• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

OnePlus8 VZW Bootloader is Not Unlockable

Search This thread

mattie_49

Senior Member
Feb 4, 2010
2,981
928
Seymour Tn
OnePlus 9
Boot.img and recovery.img
You pull those independently from the rom your on. You on stock a11 verizon. ? Do you know anything about the msm tool for each variant of op8? You can open msm tool. Click F8 on pc and get a readback of whatever partions you need. It puts them on the root of your C: drive. If your not real up to date on tool you should read up on it before doing anything to your device. Download and get on pc and make sure you can connect to it. It's more less an anti-brick tool
 

plupien79

Member
Sep 20, 2011
45
3
Presque Isle
OnePlus 8
You pull those independently from the rom your on. You on stock a11 verizon. ? Do you know anything about the msm tool for each variant of op8? You can open msm tool. Click F8 on pc and get a readback of whatever partions you need. It puts them on the root of your C: drive
That's way easier than all this business of extracting from payload.bin I kept running into.

Thanks so friggin much
 

mattie_49

Senior Member
Feb 4, 2010
2,981
928
Seymour Tn
OnePlus 9
Last edited:

plupien79

Member
Sep 20, 2011
45
3
Presque Isle
OnePlus 8
Is there a guide to use MSM for other than unbricking?

Got it sorted out. the big issue was I had "the panic" that I was going to completely factory reset my phone and relock the bootloader.
 

Attachments

  • Screenshot_20210325-203443.jpg
    Screenshot_20210325-203443.jpg
    269 KB · Views: 75
Last edited:
Sep 6, 2009
46
6
Florida
I'll have too read thru this. Did dump the Verizon oneplus 8 an just went to T- mobile an got a 9. Verizon just has too many signal/data issues. But I have 2 oneplus eights from Verizon and would like to unlock them
 

rodken

Senior Member
Jan 11, 2010
564
134
Google Pixel XL
OnePlus 8
So does anyone indeed knows how to unlock the bootloader? I've read the process on TMO > global, but I need the Verizon way.
 

retryfail

New member
Apr 25, 2021
1
2
I never got a reply to any of my private messages asking about the bootloader unlock, so here's the progress I've gotten on my own -

The Verizon ops files use slightly different crypto than the other variants like T-Mobile
Code:
mbox=        [0xAA,0x69,0x82,0x9E,0x5D,0xDE,0xB1,0x3D,0x30,0xBB,
              0x81,0xA3,0x46,0x65,0xA3,0xE1,0x00,0x00,0x00,0x00,
              0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
              0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
              0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
              0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
              0x0a,0x00]

Code:
Oppo CryptTools V1.2 (c) B. Kerler 2019-2020
MIT License
----------------------------

Extracting instantnoodlev_15_O.07_201103.ops
xml: 153330e00
Extracting prog_firehose_ddr.elf
Extracting prog_firehose_lite.elf

With a bit of editing it's possible to reflash the phone to instantnoodlet_15_O.16_201001.ops (the T-Mobile variant) -- edit settings.xml and change the <BasicInfo> and <Target ID> tags.

With this comes the "OEM unlock" toggle in Developer settings, unfortunately ....

Code:
fastboot oem unlock
FAILED (remote: 'Please flash unlock token first.')

Code:
fastboot.exe oem get_unlock_code
...
FAILED (remote: Unknow command)

So, no bootloader unlock yet, but it is happily running the T-Mobile firmware.
(wifi, LTE and fingerprint appear working fine)

I may take another stab at it later using an EU or international firmware and see if that behaves any different.
 

vitogga

Member
Apr 19, 2014
27
2
I never got a reply to any of my private messages asking about the bootloader unlock, so here's the progress I've gotten on my own -

The Verizon ops files use slightly different crypto than the other variants like T-Mobile
Code:
mbox=        [0xAA,0x69,0x82,0x9E,0x5D,0xDE,0xB1,0x3D,0x30,0xBB,
              0x81,0xA3,0x46,0x65,0xA3,0xE1,0x00,0x00,0x00,0x00,
              0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
              0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
              0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
              0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
              0x0a,0x00]

Code:
Oppo CryptTools V1.2 (c) B. Kerler 2019-2020
MIT License
----------------------------

Extracting instantnoodlev_15_O.07_201103.ops
xml: 153330e00
Extracting prog_firehose_ddr.elf
Extracting prog_firehose_lite.elf

With a bit of editing it's possible to reflash the phone to instantnoodlet_15_O.16_201001.ops (the T-Mobile variant) -- edit settings.xml and change the <BasicInfo> and <Target ID> tags.

With this comes the "OEM unlock" toggle in Developer settings, unfortunately ....

Code:
fastboot oem unlock
FAILED (remote: 'Please flash unlock token first.')

Code:
fastboot.exe oem get_unlock_code
...
FAILED (remote: Unknow command)

So, no bootloader unlock yet, but it is happily running the T-Mobile firmware.
(wifi, LTE and fingerprint appear working fine)

I may take another stab at it later using an EU or international firmware and see if that behaves any different.
Hello, could you flash the international firmware? I wanna try your method if if you are willing to share it.
 
  • Like
Reactions: judaxxx

Top Liked Posts

  • There are no posts matching your filters.
  • 13
    I can confirm a working method is available, PM me if you are interested, it will not be posted publicly.
    3
    Whatever... I'll bite the bullet. Just ordered one 5 minutes ago and I'll get it on the 6th. Let's see where we end up.
    2
    Here is some proof. And yes he will answer on his time. Sorry that's all I can tell you. Verizon op8 unlocked running pixel experience spoofed as a pixel 4 for all the nifty features. Call screen -assistant 2.0. magisk rooted passing all safety nets,clean slate kernel

    Good to hear, guess i'll keep waiting. Do like the feel and speed of the phone, definitely out performs my Moto z4
    2
    So does anyone indeed knows how to unlock the bootloader? I've read the process on TMO > global, but I need the Verizon way.
    2
    Am again in need of a tester, pm me if willing.