[ENGINEERING][ROM][OFFICIAL] OFFICIAL Engineering Firmware for LANCELOT (Redmi 9 / Redmi 9 Prime) - Redmi 9 / Poco M2 Guides, News, & Discussion

[ENGINEERING][ROM][OFFICIAL] OFFICIAL Engineering Firmware for LANCELOT (Redmi 9 / Redmi 9 Prime) - Redmi 9 / Poco M2 Guides, News, & Discussion

Works with:
- Xiaomi Redmi 9
- Xiaomi Redmi 9 Prime
Build Date:
2020/06/23
Android Version:
QP1A.190711.020
Display ID:
AL2615-lancelot-V011-Q-0623
Build Fingerprint:
Redmi/lancelot/lancelot:10/QP1A.190711.020/6:userdebug/test-keys
Security Patch:
2019/12/05
Radio/Modem/Baseband Version:
MOLY.LR12A.R3.MP.V98.P16
Download:
https://www.mediafire.com/file/7fs4...V011-Q-0623_QP1A.190711.020_by-VD171.zip/file
Password:
Pass is in the attached file: PASSWORD_by_VD171.txt
How to flash it?
Use the attached scatter file.
Radio/Modem/Baseband properties:
Code:
md1_dbginfodsp=DbgInfo_DSP_MT6768_MOLY_LR12A_R3_MP_V98_P16_2020_04_05_21_55.xz
md1_dbginfo=DbgInfo_LR12A.R3.MP_HUAQIN_Q0MP1_MT6769_SP_MOLY_LR12A_R3_MP_V98_P16_2020_04_22_12_37.xz
md1_mddbmeta=MDDB.META_MT6768_S00_MOLY_LR12A_R3_MP_V98_P16.EDB
md1_mddbmetaodb=MDDB.META.ODB_MT6768_S00_MOLY_LR12A_R3_MP_V98_P16.XML.GZ
md1_mddb=MDDB_InfoCustomAppSrcP_MT6768_S00_MOLY_LR12A_R3_MP_V98_P16.EDB
Prop.default:
Code:
ro.build.version.incremental=6
ro.odm.build.version.incremental=6
ro.vendor.build.version.incremental=6
ro.build.version.security_patch=2019-12-05
ro.vendor.build.security_patch=2019-12-05
ro.build.display.id=AL2615-lanceelot-V011-Q-0623
ro.vendor.mediatek.version.release=alps-mp-q0.mp1.tc8sp2-V1.9.1_huaqin.q0mp1.k69v1.64_P17
ro.build.product=lancelot
ro.product.board=lancelot
ro.product.odm.device=lancelot
ro.product.odm.model=lancelot
ro.product.odm.name=lancelot
ro.product.product.device=lancelot
ro.product.product.model=lancelot
ro.product.product.name=lancelot
ro.product.system.device=lancelot
ro.product.system.model=lancelot
ro.product.system.name=lancelot
ro.product.vendor.device=lancelot
ro.product.vendor.model=lancelot
ro.product.vendor.name=lancelot
ro.build.flavor=lancelot-userdebug
ro.build.description=lancelot-userdebug 10 QP1A.190711.020 6 test-keys
ro.board.platform=mt6768
ro.build.id=QP1A.190711.020
ro.odm.build.id=QP1A.190711.020
ro.product.build.id=QP1A.190711.020
ro.system.build.id=QP1A.190711.020
ro.vendor.build.id=QP1A.190711.020
ro.bootimage.build.fingerprint=Redmi/lancelot/lancelot:10/QP1A.190711.020/6:userdebug/test-keys
ro.odm.build.fingerprint=Redmi/lancelot/lancelot:10/QP1A.190711.020/6:userdebug/test-keys
ro.product.build.fingerprint=Redmi/lancelot/lancelot:10/QP1A.190711.020/6:userdebug/test-keys
ro.system.build.fingerprint=Redmi/lancelot/lancelot:10/QP1A.190711.020/6:userdebug/test-keys
ro.vendor.build.fingerprint=Redmi/lancelot/lancelot:10/QP1A.190711.020/6:userdebug/test-keys
ro.build.tags=test-keys
ro.odm.build.tags=test-keys
ro.system.build.tags=test-keys
ro.vendor.build.tags=test-keys
ro.build.type=userdebug
ro.odm.build.type=userdebug
ro.system.build.type=userdebug
ro.vendor.build.type=userdebug
ro.bootimage.build.date=Tue Jun 23 16:00:24 CST 2020
ro.build.date=Tue Jun 23 16:00:24 CST 2020
ro.odm.build.date=Tue Jun 23 16:00:24 CST 2020
ro.product.build.date=Tue Jun 23 16:00:24 CST 2020
ro.system.build.date=Tue Jun 23 16:00:24 CST 2020
ro.vendor.build.date=Tue Jun 23 16:00:24 CST 2020
MD5 hashes:
Code:
APDB_MT6768_S01__W2006 -> 7177e8c1bb17e5fd98f0e6723799c50d
boot-debug.img -> 8cd7eda58701088c5080fc18eee2d01b
boot.img -> 81cc18e714ea49a328f6f4da95d08268
cache.img -> df336c69fc9169d8c248bf0159dabd19
Checksum.ini -> 37b76d2bc20b7da2f98f68d64b2c2390
crclist.txt -> e5f360ad6f480f9635cca523487d1936
cust.img -> e8c4e9f4ee0fe5052cf0dc356aedd8de
DbgInfo_LR12A.R3.MP_HUAQIN_Q0MP1_MT6769_SP_MOLY_LR12A_R3_MP_V98_P14_2020_04_02_09_21_1_ulwctg_n -> b98ee0dd6410d951a97dc06195ba83e8
dtb.img -> bfe051e750bab9942d3509be26852f76
dtbo-verified.img -> 4849e7b4147d1f145b6cabeb89ad75f4
dtbo.img -> 4849e7b4147d1f145b6cabeb89ad75f4
efuse.img -> 421f2cead0fbea555680b96136555941
exaid.img -> e8c4e9f4ee0fe5052cf0dc356aedd8de
lk-verified.img -> 03f3abe6f7b74eae1bb2faf5117662b3
lk.img -> 03f3abe6f7b74eae1bb2faf5117662b3
logo.bin -> e72a0fbf91e0efcc13012c71312fc376
md1arm7.img -> a0453e723dc84255940d7791740d06db
md1img-verified.img -> 8be0824b8be8d366c08a346df1d73a76
md1img.img -> 8be0824b8be8d366c08a346df1d73a76
md3img.img -> 9a9c185e3f6234103e5949716b9962d2
MDDB.META.ODB_MT6768_S00_MOLY_LR12A_R3_MP_V98_P14_1_ulwctg_n.XML.GZ -> 376361df52cddd8e2d8127c009ad9a97
MDDB.META_MT6768_S00_MOLY_LR12A_R3_MP_V98_P14_1_ulwctg_n.EDB -> 762c8ba299c76dde214394d8e7e3fc7e
MDDB_InfoCustomAppSrcP_MT6768_S00_MOLY_LR12A_R3_MP_V98_P14_1_ulwctg_n.EDB -> a5757c7b6acf3e52ce051d731f1e11ab
MT6768_Android_scatter.txt -> 49ccb3ee5ebcd5a1da213f6e6a97f6e0
preloader.img -> 97d4bf8c5d7eb7077242643355154121
preloader_emmc.img -> 97d4bf8c5d7eb7077242643355154121
preloader_lancelot.bin -> 3d78e9cdf37504c6f4b6e085b9c0ed23
preloader_ufs.img -> 2ca4e781fc1716fb9f818fd3bc13708a
product.img -> 8a2a3b2e34c7ad615385f52a578ac19e
ramdisk-debug.img -> e983139c5a4a17f856b48a9168462246
ramdisk-recovery.img -> 83730e31866842708346352df1364019
ramdisk.img -> b280f1a76fd113fa4a2819c131bd5a4b
recovery.img -> 85a47773595b006fd430826f5b88d76c
scp-verified.img -> fad098e9a4ac55809437bcda5702d5e2
scp.img -> fad098e9a4ac55809437bcda5702d5e2
secro.img -> 096587b863e1252d67b1b8307291db09
sparsecrclist.img -> 9a027470a494d216f144b6a2ac86c440
sparsecrclist.txt -> ff3cdb1767f609ccd66fb994b02e030a
spmfw-verified.img -> 34c71ef9e7b790d06b1c935a36d41c7c
spmfw.img -> 34c71ef9e7b790d06b1c935a36d41c7c
sspm-verified.img -> 49adc450b2c4aca22ed17a59064e4dc3
sspm.img -> 49adc450b2c4aca22ed17a59064e4dc3
super.img -> fd0ac354f4e40d4ffb9fd4e11b9d2e3b
super_empty.img -> a6d56d7a12d989bf31511d866449291d
system.img -> dab92acecad053e31bebe8d2872029b5
tee-verified.img -> 25e64f2ddb3d8cffa1fd6a1f7d2137a2
tee.img -> 25e64f2ddb3d8cffa1fd6a1f7d2137a2
userdata.img -> fc22c593b15f28f4fe0f9a462334ea70
vbmeta.img -> d763d4e03d647df580e193da6c046b5b
vbmeta_system.img -> 51618fef8d4e5c535c5c779a4cf4e8b7
vbmeta_vendor.img -> 4c12ab0788baad9d32d95dbd33da1442
vendor.img -> 4878e677e80d6ceaa73c30722682d41f

Do you flash it using sp flash tool?

Tmi313 said:
Do you flash it using sp flash tool?
Click to expand...
Click to collapse
You can flash it using sp flash tool or fastboot too.

Thank you man, please someone can post a tutorial how to fix the IMEI with this rom? Normal AT commands is not working gives ERROR

yoalcuadrao said:
Thank you man, please someone can post a tutorial how to fix the IMEI with this rom? Normal AT commands is not working gives ERROR
Click to expand...
Click to collapse
You need MODEM META for that.

VD171 said:
You need MODEM META for that.
Click to expand...
Click to collapse
Thank you i can change succesfully IMEI with Maui META but... now how to get back to MIUI 11 without lost again IMEIS? when i try to flash with SP Flashtool it says PMT changed and i must format again

yoalcuadrao said:
Thank you i can change succesfully IMEI with Maui META but... now how to get back to MIUI 11 without lost again IMEIS? when i try to flash with SP Flashtool it says PMT changed and i must format again
Click to expand...
Click to collapse
If you write the IMEI to the slot1, your device will be stucked in bootloop.
You need to keep blank and null the imei for slot1.
Only xiaomi centre can recover the imei for slot1.
Just write only imei for slot2 and everything will works perfectly.
About PMT changed error, you need to use the SAME scatter file !
If you face any other issue, try attaching the screenshot too

VD171 said:
If you write the IMEI to the slot1, your device will be stucked in bootloop.
You need to keep blank and null the imei for slot1.
Only xiaomi centre can recover the imei for slot1.
Just write only imei for slot2 and everything will works perfectly.
About PMT changed error, you need to use the SAME scatter file !
Just use the scatter file "WITHOUT_EFUSE--no_boundary_check", it will work for engineering roms and release roms.
If you face any other issue, try attaching the screenshot too
Click to expand...
Click to collapse
sir can you attach that scatter file please¿? and what i must to do? use that scatter file on both rom files?

yoalcuadrao said:
sir can you attach that scatter file please¿? and what i must to do? use that scatter file on both rom files?
Click to expand...
Click to collapse
(Sorry. Ignore.)

yoalcuadrao said:
Thank you i can change succesfully IMEI with Maui META but... now how to get back to MIUI 11 without lost again IMEIS? when i try to flash with SP Flashtool it says PMT changed and i must format again
Click to expand...
Click to collapse
if you want to restore them you can use a custom recovery, i suggest you the pitch black one, just flash it, then backup the nvram, nvdata, protect_s and protect_f partition using it then when you reflash the normal miui rom you just reflash the recovery before first system boot and restore the backup you made (you have to put the backup in a sd card or else you will lose it) don't forget to unlock the bootloader as each times you flash the phone you need to format all

razers211 said:
if you want to restore them you can use a custom recovery, i suggest you the pitch black one, just flash it, then backup the nvram, nvdata, protect_s and protect_f partition using it then when you reflash the normal miui rom you just reflash the recovery before first system boot and restore the backup you made (you have to put the backup in a sd card or else you will lose it) don't forget to unlock the bootloader as each times you flash the phone you need to format all
Click to expand...
Click to collapse
NEVER TRY TO FLASH USING THE format all MODE !
Otherwise, you will LOSE all secure and identifying infos for your device. Like IMEI.
The guide for that, is here: https://forum.xda-developers.com/t/...-on-merlin-redmi-note-9-redmi-10x-4g.4230423/

yoalcuadrao said:
Thank you i can change succesfully IMEI with Maui META but... now how to get back to MIUI 11 without lost again IMEIS? when i try to flash with SP Flashtool it says PMT changed and i must format again
Click to expand...
Click to collapse
Hi bro, could you help me? I have both Imeis in unknown, with MauiMeta or Modem Meta can I rewrite them? Could you tell me how you did it? You would help me a lot. Thanks.

VD171 said:
You need MODEM META for that.
Click to expand...
Click to collapse
Hello.
Would I need to flash the ENG ROM and then use Meta Modem to do the imei2 rewrite?

yoalcuadrao said:
sir can you attach that scatter file please¿? and what i must to do? use that scatter file on both rom files?
Click to expand...
Click to collapse
PathBoy92 said:
Hi bro, could you help me? I have both Imeis in unknown, with MauiMeta or Modem Meta can I rewrite them? Could you tell me how you did it? You would help me a lot. Thanks.
Click to expand...
Click to collapse
PathBoy92 said:
Hello.
Would I need to flash the ENG ROM and then use Meta Modem to do the imei2 rewrite?
Click to expand...
Click to collapse
Yes.
You can repair only imei for slot2 by yourself.
Only Xiaomi Centre can recover imei for slot1.
If you try to write the imei for slot1, you will get NV DATA corrupted and your device will be bricked in a bootloop.
If you want to recover the imei for slot2, just follow this step:
1. Flash the ENGINEERING ROM.
2. Enter in META MODE using MODEM META:
Download: https://androidmtk.com/download-modemmeta-tool
Guide: https://androidmtk.com/use-modem-meta-tool
3. Write IMEI for slot2 and keep blank/null for slot1.
4. Backup NVDATA partition.
5. Flash any other MIUI (or custom) ROM you want.
6. Restore NVDATA partition.
Done.

the baseband version of this rom is
MOLY.LR12A.R3.MP.V98.P16
but for the global Redmi 9 it is:
MOLY.LR12A.R3.MP.V98.P57
this incompatibility is probably why you cannot restore both IMEIs with it.

shemmati said:
the baseband version of this rom is
MOLY.LR12A.R3.MP.V98.P16
but for the global Redmi 9 it is:
MOLY.LR12A.R3.MP.V98.P57
this incompatibility is probably why you cannot restore both IMEIs with it.
Click to expand...
Click to collapse
Yes

VD171 said:
Yes
Click to expand...
Click to collapse
so, is there a way we can change the baseband version of this rom or grab a rom with the correct baseband version?

shemmati said:
so, is there a way we can change the baseband version of this rom or grab a rom with the correct baseband version?
Click to expand...
Click to collapse
Did you try to flash only the md1img.img ?

VD171 said:
Did you try to flash only the md1img.img ?
Click to expand...
Click to collapse
i manually changed the AP DP folders and the md1img and flashed the rom again, the baseband version changed to P57. the previously written IMEIs are there, but no network.
erased NVRAM and NVDATA to write the IMEIs again, but ModemMeta couldn't write IMEIs to the phone anymore.

who makes these Engineering Roms? where do these roms come from?
maybe we can beg them give us our version or at least guide us how to solve this baseband version problem.

Related

[Q] [q] help with root

Hi there...
Need root Alactel pixi 7 (i213)
Android is 4.2.2 with stock rom
chip mt8127
I tried every root-ing software i found ..and no luck..
cant save scatter file by mtkdroidtools
there is no much information in net..so i dont know what to do...
there is way to flash cwm-recovery from fastboot..but im scared so i want first to backup stock recovery
sry for bad english
HELP:crying::crying:

I213
I am in same situation, cant find root solution for pixi 7.
Model:I213
Android version: 4.4.2
Kernel: 3.4.67
Build number: 01001
If anyone have some information please share..
Thank you

dunpeall said:
I am in same situation, cant find root solution for pixi 7.
Model:I213
Android version: 4.4.2
Kernel: 3.4.67
Build number: 01001
If anyone have some information please share..
Thank you
Click to expand...
Click to collapse
I just found some method to dump stock recovery by sp flashtool
and then flash cwm.so we can install root...
I will post later

Xcore_Rj said:
I just found some method to dump stock recovery by sp flashtool
and then flash cwm.so we can install root...
I will post later
Click to expand...
Click to collapse
Still waiting

dunpeall said:
Still waiting
Click to expand...
Click to collapse
I DID IT .... HAHAHAHAH
man have you ever flashed something with sp flashtool ??
you just need to flash one image..i made it by myself and guess? ITS WORKED

great
Xcore_Rj said:
I DID IT .... HAHAHAHAH
man have you ever flashed something with sp flashtool ??
you just need to flash one image..i made it by myself and guess? ITS WORKED
Click to expand...
Click to collapse
Not with sp flashtool, only with Odin.
So what's the magic trick ? Can u provide me more details.
Thank you

detail
dunpeall said:
Not with sp flashtool, only with Odin.
So what's the magic trick ? Can u provide me more details.
Thank you
Click to expand...
Click to collapse
Yep :good:
Its just too long story
The Main trick is that we are dumping system partition
Then opening it in linux ..installing su manualy..and reflashing
i can make detailed guide if you want
Now im trying to find custom recovery..and again problems

Xcore_Rj said:
Yep :good:
Its just too long story
The Main trick is that we are dumping system partition
Then opening it in linux ..installing su manualy..and reflashing
i can make detailed guide if you want
Now im trying to find custom recovery..and again problems
Click to expand...
Click to collapse
If u can that would be awesome
thanks again

dunpeall said:
If u can that would be awesome
thanks again
Click to expand...
Click to collapse
can u get 2 files from your tab?
/proc/dumchar_info
and
/proc/emmc
if we have same partition table then i will send you system.img for flashing it will much easy

Xcore_Rj said:
can u get 2 files from your tab?
/proc/dumchar_info
and
/proc/emmc
if we have same partition table then i will send you system.img for flashing it will much easy
Click to expand...
Click to collapse
Okm sorry for dalay. here's the files.
http://www.mediafire.com/download/3p6xq1lnvb8x85b/proc.rar

dunpeall said:
Okm sorry for dalay. here's the files.
http://www.mediafire.com/download/3p6xq1lnvb8x85b/proc.rar
Click to expand...
Click to collapse
:good:
so first off all create backup of your system partition.
sp flash : https://mega.co.nz/#!HxcBST4A!TjjbUVq_cZjMMcgIsxtm7rrlKCKgdXujx62ShlnoDyY
1. open flash tool
2. go to download
3. scatter-loading select 8127_blabalbalba.txt , (scatter is in flash tool folder)
4. go to readback
5. select Add
6. double click on added line
7. save as system.img
8. Type : hex , Region EMMC_USER , start : 0x32180000 , lenght 0x22600000 , ok
9. selcet Read Back
10. turn off tab and connect to Pc - it will start download
11. wait for end and disconnect from pc
Then emmmm
download system.img : https://mega.co.nz/#!i9FnGBqY!glbZXPA_me6wmrTowZZEa3-37bO2mAeuzHQuzXov3Wg
again open flash tool , load scatter
1. in download tab uncheck all fields .. ALL fields
2. select only Android
3. click on loclation and select downloaded system.img
4. select download , turn off tab and connect to pc
5. i think thats all
i will wait for reply : D

Xcore_Rj said:
:good:
so first off all create backup of your system partition.
sp flash : https://mega.co.nz/#!HxcBST4A!TjjbUVq_cZjMMcgIsxtm7rrlKCKgdXujx62ShlnoDyY
1. open flash tool
2. go to download
3. scatter-loading select 8127_blabalbalba.txt , (scatter is in flash tool folder)
4. go to readback
5. select Add
6. double click on added line
7. save as system.img
8. Type : hex , Region EMMC_USER , start : 0x32180000 , lenght 0x22600000 , ok
9. selcet Read Back
10. turn off tab and connect to Pc - it will start download
11. wait for end and disconnect from pc
Then emmmm
download system.img : https://mega.co.nz/#!i9FnGBqY!glbZXPA_me6wmrTowZZEa3-37bO2mAeuzHQuzXov3Wg
again open flash tool , load scatter
1. in download tab uncheck all fields .. ALL fields
2. select only Android
3. click on loclation and select downloaded system.img
4. select download , turn off tab and connect to pc
5. i think thats all
i will wait for reply : D
Click to expand...
Click to collapse
I backup created but for some reason i cant download system_rooted.img from mega.co.nz.
Do you have some other link?

dunpeall said:
I backup created but for some reason i cant download system_rooted.img from mega.co.nz.
Do you have some other link?
Click to expand...
Click to collapse
I will upload another one

Xcore_Rj said:
I will upload another one
Click to expand...
Click to collapse
Ok, thank you... I am waiting

dunpeall said:
Ok, thank you... I am waiting
Click to expand...
Click to collapse
sry for delay
here it goes : http://1drv.ms/1tIAD2y

Xcore_Rj said:
sry for delay
here it goes : http://1drv.ms/1tIAD2y
Click to expand...
Click to collapse
Stuck at alcatel onetouch pixi 7 logo :|

dunpeall said:
Stuck at alcatel onetouch pixi 7 logo :|
Click to expand...
Click to collapse
oops
i just saw that your Build number is 01001 mine 01002
i think thats the problem..
so i have 2 solutions
1st
try flash boot.img same way as system..uncheck all select only bootable and select boot.img
2nd
flash your backuped system and try OTA update to 01002 then try again...
boot.img : https://mega.co.nz/#!T80ihQAA!wiofxhYpc_5sfrKpUYIINSU-Vzb7vFqENI1EbaPyT-0

dunpeall said:
Stuck at alcatel onetouch pixi 7 logo :|
Click to expand...
Click to collapse
hey if you didnt started yet backup boot.img
start : 0x1d20000
lenght : 0x60000

Xcore_Rj said:
oops
i just saw that your Build number is 01001 mine 01002
i think thats the problem..
so i have 2 solutions
1st
try flash boot.img same way as system..uncheck all select only bootable and select boot.img
2nd
flash your backuped system and try OTA update to 01002 then try again...
boot.img : https://mega.co.nz/#!T80ihQAA!wiofxhYpc_5sfrKpUYIINSU-Vzb7vFqENI1EbaPyT-0
Click to expand...
Click to collapse
Flashed boot.img and system_rooted.img ... It's working and have root access cheers..
but in about tabler.. build number is still the same 01001.
thanks

dunpeall said:
Flashed boot.img and system_rooted.img ... It's working and have root access cheers..
but in about tabler.. build number is still the same 01001.
thanks
Click to expand...
Click to collapse
Well Enjoy

[HOWTO]Revert firmware from HydrogenOS 2.5 to OxygenOS 3.1.0

Original howto thread from OnePlus is here (Chinese)
http://www.oneplusbbs.com/thread-3071246-1-1.html
[WARNING] TRY WITH OWN RISK. NO SUPPORT HERE.
[PROBLEM]DOING THIS WILL MAKE YOUR SIM2 DISABLED AND THERE IS NO SOLUTION HERE
OnePlus didn't mention about it...
Here's another way but NO SUPPORT.
https://forums.oneplus.net/threads/...-h2o-2-5-1-to-any-os-without-problems.477425/
WHAT'S THIS?
OnePlus China released H2OS 2.5 Open Beta for OnePlus2 with VoLTE-enabled firmware.
It worked in CM14 and other CM based ROM but there still too many random reboots...
I tried to revert firmware to Oxygen one by flashing OxygenOS 3.1.0 zip in TWRP but it caused baseband lost ( = no Wi-fi, No cellular network).
Finally I found official guide to revert HydrogenOS 2.5 to 2.0.
I tried it and it works!
Once you revert to HydrogenOS 2.0, you can flash Oxygen zip in TWRP to revert Oxygen firmware.
GUIDE
BE SURE TO TAKE FULL BACKUP OR YOUR DATA WILL BE GONE!
0. Make sure you are in HydrogenOS 2.5. If not, you need to flash it with TWRP.
1. Download "FlashTool_OnePlus2.exe" and "H2OS_2.0_160810.7z" from the link below.
2. Open "FlashTool_OnePlus2.exe"
3. In upper box select "H2OS_2.0_160810.7z".
4. Check all checkboxes.
5. Connect OnePlus2 to your computer and boot into fastboot (long press VolUP + Power).
6. Press lower right button.
7. It will reboots automatically.
If you want, reboot into fastboot again and "fastboot flash recovery xxx" -> boot into recovery -> flash OxygenOS
DOWNLOAD
Flash tool and image:
https://drive.google.com/drive/folders/0B3WNMEn5piLieUR2X21Ldm5QXzg?usp=sharing
If you cannot download please go official thread (Chinese)
Hydrogen OS Download Page:
http://www.h2os.com/download
Oxygen OS Download Page:
http://downloads.oneplus.net/

Thx for the GUIDE!

Thanks for the guide!!....
Not asking for support...
But is there anyone who tried this and succeeded?..

aaronblaze said:
Thanks for the guide!!....
Not asking for support...
But is there anyone who tried this and succeeded?..
Click to expand...
Click to collapse
I did and it works flawless.
Remember 1 thing. Make backup of your photos/files.
Because everything will be gone...

aaronblaze said:
Thanks for the guide!!....
Not asking for support...
But is there anyone who tried this and succeeded?..
Click to expand...
Click to collapse
Oh, sorry I forgot to write
Just before I tried and it succeeded! Now I'm on AICP...

Sarisia said:
Oh, sorry I forgot to write
Just before I tried and it succeeded! Now I'm on AICP...
Click to expand...
Click to collapse
Thx for the guide, but IMEI2 shows 0

Cryer said:
I did and it works flawless.
Remember 1 thing. Make backup of your photos/files.
Because everything will be gone...
Click to expand...
Click to collapse
Yes be sure to take full backup. I'll add it. Thanks!

Cryer said:
Thx for the guide, but IMEI2 shows 0
Click to expand...
Click to collapse
Are you able to get 2 working sims at once atleast?

Okay, 1 problem, the second IMEI shows 0.

I confirmed issue SIM 2 IMEI shows 0. I tried to erase modemst1, modemst2 and flash persist again but it did not work...

Sarisia said:
I confirmed issue SIM 2 IMEI shows 0. I tried to erase modemst1, modemst2 and flash persist again but it did not work...
Click to expand...
Click to collapse
Well thanks for the update..but i took a proper backup (when i was on OOS) of both modemst1 and 2 using zips made my Spannaa ...
so i will try them...

well I found modemst1 and modemst2 image in H2OS_2.0.7z is empty binary...
I tried to erase both but only IMEI1 is recovered and I tried flash H2OS 2.5 again but IMEI2 still 0 too...
In other thread someone said erase modemst1 , 2 and flash persist worked fine but it did not work for me.
There still no solution now and I'll keep looking for it...

@Sarisia
Don't want to steal your thread but take a look at mine. Both IMEI's are staying alive.
https://forums.oneplus.net/threads/...-h2o-2-5-1-to-any-os-without-problems.477425/

Tunatje said:
@Sarisia
Don't want to steal your thread but take a look at mine. Both IMEI's are staying alive.
https://forums.oneplus.net/threads/...-h2o-2-5-1-to-any-os-without-problems.477425/
Click to expand...
Click to collapse
Correct me if I'm wrong, but you too a backup of your EFS prior to flashing H2OS 2.5.1. Most ppl did not do so, therefore IMEI 2 is 0.

lilbluemirage said:
Correct me if I'm wrong, but you too a backup of your EFS prior to flashing H2OS 2.5.1. Most ppl did not do so, therefore IMEI 2 is 0.
Click to expand...
Click to collapse
True. But that's what I mentioned as one of the first things.

Tunatje said:
@Sarisia
Don't want to steal your thread but take a look at mine. Both IMEI's are staying alive.
https://forums.oneplus.net/threads/...-h2o-2-5-1-to-any-os-without-problems.477425/
Click to expand...
Click to collapse
I had backups of modemst1 and modemst2 and flashed it with -S options didn't worked for me.o
Maybe there's any other patitions need to be flashed...

Sarisia said:
I had backups of modemst1 and modemst2 and flashed it with -S options didn't worked for me.o
Maybe there's any other patitions need to be flashed...
Click to expand...
Click to collapse
If you have the persist partition backup made with twrp you could try that also. In my case I had to do that.

My IMEI2 is back!!!!! (Edited: lost it again)
Flash empty modemst1 and modemst2 with
Code:
fastboot flash -S 512M modemst1 [file_modemst1]
fastboot flash -S 512M modemst2 [file_modemst2]
and reboot my IMEI2 backed!

Sarisia said:
My IMEI2 is back!!!!!
Flash empty modemst1 and modemst2 with
and reboot my IMEI2 backed!
Click to expand...
Click to collapse
You're welcome. :silly:

This worked to perfection! Not sure about SIM 2 as I only use SIM 1.. Guess I could put my SIM into slot 2? But anyway.. What I did to help facilitate this fix was did everything as stated in OP .. Then, I ran the program from Method 1 Here and then flashed the latest Oxygen rom ... Everything is fine!!

After flashing imei , no network, no sim, unknown baseband

I am wandering around internet to solve the issue, i cant even get the perfect qcn for poco,
My thing is
1st I lost imei by flashing xxx gsi and no sim detected
2nd got imei number back by flashing other qcn from different websites , i don't it's the poco qcn or not
3rd, after flashing qcn , i am getting sim detection , but no service...
What i need
1st , proper qcn from pocof1,
Or can anyone build a qcn with my imei,
Or can i get non-hlos.bin of poco?, where there is no non-hlos.bin in fastboot rom or recovery rom
Should i use qfil or qpst tool
Mann i got too much questions in my head ...
After that my friend gave his twrp backup of modem and efs and i restored it , where nothing changed , i have only my IMEI, befor flashing this backup atleast the sim detected and now it no sim...
I need a help.... Pls anycan edit your qcn with my imei using hex decimal or whatever....:silly::silly::crying:

Have you tried flashing the stock factory images over the xiaomi flash tool ?

Kolibiri said:
Have you tried flashing the stock factory images over the xiaomi flash tool ?
Click to expand...
Click to collapse
Tried it ended with error but device rebooted normaly(its wiered) , but I can enter edl mode, then too Xiaomi flash tool gives error( device not rebooting stays in edl ), can I flash it with qpst?

Had been in a situation like this with a redmi note 3 se. Fixed it with a qcn changed by a trusted moder from xda. It was a long time ago..

Sam.1211 said:
Had been in a situation like this with a redmi note 3 se. Fixed it with a qcn changed by a trusted moder from xda. It was a long time ago..
Click to expand...
Click to collapse
Who can help like that In poco xda forums?, suggestions pls, I want am willing to give my imei to build the qcn to trusted person a real dev

Heamnath said:
Who can help like that In poco xda forums?, suggestions pls, I want am willing to give my imei to build the qcn to trusted person a real dev
Click to expand...
Click to collapse
Flash ROM using qpst tool

JV Spartacus said:
Flash ROM using qpst tool
Click to expand...
Click to collapse
How to, saw more youtube videos but i can't see poco F1 flashing with qpst. What i want is, to erase modemst1 and modemst2 to fix network, and i should flash with qcn

Heamnath said:
How to, saw more youtube videos but i can't see poco F1 flashing with qpst. What i want is, to erase modemst1 and modemst2 to fix network, and i should flash with qcn
Click to expand...
Click to collapse
Download stock firmware in twrp
And use these commands in fastboot mode
fastboot erase modemst1
fastboot erase modemst2

JV Spartacus said:
Download stock firmware in twrp
And use these commands in fastboot mode
fastboot erase modemst1
fastboot erase modemst2
Click to expand...
Click to collapse
I tried in fastboot , it shows, remote:error erasing or cannot flash critical partitions and also tried via twrp it doesn't work, mfastboot also not working...

Heamnath said:
I tried in fastboot , it shows, remote:error erasing or cannot flash critical partitions and also tried via twrp it doesn't work, mfastboot also not working...
Click to expand...
Click to collapse
hi did you get any solution??

Evoku said:
hi did you get any solution??
Click to expand...
Click to collapse
A big sad no!,

[SOLVED] suddenly unknown imei
ok so, i was using my phone normally yesterday, but out of nowhere, my SIM card stopped working and i couldn't use mobile internet/calls anymore. So i checked my settings and i saw my IMEI was marked as unknown, the same with baseband. The A32...
forum.xda-developers.com

FOR DUAL SIM IMEI REDMI 9 LANCELOT

FOR DUAL SIM IMEI REDMI 9
REDMI 9 IMEI NULL/ERROR
1. PREPARE rom_eng/CSC according to each device, take the file preload&cust&md1img to be replaced or moved to a global rom
(use: when reading dimauimeta it's easier & can directly write imei , remember only imei
2, if you want everything you have to install the STROMBAKER FOR LANCELOT kernel)
2. Direct flash global rom version preferably below 11.8.O (remember to replace 3 files numbered 1), after flashing, open Mauimeta and click connect, just unplug and plug it in directly without having to turn it off, write only IMEI 2 (safe for initial boot and backup process), then disconnect & turn on the cellphone normally.
3. After the main menu appears, just check the IMEI has appeared in *#06# or in the settings, if you can unlock the bootloader, you can go to the next stage.
4. unlockbootloader, install twrp preferably version 3.5.2, then in twrp backup only nvdata & nvram& boot, then install strombreaker kernel or special interest in lancelot.
5. directly open Mauimeta click connect, in twrp just restart the system and finally Mauimeta reads automatically, then enter both IMEI and restart again, and check IMEI *#06#
6. if you want to keep using the kernel, you don't have to continue this step, but if you want the original kernel, we continue.
back to twrp, just restore the backup results and restart, check the imei, both are still complete and change only the kernel (return to the original kernel)
7. I tried to upgrade to a rom, the only remaining IMEI 2, if you want 2 IMEI to read, do the above steps again.
ATTENTION: do not update the rom for sure the imei will be lost.
my advice:
MAUIMETA ~ requires preload reading which I suggest replacing earlier & cdc (well, we install this cdc manually, download the file, when Mauimeta asks for our cdc in the computer manager and we install it manually on the reading in question in the computer manager).
LIBUSB~ is useful for locking the mtk preload when first plugged into the computer.
BYPASSMTK~ is useful for locking preloads but with preload changed from rom_eng, so bypass software is not needed when flashing.
so the important thing from these 3 points is the cdc file
very few people want to explain this wide in my opinion.
thanks for CAMMARA.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Quote Reply
Report
[IMG alt="Raiz"]https://forum.xda-developers.com/data/avatars/s/8020/8020437.jpg?1606891852[/IMG]
RaizForum Moderator
Staff member
12 minutes ago
SEE YOU NOW said:
FOR DUAL SIM IMEI REDMI 9
REDMI 9 IMEI NULL/ERROR
1. PREPARE rom_eng/CSC according to each device, take the file preload&cust&md1img to be replaced or moved to a global rom
(use: when reading dimauimeta it's easier & can directly write imei , remember only imei
2, if you want everything you have to install the STROMBAKER FOR LANCELOT kernel)
2. Direct flash global rom version preferably below 11.8.O (remember to replace 3 files numbered 1), after flashing, open Mauimeta and click connect, just unplug and plug it in directly without having to turn it off, write only IMEI 2 (safe for initial boot and backup process), then disconnect & turn on the cellphone normally.
3. After the main menu appears, just check the IMEI has appeared in *#06# or in the settings, if you can unlock the bootloader, you can go to the next stage.
4. unlockbootloader, install twrp preferably version 3.5.2, then in twrp backup only nvdata & nvram& boot, then install strombreaker kernel or special interest in lancelot.
5. directly open Mauimeta click connect, in twrp just restart the system and finally Mauimeta reads automatically, then enter both IMEI and restart again, and check IMEI *#06#
6. if you want to keep using the kernel, you don't have to continue this step, but if you want the original kernel, we continue.
back to twrp, just restore the backup results and restart, check the imei, both are still complete and change only the kernel (return to the original kernel)
7. I tried to upgrade to a rom, the only remaining IMEI 2, if you want 2 IMEI to read, do the above steps again.
ATTENTION: do not update the rom for sure the imei will be lost.
my advice:
MAUIMETA ~ requires preload reading which I suggest replacing earlier & cdc (well, we install this cdc manually, download the file, when Mauimeta asks for our cdc in the computer manager and we install it manually on the reading in question in the computer manager).
LIBUSB~ is useful for locking the mtk preload when first plugged into the computer.
BYPASSMTK~ is useful for locking preloads but with preload changed from rom_eng, so bypass software is not needed when flashing.
so the important thing from these 3 points is the cdc file
very few people want to explain this wide in my opinion.
thanks for CAMMARA.
Click to expand...
Click to collapse

I tried it with Miui 12.5 with android 11 and it didn't worked. I mean, I already had the IMEI 2 written and working, but when I installed the stormbreaker kernel it was softbricked, and not detected by MauiMETA. So I didn't go any further. Is there any advice for this?

migueacastro said:
Saya mencobanya dengan MIUI 12.5 dengan Android 11 dan tidak berhasil. Maksud saya, IMEI 2 saya sudah ditulis dan berfungsi, tetapi ketika saya menginstal kernel stormbreaker itu menjadi softbrick, dan tidak terdeteksi oleh MauiMETA. Jadi saya tidak melangkah lebih jauh. Apakah ada saran untuk ini?
Click to expand...
Click to collapse

It's still giving me that problem, I mean, it softbricks after flashing that kernel

migueacastro said:
Itu masih memberi saya masalah itu, maksud saya, itu softbricks setelah menginstal kernel itu
Click to expand...
Click to collapse
kernel use if you done flash rom global and can open menu normal
after that you instal kernel
if you instal kernel after flash, you phone will error to register activation
i am indonesia, very hard to english language

What flash tool did you use

Did you flash in fastboot? Sorry im newbiee

kazuhiko23124 said:
Did you flash in fastboot? Sorry im newbiee
Click to expand...
Click to collapse
the essence of writing imei is only preload from rom_eng and md1img.img from rom_eng
the process
1. just flash preload and md1img
preload : to read boot without complicated bypass
md1img : for imei writing permission
after flash md1img we must format nvdata and nvram from flashtool so that no errors occur when entering Mauimeta (data format is in scatter)
2. For IMEI writing, use the Mauimeta application, IMEI writing is only for IMEI Sim2, if all are written, there will be an error.
3. If you want 2 IMEIs to be written, you have to complete the above process until the start menu opens, then go back to TWRP, install the Strombreaker kernel, then open Mauimeta again, just write down all IMEIs (kernel works fine on ROM 11.0.9 or above)
required files:
1.preload.bin from rom_eng
2.md1img.img from rom_eng
3.mauimeta good version 10
4.cdc driver for advanced reading of mauimeta
5. flashtool with DA and AUTH, can be used bypass
6.unlockbootloader for those who want to use the strombreker kernel via twrp,
7. the root process is easier in minimaladb
100% success guaranteed

hckbkl said:
the essence of writing imei is only preload from rom_eng and md1img.img from rom_eng
the process
1. just flash preload and md1img
preload : to read boot without complicated bypass
md1img : for imei writing permission
after flash md1img we must format nvdata and nvram from flashtool so that no errors occur when entering Mauimeta (data format is in scatter)
2. For IMEI writing, use the Mauimeta application, IMEI writing is only for IMEI Sim2, if all are written, there will be an error.
3. If you want 2 IMEIs to be written, you have to complete the above process until the start menu opens, then go back to TWRP, install the Strombreaker kernel, then open Mauimeta again, just write down all IMEIs (kernel works fine on ROM 11.0.9 or above)
required files:
1.preload.bin from rom_eng
2.md1img.img from rom_eng
3.mauimeta good version 10
4.cdc driver for advanced reading of mauimeta
5. flashtool with DA and AUTH, can be used bypass
6.unlockbootloader for those who want to use the strombreker kernel via twrp,
7. the root process is easier in minimaladb
100% success guaranteed
Click to expand...
Click to collapse
The preload and md1mg will be copied from rom eng? And then move it to global rom(11.0.9)? And then flash it?

kazuhiko23124 said:
The preload and md1mg will be copied from rom eng? And then move it to global rom(11.0.9)? And then flash it?
Click to expand...
Click to collapse
no,
flashing version 11.0.9.
after than flash just preload & md1img,
than you will bee write imei with mauimeta
remember only imei simcard 2 if you not instaling kernel
step
1.flasing v11.0.9
2.unlockboitloader & instal twrp
3.flash md1img & preload rom_eng
4.format nvdata & nvram, addres & partition in scatter rom folder image
5.open mauimeta write imei simcard2(if not use kernel),if 2 imei write after write imei you reboot to twrp and instaling kernel(best strombreaker)
enjoy

hckbkl said:
no,
flashing version 11.0.9.
after than flash just preload & md1img,
than you will bee write imei with mauimeta
remember only imei simcard 2 if you not instaling kernel
step
1.flasing v11.0.9
2.unlockboitloader & instal twrp
3.flash md1img & preload rom_eng
4.format nvdata & nvram, addres & partition in scatter rom folder image
5.open mauimeta write imei simcard2(if not use kernel),if 2 imei write after write imei you reboot to twrp and instaling kernel(best strombreaker)
enjoy
Click to expand...
Click to collapse
If I already have miui 11.0.9 , i will just flash it just like this?

hckbkl said:
no,
flashing version 11.0.9.
after than flash just preload & md1img,
than you will bee write imei with mauimeta
remember only imei simcard 2 if you not instaling kernel
step
1.flasing v11.0.9
2.unlockboitloader & instal twrp
3.flash md1img & preload rom_eng
4.format nvdata & nvram, addres & partition in scatter rom folder image
5.open mauimeta write imei simcard2(if not use kernel),if 2 imei write after write imei you reboot to twrp and instaling kernel(best strombreaker)
enjoy
Click to expand...
Click to collapse
or i will just replace the preloader and md1img from eng rom in miui 11 and then flash it in fastboot? if yes sir, which preloader i will choose preloader.img, preloader_emmc.img, pre loader_lancelot.bin or pre loader.ufs?

kazuhiko23124 said:
View attachment 5394409or i will just replace the preloader and md1img from eng rom in miui 11 and then flash it in fastboot? if yes sir, which preloader i will choose preloader.img, preloader_emmc.img, pre loader_lancelot.bin or pre loader.ufs?
Click to expand...
Click to collapse
after flash you format nvdata & nvram.
after that open mauimeta write imei simcard 2.reboot

hckbkl said:
after flash you format nvdata & nvram.
after that open mauimeta write imei simcard 2.reboot
Click to expand...
Click to collapse
I still dont get it sir, im sorry I am too newbie for this

hckbkl said:
after flash you format nvdata & nvram.
after that open mauimeta write imei simcard 2.reboot
Click to expand...
Click to collapse
how to format nvdata and nv ram sir

kazuhiko23124 said:
cara memformat nvdata dan nv ram pak
Click to expand...
Click to collapse
open scatter in your rom v11.0.9
in folder image ,open scatter.txt copy addres number & partition number to spflashtool(nvdata & nvram search)
format manual in spflastool like flash rom
after that open mauimeta to write imei simcard 2

kazuhiko23124 said:
how to format nvdata and nv ram sir
Click to expand...
Click to collapse
news trick
# for not unlock bootloader
1.preload.bin and md1img.img from rom_eng
2. flash format&download or flash download rom version 11.0.9 (insert or replace the preload file from rom_eng)
3. when finished, flash only md1img from rom_eng then format nvdata (the format code number is discatter)
4. after that open mauimeta(cdc drive is needed to read imei) write only imei simcard 2, reboot
5. Please enter micloud & register for the unlockbootloader process if needed.
# for already unlocked bootloader
6. root hp & go to twrp install strombreaker kernel, restart and enter mauimeta write both imei simcard 1 & 2
7. flash again using rom version 11.0.9 uncheck recovery, vbmeta (all vbmeta), userdata, super, boot, logo, md1img.

hckbkl said:
news trick
# for not unlock bootloader
1.preload.bin and md1img.img from rom_eng
2. flash format&download or flash download rom version 11.0.9 (insert or replace the preload file from rom_eng)
3. when finished, flash only md1img from rom_eng then format nvdata (the format code number is discatter)
4. after that open mauimeta(cdc drive is needed to read imei) write only imei simcard 2, reboot
5. Please enter micloud & register for the unlockbootloader process if needed.
# for already unlocked bootloader
6. root hp & go to twrp install strombreaker kernel, restart and enter mauimeta write both imei simcard 1 & 2
7. flash again using rom version 11.0.9 uncheck recovery, vbmeta (all vbmeta), userdata, super, boot, logo, md1img.
Click to expand...
Click to collapse
What is hp sir

You mean root my device? And then Im going to install twrp? If I successfully installed the twrp, Im going to reboot my device? And enter mauimeta? (In what state fastboot or just turn off the phone for entering mauimeta?)
Then if im successfully write both imei 1 and 2
Im going to flash the miui 11.0.9 and uncheck recovery, vbmeta, user data, super, boot, logo, md1mg?( in fastboot too?)

Question Can someone send me the backup image or bin of NVDATA, NVRAM and nvcfg?

I Flashed using SP Tool and i don't have backup of the partition.
i want the file so i can edit it and paste my imei.
NVDATA, NVRAM and nvcfg
mine boots to recovery and it says NVDATA corrupt.
PLZ HELP!

where to find it?

xn0live said:
where to find it?
Click to expand...
Click to collapse
It's a system partition.
Backup using SP Flash Tool V6 (from Mi Flash Pro Tool) by using Read Back and using mtkmeta utility for bypassing authentication file.
Install Microsoft visual C++ 2015 - 2022 Redistributable for SP Flash tool V6 to work.. RESTART PC AFTERWARDS
Install the libusb-win32.....driver and install the filter after setup by using your phone in BROM ( when power off, press and hold volume up and down together and connect USB to PC, Then you will see your phone detected on Filter installer wizard and select it and click install quickly as possible (within 3 seconds). other wise the phone is going to disconnect and boot back.
You also need to download the firmware and load the scatter file in to the SP Flash tool and Bypass authentication using MTKMETA Utility and go to read back to back up these Partitions in Img or bin format. USE Youtube for this purpose.

no sry to complicate

xn0live said:
no sry to complicate
Click to expand...
Click to collapse
It's ok

These are the partition of Poco M4 Pro 4G after losing IMEI and restoring it using DFT Pro. I formatted the phone afterwards and the IMEI was not permanent and it showed NVDATA corrupted and was not able to boot. These was the partition before getting the error. I did restore the partition and it showed the same error. Hope someone find it useful.... Use MI Flash Pro > SP flash tool V6 to restore.

Better Mobile App

welcome