - Ok
   Record 110 write - Ok
   Record 111 write - Ok
   Record 112 write - Ok
   Record 113 write - Ok
   Record 114 write - Ok
   Record 115 write - Ok
   Record 116 write - Ok
   Record 117 write - Ok
   Record 118 write - Ok
   Record 119 write - Ok
   Record 120 write - Ok
   Record 121 write - Ok
   Record 122 write - Ok
   Record 123 write - Ok
   Record 124 write - Ok
Field 17
   Record 0 write - Ok
Field 44
   Record 0 write - Ok
Field 50
   Record 0 write - Ok
Field 54
   Record 0 write - Ok
Field 88
   Record 0 write - Ok
Field 92
   Record 0 write - Ok
Field 96
   Record 0 write - Ok
Field 107
   Record 0 write - Ok
   Record 1 write - Ok
   Record 2 write - Ok
   Record 3 write - Ok
   Record 25 write - Ok
Field 193
   Record 2 write - Ok
   Record 3 write - Ok
   Record 4 write - Ok
   Record 9 write - Ok
Field 239
   Record 0 write - Ok
   Record 1 write - Ok
Field 309
   Record 0 write - Ok
   Record 1 write - Ok
   Record 2 write - Ok
   Record 4 write - Ok
   Record 5 write - Ok
   Record 7 write - Ok
   Record 8 write - Ok
   Record 17 write - Ok
   Record 22 write - Ok
Field 322
   Record 0 write - Ok
Field 334
   Record 0 write - Ok

Done!

Elapsed: 00:00:06

опять Security status : Security Damaged!!!!!
- > Do Local SX4 or Server SX4 , Upload Tune ( checkbox or manual )

Записал первый сохраненный бекап rpl:

Скрытый текст: Показать

Will Write RPL keys now...
Check RPL file...
NPC Data found! (CMT)
Variant Data found!
Checking BUS...
Switch jaf to FlashMode...
FlashMode set Ok
Booting phone...

BOOT 1ST   : C0

APE part info : 
APE ASICID   : 17100708
APE MODE ID : 00
APE PUB ID    : EC91E30D82D253CCEB5DEB72CD737D3A3726056E
APE R_HASH  : 49A97E826B93BA20B7ED0B082475C005
APE ROM ID  : 1DFD66132C872FD4

CMT part info : 
CMT ASICID   : 000000010000022600010006010C192101003000
CMT EM0 ID  : 00000295
CMT EM1 ID  : 00000B21
CMT PUB ID  : 19200111489C0154DF4248BDC1553DEDAAC752CD
CMT MODE ID : 00
CMT R_HASH  : BAF3A9C3DBFA8454937DB77F2B8852B1
CMT ROM ID  : 273F6D55DFAAF68F

CMT : Sending 2nd loader...
Use : RAP3Gv3_2nd.fg  ,  Rev : 0.0  Ver : 10.42.0 
CMT Loader sent, Boot Ok
MCU configuration
CMT Flash ID : 22E800EC < SAMSUNG [SEC] => K5G2829ATC
FLASHID : 22E800EC , CMT , NOR
FLCNT   : 00000000000000000000000000000000000000
CMT Flash ID : 0000FFFF < Bad Flash Type , if MMC - It Ok
FLASHID : 0000FFFF , CMT , MMC , EXT
TransmissionReq : 16 bit, Single
TransmissionReq : Accepted, 16 bit, Single
Sending ALGO....
Use : RAP3Gv3_algo.fg  ,  Rev : 0.0  Ver : 10.40.0 
CMT Algo sent!
TransmissionReq : 32 bit, Dual
TransmissionReq : Accepted, 32 bit, Dual
PAPUBKeys : 5E8D0D504A0902E261268C14FCD8A2C9093523BCBD

APE : Sending 2nd loader...
Use : helen3_2nd.fg  ,  Rev : 0.0  Ver : 1.35.0 
APE Loader sent, Boot Ok
MCU configuration
APE Flash ID : 00A100EC < SAMSUNG [SEC] => K5E1G12ACM [NAND]
FLASHID : 00A100EC , APE , NAND
FLCNT   : 010100FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Sending ALGO....
Use : h3_sam_nand_xsr.fg  ,  Rev : 0.0  Ver : 1.47.0 
APE Algo sent!
TransmissionReq : 32 bit, Dual
TransmissionReq : Accepted, 32 bit, Dual
PAPUBKeys : 5E8D0D504A0902E261268C14FCD8A2C9093523BCBD
Boot done!

Preparing for write certificates...

Switching to CMT... 

Erase NPC... Ok
Writing NPC... Ok

Erase CMT VARIANT... Ok
Writing CMT VARIANT... Ok

CMT cert write done!

Done!

Connect phone on selected interface...

Switch jaf to FBUS...
FbusMode set Ok

Phone found!
Series 60 Device detected!
read info...  - Ok

И чудо

Checking StartUp data ...
-----------------------
SDD Key status : SDData is Ok
SimLock status : SimLock is Ok
Security status : Security is Ok
-----------------------

PA_SimLock Version :
PA_SL phone detected

Done!