[-]
Who's Online
There are currently 7565 online users. [Complete List]
» 8 Member(s) | 7557 Guest(s)
AvatarAvatarAvatarAvatar
AvatarAvatarAvatarAvatar

[-]
Tech & Science
[Sci-Am] New $500 Cars Rarely Fail
Last Post: Scientific American
Yesterday 18:53
» Replies: 0
» Views: 82
[Harvard] Gene editing may be a path to restore partial hear...
Last Post: Harvard
Yesterday 18:53
» Replies: 0
» Views: 39
[Wired] What Do the Quark Oddities at the Large Hadron Colli...
Last Post: Wired Magazine
Yesterday 18:53
» Replies: 0
» Views: 41
[Science Daily] Class of stellar explosions found to be gala...
Last Post: Science Daily
Yesterday 18:53
» Replies: 0
» Views: 141
[Sci-Am] Music Synchronizes the Brains of Performers and The...
Last Post: Scientific American
Yesterday 05:30
» Replies: 0
» Views: 118
[Wired] What's Next for SpaceX's Crewed Mission to the ISS?
Last Post: Wired Magazine
Yesterday 05:30
» Replies: 0
» Views: 45
[Science Daily] Kirigami grips could help seniors keep their...
Last Post: Science Daily
Yesterday 05:30
» Replies: 0
» Views: 151
[Sci-Am] Newspapers Refuse to Carry Liquor Ads
Last Post: Scientific American
2020-06-05 16:07
» Replies: 0
» Views: 130
[Harvard] Synthetic microbial system developed to find objec...
Last Post: Harvard
2020-06-05 16:07
» Replies: 0
» Views: 51
[Wired] ‘Oumuamua Might Be a Giant Interstellar Hydrogen Ice...
Last Post: Wired Magazine
2020-06-05 16:07
» Replies: 0
» Views: 50
[Science Daily] NASA space laser missions map 16 years of ic...
Last Post: Science Daily
2020-06-05 16:07
» Replies: 0
» Views: 131
[Sci-Am] SpaceX's Crew Dragon Docks with Space Station
Last Post: Scientific American
2020-06-05 02:34
» Replies: 0
» Views: 129
[Harvard] Study reveals gut’s role in causing death by sleep...
Last Post: Harvard
2020-06-05 02:34
» Replies: 0
» Views: 54
[Wired] Covid-19 Testing Is Expensive. It Doesn't Have to Be
Last Post: Wired Magazine
2020-06-05 02:34
» Replies: 0
» Views: 53
[Science Daily] Scientists find highest ever level of microp...
Last Post: Science Daily
2020-06-05 02:34
» Replies: 0
» Views: 123

[-]
Latest Threads
ZH960-MB-V3.1 SOLVE
Last Post: Kem Syntez
2020-06-04 07:24
» Replies: 38
» Views: 11374
Help! Rom needed for VKWorld New Stone V...
Last Post: Eduardo Mora
2020-05-27 09:58
» Replies: 0
» Views: 216
I need rom for chinese fake tablet
Last Post: ricardodeec
2020-05-24 23:35
» Replies: 2
» Views: 1174
Root "Philips S327"?
Last Post: kenzahem
2020-05-23 21:44
» Replies: 0
» Views: 165
Easily Unbrick Mediatek MT65xx Dead dev...
Last Post: candycamera2001
2020-05-22 17:02
» Replies: 12
» Views: 45916
[ROM --REQUEST] RYTE U50 STOCK ROM MARSH...
Last Post: Pŕàśhanña Kûinkêl
2020-05-15 10:44
» Replies: 0
» Views: 262
ZH960-MB-V3.1
Last Post: มิสเตอ ดอกดิน
2020-05-13 15:28
» Replies: 3
» Views: 2846
rom for BMXC K107 tablet pls
Last Post: fpsmoc
2020-05-12 21:42
» Replies: 56
» Views: 42376
china tablet K107-MB-v4.1 MT6580A
Last Post: fpsmoc
2020-05-12 20:52
» Replies: 3
» Views: 412
ZH960 P10 MB-V3.1 is Logo Loop away.
Last Post: มิสเตอ ดอกดิน
2020-05-12 15:21
» Replies: 1
» Views: 434
NEED ROM FOR MEDIATEK,model number KT09...
Last Post: David Carruthers
2020-05-06 21:51
» Replies: 0
» Views: 331
Stock/Custom ROM Recovery of Carbaystar ...
Last Post: David Carruthers
2020-05-06 21:38
» Replies: 2
» Views: 2180
Tronsmart Element T6 Max 60W Bluetooth N...
Last Post: Blinky
2020-05-03 18:55
» Replies: 1
» Views: 882
Need Firmware - Fake Wish Tablet - T906 ...
Last Post: h35jqh
2020-05-02 00:29
» Replies: 3
» Views: 3186
manual apn edit on kitkat 4.4.2
Last Post: rgitaly
2020-05-01 19:38
» Replies: 0
» Views: 420
[Doogee S95 Pro] Any successful root?
Last Post: lopestom
2020-04-26 08:49
» Replies: 1
» Views: 1212
SP Flsah Tool, Error 2020
Last Post: 007fred52
2020-04-21 17:57
» Replies: 0
» Views: 559
Request for rom
Last Post: Oermelie
2020-04-14 21:25
» Replies: 4
» Views: 1232
Koobee Halo 7 mod stock for Pepsi P1S
Last Post: Mohammed Al-Sheikhly
2020-04-12 13:49
» Replies: 417
» Views: 191451
BACKUP, CUSTOM RECOVERY AND ROOT FOR MT6...
Last Post: romaneart
2020-04-11 21:53
» Replies: 14
» Views: 17982
HOW TO PORT TWRP MT6735, MT6752, MT6753,...
Last Post: danny1323
2020-04-03 22:36
» Replies: 483
» Views: 249742
Need a firmware K107-MB-V5.0
Last Post: charlyfn58
2020-03-28 02:40
» Replies: 1
» Views: 9471
android, SP Flash Tool stuck on download...
Last Post: 007fred52
2020-03-26 21:31
» Replies: 1
» Views: 842


Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
[Tutorial] BACKUP, CUSTOM RECOVERY AND ROOT FOR MT67xx SMARTPHONES
#1
Today I will show you how to backup, create a custom recovery and then root a MT67xx SoC smartphone.
As many of you know by now, MTK Droid Tools (latest version v2.53) is no longer updated by it's creator, and so, you can not use this wonderful software anymore to backup smartphones running on MT67xx chipsets because the software can not read the proper blocks size and will not be able to create a scatter file compatible with SP Flash Tool.
So, as an alternative, you can backup MT67xx smartphones with Miracle Box and SP Flash Tool.

Requirements:
- ADB Driver
- USBDeview
- MediaTek PreLoader USB VCOM Port drivers
- Miracle Box 2.27A or above
- SP Flash Tool 5.1640 or above
- Carliv Image Kitchen

To ensure proper installation and operation of ADB & MediaTek PreLoader USB VCOM Port drivers, follow these steps:
  1. Turn on your device
  2. Go to Settings->Developer Options and enable USB Debugging
  3. Go to Security->Unknown Sources and enable this option to allow installation of applications from unknown sources
  4. Go to Display->Sleep and set it to more than 5 minutes
  5. Download AdbDriverInstaller, launch it as administrator and then connect your device and wait to be detected. If it's detected ok the AdbDriverInstaller interface will issue a notification about this. If AdbDriverInstaller detect that your using the wrong driver it will notify you also and instruct you to proceed with the installation of the right one. Restart your PC.
  6. Download USBDeview and lauch it as administrator. Turn on your device and connect it to PC. In USBDeview Description column, look for the entries Android Composite Adb Interface and YunOS ACB Interface. These will have a green dot on Device Name column. In USBDeview select Android Composite Adb Interface, right click on, open the Properties, look at VendorID entry and note it's value (it may be, for example, something like 17AA, or different). Close USBDeview.
  7. Go to C:\Users\YourUserName and look for a folder named .android. In this folder look for a file named adb_usb.ini. If it's not there, create it with a text editor like notepad, and add the VendorID value in hex format (if your VendorID value is 17AA you will enter it 0x17AA). Save and close.
  8. Open USBDeview as administrator and look in Description column for MediaTek PreLoader USB VCOM Port and MTK USB Port entries. Right click on each and select Uninstall Selected Devices. Next open Windows Device Manager and go to View->Show hidden devices. Scroll to Ports (COM & LPT) section and look for MediaTek PreLoader USB VCOM Port (COMxx) and MTK USB Port (COMxx) entries. Right click on each of them, select Uninstall and check Delete driver software for this device.
  9. Download MTK USB VCOM drivers.
  10. Turn off your device and allow it to shut down completely.
  11. Open Windows Device Manager and scroll down to Ports (COM & LPT) section. Connect your device to PC and watch Ports (COM & LPT) section. MediaTek PreLoader USB VCOM Port device will appear for about 2 seconds and then will dissapear. This is normal. Be quick, right click on it and select Update Driver. Choose to install it manually, browse to the location of your MTK USB VCOM Driver folder, choose usb2ser_Win7.inf file and install MediaTek PreLoader USB VCOM Port driver. After installation complete, disconnect your device and restart your PC. After PC restart, open Device Manager, scroll to Ports (COM & LPT) section, turn off you device and connect it to PC. MediaTek PreLoader USB VCOM Port (COMxx) should appear for about 2 seconds in Device Manager without an exclamation mark. If all is OK, you can proceed to the next step.
Now you can start working with Miracle Box in order to perform one of the following actions:
  1. Backup the PRELOADER and RECOVERY only via "save as scatter file" option.
  2. Backup the entire firmware of your smartphone as one file (in .bin format).
In the first scenario, you only need to backup the Preloader (in .bin format) in order to obtain a scatter file. This scatter file must be perfectly modified in order to use it with SP Flash Tool for read back and flash operations. The resulting Preloader.bin file is compatible with SP Flash Tool.
The second scenario means that you will do a full firmware backup, obtaining a single file (in .bin format) that can be flashed only by Miracle Box.

Now, if you like to read back or flash the firmware with SP Flash Tool follow these steps:
  1. Launch Miracle Box
  2. Wait till Miracle Box opens to the Dashboard
  3. Select the MTK tab
  4. Select Read option
  5. Select the phone's chipset type from the Boot Select dropdown menu
  6. Select Save as scatter file option
  7. Click the Start Button
  8. You should now see >> Waiting for USB Port at the bottom left corner
  9. Connect the phone to the PC (must be switched off) and wait to be detected
  10. A box should popup where you can select the block / partition you would like to backup. Select the PRELOADER and RECOVERY only, then click OK
  11. Browse to the location you wish to save the files to then click OK
  12. Miracle Box begins the backup process. Should be pretty quick.
  13. Once the backup has been completed, you should see a Done message
  14. Disconnect the phone
  15. Browse to the location where you saved the files. You should find the scatter file togehter with preloader.bin and recovery.bin files. Change the RECOVERY file extension from .bin to .img
  16. Unpack RECOVERY.img with Carliv Image Kitchen. In the Recovery folder you should find the ramdisk subfolder and other 9 or 10 files. In some cases the revovery.img-mtk will be missing.
  17. In the ramdisk folder you will find the file fstab.mt67xx (the xx will be different from phone to phone)
  18. Open fstab.mt67xx file in a notepad editor and identify the filesystem type for the following partitions: system, userdata or data, cache, protect1 or protect_f, protect2 or protect_s and nvdata. You need to do this to be able to edit the scatter file later.
  19. Find a sample scatter file from a phone similar with yours (at least the same chipset and operating system)
  20. Create a new folder and rename it e.g. SPFlashtoolReadBack
  21. Copy the original scatter file created by Miracle Box to SPFlashtoolReadBack folder and open it on a notepad editor, side by side with the sample scatter file and compare them. You will notice that your scatter file may have the same number of partitions (follow partition_index line) like the sample scatter file or not. Some of you may have an extra partition named "sgpt" or not. This is not a problem.
  22. Change the config_version line from V1.1.1 to V1.1.2. If you fail to do this, SP Flash Tool will not be able to read the regions from you scatter file.
  23. DO NOT modify the values of the following lines: linear_start_addr, physical_start_addr and partition_size
  24. Modify the type line values for system, userdata , cache, protect1, protect2 and nvdata according to the filesystem identified in fstab.mt67xx file
  25. Follow the other lines in your scatter file and ensure they are the same with the lines in the sample scatter file
  26. Save your scatter file

    The original (unmodified) scatter file will be like this:
    Code:
    ############################################################################################################
    #
    #  General Setting
    #
    ############################################################################################################
    - general: MTK_PLATFORM_CFG
      info:
        - config_version: V1.1.1
          platform: MT6753
          project: mtk_android
          storage: EMMC
          boot_channel: MSDC_0
          block_size: 0x20000
    ############################################################################################################
    #
    #  Layout Setting
    #
    ############################################################################################################
    - partition_index: SYS0
      partition_name: PRELOADER
      file_name: preloader.bin
      is_download: true
      type: SV5_BL_BIN
      linear_start_addr: 0x0
      physical_start_addr: 0x0
      partition_size: 0x400000
      region: EMMC_BOOT_1
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: BOOTLOADER
      reserve: 0x00

    - partition_index: SYS1
      partition_name: PGPT
      file_name: pgpt.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x0
      physical_start_addr: 0x0
      partition_size: 0x80000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS2
      partition_name: PROINFO
      file_name: proinfo.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x80000
      physical_start_addr: 0x80000
      partition_size: 0x300000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS3
      partition_name: NVRAM
      file_name: nvram.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x380000
      physical_start_addr: 0x380000
      partition_size: 0x500000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS4
      partition_name: PROTECT1
      file_name: protect1.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x880000
      physical_start_addr: 0x880000
      partition_size: 0xA00000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS5
      partition_name: PROTECT2
      file_name: protect2.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x1280000
      physical_start_addr: 0x1280000
      partition_size: 0xA00000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS6
      partition_name: LK
      file_name: lk.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x1C80000
      physical_start_addr: 0x1C80000
      partition_size: 0x80000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS7
      partition_name: PARA
      file_name: para.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x1D00000
      physical_start_addr: 0x1D00000
      partition_size: 0x80000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS8
      partition_name: BOOT
      file_name: boot.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x1D80000
      physical_start_addr: 0x1D80000
      partition_size: 0x1000000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS9
      partition_name: RECOVERY
      file_name: recovery.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x2D80000
      physical_start_addr: 0x2D80000
      partition_size: 0x1000000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS10
      partition_name: LOGO
      file_name: logo.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x3D80000
      physical_start_addr: 0x3D80000
      partition_size: 0x800000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS11
      partition_name: EXPDB
      file_name: expdb.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x4580000
      physical_start_addr: 0x4580000
      partition_size: 0xA00000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS12
      partition_name: SECCFG
      file_name: seccfg.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x4F80000
      physical_start_addr: 0x4F80000
      partition_size: 0x80000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS13
      partition_name: OEMKEYSTORE
      file_name: oemkeystore.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x5000000
      physical_start_addr: 0x5000000
      partition_size: 0x200000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS14
      partition_name: SECRO
      file_name: secro.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x5200000
      physical_start_addr: 0x5200000
      partition_size: 0x600000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS15
      partition_name: KEYSTORE
      file_name: keystore.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x5800000
      physical_start_addr: 0x5800000
      partition_size: 0x800000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS16
      partition_name: TEE1
      file_name: tee1.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x6000000
      physical_start_addr: 0x6000000
      partition_size: 0x500000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS17
      partition_name: TEE2
      file_name: tee2.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x6500000
      physical_start_addr: 0x6500000
      partition_size: 0x500000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS18
      partition_name: FRP
      file_name: frp.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x6A00000
      physical_start_addr: 0x6A00000
      partition_size: 0x100000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS19
      partition_name: NVDATA
      file_name: nvdata.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x6B00000
      physical_start_addr: 0x6B00000
      partition_size: 0x2000000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS20
      partition_name: METADATA
      file_name: metadata.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x8B00000
      physical_start_addr: 0x8B00000
      partition_size: 0x2500000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS21
      partition_name: SYSTEM
      file_name: system.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0xB000000
      physical_start_addr: 0xB000000
      partition_size: 0x10C000000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS22
      partition_name: CACHE
      file_name: cache.bin
      is_download: true
      type: YAFFS_IMG
      linear_start_addr: 0x117000000
      physical_start_addr: 0x117000000
      partition_size: 0x19000000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS23
      partition_name: USERDATA
      file_name: userdata.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x130000000
      physical_start_addr: 0x130000000
      partition_size: 0x616B80000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS24
      partition_name: FLASHINFO
      file_name: flashinfo.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x746B80000
      physical_start_addr: 0x746B80000
      partition_size: 0x1000000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: false
      is_reserved: true
      operation_type: UPDATE
      reserve: 0x00

    The modified scatter file should look like this:
    Code:
    ############################################################################################################
    #
    #  General Setting
    #
    ############################################################################################################
    - general: MTK_PLATFORM_CFG
      info:
        - config_version: V1.1.2
          platform: MT6753
          project: mtk_android
          storage: EMMC
          boot_channel: MSDC_0
          block_size: 0x20000
    ############################################################################################################
    #
    #  Layout Setting
    #
    ############################################################################################################
    - partition_index: SYS0
      partition_name: PRELOADER
      file_name: preloader.bin
      is_download: true
      type: SV5_BL_BIN
      linear_start_addr: 0x0
      physical_start_addr: 0x0
      partition_size: 0x400000
      region: EMMC_BOOT_1
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: BOOTLOADER
      reserve: 0x00

    - partition_index: SYS1
      partition_name: PGPT
      file_name: NONE
      is_download: false
      type: NORMAL_ROM
      linear_start_addr: 0x0
      physical_start_addr: 0x0
      partition_size: 0x80000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: INVISIBLE
      reserve: 0x00

    - partition_index: SYS2
      partition_name: PROINFO
      file_name: NONE
      is_download: false
      type: NORMAL_ROM
      linear_start_addr: 0x80000
      physical_start_addr: 0x80000
      partition_size: 0x300000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: PROTECTED
      reserve: 0x00

    - partition_index: SYS3
      partition_name: NVRAM
      file_name: NONE
      is_download: false
      type: NORMAL_ROM
      linear_start_addr: 0x380000
      physical_start_addr: 0x380000
      partition_size: 0x500000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: BINREGION
      reserve: 0x00

    - partition_index: SYS4
      partition_name: PROTECT1
      file_name: protect_f
      is_download: false
      type: EXT4_IMG
      linear_start_addr: 0x880000
      physical_start_addr: 0x880000
      partition_size: 0xA00000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: PROTECTED
      reserve: 0x00

    - partition_index: SYS5
      partition_name: PROTECT2
      file_name: protect_s
      is_download: false
      type: EXT4_IMG
      linear_start_addr: 0x1280000
      physical_start_addr: 0x1280000
      partition_size: 0xA00000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: PROTECTED
      reserve: 0x00

    - partition_index: SYS6
      partition_name: LK
      file_name: bootloader.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x1C80000
      physical_start_addr: 0x1C80000
      partition_size: 0x80000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS7
      partition_name: PARA
      file_name: misc
      is_download: false
      type: NORMAL_ROM
      linear_start_addr: 0x1D00000
      physical_start_addr: 0x1D00000
      partition_size: 0x80000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: INVISIBLE
      reserve: 0x00

    - partition_index: SYS8
      partition_name: BOOT
      file_name: boot.img
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x1D80000
      physical_start_addr: 0x1D80000
      partition_size: 0x1000000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS9
      partition_name: RECOVERY
      file_name: recovery.img
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x2D80000
      physical_start_addr: 0x2D80000
      partition_size: 0x1000000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS10
      partition_name: LOGO
      file_name: logo.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x3D80000
      physical_start_addr: 0x3D80000
      partition_size: 0x800000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS11
      partition_name: EXPDB
      file_name: NONE
      is_download: false
      type: NORMAL_ROM
      linear_start_addr: 0x4580000
      physical_start_addr: 0x4580000
      partition_size: 0xA00000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: INVISIBLE
      reserve: 0x00

    - partition_index: SYS12
      partition_name: SECCFG
      file_name: NONE
      is_download: false
      type: NORMAL_ROM
      linear_start_addr: 0x4F80000
      physical_start_addr: 0x4F80000
      partition_size: 0x80000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: INVISIBLE
      reserve: 0x00

    - partition_index: SYS13
      partition_name: OEMKEYSTORE
      file_name: NONE
      is_download: false
      type: NORMAL_ROM
      linear_start_addr: 0x5000000
      physical_start_addr: 0x5000000
      partition_size: 0x200000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: INVISIBLE
      reserve: 0x00

    - partition_index: SYS14
      partition_name: SECRO
      file_name: secro.img
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x5200000
      physical_start_addr: 0x5200000
      partition_size: 0x600000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS15
      partition_name: KEYSTORE
      file_name: NONE
      is_download: false
      type: NORMAL_ROM
      linear_start_addr: 0x5800000
      physical_start_addr: 0x5800000
      partition_size: 0x800000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: INVISIBLE
      reserve: 0x00

    - partition_index: SYS16
      partition_name: TEE1
      file_name: tee1.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x6000000
      physical_start_addr: 0x6000000
      partition_size: 0x500000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS17
      partition_name: TEE2
      file_name: tee2.bin
      is_download: true
      type: NORMAL_ROM
      linear_start_addr: 0x6500000
      physical_start_addr: 0x6500000
      partition_size: 0x500000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS18
      partition_name: FRP
      file_name: persistent
      is_download: false
      type: NORMAL_ROM
      linear_start_addr: 0x6A00000
      physical_start_addr: 0x6A00000
      partition_size: 0x100000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: INVISIBLE
      reserve: 0x00

    - partition_index: SYS19
      partition_name: NVDATA
      file_name: NONE
      is_download: false
      type: EXT4_IMG
      linear_start_addr: 0x6B00000
      physical_start_addr: 0x6B00000
      partition_size: 0x2000000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: INVISIBLE
      reserve: 0x00

    - partition_index: SYS20
      partition_name: METADATA
      file_name: NONE
      is_download: false
      type: NORMAL_ROM
      linear_start_addr: 0x8B00000
      physical_start_addr: 0x8B00000
      partition_size: 0x2500000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: INVISIBLE
      reserve: 0x00

    - partition_index: SYS21
      partition_name: SYSTEM
      file_name: system.img
      is_download: true
      type: EXT4_IMG
      linear_start_addr: 0xB000000
      physical_start_addr: 0xB000000
      partition_size: 0x10C000000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS22
      partition_name: CACHE
      file_name: cache.img
      is_download: true
      type: EXT4_IMG
      linear_start_addr: 0x117000000
      physical_start_addr: 0x117000000
      partition_size: 0x19000000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS23
      partition_name: USERDATA
      file_name: data.img
      is_download: true
      type: EXT4_IMG
      linear_start_addr: 0x130000000
      physical_start_addr: 0x130000000
      partition_size: 0x616B80000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: true
      is_reserved: false
      operation_type: UPDATE
      reserve: 0x00

    - partition_index: SYS24
      partition_name: FLASHINFO
      file_name: NONE
      is_download: false
      type: NORMAL_ROM
      linear_start_addr: 0x746B80000
      physical_start_addr: 0x746B80000
      partition_size: 0x1000000
      region: EMMC_USER
      storage: HW_STORAGE_EMMC
      boundary_check: false
      is_reserved: true
      operation_type: RESERVED
      reserve: 0x00

  27. Browse to the SP Flash Tool folder and identify the option.ini file.
  28. Open option.ini file, scroll down to the [ReadBack] section and modify the line ShowByScatter=false to ShowByScatter=true
  29. Open SP Flash Tool as an administrator and load the modified scatter file
  30. Select the Readback tab. Here you will see the list of all the partitions from the scatter file. You can select all of them (except the preloader) or you can select only the ones that you want to backup (usually from PGPT to SYSTEM). CACHE and USERDATA are not required because these are usually formated regularly. Do not try to backup the PRELOADER in SP Flash Tool because the resulting file will not be usable to flash. In any case you should never try to flash the preloader, exept if you phone is totally dead.
  31. Double-click on every partition field and choose to save every file in SPFlashtoolReadBack folder. The default names for the saved files will begin with ROM_X (where X would be from 0 to 23 according to the partition index), but you should rename these with the names of the partitions and give the proper file extensions to the following: nvram.bin, lk.bin, boot.img, recovery.img, logo.bin, secro.img, tee1.bin, tee2.bin, system.img, cache.img, userdata.img
  32. Click on Read Back button and quickly connect the phone (must be swiched off) to the PC. SP Flash Tool will start the backup operation.
  33. Wait until SP Flash Tool display the message Readback OK.
  34. Now you can disconnect the phone.
  35. Copy the preloader.bin file to the SPFlashtoolReadBack folder.

Congratulations!
Now you have a complete firmware backup, ready to flash with SP Flash Tool.

If you still want to make a custom recovery, you could follow:
[Only registered and activated users can see links Click here to register] by [Only registered and activated users can see links Click here to register]

If you want to root the phone all you have to do is download [Only registered and activated users can see links Click here to register] and install from custom recovery.

Thank you!
gottlasz, lilngu, GottaGetX like this post
See No Evil, Hear No Evil, Speak No Evil
Reply
#2
Hello djtetei,

Thank you for your tutorial.
I've downloaded MiracleBox (v2.39) and installed it, when but I try to launch it, the program won't run.
Do we need to buy the hardware or the dongle key to be able to run the software ?
Reply
#3
(2016-11-02, 03:17)Jkyun Wrote: [Only registered and activated users can see links Click here to register].
See No Evil, Hear No Evil, Speak No Evil
Reply
#4
Hello djtetei,

Thank you for your tutorial.

Excelent Job, I tried last time with the miracle box, I extracted each partition but you found new things now, I will try ASAP.

As I remember I think we have phones with the same characteristics :

Dual Sim 4G Lte MTK6735 64Bit
5.1 inch Screen 2G RAM 16GB ROM
Android 6.0 MarshMallow
GPU: Mali-T720
Screen Size: 5.1inch

Right ??? or I have bad memory, lol

Thanks again
Reply
#5
Anyone confirm?
This method work?
Hope it work with my mt6735 S7 Edge!
Reply
#6
(2016-11-25, 10:40)lilngu Wrote: Anyone confirm?
This method work?
Hope it work with my mt6735 S7 Edge!

You should try my friend, every clone is different, good luck.
You like this post
Reply
#7
hi, I have a iphone 7 clone, but its not mt67xx its mt6580 (still inside of the not supported devices by mtkdroid tools)

can this process work for the mt6580?
You like this post
Reply
#8
(2016-11-26, 00:03)amhonra Wrote:
(2016-11-25, 10:40)lilngu Wrote: Anyone confirm?
This method work?
Hope it work with my mt6735 S7 Edge!

You should try my friend, every clone is different, good luck.

Oh dear... I dunno why, I use scatter file from Miracle backup. I edit scatter to same type with another mt6735 scatter.
Ya! I think I go right way but when I push Readback and Plug my phone. SPFT say: "CHIP TYPE NOT MATCH"
WTH??
Reply
#9
(2016-11-26, 13:07)lilngu Wrote:
(2016-11-26, 00:03)amhonra Wrote:
(2016-11-25, 10:40)lilngu Wrote: Anyone confirm?
This method work?
Hope it work with my mt6735 S7 Edge!

You should try my friend, every clone is different, good luck.

Oh dear... I dunno why, I use scatter file from Miracle backup. I edit scatter to same type with another mt6735 scatter.
Ya! I think I go right way but when I push Readback and Plug my phone. SPFT say: "CHIP TYPE NOT MATCH"
WTH??


did you do this ???

"Change the config_version line from V1.1.1 to V1.1.2. If you fail to do this, SP Flash Tool will not be able to read the regions from you scatter file"

or verify your mtk chip.......
Reply
#10
(2016-11-27, 14:48)amhonra Wrote: [Only registered and activated users can see links Click here to register]
You like this post
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [Tutorial] HOW TO PORT TWRP MT6735, MT6752, MT6753, MT6795, MT6797 TWRP MT67xx tutorial Cleopatra 483 249,742 2020-04-03, 22:36
Last Post: danny1323
  [Tutorial] How to backup MT6752 MT6732 MT6753 MT67xx (and others) SP Flash Tool compatible alexzap 14 57,560 2019-12-19, 03:42
Last Post: samin.sikong
  iNo3 MT6735- ROOT, TWRP and Raw Img backup Leonaheidern 3 5,676 2018-06-03, 12:32
Last Post: chinawine
  [Tutorial] Ultimate no-root backup CWM MT6582 MT6592 MT6589 MT6589T MT6577 MT6595 Sniper47 39 106,840 2018-04-17, 05:30
Last Post: lentmain
  [New flash method] MT6752 how to root & flash recovery MT67xx Ninja^F.U.B.A.R. 10 27,287 2018-02-15, 06:46
Last Post: milantic

Forum Jump:


Users browsing this thread: 17 Guest(s)
[-]
Tech & Science
[Sci-Am] New $500 Cars Rarely Fail
Last Post: Scientific American
Yesterday 18:53
» Replies: 0
» Views: 82
[Harvard] Gene editing may be a path to restore partial hear...
Last Post: Harvard
Yesterday 18:53
» Replies: 0
» Views: 39
[Wired] What Do the Quark Oddities at the Large Hadron Colli...
Last Post: Wired Magazine
Yesterday 18:53
» Replies: 0
» Views: 41
[Science Daily] Class of stellar explosions found to be gala...
Last Post: Science Daily
Yesterday 18:53
» Replies: 0
» Views: 141
[Sci-Am] Music Synchronizes the Brains of Performers and The...
Last Post: Scientific American
Yesterday 05:30
» Replies: 0
» Views: 118
[Wired] What's Next for SpaceX's Crewed Mission to the ISS?
Last Post: Wired Magazine
Yesterday 05:30
» Replies: 0
» Views: 45
[Science Daily] Kirigami grips could help seniors keep their...
Last Post: Science Daily
Yesterday 05:30
» Replies: 0
» Views: 151
[Sci-Am] Newspapers Refuse to Carry Liquor Ads
Last Post: Scientific American
2020-06-05 16:07
» Replies: 0
» Views: 130
[Harvard] Synthetic microbial system developed to find objec...
Last Post: Harvard
2020-06-05 16:07
» Replies: 0
» Views: 51
[Wired] ‘Oumuamua Might Be a Giant Interstellar Hydrogen Ice...
Last Post: Wired Magazine
2020-06-05 16:07
» Replies: 0
» Views: 50
[Science Daily] NASA space laser missions map 16 years of ic...
Last Post: Science Daily
2020-06-05 16:07
» Replies: 0
» Views: 131
[Sci-Am] SpaceX's Crew Dragon Docks with Space Station
Last Post: Scientific American
2020-06-05 02:34
» Replies: 0
» Views: 129
[Harvard] Study reveals gut’s role in causing death by sleep...
Last Post: Harvard
2020-06-05 02:34
» Replies: 0
» Views: 54
[Wired] Covid-19 Testing Is Expensive. It Doesn't Have to Be
Last Post: Wired Magazine
2020-06-05 02:34
» Replies: 0
» Views: 53
[Science Daily] Scientists find highest ever level of microp...
Last Post: Science Daily
2020-06-05 02:34
» Replies: 0
» Views: 123
[Sci-Am] From behind the Coronavirus Mask, an Unseen Smile C...
Last Post: Scientific American
2020-06-04 13:01
» Replies: 0
» Views: 138
[Harvard] Harvard bee experts discuss the murder hornet thre...
Last Post: Harvard
2020-06-04 13:01
» Replies: 0
» Views: 55
[Wired] Some Nursing Homes Escaped Covid-19—Here's What They...
Last Post: Wired Magazine
2020-06-04 13:01
» Replies: 0
» Views: 59
[Science Daily] Eyes send an unexpected signal to the brain
Last Post: Science Daily
2020-06-04 13:01
» Replies: 0
» Views: 143
[Sci-Am] Mind Over Mood: Understanding Anxiety and Depressio...
Last Post: Scientific American
2020-06-03 23:35
» Replies: 0
» Views: 141
[Wired] Covid-19 Creates Long, Anxious Waits for Fertility T...
Last Post: Wired Magazine
2020-06-03 23:35
» Replies: 0
» Views: 139
[Sci-Am] How 'Cognitive' Tech Can Prevent a Food Crisis
Last Post: Scientific American
2020-06-03 10:10
» Replies: 0
» Views: 153
[Harvard] New research explores horizontal gene transfer
Last Post: Harvard
2020-06-03 10:10
» Replies: 0
» Views: 68
[Wired] To Beat Covid-19, You Have to Know How A Virus Moves
Last Post: Wired Magazine
2020-06-03 10:10
» Replies: 0
» Views: 81
[Science Daily] Physicists measure a short-lived radioactive...
Last Post: Science Daily
2020-06-03 10:10
» Replies: 0
» Views: 181
[Sci-Am] Coronavirus Roundup, May 23-May 29
Last Post: Scientific American
2020-06-02 20:49
» Replies: 0
» Views: 170
[Wired] Weather Delays the SpaceX Crew Dragon Launch
Last Post: Wired Magazine
2020-06-02 20:49
» Replies: 0
» Views: 89
[Science Daily] Astronomers capture rare images of planet-fo...
Last Post: Science Daily
2020-06-02 20:49
» Replies: 0
» Views: 181
[Sci-Am] Spraying Oil on Sand Dunes Helps Trees Grow
Last Post: Scientific American
2020-06-02 07:23
» Replies: 0
» Views: 162
[Wired] Trump’s New Space Force Missile Might Be Too ‘Super-...
Last Post: Wired Magazine
2020-06-02 07:23
» Replies: 0
» Views: 86
[Science Daily] Spitzer telescope reveals the precise timing...
Last Post: Science Daily
2020-06-02 07:23
» Replies: 0
» Views: 191
[Sci-Am] COVID-19 Vaccine Developers Search for Antibodies T...
Last Post: Scientific American
2020-06-01 17:46
» Replies: 0
» Views: 160
[Wired] This Citizen Science Gig Pays People to Match Space ...
Last Post: Wired Magazine
2020-06-01 17:46
» Replies: 0
» Views: 80
[Science Daily] Reexamining the origins of human fatherhood
Last Post: Science Daily
2020-06-01 17:46
» Replies: 0
» Views: 84
[Science Daily] Dinosaur-dooming asteroid struck Earth at 'd...
Last Post: Science Daily
2020-06-01 17:46
» Replies: 0
» Views: 168
[Sci-Am] Coal's Decline Continues with 13 Plant Closures Ann...
Last Post: Scientific American
2020-06-01 04:23
» Replies: 0
» Views: 169
[Wired] How an Immunology Blog Became a Covid-19 Guide to Go...
Last Post: Wired Magazine
2020-06-01 04:23
» Replies: 0
» Views: 89