HTC 10 T-Mobile SIM Unlock - Free (like M9) - HTC 10 Guides, News, & Discussion

So I finally nailed this, and I have most credit owed to stifilz, as he provided all the info needed to get this working.
Original thread in the M9 forum I followed a few years ago and got my M9 SIM unlocked: https://forum.xda-developers.com/one-m9/general/sim-unlock-method-t3143333
The difference is the partition that needed to be re-flashed was rfg_4 on the 10 instead of rfg_8 on the M9.
Pre-requirements (I have these, may not all be needed):
1. Bootloader unlocked
2. TWRP
3. Root w/ Magisk
4. S-Off should be optional
5. rfg_4 partition image from SIM Unlocked phone (my partially broken Verizon 10 motherboard donated the image) to flash into SIM locked phone (T-Mobile 10 motherboard I just bought to replace the original)
Steps:
0. Connect your phone to computer and make sure USB debugging is ON in Developer options.
1. Backup your locked rfg_4.img and do a hex compare to my rfg_4_tmob_locked.img (stop if different):
adb shell
su
dd if=/dev/block/bootdevice/by-name/rfg_4 of=/sdcard/rfg_4_backup.img
2. Download my rfg_4_veriz_unlocked.img, copy to phone internal storage and flash to phone:
adb shell
su
dd if=/sdcard/rfg_4_veriz_unlocked.img of=/dev/block/bootdevice/by-name/rfg_4
3. Insert other network SIM card & enjoy your unlocked phone

mcmorariu said:
So I finally nailed this, and I have most credit owed to stifilz, as he provided all the info needed to get this working.
Original thread in the M9 forum I followed a few years ago and got my M9 SIM unlocked: https://forum.xda-developers.com/one...ethod-t3143333
The difference is the partition that needed to be re-flashed was rfg_4 on the 10 instead of rfg_8 on the M9.
Pre-requirements (I have these, may not all be needed):
1. Bootloader unlocked
2. TWRP
3. Root w/ Magisk
4. S-Off should be optional
5. rfg_4 partition image from SIM Unlocked phone (my partially broken Verizon 10 motherboard donated the image) to flash into SIM locked phone (T-Mobile 10 motherboard I just bought to replace the original)
Steps:
0. Connect your phone to computer and make sure USB debugging is ON in Developer options.
1. Backup your locked rfg_4.img and do a hex compare to my rfg_4_tmob_locked.img (stop if different):
adb shell
su
dd if=/dev/block/bootdevice/by-name/rfg_4 of=/sdcard/rfg_4_backup.img
2. Download my rfg_4_veriz_unlocked.img, copy to phone internal storage and flash to phone:
adb shell
su
dd if=/sdcard/rfg_4_veriz_unlocked.img of=/dev/block/bootdevice/by-name/rfg_4
3. Insert other network SIM card & enjoy your unlocked phone
Click to expand...
Click to collapse
man unfortunately i followed all of your steps (except for the s-off) and it didn´t work

albertodz said:
man unfortunately i followed all of your steps (except for the s-off) and it didn´t work
Click to expand...
Click to collapse
what carrier is the phone locked to?

mcmorariu said:
what carrier is the phone locked to?
Click to expand...
Click to collapse
t mobile

albertodz said:
t mobile
Click to expand...
Click to collapse
Did you try to use the new T-Mobile Unlock app? The older app does not work if you upgraded to Oreo.
I used the one called T-Mobile Device Unlock (Google Pixel Only) 1.0.6 and it worked just fine for me.
Here is the link to download it and try if you like: T-Mobile Device Unlock (Google Pixel Only) 1.0.6
I am on an HTC10 with Tmobile also.
Hope it helps!
---------- Post added at 09:50 PM ---------- Previous post was at 09:48 PM ----------
albertodz said:
t mobile
Click to expand...
Click to collapse
Also make sure your CID is still T-MOB010 or it will not work

This appears to have worked on my T-Mobile model. I say appears because it's not asking me for a SIM PIN any longer and Network Signal Guru reports 310 480 which is, in fact, Verizon as is the SIM that's inserted but since it's not active, I can't actually test it. I did put my Tello SIM which is a T-Mobile MVNO and that works so it at least didn't break anything.
Thanks a lot, I just wanted a device to use for Network Signal Guru to test QCI classes and now I have one!
By the way, I ran diff and my original was NOT the same but I didn't really care if I bricked it so I did it anyway.

Related

How much to wait before the unlock code becomes available

Hello, I have a Glide manufactured in Nov 2011. I tried to unlocked by many companies, but all failed to get the unlock code, saying that it is unavailable. I see that it is no software unlock tool (as for the Galaxy S). I have it rooted but locked...
Any idea when the code can become available or another solution to have it unlocked?
Thanks
Sorry, forgot to mention: it is locked on Rogers, Canada
After ~90 days after the purchase, if you call AT&T and say that you're 'going overseas' they'll give you an unlock code.
I have successfully unlocked mine using a code from this site - www.cellunlocker.net.
I hope it fine to post the name in this forum.
nickexel said:
I have successfully unlocked mine using a code from this site - www.cellunlocker.net.
I hope it fine to post the name in this forum.
Click to expand...
Click to collapse
I already tried it. Also tried RogersCodes.ca, Theunlock.ca, OttawaPC.ca, MobileInCanada.com, cellunlock.net...
Think that I will have to pay 40$ to Samsung directly. I understood from OttawaPC.ca that it is a chance they can get it from them.
Unlocking!!
I have imported a phone for use in India. Bought it on eBay. Recieved the phone last week.
Still exploring for ways to unlock the phone freely.
Any Developers can help us out ??
Ready for any experiment.
Thanks!!
VinayS said:
I have imported a phone for use in India. Bought it on eBay. Recieved the phone last week.
Still exploring for ways to unlock the phone freely.
Any Developers can help us out ??
Ready for any experiment.
Thanks!!
Click to expand...
Click to collapse
Hi, is this phone available in india sorry to ask here but really i need the phone!!!!Also what is the price u purchased for? And how is the phone for use in india?? pls reply... Thanks a lot Vinay....
shoz_on4u said:
Hi, is this phone available in india sorry to ask here but really i need the phone!!!!Also what is the price u purchased for? And how is the phone for use in india?? pls reply... Thanks a lot Vinay....
Click to expand...
Click to collapse
No the phone will not be released outside US & Canada. I bought it on eBay (.com - US) and got it to India through Borederlinx (Postal Forwarding). Approx 27k including shipping and duty charges.
Phone is very good especially for QWERTY lovers..
Just curious, but does this work? https://market.android.com/details?id=com.helroz.galaxysunlock&hl=en
Or could it be modded to work?
Edit...maybe this would work. http://forum.xda-developers.com/showthread.php?t=761045
bobbylx said:
Just curious, but does this work? https://market.android.com/details?id=com.helroz.galaxysunlock&hl=en
Or could it be modded to work?
Edit...maybe this would work. http://forum.xda-developers.com/showthread.php?t=761045
Click to expand...
Click to collapse
First tried - it doesn't work. I used it on another Galaxy S i9000 without problem, but it doesn't work on Glide (i927R)
Second: tried, doesn't work as it stated in the first page, the file nv_data.bin is re-created at each boot. I have to take a look deeper for hidden files (starting with .). I will do a try probably later
After many tests, deleted files (starting with dot or not) at each re-boot it will recreate the files.
In the file nv.log I see something like "restoring from secondary backup"... Where it stores that secondary backup it I have no idea...
catalinu said:
Sorry, forgot to mention: it is locked on Rogers, Canada
Click to expand...
Click to collapse
Found one for 13 USD in eBay
http://www.ebay.com/itm/unlock-code-ROGERS-Samsung-Galaxy-S2-LTE-Galaxy-S-Glide-/120833869898
Vendor is "unlockgsm4u"
VinayS said:
Found one for 13 USD in eBay
http://www.ebay.com/itm/unlock-code-ROGERS-Samsung-Galaxy-S2-LTE-Galaxy-S-Glide-/120833869898
Vendor is "unlockgsm4u"
Click to expand...
Click to collapse
Yes, thanks, I tried, but it was unable to get it. Waiting to refunf from him...
Meantime I did an unlock (deleting file systems), but I got my original IMEI replaced by a generic one. But at least my phone works now (with that generic IMEI), so I have something until a code will be available...
Hey guys, I just won one of these phones but I am on t-mobile. Will this phone function correctly on their network, in terms of data functionality?
Sent from my HTC Vision using xda premium
eioous said:
Hey guys, I just won one of these phones but I am on t-mobile. Will this phone function correctly on their network, in terms of data functionality?
Sent from my HTC Vision using xda premium
Click to expand...
Click to collapse
2g only most likely
Sent from my SAMSUNG-SGH-I927R using Tapatalk
catalinu said:
Yes, thanks, I tried, but it was unable to get it. Waiting to refunf from him...
Meantime I did an unlock (deleting file systems), but I got my original IMEI replaced by a generic one. But at least my phone works now (with that generic IMEI), so I have something until a code will be available...
Click to expand...
Click to collapse
Can you please guide me how to do it ?? (brief Description)
Can you go back to the original later ??
Thanks!!
VinayS said:
Can you please guide me how to do it ?? (brief Description)
Can you go back to the original later ??
Thanks!!
Click to expand...
Click to collapse
I suppose that yours is rooted. If not, you will have to root it first. See here: http://forum.xda-developers.com/showthread.php?t=1378082.
After root, use a file explorer.
I use the ES File Explorer downloaded from the market:
- Launch it
- Goto "Settings> File Settings". Be sure that Show hidden files is checked
- Also be sure is checked "Settings > Root Explorer"
- In "Settings > Home directory" write "/" (without the quotes)
explore the "efs" folder in the root
- move the following files in a backup folder somewhere to your internal SD card (you will need them if you want to restore later to original phone setup) : .nv_core.bak, .nv_core.bak.md5, .nv_data.bak, .nv_data.bak.md5, nv_data.bin, nv_data.bin.md5. Moving them they will be deleted from the efs folder (that's ok).
Reboot.
Now you will have it unlocked but with the generic IMEI.
It worked for me, hope it will work for you. Do it on your own risk. Don't blame me...
Later, if you want to return to the original (locked): copy all mentioned files from the backup folder to the "efs" folder and reboot.
followed above steps.
After the reboot -- there is no default screen asking for Unlock Code.
Instead my phone reboots just to homescreen.
When the sim attempts to Register to Network i get an error message.
"Phone not allowed MM#6" which i believe is because of the Generic IMEI.
When i attempt an call, i get the error message "Not Registered on Network"
Generic IMEI is 004999010640000/02
PS: Files /efs/nv_data.bin & nv.data.bin.md5 is getting created after every boot
---------- Post added at 11:01 PM ---------- Previous post was at 10:51 PM ----------
replaced the backed up files to its original folder.
Phone back to normal.
i,e -- Locked and asking for Network unlock key
Maybe you can Unlock by finding the unlock code in the bml3.bak file. Here are some steps forgot where i got from. HAVE TO BE rooted and used adb. Download a hex editior. I used 010 Editor. simple
(Place phone in debugging mode)
CMD program on computer
(mount to your folder where adb files located vie 'Cd ........'
(next are commands and just put them all in but make sure you read it through first!!)
adb shell
su
Cd
cd /dev/block
(then press enter)
---------------------------
TYPE THE FOLLOWING:
su
(then press enter, now your phone might ask for superuser permission, ALLOW it or say YES. You may not have to do this step, if it asked you before)
----------------------------
Now you will do one of the following below. Pay attention.
----------------------------
IF YOU HAVE AN EXTERNAL SD CARD TYPE THE FOLLOWING:
dd if=/dev/block/bml3 of=/sdcard/external_sd/bml3.bak
(then press enter)
IF YOU DON'T HAVE AN EXTERNAL SD CARD TYPE THE FOLLOWING:
dd if=/dev/block/bml3 of=/sdcard/bml3.bak
(then press enter)
Step 5) Now, find the file on your External SD card or Internal Storage depending on your situation and transfer it to your computer. If you don't know how to find the file. Plug your phone up and enable Mass Storage or Connect USB Storage. I won't baby you on how to find it. It should be somewhere on your phone or external SD card if you did step 4 correctly. Transfer that bml3.bak file to your computer. I recommend the desktop so will always know where it's at. You can delete it later if you want. So transfer it to somewhere on your computer.
Step 6) On your computer, open up 010 Hex Editor
Step 7) IMPORTANT: In 010 Hex Editor go to the Menus at the top and select VIEW then LINEFEEDS then SELECT CUSTOM, now SET YOUR BYTES TO "32" Nothing Less. If you don't do this, you won't find your unlock code. Do it.
Step 8) While you're in 010 Hex Editor, click Open and locate the bml3.bak file you created and open it. There will be a bunch of letters, numbers or whatever, ignore them for now.
(CREDIT TO FR0Z3N FOR CLARIFYING THE FOLLOWING 2 STEPS)
Step 9) Now press CTRL+F on your keyboard to search for a hex string. Now a box that says Find should pop up and when the search window pops up select "Hex bytes (h)" in the Type field by pushing the down arrow and then search for the following string below:
"FFFFFFFFFF0100000000" ALL TOGETHER WITH NO SPACES, Then Hit the FIND ALL button to the right, some of you will get many results and others up to 10 results on your screen below (not mine, someone else's computer)
tried above method
and also the original method mentioned at
http://forum.xda-developers.com/showthread.php?t=1176886
However no result.
I am not able to locate bml3 file.
Also when i explore through ES File Explorer there is no such file in the directory
I second what Vinay said. Using root browser I found that the dev/block directory on my phone contains files that are 2012 loop0 through2012 loop7, 2012 mmcblk1 and 2012 mmcblkOp1 through 11. It also has the subfolders platform and vold. Also all the files in the folder are listed as 0.00 bytes. Any suggestions on the usefulness of any of these files or other places to look for the bml3 file? I don't think the search function in root browser is comprehensive.

[Q] How to use other operator sim in Softbank(JP) 001HT (HTC desire HD)?

Hi,
I bought this HTC desire hd from Softbank, Japan and used for 2 years as per contract. Now I have tried to use other operator sim (another country), but showed 'invalid sim'
Next, I 've tried install custom rom (cm7.2)
As 1st step, I have unlocked bootloader using HTCDev.
But this is my failure list while trying next steps:-
1. Tried ROM manager v5.5.2.3
>>> BUT it shows "You must root ur phone for rom Manager to function"
2. (to root) Tried to downgrade (technically update) to Softbank JP from 2.64.762.3 to 2.37.762.2 (RUU_..._S_SoftBank_JP_2.37.762.2 ....)
>>> BUT this msg shown
Error [155]: UNKNOWN ERROR
Please get the correct ROM Update Utility and try again.
3. (leaned to root, s-off needed) Tried s-off following http://forum.xda-developers.com/showthread.php?t=2221039
>>> BUT "fastboot recovery1.img" cmd asked more arguments (hwevr, device found as "HT12VRX00872 fastboot")
4. (learned to s-off, goldcard required) Tried gold card following http://www.addictivetips.com/mobile/how-to-make-gold-card-for-htc-desire-hd/
>>> BUT http://psas.revskills.de/?q=goldcard has retired and downloadable revskill installers either crash or cant generate image
5. In alternative path, tried to follow Advanced Ace Hack Kit
>>> BUT AAHK has retired
6. Tried 4EXT Recovery Control 2.4.6
>>>BUT "This app need root access" (refer to step 2)
So, can anyone please guide me for a solution (for using other operator sim)?
Somoy
Somoy1 said:
Hi,
I bought this HTC desire hd from Softbank, Japan and used for 2 years as per contract. Now I have tried to use other operator sim (another country), but showed 'invalid sim'
Next, I 've tried install custom rom (cm7.2)
As 1st step, I have unlocked bootloader using HTCDev.
But this is my failure list while trying next steps:-
1. Tried ROM manager v5.5.2.3
>>> BUT it shows "You must root ur phone for rom Manager to function"
2. (to root) Tried to downgrade (technically update) to Softbank JP from 2.64.762.3 to 2.37.762.2 (RUU_..._S_SoftBank_JP_2.37.762.2 ....)
>>> BUT this msg shown
Error [155]: UNKNOWN ERROR
Please get the correct ROM Update Utility and try again.
3. (leaned to root, s-off needed) Tried s-off following http://forum.xda-developers.com/showthread.php?t=2221039
>>> BUT "fastboot recovery1.img" cmd asked more arguments (hwevr, device found as "HT12VRX00872 fastboot")
4. (learned to s-off, goldcard required) Tried gold card following http://www.addictivetips.com/mobile/how-to-make-gold-card-for-htc-desire-hd/
>>> BUT http://psas.revskills.de/?q=goldcard has retired and downloadable revskill installers either crash or cant generate image
5. In alternative path, tried to follow Advanced Ace Hack Kit
>>> BUT AAHK has retired
6. Tried 4EXT Recovery Control 2.4.6
>>>BUT "This app need root access" (refer to step 2)
So, can anyone please guide me for a solution (for using other operator sim)?
Somoy
Click to expand...
Click to collapse
If you have used the device for 2 years, you can contact softbank to get the Sim unlock code. That is the best way to unlock your device.
glevitan said:
If you have used the device for 2 years, you can contact softbank to get the Sim unlock code. That is the best way to unlock your device.
Click to expand...
Click to collapse
I did. Softbank said they do not support or provide any unlocking code.
Recently I bought unlock code from unlock-zoneDotcom ... but there is no prompt to enter this code (after new sim insertion)
instead asked to enter "SIM network subset unlock PIN" which is neither that unlock code nor pin of sim.
Somoy1 said:
I did. Softbank said they do not support or provide any unlocking code.
Recently I bought unlock code from unlock-zoneDotcom ... but there is no prompt to enter this code (after new sim insertion)
instead asked to enter "SIM network subset unlock PIN" which is neither that unlock code nor pin of sim.
Click to expand...
Click to collapse
ok, then I guess that your only solution is to S-OFF your device...the only way currently is to do it manually. If you need help just let me know and we can arrange to connect via teamviewer to do it. :good:
http://tau.shadowchild.nl/attn1/?p=411
glevitan said:
ok, then I guess that your only solution is to S-OFF your device...the only way currently is to do it manually. If you need help just let me know and we can arrange to connect via teamviewer to do it. :good:
<an url was here!>
Click to expand...
Click to collapse
Thanks.
I tried to follow the link's instruction. (for that purpose installed ubuntu+android sdk)
The 1st step was "adb shell dd if=/dev/blo...."
>> BUT got this msg "cannot open for read: Permission denied" (in fact from win7 got similar msg)
One clarification request: does "root only" means root access? Of so, it seems like a loop: s-off <-> roor access
Any help please?

ZVG UNLOCK SIM card Test

Test feedback!
Do not insert a sim card!
ROOT
Installation R.E Manager
Download ZVG UNLOCK SIM card the file to the phone memory
Use R.E Manager copy Zvg sim unlock to Corresponding File Locations , to replace the Original file,Modify permissions(0644),
boot should be able to recognize the SIM card.
Data services, please consult your operator for the APN file replacement!
* Close Handsfree Activate: Use Shortcut_Master, select the search, keyword lte, find com.lge.SprintHiddenMenu.iot.LTESetting, click on the launcher, appear after selecting Operation Mode tab, change the options for Lab Network, the machine will automatically restart, no more Tip handsfree activated.
OK Insert the SIM Card power
View attachment 3290012
Well I got it working. Now I cannot comment on the exact steps above as I had already applied the other "permanent sim unlock" procedure. I can tell you what I did though.
-I did not remove my sim. I don't think that step is necessary.-confirmed not necessary
-I copied the carrier files to carrier/apps
-I copied the files from etc folder to etc
-I left the apn-conf file from the previous unlock-This is necessary
Reboot
This gave me signal, but no data
-I entered ##DATA# in the dialer
-Hit APN Setting
-Hit menu button, and Reset to Default
BAM... GSM signal shows up, I have data working.
Also confirm the hands free activation didn't appear after the steps above.
Guys can u help me root my phone.
kimush said:
Guys can u help me root my phone.
Click to expand...
Click to collapse
root using instructions in this link
it worked for me..
i could unlock it with full H+ internet connetion. btw.. i am outside US
scottdanpor said:
Well I got it working. Now I cannot comment on the exact steps above as I had already applied the other "permanent sim unlock" procedure. I can tell you what I did though.
-I did not remove my sim. I don't think that step is necessary.
-I copied the carrier files to carrier/apps
-I deleted the other folders left over from the other unlock except lost+found
-I copied the files from etc folder to etc
-I edited the rssi.xml file to remove any reference to CDMA or LTE leaving only GSM (I don't think think this is necessary)
-I left the apn-conf file from the previous unlock
Reboot
This gave me signal, but no data
-I entered ##DATA# in the dialer
-Hit APN Setting
-Hit menu button, and Reset to Default
Bam... GSM signal shows up, I have data working.
Also confirm the hands free activation didn't appear after the steps above.
Click to expand...
Click to collapse
Which other unlock method. Can you please link that. So many threads and methods floating......
kadadan said:
root using instructions in this link
it worked for me..
Click to expand...
Click to collapse
When i enter final command it does nothing , my diag port is com5.
kimush said:
When i enter final command it does nothing , my diag port is com5.
Click to expand...
Click to collapse
Hey use one click root instead..its fast and easy!
---------- Post added at 10:33 AM ---------- Previous post was at 10:26 AM ----------
@linyincsz thank you sim detected, how to fix data? Any ideas..?
Tried
##DATA# method
kuduku said:
Which other unlock method. Can you please link that. So many threads and methods floating......
Click to expand...
Click to collapse
http://forum.xda-developers.com/showthread.php?t=2655133
marxist said:
Hey use one click root instead..its fast and easy!
---------- Post added at 10:33 AM ---------- Previous post was at 10:26 AM ----------
@linyincsz thank you sim detected, how to fix data? Any ideas..?
Tried
##DATA# method
Click to expand...
Click to collapse
Did you try grabbing the apn-conf file from the other thread?
scottdanpor said:
Did you try grabbing the apn-conf file from the other thread?
Click to expand...
Click to collapse
Yes,but when i turn on mobile network nothing happens.
Edit: tried ##DATA method after copying apn-conf.xml !!
Now data is working thankyou..
And removing sim is not necessary..
marxist said:
Yes,but when i turn on mobile network nothing happens.
Click to expand...
Click to collapse
Take a look through your apn-conf file and make sure your APN is listed properly. Make sure you rebooted your phone, it often needs that to pick up APN. If it's there, try resetting to default again in ##3282#. Hope you get it working.
scottdanpor said:
Well I got it working. Now I cannot comment on the exact steps above as I had already applied the other "permanent sim unlock" procedure. I can tell you what I did though.
-I did not remove my sim. I don't think that step is necessary.
-I copied the carrier files to carrier/apps
-I deleted the other folders left over from the other unlock except lost+found
-I copied the files from etc folder to etc
-I edited the rssi.xml file to remove any reference to CDMA or LTE leaving only GSM (I don't think think this is necessary)
-I left the apn-conf file from the previous unlock
Reboot
This gave me signal, but no data
-I entered ##DATA# in the dialer
-Hit APN Setting
-Hit menu button, and Reset to Default
Bam... GSM signal shows up, I have data working.
Also confirm the hands free activation didn't appear after the steps above.
Click to expand...
Click to collapse
thanks a lot. i got unlocked in ZVG following ur instructions. now please tell me if i would lose unlock if i "full unroot" in SuperSU? just curious and i want to do that to be able to receive any update OTA.. thanks again
kadadan said:
thanks a lot. i got unlocked in ZVG following ur instructions. now please tell me if i would lose unlock if i "full unroot" in SuperSU? just curious and i want to do that to be able to receive any update OTA.. thanks again
Click to expand...
Click to collapse
I haven't tested that, but I don't see why that would affect the unlock.
kuduku said:
Which other unlock method. Can you please link that. So many threads and methods floating......
Click to expand...
Click to collapse
this is the only unlock method that fully worked for me.. sim unlock + deactivation hands free activation pop-up
go ahead with it.
For me the old method worked.
I tot to ZVE, unlocked the phone using same old thing & then flash the OTA from cache.. simple.
kadadan said:
this is the only unlock method that fully worked for me.. sim unlock + deactivation hands free activation pop-up
go ahead with it.
Click to expand...
Click to collapse
is your data working? I am also from Pakistan using Telenor but unable to make my data working.. any solution?
creepin said:
is your data working? I am also from Pakistan using Telenor but unable to make my data working.. any solution?
Click to expand...
Click to collapse
data isn't working for me either .. i seldom use that.. i always use wifi. so i am okay with that
scottdanpor said:
Well I got it working. Now I cannot comment on the exact steps above as I had already applied the other "permanent sim unlock" procedure. I can tell you what I did though.
-I did not remove my sim. I don't think that step is necessary.
-I copied the carrier files to carrier/apps
-I deleted the other folders left over from the other unlock except lost+found
-I copied the files from etc folder to etc
-I edited the rssi.xml file to remove any reference to CDMA or LTE leaving only GSM (I don't think think this is necessary)
-I left the apn-conf file from the previous unlock
Reboot
This gave me signal, but no data
-I entered ##DATA# in the dialer
-Hit APN Setting
-Hit menu button, and Reset to Default
Bam... GSM signal shows up, I have data working.
Also confirm the hands free activation didn't appear after the steps above.
Click to expand...
Click to collapse
Thank very much. This is the only method works for me. Greetings from Dominican Republic.
Hello everyone i copied folders in carrier folder and tried many solutions but unable to unlock my sim.. Can anyone please tell me what to do and how to unlock my sim on ZVG update?

Root and Install TWRP on Moto G4 Plus

Hello everyone.... There is no specific post on rooting and unlocking the bootloader here so I thought I'd rather post it....
So let's begin....
mod edit as per original author
Have U Tested it ?????
Does it Work ????
or Just Posting without results ?
Bootloader unlock works.... but I'm still working trying to make Lucky patcher work to confirm root access
cool_sid said:
Bootloader unlock works.... but I'm still working trying to make Lucky patcher work to confirm root access
Click to expand...
Click to collapse
Dont Post Threads which leads to disasters !!!
confirm first and make it live. !!!
No disaster buddy.... you don't understand.... it all works but since I don't have busy box.... it doesn't work for lucky patcher... I'll just install it n also send screenshots of my root access with Root Checker.....
OK?
cool_sid said:
No disaster buddy.... you don't understand.... it all works but since I don't have busy box.... it doesn't work for lucky patcher... I'll just install it n also send screenshots of my root access with Root Checker.....
OK?
Click to expand...
Click to collapse
install root checker nd send it. !!
they dnt need busybox.
and y care for luckypather btw ?
It doesn't work with supersu. Already tested by @yeshwanthvshenoy and phone bootlooped.
Sent from my Moto G (4) using Tapatalk
I don't understand why you people say it.... it booted on my Moto G4 Plus.....
cool_sid said:
I don't understand why you people say it.... it booted on my Moto G4 Plus.....
Click to expand...
Click to collapse
cause after 6.0+ need modifided boot.img
Bootloader unlocked, TWRP done..
Now im doing backup for in case of someting goes wrong... im about to flash superSU and i will tell you if yes or no.. im doing the sacrifice !! LOL
cool_sid said:
Hello everyone.... There is no specific post on rooting and unlocking the bootloader here so I thought I'd rather post it....
So let's begin....
What you need:
1) Laptop/PC with Internet running Windows
2)Moto G4 and Moto G4 Plus USB driver,?*Minimal ADB, and Fastboot tool driver.
3) USB cable
4) Patience
How to unlock the?*bootloader of Moto G4 and Moto G4 Plus
a) Before proceedings make sure that your device is at least 70% charged.
b) Enable USB Debugging by going into Setting> About Phone and tap on build number for 8 times. This should unlock Developer Options. Now get into Developer Options and enable USB Debugging.
c) Install?*Minimal ADB,?*Fastboot Tools, and?*Moto G4 or Moto G4 Plus Driverson your PC.
d) Now go to the folder where Minimal ADB & Fastboot Tools are present (must be somewhere in C drive). Now open Command Prompt by pressingShift Key + Right Mouse Button?*and select Open Command Window here.
e) Now switch off your phone. Then press Volume up + Power Key together. You will get into Fastboot Mode. Now connect it to the PC via USB cable.
f) Now type the following command into the Command Window to check if your phone is properly connected and is detected by PC or not.
fastboot devices
g) Now you need the unlock data to unlock the bootloader. Type the following command into the Command Window
fastbootoemget_unlock_data
h) It will display a long string which you need to copy into notepad, remove all the spaces which are present and save it somewhere.
i) Now go to?*Motorola official website. Create an account if you don’t have any. Log in to the account and go to the Unlock Bootloader option and paste the string which you copied in the notepad earlier.
j) Now click on Can my device be unlocked. Select I Agree and then Request Unlock Code. You should receive a mail from Motorola with similar codes within few minutes.
k) Now copy those codes, open Command Window and type the following commands
fastboot OEM unlock (insert the code without braces)
l) Now you have successfully unlocked the bootloader and now you can install recovery.
Though it's pretty much sufficient but if you ask... I'll post some screenshots of the process as well......
Don't hesitate to ask if stuck anywhere....
???????? Install TWRP ON MOTO G4 PLUS
To install TWRP on moto G4 Plus... Refer to this XDA link
https://www.google.co.in/url?sa=t&s...mQxu4hgzMGQnN1dQQ&sig2=BEagC-mbHleWiRHg85zLyA
How to root Moto G4 And Moto G4 Plus
a) Download?*BETA-SuperSU.zip ?*file and place it into the root of your memory card (Attached along)
b) Get into recovery mode by pressing Power + Volume Down button.
c) Once you are in recovery select Install from SD card option and browse the SuperSU.zip file. Select Yes to install and wait until the flashing is done.
d) Now select Restart option from the recovery and wait for the device to boot up.
Go to Google Play and download the Root Checker app to check the root status. If root checker app says root access available then Enjoy you have rooted your Moto G4 and Moto G4 Plus.
Now you have ROOTED and have installed a custom recovery on your Moto G4 Plus....
Just Hit the thanks if you like the post
Ask me for screenshots if you want them (forgot to take them but will get them u want).......
Click to expand...
Click to collapse
I have no idea how this thread is different from the one over here : http://forum.xda-developers.com/moto-g4-plus/how-to/guide-newbie-resource-thread-t3386584/
If you have found the way to root, post it there itself or in the Chainfire's thread, why bother creating a new thread to teach people the same thing again and again? Please try searching before posting.
And these lines my friend clearly say you didn't even attempt to search through :
cool_sid said:
Hello everyone.... There is no specific post on rooting and unlocking the bootloader here so I thought I'd rather post it....
So let's begin....
Click to expand...
Click to collapse
Aaaand it doest work.. my phone was frozen on the motorola logo ..
Sorry m8.... considered...... I didn't know that there was another similar post about moto g4 plus
Is this same for 16 and 32gb versions?
yash989 said:
Is this same for 16 and 32gb versions?
Click to expand...
Click to collapse
both version r same.
but this is risk.
do it on ur own risk.
Closing down thread. Please don't make anyone here as a guinea pig.. Prove it yourself first before releasing the tutorial to the public. You are just causing too much harm..

Flash international ROM to Tmobile/Metro w/ locked bootloader

MAJOR UPDATE: Managed to flash Global stock rom to the MetroPCS variant​
Pros: Stock Oneplus and everything works
Cons: OEM unlock is still greyed out
Before you go any further:
THERE IS NO ROOT FOR THIS DEVICE WITH A LOCKED BOOTLOADER (YET). THIS THREAD IS FOR THE DEVELOPMENT AND TESTING OF METHODS TO ACHIEVE THIS.
Just got this device from MetroPCS this week and love this device. However I found out very quick that you have to be with MetroPCS for 180 days before you can get unlocked. To unlock the bootloader you have to be sim unlocked from the carrier.
This thread will be for development of a working root process for others to offer perspective. Feel free to try to replicate at your own risk. If anyone is interested in these files/tools let me know and I will publish more links.
;Download international and metro ROM and MSM tool from these thread (thanks to @Some_Random_Username)​International
MetroPCS
This download will include the latest MSM Download Tool
The work around that I found does not need MSM to be patched
;TOOLS
download and extract oppo decrypt master
unpack and repack .OPS files for use with MSM Download Tool 4 .exe
----------------------------------------------------------------------------------------------------------------------------------------------
Method​----------------------------------------------------------------------------------------------------------------------------------------------
TD;RL:
Extract the .ops file, open settings.xml replace the project ID, repack
Set up:
1. Download international zip and metro zip from above, extract into 2 seperate folders and delete billie8t_14_O.01_201218.ops in the metro folder
2. have adb installed
3. Install python3 and prereqs for oppo decrypt master
Extract .ops, edit and flash:
1. unzip the zip file with the .ops file from both folders and move it to the folder with oppo decrypt
2. run "python3 opscrypto.py decrypt billie8_14_O.01_210128.ops" (decrypt both .ops files from each firmware, the first one being the metro and get the /extract/settings.xml file and open it. we will need info from it)
3. Now extract the international firmware with opoo decrypt and open the extract folder
4. open "settings.xml" from both firmwares in your favorite editor
6. Change the following in the international settings.xml: Project=20886 to Project=20885 and ModelVerifyRandom= (THESE NEED TO BE EXACTLY WHAT ARE IN THE METRO SETTINGS.XML file)
6. Save the file
7. run "python3 opscrypto.py encrypt extract". This will create a file called out.ops
8. Once finished place out.ops into the metro firmware folder and rename to "billie8t_14_O.01_201218.ops"
9. With your phone turned on, plug your phone into the computer
10. Open MSMdownloadtoolv4.0.exe and press start
11. Run "adb reboot edl"
12. Your computer should recognize and start the download.
13. Wait a while and it will reboot.
Here is my working files for anyone who wants to tinker
Includes MSMdownloadtools, modded OPS file and (edited settings.xml and patched recovery.img inside OPS)
Updated downloads include:
Decrypted Metro OPS (IMGs, BIN, etc)
Metro to Global (OPS)
Metro to Global w/ magisk patched recovery (ZIP)
Google Drive - Updated 7/11/2021
Hi!,
Did you try this method:
Root N10 using Magisk
Warning: I'm not responsible for any damage or bricked phones! Mirror for all OxygenOS images General Info: You need adb and fastboot installed and should know how to use it TWRP is not needed You must do this process only once...
forum.xda-developers.com
?
I have reviewed that method, however it seems to only work with the EU and Global version of the phone. With the US version being on TMobile or MetroPCS (which is owned by TMobile) the "OEM" unlock is greyed out.
To be able to unlock the bootloader I have found that you have to do the following:
1. On MetroPCS you have to have the phone for 180 days.
2. Once that 180 days is up you have to apply to get the device unlocked from their network.
3. After the device gets unlocked from the network you can then use "OEM unlock" in the settings.
4. Then you have to apply to OnePlus with IMEI, serial and unlock code (fastboot get_unlock_code)
5. Wait a week
6. They send you the unlock.
To me this is ridiculously convoluted.
I don't want to have to wait 6 months to start modding
Some other OnePlus devices (6t Tmobile specifically), you use a patched/modified MSM tool to flash the firmware, and it bypasses the device checking if its meant for the device or not. From there, you can unlock the bootloader and you're all set.
Try that, link to the 6t instructions below, I'd wonder if it works on the n10. If I had a carrier locked one, I'd try it, but I got my n10 5g from an amazon return pallet lol
T-Mobile 6T to International Conversion (WITHOUT unlocked bootloader/SIM unlock!)
In the previous thread, we discussed a method to convert T-Mobile 6T's to the international variant, sort of, but it required an unlocked bootloader, which itself requires a SIM unlock which T-Mobile gives people a hard time about. However, it...
forum.xda-developers.com
Thank you. Will give it a shot. Are the MSM download tool specific to the device? If not I will give this a shot tomorrow. Any idea how it is patched?
I believe MSM tool is device specified. So I assume you use the Metro MSM and load a modified .OPS from US Retail unlock model? or anything I'm missing? I don't think MSM is included in official oneplus firmware zip.
MSM comes included with the ops firmware. But according to another thread on here
"Crossflashing regional builds is no longer possible by EDL, flash is tied to device project ID. For reference EU devices project ID is 20889 while international devices project ID is 20886."
With that being said. I was able to flash modified Metro firmware (patched ramdisk in boot.img) as noted earlier. So perhaps I can try extracting firmware for the global version and metro, replace any project ID in global with metro project ID and attempt to flash the firmware.
Alternatively we can try to patch the Metro MSM tool like the one used for the 6T above.
ieatgravity said:
MSM comes included with the ops firmware. But according to another thread on here
"Crossflashing regional builds is no longer possible by EDL, flash is tied to device project ID. For reference EU devices project ID is 20889 while international devices project ID is 20886."
With that being said. I was able to flash modified Metro firmware (patched ramdisk in boot.img) as noted earlier. So perhaps I can try extracting firmware for the global version and metro, replace any project ID in global with metro project ID and attempt to flash the firmware.
Alternatively we can try to patch the Metro MSM tool like the one used for the 6T above.
Click to expand...
Click to collapse
If I had one to test, I'd try it myself. I don't think it's device specific, but it might give you an error, much like Galaxy Devices do on device, if you flash firmware that doesn't match and it knows it doesn't match
You used to be able to flash Chinese firmware to Galaxy Tab A 10.1 tablets to get around FRP because there's no google apps on older Galaxy Tablets for the Chinese region. You'd flash the chinese firmware with patched odin, go through setup, go back to odin, flash US firmware, and it'd get around frp... that no longer works because they added a check into the bootloader itself.
KaptinBoxxi said:
If I had one to test, I'd try it myself. I don't think it's device specific, but it might give you an error, much like Galaxy Devices do on device, if you flash firmware that doesn't match and it knows it doesn't match
You used to be able to flash Chinese firmware to Galaxy Tab A 10.1 tablets to get around FRP because there's no google apps on older Galaxy Tablets for the Chinese region. You'd flash the chinese firmware with patched odin, go through setup, go back to odin, flash US firmware, and it'd get around frp... that no longer works because they added a check into the bootloader itself.
Click to expand...
Click to collapse
I saw the 6T had a patched MSMdownloadtool but according to another post on here for the ubrick guide for this specific variant cannot be patched because it has some anti-debugging code built in.
With that said. I noticed the files you get for the MSM tool has two .DLL files (which could be device specific) that the MSM download tool uses. Also since it is possible to flash modified .OPS it might be possible to still flash the Global version. I saw one guide on the 6t that after you flash the global rom from MSM you get the same error I received with the modified .OPS (patched bootloader) I flashed. Error was "your device cannot be trusted and will not boot". But they took it a step further and ran "fastboot OEM unlock critical" and the bootloader unlocked and booted.
If this device wasn't my daily I would have attempted this by now.
I was able to flash the Global stock Oneplus rom using MSM download tools to the MetroPCS Nord N10 5G.
BUT
OEM unlock is still greyed out. Any ideas?
also updated first post with how to replicate what I did to flash. This should work on any variant as long as you replace the project number to your own
ieatgravity said:
I was able to flash the Global stock Oneplus rom using MSM download tools to the MetroPCS Nord N10 5G.
BUT
OEM unlock is still greyed out. Any ideas?
also updated first post with how to replicate what I did to flash. This should work on any variant as long as you replace the project number to your own
Click to expand...
Click to collapse
It is network checked for OEM Unlock even on the global variants. You need to connect via SIM Data or Wifi for it to check if OEM Unlock can be done, which might mean its doing it via IMEI or some other bootloader specific check
Even connected to the internet the toggle is still greyed out. Device still shows BE2025 despite flashing the international firmware. But it does show the International build number. It also has the international system update engine which was able to do OTA update to latest, it also has the icon at the top where you can pick the file.
Other things I have tried:
- replaced vbmeta and vbmeta_system with empty vbmetas [Device got stuck in an EDL loop]
- replaced recovery.img with twrp.img [Device got stuck in an EDL loop]
- replaced boot.img with magisk_patched.img [Device corrupt, cannot be trusted and will not boot - bootloader loop]
- replaced recovery.img with magisk_patched.img [Device boots like normal. Tried booting magisk (volume down + power until splash screen, then release) Device corrupt, cannot be trusted - reboot back into system just fine.
- Used a HEX editor on boot.img to disable dm-verity [Hex code not found - no changes made]
I don't even know where to begin to see if it is network locked with the international rom. Voice over wifi and 5g works just fine though.
ieatgravity said:
MAJOR UPDATE: Managed to flash Global stock rom to the MetroPCS variant​
Pros: Stock Oneplus and everything works
Cons: OEM unlock is still greyed out
Before you go any further:
THERE IS NO ROOT FOR THIS DEVICE WITH A LOCKED BOOTLOADER (YET). THIS THREAD IS FOR THE DEVELOPMENT AND TESTING OF METHODS TO ACHIEVE THIS.
Just got this device from MetroPCS this week and love this device. However I found out very quick that you have to be with MetroPCS for 180 days before you can get unlocked. To unlock the bootloader you have to be sim unlocked from the carrier.
This thread will be for development of a working root process for others to offer perspective. Feel free to try to replicate at your own risk. If anyone is interested in these files/tools let me know and I will publish more links.
;Download international and metro ROM and MSM tool from these thread (thanks to @Some_Random_Username)​International
MetroPCS
This download will include the latest MSM Download Tool
The work around that I found does not need MSM to be patched
;TOOLS
download and extract oppo decrypt master
unpack and repack .OPS files for use with MSM Download Tool 4 .exe
----------------------------------------------------------------------------------------------------------------------------------------------
Method​----------------------------------------------------------------------------------------------------------------------------------------------
TD;RL:
Extract the .ops file, open settings.xml replace the project ID, repack
Set up:
1. Download international zip and metro zip from above, extract into 2 seperate folders and delete billie8t_14_O.01_201218.ops in the metro folder
2. have adb installed
3. Install python3 and prereqs for oppo decrypt master
Extract .ops, edit and flash:
1. unzip the zip file with the .ops file from both folders and move it to the folder with oppo decrypt
2. run "python3 opscrypto.py decrypt billie8_14_O.01_210128.ops" (decrypt both .ops files from each firmware, the first one being the metro and get the /extract/settings.xml file and open it. we will need info from it)
3. Now extract the international firmware with opoo decrypt and open the extract folder
4. open "settings.xml" from both firmwares in your favorite editor
6. Change the following in the international settings.xml: Project=20886 to Project=20885 and ModelVerifyRandom= (THESE NEED TO BE EXACTLY WHAT ARE IN THE METRO SETTINGS.XML file)
6. Save the file
7. run "python3 opscrypto.py encrypt extract". This will create a file called out.ops
8. Once finished place out.ops into the metro firmware folder and rename to "billie8t_14_O.01_201218.ops"
9. With your phone turned on, plug your phone into the computer
10. Open MSMdownloadtoolv4.0.exe and press start
11. Run "adb reboot edl"
12. Your computer should recognize and start the download.
13. Wait a while and it will reboot.
Click to expand...
Click to collapse
I did what someone else suggested i contacted fcc 2 days ago to file a complaint already sim unlocked on metro oem toggle not grey anymore
scottlam1 said:
I did what someone else suggested i contacted fcc 2 days ago to file a complaint already sim unlocked on metro oem toggle not grey anymore
Click to expand...
Click to collapse
How did you go about this? Were you passed your 180 days?
Here is an interesting(or weird) thread
OnePlus Nord | N10 | N100 [TMO/MPCS] Network Unlock & Enable OEM Unlocking (April 19th, 2021)
1.) ADB access must be enabled -Tap build number 7 times until Developer Options are enabled 2.) Enable USB Debugging -For PC-less enable Wireless Debugging Optional if PC-less 3.) Go to Play Store or F-Droid and download Shizuku 4.) Tap...
forum.xda-developers.com
arda99 said:
Here is an interesting(or weird) thread
OnePlus Nord | N10 | N100 [TMO/MPCS] Network Unlock & Enable OEM Unlocking (April 19th, 2021)
1.) ADB access must be enabled -Tap build number 7 times until Developer Options are enabled 2.) Enable USB Debugging -For PC-less enable Wireless Debugging Optional if PC-less 3.) Go to Play Store or F-Droid and download Shizuku 4.) Tap...
forum.xda-developers.com
Click to expand...
Click to collapse
I...
have mixed feelings about this.
Cannot tell if this is troll or someone actually trying to help
ieatgravity said:
How did you go about this? Were you passed your 180 days?
Click to expand...
Click to collapse
150 days just google fcc complaint the form is simple and explains everything i got an email and call from metro a very nice woman
I used your files oem unlocked bootloader still needs unlock token
I'm aware, I still haven't been able to get unlock bootloader ungreyed out either.
At this point I'm not quite sure what to try next but I will keep researching.
If I can find a way to remove dm-verity (secure boot) I'm 100% positive that I can get it rooted without network unlock and unlocked bootloader.
Though an unlocked bootloader would be nice.
ieatgravity said:
I'm aware, I still haven't been able to get unlock bootloader ungreyed out either.
At this point I'm not quite sure what to try next but I will keep researching.
If I can find a way to remove dm-verity (secure boot) I'm 100% positive that I can get it rooted without network unlock and unlocked bootloader.
Though an unlocked bootloader would be nice.
Click to expand...
Click to collapse
No mine is carrier unlocked and the oem in development is active now but i was hoping i woulnt need the token because for some reason onplus says invalid imei when i try to request a token

Categories

Resources