[OnePlus 7 Pro Guides, News, & Discussion] joecowboy:
I have to give a big shout out and I just want to thank everyone for their hard work on figuring the procedures out for unlocking the bootloader, and flashing the these phones.

The tutorial for unlocking the bootloader for the Sprint Oneplus 7 Pro 5G work flawlessly if you follow the tutoralial:

https://xdaforums.com/oneplus-7-pro/how-to/bootloader-unlock-sprint-oneplus-7-pro-t4042145

When I first received my phone I bought off eBay I went ahead and set the phone up and upgraded the phone over OTA to

android OS to v10.0.2. This was so I could use the TWRP for Q (10) during the bootloder unlock setup to fix the issues with it

rebooting back into the bootloader. One thing I did learn during the process that it might try to boot into system and

get stuck on the Sprint 5G boot animation. So to force it to power cycle press (VOLUME UP + POWER) buttons and hold them

until it does reboot and then quickly press and hold the (VOLUME UP + VOLUME DOWN + POWER) buttons to boot back into bootloader and

run the FIX instructions again.

Once the bootloader was unlocked I used this tutorial to cross flash the firmware to the OnePlus 7 Pro 5G European. Then went through

the phone setup process and then installed the Oxegen Updater APK to downloaded the firmware to forced it to update to the latest 10.0.6 firmware by manually installing

it through the System Update under the gear Local update. Tutorial found here:

https://xdaforums.com/oneplus-7-pro/how-to/discussion-oneplus-7-pro-5g-rom-gsi-t4042583

Then I followed the tutorial to installing TWRP for Q (10) and to root installing Magisk:

https://forums.oneplus.com/threads/...magisk-twrp-oneplus-7-pro-android-10.1178410/

I found out during the process of flashing and updating to the Oxegen 10.0.6 European firmware the bootloader had re-locked.

So I had to follow the steps once again to unlock the bootloader and then followed the guide of rooting the Sprint OnePlus 7 Pro

5G.

Now to the part I have run into trouble trying to remove the SIM LOCK on the phone to Sprint:

I tried to follow the tutorial of SIM UNLOCKING the T-Mobile OnePlus 7 Pro:

https://xdaforums.com/oneplus-6t/how-to/guide-sim-unlock-t-mobile-version-type-t3915269

Fist I did back up my phone in TWRP. However, when you run these two fastboot commands from the bootloader it will FAIL:

fastboot erase modemst1

fastboot erase modemst2

The Error messages are:

Erasing 'modemst1' FAILED (remote: 'Erase is not allowed for Critical Partitions')

fastboot: error: Command failed

Erasing 'modemst1' FAILED (remote: 'Erase is not allowed for Critical Partitions')

fastboot: error: Command failed

So after doing some research and running this fastboot command I found out that not everything unlocked:

fastboot oem device-info

And it's output:

(bootloader) Verity mode: true

(bootloader) Device unlocked: true

(bootloader) Device critical unlocked: false

(bootloader) Charger screen enabled: true

(bootloader) enable_dm_verity: true

(bootloader) have_console: false

(bootloader) selinux_type: SELINUX_TYPE_INVALID

(bootloader) boot_mode: NORMAL_MODE

(bootloader) kmemleak_detect: false

(bootloader) force_training: 0

(bootloader) mount_tempfs: 0

(bootloader) op_abl_version: 0x31

(bootloader) cal_rebootcount: 0x31

OKAY [ 0.064s]

Finished. Total time: 0.071s

As you can see the Device critical unlocked is: false. So you cannot write to those partitions.

I tried the fastboot commands:

fastboot flashing unlock_critical

fastboot oem unlock_critical

Both with same message:

FAILED (remote: ' Device already : unlocked!')

fastboot: error: Command failed

I even tried the shell commands to overwrite the two partitions from TWRP and from command prompt using

adb from platform tools:

dd if=/dev/zero of=/dev/block/bootdevice/by-name/modemst1

dd if=/dev/zero of=/dev/block/bootdevice/by-name/modemst2

And it's output:

/system/bin/sh: adb: inaccessible or not found

Modemst1, modemst2 and zero do exist but being bootloader critial locked you still cannot write to the partitions even with root.

So next I looked into using QPST package and erasing the partitions using Partition Manager from QFIL utility but need the firehose

file for SM8150 chipset and the following site does not have it listed:

https://forum.hovatek.com/thread-25696.html

Good tutorial on using the QFIL and updating partition:

https://www.youtube.com/watch?v=MdknZvaTwl4

So finding this thread it was said you extract the firehose file from the MsmDownloadTool OPS file. I tried using the python script github to dump the OPS file

but I could never get crypto to compile correctly on my windows box for python and used another branch said not a WIN32 file error for crypto. Found here:

https://github.com/bkerler/oppo_decrypt

So my question is how do you extract the firehose file from the MsmDownloadTool OPS file so we can possibly enable writing to the critical partitions so you can make other updates

such as modifying the apns-conf.xml because you cannot write to critical partitions even with root privileges.

Thanks in advance for any advice and help!