The preface

The Mediatek bug, in conjunction with the XDA community’s work, allowed us to bypass the relevant authorization to degrade the brush.

The purpose of this article is to introduce the PD1986 degradation method and Bootloader unlock.

Related information https://forum.xda-developers.com/t/mod-dev-mediatek-mtk-auth-bypass-sla-daa-utility.4232377/Copy the code

Prior statement

Brush machine has the risk ！！！！ Please assume the risks that may be caused by this method. If the version number is degraded in this way, it may not be consistent with the actual machine package. If the official update is made, the equipment may be brickened. This paper is for reference only.Copy the code

The documents you need to prepare

Cloud. 189. Cn/t/V36vAfvYb… Access code: IU8V)

Contains the lowest available version 1.7.6 wire brush pack image, bypass, and burn tools.

For the same reason, you can try another version of the wire-brush pack instead.

Since the goal of our demo is BL unlocking, we’ll do it with version 1.7.6.

Installation and Running Environment

Unzip mt6889_PD1987.7z and open the folder

All you need is to install Python, Libusb.

Please note that the main content of this article does not cover these and will not go into detail except for notes.

Make good use of your search.

Filter your devices in Libusb

During installation, the following interface will be displayed:

In this case, you need to enter the EDL mode as follows

Specific steps

  1. Connect to closed cell phone.
  2. Hold volume plus and insert USB.

Changes will occur for a short time, please operate quickly. When the list item appears MediaTek USB Port, select and continue.

Running bypass Tool

Before running pythhon, you need to check the installation and dependencies of Pythhon.

1. Install dependency packages

Open the Bypass_Tool folder and run 0

After the installation is complete, press any key to exit.

2. Start the bypass tool

Make sure the phone is fully turned off and running. 1

Waiting for device appears

Then enter EDL mode, which will not be repeated here.

Wait for the command line program to change text until Protection disabled is displayed

Flash downgrade

The bypass tool is the guarantee of normal swiping. Please ensure that it works properly.

Open the sp_flash_Tool_V5.2104 folder and run flash_tool.exe.

Download item: Keep Scatter item: Select 'MT6885_Android_scatter. TXT' Auth item from the brush folder: Leave blank list item: select all items except 'survival', 'cust' and 'VGC'Copy the code

Wait for the brush to finish

Unlock BL

The key to unlocking is the lax unlocking policy of the old version, which is not to be detailed here

Detailed steps reference www.coolapk.com/feed/236383…