[GUIDE] How to restore IMEI, Baseband, MAC, fix NVRAM WARNING and fix NVDATA CORRUPTED on MERLIN ? (Redmi Note 9 / Redmi 10X 4G)

[VD171]

Hello guys, can anyone help me i need some guidance. My redmi 9 got hard bricked but i was able to repair him with SP flash tool. Sadly in the process i lost my IMEI. Also was able to repair him with Maui meta. Everything works fine, but now in WiFi list, i have this WiFi error called nvram warning 0x10. Im trying to fix ir but its seems Impossible. Already rooted the phone, trying to use some WiFi fix files but when i use the apk es file explorer, i follow tutorial but on data folder i dont find any nvram folder. I think its was deleted on the hard brick repair process. So i created a new nvram file with scatter file that was inside fastboot rom folder. Made some changes that were asked from a internet tutorial, and save the new nvram.img in the fastboot rom folder, I changed too some informations about scatter file. Some words that were written like none changed for nvram.img and false for true. Then I saved.
After that i flashed with SP flash, ONLY the nvram file and everything went fine as you can see in the pictures. Once more i installed twrp, root, but when I go to the folder data, i still can't find nvram folder. I don't know what I'm doing wrong. As anybody have a solution for this?

Just write a new wifi MAC using modem meta.
Good luck

 

[Rlucifer.01]

You're right. But i was thinking if i do what you say, write WiFi mac address, then IMEI recover with maui, then i could install TWRP make recovery still with eng rom instaled? And after that install normal Rom with sp flash, after that install TWRP again and install the backup made inside the normal rom? Or will backup made in eng mode be deleted after running the official rom? I could also backup the files inside an sd card.

Why not use sp flash tool readback ? That will make it easier

 

[Nicolasjfb]

Why not use sp flash tool readback ? That will make it easier

Well i did that. I explained that in my first message. I created nvram.img from scatter file that was inside fastboot rom folder. Opened scatter file with block note changed two things from nvram text and then used sp flash tool readback to save the nvram on the computer. After that i putted nvram.img inside the official rom folder and changed scatter so i could add nvram. Then inside sp flash i only marked the nvram option and clicked download and everything went okay. But then still no nvram partition inside the data partition, i checked with root installed and es explorer apk.

Well I'm already in meta mode now what? Where i do write WiFi mac address, and first where do i get him.

Edit: think i found it now i write it where?

 

[Rlucifer.01]

Well i did that. I explained that in my first message. I created nvram.img from scatter file that was inside fastboot rom folder. Opened scatter file with block note changed two things from nvram text and then used sp flash tool readback to save the nvram on the computer. After that i putted nvram.img inside the official rom folder and changed scatter so i could add nvram. Then inside sp flash i only marked the nvram option and clicked download and everything went okay. But then still no nvram partition inside the data partition, i checked with root installed and es explorer apk.

Well I'm already in meta mode now what? Where i do write WiFi mac address, and first where do i get him.

Edit: think i found it now i write it where?

It should be around there check everything until you find it, update wifi mac

 

[Nicolasjfb]

It should be around there check everything until you find it, update wifi mac

Think i found it Is it here down below? Where it says random mac address i Change the number for my wifi mac address, then i click on update mac. That's it? And after that i can just recover IMEI with maui meta, then flash oficial rom with sp flash or before leaving the eng rom i need to do a backup?

Edit: i did what i said now i got a pop up message saying to reboot phone.

 

[Rlucifer.01]

Think i found it Is it here down below? Where it says random mac address i Change the number for my wifi mac address, then i click on update mac. That's it? And after that i can just recover IMEI with maui meta, then flash oficial rom with sp flash or before leaving the eng rom i need to do a backup?

Check your wifi , is it good or still have error ? For imei you can check by setting, is it still there or its blank, if it blank just use maui meta to write it back

 

[Nicolasjfb]

Check your wifi , is it good or still have error ? For imei you can check by setting, is it still there or its blank, if it blank just use maui meta to write it back

Where do i see that? Im not seeing any WiFi list to connect. About IMEI it shows up blanck will recover with maui meta again. I think i can only write him on sim card 2 if i try to write on sim card 1 someone told me it can give a error after flashing normal rom saying nvdata corrupted. Last time i did it that way.

 

[Rlucifer.01]

Where do i see that? Im not seeing any WiFi list to connect. About IMEI it shows up blanck will recover with maui meta again. I think i can only write him on sim card 2 if i try to write on sim card 1 someone told me it can give a error after flashing normal rom saying nvdata corrupted. Last time i did it that way.

Yes, if your planning to use stock miui you can only use sim2, dual sim only work with custom rom with custom kernel and patched md1img..

 

[Nicolasjfb]

Yes, if your planning to use stock miui you can only use sim2, dual sim only work with custom rom with custom kernel and patched md1img..

found the WiFi list and no nvram error x10 is not showing up anymore. Thank you so much dude. Now only need to write IMEI and then flash normal rom with sp flash and that's it correct?


Edit: I'm seeing the IMEI toturial the guy it's saying before recover IMEI i need to erase nvram and nvdata with fastboot command. Do i do that or just skip that step and write only IMEi?

 

[Rlucifer.01]

Your welcome, yes everything should be fine, when you using sp flash tool dont use format all+download, is gonna format your nvram then losing imei and mac wifi once more

 

[Rlucifer.01]

found the WiFi list and no nvram error x10 is not showing up anymore. Thank you so much dude. Now only need to write IMEI and then flash normal rom with sp flash and that's it correct?


Edit: I'm seeing the IMEI toturial the guy it's saying before recover IMEI i need to erase nvram and nvdata with fastboot command. Do i do that or just skip that step and write only IMEi?

If you erase it, you will lose you mac wifi then it need you to update the mac address again

 

[Nicolasjfb]

Your welcome, yes everything should be fine, when you using sp flash tool dont use format all+download, is gonna format your nvram then losing imei and mac wifi once more

Alright then. Thank you for everything. You are a life saver . The IMEI toturial that im seeing says before writing IMEI back i need to erase nvram and data first with fastboot command. Can i just skip that part? Doing what it says will not delete the WiFi Mac address or nvram and nvdata? I think i need to find another toturial, right? I can't trust this guy!

 

[Rlucifer.01]

I have tried write imei once,its simpel turn off your phone, open maui meta click connect then plug your phone to pc, make sure you already installed the driver

 

[Nicolasjfb]

I have tried write imei once,its simpel turn off your phone, open maui meta click connect then plug your phone to pc, make sure you already installed the driver

Ok once more thank you for everything. I hope all this conversation between us helps other people in the future with the same problems.

Stay safe.

 

[Seif El-Sayed]

Warnings:

- This guide requires the backup be done when the IMEI was present!
- NEVER try to flash in "format all" mode ! Otherwise, you will LOSE all secure and identifying infos for your device. Like IMEI.
- Keep your backup files safe and secure ! If you can, encrypt them.
- Never try to share your backups or your security and privacy will be compromised.
- USE AT YOUR OWN RISK. I AM NOT RESPONSIBLE FOR YOUR ACTIONS.

What this guide does ?
- Restores IMEI.
- Restores Baseband/RADIO/Modem.
- Restores Wi-Fi MAC.
- Restores Bluetooth MAC.
- Fixes "NVRAM WARNING: ERR 0x10" error.
- Fixes NV Data corrupted error.
- Fixes unknown baseband.
- Fixes null IMEI.

How to backup ?
You can backup the listed partitions using TWRP, PBRP, DD, SP Flash Tool or anyway you want.
I suggest you to use your favorite tool.

How to restore ?
You can restore the listed partitions using TWRP, PBRP, DD, SP Flash Tool or anyway you want.
I suggest you to use same tool of backup.

Partition: nvcfg​

Description: This partition stores variable configs of NVDATA and NVRAM.​

Size: 32.768 KiB (32 MiB)​

Block: /dev/block/mmcblk0p11​

Start address: 0xa4a2000​

Length: 0x2000000​

Partition: nvdata​

Description: This partition stores variable data of secure and identifying infos for your device. Like IMEI, WiFi MAC, Bluetooth MAC, calibration data and others.​

Size: 65.536 KiB (64 MiB)​

Block: /dev/block/mmcblk0p12​

Start address: 0xc4a2000​

Length: 0x4000000​

Partition: nvram​

Description: This partition stores persistent data of secure and identifying infos for your device. Like IMEI, WiFi MAC, Bluetooth MAC, calibration data and others.​

Size: 65.536 KiB (64 MiB)​

Block: /dev/block/mmcblk0p21​

Start address: 0x19f00000​

Length: 0x4000000​

Partition: persist​

Description: This partition stores persistent data for factory reset protection. Like google account and miaccount/micloud.​

Size: 49.152 KiB (48 MiB)​

Block: /dev/block/mmcblk0p13​

Start address: 0x104a2000​

Length: 0x3000000​

Partition: proinfo​

Description: This partitions stores persistent data of default structure for NVRAM/RADIO/MODEM/BASEBAND.​

Size: 3.072 KiB (3 MiB)​

Block: /dev/block/mmcblk0p19​

Start address: 0x18200000​

Length: 0x300000​

Partition: protect1 (or protect_f)​

Description: This partition stores variable data of SIM/RADIO/MODEM/BASEBAND settings and infos.​

Size: 8.192 KiB (8 MiB)​

Block: /dev/block/mmcblk0p15​

Start address: 0x164a2000​

Length: 0x800000​

Partition: protect2 (or protect_s)​

Description: This partition stores variable data of SIM/RADIO/MODEM/BASEBAND settings and infos.​

Size: 11.640 KiB (11,36 MiB)​

Block: /dev/block/mmcblk0p16​

Start address: 0x16ca2000​

Length: 0xb5e000​

Do you need help with your MERLIN device ?
Read this FAQ: https://forum.xda-developers.com/t/...for-merlin-redmi-note-9-redmi-10x-4g.4225163/

I have backup with twrp and when trying to restore and open the phone again then doing factory reset everything is lost and i lost call sensor too

 

[Seif El-Sayed]

Can u send me mau

I have tried write imei once,its simpel turn off your phone, open maui meta click connect then plug your phone to pc, make sure you already installed the driver

Can u send me. Maui meta

 

[leiniercs]

Yes, if your planning to use stock miui you can only use sim2, dual sim only work with custom rom with custom kernel and patched md1img..

Where can I find a patched md1img.img file for Redmi 9A?

 

[VD171]

Where can I find a patched md1img.img file for Redmi 9A?

[ENGINEERING][ROM][OFFICIAL] OFFICIAL Engineering Firmware for DANDELION (Redmi 9A / Redmi 9AT)

Works with: - Xiaomi Redmi 9A - Xiaomi Redmi 9AT Does NOT work with: - Xiaomi Redmi 10A Build Date: 2020/07/03 Android Version: QP1A.190711.020 Display ID: dandelion-userdebug 10 QP1A.190711.020 246 test-keys Build Fingerprint...

forum.xda-developers.com

[V2][ENGINEERING][ROM][OFFICIAL] OFFICIAL Engineering Firmware for DANDELION (Redmi 9A / Redmi 9AT)

Works with: - Xiaomi Redmi 9A - Xiaomi Redmi 9AT Does NOT work with: - Xiaomi Redmi 10A Build Date: 2020/09/20 Android Version: QP1A.190711.020 Display ID: AL2615-lancelot-V016-Q-0918 Build Fingerprint...

forum.xda-developers.com

 

[satvik_090]

Sir, finally I can fix my IMEI dual sim without a kernel, the bootloader has also been relocked

but the strange thing I feel is that my serial number doesn't match the one on the boxView attachment 5557949

Bro please help me how to repair dual imei please before a month of my imei loss

 

[matteo555]

I created nvram.img from scatter file

scatter file from eng_rom (engeneered_rom) ????

by that, nvram.img have inside all stored IMEI and WIFI-mac_address replacement and modification that has done in eng_rom, right ?
After nvram.img is saved, (that means the device is stil under eng_rom) after that, you must flash device into stock_rom, correct ?