[ENGINEERING][ROM][OFFICIAL] OFFICIAL Engineering Firmware for LANCELOT (Redmi 9 / Redmi 9 Prime)

Search This thread

VD171

Senior Member
Jun 21, 2012
1,623
2
1,510
127.0.0.1
LG K10
Samsung Galaxy J7
i manually changed the AP DP folders and the md1img and flashed the rom again, the baseband version changed to P57. the previously written IMEIs are there, but no network.
erased NVRAM and NVDATA to write the IMEIs again, but ModemMeta couldn't write IMEIs to the phone anymore.
If you had NVRAM, why did you erase it ??
 
  • Like
Reactions: RN9_G85

dmtec

Member
May 20, 2018
14
7
OnePlus 6T
Redmi 9
password doesn't work. i don't understand why it's necessary to encrypt a zip like this when it's the only circulating image to my knowledge. not good for anyone in the future trying to find an engineering rom with potentially no password. going to look for a download elsewhere (hopefully)
 
  • Like
Reactions: VD171

dmtec

Member
May 20, 2018
14
7
OnePlus 6T
Redmi 9
password doesn't work. i don't understand why it's necessary to encrypt a zip like this when it's the only circulating image to my knowledge. not good for anyone in the future trying to find an engineering rom with potentially no password. going to look for a download elsewhere (hopefully)

nevermind, to anyone who actually downloads this, as it seems i'm either the first one or i follow instructions pretty precisely because the password to the zip is in the file "PASSWORD_BY_VD171" attached in the first post
 
Last edited by a moderator:
  • Like
Reactions: VD171

VD171

Senior Member
Jun 21, 2012
1,623
2
1,510
127.0.0.1
LG K10
Samsung Galaxy J7
password doesn't work. i don't understand why it's necessary to encrypt a zip like this when it's the only circulating image to my knowledge. not good for anyone in the future trying to find an engineering rom with potentially no password. going to look for a download elsewhere (hopefully)
The password is attached on the thread.
Enjoy
 

dmtec

Member
May 20, 2018
14
7
OnePlus 6T
Redmi 9
nevermind, to anyone who actually downloads this, as it seems i'm either the first one or i follow instructions pretty precisely because the password to the zip is in the file "PASSWORD_BY_VD171" attached in the first post

wow a moderator actually edited my post and didn't even leave what i said behind?

the password IS NOT "PASSWORD_BY_VD171" it is "VD171" -- moderator did you even download it for yourself to make sure i wasn't giving false info?? the password is indeed what i said. that's kinda screwy, because you could have at least strikethroughed what i said and "corrected" it underneath lol. whatever
 
  • Like
Reactions: VD171

yurais

Senior Member
Feb 10, 2008
324
15
any chance you could also link in your first post, a link to the Stock Global latest firmware? just to keep all the needed stuff in a single thread... for the lazys ;)
 
  • Like
Reactions: VD171

VD171

Senior Member
Jun 21, 2012
1,623
2
1,510
127.0.0.1
LG K10
Samsung Galaxy J7
  • Like
Reactions: RN9_G85

hckbkl

Member
Jun 12, 2021
49
0
75
Xiaomi Black Shark 4
Thank you man, please someone can post a tutorial how to fix the IMEI with this rom? Normal AT commands is not working :( gives ERROR
i managed to make 2 imei redmi 9.
1. unlock bootloader, flash rom eng!!! or assembled rom.
2. After completing write IMEI using Maumeta version 10.
3. install twrp and backup nvram and nvdata on rom eng!!!, copy the twrp backup results to the computer.
4. flash format & download global rom, then unlock bootloader again, turn on the phone until the start menu, then turn off the phone and install twrp, then put the backup results into twrp and restore, then install the kernel from strombreaker v1.0, when finished immediately reboot the system.
goodluck, it worked 1000%
 

hckbkl

Member
Jun 12, 2021
49
0
75
Xiaomi Black Shark 4
Hello.
Would I need to flash the ENG ROM and then use Meta Modem to do the imei2 rewrite?
i managed to make 2 imei redmi 9.
1. unlock bootloader, flash rom eng!!! or assembled rom.
2. After completing write IMEI using Maumeta version 10.
3. install twrp and backup nvram and nvdata on rom eng!!!, copy the twrp backup results to the computer.
4. flash format & download global rom, then unlock bootloader again, turn on the phone until the start menu, then turn off the phone and install twrp, then put the backup results into twrp and restore, then install the kernel from strombreaker v1.0, when finished immediately reboot the system.
goodluck, it worked 1000%
 

hckbkl

Member
Jun 12, 2021
49
0
75
Xiaomi Black Shark 4
i manually changed the AP DP folders and the md1img and flashed the rom again, the baseband version changed to P57. the previously written IMEIs are there, but no network.
erased NVRAM and NVDATA to write the IMEIs again, but ModemMeta couldn't write IMEIs to the phone anymore.
i managed to make 2 imei redmi 9.
1. unlock bootloader, flash rom eng!!! or assembled rom.
2. After completing write IMEI using Maumeta version 10.
3. install twrp and backup nvram and nvdata on rom eng!!!, copy the twrp backup results to the computer.
4. flash format & download global rom, then unlock bootloader again, turn on the phone until the start menu, then turn off the phone and install twrp, then put the backup results into twrp and restore, then install the kernel from strombreaker v1.0, when finished immediately reboot the system.
goodluck, it worked 1000%
 

buczek0711

Senior Member
Jun 5, 2012
58
4
27
Sosnowiec/Krakow
Redmi 9
Hi there.
I've got few questions to op regarding this rom.
I'm currently in situation when I at some point overwritten/deleted imei , mac adres and not sure about anything else. I've got original stickers with imei, however phone, no matter if it is on miui (11 or 12) or custom (yes, it is rooted, custom recovery works, backups works, so far only waveos is the rom I've managed to run with no errors here, but it is something) imei shows nothing besides serial number of phone (no imei name when typing *#06#, unknown imei in "about phone"). Phone works normally, however, there are err nvram 0x10, that I cannot fix (despite putting WIFI file with corrected mac adres in hex, just as google says) and there are no mobile data (provider do not matter, as well as resetting the settings for mobile).
I would love to read it back (if it is possible) or rewritten it with given numbers. So far, my tries with hydra, maui and other programs went to nothing, mostly because being unable to successfully connect with phone in metamode (however, it worked back in the days when I was writing on it miui 12 using SP flashtool, old fashioned way, with unplugged battery). Hydra mtk was unable to open itself (not sure why, 'cuz no errors were given in log).
My last thought was about trying to extract proper paritions from internal storage, download it onto pc, open in hex editior and manually change all empty places or zeros to proper digits/hex values. I've got older redmi tulip with the same sized partitions and I though that I could use it as matrix to compare (not to copy 1:1, to compare) data between two of these. However, it looks like this rom is faster and safier way to do so.

Anyway - is it being installed just like normal fastboot/recovery rom?
How I can ensure myself that this time maui will work? Could it be too new os? (most likely no, since I don't care about security updates xD) I've installed all drivers that programs wanted me to, but that still gave no possitive effect. Neither "programming options", which I had turned on finally yesterday (totally forgotten about that in all that mess).
Can I edit manually old/new/any partitions offline (on pc) and then send them to phone with proper rights, while phone is in recovery mode?
What is the actual procedure of writing imei, if this phone is imei 1 and imei 2? Which comes first?

Sorry, if these questions sounds noobish, I've just reached point, where I've tried so many different stuff and read about so many different solutions, that I don't know anymore what works, and what does not (any why).
 

hckbkl

Member
Jun 12, 2021
49
0
75
Xiaomi Black Shark 4
Wassalammualaikum warhohmatullahi wabarhokatu.
if you experience flash failure with flashtool, use a pc application called bypass brom.
in "DA" and "AUTH" require file bypass.
some flashtool there are some that work version.
i suggest only imei 2 written for sim 2 communication convenience.
I tried to write 2 IMEI, it turned out to be experiencing interference from the Xiaomi turning off the network connection.
I have not tried the install file via file recovery instead of fastboot.
because I see there is a big opportunity in it to change the whole software structure.
 

toryang

New member
Mar 8, 2017
2
0
Does anyone knows the compatible stock rom of this. I already fix my imei but to get to reflash stock rom without format all+download(PMT ERROR). I need the compatible stock rom of this. I cant successfully install twrp in eng rom it causes the system destroy
 

toryang

New member
Mar 8, 2017
2
0
i managed to make 2 imei redmi 9.
1. unlock bootloader, flash rom eng!!! or assembled rom.
2. After completing write IMEI using Maumeta version 10.
3. install twrp and backup nvram and nvdata on rom eng!!!, copy the twrp backup results to the computer.
4. flash format & download global rom, then unlock bootloader again, turn on the phone until the start menu, then turn off the phone and install twrp, then put the backup results into twrp and restore, then install the kernel from strombreaker v1.0, when finished immediately reboot the system.
goodluck, it worked 1000%
Where did you get the stormbreaker kernel. Im searching for it for a day now.
 

hckbkl

Member
Jun 12, 2021
49
0
75
Xiaomi Black Shark 4
Adakah yang tahu stock rom yang kompatibel ini. Saya sudah memperbaiki imei saya tetapi untuk reflash stock rom tanpa format all+download (PMT ERROR). Saya membutuhkan stock rom yang kompatibel ini. Saya tidak berhasil menginstal twrp di eng rom itu menyebabkan sistem hancur

you have to unlock the bootloader. after that install vbmeta.img and recovery.img via adb. after that you can go into recovery. i found one more way to write 2 imei easily but the phone should be able to unlockbootloader.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 2
    How to backup NVDATA ?
    Doing a readback with spflashtool or doing a backup with twrp.
    1
    Kind of new to xiomi. I waited 1 week to unlock bootloader. After unlocking i tried to install twrp recovery. On fastboot boot recovery.img command my phone went to bootloop. It wont stop even when my battery depleted completely. Whenever i connect it with pc bootloop starts again without pressing anything. I was frustrated then with sp tool mistakenly formatted phone without any system backup. Eventually i flashed downgraded stock rom. But my bootloader somehow locked again. Don't know how! And now my imei gone. Can't follow previous bootloader unlock process, cause adding account in mi unlock status reauires active sim card inserted. So now i can't take backup after changing imei in eng rom. Just imei lost. Everything else works. Am I missing something here? Any suggestion?
    1
    Kind of new to xiomi. I waited 1 week to unlock bootloader. After unlocking i tried to install twrp recovery. On fastboot boot recovery.img command my phone went to bootloop. It wont stop even when my battery depleted completely. Whenever i connect it with pc bootloop starts again without pressing anything. I was frustrated then with sp tool mistakenly formatted phone without any system backup. Eventually i flashed downgraded stock rom. But my bootloader somehow locked again. Don't know how! And now my imei gone. Can't follow previous bootloader unlock process, cause adding account in mi unlock status reauires active sim card inserted. So now i can't take backup after changing imei in eng rom. Just imei lost. Everything else works. Am I missing something here? Any suggestion?
    You should never flash using the "format all" mode, or you will lose imei and mac.
    If you flash the file misc.bin, you will got a bootloop.
    1
    Now possible
    Write imei to slot1 and slot2
    Perfect ly woriking
    1
    sorry boss I mean: do you have software to write the IMEI.
    and why don't you help in this forum?
  • 4
    Works with:
    - Xiaomi Redmi 9
    - Xiaomi Redmi 9 Prime

    Build Date:
    2020/06/23

    Android Version:
    QP1A.190711.020

    Display ID:
    AL2615-lancelot-V011-Q-0623

    Build Fingerprint:
    Redmi/lancelot/lancelot:10/QP1A.190711.020/6:userdebug/test-keys

    Security Patch:
    2019/12/05

    Radio/Modem/Baseband Version:
    MOLY.LR12A.R3.MP.V98.P16

    Download:
    https://www.mediafire.com/file/7fs4...V011-Q-0623_QP1A.190711.020_by-VD171.zip/file

    Password:
    Pass is in the attached file: PASSWORD_by_VD171.txt

    How to flash it?
    Use the attached scatter file.

    Radio/Modem/Baseband properties:
    Code:
    md1_dbginfodsp=DbgInfo_DSP_MT6768_MOLY_LR12A_R3_MP_V98_P16_2020_04_05_21_55.xz
    md1_dbginfo=DbgInfo_LR12A.R3.MP_HUAQIN_Q0MP1_MT6769_SP_MOLY_LR12A_R3_MP_V98_P16_2020_04_22_12_37.xz
    md1_mddbmeta=MDDB.META_MT6768_S00_MOLY_LR12A_R3_MP_V98_P16.EDB
    md1_mddbmetaodb=MDDB.META.ODB_MT6768_S00_MOLY_LR12A_R3_MP_V98_P16.XML.GZ
    md1_mddb=MDDB_InfoCustomAppSrcP_MT6768_S00_MOLY_LR12A_R3_MP_V98_P16.EDB

    Prop.default:
    Code:
    ro.build.version.incremental=6
    ro.odm.build.version.incremental=6
    ro.vendor.build.version.incremental=6
    ro.build.version.security_patch=2019-12-05
    ro.vendor.build.security_patch=2019-12-05
    ro.build.display.id=AL2615-lanceelot-V011-Q-0623
    ro.vendor.mediatek.version.release=alps-mp-q0.mp1.tc8sp2-V1.9.1_huaqin.q0mp1.k69v1.64_P17
    ro.build.product=lancelot
    ro.product.board=lancelot
    ro.product.odm.device=lancelot
    ro.product.odm.model=lancelot
    ro.product.odm.name=lancelot
    ro.product.product.device=lancelot
    ro.product.product.model=lancelot
    ro.product.product.name=lancelot
    ro.product.system.device=lancelot
    ro.product.system.model=lancelot
    ro.product.system.name=lancelot
    ro.product.vendor.device=lancelot
    ro.product.vendor.model=lancelot
    ro.product.vendor.name=lancelot
    ro.build.flavor=lancelot-userdebug
    ro.build.description=lancelot-userdebug 10 QP1A.190711.020 6 test-keys
    ro.board.platform=mt6768
    ro.build.id=QP1A.190711.020
    ro.odm.build.id=QP1A.190711.020
    ro.product.build.id=QP1A.190711.020
    ro.system.build.id=QP1A.190711.020
    ro.vendor.build.id=QP1A.190711.020
    ro.bootimage.build.fingerprint=Redmi/lancelot/lancelot:10/QP1A.190711.020/6:userdebug/test-keys
    ro.odm.build.fingerprint=Redmi/lancelot/lancelot:10/QP1A.190711.020/6:userdebug/test-keys
    ro.product.build.fingerprint=Redmi/lancelot/lancelot:10/QP1A.190711.020/6:userdebug/test-keys
    ro.system.build.fingerprint=Redmi/lancelot/lancelot:10/QP1A.190711.020/6:userdebug/test-keys
    ro.vendor.build.fingerprint=Redmi/lancelot/lancelot:10/QP1A.190711.020/6:userdebug/test-keys
    ro.build.tags=test-keys
    ro.odm.build.tags=test-keys
    ro.system.build.tags=test-keys
    ro.vendor.build.tags=test-keys
    ro.build.type=userdebug
    ro.odm.build.type=userdebug
    ro.system.build.type=userdebug
    ro.vendor.build.type=userdebug
    ro.bootimage.build.date=Tue Jun 23 16:00:24 CST 2020
    ro.build.date=Tue Jun 23 16:00:24 CST 2020
    ro.odm.build.date=Tue Jun 23 16:00:24 CST 2020
    ro.product.build.date=Tue Jun 23 16:00:24 CST 2020
    ro.system.build.date=Tue Jun 23 16:00:24 CST 2020
    ro.vendor.build.date=Tue Jun 23 16:00:24 CST 2020

    MD5 hashes:
    Code:
    APDB_MT6768_S01__W2006 -> 7177e8c1bb17e5fd98f0e6723799c50d
    boot-debug.img -> 8cd7eda58701088c5080fc18eee2d01b
    boot.img -> 81cc18e714ea49a328f6f4da95d08268
    cache.img -> df336c69fc9169d8c248bf0159dabd19
    Checksum.ini -> 37b76d2bc20b7da2f98f68d64b2c2390
    crclist.txt -> e5f360ad6f480f9635cca523487d1936
    cust.img -> e8c4e9f4ee0fe5052cf0dc356aedd8de
    DbgInfo_LR12A.R3.MP_HUAQIN_Q0MP1_MT6769_SP_MOLY_LR12A_R3_MP_V98_P14_2020_04_02_09_21_1_ulwctg_n -> b98ee0dd6410d951a97dc06195ba83e8
    dtb.img -> bfe051e750bab9942d3509be26852f76
    dtbo-verified.img -> 4849e7b4147d1f145b6cabeb89ad75f4
    dtbo.img -> 4849e7b4147d1f145b6cabeb89ad75f4
    efuse.img -> 421f2cead0fbea555680b96136555941
    exaid.img -> e8c4e9f4ee0fe5052cf0dc356aedd8de
    lk-verified.img -> 03f3abe6f7b74eae1bb2faf5117662b3
    lk.img -> 03f3abe6f7b74eae1bb2faf5117662b3
    logo.bin -> e72a0fbf91e0efcc13012c71312fc376
    md1arm7.img -> a0453e723dc84255940d7791740d06db
    md1img-verified.img -> 8be0824b8be8d366c08a346df1d73a76
    md1img.img -> 8be0824b8be8d366c08a346df1d73a76
    md3img.img -> 9a9c185e3f6234103e5949716b9962d2
    MDDB.META.ODB_MT6768_S00_MOLY_LR12A_R3_MP_V98_P14_1_ulwctg_n.XML.GZ -> 376361df52cddd8e2d8127c009ad9a97
    MDDB.META_MT6768_S00_MOLY_LR12A_R3_MP_V98_P14_1_ulwctg_n.EDB -> 762c8ba299c76dde214394d8e7e3fc7e
    MDDB_InfoCustomAppSrcP_MT6768_S00_MOLY_LR12A_R3_MP_V98_P14_1_ulwctg_n.EDB -> a5757c7b6acf3e52ce051d731f1e11ab
    MT6768_Android_scatter.txt -> 49ccb3ee5ebcd5a1da213f6e6a97f6e0
    preloader.img -> 97d4bf8c5d7eb7077242643355154121
    preloader_emmc.img -> 97d4bf8c5d7eb7077242643355154121
    preloader_lancelot.bin -> 3d78e9cdf37504c6f4b6e085b9c0ed23
    preloader_ufs.img -> 2ca4e781fc1716fb9f818fd3bc13708a
    product.img -> 8a2a3b2e34c7ad615385f52a578ac19e
    ramdisk-debug.img -> e983139c5a4a17f856b48a9168462246
    ramdisk-recovery.img -> 83730e31866842708346352df1364019
    ramdisk.img -> b280f1a76fd113fa4a2819c131bd5a4b
    recovery.img -> 85a47773595b006fd430826f5b88d76c
    scp-verified.img -> fad098e9a4ac55809437bcda5702d5e2
    scp.img -> fad098e9a4ac55809437bcda5702d5e2
    secro.img -> 096587b863e1252d67b1b8307291db09
    sparsecrclist.img -> 9a027470a494d216f144b6a2ac86c440
    sparsecrclist.txt -> ff3cdb1767f609ccd66fb994b02e030a
    spmfw-verified.img -> 34c71ef9e7b790d06b1c935a36d41c7c
    spmfw.img -> 34c71ef9e7b790d06b1c935a36d41c7c
    sspm-verified.img -> 49adc450b2c4aca22ed17a59064e4dc3
    sspm.img -> 49adc450b2c4aca22ed17a59064e4dc3
    super.img -> fd0ac354f4e40d4ffb9fd4e11b9d2e3b
    super_empty.img -> a6d56d7a12d989bf31511d866449291d
    system.img -> dab92acecad053e31bebe8d2872029b5
    tee-verified.img -> 25e64f2ddb3d8cffa1fd6a1f7d2137a2
    tee.img -> 25e64f2ddb3d8cffa1fd6a1f7d2137a2
    userdata.img -> fc22c593b15f28f4fe0f9a462334ea70
    vbmeta.img -> d763d4e03d647df580e193da6c046b5b
    vbmeta_system.img -> 51618fef8d4e5c535c5c779a4cf4e8b7
    vbmeta_vendor.img -> 4c12ab0788baad9d32d95dbd33da1442
    vendor.img -> 4878e677e80d6ceaa73c30722682d41f
    2
    How to backup NVDATA ?
    Doing a readback with spflashtool or doing a backup with twrp.
    2
    Thank you man, please someone can post a tutorial how to fix the IMEI with this rom? Normal AT commands is not working :( gives ERROR
    You need MODEM META for that.
    2
    password doesn't work. i don't understand why it's necessary to encrypt a zip like this when it's the only circulating image to my knowledge. not good for anyone in the future trying to find an engineering rom with potentially no password. going to look for a download elsewhere (hopefully)
    The password is attached on the thread.
    Enjoy
    2
    Thanks for replaying
    Im tryed edit another nv ram with hex
    But no possible (
    No, you can't.
    I'm sorry, my friend.
    If you discover anything, please tell me too.