Login

**djtetei** · (This post was last modified: 2016-10-25, 07:21 by djtetei.)

Today I will show you how to backup, create a custom recovery and then root a MT67xx SoC smartphone.
As many of you know by now, MTK Droid Tools (latest version v2.53) is no longer updated by it's creator, and so, you can not use this wonderful software anymore to backup smartphones running on MT67xx chipsets because the software can not read the proper blocks size and will not be able to create a scatter file compatible with SP Flash Tool.
So, as an alternative, you can backup MT67xx smartphones with Miracle Box and SP Flash Tool.

Requirements:
- ADB Driver
- USBDeview
- MediaTek PreLoader USB VCOM Port drivers
- Miracle Box 2.27A or above
- SP Flash Tool 5.1640 or above
- Carliv Image Kitchen

To ensure proper installation and operation of ADB & MediaTek PreLoader USB VCOM Port drivers, follow these steps:

Turn on your device
Go to Settings->Developer Options and enable USB Debugging
Go to Security->Unknown Sources and enable this option to allow installation of applications from unknown sources
Go to Display->Sleep and set it to more than 5 minutes
Download AdbDriverInstaller, launch it as administrator and then connect your device and wait to be detected. If it's detected ok the AdbDriverInstaller interface will issue a notification about this. If AdbDriverInstaller detect that your using the wrong driver it will notify you also and instruct you to proceed with the installation of the right one. Restart your PC.
Download USBDeview and lauch it as administrator. Turn on your device and connect it to PC. In USBDeview Description column, look for the entries Android Composite Adb Interface and YunOS ACB Interface. These will have a green dot on Device Name column. In USBDeview select Android Composite Adb Interface, right click on, open the Properties, look at VendorID entry and note it's value (it may be, for example, something like 17AA, or different). Close USBDeview.
Go to C:\Users\YourUserName and look for a folder named .android. In this folder look for a file named adb_usb.ini. If it's not there, create it with a text editor like notepad, and add the VendorID value in hex format (if your VendorID value is 17AA you will enter it 0x17AA). Save and close.
Open USBDeview as administrator and look in Description column for MediaTek PreLoader USB VCOM Port and MTK USB Port entries. Right click on each and select Uninstall Selected Devices. Next open Windows Device Manager and go to View->Show hidden devices. Scroll to Ports (COM & LPT) section and look for MediaTek PreLoader USB VCOM Port (COMxx) and MTK USB Port (COMxx) entries. Right click on each of them, select Uninstall and check Delete driver software for this device.
Download MTK USB VCOM drivers.
Turn off your device and allow it to shut down completely.
Open Windows Device Manager and scroll down to Ports (COM & LPT) section. Connect your device to PC and watch Ports (COM & LPT) section. MediaTek PreLoader USB VCOM Port device will appear for about 2 seconds and then will dissapear. This is normal. Be quick, right click on it and select Update Driver. Choose to install it manually, browse to the location of your MTK USB VCOM Driver folder, choose usb2ser_Win7.inf file and install MediaTek PreLoader USB VCOM Port driver. After installation complete, disconnect your device and restart your PC. After PC restart, open Device Manager, scroll to Ports (COM & LPT) section, turn off you device and connect it to PC. MediaTek PreLoader USB VCOM Port (COMxx) should appear for about 2 seconds in Device Manager without an exclamation mark. If all is OK, you can proceed to the next step.

Now you can start working with Miracle Box in order to perform one of the following actions:

Backup the PRELOADER and RECOVERY only via "save as scatter file" option.
Backup the entire firmware of your smartphone as one file (in .bin format).

In the first scenario, you only need to backup the Preloader (in .bin format) in order to obtain a scatter file. This scatter file must be perfectly modified in order to use it with SP Flash Tool for read back and flash operations. The resulting Preloader.bin file is compatible with SP Flash Tool.
The second scenario means that you will do a full firmware backup, obtaining a single file (in .bin format) that can be flashed only by Miracle Box.

Now, if you like to read back or flash the firmware with SP Flash Tool follow these steps:

Launch Miracle Box
Wait till Miracle Box opens to the Dashboard
Select the MTK tab
Select Read option
Select the phone's chipset type from the Boot Select dropdown menu
Select Save as scatter file option
Click the Start Button
You should now see >> Waiting for USB Port at the bottom left corner
Connect the phone to the PC (must be switched off) and wait to be detected
A box should popup where you can select the block / partition you would like to backup. Select the PRELOADER and RECOVERY only, then click OK
Browse to the location you wish to save the files to then click OK
Miracle Box begins the backup process. Should be pretty quick.
Once the backup has been completed, you should see a Done message
Disconnect the phone
Browse to the location where you saved the files. You should find the scatter file togehter with preloader.bin and recovery.bin files. Change the RECOVERY file extension from .bin to .img
Unpack RECOVERY.img with Carliv Image Kitchen. In the Recovery folder you should find the ramdisk subfolder and other 9 or 10 files. In some cases the revovery.img-mtk will be missing.
In the ramdisk folder you will find the file fstab.mt67xx (the xx will be different from phone to phone)
Open fstab.mt67xx file in a notepad editor and identify the filesystem type for the following partitions: system, userdata or data, cache, protect1 or protect_f, protect2 or protect_s and nvdata. You need to do this to be able to edit the scatter file later.
Find a sample scatter file from a phone similar with yours (at least the same chipset and operating system)
Create a new folder and rename it e.g. SPFlashtoolReadBack
Copy the original scatter file created by Miracle Box to SPFlashtoolReadBack folder and open it on a notepad editor, side by side with the sample scatter file and compare them. You will notice that your scatter file may have the same number of partitions (follow partition_index line) like the sample scatter file or not. Some of you may have an extra partition named "sgpt" or not. This is not a problem.
Change the config_version line from V1.1.1 to V1.1.2. If you fail to do this, SP Flash Tool will not be able to read the regions from you scatter file.
DO NOT modify the values of the following lines: linear_start_addr, physical_start_addr and partition_size
Modify the type line values for system, userdata , cache, protect1, protect2 and nvdata according to the filesystem identified in fstab.mt67xx file
Follow the other lines in your scatter file and ensure they are the same with the lines in the sample scatter file
Save your scatter file

The original (unmodified) scatter file will be like this:

Code:
############################################################################################################ # # General Setting # ############################################################################################################ - general: MTK_PLATFORM_CFG info: - config_version: V1.1.1 platform: MT6753 project: mtk_android storage: EMMC boot_channel: MSDC_0 block_size: 0x20000 ############################################################################################################ # # Layout Setting # ############################################################################################################ - partition_index: SYS0 partition_name: PRELOADER file_name: preloader.bin is_download: true type: SV5_BL_BIN linear_start_addr: 0x0 physical_start_addr: 0x0 partition_size: 0x400000 region: EMMC_BOOT_1 storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: BOOTLOADER reserve: 0x00 - partition_index: SYS1 partition_name: PGPT file_name: pgpt.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x0 physical_start_addr: 0x0 partition_size: 0x80000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS2 partition_name: PROINFO file_name: proinfo.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x80000 physical_start_addr: 0x80000 partition_size: 0x300000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS3 partition_name: NVRAM file_name: nvram.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x380000 physical_start_addr: 0x380000 partition_size: 0x500000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS4 partition_name: PROTECT1 file_name: protect1.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x880000 physical_start_addr: 0x880000 partition_size: 0xA00000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS5 partition_name: PROTECT2 file_name: protect2.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x1280000 physical_start_addr: 0x1280000 partition_size: 0xA00000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS6 partition_name: LK file_name: lk.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x1C80000 physical_start_addr: 0x1C80000 partition_size: 0x80000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS7 partition_name: PARA file_name: para.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x1D00000 physical_start_addr: 0x1D00000 partition_size: 0x80000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS8 partition_name: BOOT file_name: boot.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x1D80000 physical_start_addr: 0x1D80000 partition_size: 0x1000000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS9 partition_name: RECOVERY file_name: recovery.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x2D80000 physical_start_addr: 0x2D80000 partition_size: 0x1000000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS10 partition_name: LOGO file_name: logo.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x3D80000 physical_start_addr: 0x3D80000 partition_size: 0x800000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS11 partition_name: EXPDB file_name: expdb.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x4580000 physical_start_addr: 0x4580000 partition_size: 0xA00000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS12 partition_name: SECCFG file_name: seccfg.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x4F80000 physical_start_addr: 0x4F80000 partition_size: 0x80000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS13 partition_name: OEMKEYSTORE file_name: oemkeystore.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x5000000 physical_start_addr: 0x5000000 partition_size: 0x200000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS14 partition_name: SECRO file_name: secro.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x5200000 physical_start_addr: 0x5200000 partition_size: 0x600000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS15 partition_name: KEYSTORE file_name: keystore.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x5800000 physical_start_addr: 0x5800000 partition_size: 0x800000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS16 partition_name: TEE1 file_name: tee1.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x6000000 physical_start_addr: 0x6000000 partition_size: 0x500000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS17 partition_name: TEE2 file_name: tee2.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x6500000 physical_start_addr: 0x6500000 partition_size: 0x500000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS18 partition_name: FRP file_name: frp.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x6A00000 physical_start_addr: 0x6A00000 partition_size: 0x100000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS19 partition_name: NVDATA file_name: nvdata.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x6B00000 physical_start_addr: 0x6B00000 partition_size: 0x2000000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS20 partition_name: METADATA file_name: metadata.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x8B00000 physical_start_addr: 0x8B00000 partition_size: 0x2500000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS21 partition_name: SYSTEM file_name: system.bin is_download: true type: NORMAL_ROM linear_start_addr: 0xB000000 physical_start_addr: 0xB000000 partition_size: 0x10C000000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS22 partition_name: CACHE file_name: cache.bin is_download: true type: YAFFS_IMG linear_start_addr: 0x117000000 physical_start_addr: 0x117000000 partition_size: 0x19000000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS23 partition_name: USERDATA file_name: userdata.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x130000000 physical_start_addr: 0x130000000 partition_size: 0x616B80000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS24 partition_name: FLASHINFO file_name: flashinfo.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x746B80000 physical_start_addr: 0x746B80000 partition_size: 0x1000000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: false is_reserved: true operation_type: UPDATE reserve: 0x00

The modified scatter file should look like this:

Code:
############################################################################################################ # # General Setting # ############################################################################################################ - general: MTK_PLATFORM_CFG info: - config_version: V1.1.2 platform: MT6753 project: mtk_android storage: EMMC boot_channel: MSDC_0 block_size: 0x20000 ############################################################################################################ # # Layout Setting # ############################################################################################################ - partition_index: SYS0 partition_name: PRELOADER file_name: preloader.bin is_download: true type: SV5_BL_BIN linear_start_addr: 0x0 physical_start_addr: 0x0 partition_size: 0x400000 region: EMMC_BOOT_1 storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: BOOTLOADER reserve: 0x00 - partition_index: SYS1 partition_name: PGPT file_name: NONE is_download: false type: NORMAL_ROM linear_start_addr: 0x0 physical_start_addr: 0x0 partition_size: 0x80000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: INVISIBLE reserve: 0x00 - partition_index: SYS2 partition_name: PROINFO file_name: NONE is_download: false type: NORMAL_ROM linear_start_addr: 0x80000 physical_start_addr: 0x80000 partition_size: 0x300000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: PROTECTED reserve: 0x00 - partition_index: SYS3 partition_name: NVRAM file_name: NONE is_download: false type: NORMAL_ROM linear_start_addr: 0x380000 physical_start_addr: 0x380000 partition_size: 0x500000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: BINREGION reserve: 0x00 - partition_index: SYS4 partition_name: PROTECT1 file_name: protect_f is_download: false type: EXT4_IMG linear_start_addr: 0x880000 physical_start_addr: 0x880000 partition_size: 0xA00000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: PROTECTED reserve: 0x00 - partition_index: SYS5 partition_name: PROTECT2 file_name: protect_s is_download: false type: EXT4_IMG linear_start_addr: 0x1280000 physical_start_addr: 0x1280000 partition_size: 0xA00000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: PROTECTED reserve: 0x00 - partition_index: SYS6 partition_name: LK file_name: bootloader.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x1C80000 physical_start_addr: 0x1C80000 partition_size: 0x80000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS7 partition_name: PARA file_name: misc is_download: false type: NORMAL_ROM linear_start_addr: 0x1D00000 physical_start_addr: 0x1D00000 partition_size: 0x80000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: INVISIBLE reserve: 0x00 - partition_index: SYS8 partition_name: BOOT file_name: boot.img is_download: true type: NORMAL_ROM linear_start_addr: 0x1D80000 physical_start_addr: 0x1D80000 partition_size: 0x1000000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS9 partition_name: RECOVERY file_name: recovery.img is_download: true type: NORMAL_ROM linear_start_addr: 0x2D80000 physical_start_addr: 0x2D80000 partition_size: 0x1000000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS10 partition_name: LOGO file_name: logo.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x3D80000 physical_start_addr: 0x3D80000 partition_size: 0x800000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS11 partition_name: EXPDB file_name: NONE is_download: false type: NORMAL_ROM linear_start_addr: 0x4580000 physical_start_addr: 0x4580000 partition_size: 0xA00000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: INVISIBLE reserve: 0x00 - partition_index: SYS12 partition_name: SECCFG file_name: NONE is_download: false type: NORMAL_ROM linear_start_addr: 0x4F80000 physical_start_addr: 0x4F80000 partition_size: 0x80000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: INVISIBLE reserve: 0x00 - partition_index: SYS13 partition_name: OEMKEYSTORE file_name: NONE is_download: false type: NORMAL_ROM linear_start_addr: 0x5000000 physical_start_addr: 0x5000000 partition_size: 0x200000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: INVISIBLE reserve: 0x00 - partition_index: SYS14 partition_name: SECRO file_name: secro.img is_download: true type: NORMAL_ROM linear_start_addr: 0x5200000 physical_start_addr: 0x5200000 partition_size: 0x600000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS15 partition_name: KEYSTORE file_name: NONE is_download: false type: NORMAL_ROM linear_start_addr: 0x5800000 physical_start_addr: 0x5800000 partition_size: 0x800000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: INVISIBLE reserve: 0x00 - partition_index: SYS16 partition_name: TEE1 file_name: tee1.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x6000000 physical_start_addr: 0x6000000 partition_size: 0x500000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS17 partition_name: TEE2 file_name: tee2.bin is_download: true type: NORMAL_ROM linear_start_addr: 0x6500000 physical_start_addr: 0x6500000 partition_size: 0x500000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS18 partition_name: FRP file_name: persistent is_download: false type: NORMAL_ROM linear_start_addr: 0x6A00000 physical_start_addr: 0x6A00000 partition_size: 0x100000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: INVISIBLE reserve: 0x00 - partition_index: SYS19 partition_name: NVDATA file_name: NONE is_download: false type: EXT4_IMG linear_start_addr: 0x6B00000 physical_start_addr: 0x6B00000 partition_size: 0x2000000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: INVISIBLE reserve: 0x00 - partition_index: SYS20 partition_name: METADATA file_name: NONE is_download: false type: NORMAL_ROM linear_start_addr: 0x8B00000 physical_start_addr: 0x8B00000 partition_size: 0x2500000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: INVISIBLE reserve: 0x00 - partition_index: SYS21 partition_name: SYSTEM file_name: system.img is_download: true type: EXT4_IMG linear_start_addr: 0xB000000 physical_start_addr: 0xB000000 partition_size: 0x10C000000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS22 partition_name: CACHE file_name: cache.img is_download: true type: EXT4_IMG linear_start_addr: 0x117000000 physical_start_addr: 0x117000000 partition_size: 0x19000000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS23 partition_name: USERDATA file_name: data.img is_download: true type: EXT4_IMG linear_start_addr: 0x130000000 physical_start_addr: 0x130000000 partition_size: 0x616B80000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: true is_reserved: false operation_type: UPDATE reserve: 0x00 - partition_index: SYS24 partition_name: FLASHINFO file_name: NONE is_download: false type: NORMAL_ROM linear_start_addr: 0x746B80000 physical_start_addr: 0x746B80000 partition_size: 0x1000000 region: EMMC_USER storage: HW_STORAGE_EMMC boundary_check: false is_reserved: true operation_type: RESERVED reserve: 0x00
Browse to the SP Flash Tool folder and identify the option.ini file.
Open option.ini file, scroll down to the [ReadBack] section and modify the line ShowByScatter=false to ShowByScatter=true
Open SP Flash Tool as an administrator and load the modified scatter file
Select the Readback tab. Here you will see the list of all the partitions from the scatter file. You can select all of them (except the preloader) or you can select only the ones that you want to backup (usually from PGPT to SYSTEM). CACHE and USERDATA are not required because these are usually formated regularly. Do not try to backup the PRELOADER in SP Flash Tool because the resulting file will not be usable to flash. In any case you should never try to flash the preloader, exept if you phone is totally dead.
Double-click on every partition field and choose to save every file in SPFlashtoolReadBack folder. The default names for the saved files will begin with ROM_X (where X would be from 0 to 23 according to the partition index), but you should rename these with the names of the partitions and give the proper file extensions to the following: nvram.bin, lk.bin, boot.img, recovery.img, logo.bin, secro.img, tee1.bin, tee2.bin, system.img, cache.img, userdata.img
Click on Read Back button and quickly connect the phone (must be swiched off) to the PC. SP Flash Tool will start the backup operation.
Wait until SP Flash Tool display the message Readback OK.
Now you can disconnect the phone.
Copy the preloader.bin file to the SPFlashtoolReadBack folder.

Congratulations!
Now you have a complete firmware backup, ready to flash with SP Flash Tool.

If you still want to make a custom recovery, you could follow:
[Only registered and activated users can see links Click here to register] by [Only registered and activated users can see links Click here to register]

If you want to root the phone all you have to do is download [Only registered and activated users can see links Click here to register] and install from custom recovery.

Thank you!

**Jkyun** · 2016-11-02, 03:17

Hello djtetei,

Thank you for your tutorial.
I've downloaded MiracleBox (v2.39) and installed it, when but I try to launch it, the program won't run.
Do we need to buy the hardware or the dongle key to be able to run the software ?

**djtetei** · 2016-11-02, 03:33

(2016-11-02, 03:17)Jkyun Wrote: [Only registered and activated users can see links Click here to register].

**amhonra** · 2016-11-07, 07:16

Hello djtetei,

Thank you for your tutorial.

Excelent Job, I tried last time with the miracle box, I extracted each partition but you found new things now, I will try ASAP.

As I remember I think we have phones with the same characteristics :

Dual Sim 4G Lte MTK6735 64Bit
5.1 inch Screen 2G RAM 16GB ROM
Android 6.0 MarshMallow
GPU: Mali-T720
Screen Size: 5.1inch

Right ??? or I have bad memory, lol

Thanks again

**lilngu** · 2016-11-25, 10:40

Anyone confirm?
This method work?
Hope it work with my mt6735 S7 Edge!

**amhonra** · 2016-11-26, 00:03

(2016-11-25, 10:40)lilngu Wrote: Anyone confirm?
This method work?
Hope it work with my mt6735 S7 Edge!

You should try my friend, every clone is different, good luck.

**Elder55** · 2016-11-26, 02:17

hi, I have a iphone 7 clone, but its not mt67xx its mt6580 (still inside of the not supported devices by mtkdroid tools)

can this process work for the mt6580?

**lilngu** · 2016-11-26, 13:07

(2016-11-26, 00:03)amhonra Wrote:
(2016-11-25, 10:40)lilngu Wrote: Anyone confirm?
This method work?
Hope it work with my mt6735 S7 Edge!

You should try my friend, every clone is different, good luck.

Oh dear... I dunno why, I use scatter file from Miracle backup. I edit scatter to same type with another mt6735 scatter.
Ya! I think I go right way but when I push Readback and Plug my phone. SPFT say: "CHIP TYPE NOT MATCH"
WTH??

**amhonra** · 2016-11-27, 14:48

(2016-11-26, 13:07)lilngu Wrote:
(2016-11-26, 00:03)amhonra Wrote:
(2016-11-25, 10:40)lilngu Wrote: Anyone confirm?
This method work?
Hope it work with my mt6735 S7 Edge!

You should try my friend, every clone is different, good luck.

Oh dear... I dunno why, I use scatter file from Miracle backup. I edit scatter to same type with another mt6735 scatter.
Ya! I think I go right way but when I push Readback and Plug my phone. SPFT say: "CHIP TYPE NOT MATCH"
WTH??

did you do this ???

"Change the config_version line from V1.1.1 to V1.1.2. If you fail to do this, SP Flash Tool will not be able to read the regions from you scatter file"

or verify your mtk chip.......

**lilngu** · 2016-11-27, 15:11

(2016-11-27, 14:48)amhonra Wrote: [Only registered and activated users can see links Click here to register]

Login
Username:
Password:	Lost Password?
	Remember me