Xperia L3 RPMB

[mysticall]

First I want to congratulate you on the great project.

I have an Xperia L3 phone that just stopped working.
I took a dump from the old EMMC and burned it to another EMMC.
I connected via the uart protocol to the phone:

`Baud Rate:
921600 8 N 1 N

Pll init start...
mtcmos Start..
mtcmos Done!
Pll init Done!
DATE_CODE_YY:1, DATE_CODE_WW:A
[SegCode] Segment Code:0x8, PROJECT_CODE:0x0, FAB_CODE:0x2, RW_STA:0x0, CTL:0x0, DCM:0x4
[HT22] : 2 0x1 0x1 done
0:0x80000000, 1:0x2200, 2:0x1, 3:0x110002, 4:0x42000000, STA:0x0, S:0x1, FAB0:0x6762, FAB11:0x0
A:0x0, B:0x3F, C:0x40, D:0x1F, E:0x1, F:0x3, G:0x2
[PMIC]Preloader Start
[PMIC]MT6357 CHIP Code = 0x5721
[PMIC]POWER_HOLD :0x1
[PMIC]TOP_RST_STATUS[0x152]=0x4F
[PMIC]PONSTS[0xC]=0x4
[PMIC]POFFSTS[0xE]=0x80
[PMIC]PGSTATUS0[0x14]=0xFFFE
[PMIC]PSOCSTATUS[0x16]=0x0
[PMIC]BUCK_OC_SDN_STATUS[0x1434]=0x0
[PMIC]BUCK_OC_SDN_EN[0x1444]=0x29F
[PMIC]THERMALSTATUS[0x18]=0x0
[PMIC]STRUP_CON4[0xA1C]=0x0
[PMIC]TOP_RST_MISC[0x14C]=0x1300
[PMIC]TOP_CLK_TRIM[0x38E]=0x6AC0
[PMIC]just_rst = 0
No EFUSE SW Load
[PMIC]disable usbdl wo battery
[PMIC]pmic_wdt_set Reg[0x14C]=0x1321
[PMIC]Init done
[PLFM] Init PWRAP: OK(0)
[PLFM] Init PMIC: OK(0)
[PLFM] chip_hw_ver[CA00], chip_sw_ver[0]
[RTC]switch to dcxo
[PMIC]IsUsbCableIn 1
[PLFM] USB/charger boot!
[PMIC]POWER_HOLD :0x1
pl chr:1 monitor:1 plchr:1 gain:1038
[PLFM] Init Boot Device: OK(0)
[MEM] 1st complex R/W mem test pass (start addr:0x56000000)
[MEM] 2nd complex R/W mem test pass (start addr:0x80000000, 0x0 @Rank1)
[EFUSE] Start Check ...

[LIB] Loading SEC config
[LIB] Name =
[LIB] Config = 0x0, 0x22
0x31,0x41,0x35,0x32
[LIB] seclib_img_auth_load_sig [LIB] CFG read size '0x2000' '0x3C'
0x4D4D4D4D
[LIB] SEC CFG 'v4' exists
[LIB] HW DEC
[LIB] SEC CFG is valid. Lock state is 1
[XBOOT] SONY Warmboot reason: 0h
DDR_INFO:LogVer=0002,type=0003,MR4=0x101,0x101,0x0,0x0,MR5=0x1,MR6=0x6,MR7=0x0,MR8=0x5F
DDR_RANK:LogVer=0001,sdram0_cs0=0x800,sdram0_cs1=0x0,sdram1_cs0=0x400,sdram1_cs1=0x0
[AB] Current boot: Preloader_a
[AB] ab_suffix: _a, ab_retry: 0
[AB] boot_successfully is 1!
[LIB] S-CHIP
sbc_en = 1
sbc_en = 1
[SBC] cert verify, part = sspm_a, img = tinysys-sspm...ok
[SBC] img auth ok
[LIB] S-CHIP
sbc_en = 1
sbc_en = 1
[SBC] cert verify, part = lk_a, img = lk...ok
[SBC] img auth ok
[LIB] S-CHIP
sbc_en = 1
sbc_en = 1
[SBC] cert verify, part = tee_a, img = atf...ok
[SBC] img auth ok
[LIB] S-CHIP
sbc_en = 1
sbc_en = 1
[SBC] cert verify, part = tee_a, img = tee...ok
[SBC] img auth ok
BOOT_REASON: 1
BOOT_MODE: 0
BOOT_TIME: 1305

[BLDR] jump to 0x56000000
[BLDR] <0x56000000>=0xEA000007
[BLDR] <0x56000004>=0xEA00ACCF
ATF[1.586919]INFO: BOOT_REASON: 1
ATF[1.587379]INFO: IS_ABNORMAL_BOOT: 0
ATF[1.587892]INFO: CPUxGPT reg(0)
ATF[0.000000]INFO: [systimer] CNTCR_REG(0x1905)
ATF[0.000555]INFO: Secondary bootloader is AArch32
ATF[0.001202]INFO: bl31_plat_arch_setup()
ATF[0.001753]INFO: mmap atf buffer : 0x7e740000, 0x40000
ATF[0.006319]INFO: abnormal_boot: 0x0, cflag: 0xffffffff
ATF[0.008766]INFO: mt_log_setup
ATF[0.009188]INFO: -mt_log_buf_start: 0x7e740000
ATF[0.009824]INFO: -mt_log_buf_size: 0x40000
ATF[0.010416]INFO: -buf_addr: 0x7e740200
ATF[0.010966]INFO: -buf_size: 0x13e00
ATF[0.011482]INFO: -write_pos: 0x0
ATF[0.011967]INFO: -read_pos: 0x0
ATF[0.012441]INFO: -atf_buf_lock: 0x0
ATF[0.012958]INFO: -log_buf_end : 0x7e753fff
ATF[0.013550]INFO: -ATF_EXCEPT_BUF_SIZE_PER_CPU : 0x1000
ATF[0.014271]INFO: -ATF_EXCEPT_BUF_SIZE : 0x8000
ATF[0.014907]INFO: -PLATFORM_CORE_COUNT : 0x8
ATF[0.015510]INFO: -except_write_pos_per_cpu[0]: 0x7e774000
ATF[0.016264]INFO: -except_write_pos_per_cpu[1]: 0x7e775000
ATF[0.017018]INFO: -except_write_pos_per_cpu[2]: 0x7e776000
ATF[0.017771]INFO: -except_write_pos_per_cpu[3]: 0x7e777000
ATF[0.018525]INFO: -except_write_pos_per_cpu[4]: 0x7e778000
ATF[0.019279]INFO: -except_write_pos_per_cpu[5]: 0x7e779000
ATF[0.020033]INFO: -except_write_pos_per_cpu[6]: 0x7e77a000
ATF[0.020787]INFO: -except_write_pos_per_cpu[7]: 0x7e77b000
ATF[0.021541]INFO: -crash_flag : 0x41544641
ATF[0.022122]INFO: -crash_log_addr : 0x7e754000
ATF[0.022747]INFO: -crash_log_size : 0x20000
ATF[0.023366]INFO: ATF log service is registered (0x7e740000, aee:0x7e77c000)
ATF[0.024288]NOTICE: BL31_BASE=0x54600800, BL31_TZRAM_SIZE=0x31800
ATF[0.025085]NOTICE: TZRAM2_BASE=0x54632000, TZRAM2_SIZE=0x1d000
ATF[0.025861]NOTICE: BL31: v1.4(debug):ded2d68
ATF[0.026442]NOTICE: BL31: Built : 10:07:38, Feb 1 2019
ATF[0.027131]INFO: platform_setup_cpu()
ATF[0.027659]INFO: addr of cci_adb400_dcm_config: 0x0
ATF[0.028337]INFO: addr of sync_dcm_config: 0x0
ATF[0.028951]INFO: mp0_spmc: 0x3a00203b
ATF[0.029479]INFO: mp1_spmc: 0x640c043
ATF[0.030015]ERROR: PCM reset failed
ATF[0.030503]NOTICE: call pccif1_hw_init
ATF[0.031006]INFO: BL31: Initializing runtime services
ATF[0.031698]WARNING: BL31: cortex_a53: errata workaround for 835769 was missing!
ATF[0.032642]WARNING: BL31: cortex_a53: errata workaround for 843419 was missing!
ATF[0.033590]INFO: BL31: cortex_a53: errata workaround for 855873 was applied
ATF[0.034546]NOTICE: tbase_init_secure_context mpidr=0x80000000
ATF[0.035298]INFO: BL31: Initializing BL32
ATF[0.035855]NOTICE: tbase_init
ATF[0.036288]NOTICE: *** tbase boot cfg ***
ATF[0.036846]NOTICE: * magic : 0x434d4254
ATF[0.037557]NOTICE: * length : 0x80
ATF[0.038203]NOTICE: * version : 0x1
ATF[0.038838]NOTICE: * dRamBase : 0x40000000
ATF[0.039549]NOTICE: * dRamSize : 0xc0000000
ATF[0.040260]NOTICE: * secDRamBase : 0x7e980000
ATF[0.040971]NOTICE: * secDRamSize : 0x1100000
ATF[0.041671]NOTICE: * secIRamBase : 0x7e780000
ATF[0.042381]NOTICE: * secIRamSize : 0x200000
ATF[0.043071]NOTICE: * conf_mair_el3 : 0x4404ff
ATF[0.043760]NOTICE: * MSMPteCount : 0x4
ATF[0.044395]NOTICE: * MSMBase : 0x54627f10
ATF[0.045106]NOTICE: * gic_distributor_base : 0xc000000
ATF[0.045806]NOTICE: * gic_cpuinterface_base : 0xc100000
ATF[0.046506]NOTICE: * gic_version : 0x3
ATF[0.047142]NOTICE: * total_number_spi : 0x160
ATF[0.047798]NOTICE: * ssiq_number : 0x12f
ATF[0.048455]NOTICE: * flags : 0x0
ATF[0.049091]NOTICE: tbase init SPSR 0x1d3
ATF[0.049640]NOTICE: tbase SMC SPSR 1d1
ATF[0.050289]NOTICE: fc_h TBASE_SMC_FASTCALL_CONFIG_OK
ATF[0.050952]NOTICE: tbase_fastcall_handler TBASE_SMC_FASTCALL_CONFIG_OK
ATF[0.051825]NOTICE: tbase config ok 7f00000 1
ATF[0.054019]NOTICE: fc_h TBASE_SMC_FASTCALL_INPUT
ATF[0.054641]NOTICE: PLAT_TBASE_INPUT_HWIDENTITY
ATF[0.055285]NOTICE: fc_h TBASE_SMC_FASTCALL_INPUT
ATF[0.055905]NOTICE: PLAT_TBASE_INPUT_RNG
ATF[0.056449]NOTICE: fc_h TBASE_SMC_FASTCALL_INPUT
ATF[0.057069]NOTICE: PLAT_TBASE_INPUT_RNG
ATF[0.057611]NOTICE: fc_h TBASE_SMC_FASTCALL_INPUT
ATF[0.058232]NOTICE: PLAT_TBASE_INPUT_RNG
ATF[0.058774]NOTICE: fc_h TBASE_SMC_FASTCALL_INPUT
ATF[0.059395]NOTICE: PLAT_TBASE_INPUT_RNG
ATF[0.059937]NOTICE: fc_h TBASE_SMC_FASTCALL_INPUT
ATF[0.060558]NOTICE: PLAT_TBASE_INPUT_RNG
ATF[0.061101]NOTICE: fc_h TBASE_SMC_FASTCALL_INPUT
ATF[0.061721]NOTICE: PLAT_TBASE_INPUT_RNG
ATF[0.062263]NOTICE: fc_h TBASE_SMC_FASTCALL_INPUT
ATF[0.062884]NOTICE: PLAT_TBASE_INPUT_RNG
ATF[0.063426]NOTICE: fc_h TBASE_SMC_FASTCALL_INPUT
ATF[0.064047]NOTICE: PLAT_TBASE_INPUT_RNG
ATF[0.064741]NOTICE: Configuring Kinibi forwarded FIQs...
ATF[0.065433]NOTICE: fc_h TBASE_SMC_FASTCALL_RETURN
ATF[0.066073]NOTICE: tbase_fiqforward_configure: fwd-int 171 is on
ATF[0.066881]NOTICE: fc_h TBASE_SMC_FASTCALL_RETURN
ATF[0.067526]NOTICE: tbase_fiqforward_configure: fwd-int 182 is on
ATF[0.068335]NOTICE: fc_h TBASE_SMC_FASTCALL_RETURN
ATF[0.068980]NOTICE: tbase_fiqforward_configure: fwd-int 183 is on
ATF[0.069789]INFO: BL31: Preparing for EL3 exit to normal world
ATF[0.070573]INFO: Entry point address = 0x56000000
ATF[0.071230]INFO: SPSR = 0x1d3
ATF[0.071675]NOTICE: NS-SCR_EL3_EFIN=0x4
ATF[0.072189]NOTICE: S-SCR_EL3_EFIN=0x0
ATF[0.072695]NOTICE: WDT(171) is not Grp0, S-EL1 should handle it

Current RTC time:[2010/1/1 0:4:32]
[10] [HT22] : 2 0x1 0x1 done
[10] [PROFILE] ::: lvl(2) Devinfo Init takes 1 ms
[11] bootarg_addr: 0x548dda80, bootarg_size: 0x1693
[11] [PROFILE] ::: lvl(2) WDT Init takes 0 ms
[12] [PWRAP] pwrap_init_lk
[12] [PWRAP] is_pwrap_init_done 1
[12] [PWRAP] [PMIC_WRAP] pwrap_init already init, do nothing
[13] [PROFILE] ::: lvl(2) pmic_init takes 0 ms
[14] [PROFILE] ::: lvl(1) platform_early_init takes 5 ms
[14] calling constructors
[15] initializing heap
[15] initializing threads
[15] initializing dpc
[15] initializing timers
[16] creating bootstrap completion thread
[16] top of bootstrap2()
[16] thread: bootstrap2, bottom(stack) = 0x5611d454, limit(stack) = 0x5611b454
[17] initializing platform
[18] platform_init()
[53] [SD0] Size: 29820 MB, Max.Speed: 52000 kHz, blklen(512), nblks(61071360)
[54] [SD0] Initialized, eMMC50
[54] [mt_part_register_device]
[55] [partition init]
[55] [PROFILE] ::: lvl(2) NAND/EMMC init takes 37 ms
[63] [get_AB_OTA_param:2173] p_
DSI_exit_ULPS xxxxx
DSI_exit_ULPS xxxxx
DSI_exit_ULPS xxxxx
DSI_exit_ULPS xxxxx
DSI_exit_ULPS xxxxx
[337] [LK/LCM]nt36525 init_setting_vdo version :V02
[341] [PROFILE] ::: lvl(2) disp init takes 243 ms
SMART RESET: FALSE
rst from: unknown
kedump mini start
[342] atf ram dump address hi:0x0, adress lo:0xbff70000, size hi:0, size lo:524288
ATF[0.421328]INFO: Get ATF log buffer info. for AEE dump in LK.
ATF[0.422122]INFO: Buf addr:0x7e754000, buf size:131072, flag addr:0x7e740040, flag value:0x41544641
kedump: lkdump debug init ok
kedump: boot_reason(1)
RAM_CONSOLE. start: 0x10dc00, size: 0x800
RAM_CONSOLE. lk last status: 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0
RAM_CONSOLE. wdt_status 0x0, fiq_step 0x0, exp_type 0x0
kedump: last is not full pmic reset!
[349] [upmu_is_chr_det] 1
[349] < Kernel Power Off Charging Detection Ok>
[349] [PROFILE] ::: lvl(2) boot mode select takes 8 ms
[350] mt_get_logo_db_addr_pa: 0x5e900000
[378] [PROFILE] ::: lvl(2) load_logo takes 28 ms
[SBC] sec_func_init
rom_info_ver = 2
m_rom_info_ver = 20002
[SBC] S-CHIP
Image name matched
[SBC] sbc_en = 1
[SBC] sbc_en = 1
[393] [SBC] image logo auth init pass
[474] [SBC] img logo auth pass.
[475] [PROFILE] ::: lvl(2) logo verify takes 94 ms
[SBC] S-CHIP
Image name matched
[SBC] sbc_en = 1
[SBC] sbc_en = 1
[488] [SBC] image dtbo auth init pass
[493] [SBC] img dtbo auth pass.
[493] [PROFILE] ::: lvl(2) dtbo vfy takes 18 ms
ATF[0.572182]ERROR: mediatek_plat_sip_handler: unhandled N-Sec SMC (0x82000230)
[508] Boot Counter is 1180
XBOOT (1315-2605_X_Boot_MT6762_O1.MP7_30)
[ERROR @ keystore.c:375]:
Invalid counter rpmb: 4, cms: 4
[ERROR @ keystore.c:451]:
keystore check failed
[ERROR @ keystore.c:375]:
Invalid counter rpmb: 4, cms: 4
[ERROR @ keystore.c:467]:
keystore check failed
[ERROR @ ks_util.c:30]:
Failed to load keystore
[ERROR @ xboot_glue.c:329]:
Failed to load keystore
[ERROR @ xboot_glue.c:500]:
keystore_load failed, forcing SW service
[ERROR @ ta_interface.c:325]:
Unable to delete TA unit 2334
[579] [upmu_is_chr_det] 1
[579] charger_type: 1
Will invoke Sony service
[ERROR @ sony_boot_config_parser.c:537]:
MiscTA unit 60004 could not be read!
[ERROR @ sony_boot_config_parser.c:537]:
MiscTA unit 2227 could not be read!
[ERROR @ sony_boot_config_parser.c:740]:
None or incorrect vbus_pulse configuration!
Populate command line before entering service mode
[621] Verify OEM unlock flag Request
[628] Booting into XFL service...
[636] Kernel(1) zimage_size:0x759d92,dtb_addr:0x562118a2(dtb_size:0x16934)
[637] [LK] fdt setup addr:0x54000000 status:1!!!
[647] [PROFILE] ::: lvl(4) Overlay takes 8 ms
[647] [PROFILE] ::: lvl(3) early load dtb takes 19 ms
[664] [upmu_is_chr_det] 1
[961] [check_bat_protect_status]: check VBAT=4152 mV with 3450 mV
[962] [PROFILE] ::: lvl(2) battery init takes 468 ms
[962] [PROFILE] ::: lvl(2) RTC boot check Init takes 0 ms
[963] [PROFILE] ::: lvl(2) sw_env takes 0 ms
[964] [PROFILE] ::: lvl(1) platform_init takes 946 ms
[964] initializing target
[965] calling apps_init()
[965] Get commandline of Sony
[1982] [LK_BOOT] KERNEL partition magic not match
[2157] [LK_BOOT] ROOTFS partition magic not match
[2615] boot state: green
[2616] [LK] check_ota_result = 0
[2616] [LK] ota-fail
[2616] [PROFILE] ::: lvl(1) load xfl image takes 635 ms
[2653] XBoot publish Attestation SUCCESSFULLY
[2882] [PROFILE] ::: lvl(1) decompress_kernel takes 223 ms
start dump lk masp atag
dump sw sbc:0x22, sw sdl:0x0 , hw sbc: 1
dump lock_state, 0x1
[2906] [LK] non_secure_sram (0x10dc00, 0x4400)
[2907] [PROFILE] ::: lvl(0) 1st logo time 0 ms
[2907] [PROFILE] ::: lvl(0) boot_time takes 2907 ms
[2929] booting linux @ 0x40080000, ramdisk @ 0x55000000 (6970206)
[2930] cmdline: "console=tty0 console=ttyS0,921600n1 vmalloc=496M slub_max_or"
[2931] "der=0 slub_debug=OFZPU page_owner=on androidboot.hardware=mt"
[2932] "6765 maxcpus=8 firmware_class.path=/vendor/firmware has_batt"
[2933] "ery_removed=0 clk_ignore_unused androidboot.bootloader=xboo"
[2933] "t oemandroidboot.xboot=1315-2605_X_Boot_MT6762_O1.MP7_30 and"
[2934] "roidboot.serialno=HQ69AXXXXX startup=0x00000000 warmboot=0x0"
[2935] "0000000 oemandroidboot.babe09a9=00 oemandroidboot.babe137e=5"
[2936] "a oemandroidboot.securityflags=0x00000002 oemandroidboot.im"
[2937] "ei=352526101XXXXX oemandroidboot.phoneid=0000:352526101XXXXX"
[2938] "00 ta_info=4,16,256 lcm=1-nt36525_txd_qc fps=6000 vram=14811"
[2939] "136 androidboot.verifiedbootstate=green root=/dev/ram androi"
[2940] "dboot.slot_suffix=_a androidboot.slot=a androidboot.veritymo"
[2941] "de=enforcing bootopt=64S3,32N2,64N2 androidboot.selinux=perm"
[2941] "issive androidboot.meta_log_disable=0 printk.disable_uart=1 "
[2942] "bootprof.pl_t=1305 bootprof.lk_t=2907 boot_reason=1 androidb"
[2943] "oot.bootreason=usb gpt=1 usb2jtag_mode=0 mrdump_ddrsv=yes mr"
[2944] "dump_cb=0x10e800,0x1400".
[2961] Saving xboot log Successfully
[2962] If you can read this line, XBOOT is done. And there was much rejoicing.
[2968] lk boot time = 2907 ms
[2968] lk boot mode = 10
[2969] lk boot reason = usb
[2969] lk finished --> jump to linux kernel 64Bit

[2970]
[LK]jump to K64 0x40080000
ATF[3.048619]INFO: clear_all_on_mux
ATF[3.049108]INFO: SPM: enable SPMC mode
ATF[3.049663]INFO: save kernel info
ATF[3.050133]INFO: Kernel_EL 2
ATF[3.050563]NOTICE: Kernel is 64Bit
ATF[3.051037]NOTICE: pc=0x40080000, r0=0x54000000, r1=0x0
ATF[3.051738]INFO: BL3-1: Preparing for EL3 exit to normal world, Kernel
ATF[3.052620]INFO: BL3-1: Next image address = 0x40080000
ATF[3.053342]INFO: BL3-1: Next image spsr = 0x3c9
ATF[3.053981]INFO: el3_exit`

I stumbled upon your project.
I take rpmb.bin dump, but i'm a bit confused.

Port - Device detected :)
Preloader - CPU: MT6765/MT8768t(Helio P35/G35)
Preloader - HW version: 0x0
Preloader - WDT: 0x10007000
Preloader - Uart: 0x11002000
Preloader - Brom payload addr: 0x100a00
Preloader - DA payload addr: 0x201000
Preloader - CQ_DMA addr: 0x10212000
Preloader - Var1: 0x25
Preloader - Disabling Watchdog...
Preloader - HW code: 0x766
Preloader - Target config: 0xe5
Preloader - SBC enabled: True
Preloader - SLA enabled: False
Preloader - DAA enabled: True
Preloader - SWJTAG enabled: True
Preloader - EPP_PARAM at 0x600 after EMMC_BOOT/SDMMC_BOOT: False
Preloader - Root cert required: False
Preloader - Mem read auth: True
Preloader - Mem write auth: True
Preloader - Cmd 0xC8 blocked: True
Preloader - Get Target info
Preloader - BROM mode detected.
Preloader - HW subcode: 0x8a00
Preloader - HW Ver: 0xca00
Preloader - SW Ver: 0x0
Preloader - ME_ID: 7F79A0A190DE3A75029EA870ACF17B8D
Preloader - SOC_ID: 623A866BA79C4A4D432033B297054124C6269AD5736BB4BA3430EF35B335E8AF
Port - Device detected :)
DAXFlash - Uploading xflash stage 1 from MTK_AllInOne_DA_5.2152.bin
xflashext - Patching da1 ...
xflashext
xflashext - [LIB]: Error on patching da1 version check...
xflashext - Patching da2 ...
DAXFlash - Successfully uploaded stage 1, jumping ..
Preloader - Jumping to 0x200000
Preloader - Jumping to 0x200000: ok.
DAXFlash - Successfully received DA sync
DAXFlash - DRAM config needed for : 150100474436424d
DAXFlash - Sending emi data ...
DAXFlash - DRAM setup passed.
DAXFlash - Sending emi data succeeded.
DAXFlash - Uploading stage 2...
DAXFlash - Upload data was accepted. Jumping to stage 2...
DAXFlash - Successfully uploaded stage 2
DAXFlash - EMMC FWVer: 0x0
DAXFlash - EMMC ID: GD6BMB
DAXFlash - EMMC CID: 150100474436424d4201d60668054683
DAXFlash - EMMC Boot1 Size: 0x400000
DAXFlash - EMMC Boot2 Size: 0x400000
DAXFlash - EMMC GP1 Size: 0x0
DAXFlash - EMMC GP2 Size: 0x0
DAXFlash - EMMC GP3 Size: 0x0
DAXFlash - EMMC GP4 Size: 0x0
DAXFlash - EMMC RPMB Size: 0x400000
DAXFlash - EMMC USER Size: 0x747c00000
DAXFlash - HW-CODE : 0x766
DAXFlash - HWSUB-CODE : 0x8A00
DAXFlash - HW-VERSION : 0xCA00
DAXFlash - SW-VERSION : 0x0
DAXFlash - CHIP-EVOLUTION : 0x0
DAXFlash - DA-VERSION : 1.0
DAXFlash - Upload data was accepted. Jumping to stage 2...
DAXFlash - DA Extensions successfully added
sej - HACC init
sej - HACC run
sej - HACC terminate
sej - HACC init
sej - HACC run
sej - HACC terminate
sej - HACC init
sej - HACC run
sej - HACC terminate
Progress: |██████████████████████████████████████████████████| 100.0% Write (Sector 0x1 of 0x1, ) 0.03 MB/s
None

I can't access the RPMB information from the old EMMC.
Can I repair RPMB and what sequence should I follow?
Thanks.