• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

Flash international ROM to Tmobile/Metro w/ locked bootloader

Search This thread
Is anyone able to confirm if this works for the T-Mobile variant? I'm already network unlocked so I'm not worried about getting OEM unlocking enabled.

It should work for tmobile variant. Just change the project ID and identification hash in settings.xml inside the global rom to match your device.

You'll need to download both stock tmobile and global to do compare settings.xml.
 

arda99

Senior Member
Jan 4, 2011
251
73
Here is a post for 7T



"fastboot flashing unlock_critical" works when TMo 7T loaded with global firmware. Might worth trying on our N10.
 
  • Like
Reactions: ieatgravity
Here is a post for 7T



"fastboot flashing unlock_critical" works when TMo 7T loaded with global firmware. Might worth trying on our N10.

Thanks for the heads up.

I tried the command however it has a problem with the flashing syntax of the command and goes straight to the --help. fastboot oem unlock_critical basically just says it cannot be done in a locked state. Same with booting boot or recovery imgs.

Tied some of the patched msm download tools from the 7T as well but the don't seem to work since it is looking for android 9 and the lowest I can find for our device is android 10

Will need to figure out a way to ungrey out OEM unlock within developer options to do any bootloader stuff.

Thought by flashing the international rom it would allow it to unlock however it doesn't seem to be the case. Correct me if i'm wrong but shouldn't after flashing the international rom it should change the device ID? Mine is still showing BE2025.

According to the hardware variant thread:

BE2025 - Metro, maybe t-mobile? <- Still showing
Be2026 - NA
BE2028 - EU?
BE2029 - Global <- Should be showing?

Out of curitosity does the EU variant allow OEM unlock?
I might try flashing that one as well since "cross flashing" seems somewhat working as long as you modify the settings.xml to detect the current device. Perhaps I can try to modify the settings.xml to avoid checking all together?
 

arda99

Senior Member
Jan 4, 2011
251
73
Thanks for the heads up.

I tried the command however it has a problem with the flashing syntax of the command and goes straight to the --help. fastboot oem unlock_critical basically just says it cannot be done in a locked state. Same with booting boot or recovery imgs.

did you get the latest fastboot?

in my stock metro phone.


C:>fastboot flashing unlock_critical
FAILED (remote: 'Flashing Unlock is not allowed
')
fastboot: error: Command failed


so at least it's a valid command.
 
So I made an attempt to do this with the TMO variant. After making the edits, MSM tool just throws that the device doesn't match the project ID (even though I changed it in the ops file as required) So I'm not entirely sure how to proceed. I know the TMO MSM files I used are good as I flashed it to my phone to make sure I got the right files.

DId I miss something? I changed the "Project" line to match the TMO version as well as the "ModelVerifyRandom" was there anything else I needed to change?
 
So I made an attempt to do this with the TMO variant. After making the edits, MSM tool just throws that the device doesn't match the project ID (even though I changed it in the ops file as required) So I'm not entirely sure how to proceed. I know the TMO MSM files I used are good as I flashed it to my phone to make sure I got the right files.

DId I miss something? I changed the "Project" line to match the TMO version as well as the "ModelVerifyRandom" was there anything else I needed to change?

No that should be all. Just make sure you flash the modified ops file with the MSM that came with the tmobile ops. Make sure it has the same file name as then original ops as well.
 
And I have success!!! I have flashed my TMO variant to the international firmware.

As far as what I did personally to get it working, I copied the entire third line (line numbered with Notepad++) into the INT settings file. Repacked and then the MSM tool took it just fine. IDK what else the TMO variant checks for in terms of device checking but I was able to get passed it.
 
  • Like
Reactions: ieatgravity
What's the T-Mobile Project code?

The TMO files I used are here: https://forum.xda-developers.com/t/...l-to-restore-your-device-to-oxygenos.4245455/

Once you extract both the TMO version and the INT version, copy the third line bit for bit from the TMO settings file and replace the third line in the INT settings file with your copied string.

Save and repack

TMO MSM tool should take it no problem.

Thinking in theory, this "should" work for all 1+ devices that carry the same hardware variations between versions. This was a hell of a find.
 
The TMO files I used are here: https://forum.xda-developers.com/t/...l-to-restore-your-device-to-oxygenos.4245455/

Once you extract both the TMO version and the INT version, copy the third line bit for bit from the TMO settings file and replace the third line in the INT settings file with your copied string.

Save and repack

TMO MSM tool should take it no problem.

Thinking in theory, this "should" work for all 1+ devices that carry the same hardware variations between versions. This was a hell of a find.

Anyway you could do a device dump with the INT rom with your unlocked bootloader?

You can use msm to do it (prefered actually)

1. Open MSM and press F8 on your keyboard
2. The readback window will open. Do CTR+A to select all
3. In password type "oneplus"
4. Click start
5. Plug phone into usb on computer (powered on)
6. In cmd "adb reboot edl"
7. MSM will detect and dump your partitions (no user data I believe)

Once it finishes the files will be in c:/

Zip them up and post it. I want to see if I can flash those to mine to (sim unlock?) Unlock the bootloader.
 
Anyway you could do a device dump with the INT rom with your unlocked bootloader?

You can use msm to do it (prefered actually)

1. Open MSM and press F8 on your keyboard
2. The readback window will open. Do CTR+A to select all
3. In password type "oneplus"
4. Click start
5. Plug phone into usb on computer (powered on)
6. In cmd "adb reboot edl"
7. MSM will detect and dump your partitions (no user data I believe)

Once it finishes the files will be in c:/

Zip them up and post it. I want to see if I can flash those to mine to (sim unlock?) Unlock the bootloader.
Once I hear back from 1+ and do the unlock sure!

Even though I was able to flash the international version the bootloader still wants the auth token for unlocking.
 
Once I hear back from 1+ and do the unlock sure!

Even though I was able to flash the international version the bootloader still wants the auth token for unlocking.
Tbh I figured flashing it would allow it to be unlocked. I wonder if the a/b partition scheme would have anything to do with it. According to the settings.xml not everything has a/b but the ones that do, are flashed on a using MSM.

The Git for the ops decrypt tool has A LOT of interesting edl python scripts btw. Worth checking out. Planning on playing with them soon.

There is one that is something like "edl.py" that acts just like MSM and is tested with Nord n10 to work. But I believe it is ready only..
 

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    no need for the token, i have found a way that should work on most oneplus phones. all you need is the firehose pulled from the ops file. to back up modemst1 and 2 throw edl mode, once u have done this you can erase them with Qfil , then with a moded msmdownload the oem unlock will now not be grayed out, . always make a back up of the modemst1 and st2.. also it dont hurt to make a backup of the oem_dycnvbk.bin this is were the main copy of your imei is located and is encrypted,
  • 3
    I looked at his github code several months ago and it doesn't seem to be legitimate, more like fishing code.
    Like the code he claims to sim unlock, it actually just bypass the setup security and has nothing to do with sim network unlock.

    td;rl: bypassed metropcs sim unlock to ungrey oem unlock and got my unlock code for oneplus

    I tried his method, and it didn't work. Looking back I think I didn't follow the instructions properly.


    BUTTTTTT

    On his github it said his version was a fork of @w1nst0n_fr Universal ADB Debloater. So I tried that out.

    Ran the script, debloated using OnePlus.sh and Qualcomm.sh through the menu.

    Once complete rebooted the device and OEM UNLOCK WAS UNGREYED.

    I was able to toggle it on

    Rebooted into bootloader and ran "fastboot oem unlock" and received something about i must enter the unlock code first (PROGRESS!)

    ran "fastboot oem get_unlock_code" and got the unlock code WITHOUT waiting 180 days on MetroPCS to Sim unlock.

    Not sure if it is actually sim unlocked as I do not know how to test it without swapping sim cards (any suggestions?)
    3
    For those asking for the T-Mobile variant to be uploaded. I have crap upload but am currently trying to upload the patched ops file to share. Once I get it uploaded I'll post it here for you all.
    2

    MAJOR UPDATE: Managed to flash Global stock rom to the MetroPCS variant


    Pros: Stock Oneplus and everything works
    Cons: OEM unlock is still greyed out

    Before you go any further:

    THERE IS NO ROOT FOR THIS DEVICE WITH A LOCKED BOOTLOADER (YET). THIS THREAD IS FOR THE DEVELOPMENT AND TESTING OF METHODS TO ACHIEVE THIS.

    Just got this device from MetroPCS this week and love this device. However I found out very quick that you have to be with MetroPCS for 180 days before you can get unlocked. To unlock the bootloader you have to be sim unlocked from the carrier.

    This thread will be for development of a working root process for others to offer perspective. Feel free to try to replicate at your own risk. If anyone is interested in these files/tools let me know and I will publish more links.


    ;Download international and metro ROM and MSM tool from these thread (thanks to @Some_Random_Username)​

    International

    MetroPCS

    This download will include the latest MSM Download Tool

    The work around that I found does not need MSM to be patched

    ;TOOLS
    download and extract oppo decrypt master
    unpack and repack .OPS files for use with MSM Download Tool 4 .exe




    ----------------------------------------------------------------------------------------------------------------------------------------------

    Method

    ----------------------------------------------------------------------------------------------------------------------------------------------
    TD;RL:
    Extract the .ops file, open settings.xml replace the project ID, repack

    Set up:
    1. Download international zip and metro zip from above, extract into 2 seperate folders and delete billie8t_14_O.01_201218.ops in the metro folder
    2. have adb installed
    3. Install python3 and prereqs for oppo decrypt master

    Extract .ops, edit and flash:
    1. unzip the zip file with the .ops file from both folders and move it to the folder with oppo decrypt
    2. run "python3 opscrypto.py decrypt billie8_14_O.01_210128.ops" (decrypt both .ops files from each firmware, the first one being the metro and get the /extract/settings.xml file and open it. we will need info from it)
    3. Now extract the international firmware with opoo decrypt and open the extract folder
    4. open "settings.xml" from both firmwares in your favorite editor
    6. Change the following in the international settings.xml: Project=20886 to Project=20885 and ModelVerifyRandom= (THESE NEED TO BE EXACTLY WHAT ARE IN THE METRO SETTINGS.XML file)
    6. Save the file
    7. run "python3 opscrypto.py encrypt extract". This will create a file called out.ops
    8. Once finished place out.ops into the metro firmware folder and rename to "billie8t_14_O.01_201218.ops"
    9. With your phone turned on, plug your phone into the computer
    10. Open MSMdownloadtoolv4.0.exe and press start
    11. Run "adb reboot edl"
    12. Your computer should recognize and start the download.
    13. Wait a while and it will reboot.



    Here is my working files for anyone who wants to tinker
    Includes MSMdownloadtools, modded OPS file and (edited settings.xml and patched recovery.img inside OPS)

    Updated downloads include:
    Decrypted Metro OPS (IMGs, BIN, etc)
    Metro to Global (OPS)
    Metro to Global w/ magisk patched recovery (ZIP)
    Google Drive - Updated 7/11/2021
    2
    I was able to flash the Global stock Oneplus rom using MSM download tools to the MetroPCS Nord N10 5G.

    BUT

    OEM unlock is still greyed out. Any ideas?

    also updated first post with how to replicate what I did to flash. This should work on any variant as long as you replace the project number to your own
    2
    You wanted it, you asked for it, here it is in its patched glory. I give you the modified N10 5G TMobile GLOBAL install file for the TMobile MSM tool.

    As the instructions in the OP, just drop this file in to a downloaded tmobile MSM tool, start the flash, and boot your device to EDL. Whole process took me approx. 5min 15sec start to boot.

    Modded file is HERE

    The file does NOT need to be renamed! For your own personal safty BACKUP YOUR ORIGINAL OPS FILE BEFORE MOVING THE MODDED FILE IN PLACE!

    If someone could mirror the file that would be fantastic!!