[Miscellaneous Android Development] :
So I tried with MTK Droid Root & Tools and obviously my phone is too new to work with it.

For some reason it thought I had a MT6737M which seems to contradicts what I got from "sudo fastboot getvar all", that said I had a MT6735 in my Moto C (XT1758).

Hardware : MT6737M
Model : Moto C
Build number : NRD90M.014
Build date UTC : 20180124-072506
Android v : 7.0
Baseband v: MOLY.LR9.W1444.MD.LWTG.MP.V110.5.P49, 2018/01/08 19:57
Kernel v : 3.18.35+ (cibuild@dell-PowerEdge-R730) (gcc version 4.8 (GCC) ) #1 SMP Wed Jan 24 15:56:40 CST 2018

--->>> Connect to device <<<---
--- ERROR : --- TotalBytesPerChunk Not Found. Set default Page/Spare=2048/64 !!!
--- Unknown ROM structure, backup NOT possible!
ATTENTION! File /system/recovery-from-boot.p which restore factory recovery in case of phone switching on in a normal mode Is Found!

When I clicked block maps it only showed :

N 1
Name bmtpool
Scatter 0000000000
Size 0000000000
Byte Size 0

Which doesn't look right.

So I tried [Tutorial] How to use Wwr_MTK + SP Flash tool to backup Mediatek rom from my previous post.

So my next step was to try with the WwR_MTK_v2.30 tools. I exported a MT6735_Android_scatter.

I read this process requires you to remove the battery from the phone and power it off.

I went to the "Readback" tab in Smart Phone Flash Tool v5.1820.000 after putting the scatter-loading file in. I clicked Add, double clicked on the entry and saved ROM_0 to my desktop.

I then set:

Region: EMMC_BOOT_1
Start Address: 0x0000000000000000
Length: 0x0000000000080000

I got the error: CHIP TYPE NOT match!! target efusse value: 0x94010000

Looking at the logs I see

06/27/18 23:57:54.494 BROM_DLL[4276][4468]: DEBUG: GetCOMPortWithFilter(): New COM port: Filter index(1), Number(COM3), Friendly(MediaTek PreLoader USB VCOM (Android) (COM3)), Instance(USB\VID_0E8D&PID_2000\5&1EAA782A&0&2), Symbolic(\\?\usb#vid_0e8d&pid_2000#5&1eaa782a&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed}) (FlashToolLib/host/windows/com_enum.cpp:1183)
06/27/18 23:57:54.494 BROM_DLL[4276][4468]: com_base::com_base() m_hCOM(FFFFFFFF) (FlashToolLib/host/windows/com_sentry.cpp:117)
06/27/18 23:57:54.494 BROM_DLL[4276][4468]: com_sentry::eek:pen(\\?\usb#vid_0e8d&pid_2000#5&1eaa782a&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed}, FFFFFFFF, 115200) (FlashToolLib/host/windows/com_sentry.cpp:597)
06/27/18 23:57:54.494 BROM_DLL[4276][4468]: hCOM = 0xcbc, retry [0] times (FlashToolLib/host/windows/com_sentry.cpp:611)
06/27/18 23:57:54.510 BROM_DLL[4276][5112]: ComPortEnumerateByArg: NOT FOUND!! (FlashToolLib/host/windows/com_enum.cpp:514)
06/27/18 23:57:54.760 BROM_DLL[4276][4468]: com_sentry::SetRTS(\\?\usb#vid_0e8d&pid_2000#5&1eaa782a&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed}, 00000CBC): successfully pull high RTS and DTR! (FlashToolLib/host/windows/com_sentry.cpp:713)
06/27/18 23:57:54.760 BROM_DLL[4276][4468]: com_sentry::Reset(\\?\usb#vid_0e8d&pid_2000#5&1eaa782a&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed}, 00000CBC): OK!, baudrate(115200). (FlashToolLib/host/windows/com_sentry.cpp:496)
06/27/18 23:57:54.760 BROM_DLL[4276][4468]: WARNING: debugconf::load(C:\Users\Administrator\Desktop\SP_Flash_Tool_v5.1820_Win\libdebug.conf): file doesn't exist (FlashToolLib/source/common/generic/src/debugconf.cpp:117)
06/27/18 23:57:54.760 BROM_DLL[4276][4468]: com_sentry::eek:pen(\\?\usb#vid_0e8d&pid_2000#5&1eaa782a&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed}, 00000CBC): CreateFile("\\?\usb#vid_0e8d&pid_2000#5&1eaa782a&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed}") OK!, baudrate(115200). (FlashToolLib/host/windows/com_sentry.cpp:631)
06/27/18 23:57:54.760 BROM_DLL[4276][4468]: DEBUG: DA_cmd::DA_cmd(): m_p_stopflag(0x03F40CB0)=0. (FlashToolLib/sv5/common/generic/src/da_cmd.cpp:82)
06/27/18 23:57:54.760 BROM_DLL[4276][4468]: DEBUG: Setup_Connect_Param(): ### debug 111 ### (FlashToolLib/sv5/common/generic/src/flashtool_api.cpp:1214)
06/27/18 23:57:54.760 BROM_DLL[4276][4468]: DEBUG: Setup_Connect_Param(): ### debug 222 ### (FlashToolLib/sv5/common/generic/src/flashtool_api.cpp:1225)
06/27/18 23:57:54.760 BROM_DLL[4276][4468]: DEBUG: Setup_Connect_Param(): ### debug 333 ### (FlashToolLib/sv5/common/generic/src/flashtool_api.cpp:1230)
06/27/18 23:57:54.760 BROM_DLL[4276][4468]: DEBUG: Setup_Connect_Param(): ### debug 444 ### (FlashToolLib/sv5/common/generic/src/flashtool_api.cpp:1234)
06/27/18 23:57:54.760 BROM_DLL[4276][4468]: DEBUG: Setup_Connect_Param(): ### debug 666 ### (FlashToolLib/sv5/common/generic/src/flashtool_api.cpp:1244)
06/27/18 23:57:54.760 BROM_DLL[4276][4468]: FlashTool_Connect_BROM_Ex(03477188)(): AUTO_DETECT_BBCHIP(254), AUTO_DETECT_EXT_CLOCK(254). (FlashToolLib/sv5/common/interface/src/brom.cpp:1050)
06/27/18 23:57:54.760 BROM_DLL[4276][4468]: BRom_AutoBoot::BRom_StartCmd(0): ... (FlashToolLib/sv5/common/interface/src/brom_autoboot.cpp:209)
06/27/18 23:57:55.010 BROM_DLL[4276][4468]: DEBUG: BRom_Base::SetBRomCommState(): OK!, BaudRate(57600) = 57600 x EXT_CLOCK(2) x Multiple(1). (FlashToolLib/sv5/common/interface/src/brom_base.cpp:360)
06/27/18 23:57:55.025 BROM_DLL[4276][4468]: BRom_AutoBoot::BRom_StartCmd(0): m_ext_clock(EXT_26M), m_baud_rate(57600), SEND(0xA0)->RECV(0x52), fail_retry(1). (FlashToolLib/sv5/common/interface/src/brom_autoboot.cpp:268)
06/27/18 23:57:55.025 BROM_DLL[4276][4468]: DEBUG: BRom_Base::SetBRomCommState(): OK!, BaudRate(9600) = 9600 x EXT_CLOCK(2) x Multiple(1). (FlashToolLib/sv5/common/interface/src/brom_base.cpp:360)
06/27/18 23:57:55.025 BROM_DLL[4276][4468]: BRom_AutoBoot::BRom_StartCmd(0): m_ext_clock(EXT_26M), m_baud_rate(9600), SEND(0xA0)->RECV(0x5F), OK. (FlashToolLib/sv5/common/interface/src/brom_autoboot.cpp:261)
06/27/18 23:57:55.025 BROM_DLL[4276][4468]: BRom_AutoBoot::BRom_StartCmd(0): m_ext_clock(EXT_26M), m_baud_rate(9600), SEND(0x0A)->RECV(0xF5), OK. (FlashToolLib/sv5/common/interface/src/brom_autoboot.cpp:261)
06/27/18 23:57:55.025 BROM_DLL[4276][4468]: BRom_AutoBoot::BRom_StartCmd(0): m_ext_clock(EXT_26M), m_baud_rate(9600), SEND(0x50)->RECV(0xAF), OK. (FlashToolLib/sv5/common/interface/src/brom_autoboot.cpp:261)
06/27/18 23:57:55.025 BROM_DLL[4276][4468]: BRom_AutoBoot::BRom_StartCmd(0): m_ext_clock(EXT_26M), m_baud_rate(9600), SEND(0x05)->RECV(0xFA), OK. (FlashToolLib/sv5/common/interface/src/brom_autoboot.cpp:261)
06/27/18 23:57:55.025 BROM_DLL[4276][4468]: BRom_AutoBoot::BRom_StartCmd(0): [0] 0xA0 -> 0x5F (FlashToolLib/sv5/common/interface/src/brom_autoboot.cpp:305)
06/27/18 23:57:55.025 BROM_DLL[4276][4468]: BRom_AutoBoot::BRom_StartCmd(0): [1] 0x0A -> 0xF5 (FlashToolLib/sv5/common/interface/src/brom_autoboot.cpp:305)
06/27/18 23:57:55.025 BROM_DLL[4276][4468]: BRom_AutoBoot::BRom_StartCmd(0): [2] 0x50 -> 0xAF (FlashToolLib/sv5/common/interface/src/brom_autoboot.cpp:305)
06/27/18 23:57:55.025 BROM_DLL[4276][4468]: BRom_AutoBoot::BRom_StartCmd(0): [3] 0x05 -> 0xFA (FlashToolLib/sv5/common/interface/src/brom_autoboot.cpp:305)
06/27/18 23:57:55.025 BROM_DLL[4276][4468]: DEBUG: BRom_Base::GetBBChipIDFromTarget(): BRom_GetHWCode() ... (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1571)
06/27/18 23:57:55.025 BROM_DLL[4276][4468]: DEBUG: BRom_Base::BRom_GetHWCode(): enter ... (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1999)
06/27/18 23:57:55.041 BROM_DLL[4276][4468]: DEBUG: BRom_Base::Write8DataWithEcho(): =0, cmd(0xFD) (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1325)
06/27/18 23:57:55.041 BROM_DLL[4276][4468]: DEBUG: BRom_Base::BRom_GetHWCode(): HW Code (0x335) (FlashToolLib/sv5/common/interface/src/brom_base.cpp:2022)
06/27/18 23:57:55.041 BROM_DLL[4276][4468]: DEBUG: BRom_Base::BRom_GetHWCode(): OK! (FlashToolLib/sv5/common/interface/src/brom_base.cpp:2024)
06/27/18 23:57:55.041 BROM_DLL[4276][4468]: DEBUG: BRom_Base::GetBBChipIDFromTarget(): BRom_GetHWCode() Pass! Get HW code(0x335) (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1579)
06/27/18 23:57:55.041 BROM_DLL[4276][4468]: DEBUG: BRom_Base::GetBBChipIDFromTarget(): Try to detect chips with GET_HW_SW_VER .. (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1644)
06/27/18 23:57:55.041 BROM_DLL[4276][4468]: DEBUG: BBChipIDMap::Find(): Find bbchip (0x335) (FlashToolLib/source/common/generic/src/bbchip_id.cpp:536)
06/27/18 23:57:55.041 BROM_DLL[4276][4468]: DEBUG: BRom_Base::GetBBChipIDFromTarget(): BRom_GetHWSWVer() ... (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1662)
06/27/18 23:57:55.041 BROM_DLL[4276][4468]: DEBUG: BRom_Base::BRom_GetHWSWVer(): enter ... (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1944)
06/27/18 23:57:55.057 BROM_DLL[4276][4468]: DEBUG: BRom_Base::Write8DataWithEcho(): =0, cmd(0xFC) (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1325)
06/27/18 23:57:55.057 BROM_DLL[4276][4468]: DEBUG: BRom_Base::BRom_GetHWSWVer(): HW_VER(0xca00), SW_VER(0x0), HW_SUBCODE(0x8a00) (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1979)
06/27/18 23:57:55.057 BROM_DLL[4276][4468]: DEBUG: BRom_Base::BRom_GetHWSWVer(): OK! (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1981)
06/27/18 23:57:55.057 BROM_DLL[4276][4468]: DEBUG: BRom_Base::GetBBChipIDFromTarget(): Get HW SW version is done. (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1668)
06/27/18 23:57:55.057 BROM_DLL[4276][4468]: ChipRemap.lookup(0x0335, 0x8A00, 0xCA00, 0x0000) .. (FlashToolLib/sv5/common/interface/src/brom_base.cpp:205)
06/27/18 23:57:55.057 BROM_DLL[4276][4468]: DEBUG: BRom_Base::GetBBChipIDFromTarget(): Find the BBChip ID as (157) (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1684)
06/27/18 23:57:55.057 BROM_DLL[4276][4468]: DEBUG: BRom_Base::GetBBChipIDFromTarget(): BB chip name(MT6735M_S00): DigitalDie={ hw_ver(0xCA00), sw_ver(0x0000), hw_code(0x0335), hw_subcode(0x8A00) }, AnalogDie={ hw_ver(0x0000), hw_code(0x0000) } (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1724)
06/27/18 23:57:55.057 BROM_DLL[4276][4468]: BRom_AutoBoot::BRom_StartCmd(0): Pass! (FlashToolLib/sv5/common/interface/src/brom_autoboot.cpp:336)
06/27/18 23:57:55.057 BROM_DLL[4276][4468]: DEBUG: BRom_Base::CreateObject(): MT6735M(157), EXT_26M(2), p_bootstop(0x03F40CB0), ms_boot_timeout(268435455), max_start_cmd_retry_count(1). (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1495)
06/27/18 23:57:55.072 BROM_DLL[4276][4468]: DEBUG: BRom_Base::Write8DataWithEcho(): =0, cmd(0xD1) (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1325)
06/27/18 23:57:55.103 BROM_DLL[4276][4468]: BRom_MT6276::BRom_ReadCmd32(): 0x102061B0[1]={ 0x94010000 }. (FlashToolLib/sv5/common/generic/src/brom_mt6276.cpp:675)
06/27/18 23:57:55.119 BROM_DLL[4276][4468]: DEBUG: BRom_Base::Write8DataWithEcho(): =0, cmd(0xD1) (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1325)
06/27/18 23:57:55.150 BROM_DLL[4276][4468]: BRom_MT6276::BRom_ReadCmd32(): 0x102061B0[1]={ 0x94010000 }. (FlashToolLib/sv5/common/generic/src/brom_mt6276.cpp:675)
06/27/18 23:57:55.150 BROM_DLL[4276][4468]: ERROR: BRom_MT6735::IsChipTypeMatch(): CHIP TYPE NOT match!! target efuse value: 0x94010000 (FlashToolLib/sv5/common/generic/src/brom_mt6735.cpp:207)
06/27/18 23:57:55.150 BROM_DLL[4276][4468]: ERROR: FlashTool_Connect_BROM_Ex(): FlashTool_Connect_BROM_Ex() fail, error S_CHIP_TYPE_NOT_MATCH(3184) (FlashToolLib/sv5/common/generic/src/flashtool_api.cpp:1962)
06/27/18 23:57:55.150 BROM_DLL[4276][4468]: ERROR: FlashTool_Connect_BROM_Ex(): <ERR_CHECKPOINT>[146][error][3184]</ERR_CHECKPOINT> [S_CHIP_TYPE_NOT_MATCH] (FlashToolLib/sv5/common/generic/src/flashtool_api.cpp:1963)
06/27/18 23:57:55.150 BROM_DLL[4276][4468]: ERROR: FlashTool_Disconnect_BROM(): invalid arguments! *p_ft_handleis NULL (FlashToolLib/sv5/common/generic/src/flashtool_api.cpp:2370)
06/27/18 23:57:55.150 BROM_DLL[4276][4468]: ERROR: FlashTool_Disconnect_BROM(): <ERR_CHECKPOINT>[109][error][1002]</ERR_CHECKPOINT> [S_INVALID_ARGUMENTS] (FlashToolLib/sv5/common/generic/src/flashtool_api.cpp:2371)
06/27/18 23:57:55.150 BROM_DLL[4276][5112]: RB_ClearAll(): RB_HANDLE->rwlock: WRITE_LOCK ... (FlashToolLib/host/windows/rwlock.cpp:460)
06/27/18 23:57:55.150 BROM_DLL[4276][5112]: RB_ClearAll(): RB_HANDLE->rwlock: WRITE_UNLOCK. (FlashToolLib/host/windows/rwlock.cpp:476)

It thinks I should have a BRom_Base::GetBBChipIDFromTarget(): BB chip name(MT6735M_S00) but according to my get vars I should have a "MT6735".

I tried with the MT6735M to see if that would work but I got the same error.

06/28/18 00:09:31.105 BROM_DLL[3728][4116]: DEBUG: GetCOMPortWithFilter(): New COM port: Filter index(1), Number(COM3), Friendly(MediaTek PreLoader USB VCOM (Android) (COM3)), Instance(USB\VID_0E8D&PID_2000\5&1EAA782A&0&2), Symbolic(\\?\usb#vid_0e8d&pid_2000#5&1eaa782a&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed}) (FlashToolLib/host/windows/com_enum.cpp:1183)
06/28/18 00:09:31.105 BROM_DLL[3728][4116]: com_base::com_base() m_hCOM(FFFFFFFF) (FlashToolLib/host/windows/com_sentry.cpp:117)
06/28/18 00:09:31.105 BROM_DLL[3728][4116]: com_sentry::eek:pen(\\?\usb#vid_0e8d&pid_2000#5&1eaa782a&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed}, FFFFFFFF, 115200) (FlashToolLib/host/windows/com_sentry.cpp:597)
06/28/18 00:09:31.105 BROM_DLL[3728][4116]: hCOM = 0xae0, retry [0] times (FlashToolLib/host/windows/com_sentry.cpp:611)
06/28/18 00:09:31.371 BROM_DLL[3728][4116]: com_sentry::SetRTS(\\?\usb#vid_0e8d&pid_2000#5&1eaa782a&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed}, 00000AE0): successfully pull high RTS and DTR! (FlashToolLib/host/windows/com_sentry.cpp:713)
06/28/18 00:09:31.371 BROM_DLL[3728][4116]: com_sentry::Reset(\\?\usb#vid_0e8d&pid_2000#5&1eaa782a&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed}, 00000AE0): OK!, baudrate(115200). (FlashToolLib/host/windows/com_sentry.cpp:496)
06/28/18 00:09:31.371 BROM_DLL[3728][4116]: WARNING: debugconf::load(C:\Users\Administrator\Desktop\SP_Flash_Tool_v5.1820_Win\libdebug.conf): file doesn't exist (FlashToolLib/source/common/generic/src/debugconf.cpp:117)
06/28/18 00:09:31.371 BROM_DLL[3728][4116]: com_sentry::eek:pen(\\?\usb#vid_0e8d&pid_2000#5&1eaa782a&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed}, 00000AE0): CreateFile("\\?\usb#vid_0e8d&pid_2000#5&1eaa782a&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed}") OK!, baudrate(115200). (FlashToolLib/host/windows/com_sentry.cpp:631)
06/28/18 00:09:31.371 BROM_DLL[3728][4116]: DEBUG: DA_cmd::DA_cmd(): m_p_stopflag(0x0404C1B0)=0. (FlashToolLib/sv5/common/generic/src/da_cmd.cpp:82)
06/28/18 00:09:31.371 BROM_DLL[3728][4116]: DEBUG: Setup_Connect_Param(): ### debug 111 ### (FlashToolLib/sv5/common/generic/src/flashtool_api.cpp:1214)
06/28/18 00:09:31.371 BROM_DLL[3728][4116]: DEBUG: Setup_Connect_Param(): ### debug 222 ### (FlashToolLib/sv5/common/generic/src/flashtool_api.cpp:1225)
06/28/18 00:09:31.371 BROM_DLL[3728][4116]: DEBUG: Setup_Connect_Param(): ### debug 333 ### (FlashToolLib/sv5/common/generic/src/flashtool_api.cpp:1230)
06/28/18 00:09:31.371 BROM_DLL[3728][4116]: DEBUG: Setup_Connect_Param(): ### debug 444 ### (FlashToolLib/sv5/common/generic/src/flashtool_api.cpp:1234)
06/28/18 00:09:31.371 BROM_DLL[3728][4116]: DEBUG: Setup_Connect_Param(): ### debug 666 ### (FlashToolLib/sv5/common/generic/src/flashtool_api.cpp:1244)
06/28/18 00:09:31.371 BROM_DLL[3728][4116]: FlashTool_Connect_BROM_Ex(033C30A0)(): AUTO_DETECT_BBCHIP(254), AUTO_DETECT_EXT_CLOCK(254). (FlashToolLib/sv5/common/interface/src/brom.cpp:1050)
06/28/18 00:09:31.371 BROM_DLL[3728][4116]: BRom_AutoBoot::BRom_StartCmd(0): ... (FlashToolLib/sv5/common/interface/src/brom_autoboot.cpp:209)
06/28/18 00:09:31.621 BROM_DLL[3728][4116]: DEBUG: BRom_Base::SetBRomCommState(): OK!, BaudRate(57600) = 57600 x EXT_CLOCK(2) x Multiple(1). (FlashToolLib/sv5/common/interface/src/brom_base.cpp:360)
06/28/18 00:09:31.636 BROM_DLL[3728][4116]: BRom_AutoBoot::BRom_StartCmd(0): m_ext_clock(EXT_26M), m_baud_rate(57600), SEND(0xA0)->RECV(0x52), fail_retry(1). (FlashToolLib/sv5/common/interface/src/brom_autoboot.cpp:268)
06/28/18 00:09:31.636 BROM_DLL[3728][4116]: DEBUG: BRom_Base::SetBRomCommState(): OK!, BaudRate(9600) = 9600 x EXT_CLOCK(2) x Multiple(1). (FlashToolLib/sv5/common/interface/src/brom_base.cpp:360)
06/28/18 00:09:31.636 BROM_DLL[3728][4116]: BRom_AutoBoot::BRom_StartCmd(0): m_ext_clock(EXT_26M), m_baud_rate(9600), SEND(0xA0)->RECV(0x5F), OK. (FlashToolLib/sv5/common/interface/src/brom_autoboot.cpp:261)
06/28/18 00:09:31.636 BROM_DLL[3728][4116]: BRom_AutoBoot::BRom_StartCmd(0): m_ext_clock(EXT_26M), m_baud_rate(9600), SEND(0x0A)->RECV(0xF5), OK. (FlashToolLib/sv5/common/interface/src/brom_autoboot.cpp:261)
06/28/18 00:09:31.636 BROM_DLL[3728][4116]: BRom_AutoBoot::BRom_StartCmd(0): m_ext_clock(EXT_26M), m_baud_rate(9600), SEND(0x50)->RECV(0xAF), OK. (FlashToolLib/sv5/common/interface/src/brom_autoboot.cpp:261)
06/28/18 00:09:31.636 BROM_DLL[3728][4116]: BRom_AutoBoot::BRom_StartCmd(0): m_ext_clock(EXT_26M), m_baud_rate(9600), SEND(0x05)->RECV(0xFA), OK. (FlashToolLib/sv5/common/interface/src/brom_autoboot.cpp:261)
06/28/18 00:09:31.636 BROM_DLL[3728][4116]: BRom_AutoBoot::BRom_StartCmd(0): [0] 0xA0 -> 0x5F (FlashToolLib/sv5/common/interface/src/brom_autoboot.cpp:305)
06/28/18 00:09:31.636 BROM_DLL[3728][4116]: BRom_AutoBoot::BRom_StartCmd(0): [1] 0x0A -> 0xF5 (FlashToolLib/sv5/common/interface/src/brom_autoboot.cpp:305)
06/28/18 00:09:31.636 BROM_DLL[3728][4116]: BRom_AutoBoot::BRom_StartCmd(0): [2] 0x50 -> 0xAF (FlashToolLib/sv5/common/interface/src/brom_autoboot.cpp:305)
06/28/18 00:09:31.636 BROM_DLL[3728][4116]: BRom_AutoBoot::BRom_StartCmd(0): [3] 0x05 -> 0xFA (FlashToolLib/sv5/common/interface/src/brom_autoboot.cpp:305)
06/28/18 00:09:31.636 BROM_DLL[3728][4116]: DEBUG: BRom_Base::GetBBChipIDFromTarget(): BRom_GetHWCode() ... (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1571)
06/28/18 00:09:31.636 BROM_DLL[3728][4116]: DEBUG: BRom_Base::BRom_GetHWCode(): enter ... (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1999)
06/28/18 00:09:31.652 BROM_DLL[3728][4116]: DEBUG: BRom_Base::Write8DataWithEcho(): =0, cmd(0xFD) (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1325)
06/28/18 00:09:31.652 BROM_DLL[3728][4116]: DEBUG: BRom_Base::BRom_GetHWCode(): HW Code (0x335) (FlashToolLib/sv5/common/interface/src/brom_base.cpp:2022)
06/28/18 00:09:31.652 BROM_DLL[3728][4116]: DEBUG: BRom_Base::BRom_GetHWCode(): OK! (FlashToolLib/sv5/common/interface/src/brom_base.cpp:2024)
06/28/18 00:09:31.652 BROM_DLL[3728][4116]: DEBUG: BRom_Base::GetBBChipIDFromTarget(): BRom_GetHWCode() Pass! Get HW code(0x335) (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1579)
06/28/18 00:09:31.652 BROM_DLL[3728][4116]: DEBUG: BRom_Base::GetBBChipIDFromTarget(): Try to detect chips with GET_HW_SW_VER .. (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1644)
06/28/18 00:09:31.652 BROM_DLL[3728][4116]: DEBUG: BBChipIDMap::Find(): Find bbchip (0x335) (FlashToolLib/source/common/generic/src/bbchip_id.cpp:536)
06/28/18 00:09:31.652 BROM_DLL[3728][4116]: DEBUG: BRom_Base::GetBBChipIDFromTarget(): BRom_GetHWSWVer() ... (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1662)
06/28/18 00:09:31.652 BROM_DLL[3728][4116]: DEBUG: BRom_Base::BRom_GetHWSWVer(): enter ... (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1944)
06/28/18 00:09:31.668 BROM_DLL[3728][4116]: DEBUG: BRom_Base::Write8DataWithEcho(): =0, cmd(0xFC) (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1325)
06/28/18 00:09:31.668 BROM_DLL[3728][4116]: DEBUG: BRom_Base::BRom_GetHWSWVer(): HW_VER(0xca00), SW_VER(0x0), HW_SUBCODE(0x8a00) (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1979)
06/28/18 00:09:31.668 BROM_DLL[3728][4116]: DEBUG: BRom_Base::BRom_GetHWSWVer(): OK! (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1981)
06/28/18 00:09:31.668 BROM_DLL[3728][4116]: DEBUG: BRom_Base::GetBBChipIDFromTarget(): Get HW SW version is done. (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1668)
06/28/18 00:09:31.668 BROM_DLL[3728][4116]: ChipRemap.lookup(0x0335, 0x8A00, 0xCA00, 0x0000) .. (FlashToolLib/sv5/common/interface/src/brom_base.cpp:205)
06/28/18 00:09:31.668 BROM_DLL[3728][4116]: DEBUG: BRom_Base::GetBBChipIDFromTarget(): Find the BBChip ID as (157) (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1684)
06/28/18 00:09:31.668 BROM_DLL[3728][4116]: DEBUG: BRom_Base::GetBBChipIDFromTarget(): BB chip name(MT6735M_S00): DigitalDie={ hw_ver(0xCA00), sw_ver(0x0000), hw_code(0x0335), hw_subcode(0x8A00) }, AnalogDie={ hw_ver(0x0000), hw_code(0x0000) } (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1724)
06/28/18 00:09:31.668 BROM_DLL[3728][4116]: BRom_AutoBoot::BRom_StartCmd(0): Pass! (FlashToolLib/sv5/common/interface/src/brom_autoboot.cpp:336)
06/28/18 00:09:31.668 BROM_DLL[3728][4116]: DEBUG: BRom_Base::CreateObject(): MT6735M(157), EXT_26M(2), p_bootstop(0x0404C1B0), ms_boot_timeout(268435455), max_start_cmd_retry_count(1). (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1495)
06/28/18 00:09:31.683 BROM_DLL[3728][4116]: DEBUG: BRom_Base::Write8DataWithEcho(): =0, cmd(0xD1) (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1325)
06/28/18 00:09:31.714 BROM_DLL[3728][4116]: BRom_MT6276::BRom_ReadCmd32(): 0x102061B0[1]={ 0x94010000 }. (FlashToolLib/sv5/common/generic/src/brom_mt6276.cpp:675)
06/28/18 00:09:31.730 BROM_DLL[3728][4116]: DEBUG: BRom_Base::Write8DataWithEcho(): =0, cmd(0xD1) (FlashToolLib/sv5/common/interface/src/brom_base.cpp:1325)
06/28/18 00:09:31.761 BROM_DLL[3728][4116]: BRom_MT6276::BRom_ReadCmd32(): 0x102061B0[1]={ 0x94010000 }. (FlashToolLib/sv5/common/generic/src/brom_mt6276.cpp:675)
06/28/18 00:09:31.761 BROM_DLL[3728][4116]: ERROR: BRom_MT6735::IsChipTypeMatch(): CHIP TYPE NOT match!! target efuse value: 0x94010000 (FlashToolLib/sv5/common/generic/src/brom_mt6735.cpp:207)
06/28/18 00:09:31.761 BROM_DLL[3728][4116]: ERROR: FlashTool_Connect_BROM_Ex(): FlashTool_Connect_BROM_Ex() fail, error S_CHIP_TYPE_NOT_MATCH(3184) (FlashToolLib/sv5/common/generic/src/flashtool_api.cpp:1962)
06/28/18 00:09:31.761 BROM_DLL[3728][4116]: ERROR: FlashTool_Connect_BROM_Ex(): <ERR_CHECKPOINT>[146][error][3184]</ERR_CHECKPOINT> [S_CHIP_TYPE_NOT_MATCH] (FlashToolLib/sv5/common/generic/src/flashtool_api.cpp:1963)
06/28/18 00:09:31.761 BROM_DLL[3728][4116]: ERROR: FlashTool_Disconnect_BROM(): invalid arguments! *p_ft_handleis NULL (FlashToolLib/sv5/common/generic/src/flashtool_api.cpp:2370)
06/28/18 00:09:31.761 BROM_DLL[3728][4116]: ERROR: FlashTool_Disconnect_BROM(): <ERR_CHECKPOINT>[109][error][1002]</ERR_CHECKPOINT> [S_INVALID_ARGUMENTS] (FlashToolLib/sv5/common/generic/src/flashtool_api.cpp:2371)
06/28/18 00:09:31.761 BROM_DLL[3728][4956]: RB_ClearAll(): RB_HANDLE->rwlock: WRITE_LOCK ... (FlashToolLib/host/windows/rwlock.cpp:460)
06/28/18 00:09:31.761 BROM_DLL[3728][4956]: RB_ClearAll(): RB_HANDLE->rwlock: WRITE_UNLOCK. (FlashToolLib/host/windows/rwlock.cpp:476)

So finally I decided to try with the version MT6737M that MTK Droid Root & Tools suggested was my chip. I did get a different error with that, not surprising it didn't work.

06/28/18 00:38:47.882 BROM_DLL[7403][7559]: ERROR: FlashTool_Connect_Download_InitDA(): FlashTool_Connect_Download_InitDA() fail, error S_BROM_DOWNLOAD_DA_FAIL(2004) (flashtool_api.cpp:1622)
06/28/18 00:38:47.882 BROM_DLL[7403][7559]: ERROR: FlashTool_Connect_Download_InitDA(): <ERR_CHECKPOINT>[150][error][2004]</ERR_CHECKPOINT> [S_BROM_DOWNLOAD_DA_FAIL] (flashtool_api.cpp:1624)
06/28/18 00:38:47.882 BROM_DLL[7403][7559]: ERROR: FlashTool_Connect_Download_DA(): S_BROM_DOWNLOAD_DA_FAIL(2004),ft_handle(0x44012630): FlashTool_Connect_Download_InitDA(): fail! (flashtool_api.cpp:1476)
06/28/18 00:38:47.882 BROM_DLL[7403][7559]: ERROR: FlashTool_Connect_Download_DA(): <ERR_CHECKPOINT>[149][error][2004]</ERR_CHECKPOINT> [S_BROM_DOWNLOAD_DA_FAIL] (flashtool_api.cpp:1478)
06/28/18 00:38:47.883 BROM_DLL[7403][7559]: FlashTool_Disconnect(0x44012630): mutex: LOCK ... (mutex.cpp:151)
06/28/18 00:38:47.883 BROM_DLL[7403][7559]: DEBUG: CMD_Finish(): Send DA_FINISH_CMD(0xD9), device_status(DISCONNECT_USB_AND_RELEASE_POWERKEY). (da_cmd.cpp:1050)
06/28/18 00:38:57.882 BROM_DLL[7403][7559]: ERROR: ReadData(): Retry(200): ReadComm(0/1): exceed timeout 10000 ms, retry 200 times fail!, total=(140561394696192/1). (da_cmd.cpp:272)
06/28/18 00:38:57.882 BROM_DLL[7403][7559]: ERROR: CMD_Finish(): Error return(2). (da_cmd.cpp:1084)
06/28/18 00:38:57.892 BROM_DLL[7403][7559]: DEBUG: CMD_Finish(): OK! (da_cmd.cpp:1090)
06/28/18 00:38:57.892 BROM_DLL[7403][7559]: ERROR: FlashTool_Disconnect(): (0x44012630): da_cmd.CMD_Finish(): fail! (flashtool_api.cpp:2338)
06/28/18 00:38:57.892 BROM_DLL[7403][7559]: FlashTool_Disconnect(0x44012630): mutex: UNLOCK. (mutex.cpp:166)
06/28/18 00:38:57.892 BROM_DLL[7403][7559]: com_base::close(/dev/ttyACM3): tty(15) OK! (com_base.cpp:455)
06/28/18 00:38:57.892 BROM_DLL[7403][7559]: com_sentry::Close(0x7fd744006260): OK!! (com_sentry.cpp:409)
06/28/18 00:38:57.892 BROM_DLL[7403][7559]: DEBUG: FlashTool_Disconnect(): successfully done. (flashtool_api.cpp:2350)

Same results on Linux using SPFlash there.

Any tips or insight you can provide would be welcome.