yashsingh1/xdaforums huggingface dataset:
[Oppo Realme 3 Questions & Answers] Pachacouti:
If you can use SP flash tools, SN writer DOES work on your fone, but it's figuring out a certain timing and sequence of events. that prove my point. Your at the point you need to be, it's waiting on you doing what I'm trying to say... your too demanding wanting the quick fix...

Everytime you post pauses me in case I need to change what I write to you, so slow down, your distracting me lol

Sn Writer is actually a pain to use, and there are many versions. But I learnt a sneaky fast path with it's appearing to not work. It does work, but kind of in reverse of what you think it does.

Sn Writer, strange but true, calls 'serial' as in serial number, 'barcode' in some versions, so some think because they cant see 'serial' that it wont work. I know because at first, I did. Took me a while to learn this.

Load up Sn Writer, it'll ask to load a file, the window that opens should be where you see MTK DA ALL IN bin, select it. Then choose scatterfile from stock firmware.

Now set correct attestation keys found in stock rom, your aftersales stock, with your attestation keys /google keys blah blah...

You then have to choose what you want to flash. If you see serial, that is NOT what you want to flash, you have to flash BARCODE! (your fones serial number) I know you said IMEI, but in order, SN writer flashes BARCODE before IMEI 1, so you MUST flash serial and mac PACKAGE given in stock rom?

So what I do is open the window to type in BARCODE box, my serial number.

Imei 1 is obvious, but you MUST do imei 2 as well, or it will add a few digits to imei 1's mac, put it in imei 2 that may not corespond to your attestation key.

Over to fone.

I turn my fone OFF, hit start in SNWriter, and plug phone into pc, and wait. You can tie your hands to your chair for a min, because if you interupt this TIMING...

Just when you think it wont work, folks give up. Wait that wee bit longer... it will show pass or fail. If its all genuine stock, it cant fail, only impatience caused by not knowing this sequence, and SN's bug-inesss

I'm too tired right now, and I see you posting again lol, my eyes are dry and its sleep time, and since you think it wont work, I'll catch up later today on this post, beacuse I'm gettin ratty with myself lol

Patience.. I'll be back...
[Oppo Realme 3 Questions & Answers] yas8say:
HI

If you have successful in booting up your device try rooting it with magisk and find the .bin file in /data/nvram and edit it !
[Oppo Realme 3 Questions & Answers] yas8say:
I have faced this too, but luckily i had already taken a backup from recovery of nvram ,nvcfg, nvdata partitions .After flashing the recovery i just restored the partitions.

SO, GUYS IF YOU CAN BOOT INTO RECOVERY FIRST THING YOU HAVE TO DO BEFORE FLASHING ANY PARTITION IS TO MAKE A BACKUP OF THEM
[Oppo Realme 3 Questions & Answers] Ank Sak:
The unique problem I am facing is that I was able to flash the firmware, but I couldn't do anything after that because I did format which resulted in """ null imei """ without it the in-depth test app doesn't work, so the after process of bootloader unlocking and then rooting is unachievable, I can't downgrade with official ozip file given in realme website, I did that and it resulted in hard brick( basically without unlocking bootloader I can't do sh*t) , my device is up & running but without imei the further processes are stalled, I will try the method of using sn writer mentioned here..the repair guy even mentioned something about bin fine not found so he couldn't write imei, I have successfully used Maui Meta & SN Writer to write imei of my other mediatek chip containing device , but it didn't worked on realme3, yes you may have solved my problem of "" Download not Complete"" I have posted two pictures in the brick repair thread by @ATDteam . Thanx.

I will try to repair imei and post the outcome here.
[Oppo Realme 3 Questions & Answers] Ank Sak:
2 years ago I formatted by other mediatek chip device lenevo and it did show NVRam error in wifi, after repairing imei it didn't show , & now this mediatek chip device realme does show NVRam error in wifi :: -- NVRAM WARNING: Err =0*10
[Oppo Realme 3 Questions & Answers] yas8say:
If you want to unlock bootloader just use mtkclient ,its very simple.

And if you want my imei files i can provide you but you got to have twrp installed.BTW where are you from?
[Oppo Realme 3 Questions & Answers] Ank Sak:
Tried mtkclient & mtksu app , didn't work, first I will write imei, then use in-depth test, then unlock bootloader, then downgrade, then root using mtksu.. fingers crossed
[Oppo Realme 3 Questions & Answers] yas8say:
What error did you faced when using mtkclient?
[Oppo Realme 3 Questions & Answers] Ank Sak:
I cannot boot in fastboot mode ( I forgot to tell , in realme )

Mtk client:: shows this...

Daxflash - uploading stage 1 from mtkallinone_ da_5.2136.bin

Preloader

Preloader- [lib] : ?[ 31mError on DA_send cmd?[0m

Daxflash

Daxflash- [lib] : ?[31mError on sending DA.?[0m

Main

Main - [lib] : ?[31mError uploading da?[0m

Device formats,

First time some error

Now I ran second time python mtk xflash seccfg unlock

And now bootloader is unlocked !!! Cheers 😀

I don't want to brick and I want to root , what must I do , pls give in steps.. Thnx
[Oppo Realme 3 Questions & Answers] Ank Sak:
Should I directly install twrp img then magisk zip??

Orange state

Device is unlocked blah blah blah( same as lenevo)

But no fastboot mode

When use adb reboot bootloader

This comes up

The serial is not match

Fastboot_unlock_verify fail

Should I try using in-depth test app??
[Oppo Realme 3 Questions & Answers] yas8say:
TRY this:

python mtk w recovery recovery_name.img

then boot into recovery.
[Oppo Realme 3 Questions & Answers] Ank Sak:
My device is realme3, it's on Android10 c.17, will I will be able to root with magisk ? Ok I will try.
[Oppo Realme 3 Questions & Answers] Ank Sak:
No straight business,

Ok i tried, gave same error preloader dax main. .., so I switched off , as soon as the device turns off n pressed all three buttons to go into brom mode, the other cmd with python command ran and wrote twrp Spartan recovery,, then switched on, key combo didn't work, bcoz it was showing ' the serial is not match......' so I typed adb reboot recovery, it booted to realme UI recovery.
[Oppo Realme 3 Questions & Answers] Ank Sak:
Surely have to downgrade to Android 9 to root & install recovery
[Oppo Realme 3 Questions & Answers] Ank Sak:
Last time I downgraded , it lead to hard brick,
[Oppo Realme 3 Questions & Answers] yas8say:
Dude, I had realme c2. So i have no idea if it will work or not.
[Oppo Realme 3 Questions & Answers] Ank Sak:
Give python commands to write imei with mtkclient
[Oppo Realme 3 Questions & Answers] Ank Sak:
Thanx

Thanks Fr all help
[Oppo Realme 3 Questions & Answers] Ank Sak:
Finally thanks to members who helped me , mtkclient , magisk latest & sp flash tool I rooted my device running Android 10 c.17 , which was unattainable before. Tried to flash twrp latest for realme i.e. Spartan, but it did flash but is not working, gonna have to flash stock recovery back..
[Oppo Realme 3 Questions & Answers] Ank Sak:
there is no NVRam file
[Oppo Realme 3 Questions & Answers] Ank Sak:
What to do???
[Oppo Realme 3 Questions & Answers] Ank Sak:
NVRam folder is there in /mnt, has many subdirectories
[Oppo Realme 3 Questions & Answers] yas8say:
Are you indian? If you have custom recovery I can provide you the imei file
[Oppo Realme 3 Questions & Answers] Ank Sak:
Though I have unlocked bootloader

Device gets into Meta mode for both MauiMeta & SNWriter , but in Maui Meta it doesn't get past 20% ( maybe connecting AP) & in SNWriter the preloader com port handshake is not done giving error - dynamic preloader comport timeout
[Oppo Realme 3 Questions & Answers] Ank Sak:
No custom recovery , till now but give whatever u want, .. thnx
[Oppo Realme 3 Questions & Answers] yas8say:
Download SN Write Tool (all versions) - Mediatek IMEI Tool

Download the latest version of SN Write Tool to flash IMEI on MediaTek Devices. All available versions are v2.1128.00, v2.1436.00, v2.1444.00, v2.1504.00.

androidmtk.com

Take a look, this may help
[Oppo Realme 3 Questions & Answers] Ank Sak:
Already did , doesn't do handshake, well I have located the NVRam folder and I think I have to edit nv01a000 & nv01b000 both 96 bytes, they are in nvd_imei folder, & also found solution for NVRam error 0*10 in wifi.
[Oppo Realme 3 Questions & Answers] SubwayChamp:
If you mean by handshake the BROM mode is not needed to use this tool, you should put your device in DIAG mode, there are some secret codes that put device in DIAG mode, I did it in my Redmi Note 9 when I lost my IMEIs, but you might have the IMEI numbers in some paper or from the box. There are other tools that can restore from the NVRAM directory (similar to qcn for Qualcomm) you should look for them.

Actually I'm in the same situation with my Realme 7, my SIMs and the carrier are detected but no IMEI, also trying to fix other things like the touch display not working, BTW how you solved it the NV warning for Wi-Fi?, I have the same error.
[Oppo Realme 3 Questions & Answers] Ank Sak:
Qcn , hmm.... Qualcomm imei repair tool , will it work on Mediatek based device, got to try, bcoz I have run out of options... The only I see it is to edit files in nvd_imei with some editor like hex or something the replace it...
[Oppo Realme 3 Questions & Answers] SubwayChamp:
I remember of doing a copy to this file on my MediaTek device when I lost my IMEIs because a wrong flashing in my last Redmi Note 9, unfortunately I don't remember exactly the tool, after of edit it I restore it, didn't work in my case but the tool that worked was SN Write tool linked above, you need to put your device in DIAG mode, there are some secret codes, from 4 or 5 I found the last worked and put my Xiaomi in DIAG mode and the tool worked fine, there could be secret codes too for Realme, here there is other tool that could work though https://androidmtk.com/use-modem-meta-tool

I'm trying to fix other things in my Realme 7 like the touch screen not working and after that I will go that way for sure too trying to fix the IMEI issue, I will share the solution when it's done.

Also, saying that the md1img contains the modem/baseband/radio, so you should keep trying with different versions if it fixes.
[Oppo Realme 3 Questions & Answers] Ank Sak:
For some reason , my device crashed , so tried to use sp flash tool & mtkclient to write back the firmware, but both are showing DA HASH MISMATCH, what to do now, my honeymoon after rooting is over... Crying...
[Oppo Realme 3 Questions & Answers] SubwayChamp:
This is a really unpredictable device, the same files that once repaired it are the same that in other occasions simply don´t work.

In your case what you can try is check with other firmware, a different one.
[Oppo Realme 3 Questions & Answers] Ank Sak:
Found out that flashing of c.17 version is only possible with sp flash tool v5.1920 , it did flash after removing battery , but I made a mistake of not reattaching and assuming I didn't work and in another round of flashing the connection became lose , so the I got red state, back to shop.. Man!! Samsung & lenevo are good , realme is headache... Even after a mistake on lenevo I repaired it successfully, but realme , aahhhh....
[Oppo Realme 3 Questions & Answers] SubwayChamp:
Yes, that is, Realme is a terrible device for customizing it. Luckily you have a repair shop available, in some countries there’s no one available. Red state is due to relocked bootloader trying Firmware Upgrade probably in SP Flash tool.
[Oppo Realme 3 Questions & Answers] Ank Sak:
Yup that it is... I tried everything on a Windows app "" mtk universal unlock tool"" , thats all afterwards, the device itself was shutting down and booting itself , being unresponsive for power button,...,.... so I started tinkering with flash & unlock tool.. well I explained this to repair guy, he will fix it ,there are solid 2 repair guys, trustworthy ,... Overall it's headache with realme, you know years years ago without any knowledge of rooting & flashing I successfully rooted & installed custom recovery (cwm) & rom on Samsung!!!!!!!! , lenevo is mildly tricky, but restoring stock & imei after full format is breeze)), realme gives roadblock after roadblock..
[Oppo Realme 3 Questions & Answers] Ank Sak:
Installed custom recovery Skyhawk, twrp doesn't install, rooted, thanks to mtkclient, but imei not fixed , I would ask some dev here to help me with that, so I ask IMG files of nvram, nvcfg, nvdata from realme 3 on Android 10, @fawazahmed0 to help me with that, you have already provided IMG files, but I think that are of Android 9 version, I request you to provide for Android 10 version, plus nvram files from your phone storage, thanks.
[Oppo Realme 3 Questions & Answers] Ank Sak:
Need nvram.img , nvdata .img file from realme 3 Android 10, partition dump would also do but from android 10 latest version. Any body who can post here img files is welcome and great thanks from me.
[Oppo Realme 3 Questions & Answers] SubwayChamp:
Probably you need more than these files, also md1img allows the modem to be written.

I found some that you should try for your device (for the mine is not available anywhere)

, these are dumped files from a Realme 3 device currently running. You should try also others by typing "Realme 3 dumped files" you'll find many sites where the download is available.
[Oppo Realme 3 Questions & Answers] Ank Sak:
When I read NV with Mtk Universal , it made 5 files nvcfg, nvdata , nvram, protect1, protect1, so , I think these are the additional files needed while writing them( so as to fix imei, probably , idk)) , I saw in youtube guys were formatting nv partition & writing them with nv files probably with ufi box , I will try to imitate this will software I have..
[Oppo Realme 3 Questions & Answers] Ank Sak:
*protect2
[Oppo Realme 3 Questions & Answers] Ank Sak:
What I am going to do is read nv , gather the img files and write imei in nvram with adk hex editor and write back, let's see what happens, I think this procedure will be same as Maui meta's reading nv partition and writing Imei... 🤞🤞
[Oppo Realme 3 Questions & Answers] Ank Sak:
Tried tft mtk to write imei , bricks the device, people are using ufi box in youtube videos, most of them are hiding things, it's fairly simple I suppose,
[Oppo Realme 3 Questions & Answers] Ank Sak:
Hey @SubwayChamp is there any adb shell command to pull boot IMG ?
[Oppo Realme 3 Questions & Answers] SubwayChamp:
I also tried TFT, but did you use *#800#?

What about Modem Meta? I reached the last stage, it got till "Write IMEI to target failed"

Yes, there are some ADB commands to pull out the boot or almost any partition, but for sake of simplicity you have mtk-client.
[Oppo Realme 3 Questions & Answers] Ank Sak:
Tried all, once there was hope in modem meta, it asked for load database, and I screwed that chance, it wanted some .edb file, tft mtk writes but bricks, there's no alternative but to format and write rom,

I was asking adb shell command to pull, push boot image for other mtk oppo, which has fastboot removed by default, which means no fastboot no brom, but has OEM unlock in developer options , so it can be unlocked, the only way is to adb, bcoz temp root doesn't work, I searched for adb commands , but I guess they all needed a rooted device to work, updated rom is also not available nor ozip, so the plan is to use adb(shell) to pull boot image , patch it with magisk and push it back in unlocked unrooted device, thay is tough , device is 2017 oppo f5 6gb cpb1727, unsupported by all mtkclient, bypass, temp root,....(but they support it's cousins cph1727(4gb), cph1723).. that's a tough cookie to crack, recovery works, adb works , no fastboot , I tried installing it's Libusb filter, but it kind of connects and disconnects,

As of imei , I can't do it on my own at home , though I have watched many youtube videos, and can be fixed by those shops who have ufi box, the steps they do is read nv files , then wipe it , then use their nv IMG files + write modi in box given,then they write complete rom, imei null changes to stable modi number. So I have given up fixing in home, I have given up for imei , shop people will fix that...
[Oppo Realme 3 Questions & Answers] SubwayChamp:
In Modem Meta, when it asks to load database, you should choose load from database, it worked for me, just fail at time to write the IMEI.

Some devices only can re-write the IMEI 2, otherwise is got bricked.

I thought you were rooted, you need root to pull out these partitions, but what about the boot image included in the stock ROM?.

Then probably your model is a Spreadtrum device.

How did you try to enter to fastboot?, some Oppo and Realme devices doesn't enter directly using hardware buttons, but through commands.

Yes, as of now, I realized that some models simply don't accept rewrite this partition, for example, Xiaomi device accept it over an engineer firmware, I restored a nv backup from the same model, and no luck. In engineer mode, I saw there is an option calls like CDS or something related to radio, but I didn't find this option on any of the firmware I flashed.

Don't remember if I recommend to search for an "engineer firmware/ROM" or something like "firmware dumped" for your model, the first allows, as I said you previously, to rewrite it, and the second. can restore it directly.
[Oppo Realme 3 Questions & Answers] Ank Sak:
Yup that seems to be true otherwise they wouldn't have given OEM unlock options in oppof5 cph1727, spreadtrum, but it's mtk6763 armv8, idk.....

my realme3 is unlocked and rooted and it connects in brom mode too, I was talking about my other oppo device cph1727 which has fastboot unaccessible either through adb or buttons, so there must be some trick to it, service center madam is real friendly , I will ask her that.. will try some more softwares on oppo,

for relame I will try tft mtk &marvel mtk basically mimicking the process I saw on YouTube, what I think is this formatting with sp flash has wiped the imei numbers as well as PCB number, I tried 5 softwares to write back imei but they failed , mYbe the trick is to "''""""***first"""'' fix the ((((pcb))) number , this may be connected to fastboot in realme bcoz it show some msg ""the serial is not match, fastboot unlock fail""

The miracle box software had many many options but I had driver issues so I will try that again...
[Oppo Realme 3 Questions & Answers] SubwayChamp:
Not in the PCB but the IMEI is hard coded in the eMMC/UFS, I guess that the box and specialized tools make a kind of short circuit in it to bypass write-protecting.

In case you didn't try it, to send your device to fastboot mode, try this:

Type, through terminal, adb reboot fastboot, exact when the command ends to be executed, disconnect the USB cable and quickly reconnect it, the device will send it to fastbootd, you can do almost all the same on it, it's the exact same UI from recovery.
[Oppo Realme 3 Questions & Answers] Ank Sak:
Ooo

Oooh.. that's a new thing , will try that, btw are you mobile developer?? Bcoz there is very little info about this device on the net , another I interesting thing I found is that there's another oppo model with same motherboard, so oppo f5 & oppo a75 have same motherboard.. the people of service center put video of these two devices during servicing..
[Oppo Realme 3 Questions & Answers] Ank Sak:
will keep looking...

Realme imei , PCB null problem

Oppo f5 has fastboot mystery problem unsupported by all unlock tools, but I will try your method .. fingers crossed
[Oppo Realme 3 Questions & Answers] SubwayChamp:
It's unlikely to prove this until you try it, the same thing happens with my device, not only that the hardware specs are close similar, but the firmware works for all these models, Realme 7 (RMX2151/2155), Realme 7 Asian version (RMX2163), Realme Narzo 20 Pro (RMX2161), Realme Narzo 30 (RMX2156), and probably too, a lower version, the Realme 6, so both have cross development.

As you see, is highly feasible that a firmware for models that share same or similar specs, may be kind of interchangeable.

Some things may or may not work on a different firmware...
[Oppo Realme 3 Questions & Answers] magnumoZeus:
even if you do share your imei file, how are we supposed to edit it, hex editor won't work here, android uses encryption,

i can edit those imei files in twrp, but i don't know how to edit those ...

no, the box is just there to unlock the software, the imei repairing is done purely by the sowftware only,

i have tried that before. i also looked for the cracked versions of those tools but it seems they have made a business out of it and no one is ready to make a cracked version.
[Oppo Realme 3 Questions & Answers] Ank Sak:
Well I know many things now, crazy things like if u interrupt the flash process in the end u end with new apps, DURING different times I ended up with apps from Pakistan & other time apps from Indonesia/china , if u use *#813# just after flashing rom , u end with oppo app store, game center , etc.. , some give chrome as default browser, other give opera , some browser...

, rrealme3 is up & running , know how to use mtk client , mtk GUI is very useful,

In nvram folder there is a folder called nvd imei containing three files

Tried editing them with notepad, hex editor , causes system freeze when edited nvram img , I think I got to remove Android encryption then edit it in hex editor , I saw them in cheat engine too...

&& Using some tool it said that imei block doesn't exist , so it can't write imei... Uhhhh...

Other tools were unable to do so ...

My bet is on hex editor...
[Oppo Realme 3 Questions & Answers] Ank Sak:
Maybe I can't do the solution provided in second post here... My box is lost , I have only imei numbers left with me. Do engineer mode reveal the other info I need for SN writer ??

Sp Flash tool has wiped down IMEI , PCB numbers... Can't see both in engineer mode...

Editing nvram / nvd imei is the keyy to this mess...
[Oppo Realme 3 Questions & Answers] Ank Sak:
Oppo_custom ****ed my front camera while is backed everything to normal... Oppo_custom from dump of your device is helpful / can also be used from ota ozip file ( this is also I found out )
[Oppo Realme 3 Questions & Answers] SubwayChamp:
Editing those files won't produce a result, it can't be written back because they are signed. Instead, you can try by using this method:

- Get a backup of those files from someone that it is currently working, put them in the proper path replacing those that you have, without editing them, just put them as they are, and wait what happen, erase nvdata (this will be recreated at first reboot), reboot device, this, IN NO WAY, will "stole" the IMEIs from the other device, but, if the theory is right, this will make the partition be RW again.

And as second possible solution, I remembered that you SHOULD have some possibility to make these modifications, over a base of an Engineer firmware/ROM, I recovered the mine this way in a RN9, I provided to you some dumped files from a working device, these images are intended to flash using some box, same way can be flashed through mtk-client too.