it looks like there is a modified fastboot binary being used, that can extract a special code from the phone that can be used to unlock it it seems like it makes sense to try to get ahold of that binary, run it, and figure out what its secret protocol is