[OPPO Find X2 Pro Guides, News, & Discussion] MeTheRebel:
This would be the best way to unlock our bootloaders atm 👌🏻 haha

Well I read somewhere on realme forums Oppo encrypts their .ofp to only work with their patched Msm Download Tool... Also since, let's be honest, this is a normie phone meant for people with little time so unless someone here is a certified xda developer no offense but you're going to have to write your entire process when flashing or attempting something because I have trust issues from the Region switch thread 😂 (ex. did you set UFS as your storage device - could be irrelevant idk, was everything properly connected and detected, did you enable the Port-Access switch with the number I wrote before and in the bottom of this thread and when did you attempt it etc.)

I mean so far this is the situation:

To unlock the bootloader we need access to fastboot -> since we don't have access to fastboot maybe we can root the stock rom but you can't flash anything but .ozip files -> ok so we decrypt the .ozip file(there is a tool online) to .zip and patch/edit files but it seems like we can't turn it back to .ozip for flashing because the encryption and decryption keys are different (I THINK, didn't manage to research this part as much so if anyone finds any way to do this that would be the easiest solution so far) and we might still not be able to boot because of some hidden encryption checks for recovery/rom and we just soft bricked our device so.. -> we need to unlock the bootloader 😂

Now if we get our hands on latest Oppo firmware files and manage to decrypt it and patch files that way then we could just flash it but if it doesnt work we hard brick the device but at that point we can already flash back the original firmware file so we should be able to restore it (If we get to this point you NEED TO BACKUP you modem configuration etc because that part gets lost afaik) unless we brick the EDL mode (Emergency DownLoad mode)then I think we're ****ed? idk just speculation at this point..

Oppo's philosophy is security through obscurity and the moment we find a single crack we can do whatever we want. Unfortunately I'm just a power user and a nerd so this is just my semi-educated, subjective reasoning and I believe this sequence of events could crack the phone wide open but it doesn't guarantee anything. Also I believe our biggest surface of attack is the fact that we can enter *#649010# and toggle Engineering mode and all the other switches (I still haven't tried that one because of fear I wouldn't be able to go back from that one without outside assistance).

At this point we need to probe and code so if there is someone experienced enough to try one of the methods I listed in this post and maybe can use Qualcomms Service Programming or some hex editing I wish you best of luck. I myself am going to keep digging if there is an easier way on other forums.

Edit: small changes to phrasing and fixes

Also reposting this because it gets buried quick

https://xdaforums.com/t/entering-engineering-mode-and-list-of-secret-codes.4019245/

Current codes of note(all require sec5 unlock):

*#9434# - remote unlock of sec5 privileges

*#808# Engineer/Diagnostic app, mostly information and service tests

*#*#4636#*#* extra information and SIM config changes

*#36446337# Modem configuration/diagnostics

*#3988691# remove your SIM lock? Supposedly you're meant to enter your IMEI but it asks for a 1 extra number?

*#391# change software region

*#649010# enable external tampering through usb/serial/whatever port?

There are other Chinese or Taiwan specific codes in that list (check region) that might help someone