Originally Posted by bgcngm
I have never tried this before, but I'm 99% sure this should work:
- Use "Read Back" feature from SP Flash Tool to read boot image from the device
- Modify boot image (make it unsecure)
- Flash the modified boot image using SP Flash Tool
Well, for this you have to assume 0x480000 as the default start address of BOOT partition and a length of 0x600000.
Let me know if you can read back from your devices and then I'll be glad to help you to modify boot.img.
Well, I'm not very familiar with this, but I've tried.
I've installed the driver, first time I have plugged both phones (switched off), they was detected as "Preloader USB VCOM Android (Com3)", so it seems ok.
Next, I've loaded the scrapper for MT6573, I've added a "read back" starting at 0x480000, but when I click "read back", it doesn't find the phone, it keeps searching (using Options > USB Mode of course).
I've tried several time, with the phones completely switched, with the battery removed, starting the phone, etc. but no luck.
Maybe I'm doing something wrong, I will keep searching.
Does this method is supposed to work with all the phones ?