General Journal: A brand new OPPO Find X3 Pro (UK/EE) - From new to clean de-bloated android (hopefully)

Search This thread
By:
Advanced…
PaulGWebster

PaulGWebster

Senior Member
Jan 28, 2022
61
13
Lincolnshire, UK
LG G6
OPPO Find X3 Pro
syneoa said:
have you managed to remove this heytap shortcut from settings? I have removed:
com.heytap.music
com.heytap.mcs
com.heytap.accessory
as these are the only heytap apks in my phone but still having this :(

View attachment 5535649
Click to expand...
Click to collapse
yeah I have not got rd of that yet, but I have an idea :) I will give it a try at the weekend though as im pretty sure I am about to softlock the phone and have to hard reset it lol
 
  • Like
Reactions: syneoa
S

Soft_M

Member
Jul 3, 2021
16
24
PaulGWebster said:
Ok so now we know we can enter qualcomms emergency recovery mode ... now how the heck do we do anything from here, can we do anything from here .... I did locaet a tool called mitool but cannot appear to find any firmware or 'firehose' files that will work with it...
Click to expand...
Click to collapse
have you tried this tool?
github.com

GitHub - bkerler/edl: Inofficial Qualcomm Firehose / Sahara / Streaming / Diag Tools :)

Inofficial Qualcomm Firehose / Sahara / Streaming / Diag Tools :) - GitHub - bkerler/edl: Inofficial Qualcomm Firehose / Sahara / Streaming / Diag Tools :)
github.com github.com
 
User154

User154

Member
Aug 19, 2022
32
11
PaulGWebster said:
seems to be updated regular, might give the old oppo a backup see what it does (thank god its insured lol)
Click to expand...
Click to collapse
Yeah I've been toying with the idea, but this being my daily driver I don't really want to brick it seeing as there is no firmware dump available for our region.

I think a dump of the entire device could be useful, there are a few locations I would be interested in exploring (please see attached pic) as they relate to the secrcey configuration for accessing engineer mode. Also not pictured there is a location (I cant remember it off the top of my head) where I believe the download mode key required by the fastbootUnlock method of the oplusEngineerManager class is stored.
 

Attachments

  • IMG20220927100224.jpg
    IMG20220927100224.jpg
    634.1 KB · Views: 49
User154

User154

Member
Aug 19, 2022
32
11
JRSim_UIX said:
Did you try using the official bootloader unlocker from Oppo or Real me?

Or the mtk client instead of the official bootloader?

www.droidwin.com

Unlock Realme Bootloader using MTK Client [Without In-Depth Test APK]

In this guide, we will show you the steps to unlock the bootloader on your Realme device via MTK Client, without using the In-Depth Test APK
www.droidwin.com www.droidwin.com

I couldn't find any official support custom ROMs for the X3.
Click to expand...
Click to collapse
Don't know about anyone else but I didn't get very far with the official tool, it says it conlicts with another package. Even if it could install applications to unlock the bootloader are not accepted from our region.

I know how the app unlocks the bootloader if nothing else. The API is still there in our region but actually getting access to it is another question. If you are interested in reading further I have explained in a little more detail here:
forum.xda-developers.com

What is the current state of unlocking fastboot?

Have decided to rejoin XDA after a while off to see what sort of response I get to this. A browse of the forum tells me that there is no known way to unlock fastboot, I was wondering what methods had been explored in an attempt to do this? More...
forum.xda-developers.com forum.xda-developers.com

and here:
forum.xda-developers.com

[DISCUSSION] A thread to collate and share what is known about unlocking fastboot on Oppo devices

Admin: Please move/delete this thread if it is in the wrong place or against the rules. I wanted to create a thread to discuss unlocking fastboot mode on Oppo devices in general, rather than discussing it in terms of any one device in...
forum.xda-developers.com forum.xda-developers.com
 
JRSim_UIX

JRSim_UIX

New member
Oct 23, 2022
3
0
UK
User154 said:
Don't know about anyone else but I didn't get very far with the official tool, it says it conlicts with another package. Even if it could install applications to unlock the bootloader are not accepted from our region.

I know how the app unlocks the bootloader if nothing else. The API is still there in our region but actually getting access to it is another question. If you are interested in reading further I have explained in a little more detail here:
forum.xda-developers.com

What is the current state of unlocking fastboot?

Have decided to rejoin XDA after a while off to see what sort of response I get to this. A browse of the forum tells me that there is no known way to unlock fastboot, I was wondering what methods had been explored in an attempt to do this? More...
forum.xda-developers.com forum.xda-developers.com

and here:
forum.xda-developers.com

[DISCUSSION] A thread to collate and share what is known about unlocking fastboot on Oppo devices

Admin: Please move/delete this thread if it is in the wrong place or against the rules. I wanted to create a thread to discuss unlocking fastboot mode on Oppo devices in general, rather than discussing it in terms of any one device in...
forum.xda-developers.com forum.xda-developers.com
Click to expand...
Click to collapse

I wasn't able to install the Oppo release but I was able to install the realme version of the deep test app on X3 neo let me see if I can share - I was planning to try the MTK client approach and see what the secrecy.cfg it writes at the end.

Screenshot_2022-10-24-03-50-37-79_b783bf344239542886fee7b48fa4b892.jpg
 

Attachments

  • Screenshot_2022-10-24-03-50-44-25_5461cd6783b6e8d9f5be0980ff5227f9.jpg
    Screenshot_2022-10-24-03-50-44-25_5461cd6783b6e8d9f5be0980ff5227f9.jpg
    161 KB · Views: 41
  • Screenshot_2022-10-24-03-50-53-15_5461cd6783b6e8d9f5be0980ff5227f9.jpg
    Screenshot_2022-10-24-03-50-53-15_5461cd6783b6e8d9f5be0980ff5227f9.jpg
    387.1 KB · Views: 41
Last edited:
User154

User154

Member
Aug 19, 2022
32
11
JRSim_UIX said:
I wasn't able to install the Oppo release but I was able to install the realme version of the deep test app on X3 neo let me see if I can share - I was planning to try the MTK client approach and see what the secrecy.cfg it writes at the end.

View attachment 5742041
Click to expand...
Click to collapse
Ah yes it is version 1.01 of Oppo deeptest app, it may install but application will not be accepted from this region.

Since my previous post I have been able to view the secrecy.cfg from a realme device and it is very simple it contains the booleans related to whether engineer mode is enabled, an rc4 key and the time download mode was last accessed. It is likely ours is similar if not the exact same.
 
S

SlashEMc2k

Member
Jun 11, 2010
5
0
Playing around with EDL haven't had any success.
This morning I came across this tool just released -

Hydra Qualcomm Tool v1.0.3.56[23-10-2022]​


Which is supposed to temporarily unlock the bootloader for
  • OPPO Reno 5 Pro 5G (CPH2207)
I haven't tried it yet - guessing Neo and Reno are identical or the code CPH2207 got mixed up as google security identifies my phone as Reno 5 Pro although Reno is CPH2201 so no idea?

also has support for
  • OPPO Find X3 (PEDM00)
  • OPPO Find X3 Lite (CPH2145)
  • Find X3 Pro (CPH2173, PEEM00, PEET00)

--- small warning on the gsmhosting forum:
Its temporary Unlock Bootloader,
Please flash correct region firmware after unlock bootloader as temporary, If you are write any wrong region firmware, device will be destoryed until you flash in EDL Mode with Auth service.
 
Last edited:
User154

User154

Member
Aug 19, 2022
32
11
SlashEMc2k said:
Playing around with EDL haven't had any success.
This morning I came across this tool just released -

Hydra Qualcomm Tool v1.0.3.56[23-10-2022]​


Which is supposed to temporarily unlock the bootloader for
  • OPPO Reno 5 Pro 5G (CPH2207)
I haven't tried it yet - guessing Neo and Reno are identical or the code CPH2207 got mixed up as google security identifies my phone as Reno 5 Pro although Reno is CPH2201 so no idea?

also has support for
  • OPPO Find X3 (PEDM00)
  • OPPO Find X3 Lite (CPH2145)
  • Find X3 Pro (CPH2173, PEEM00, PEET00)

--- small warning on the gsmhosting forum:
Its temporary Unlock Bootloader,
Please flash correct region firmware after unlock bootloader as temporary, If you are write any wrong region firmware, device will be destoryed until you flash in EDL Mode with Auth service.
Click to expand...
Click to collapse
That is interesting I see the find X3 pro is not supported yet for bootloader unlock but this surely means there must be a way?

What did you do in EDL mode? did you manage to get a firmware dump?
 
S

SlashEMc2k

Member
Jun 11, 2010
5
0
Ah sorry misread on bootloader not enough coffee -
No haven't been able to do a firmware dump will try again today.
 
usernameBogdan

usernameBogdan

Member
Nov 3, 2022
10
1
PaulGWebster said:
Ok so on my CLEAN EVERYTHING patrol I found an interesting problem ... notable these:

pm uninstall --user 0 com.heytap.music pm uninstall --user 0 com.heytap.openid pm uninstall --user 0 com.heytap.mcs pm uninstall --user 0 com.heytap.themestore pm uninstall --user 0 com.heytap.cast pm uninstall --user 0 com.heytap.datamigration

And finally ....

pm uninstall --user 0 com.heytap.appplatform

Now you may be wondering why I am posting about these particular applications, after all I already proved you could remove the entire of ColorOS and the phone still not softlock ....

Well that is not the case with these 7, I do not really know what heytap is ... it seems to be like 'the oppo shop' in chinese or something? but if you remove it, the phone will soft lock / constant reboot.

You can however after lots of testing remove all of it except 'com.heytap.appplatform' so yes .... for anyone who ever reads this, do not remove 'com.heytap.appplatform' instaed freeze/disable it :)
Click to expand...
Click to collapse
I read this. After I remove the "com.heytap.appplatform" and also reboot. Constant reboot :)
 
You must log in or register to reply here.

Similar threads

N
General OPPO Find X3 Pro Stock ROMs
Replies
35
Views
21K
Ravi9193
Ravi9193
Wootts1
Question Google camera port on oppo find x3
Replies
5
Views
12K
syneoa
syneoa
M
General Firmware update thread
Replies
1K
Views
147K
Axident1973
Axident1973
C
How To Guide [How-to guide] Omoji on OPPO ColorOS incl. APK
Replies
7
Views
19K
jot_730
jot_730
W
Question Find x3 Pro Battery Life
Replies
43
Views
8K
D
Dimdiam13

Top Liked Posts

24 Hours All time
  • There are no posts matching your filters.
  • 3
    PaulGWebster
    PaulGWebster
    Ok so on my CLEAN EVERYTHING patrol I found an interesting problem ... notable these:

    pm uninstall --user 0 com.heytap.music pm uninstall --user 0 com.heytap.openid pm uninstall --user 0 com.heytap.mcs pm uninstall --user 0 com.heytap.themestore pm uninstall --user 0 com.heytap.cast pm uninstall --user 0 com.heytap.datamigration

    And finally ....

    pm uninstall --user 0 com.heytap.appplatform

    Now you may be wondering why I am posting about these particular applications, after all I already proved you could remove the entire of ColorOS and the phone still not softlock ....

    Well that is not the case with these 7, I do not really know what heytap is ... it seems to be like 'the oppo shop' in chinese or something? but if you remove it, the phone will soft lock / constant reboot.

    You can however after lots of testing remove all of it except 'com.heytap.appplatform' so yes .... for anyone who ever reads this, do not remove 'com.heytap.appplatform' instaed freeze/disable it :)
    View
    2
    PaulGWebster
    PaulGWebster
    To start this journal I will begin by stating, I am not actually sure if it will be possible to finish this journal; from what I have read there can be quite a number of obstacles with international versions of the OPPO, some of which can be quite troublesome, but I thought it would be an interesting and hopefully helpful (for my self and anyone else wanting to do the same) way of going through the process with such a modern device.

    The device arrives tomorrow, I wanted to get the initial post in without knowing precise details about the device.

    I will update this primary post with the journal entries and post into the main thread when I update it going forwards

    -- Entry 1 29/01/2022 00:21 (Dellivery today at some point!)

    So far I have found out that cpw means car phone warehouse, which used(still is?) a store in the uk, 'EE' a network provider in the UK releases of the Oppo x3 find pro are apparently identical to releases from this store.

    I have asked the user who informed me of this if they could possible put any information they are aware of within this thread.

    Also, I will be doing the unboxing and initial looking at what it is via youtube I hope this is ok? I could not see a way to embed video onto this platform!

    -- Entry 2 29/01/2022 10:53 (Delivery)

    This is just a few images of the arrived device, simply unboxed and put on charge nothing has been set on the device what so ever.

    j2_20220129_102226.jpgj2_20220129_101730.jpgj2_20220129_101816.jpgj2_20220129_101906.jpgj2_20220129_101944.jpgj2_20220129_102129.jpgj2_20220129_102416.jpgj2_20220129_102424.jpgj2_20220129_103959 1.jpgj2_20220129_102202.jpg

    Also note that this image showing the build number is by @alvydas it is not from my device yet! just some more information to add to the journal, this is believed to be the same as mine should show later on when I decide to video/start the phone up :)

    Also for note the CPH (Possible related to CarPhoneWarehouse) prefix in the build number)

    alvydasd2_1.png

    -- Entry 3 29/01/2022 13:11 (Turning on, Bootloader unlock, USB Debugging enabled)

    Youtube video:
    - May still be processing the HD version in google HQ!

    j3_phone_screenshot_build.jpg

    -- Entry 4 30/01/2022 10:53 (Getting sorted)

    Ok so we can't root it and we can't change the boot laoder .... however we can get novo launcher to start by default! The pro version at least!

    Not exactly an amazing feat but hey its progress, I also removed the gmail mail application as I preffer outlook (mainly because I have 3 email accounts):

    Screenshot_2022-01-30-15-10-11-22_3822ac0e29cfec8970059bb21d01f05e.jpg

    And boy .... you can really remove everything including:

    130|OP4F57L1:/ $ pm uninstall --user 0 com.oppo.launcher

    The coloros launcher its self X_X, so it seems you cannot get root, but there is no protected package, you can remove ANYTHING.

    so this bodes the question .... other than wanting lineage OS of course, how thin can we get it ....

    -- Entry 3 10/02/2022 10:53 (Hackery and cleaning)

    .... So there is no fastboot on the international model, it is simply not there I even got EE them self to confirm this.

    However, I have made some progress in discovering a way to get to the qualcomm flashable download mode, that is it will show up as a:

    1644173469270-png.5529971


    One of those (if you have the Qualcomm drivers installed), some information I put in the forum about this mode was this:

    1) Turn the phone off (shutdown) 2) Hold the power button and the Vol up/down (I Forget which) down all the way through the phone starting, you will feel a little Bzzzzz 3) you will be presented with a menu probably in chinese, this is because you held down the power button and it auto selected the first language (its not a biggie), just press the back touch screen button in the top left <-- 4) Select english (or chinese if you preffer!) 5) you will be presented with a menu that has 3 options, Format, Reboot, .... something else ... 6) Select none of the options! look to the bottom of the screen you will see a version mine was v12 o3 v1.2 - double tap this 7) you will get a warning you are entering 'customer service mode', and wallah .... you will get the device show up in device manager.

    I was going to shoot a video of this, I still might! but its rather redundant at this point as I am now at a brick wall, I need to figure out how to deal with this mode, can I flash something to it .... how?

    I am scrubbing the phone of all the bloatware I can and to be honest I have it pretty damn clean .... but still the fastmode is elusive and what else could be loaded onto this lovely phone.
    View
    1
    alvydasd2
    alvydasd2
    The CPW in the build number is more of a guess than anything else we all could be wrong
    View
    1
    adicken
    adicken
    PaulGWebster said:
    Ok so for added fun, full nova launcher ... all stripped down there is no restriction as far as I can tell from running commands directly as root via ADB, and no dbrand cases!
    Click to expand...
    Click to collapse
    Can you use adb to change the build prop without root? If so how?
    View
    1
    PaulGWebster
    PaulGWebster
    syneoa said:
    have you managed to remove this heytap shortcut from settings? I have removed:
    com.heytap.music
    com.heytap.mcs
    com.heytap.accessory
    as these are the only heytap apks in my phone but still having this :(

    View attachment 5535649
    Click to expand...
    Click to collapse
    yeah I have not got rd of that yet, but I have an idea :) I will give it a try at the weekend though as im pretty sure I am about to softlock the phone and have to hard reset it lol
    View

New posts