[Upgrading, Modifying and Unlocking] tloader11:
Dear XDA members,

Recently I've purchased a "KingZone Z1". The newest version for this device is Android 4.4(.4) (KitKat), which I'm running.

After A LOT of research on how to install CWM and make a nandroid backup, I ended up here.

Things I already did:

Edited MTK Droid Tools to include the MT6752, which enabled the 'create scatter file' option (but the scatter file isn't correct, from what I can see)

Made a custom scatter file, which (I'm sure of) is good

Used SPFT to read till the start of the cache partition, then I used the "process ROM_ from flashtool" option in MTK Droid Tools, which failed with error: "boot.img - The signature isn't found!"

Used ADB to create a backup of my recovery and boot partition using the dd command

Tried TWRP automated recovery creator, which failed, too. It said the boot.img was 'locked'

My custom scatter file:

############################################################################################################
#
# General Setting
#
############################################################################################################
- general: MTK_PLATFORM_CFG
info:
- config_version: V1.1.2
platform: MT6752
project: c211_tz_3m_k368_20150509
storage: EMMC
boot_channel: MSDC_0
block_size: 0x20000
############################################################################################################
#
# Layout Setting
#
############################################################################################################
- partition_index: SYS0
partition_name: preloader
file_name: preloader_c211_tz_3m_k368_20150509.bin
is_download: true
type: SV5_BL_BIN
linear_start_addr: 0x0
physical_start_addr: 0x0
partition_size: 0x40000
region: EMMC_BOOT_1
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: BOOTLOADERS
reserve: 0x00

- partition_index: SYS1
partition_name: pgpt
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x0
physical_start_addr: 0x0
partition_size: 0x80000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS2
partition_name: proinfo
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x80000
physical_start_addr: 0x80000
partition_size: 0x300000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: PROTECTED
reserve: 0x00

- partition_index: SYS3
partition_name: nvram
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x380000
physical_start_addr: 0x380000
partition_size: 0x500000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: BINREGION
reserve: 0x00

- partition_index: SYS4
partition_name: protect1
file_name: NONE
is_download: false
type: EXT4_IMG
linear_start_addr: 0x880000
physical_start_addr: 0x880000
partition_size: 0xa00000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: PROTECTED
reserve: 0x00

- partition_index: SYS5
partition_name: protect2
file_name: NONE
is_download: false
type: EXT4_IMG
linear_start_addr: 0x1280000
physical_start_addr: 0x1280000
partition_size: 0xa00000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: PROTECTED
reserve: 0x00

- partition_index: SYS6
partition_name: seccfg
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x1c80000
physical_start_addr: 0x1c80000
partition_size: 0x40000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS7
partition_name: lk
file_name: lk.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x1cc0000
physical_start_addr: 0x1cc0000
partition_size: 0x60000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS8
partition_name: boot
file_name: boot.img
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x1d20000
physical_start_addr: 0x1d20000
partition_size: 0x1000000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS9
partition_name: recovery
file_name: recovery.img
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x2d20000
physical_start_addr: 0x2d20000
partition_size: 0x1000000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS10
partition_name: secro
file_name: secro.img
is_download: true
type: EXT4_IMG
linear_start_addr: 0x3d20000
physical_start_addr: 0x3d20000
partition_size: 0x600000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS11
partition_name: para
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x4320000
physical_start_addr: 0x4320000
partition_size: 0x80000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS12
partition_name: logo
file_name: logo.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x43a0000
physical_start_addr: 0x43a0000
partition_size: 0x800000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS13
partition_name: expdb
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x4ba0000
physical_start_addr: 0x4ba0000
partition_size: 0xa00000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS14
partition_name: tee1
file_name: trustzone.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x55a0000
physical_start_addr: 0x55a0000
partition_size: 0x500000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS15
partition_name: tee2
file_name: trustzonetwo.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x5aa0000
physical_start_addr: 0x5aa0000
partition_size: 0x500000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS16
partition_name: metadata
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x5fa0000
physical_start_addr: 0x5fa0000
partition_size: 0x2060000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS17
partition_name: system
file_name: system.img
is_download: true
type: EXT4_IMG
linear_start_addr: 0x8000000
physical_start_addr: 0x8000000
partition_size: 0x52000000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS18
partition_name: cache
file_name: cache.img
is_download: true
type: EXT4_IMG
linear_start_addr: 0x5a000000
physical_start_addr: 0x5a000000
partition_size: 0x7000000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS19
partition_name: userdata
file_name: userdata.img
is_download: true
type: EXT4_IMG
linear_start_addr: 0x61000000
physical_start_addr: 0x61000000
partition_size: 0xc0000000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS20
partition_name: intsd
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x121000000
physical_start_addr: 0x121000000
partition_size: 0x281d80000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS21
partition_name: flashinfo
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x3a2d80000
physical_start_addr: 0x3a2d80000
partition_size: 0x1000000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: false
is_reserved: true
operation_type: RESERVED
reserve: 0x00

- partition_index: SYS22
partition_name: sgpt
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x3a3d80000
physical_start_addr: 0x3a3d80000
partition_size: 0x80000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: false
is_reserved: true
operation_type: RESERVED
reserve: 0x00

The one MTK Droid Tools created for me:

############################################################################################################
#
# General Setting
#
############################################################################################################
- general: MTK_PLATFORM_CFG
info:
- config_version: V1.1.2
platform: MT6752
project: MTDTtest
storage: NAND
boot_channel: NONE
block_size: 0x290000
############################################################################################################
#
# Layout Setting
#
############################################################################################################
- partition_index: SYS0
partition_name: PROINFO
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x0
physical_start_addr: 0x0
partition_size: 0x400
region: NONE
storage: HW_STORAGE_NAND
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS1
partition_name: NVRAM
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x400
physical_start_addr: 0x0
partition_size: 0x1C00
region: NONE
storage: HW_STORAGE_NAND
boundary_check: true
is_reserved: false
operation_type: BINREGION
reserve: 0x00

- partition_index: SYS2
partition_name: PROTECT1
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x2000
physical_start_addr: 0x0
partition_size: 0x4400
region: NONE
storage: HW_STORAGE_NAND
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS3
partition_name: PROTECT2
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x6400
physical_start_addr: 0x0
partition_size: 0x9400
region: NONE
storage: HW_STORAGE_NAND
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS4
partition_name: SECCFG
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0xF800
physical_start_addr: 0x0
partition_size: 0xE400
region: NONE
storage: HW_STORAGE_NAND
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS5
partition_name: UBOOT
file_name: lk.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x1DC00
physical_start_addr: 0x0
partition_size: 0xE600
region: NONE
storage: HW_STORAGE_NAND
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS6
partition_name: BOOTIMG
file_name: boot.img
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x2C200
physical_start_addr: 0x0
partition_size: 0xE900
region: NONE
storage: HW_STORAGE_NAND
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS7
partition_name: RECOVERY
file_name: recovery.img
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x3AB00
physical_start_addr: 0x0
partition_size: 0x16900
region: NONE
storage: HW_STORAGE_NAND
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS8
partition_name: SECRO
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x51400
physical_start_addr: 0x0
partition_size: 0x1E900
region: NONE
storage: HW_STORAGE_NAND
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS9
partition_name: PARA
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x6FD00
physical_start_addr: 0x0
partition_size: 0x21900
region: NONE
storage: HW_STORAGE_NAND
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS10
partition_name: LOGO
file_name: logo.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x91600
physical_start_addr: 0x0
partition_size: 0x21D00
region: NONE
storage: HW_STORAGE_NAND
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS11
partition_name: EXPDB
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0xB3300
physical_start_addr: 0x0
partition_size: 0x25D00
region: NONE
storage: HW_STORAGE_NAND
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS12
partition_name: TEE1
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0xD9000
physical_start_addr: 0x0
partition_size: 0x2AD00
region: NONE
storage: HW_STORAGE_NAND
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS13
partition_name: TEE2
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x103D00
physical_start_addr: 0x0
partition_size: 0x2D500
region: NONE
storage: HW_STORAGE_NAND
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS14
partition_name: METADATA
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x131200
physical_start_addr: 0x0
partition_size: 0x2FD00
region: NONE
storage: HW_STORAGE_NAND
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS15
partition_name: ANDROID
file_name: system.img
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x160F00
physical_start_addr: 0x0
partition_size: 0x40000
region: NONE
storage: HW_STORAGE_NAND
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS16
partition_name: CACHE
file_name: cache.img
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x1A0F00
physical_start_addr: 0x0
partition_size: 0x2D0000
region: NONE
storage: HW_STORAGE_NAND
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS17
partition_name: USRDATA
file_name: data.img
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x470F00
physical_start_addr: 0x0
partition_size: 0x308000
region: NONE
storage: HW_STORAGE_NAND
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS18
partition_name: INTSD
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x778F00
physical_start_addr: 0x0
partition_size: 0x908000
region: NONE
storage: HW_STORAGE_NAND
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS19
partition_name: FLASHINFO
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x1080F00
physical_start_addr: 0x0
partition_size: 0x1D16C00
region: NONE
storage: HW_STORAGE_NAND
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS20
partition_name: BMTPOOL
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0xFFFF0050
physical_start_addr: 0x0
partition_size: 0xCD00000
region: NONE
storage: HW_STORAGE_NAND
boundary_check: false
is_reserved: true
operation_type: RESERVED
reserve: 0x00

Now can anyone PLEASE help me with this issue? When I have a nandroid backup I want to try to port a rom. (Which is for another MTK phone, but is Android L instead of KK)

Thanks in advance!