diff --git a/mtkclient/config/brom_config.py b/mtkclient/config/brom_config.py
index 2d463398..2b4d066a 100644
--- a/mtkclient/config/brom_config.py
+++ b/mtkclient/config/brom_config.py
@@ -830,30 +830,30 @@ def __init__(self, var1=None, watchdog=None, uart=None, brom_payload_addr=None,
                       description="Helio P90 k79v1",
                       loader="mt6779_payload.bin"),
     0x1066: chipconfig(
-        # var1=0xA, #confirmed
-        # watchdog=0x10007000,
-        # uart=0x11002000,
-        # brom_payload_addr=0x100A00,
-        # da_payload_addr=0x201000,
-        # pl_payload_addr=0x40200000,
-        # gcpu_base=0x10050000,
-        # sej_base=0x1000A000,  # hacc
-        # dxcc_base=0x10210000,
+        var1=0x73, #confirmed
+        watchdog=0x10007000,
+        uart=0x11002000,
+        brom_payload_addr=0x100A00,
+        da_payload_addr=0x201000,
+        pl_payload_addr=0x40200000,
+        gcpu_base=0x10050000,
+        sej_base=0x1000A000,  # hacc
+        dxcc_base=0x10210000,
         # cqdma_base=0x10212000,
         # ap_dma_mem=0x11000000 + 0x158,
-        # blacklist=[(0x102838, 0x0)],
-        # blacklist_count=0x0000000A,
-        # send_ptr=(0x102878,0xe2a4),
-        # ctrl_buffer=0x00102A80,
-        # cmd_handler=0x0000EFD9,
-        # brom_register_access=(0xe6ac,0xe764),
-        # meid_addr=0x102B38,
-        # socid_addr=0x102B48,
+        blacklist=[(0x10284C, 0x106B54)],
+        blacklist_count=0x0000000A,
+        send_ptr=(0x102890,0xe5d8),
+        ctrl_buffer=0x00102AB4,
+        cmd_handler=0x0000F3C1,
+        brom_register_access=(0xe9dc,0xea94),
+        meid_addr=0x102B98,
+        socid_addr=0x102BA8,
         damode=damodes.XFLASH,
         dacode=0x6781,
         name="MT6781",
         description="Helio A22",
-        # loader="mt6781_payload.bin"
+        loader="mt6781_payload.bin"
     ),
     0x813: chipconfig(var1=0xA,  # confirmed
                       watchdog=0x10007000,
diff --git a/mtkclient/payloads/mt6781_payload.bin b/mtkclient/payloads/mt6781_payload.bin
new file mode 100755
index 00000000..b0e4142c
Binary files /dev/null and b/mtkclient/payloads/mt6781_payload.bin differ