[GUIDE] How to restore IMEI, Baseband, MAC, fix NVRAM WARNING and fix NVDATA CORRUPTED on MERLIN ? (Redmi Note 9 / Redmi 10X 4G)

Search This thread
May 14, 2014
14
5
Warnings:

- This guide requires the backup be done when the IMEI was present!
- NEVER try to flash in "format all" mode ! Otherwise, you will LOSE all secure and identifying infos for your device. Like IMEI.
- Keep your backup files safe and secure ! If you can, encrypt them.
- Never try to share your backups or your security and privacy will be compromised.
- USE AT YOUR OWN RISK. I AM NOT RESPONSIBLE FOR YOUR ACTIONS.


What this guide does ?

- Restores IMEI.
- Restores Baseband/RADIO/Modem.
- Restores Wi-Fi MAC.
- Restores Bluetooth MAC.
- Fixes "NVRAM WARNING: ERR 0x10" error.
- Fixes NV Data corrupted error.
- Fixes unknown baseband.
- Fixes null IMEI.

How to backup ?
You can backup the listed partitions using TWRP, PBRP, DD, SP Flash Tool or anyway you want.
I suggest you to use your favorite tool.

How to restore ?
You can restore the listed partitions using TWRP, PBRP, DD, SP Flash Tool or anyway you want.
I suggest you to use same tool of backup.

Partition: nvcfg
Description: This partition stores variable configs of NVDATA and NVRAM.​
Size: 32.768 KiB (32 MiB)​
Block: /dev/block/mmcblk0p11​
Start address: 0xa4a2000​
Length: 0x2000000​
2021-02-07_17.15.13.png

Partition: nvdata
Description: This partition stores variable data of secure and identifying infos for your device. Like IMEI, WiFi MAC, Bluetooth MAC, calibration data and others.​
Size: 65.536 KiB (64 MiB)​
Block: /dev/block/mmcblk0p12​
Start address: 0xc4a2000​
Length: 0x4000000​
2021-02-07_17.14.51.png

Partition: nvram
Description: This partition stores persistent data of secure and identifying infos for your device. Like IMEI, WiFi MAC, Bluetooth MAC, calibration data and others.​
Size: 65.536 KiB (64 MiB)​
Block: /dev/block/mmcblk0p21​
Start address: 0x19f00000​
Length: 0x4000000​
2021-02-07_17.15.59.png

Partition: persist
Description: This partition stores persistent data for factory reset protection. Like google account and miaccount/micloud.​
Size: 49.152 KiB (48 MiB)​
Block: /dev/block/mmcblk0p13​
Start address: 0x104a2000​
Length: 0x3000000​
2021-02-07_17.16.58.png

Partition: proinfo
Description: This partitions stores persistent data of default structure for NVRAM/RADIO/MODEM/BASEBAND.​
Size: 3.072 KiB (3 MiB)​
Block: /dev/block/mmcblk0p19​
Start address: 0x18200000​
Length: 0x300000​
2021-02-07_17.16.10.png

Partition: protect1 (or protect_f)
Description: This partition stores variable data of SIM/RADIO/MODEM/BASEBAND settings and infos.​
Size: 8.192 KiB (8 MiB)​
Block: /dev/block/mmcblk0p15​
Start address: 0x164a2000​
Length: 0x800000​
2021-02-07_17.16.27.png

Partition: protect2 (or protect_s)
Description: This partition stores variable data of SIM/RADIO/MODEM/BASEBAND settings and infos.​
Size: 11.640 KiB (11,36 MiB)​
Block: /dev/block/mmcblk0p16​
Start address: 0x16ca2000​
Length: 0xb5e000​
2021-02-07_17.16.48.png



:unsure: Do you need help with your MERLIN device ?
Read this FAQ: https://forum.xda-developers.com/t/...for-merlin-redmi-note-9-redmi-10x-4g.4225163/
Hi! First of all I want to thank you for all your contributions and help you've given to other users with this device

I wish I had read your posts before trying to fix my phone, it updated to MIUI 13 automatically and afterwards it kept turning itself off and randomly rebooting so I tried to flash the stock firmware again with SP Tools: ran into a couple of errors and did some stupid things like connecting the phone to the thunderbolt port instead of the USB ones and also did "Format whole flash except bootloader" but never pressed format all + download, somehow the device survived it all

Whenever I flash MIUI 13 the phone boots to recovery with "NVData is corrupted" message, I was able to unlock the bootloader and downgrade to MIUI 12.5 which apparently works perfectly fine (got wifi mac address, bluetooth, SIM1 is recognized and working for calls data etc) but now both IMEIs are shown as "Unknown" and I still can't update to MIUI 13

I really don't understand how the sim cards are still working, but I'm afraid to try fixing them because afaik the SIM1 is protected by RSA encryption

Do you have any advice for this situation?
 
Last edited:

Top Liked Posts

  • There are no posts matching your filters.
  • 3
    Warnings:

    - This guide requires the backup be done when the IMEI was present!
    - NEVER try to flash in "format all" mode ! Otherwise, you will LOSE all secure and identifying infos for your device. Like IMEI.
    - Keep your backup files safe and secure ! If you can, encrypt them.
    - Never try to share your backups or your security and privacy will be compromised.
    - USE AT YOUR OWN RISK. I AM NOT RESPONSIBLE FOR YOUR ACTIONS.


    What this guide does ?

    - Restores IMEI.
    - Restores Baseband/RADIO/Modem.
    - Restores Wi-Fi MAC.
    - Restores Bluetooth MAC.
    - Fixes "NVRAM WARNING: ERR 0x10" error.
    - Fixes NV Data corrupted error.
    - Fixes unknown baseband.
    - Fixes null IMEI.

    How to backup ?
    You can backup the listed partitions using TWRP, PBRP, DD, SP Flash Tool or anyway you want.
    I suggest you to use your favorite tool.

    How to restore ?
    You can restore the listed partitions using TWRP, PBRP, DD, SP Flash Tool or anyway you want.
    I suggest you to use same tool of backup.

    Partition: nvcfg
    Description: This partition stores variable configs of NVDATA and NVRAM.​
    Size: 32.768 KiB (32 MiB)​
    Block: /dev/block/mmcblk0p11​
    Start address: 0xa4a2000​
    Length: 0x2000000​
    2021-02-07_17.15.13.png

    Partition: nvdata
    Description: This partition stores variable data of secure and identifying infos for your device. Like IMEI, WiFi MAC, Bluetooth MAC, calibration data and others.​
    Size: 65.536 KiB (64 MiB)​
    Block: /dev/block/mmcblk0p12​
    Start address: 0xc4a2000​
    Length: 0x4000000​
    2021-02-07_17.14.51.png

    Partition: nvram
    Description: This partition stores persistent data of secure and identifying infos for your device. Like IMEI, WiFi MAC, Bluetooth MAC, calibration data and others.​
    Size: 65.536 KiB (64 MiB)​
    Block: /dev/block/mmcblk0p21​
    Start address: 0x19f00000​
    Length: 0x4000000​
    2021-02-07_17.15.59.png

    Partition: persist
    Description: This partition stores persistent data for factory reset protection. Like google account and miaccount/micloud.​
    Size: 49.152 KiB (48 MiB)​
    Block: /dev/block/mmcblk0p13​
    Start address: 0x104a2000​
    Length: 0x3000000​
    2021-02-07_17.16.58.png

    Partition: proinfo
    Description: This partitions stores persistent data of default structure for NVRAM/RADIO/MODEM/BASEBAND.​
    Size: 3.072 KiB (3 MiB)​
    Block: /dev/block/mmcblk0p19​
    Start address: 0x18200000​
    Length: 0x300000​
    2021-02-07_17.16.10.png

    Partition: protect1 (or protect_f)
    Description: This partition stores variable data of SIM/RADIO/MODEM/BASEBAND settings and infos.​
    Size: 8.192 KiB (8 MiB)​
    Block: /dev/block/mmcblk0p15​
    Start address: 0x164a2000​
    Length: 0x800000​
    2021-02-07_17.16.27.png

    Partition: protect2 (or protect_s)
    Description: This partition stores variable data of SIM/RADIO/MODEM/BASEBAND settings and infos.​
    Size: 11.640 KiB (11,36 MiB)​
    Block: /dev/block/mmcblk0p16​
    Start address: 0x16ca2000​
    Length: 0xb5e000​
    2021-02-07_17.16.48.png



    :unsure: Do you need help with your MERLIN device ?
    Read this FAQ: https://forum.xda-developers.com/t/...for-merlin-redmi-note-9-redmi-10x-4g.4225163/
    2
    I have tried write imei once,its simpel turn off your phone, open maui meta click connect then plug your phone to pc, make sure you already installed the driver
    Ok once more thank you for everything. I hope all this conversation between us helps other people in the future with the same problems. 🤠

    Stay safe.
    1
    Warnings:

    - This guide requires the backup be done when the IMEI was present!
    - NEVER try to flash in "format all" mode ! Otherwise, you will LOSE all secure and identifying infos for your device. Like IMEI.
    - Keep your backup files safe and secure ! If you can, encrypt them.
    - Never try to share your backups or your security and privacy will be compromised.
    - USE AT YOUR OWN RISK. I AM NOT RESPONSIBLE FOR YOUR ACTIONS.



    Partition: nvram
    Description: This partition stores persistent data of secure and identifying infos for your device. Like IMEI, WiFi MAC, Bluetooth MAC, calibration data and others.​
    Size: 65.536 KiB (64 MiB)​
    Block: /dev/block/mmcblk0p21​
    Start address: 0x19f00000​
    Length: 0x4000000​
    2021-02-07_17.15.59.png



    in my case nvram location in /dev/block/mmcblk0p22Screenshot_18.png
    Screenshot_18.png
    1
    HOW TO TAKE BACK UP REPAIRED IMEI VIA METAMOD ON ENGINEERING ROMNOW I WANNA FLASH LATEST ROM CAN UH TELL ME HOW TAKE BACK UP...? ND RESTORE IN OFFICIAL ROM?
    You can backup the listed partitions using TWRP, PBRP, DD, SP Flash Tool or any tool you want.
    The thread is not specific for how to use any tool.
    You need to google about it or watch any video in youtube.
    Good luck
    1
    I am getting a "checksum invalid" error.
    I flashed the engineering ROM to restore my IMEI information. Using the scatter file from the engineering ROM, I used SP flash tool to extract nvcfg, nvdata, nvram, persist, proinfo, pretect1 and protect2. I do this using the "readback" option in SP Flash
    I then edit the scatter file of stock global 12.0.6, and load it back into SP flash tool, but it tells me the checksums are invalid. Am I doing something incorrectly?

    EDIT: I've just read in another post that trying to set IMEI 1 will cause this error. I'll try the process again and update this if I learn anything else.

    EDIT2: Same issue when just doing IMEI2 on the partition. Pulling the above mentioned partitions from the device still results in files that give a failing checksum. Flashing a the stock 12.0.6 ends up in the recovery menu with the "NV data is corrupted" message
    Try to delete the file "Checksum.ini".